Is this inspecting certificates in real-time or analyzing stored traffic? And does it flag things like expired certs, weak ciphers, or pinned certificates that failed validation?