The following inspector on the below link are inspectors that can be improved because they have limited scope as they only work on files: http://support.bigfix.com/inspectors/Authorization%20Objects_Any.html#x509%20certificate
An inspector that would read the cert info in the registry would be useful to check for expired or expiring certs.
https://docs.microsoft.com/en-us/windows/desktop/seccrypto/system-store-locations
RFE ID 128383:
http://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=128383