Shodan usage first time

So I am tinkering around with shodan. And I was looking at the facet analysis section. I searched on my company and found some ports open and several expired SSL certificates. From a blue team perspective, how can I proceed from here?

For instance I saw NTP and smnp ports open. Or the SSL certificates that are expired and some of them is for Citrix gateway devices. Or some favicon hash present from the results. Is this something worth highlighting …

analysis blue blue team certificates cybersecurity expired facet found instance ntp perspective ports shodan ssl ssl certificates team