def list_certificates(palo: PanDevice):
    certs = palo.op('request certificate show')
    certs_dict = etree_to_dict(certs)
    expired = []
    now = (datetime.datetime.now() + datetime.timedelta(days=2)).timestamp()
    for cert in certs_dict['response']['result']['entry']:
        if float(cert['expiry']) < now:
            expired.append(cert)
    return expired