Check any domain's SSL certificate, registration expiry, registry status, and email-spoofing exposure — instantly, no login required.
Most SSL checkers answer one question: is the certificate valid right now? That misses the two other ways a site goes dark — the domain registration lapsing, and the registry suspending the domain regardless of its expiry date. This check covers all three in one pass.
Each available signal — SSL certificate and domain registration — contributes up to 50 points based on how close it is to expiring, and the total is normalized to 100. 85 and above is low risk, 60–84 is medium risk, and below 60 is high risk. Anything already expired scores zero for that component, which is why a single lapsed certificate drags the whole score down.
A domain can stop resolving without expiring. These are the statuses that do it — the same ones flagged in the result above when the registry reports them.
| Status | What it means |
|---|---|
| serverHold | The registry has suspended the domain. It stops resolving even though the registration has not expired. |
| clientHold | The registrar has suspended the domain — usually unverified contact details or a billing problem. |
| redemptionPeriod | The registration lapsed. It can still be restored, but only for a fee and only for a short window. |
| pendingDelete | The redemption window closed. The domain is queued for deletion and will be released for re-registration. |
| inactive | No nameservers are registered for the domain, so nothing resolves. |
We wrote up a real case of this in why gigafile.nu suddenly vanished — a domain that went offline for eleven hours with a perfectly valid registration.
Four things in a single pass: the SSL certificate (issuer and how many days until it expires), the domain registration expiry date, the registry (EPP) status codes that can take a domain offline independently of its expiry date, and the DMARC/SPF records that decide whether anyone can send email pretending to be your domain.
They are separate clocks with separate renewals. An SSL certificate proves your site is who it claims to be and typically lives months, not years; when it expires, visitors get a full-page browser warning. Domain registration is your right to use the name at all; when it expires, the name stops resolving everywhere — no browser warning, just nothing. Renewing one does not renew the other.
Because registry status codes override the expiry date. A domain under serverHold or clientHold stops resolving immediately even with months left on its registration — a registry or registrar suspension, often triggered by unverified contact details or an abuse report. This is why checking only the expiry date misses a whole class of outage.
Each available signal — SSL certificate and domain registration — scores up to 50 points based on how close it is to expiry, and the total is normalized to 100. A score of 85 or above is low risk, 60 to 84 is medium risk, and below 60 is high risk. Anything already expired scores zero for that component.
No. The check is free and requires no login. An account adds continuous monitoring and expiry alerts — repeated checks of the certificate your server actually serves, not just the one in public certificate transparency logs — free for two sites. Paid plans add staged alerts at 30, 14, 7, and 1 day before expiry, plus DNS and DNSSEC tracking.
No. A check is a snapshot of one moment. Certificates are renewed on a schedule, auto-renewal can fail silently, DNS records change, and registry statuses can be applied at any time. That is the gap continuous monitoring exists to close — the failure is almost never visible on the day you last looked.
One check tells you about today. Certificates renew on their own schedule, and a registry status can be applied any day of the week. Certly re-runs these checks automatically and alerts you before anything lapses — by email on every plan; paid plans add Slack, Discord, and webhook delivery with staged 30/14/7/1-day alerts. Monitoring is free for two sites, and you can explore the dashboard without signing up.