Query: acm_certificate_by_validity

select
  validity,
  count(*)
from
  (
    select
      not_after,
      case
        when not_after is null
        or not_after < now() then 'invalid'
        else 'valid'
      end validity
    from
      aws_acm_certificate
  ) as t
group by
  validity
order by
  validity;