These days, I'd recommend going for powershell if you're going to do it from Windows. That's what I've done myself, in addition to other, more robust solutions. Moreover, if you're working with websites, url_response is also capable of monitoring certificate expiration. Probably doesn't store it as QOS, but I find that to be extremely useless information as qos anyway.