Sensor for Certificate expiry

[Riza-Aslan]

Is there any possibility to get sensors for expiring LetsEncrypt Certs? I've NAT-rules on my opnsense firewall to grant access to my NPM from outside. But for security reasons only from german locations (IP-range). I've created a secound NAT-rule only to renew my LetsEncrypt certs, which I turn on and off manually, but that doesn't work very well.

My idea would be to handle this automatically by Home Assistant. I would need this integration to get the expiry date of my LetsEncrypt certs. Then I would create an automation which turns my Cert-renewal-NAT-rule on when the time comes und turns it back off after one day. It would be also nice to have such sensor to get notified via HA, when certs are expiring.