def METHOD_NAME(ingress):
    """Check if any of the certificates for an ingress are invalid"""
    invalid_certs = []
    for certificate_request in ingress.spec.tls:
        secret_name = certificate_request.secretName
        try:
            secret = Secret.get(secret_name, ingress.metadata.namespace)
            issuer_cn = _get_certificate_issuer_cn(secret)
            if "Let's Encrypt Authority X3" != issuer_cn:
                invalid_certs.append(
                    Problem(secret_name, "Incorrect issuer: {}".format(issuer_cn), ProblemType.WRONG_CA)
                )
        except NotFound:
            invalid_certs.append(Problem(secret_name, "No certificate provisioned", ProblemType.NO_CERTIFICATE))
    return invalid_certs