Python and Node.js script checks domain expiry, SSL certificates and DMARC in bulk
A developer explains how expired domains and TLS certificates cause predictable outages, and how a weekly check can flag them early. The article presents a dependency-free Python script that queries RDAP for registration expiry, reads certificate dates from the TLS handshake, and fetches DMARC policy via Google's DNS-over-HTTPS API. It notes pitfalls such as ccTLDs that publish no expiry data, the difference between subdomains and registrable domains, and certificate errors. The piece also introduces a hosted bulk checker, disclosed as built by the author, that can run from cron or CI in Python or Node.js.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in