check unassigned certificates