Domain Expiry, DNS & SSL Certificate Checker (Bulk)

Domain Expiry, DNS & SSL Certificate Checker checks a list of domains and returns, for each one, the domain registration expiry date and days left, registrar, creation date, status and nameservers (via RDAP, the modern replacement for WHOIS), the DNS records (A, AAAA, MX, NS, TXT plus parsed SPF and DMARC), and the SSL/TLS certificate issuer, validity dates, days until the certificate expires, and whether it is valid.

One row per domain, ready for a spreadsheet or an alert. No contact or personal WHOIS data is collected.

What can you use it for?

Bulk domain expiry checker

Track when your or your clients' domains expire (daysToDomainExpiry) and never lose one to a missed renewal.

SSL certificate expiry checker

Monitor sslDaysLeft across all your sites and catch expired, self-signed or mismatched certificates (sslValid, sslError).

Bulk DNS lookup

Export A, AAAA, MX, NS and TXT records for hundreds of domains in one run.

SPF and DMARC checker

See which domains are missing SPF or DMARC records — useful for email deliverability audits and lead qualification.

Domain portfolio and WHOIS-style registrar lookup

Get the registrar, created date, status flags and DNSSEC for every domain you manage.

How to use it

1. Click Try for free (or Start).
2. Enter your input (see the example below) and click Save & Start.
3. Download results as JSON, CSV, Excel or HTML, or read them via the API.

Input

• domains — Domains to check, one per line. Full URLs are reduced to their hostname; www. is removed.
• checkWhois — Registration data via RDAP (default on).
• checkDns — A, AAAA, MX, NS, TXT, SPF, DMARC (default on).
• checkSsl — Read the certificate on port 443 (default on).
• concurrency — Parallel checks (default 10).

Example input:

{
  "domains": [
    "apify.com",
    "example.com"
  ],
  "checkWhois": true,
  "checkDns": true,
  "checkSsl": true
}

Output example

domain	registrar	expires	daysToDomainExpiry	sslIssuer	sslDaysLeft	dmarc
apify.com	Amazon Registrar, Inc.	2035-06-02	3153	Amazon	94	v=DMARC1; p=reject; …
example.com	RESERVED-Internet Assigned Numbers Authority	2027-08-13	302	SSL Corporation	72	v=DMARC1;p=reject;…

All output fields: domain, registeredDomain, registrar, created, updated, expires, daysToDomainExpiry, domainStatus, nameservers, dnssec, a, aaaa, mx, ns, txt, spf, dmarc, sslIssuer, sslSubject, sslValidFrom, sslValidTo, sslDaysLeft, sslValid, sslError, sslAltNames, error

How much does it cost?

This Actor uses pay-per-event pricing. You pay only for results, not for servers or subscriptions:

• $0.002 per domain checked, which is $2.00 per 1,000 domains
• plus Apify's standard Actor start event of $0.00005 per run (per GB of memory; the default 512 MB memory = one event)

You process	You pay (approx.)
100 domains	$0.20
1,000 domains	$2.00
10,000 domains	$20.00

Apify's free plan includes monthly platform credit, which is enough to try this Actor at no cost.

Run it via API, schedule or AI agents

Run from your own code with the Apify API, JavaScript or Python client, schedule it in Apify Console, connect it to Make, Zapier, n8n or Google Sheets, or let an AI agent call it through the Apify MCP server (https://mcp.apify.com).

curl -X POST "https://api.apify.com/v2/acts/quillbit-tools~domain-expiry-dns-ssl-checker/run-sync-get-dataset-items?token=YOUR_APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"domains": ["apify.com", "example.com"], "checkWhois": true, "checkDns": true, "checkSsl": true}'

FAQ

Is this a WHOIS lookup? It uses RDAP, the official successor to WHOIS run by registries, via rdap.org. It returns registrar, dates, status and nameservers. Some country-code TLDs don't publish RDAP; those rows show rdapError while DNS and SSL still work.

Does it collect owner names, emails or phone numbers? No. Contact data is never collected.

How is SSL checked? It opens a TLS connection to port 443 with SNI, reads the certificate, and reports issuer, subject, dates, days left, SANs and whether the chain validates (sslValid). Expired certificates show negative sslDaysLeft.

Can I get an alert before something expires? Save a task with your domains, schedule it weekly, and filter the dataset on sslDaysLeft < 14 or daysToDomainExpiry < 30 in your integration (Slack, email, Google Sheets, Zapier, Make).

What am I charged for? One domain-checked event per unique domain, including domains that return errors.

Related tools by Quillbit Tools

• Bulk URL Status & Redirect Chain Checker
• Broken Link Checker – crawl a site for 404s
• Sitemap URL Extractor
• Website Tech Stack Detector
• Webpage to Markdown for LLMs & RAG
• RSS & Atom Feed to JSON Reader

Questions or a feature request? Open an issue on the Actor's Issues tab.