As T6666 seems to be a mayor undertaking, please add a filter for valid usable certificates. ("Valid" could be misunderstood in our context, we will avoid it therefore.)
The "Usable" filter should only show ones which are not expired and not revoked. Don't forget the tooltip.