Bulk SSL Certificate Checker: expiry, issuer, TLS avatar

Bulk SSL Certificate Checker: expiry, issuer, TLS

Pricing

$2.00 / 1,000 certificate checks

Go to Apify Store
Bulk SSL Certificate Checker: expiry, issuer, TLS

Bulk SSL Certificate Checker: expiry, issuer, TLS

Check SSL/TLS certificates of thousands of hosts in one run: expiry date and days left, issuer, hostname match, trust errors, SAN list, TLS protocol and cipher, chain, with a plain list of issues. Any port (465, 993, 8443).

Pricing

$2.00 / 1,000 certificate checks

Rating

0.0

(0)

Developer

NetAudit Labs

NetAudit Labs

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

9 days ago

Last modified

Security

Limited permissions

Share

What does Bulk SSL Certificate Checker do?

It connects to each host you give it (port 443 by default, or any port such as mail.example.com:465) and reads the SSL/TLS certificate the server actually presents. One clean row per host:

  • Expiry: validTo, daysUntilExpiry, and an "Expires in N days" issue under your threshold
  • Trust: is the chain trusted by Node.js root store, and the exact error if not (CERT_HAS_EXPIRED, UNABLE_TO_VERIFY_LEAF_SIGNATURE, self-signed...)
  • Hostname match against the certificate subject and SAN list
  • Issuer, subject CN, SAN list, key size, serial, SHA-256 fingerprint, chain
  • TLS protocol and cipher negotiated, with a flag on TLS 1.0 / 1.1
  • Unreachable hosts are returned too, with the connection error

Why use it?

  • Monitor certificate expiry for all your clients' domains or a whole portfolio, on a schedule
  • Find expired, mismatched or self-signed certificates in a lead list or an asset inventory
  • Turn on Only return hosts with issues to get (and pay for) problems only

How much does it cost?

Pay per event: you are charged once per certificate returned in the dataset. With "Only return hosts with issues" enabled, healthy hosts are skipped and not charged. Use Max hosts as a hard spending cap.

Input example

{ "hosts": ["apify.com", "expired.badssl.com", "smtp.gmail.com:465"], "warnDays": 30, "onlyProblems": false }

Output example

{ "host": "expired.badssl.com", "port": 443, "reachable": true, "valid": false, "trustError": "CERT_HAS_EXPIRED", "hostnameMatch": true, "issuer": "COMODO CA Limited", "daysUntilExpiry": -3800, "tlsProtocol": "TLSv1.2", "issues": ["Not trusted: CERT_HAS_EXPIRED", "Certificate expired"] }

Notes

The check reads the certificate only (a TLS handshake), it does not crawl pages. Results reflect what the server presented at checkedAt. Issues and feature requests in the Issues tab are answered quickly.