Tool / Renewal readiness

47-Day Renewal Pre-Flight

Paste up to 25 client domains and check whether their public renewal path looks ready for shorter SSL certificate lifetimes.

The check observes SSL expiry, DNS basics, CAA, port 80 reachability, and HTTP-to-HTTPS redirect behavior. It does not issue, install, renew, or rotate certificates.

Free
No login
Input
Up to 25 domains
Output
Readiness per domain

Input / Domain portfolio

Run the renewal pre-flight

Add one URL or domain per line. Paths are removed and duplicates are checked once.

Capacity
25 domains
Mode
Live public check
0/25 entered

Paste URLs or bare domains — protocol and paths are stripped automatically.

One-time readiness snapshot · public infrastructure signals · no account required

Method / Scope

What the snapshot covers

The free check reads current public signals. Ongoing CertPilot monitoring adds evidence history and customer-maintained governance context.

What this checks

  • SSL expiry and days until renewal
  • DNS address records (A and AAAA)
  • DNS nameserver records
  • CAA records
  • Port 80 reachability
  • HTTP-to-HTTPS redirect behavior

What paid CertPilot adds

  • Daily automated monitoring — no manual runs
  • Domain registration expiry tracking
  • DNS record change detection
  • Client grouping across your agency
  • Daily digest emails
  • Branded PDF reports for clients
Start free trial
← View all free tools