Bulk-check SSL expiry, DMARC, SPF, MX across 100 domains in one screen
// published 2026-04-17
If you manage 10+ domains, hand-checking SSL expiry on each one is how you accidentally let one of them lapse. The Bulk Domain Checker takes up to 100 domains at once and gives you a side-by-side audit table in under a minute.
What you get
Paste a list of domains — newline or comma-separated. The tool runs four key checks per domain in parallel and returns one row each:
- SSL — days until expiry, issuing CA, pass/warn/fail status
- DMARC — policy (
none/quarantine/reject) - SPF — record presence +
+allwarning - MX — does the domain accept mail, and from where
- Overall — worst-status roll-up per domain so you can sort broken domains to the top
Signed-in users can check up to 100 domains. Anonymous is capped at 25. Both are free during early access.
Typical use cases
- Agency quarterly review. Paste all client domains, screenshot the table, done. Old versions of this workflow required spreadsheets +
openssl s_clientscripts. - Acquisition due diligence. Got 50 new domains in an M&A? Bulk-check them before you inherit an expired cert on closing day.
- M&A inventory cleanup. Find the orphan domains that nobody's been monitoring — expired SSL, missing DMARC, silent MX. Those are the next incident.
- Hosting migrations. Confirm every domain in scope is still serving the old cert (or the new one) the day of cutover.
From one-shot to daily monitoring
Bulk check is great for point-in-time audits. For continuous coverage, save domains to DomBrains — we run 8 tools per saved domain every morning at 6am UTC and alert on SSL threshold crossings (60 / 30 / 14 / 7 / 1 days, per-domain configurable). One breakage = one email, not a quarterly discovery.
Paste your domains now: /tools/bulk-checker.
Want it scriptable?
If you need the same data programmatically (for a dashboard, a CI check, or a weekly Slack post), the REST API exposes every tool at /api/v1/check/ssl/yourdomain.com. One bearer token, 60 req/min, 10-minute cache. A shell loop over your domain list gets you a structured JSON report per domain in seconds.