The currently available predicates for TLS-connections can be extended with predicates to load and reason about certificates etc.
Markus Triska