maybe you can display the SAN for the cert at the healthcheck