SSL Certificate Expiry Checker: Days Left, Issuer, Trust
Page updated
Price: $0.10 per 1,000 hosts, flat on every Apify plan, no start fee. Free-plan cap: up to 100 hosts per run on the Apify Free plan. Prices checked on 2026-10-19.
The SSL Certificate Expiry Checker opens one TLS connection on port 443 for each host and reports the certificate’s expiry date, days remaining, validity window, issuer, names covered, trust status and whether it covers the hostname.
Schedule it on Apify to get a regular renewal check.
Who it is for
Site owners, IT and DevOps teams and agencies who track certificate renewals for their own and their clients' sites.
- Catch certificates that expire soon, before visitors see an error.
- Run it on a schedule as a simple renewal monitor.
- Check that a renewed certificate is live and trusted.
- List issuers and key types across the hosts you manage.
Inputs
| Field | Type | Required | Description |
|---|---|---|---|
| hosts | array of strings | Yes | Hostnames to check, up to 1,000 per run, e.g. example.com. Port 443 only. |
| warnDays | integer | No | expiresSoon is true when the certificate expires within this many days. Default 30, up to 365. |
Example input
{
"hosts": [
"example.com"
],
"warnDays": 30
}Example output
[
{
"type": "host",
"host": "example.com",
"port": 443,
"ip": "172.66.147.243",
"validFrom": "2026-09-26T22:49:11.000Z",
"validTo": "2026-12-25T22:56:35.000Z",
"daysRemaining": 68,
"expired": false,
"expiresSoon": false,
"subjectCommonName": "example.com",
"subjectAltNames": [
"example.com",
"*.example.com"
],
"issuerCommonName": "Cloudflare TLS Issuing ECC CA 3",
"issuerOrganization": "SSL Corporation",
"serialNumber": "01EEE6AABB521D5E14FC315FD9985690",
"fingerprintSha256": "85:CA:6A:B0:68:E9:BC:CE:88:B6:C4:AA:3C:47:F7:D1:72:28:13:4A:45:7F:87:0D:38:00:E6:22:3A:0D:F0:7A",
"keyType": "EC",
"keyBits": 256,
"tlsProtocol": "TLSv1.3",
"trusted": true,
"trustError": null,
"hostnameMatches": true,
"checkedAt": "2026-10-18T21:03:33.348Z"
}
]Price
$0.10 per 1,000 hosts
Free-plan cap: Up to 100 hosts per run on the Apify Free plan
Billing happens on Apify, not on this website.
Limits
- Up to 100 hosts per run on the Apify Free plan.
- Up to 1,000 hosts per run, at most 5 at a time.
- Port 443 only. IP addresses and private or internal hosts are refused.
What it does not do
- It does not crawl, send HTTP requests or scan other ports. One TLS handshake per host.
- It does not renew or install certificates.
FAQ
What counts as a result?
One host whose certificate was checked.
Do I pay for unreachable hosts?
No. Invalid-input, error, no-results and limit rows are free. Expired or untrusted certificates are normal results.
Can I monitor certificates over time?
Yes. Schedule the Actor on Apify and use warnDays to flag certificates that expire within your chosen number of days.
Is there a start fee?
No. You pay only the flat price per result.