Research: Support searching certificate store by serial number or common name (CN)

[atc0005]

I found myself updating certificate bundles on a Nagios host (used by Python plugins using the mechanize module) and had the idea to search the RHEL instances certificate store to confirm whether the separate bundles are even needed anymore; perhaps all intermediates in the bundle are now provided in the central certificate store and accessible by default?

The lscert tool could benefit from having one or more flags which support searching the default certificate store(s) for the presence of the given serial number and displaying matching info.

Alternatively, it may be that there is already an existing tool which provides this functionality and we could point to that one instead.