SSL Certificate Checker — Expiry, Issuer & SAN by Domain

SSL Certificate Checker Check the SSL/TLS certificate of any domain — issuer, subject, valid-from/to, days-to-expiry, SANs and protocol — in one bulk call. No API key. Built for developers who need fast, reliable, bulk results without managing servers or proxies.

Features

• One structured JSON record per domain.
• Bulk + concurrent — process up to 100 domains per run.
• No proxy, no browser, no API key — fast and low-cost.
• Graceful failures: unreachable inputs return ok: false with an error; the run never crashes.

Input

{"domains": ["github.com", "apify.com"], "maxItems": 100}

Output

One record per domain:

{
  "domain": "github.com",
  "ok": true,
  "issuer": "DigiCert Inc",
  "subject": "github.com",
  "validFrom": "2026-01-01T00:00:00.000Z",
  "validTo": "2027-01-01T00:00:00.000Z",
  "daysToExpiry": 192,
  "expired": false,
  "sans": ["github.com", "www.github.com"],
  "protocol": "TLSv1.3"
}

Who it's for

• DevOps monitoring certificate expiry
• Security teams auditing TLS
• Uptime/monitoring dashboards
• Compliance & asset inventory

How to use

1. Add your domains to the domains input field.
2. Run the Actor and read one structured record per input from the dataset.
3. Export as JSON, CSV, or Excel, or call the Actor's API from your backend.

FAQ

Do I need an API key? No. You provide domains; the Actor does the rest. Does it return personal data? No — only public infrastructure/metadata, never personal contact data. What formats can I export? JSON, CSV, and Excel via the dataset, or the Actor API.

Pricing

Pay-per-event: a tiny per-run start fee plus a small per-result charge. You pay only for successful results. See the Pricing tab.

Further reading

• Keyword: SSL certificate checker.

Use SSL Certificate Checker with AI agents (MCP)

Give Claude, ChatGPT, Cursor, VS Code or any MCP client this Actor as a tool through the hosted Apify MCP server. The agent sees the input fields with descriptions and example values, runs the Actor, and reads the results.

MCP server URL (this Actor only):

https://mcp.apify.com/?tools=technicaldost/ssl-certificate-checker

Claude Code:

$claude mcp add --transport http apify "https://mcp.apify.com/?tools=technicaldost/ssl-certificate-checker" --header "Authorization: Bearer YOUR_APIFY_TOKEN"

Cursor, VS Code, Claude Desktop and other clients (mcp.json or the client's MCP settings):

{
  "mcpServers": {
    "apify": {
      "url": "https://mcp.apify.com/?tools=technicaldost/ssl-certificate-checker",
      "headers": { "Authorization": "Bearer YOUR_APIFY_TOKEN" }
    }
  }
}

Clients that support sign-in (such as Claude.ai connectors) can use the URL without a token and log in to Apify instead. Get your token in Apify Console → Settings → API & Integrations, or generate a ready config for your client at mcp.apify.com. In the agent the tool is named technicaldost--ssl-certificate-checker; ask it, for example, to "run SSL Certificate Checker with {"domains": ["github.com", "apify.com"]}".

AI agents without an Apify account can also run and pay for this Actor per request with x402 agentic payments.

Run SSL Certificate Checker via API

Run the Actor and get its results in one call (replace YOUR_APIFY_TOKEN):

curl -X POST "https://api.apify.com/v2/acts/technicaldost~ssl-certificate-checker/run-sync-get-dataset-items?token=YOUR_APIFY_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"domains": ["github.com", "apify.com"]}'

Python (pip install apify-client):

from apify_client import ApifyClient

client = ApifyClient("YOUR_APIFY_TOKEN")
run = client.actor("technicaldost/ssl-certificate-checker").call(run_input={"domains": ["github.com", "apify.com"]})
for item in client.dataset(run["defaultDatasetId"]).iterate_items():
    print(item)

JavaScript / TypeScript (npm install apify-client):

import { ApifyClient } from 'apify-client';

const client = new ApifyClient({ token: 'YOUR_APIFY_TOKEN' });
const run = await client.actor('technicaldost/ssl-certificate-checker').call({"domains": ["github.com", "apify.com"]});
const { items } = await client.dataset(run.defaultDatasetId).listItems();
console.log(items);

Long runs: start them with POST /v2/acts/technicaldost~ssl-certificate-checker/runs and fetch the dataset when the run finishes, or receive a webhook.

Integrations

SSL Certificate Checker works with Make, Zapier, n8n, LangChain, Google Sheets, Slack, GitHub and webhooks. Schedule runs in Apify Console and send new results straight to your apps, spreadsheets or AI pipelines.

Related Actors

• SSL Certificate & Security Header Audit — Check TLS certificates and security headers for any list of domains. Returns issuer, expiry with days remainin
• crt.sh Certificate Monitor - New TLS Certs — Watch public hostnames for newly logged certificates on crt.sh. Returns newest cert facts and expiry buckets