Certificate expiry monitoring

For starters, you can keep the F5 bundle updated regularly by configuring the update interval on newer BIG-IP software versions: https://my.f5.com/manage/s/article/K000132397. This is not enabled by default, and I usually update the F5 bundle on any F5 software upgrade.

You can retrieve a list of expired SSL certificates via API calls. Please take a look at the following: https://my.f5.com/manage/s/article/K000092658#api. If you have a management system running Linux, you could easily use Python to write a script and email out a weekly report for example of active SSL certificates and how many days are remaining until expiration.