add workflow for checking certificates