I’m not sure about cert scans, but ShadowServer is what I use for automated scans. They’re free and the scans are thorough: www.shadowserver.org/…/network-reporting/