scripts to check certificates