With IPHost Network Monitor you can run simple snmp requests against a Cisco device in your network.
ceipSecCertExpiryStatus
Cisco Enhanced IP Sec Certificate Expiry Status
1.3.6.1.4.1.9.9.432.1.6.6
This object provides the expiration status of the X.509 certificate on the application sending the notification. The notification is sent when the value of this object is changed from certOK(1) to certGoingExpired(2). certOK(1) = certificate is OK and is not within the configured time threshold for going to expire certGoingExpired(2) = certificate is within the configured time threshold for going to expire certExpired(3) = certificate has expired, the current time is after the certificate's validity notAfter time
Back to CISCO-ENHANCED-IPSEC-FLOW-MIB MIB page.
IPHost Network monitor allows you to monitor ceipSecCertExpiryStatus on Cisco device via the SNMP protocol. Download IPHost Network Monitor (500 monitors for 30 days, 50 monitors free forever) to start monitoring Cisco routers right now.