SSL Certificate Checker - Domain TLS Expiry & KYB API

SSL Certificate Checker - Bulk Expiry Monitor

Check SSL/TLS certificates for any domain in bulk. Identify expired, expiring, or misconfigured certificates across your entire domain portfolio.

What it does

For each domain, this actor connects via TLS and extracts complete certificate details including issuer, expiration, certificate chain, SANs, and negotiated protocol. Use it for:

• Certificate expiry monitoring — find certificates expiring in the next 30/60/90 days
• Security audits — verify certificate chains, signature algorithms, and TLS versions
• Compliance checks — ensure all domains use current TLS standards
• Domain portfolio management — bulk-check hundreds of domains at once
• Vendor risk assessment — verify SSL health of third-party services

Input

Field	Type	Description
domains	Array of strings	Domains to check (e.g., google.com, github.com)
maxResults	Integer	Maximum domains to check (default: 100, max: 10,000)

Output

{
  "domain": "google.com",
  "isValid": true,
  "issuer": "Google Trust Services",
  "subject": "*.google.com",
  "notBefore": "2026-03-01T00:00:00Z",
  "notAfter": "2026-05-24T00:00:00Z",
  "daysUntilExpiry": 48,
  "isExpired": false,
  "isExpiringSoon": false,
  "serialNumber": "1A2B3C...",
  "signatureAlgorithm": "SHA256-RSA",
  "subjectAlternativeNames": ["*.google.com", "google.com"],
  "certificateChain": ["*.google.com", "GTS CA 1C3", "GTS Root R1"],
  "tlsVersion": "TLS 1.3",
  "cipherSuite": "TLS_AES_128_GCM_SHA256"
}

Pricing

$0.10 per 1,000 domains checked.

How to use

1. Open SSL Certificate Checker - Domain TLS Expiry & KYB API in Apify Console and click Start (or Try for free).
2. Fill in the input form - start with Domains, Max Results. Every field is optional unless marked required, and the form is prefilled with a working example.
3. Set Maximum results to cap your cost, then run the Actor.
4. Download the results as JSON, CSV, Excel, XML or HTML, or pull them with the Apify API.

Example input

{
  "domains": [
    "google.com",
    "github.com",
    "openai.com"
  ],
  "maxResults": 100
}

Output example

One record from a real run (long values shortened, contact details partly masked):

{
  "domain": "google.com",
  "isValid": true,
  "issuer": "Google Trust Services",
  "subject": "*.google.com",
  "notBefore": "2026-10-07T19:07:42Z",
  "notAfter": "2026-12-30T19:07:41Z",
  "daysUntilExpiry": 49,
  "isExpired": false,
  "isExpiringSoon": false,
  "serialNumber": "E2A69220A07404F5128353C50FEF420D",
  "signatureAlgorithm": "ECDSA-SHA256",
  "subjectAlternativeNames": [
    "*.google.com",
    "*.appengine.google.com",
    "*.bdn.dev"
  ],
  "certificateChain": [
    {
      "subject": "*.google.com",
      "issuer": "Google Trust Services"
    },
    {
      "subject": "WE2",
      "issuer": "Google Trust Services LLC"
    },
    {
      "subject": "GTS Root R4",
      "issuer": "GlobalSign nv-sa"
    }
  ],
  "tlsVersion": "TLS 1.3",
  "cipherSuite": "TLS_AES_128_GCM_SHA256"
}

FAQ

How much does SSL Certificate Checker - Domain TLS Expiry & KYB API cost?

$0.0001 per ssl check plus $0.0001 per run. For example, 1,000 results cost about $0.10. Higher Apify plans get a Store discount.

Do I need an API key or login?

No. Just configure the input and run it.

Can I run it on a schedule or from code?

Yes. Use Apify Schedules for recurring runs, or call it from the Apify API, the JavaScript or Python client, Make, Zapier, n8n, or any MCP-compatible AI agent.

Why did my run return no results?

Your filters are probably too narrow. Remove a filter or broaden the search, then run again. You only pay the result price for records that are actually saved.

Is the data accurate and up to date?

Each run fetches live data from the source described above, so results are as current as that source. Verify critical records with the original source before acting on them.

Use with the API

curl -X POST "https://api.apify.com/v2/acts/pink_comic~ssl-certificate-checker/run-sync-get-dataset-items?token=YOUR_APIFY_TOKEN" \
  -H 'Content-Type: application/json' \
  -d '{"domains": ["google.com", "github.com", "openai.com"], "maxResults": 100}'