@jabberati
Thanks! The problem is that we have hundreds of domains on our service, and so we really need something that can identify rogue certificates without drowning us in notifications about all the legitimate ones. That's apparently a bit harder...