check Venafi for scanning your network for certs and managing them you can also build scanner yourself on top of nmap and store discovered certs in one DB and

check Venafi for scanning your network for certs and managing them you can also build scanner yourself on top of nmap and store discovered certs in one DB and link it with your configuration management db