detect broken osx certificates