create a monitoring interface
sudo iw dev wlp58s0 interface add wmon type monitor sudo ip link set wmon up
wireshark filter for
eap and (re)auth against the AP,
Note: if you get
Unrecognized Protocol in place of
just try again...
Export the certificates and start thinking about what to do with them :shrug: