How is domain expiration monitoring different from SSL certificate monitoring?

They watch two unrelated deadlines. An expired SSL certificate triggers a browser security warning, but the domain still resolves and the page can load over HTTP. An expired domain is pulled from DNS, so the site and email disappear entirely with no warning page. A complete setup tracks both, typically alerting 30 days ahead for each.

How far in advance should I be alerted before a domain expires?

A common schedule is 90, 30, and 7 days before the expiry date. The 90-day notice gives time to approve a renewal or budget, 30 days is the last relaxed window, and 7 days is a final push before the auto-renew grace period begins. Multiple staggered alerts protect against a single missed email.

Can I get a domain back after it expires?

Usually, but the window is short and costs climb. During the auto-renew grace period of up to 45 days you pay the normal renewal price. After that, the 30-day redemption grace period requires a restore fee that commonly runs $80 to $200. Once the 5-day pending-delete stage ends, the domain drops and anyone can register it.

Where does the expiry date come from?

It comes from the registry's authoritative record, queried over WHOIS (port 43) or the newer RDAP protocol, which returns structured JSON. The relevant field is the registry expiry date, not the registrar's internal billing date. Monitoring tools poll this field on a schedule, often daily, and compare it against the alert thresholds.

What Is Domain Expiration Monitoring?

Reviewed by Ionut Caval · Updated June 2026

Domain expiration monitoring is the practice of tracking a domain name's registration expiry date through WHOIS or RDAP so the domain is renewed before it lapses. A lapsed domain stops resolving, which takes the entire website and email offline at once, a sudden and total downtime event.

A domain registration is a finite lease, not permanent ownership. Most generic top-level domains can be registered for 1 to 10 years at a time, and the clock keeps running whether or not anyone is watching it. When the expiry date passes and auto-renew is off or the card on file has failed, the registrar pulls the domain from the zone file and DNS resolution stops. Browsers return errors, MX records vanish, and inbound mail bounces, all from a single missed renewal.

The post-expiry lifecycle

Recovery gets harder and more expensive the longer a lapse goes unnoticed. ICANN's Expired Registration Recovery Policy defines a predictable sequence after the expiry date passes:

Auto-renew grace period (1 to 45 days): the domain is usually recoverable at the normal renewal price with no penalty.
Redemption grace period (30 days): the registry holds the domain, but restoring it requires a redemption fee, commonly $80 to $200 on top of the renewal.
Pending delete (5 days): a fixed countdown with no mechanism to renew, restore, or intervene.
Dropped: the domain is released, and anyone, including a competitor or a squatter, can register it.

Because that timeline is unforgiving, a sensible alert schedule fires at 90, 30, and 7 days before expiry. Ninety days gives finance time to approve a multi-year renewal, 30 days is the last comfortable window, and 7 days is a final hard stop before the grace-period clock starts.

Not the same as SSL expiry

Domain expiration is distinct from SSL certificate monitoring. A TLS certificate expiring throws a browser security warning but the site still resolves; a domain expiring removes the name from DNS entirely, so there is nothing left to warn about. Both belong on the same renewal radar. Famous lapses make the cost concrete: Microsoft let passport.com expire in December 1999, briefly crippling Hotmail until an outsider paid the renewal fee. Pulsetic's domain monitoring reads the registry expiry field and alerts well ahead of each deadline.

Frequently asked questions

How is domain expiration monitoring different from SSL certificate monitoring?

They watch two unrelated deadlines. An expired SSL certificate triggers a browser security warning, but the domain still resolves and the page can load over HTTP. An expired domain is pulled from DNS, so the site and email disappear entirely with no warning page. A complete setup tracks both, typically alerting 30 days ahead for each.
How far in advance should I be alerted before a domain expires?

A common schedule is 90, 30, and 7 days before the expiry date. The 90-day notice gives time to approve a renewal or budget, 30 days is the last relaxed window, and 7 days is a final push before the auto-renew grace period begins. Multiple staggered alerts protect against a single missed email.
Can I get a domain back after it expires?

Usually, but the window is short and costs climb. During the auto-renew grace period of up to 45 days you pay the normal renewal price. After that, the 30-day redemption grace period requires a restore fee that commonly runs $80 to $200. Once the 5-day pending-delete stage ends, the domain drops and anyone can register it.
Where does the expiry date come from?

It comes from the registry's authoritative record, queried over WHOIS (port 43) or the newer RDAP protocol, which returns structured JSON. The relevant field is the registry expiry date, not the registrar's internal billing date. Monitoring tools poll this field on a schedule, often daily, and compare it against the alert thresholds.

Put these metrics to work. Monitor your site free.

2-minute setup · Cancel any time
Create Free Account

Your Dashboard

No credit card needed