Keeping track of certs and keys

Hello – I’m curious what methods you are using for certificate and key management. I work with many different certs and keys – TLS certs, client certs, keys for encryption, keys for certs, etc. We have two main problems – we are not good at keeping track of when these certs expire and we need some notification system; easily asserting which keys belong to which certificates (if any). Is there a product out there for this? The tooling in azure is lacking and is limited to only working with certificates that you create within their key vault, so I can’t generate notifications about expiry on certs we import.

Currently, we’re using azure keyvaults and Dropbox which has gotten messy. I realize that’s an organization problem, but even a quick way to see expiration dates and matching keys to certs at-glance would be a huge help for us. I’ve seen some tooling around automated creation and tracking as well, but that is overkill.