This message was deleted.

it's someone's kubectl certificiate

by saying someone's kubectl certificate I assume you are referring to client certificate, right? If so, is there a way we can figure out which of those client certificates are expiring?