tmsh or web - report of sha1 certs

The TMSH commands won't give you all of the additional details I think you're looking for. And by the way you'd use something like this:

tmsh list sys crypto cert all

A much more detailed option might be to use OpenSSL. Something like this:

for f in `ls -b /config/filestore/files_d/Common_d/certificate_d/`; do openssl x509 -noout -text -in /config/filestore/files_d/Common_d/certificate_d/$f; done

This will dump the x509 details of each certificate in the Common partition. You can optionally manipulate this to grep/awk for specific information instead of everything.