Free bulk SSL & domain checker

Stop finding out about expired certificates from your clients.

Paste every site you manage and see in seconds which SSL certificates and domains are about to expire, misconfigured, or quietly failing to auto-renew.

Up to 50 domains, no signup.

Why now

Certificates are getting shorter, fast

Browsers and certificate authorities voted to cut the maximum SSL lifetime from 398 to 47 days. Every client site will need renewing eight times a year, and every renewal is a chance to break.

  1. 398days
    Until March 2026

    One renewal a year, easy to do by hand

  2. 200days
    March 2026 · in effect

    Two renewals a year

  3. 100days
    March 2027

    Four renewals a year

  4. 47days
    March 2029

    Eight renewals a year, manual renewal stops being an option

Built for web agencies

One dashboard for every client's renewals

Uptime monitors tell you a site is down. ExpiryPatrol tells you it is about to be, while you can still fix it quietly.

SSL certificates

Hourly checks of expiry, chain and hostname from two locations, so a network blip never pages you.

Failed auto-renewals

Let's Encrypt renews at 30 days left. If a cert is still old at 20, renewal broke. We tell you while there is time.

Domain expiry

Registration dates straight from the registry over RDAP, with registrar names, for every client domain.

Cron heartbeats

Backups and scheduled jobs ping a URL. If one goes quiet, you hear about it before the client does.

Grouped by client

Bulk import from a list or UptimeRobot, then organise everything by client and project.

Branded client reports

A monthly PDF with your logo showing everything you kept safe. Proof of the work behind your retainer.

Pricing

Cheaper than one awkward call with a client

Two months free on yearly plans. The first 20 agencies on the waitlist get 50% off for life.

Free

$0/mo

5 sites

  • SSL and domain alerts
  • Email alerts
  • 1 cron heartbeat

Freelancer

$9/mo

25 sites

  • Everything in Free
  • Telegram, Slack, Discord, webhooks
  • 10 cron heartbeats
Most popular

Studio

$24/mo

100 sites

  • Everything in Freelancer
  • Branded monthly client reports
  • 3 team seats

Agency

$59/mo

300 sites

  • Everything in Studio
  • White-label reports and status pages
  • API access

Get early access

ExpiryPatrol is in private build. Join the waitlist to be first in and lock in 50% off for life.

Questions

What does the free checker look at?

For each site it opens a TLS connection on port 443 and reads the certificate: expiry date, issuer, whether it covers the hostname and whether browsers trust the chain. It also asks the domain registry for the registration expiry date.

Why would an auto-renewing certificate expire?

Because automation breaks quietly: a DNS change blocks validation, a server migration drops the cron job, a CDN starts serving an old certificate, an API key expires. As certificates get shorter, there is less time to notice.

Some domains show "Not published". Why?

A few country registries (for example .de or .eu) do not publish expiry dates publicly. For those, ExpiryPatrol lets you enter the renewal date once and reminds you.

Do you store the domains I check?

Free check results are cached for 10 minutes to keep the tool fast, then discarded. We do not build lists from what you paste.