Domain & SSL Expiry Monitor - Bulk Renewal Alerts

Never lose a domain or get a "Your connection is not private" warning because of a missed renewal. Give this Actor a list of domains and it checks both the domain registration and the SSL certificate in one run, then tells you what is expired, expiring soon, untrusted, or available to register.

Domain data comes from official RDAP registries (the modern replacement for WHOIS). The SSL check reads the live HTTPS certificate. No API key, no proxies, no scraping of web pages.

Who it's for

• Agencies, freelancers and IT teams managing client domains and websites
• Schools, businesses and NGOs with several domains to renew
• Domain investors and SEO people tracking expiry and age
• Anyone who wants a weekly "what needs renewing?" report

What you get for every domain

Field	Meaning
overall_risk	Worst of domain and SSL: expired, critical (7 days or less), invalid, expiring_soon, ok, available, unknown
days_to_expiry, expiry_date	Domain registration expiry
creation_date, age_years, registrar	Domain age and current registrar
nameservers, dnssec_signed, attention_flags	DNS setup and registry statuses worth a look (hold, redemption...)
ssl_days_to_expiry, ssl_expiry_date	Certificate expiry
ssl_valid, ssl_error	Whether browsers trust the certificate, and why not
ssl_issuer, ssl_hostname_match, tls_version	Certificate details
available	true only if the registry itself confirms the name is not registered

Quick start

1. Paste your domains (plain names or full URLs, up to 5,000 per run).
2. Set the alert window (default 30 days).
3. Run it, or put it on a Schedule (for example weekly).
4. Turn on only show risky domains and add an Apify email or Slack integration so you are notified only when something needs attention.

Example input

{
  "domains": ["example.com", "https://www.my-school.com.pk/", "my-brand.io"],
  "expiryAlertDays": 45,
  "checkSsl": true,
  "onlyShowRisky": true
}

Pricing

Pay per event:

• $0.003 per domain checked (about $3 per 1,000)
• $0.002 per SSL certificate read (switch off with checkSsl: false)

Invalid inputs, failed lookups and domains with no HTTPS are not charged. With "only show risky domains" enabled, healthy domains are not charged either.

Notes and limits

• RDAP coverage depends on the TLD: most gTLDs and many country TLDs support it. TLDs with no RDAP service (for example .pk) return unsupported_tld: the domain-expiry part is skipped (not charged), but the SSL check still runs.
• You can list subdomains (for example shop.example.com). Each host gets its own SSL check, and the domain registration is looked up once for the registered domain.
• Some registries hide the expiry date. Then expiry_date is empty and risk is unknown.
• The SSL check tries the bare domain first, then www.. Domains with no website (email-only) show no_https.
• Only public registry and certificate data is used. No personal contact data is collected.
• Keep parallel lookups at 5 or lower for big lists to stay friendly to registries.

Support

Found a TLD or site that doesn't work? Open an issue from the Actor page and include the domain; fixes are usually quick.