As we have a database of all the issued public certificates, we started looking at some of the data (Autumn 2018). This is a quick note about the frequency of updates of certificate transparency (CT) logs.
We have finally completed a GLOBAL certificate look-up table for real-time notifications in our re-designed KeyChest service. KeyChest has been using an external service to check for new certificates. This has become unsustainable due to the number of users and certificates we monitor.
The main goal of KeyChest Instant Audit (or spot check) is to give you a quick information about the configuration of a particular server. We tried to make it as simple as possible and it reflects in the amount of information you can see.
If the server in question is well configured, you will see just a "well done" message. If there is a problem that needs to be fixed, you will see everthing relevant to the problem. The downside is that when you start using it, you may wonder why you are shown only so little information.
This page explains what KeyChest Spot Check does so you know what to expect.
What is KeyChest and its spot check good for?
You may ask why you need another tool, when there's SSL Labs auditing tool, which tells you all you need about the security of your website. The answer is simple, KeyChest is much more about keeping your servers available than secure. You can only do a thorough security audit on servers, which have been configured and use the certificate you want.
KeyChest.net is about keeping your business up and running. It may be prudent to reach A+ rating at SSL Labs in April, but it doesn't help if your customers can't access your online store in July.
KeyChest gives you all the information you need to keep your servers' SSL certificates up to date. It allows you to plan certificate renewals and tells you when something broke and needs a closer look. This protects you from downtimes as you can plan certificate renewals with enough to resolve any potential problems. Spot checks of KeyChest also help you set up your servers so that your users, customers, and clients can use them and connect to them reliably as we detect issues that may cause random unexpected problems to access your web services.
KeyChest features a powerful Dashboard with details of all your certificates in one place. Dashboard tables list relevant issues, from DNS lookup errors, incomplete trust chains, or certificate expiration dates.
If you just want to keep an eye on your administrators, KeyChest will send you a brief email with all the important metrics.
We also want to show you who issued your certificate and how to save money on the next one. Make you aware of any new certificates issued for any of your servers. One of the main extensions would be integration of reminders into your calendar.
The biggest problem of the security of your servers is that you need to create a new key and certificate. It can be every three months, or once in 2-3 years. The harsh reality is that if you don't do it, your online business will simply grind to halt.