inspect TLS certificates