Certificate monitoring

I'd like the possibility to monitor all different certificates on a client or server (not just web).

It would be useful if we can:
1 - activate / deactivate certificate monitoring in the WebGUI using policies.
2 - Include/exclude certificates on the specific machine after "step 1" has been modified.
3 - Include functionality in workflows to be able to trigger notifications when certificates are about to expire.

This is useful in several occasions. In our case for Direct Access, wildcard-certificates, remote desktop services etc etc.