Certificate Renewal Deployment Gap Gate
Pricing
from $10.00 / 1,000 run starteds
Find the renewal that did not reach every server. For each hostname the Actor resolves every A and AAAA address, opens a TLS handshake to each address with the hostname as SNI, and compares the certificate that each address serves with the newest certific
1 to 300 hostnames. Write one fully qualified name for each line, for example www.example.com. Add a port with a colon, for example api.example.com:8443; the default port is 443. An IP address is refused, because the check needs a name for the SNI extension and for the Certificate Transparency search.
[ "apify.com", "iana.org"]The Actor resolves the A and AAAA records of the name over DNS-over-HTTPS and opens one TLS handshake to each address, with the hostname as SNI. Raise this for a name behind a large pool of servers.
A certificate is due for renewal when less than this fraction of its lifetime is left. The default of 0.33 is the point at which ACME clients renew. A hostname that is past this point and has no newer certificate in the Certificate Transparency logs gets the renewal-overdue verdict.
Optional public HTTPS URL. The Actor sends one JSON POST when a run finds a gap. Loopback, private and reserved addresses are refused. Leave it empty to read the result in the dataset only.
Timeout for one DNS query, one TLS handshake, one Certificate Transparency query and the webhook POST.
The largest number of hostnames that the run checks in parallel. Keep this low: the Certificate Transparency sources refuse a burst of parallel queries.