Free domain + SSL expiry checker
Enter a domain to see when the domain registration and its SSL certificate expire, who the registrar is and who issued the certificate.
Checking several? Use the bulk checker (up to 10 domains).
How it works
- Domain expiry: we ask the domain's registry over RDAP, the structured successor to WHOIS, and fall back to WHOIS where a registry has no RDAP service.
- SSL expiry: we connect to the site on port 443 (trying www if the bare domain has no certificate) and read the certificate it actually serves.
- You see days left for both, colour-coded, plus the registrar and certificate issuer.
Frequently asked questions
What does this checker look up?
Two separate expiry dates: the domain registration's expiry from the registry (RDAP, with a WHOIS fallback), and the expiry and issuer of the SSL/TLS certificate the site actually serves on port 443. If the bare domain doesn't serve a certificate, we try www.
Why are the domain and SSL dates different?
They're renewed separately. A domain is usually renewed yearly at the registrar; public SSL certificates last at most 200 days since March 2026, and many renew every 60–90 days automatically.
Is it free? Are there limits?
Yes, no signup. Each network gets 20 single checks and 5 bulk checks (up to 10 domains each) per hour.
Do you store the domains I check?
No. Lookups aren't saved to an account. Rate limiting keeps a short-lived per-network counter for one hour.
Reading: what happens when a client's domain expires · 47-day SSL certificates · renewal checklist template