Query: acm_certificate_by_validity

select
  validity,
  count(*)
from (
  select not_after,
    case when not_after is null or not_after < now() then
      'invalid'
    else
      'valid'
    end validity
  from
    aws_acm_certificate) as t
group by
  validity
order by
  validity;