# convert to PEM
openssl pkcs12 -in YOUR_CERTS.pfx -out tempcrt.pem

# check expiration date
openssl x509 -in tempcrt.pem -noout -enddate