Certificate Patrol should also be sufficient. However, it's implemented very poorly. It should remember all certificates previously served by a site and only sh

Certificate Patrol should also be sufficient. However, it's implemented very poorly. It should remember all certificates previously served by a site and only show you new ones. But it's constantly warning about changes that are false positives. There is a real need for software that makes this "just work".