Identifying expired certs

I find it easiest to go to the command line to find things like the unattached certs.

If you just want to see if a cert profile is used, or how many times it is used I have had success with the following:

tmsh show /ltm virtual profiles | grep "ClientSSL Profile: namegoeshere"

Of course you could get a lot fancier but that might get you started...