I built an open source tool that monitors TLS certificates in real-time via eBPF (including Java JCA interception without private keys)