🔒 SSL Certificate Checker — Expiry & TLS Audit
Pricing
from $2.00 / 1,000 results
Go to Apify Store
🔒 SSL Certificate Checker — Expiry & TLS Audit
SSL Labs-style certificate inspector: paste domains, get issuer, validity dates, days-to-expiry, SANs, TLS version, cipher and a security grade (A+→F) for every host. No API key, no proxy.
SSL Labs-style certificate inspector: paste any list of domains and get issuer, validity dates, days-to-expiry, SANs, TLS version, cipher, plus a grade (A+ → F) for every host — no API key, no proxy, no external service.
🚀 Quick Start
- Click Try for free (or Run)
- Paste your domains (one per line, optionally
host:port) - Run — get a structured report instantly
No input? The Actor runs a demo batch (google.com, github.com + badssl test certs) so you see the output format immediately.
🔍 What you get per host
| Field | Description |
|---|---|
subject / issuer | Certificate CN + issuer organization |
sanDomains | Subject Alternative Names (all covered domains) |
validFrom / validTo | Exact validity window |
daysLeft | Days until expiry (negative = expired) |
expired / selfSigned / hostnameMatch | Status flags |
tlsVersion / cipher | Negotiated protocol & cipher suite |
grade | A+ to F security grade |
📊 Grade scale
- A = 180+ days left · B = 90–180d · C = 30–90d · D = 7–30d · E = ≤7d
- F = expired, self-signed, or hostname mismatch
💡 Use cases
- DevOps / SRE — scheduled cert-expiry monitoring across your domain portfolio
- Security teams — TLS hygiene audits, misconfiguration detection
- Compliance — evidence for cert lifecycle reviews
- Agencies — batch client-domain health checks
⚙️ Technical notes
- Pure Python
ssl/socket— zero external dependencies, works from any region - Optional
host:portsyntax for non-standard TLS ports (8443, 465, 993…) - Each host is checked with a 10s timeout; failures are reported per-host with the reason (DNS, timeout, refused, TLS error) — one bad host never breaks the batch
