Would it not be better to have some accredited auditing sevice that can verify and certify crypto code?

After all, the whole infosec feild moves fast and what was 100% professinal at the time of being trained with the then known aspects does not mean that they would hold true today.

Heck I'm certified to recogise drugs and bombs, yet I'd not have any idea upon many modern drugs or explosives, so in some eye's I qualify as a professional and in my eye's I'm far from it and garantee many who have no such acreditation would be far better than I.

Okay, then we need to tell people where to get this professional training. What should one do before one rolls their own crypto?

But nobody does that. Nobody says "don't roll your own crypto until you learn these things and pass these tests." They just say don't, and the people saying don't are often the ones who are.

So it's ignored, and with no good guidance people write crappy crypto.