Certificate expiry monitoring

Try - Sending an advance email alert for impending SSL certificate expiration

https://my.f5.com/manage/s/article/K15288 

If you have an F5 BIG-IQ device, it offers centralized management and monitoring of your F5 devices, including SSL certificates. BIG-IQ can send alerts when certificates are about to expire.

https://techdocs.f5.com/kb/en-us/products/big-iq-centralized-mgmt/manuals/product/bigiq-central-mgmt-device-5-0-0/6.html 

You can write custom scripts (e.g., in Python or Bash) that periodically query the F5 device for certificate information using the iControl REST API. These scripts can then send notifications via email, Slack, or other messaging services when a certificate is nearing its expiry date. Here's a simple example in Python:

import requests
from requests.auth import HTTPBasicAuth

f5_ip = '<F5-IP>'
username = 'admin'
password = 'password'

response = requests.get(f'https://{f5_ip}/mgmt/tm/sys/file/ssl-cert', auth=HTTPBasicAuth(username, password), verify=False)
certs = response.json().get('items', [])

for cert in certs:
    cert_name = cert['name']
    expiration_date = cert['expirationDate']
    print(f"Certificate {cert_name} expires on {expiration_date}")