Any chance you could include in your scanning of various Servers when Certificates are expired?
A colleague spent about 4 hours yesterday troubleshooting and resolving an issue. Seems it would have been a lot easier to solve if such data was collected in a server scan.
Just a suggestion to improve.