SSL Certificate Expiry Checker

Check the TLS certificates of many hosts in one run. For each host you get days until expiry, issuer, subject alternative names, hostname match, certificate lifetime, TLS version and a clear status: ok, expiring soon, expiring critical, expired or invalid. Schedule it daily to catch expiries before customers do.

What does SSL Certificate Expiry Checker do?

• Handles expired and self-signed certificates and reports why they fail
• Custom ports with host:port
• Configurable warning window
• Wildcard and SAN detection
• Flags legacy TLS 1.0 and 1.1

How to use it

1. Click Try for free and open the Input tab.
2. Fill in the fields below, or keep the defaults for a quick test.
3. Press Start. Results appear in the Output tab within seconds to a few minutes.
4. Download as JSON, CSV or Excel, or call the actor from the API, a schedule, Make, Zapier or an AI agent through the Apify MCP server.

Input

Field	Type	Description
hosts	array	Hostnames (optionally host:port), one per line.
warnDays	integer	Status becomes expiring_soon at or below this.
maxHosts	integer	Cap per run.

Example input

{
  "hosts": [
    "apify.com",
    "expired.badssl.com",
    "github.com"
  ],
  "warnDays": 30,
  "maxHosts": 500
}

Output

Each result is a flat JSON object that you can open in the Output tab, export to CSV or Excel, or read through the API. See the dataset views for the main columns.

How much does it cost to use SSL Certificate Expiry Checker?

Pricing is pay per event: $0.001 per host. You pay only for results saved to the dataset, plus nothing extra for platform usage on the free plan limits. Apify's free monthly credit lets you test it before paying.

FAQ

Does it check revocation? No. It validates the chain and dates only.

Can I monitor mail or API ports? Yes, pass host:port for any TLS port that speaks TLS from the first byte. STARTTLS ports are not supported.

How do I get alerts? Schedule it and connect a webhook to Slack or email when status is not ok.

Is it legal?

The actor reads public, open-licence or government data only and does not collect private information. You are responsible for using the results in line with the source's terms and applicable laws.

Use it with AI agents (MCP)

This actor is agent-ready: it is a plain tool with a documented JSON input and a flat JSON output, so Claude, ChatGPT, Cursor and other agents can call it through the Apify MCP server.

Add it to an MCP client with this URL (Apify account or agentic payment required):

https://mcp.apify.com/?tools=flyingnimbus/ssl-certificate-checker

Example prompt: "Use the SSL Certificate Expiry Checker tool with the example input below and summarise the results."

Calls are pay per event ($0.001 per host), so an agent can estimate the cost before it runs. Empty or failed lookups return a status record instead of failing the run.

More actors by flyingnimbus

• Property Details by Address API
• Schools Near Address Finder API
• School Rating Converter & Equivalence API
• Building Permits Multi-City API
• Company Registry Lookup (LEI + SEC)
• Restaurant Inspections API - NYC, Chicago, Toronto
• CVE Risk Enricher - NVD, CISA KEV & EPSS
• SEC Insider Trades (Form 4) - Buys & Sells
• SEC 13F Holdings Tracker
• EU Company Registry Search
• Canada Recalls & Safety Alerts Monitor
• Sitemap & Robots.txt Analyzer
• Email Validator - MX, SPF & DMARC
• Website Tech Stack Detector
• PDF Text & Table Extractor
• URL to Markdown + Metadata
• VIN Decoder + Recalls API
• ClinicalTrials.gov Search API
• US Federal Contracts & Grants (USAspending)
• Federal Register Search API
• FDA Recalls & Drug Labels API
• Eurostat Data API
• UK Government Tenders (Contracts Finder)

Feedback

Found a bug or need another field or city? Open an issue on the actor's Issues tab and it will be looked at quickly.