Identify insecure TLS services with the enhanced runZero Certificate Inventory

This document introduces updates to runZero’s Certificates Inventory, a capability that discovers and inventories TLS services and X.509 certificates across environments, flags insecure configurations (e.g., deprecated TLS versions, weak ciphers, missing HSTS, self-signed/untrusted certs), and surfaces expiring certificates to prevent outages. It provides practical search queries to find at-risk certificates and services, links certificates to the assets and ports using them for rapid remediation, and contextualizes the urgency with CA/Browser Forum deadlines reducing certificate validity to 100 days by 2027 and 47 days by 2029.