Web application penetration testing of multiple certificate and certificate authority management sites