X509 in Satellite zones

is there a way to check certificates in a satellite zone? The detection of the certificates is not a problem as this is done from the master server. But when I implement the check of the certificates it tries to run the icingacli check command from the satellite where icingacli is not available. I couldn’t find anything in the documentation about satellite zones and I’m wondering if it is even possible.

I hope someone can give me some hints.

Best regards,