add script to check for expired certificates