Query: acm_certificate_invalid

select
  count(*) as value,
  'Invalid Certificates' as label,
  case
    count(*)
    when 0 then 'ok'
    else 'alert'
  end as type
from
  aws_acm_certificate
where
  not_after is null
  or not_after < now();