code: def get_revoked_certs(self):
          
          now = timezone.now()
          return self.cert_set.filter(revoked=True,
                                      validity_start__lte=now,
                                      validity_end__gte=now)
docs: Returns revoked certificates of this CA
          (does not include expired certificates)