Guide
How to Monitor Domain Expiration: WHOIS, RDAP & Renewal Alerts
An expired domain is worse than an expired certificate: the certificate kills trust, but the domain kills everything — website, email, subdomains — and if someone else grabs it, recovery may be impossible at any price. Monitoring it is cheap. Here is how.
How to check any domain's expiry date
Three options, fastest first. Your registrar panel is authoritative for your own domains; WHOIS/RDAP work for any domain:
WHOIS lookup
bashwhois example.com | grep -i -E "expir|registrar:|status:"
# Registry Expiry Date: 2027-08-13T04:00:00Z
# Registrar: Example Registrar, Inc.
# Domain Status: clientTransferProhibitedRDAP lookup (structured JSON, the modern replacement)
bashcurl -s https://rdap.org/domain/example.com | python3 -c "import json,sys; d=json.load(sys.stdin); print([e for e in d.get('events',[]) if e.get('eventAction')=='expiration'])"Caveats: GDPR redaction and thin registries (like .com/.net historically) mean WHOIS output varies by TLD; some ccTLDs rate-limit or block bulk queries entirely. A monitor that normalizes RDAP first and falls back to WHOIS handles this for you.
What actually happens after expiry
- Grace period (~0–45 days): services stop, but you can still renew at the normal price. Length and even existence vary by registrar and TLD — never rely on it.
- Redemption period (~30 days): restore is possible but carries a steep restore fee (often $100+). Status shows as redemptionPeriod.
- Pending delete (~5 days) → release: first-come, first-served. Drop-catch services and squatters watch valuable names.
Why domains really lapse (it's never the date)
Almost no domain is lost because someone didn't know dates exist. The real causes: renewal notices going to a departed employee's inbox, an expired card on file with auto-renew silently failing, a reseller account nobody can log into, or a portfolio inherited in an acquisition. Good monitoring fixes the process failure, not just the date: alerts must reach a shared channel (Slack, PagerDuty, team email) — never one person's inbox.
Automate it in minutes
Weekly registration checks with reminders at 60, 30, 14, 7, and 1 days cover every realistic recovery path, including slow procurement and inter-registrar transfers (which can take a week and are blocked close to expiry). If the stakes are unclear, read what happens when a domain expires. Pair it with certificate expiry monitoring — the two failures look identical to users but need different fixes.
Add your domains free — Certack tracks expiry, registrar, and WHOIS changes from one dashboard.
Never miss an expiry again
Certack monitors SSL certificates, DNS records, and domain expiry continuously and alerts you on 9 channels before anything lapses. Two sites free, no credit card required.
Related guides
How to Check SSL Certificate Expiration: Browser, OpenSSL, curl & Online
Four reliable ways to check when an SSL certificate expires — in your browser, with OpenSSL, with curl, or with a free online checker — plus what the expiry date actually means.
How Long Do SSL Certificates Last? Validity in 2026 and the Road to 47 Days
Public TLS certificates last 200 days max since March 2026, dropping to 100 days in 2027 and 47 days in 2029. What the CA/Browser Forum timeline means for renewal automation.
What Happens When an SSL Certificate Expires?
Browser warnings, failed API calls, dropped search rankings, and broken integrations — exactly what breaks when a certificate lapses, and how to recover fast.