How far in advance does SSL expiry get flagged?

The SSL Hunter flags certificates expiring in 30 days (warning), 14 days (urgent), and 7 days (critical). For PingSLA monitoring subscribers, automated alerts fire at all three thresholds.

Why did my SSL expire when I have auto-renewal?

Auto-renewal fails silently for several reasons: CAA DNS records blocking the CA, expired payment method, rate limits, or domain validation email going to a deactivated address. SSL Hunter catches these misconfigurations before expiry.

Can I check DNS propagation after a change?

Yes. SSL + DNS Hunter checks your DNS records from multiple resolvers globally, showing whether your recent DNS change has propagated worldwide or is still resolving to old values in certain regions.

Free Tool — No Signup Required

Free SSL Certificate & DNS Hunter

Check SSL certificate expiry, chain integrity, and DNS records from global locations. Never get surprised by an expired certificate or DNS misconfiguration again.

What We Check

1
Enter your domain name — Enter your domain name (without https://).
2
SSL certificate fetch — SSL certificate fetched and analysed: expiry date, issuer, chain.
3
Certificate chain check — Certificate chain validity checked: root, intermediate, leaf.
4
DNS record query — DNS records queried: A, AAAA, CNAME, MX, TXT, NS, SOA.
5
DNS propagation check — DNS propagation checked from multiple resolvers globally.
6
Domain expiry check — Domain expiry date checked via WHOIS lookup.
7
Urgency report — Report shows days until SSL/domain expiry with urgency indicators.

Running one-off checks manually? Run unlimited checks with PingSLA monitoring →

Frequently Asked Questions

How far in advance does SSL expiry get flagged?: The SSL Hunter flags certificates expiring in 30 days (warning), 14 days (urgent), and 7 days (critical). For PingSLA monitoring subscribers, automated alerts fire at all three thresholds.
Why did my SSL expire when I have auto-renewal?: Auto-renewal fails silently for several reasons: CAA DNS records blocking the CA, expired payment method, rate limits, or domain validation email going to a deactivated address. SSL Hunter catches these misconfigurations before expiry.
Can I check DNS propagation after a change?: Yes. SSL + DNS Hunter checks your DNS records from multiple resolvers globally, showing whether your recent DNS change has propagated worldwide or is still resolving to old values in certain regions.

← Try all 10 free tools

Set up continuous monitoring →