Get a list of Enterprise PKI client certificates. Returns only certificates issued by PKI Sub CAs, not EAP-TLS / network certificates. Supports pagination (page, limit) and API Filtering. serial and ca_serial are hexadecimal. Results are newest first. Enterprise PKI must be enabled. Read-only API keys are allowed.