Bulk SSL Certificate Checker: expiry, issuer, TLS
Pricing
$2.00 / 1,000 certificate checks
Bulk SSL Certificate Checker: expiry, issuer, TLS
Check SSL/TLS certificates of thousands of hosts in one run: expiry date and days left, issuer, hostname match, trust errors, SAN list, TLS protocol and cipher, chain, with a plain list of issues. Any port (465, 993, 8443).
Pricing
$2.00 / 1,000 certificate checks
Rating
0.0
(0)
Developer
NetAudit Labs
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
9 days ago
Last modified
Categories
Security
Limited permissionsShare
What does Bulk SSL Certificate Checker do?
It connects to each host you give it (port 443 by default, or any port such as mail.example.com:465) and reads the SSL/TLS certificate the server actually presents. One clean row per host:
- Expiry:
validTo,daysUntilExpiry, and an "Expires in N days" issue under your threshold - Trust: is the chain trusted by Node.js root store, and the exact error if not (
CERT_HAS_EXPIRED,UNABLE_TO_VERIFY_LEAF_SIGNATURE, self-signed...) - Hostname match against the certificate subject and SAN list
- Issuer, subject CN, SAN list, key size, serial, SHA-256 fingerprint, chain
- TLS protocol and cipher negotiated, with a flag on TLS 1.0 / 1.1
- Unreachable hosts are returned too, with the connection error
Why use it?
- Monitor certificate expiry for all your clients' domains or a whole portfolio, on a schedule
- Find expired, mismatched or self-signed certificates in a lead list or an asset inventory
- Turn on Only return hosts with issues to get (and pay for) problems only
How much does it cost?
Pay per event: you are charged once per certificate returned in the dataset. With "Only return hosts with issues" enabled, healthy hosts are skipped and not charged. Use Max hosts as a hard spending cap.
Input example
{ "hosts": ["apify.com", "expired.badssl.com", "smtp.gmail.com:465"], "warnDays": 30, "onlyProblems": false }
Output example
{ "host": "expired.badssl.com", "port": 443, "reachable": true, "valid": false, "trustError": "CERT_HAS_EXPIRED", "hostnameMatch": true, "issuer": "COMODO CA Limited", "daysUntilExpiry": -3800, "tlsProtocol": "TLSv1.2", "issues": ["Not trusted: CERT_HAS_EXPIRED", "Certificate expired"] }
Notes
The check reads the certificate only (a TLS handshake), it does not crawl pages. Results reflect what the server presented at checkedAt. Issues and feature requests in the Issues tab are answered quickly.