SSL Certificate Checker - Bulk Expiry, Chain & TLS

✅ Tested daily with its default input (Apify's automated QA plus our own smoke test before every release).

SSL certificate checker for many domains at once: paste a list of domains or URLs and get a clear report on every SSL/TLS certificate: who issued it, which names it covers, when it expires and whether browsers will trust it. $0.00045 per host. Built for agencies, sysadmins and anyone who looks after more than a handful of sites.

What it checks

• Expiry: validFrom, validTo, daysLeft, expired, notYetValid
• Identity: subject, common name, all SANs (Subject Alternative Names)
• Issuer: issuing CA name and organization (Let's Encrypt, DigiCert, Sectigo ...)
• Trust: chainValid (verified against the standard CA bundle), hostnameMatch, selfSigned, verification error text
• Connection: negotiated TLS version and cipher
• Key: type (RSA/EC), size, signature hash, serial number
• Alert flag: alert: true with reasons when the certificate expires within your threshold, is expired, has a broken chain or does not match the hostname

Input

Field	Default	Description
targets	–	Hostnames or URLs (example.com, https://shop.example.org:8443/page)
alertDays	30	Flag certificates expiring within this many days
alertOnly	false	Only output hosts that need attention
timeoutSecs	15	Per-host connection timeout

Output (one item per host)

{
  "host": "example.com", "port": 443, "tlsVersion": "TLSv1.3",
  "issuerCN": "Cloudflare TLS Issuing ECC CA 3", "subjectCN": "example.com", "sanCount": 2,
  "validFrom": "2026-09-26T22:49:11+00:00", "validTo": "2026-12-25T22:56:35+00:00",
  "daysLeft": 64, "expired": false, "chainValid": true, "hostnameMatch": true,
  "alert": false, "alertReasons": []
}

The key-value store record OUTPUT holds a summary (checked, alerts, errors) that is easy to feed into a webhook, Slack or email integration.

Scheduling

Add the Actor to an Apify Schedule (for example daily) with alertOnly: true and connect a notification integration: you only hear about certificates that need renewing.

Pricing (pay per event)

• $0.00045 per host whose certificate was read. Hosts that cannot be reached are reported but not charged.

Notes

Only the hosts you supply are contacted, with a single TLS handshake each. No pages are downloaded and no personal data is collected.

Use with AI agents (MCP)

This Actor can be used as a tool by AI agents (Claude, Cursor, VS Code, other MCP clients) through the official Apify MCP server:

• Add only this Actor as a tool: https://mcp.apify.com?tools=admirala/ssl-certificate-expiry-checker (sign in with OAuth or an Apify API token).
• Or connect https://mcp.apify.com and let the agent find it with search-actors (e.g. "ssl certificate checker"), read the input schema with fetch-actor-details and run it with call-actor.

Example input an agent can pass:

{
  "targets": [
    "example.com",
    "https://www.wikipedia.org"
  ],
  "alertDays": 30
}

Cost per call: $0.00045 per host whose certificate was read; unreachable hosts are free. Results come back as dataset items (get-dataset-items).

FAQ

How do I check when an SSL certificate expires? Add the domain to targets. Each result has validTo and daysLeft, plus alert: true when it expires within alertDays.

Can I monitor SSL expiry for many domains automatically? Yes: schedule the Actor daily with alertOnly: true and connect an email, Slack or webhook integration.

Does it check the certificate chain? Yes, chainValid is verified against the standard CA bundle, plus hostnameMatch and selfSigned.

Related actors

• Website Uptime Monitor - Status, Response Time & SSL
• Domain Expiry Checker - Bulk WHOIS/RDAP Expiration Dates (coming soon to Apify Store)
• WHOIS Lookup Bulk - Domain RDAP, DNS Records & SSL
• SPF, DKIM & DMARC Checker - Bulk Email Deliverability Audit (coming soon to Apify Store)
• Security Headers Checker - Bulk HSTS, CSP Audit (A+ to F) (coming soon to Apify Store)
• Tech Stack Detector - BuiltWith & Wappalyzer Alternative
• Broken Link Checker - Find 404s & Redirects (Crawl or List) (coming soon to Apify Store)