ssllabs-scan

For what it's worth, SSL Labs also has a command-line tool that enables you to scan in bulk https://github.com/ssllabs/ssllabs-scan However, although they don't trust WoSign and StartCom any more, it's possible that there is a cross-signed certificate to another CA, in which case the problem is not going to be detected. I seem to recollect that such cross-signed certs exist, but I haven't looked for them recently. Will do.

I already run this once a day using this tool https://github.com/ssllabs/ssllabs-scan

This doesn't really explain what it's checking, but if you're looking for an actual checker for your HTTPS configuration, Qualys SSLLabs maintains an open source client [0] that could easily be scripted to do this exact thing. [0] - https://github.com/ssllabs/ssllabs-scan/

Repository for the reference client, written in Go https://github.com/ssllabs/ssllabs-scan