SSL Certificate Monitor — Bulk Expiry & Chain Checker avatar

SSL Certificate Monitor — Bulk Expiry & Chain Checker

Pricing

Pay per usage

Go to Apify Store
SSL Certificate Monitor — Bulk Expiry & Chain Checker

SSL Certificate Monitor — Bulk Expiry & Chain Checker

Monitor SSL/TLS certificates in bulk. Expiry dates, issuer, protocol version, key size, certificate chain, SAN list. Webhook alerts for expiring certs. 5 domains free.

Pricing

Pay per usage

Rating

0.0

(0)

Developer

Manchitt Sanan

Manchitt Sanan

Maintained by Community

Actor stats

0

Bookmarked

1

Total users

0

Monthly active users

14 hours ago

Last modified

Share

Monitor SSL/TLS certificates in bulk. Check expiry dates, issuer, protocol version, key size, signature algorithm, certificate chain, and Subject Alternative Names. Webhook alerts for expiring certificates..


Why this exists

Expired SSL certificates cause browser warnings, lost traffic, and SEO penalties. Existing Apify SSL checkers charge $0.009/check or have 90% success rates. This actor checks more fields, costs less, and sends webhook alerts when certificates are about to expire.


Quick start

{
"domains": ["google.com", "github.com", "example.com"],
"checkChain": true
}

What it checks per domain

FieldDescription
validCertificate is trusted (authorized by CA)
issuerCertificate Authority that issued it
subjectDomain the cert was issued for
validFrom / validToCertificate validity period
daysUntilExpiryDays until expiration
expiryStatusok (>30d), warning (7-30d), critical (<7d), expired
protocolTLS version (TLSv1.2, TLSv1.3)
keySizeRSA/EC key size in bits
signatureAlgorithmSigning algorithm (sha256WithRSAEncryption, etc)
altNamesSubject Alternative Names (all domains covered by cert)
chainFull certificate chain: leaf → intermediate → root CA
fingerprintSHA-256 certificate fingerprint
serialNumberCertificate serial number

Input

FieldTypeDefaultDescription
domainsarray(required)Domains to check (no https://)
checkChainbooleantrueInclude full certificate chain
timeoutinteger10000TLS connection timeout in ms
webhookUrlstring(optional)POST alert when certs expire within 7 days
dryRunbooleanfalseCheck certs without charges

Pricing

$0.003 per domain checked (pay-per-event pricing).

  • Errors and dry runs are never charged.
  • 100 domains = $0.30

Webhook alerts

If webhookUrl is set, the actor POSTs a JSON alert when any certificate is expiring within 7 days or already expired:

{
"alertType": "ssl-expiry",
"domains": [
{
"domain": "example.com",
"daysUntilExpiry": 3,
"expiryStatus": "critical",
"validTo": "2026-04-17T00:00:00Z"
}
]
}

Use with Apify scheduled runs (daily/weekly) + webhook to Slack, PagerDuty, or email for automated certificate monitoring.


Limitations

  • Port 443 only. Does not check certificates on non-standard ports.
  • Self-signed certificates are reported as valid: false but all other fields are still populated.
  • Rate: Sequential checking (one domain at a time) to avoid connection floods. ~1-2 seconds per domain.


Run on Apify

Run on Apify

No setup needed. Click above to run in the cloud. $0.003 per operation.