for pem in /var/lib/cfssl/*.pem /var/lib/kubernetes/secrets/*.pem; do 
   printf 'exp: %s: %s\n' \
      "$(date --date="$(openssl x509 -enddate -noout -in "$pem"|cut -d= -f 2)" --iso-8601)"  \
      "$pem" 
done | sort