is there oss that will scour and identify iffy certs on a box?