Checking all certificates used by teamcity have been successfully swapped ahead of the expiry date

Our yearly company wildcard certificate runs out next week (it's a happy xmas chore :-) ) so have been getting “one step ahead of the game” by visiting everything I can think of that might use it. 

Looking through someone else notes I have swapped in the new one into the places it says TC uses it, however I have not a java man so whilst I can see that the cert has changed in the UI (by doing a right-click in a web-browser) I cannot be confident that the ones used for worker intercommunications etc (for example) are also successfully swapped.

Is there a some simple check a dev-ops like me can do so as to be sure we are all swapped out ready for expiry-day?