I prefer RCC (root certificate checker) and have used it in the past, but the website seems to be suspended.