GetAllExpired.ps1

$Computers = Get-ADComputer -filter * -SearchBase 'OU=Servers,OU=ComputersX,DC=contoso,DC=com' | Select-Object -ExpandProperty Name

$Allcerts = Invoke-Command -ComputerName $Computers -ScriptBlock {
    Get-childItem Cert:\LocalMachine\My | Select-Object DnsNameList,NotBefore,NotAfter,Thumbprint,Issuer,Subject
} -ErrorAction SilentlyContinue

#region get all certs that expired
#get current date
$date = Get-Date

$ExpiredCerts = $Allcerts | Where-Object {$PSItem.NotAfter -le $date} | Select-Object DnsNameList,NotBefore,NotAfter,Thumbprint,Issuer,Subject,PSComputerName
$ExpiredCerts | Export-Csv -Path C:\AdminTools\ExpiredCerts.csv -NoTypeInformation -Delimiter ';'

#endregion