# Monitor SSL certificate expiry for many websites

**Use case:** 

Check SSL validity, issuer, TLS version and days until expiry for a list of domains, plus whether the site is up and enforces HTTPS. Schedule it weekly to catch expiring certificates.

## Input

```json
{
  "domains": [
    "apify.com",
    "wikipedia.org",
    "letsencrypt.org",
    "expired.badssl.com"
  ],
  "maxDomains": 1000,
  "checkDkim": false,
  "checkRobots": false,
  "timeoutSecs": 15,
  "maxConcurrency": 5,
  "dnsResolver": "doh"
}
```

## Output

```json
{
  "domain": {
    "label": "Domain",
    "format": "string"
  },
  "summary.websiteUp": {
    "label": "Site up",
    "format": "boolean"
  },
  "website.finalStatus": {
    "label": "HTTP status",
    "format": "number"
  },
  "website.finalUrl": {
    "label": "Final URL",
    "format": "link"
  },
  "summary.sslValid": {
    "label": "SSL valid",
    "format": "boolean"
  },
  "summary.sslDaysLeft": {
    "label": "SSL days left",
    "format": "number"
  },
  "summary.mailConfigured": {
    "label": "Mail (MX)",
    "format": "boolean"
  },
  "summary.mailProvider": {
    "label": "Mail provider",
    "format": "text"
  },
  "summary.emailAuthGrade": {
    "label": "Email auth grade",
    "format": "text"
  },
  "email.dmarc.policy": {
    "label": "DMARC policy",
    "format": "text"
  },
  "summary.securityHeadersScore": {
    "label": "Security headers %",
    "format": "number"
  },
  "summary.responseTimeMs": {
    "label": "Response ms",
    "format": "number"
  },
  "website.techHints": {
    "label": "Tech hints",
    "format": "array"
  }
}
```

## How it works

### 1. Sign up on Apify or log in

The Website & Email Domain Checker: SSL, DNS, SPF, DMARC, DKIM Actor is ready to run with the inputs already set for "Monitor SSL certificate expiry for many websites". [Sign up or log in](https://console.apify.com/create-task-from-example/NMPu35lVZgGdP8yhX) and you'll land in Apify Console with a copy of this exact task.

### 2. Start the "Monitor SSL certificate expiry for many websites" task

The Website & Email Domain Checker: SSL, DNS, SPF, DMARC, DKIM Actor will start running based on the input automatically. You can also change all the input fields, like domains or urls, max domains, and more, to match your specific use case.

### 3. Receive the "Monitor SSL certificate expiry for many websites" output

Monitor the progress in real time. You will be notified as soon as your dataset is complete and ready for review. Each result includes data such as domain, site up, HTTP status, and more.

### 4. Integrate into your workflow

The final output is delivered in JSON, CSV, or Excel format, ready to be plugged into your workflow. You can also [run the "Monitor SSL certificate expiry for many websites" task via API](https://apify.com/damodaran_dhanuauraman/website-email-domain-checker.md).

## FAQ

### What SSL details does the SSL expiry monitor return?

The SSL certificate expiry monitor task returns whether each domain's certificate is valid, the issuer, TLS version, expiry date and days left, plus HTTP status and whether HTTP redirects to HTTPS.

### What happens with an expired or broken certificate?

The SSL expiry monitor still reports the domain: the certificate is marked invalid with the error, and the HTTP check continues. The example includes expired.badssl.com, a public test site with an expired certificate.

### How much does the domain check cost?

The Website & Email Domain Checker charges $0.008 per valid domain checked. Invalid or non-resolving domains are free, and a run stops at your spend limit.

### How do I run this check on a schedule or via API?

Save the Website & Email Domain Checker task to your account, then add a weekly schedule in Apify Console, or call the run-sync-get-dataset-items API endpoint from n8n, Make, Zapier or Clay.

## About this Actor

This example demonstrates how to use [Website & Email Domain Checker: SSL, DNS, SPF, DMARC, DKIM](https://apify.com/damodaran_dhanuauraman/website-email-domain-checker.md) with a specific input configuration. Visit the [Actor detail page](https://apify.com/damodaran_dhanuauraman/website-email-domain-checker.md) to learn more, explore other use cases, and run it yourself.


## How to integrate an Actor?

This Task's input is already configured above. Use it as-is rather than inventing a new one.

Do not guess an integration path. Every one of them is in the agent quickstart at https://apify.com/agents.md: the Apify MCP server, Agent Skills with the Apify CLI, the JavaScript and Python clients, the REST API, and the account-free path for an agent with no human to sign in. It also carries the rule on stating cost before the first paid run.

For full API examples (JavaScript, Python, CLI, MCP, OpenAPI), see this Task's Actor page: https://apify.com/damodaran_dhanuauraman/website-email-domain-checker.md

Each client library has reference documentation the quickstart does not restate: [JavaScript/TypeScript](https://docs.apify.com/api/client/js/docs.md) (`npm install apify-client`) and [Python](https://docs.apify.com/api/client/python/docs.md) (`pip install apify-client`).