Free renewal readiness checker
47-Day Renewal Pre-Flight
Paste up to 25 client domains and check whether they look ready for shorter SSL renewal cycles.
This free tool checks SSL expiry, DNS basics, CAA records, port 80 reachability, and HTTP-to-HTTPS redirect behavior.
Why this matters
Public SSL certificates are already moving toward shorter lifetimes: 200 days in 2026, 100 days in 2027, and 47 days in 2029. Agencies managing many client domains need renewal paths that are predictable, automated, and easy to review.
How this works
- 1Paste up to 25 client domains — one per line.
- 2We check renewal-readiness signals: SSL expiry, DNS, CAA, port 80, and HTTPS redirect.
- 3Review anything marked Action needed or Review before shorter renewal cycles roll out.
What this checks
- SSL expiry and days until renewal
- DNS address records (A and AAAA)
- DNS nameserver records
- CAA records
- Port 80 reachability
- HTTP-to-HTTPS redirect behavior
What paid CertPilot adds
- Daily automated monitoring — no manual runs
- Domain registration expiry tracking
- DNS record change detection
- Client grouping across your agency
- Daily digest emails
- Branded PDF reports for clients