Check the expiry date of a certificate:
$ openssl x509 -enddate -noout -in <certificate.crt>