KeyChest closed in February 2026. Your certificates still need watching.
Verified 19 Aug 2026
KeyChest was a well-liked, dead-simple certificate-expiry tracker: it discovered the certificates across your subdomains, sent a weekly report, and warned you before anything expired. As of 14 February 2026 it has ceased operations — the app returns errors and its own site confirms the shutdown. If you relied on it, your certificates are quietly unwatched again.
CertPost is a straightforward place to move. Paste your domains, or a whole list, and it auto-discovers the certificate on each host, then reads it from a real TLS connection on a schedule: expiry, the full chain including intermediates, hostname and SAN match, and unexpected changes — on any TLS port, over IPv4 and IPv6.
It keeps what KeyChest did well — find the certificates, warn before expiry — and adds the failures a live handshake sees that a stored copy misses: an intermediate that lapsed above your certificate, a renewal that succeeded on disk but never reloaded on the wire, a name that stopped matching. Around the certificate it also watches domain-registration expiry, Certificate Transparency issuance alerts, and DNS drift.
Three certificates are free forever, checked daily, every alert channel included, no card. Paid is a flat $29/month for unlimited certificates.
Moving over from KeyChest:
1. Sign up for CertPost free — no card.
2. Paste every domain you tracked in KeyChest; CertPost discovers the certificate on each host, including the mail and admin ports KeyChest did not watch.
3. Point the alerts at your inbox or a team channel.
You are back to a warning before expiry, plus the chain, ports, and domain checks around it.
Import your domain list in 2 minutes — 3 certificates free, no card.
Start free