Question :

How to check the expiration date of user/host certificate. If it will expire soon , what should I do ?

Answer :

(1) Check the expiration date of the certificate:

$ openssl x509 -in hostcert.pem -noout -enddate

$ openssl x509 -in usercert.pem -noout -enddate

(2) If the certificate will expire as soon as, contact ASGCCA manager to revoke and rekey your certificate.