Hello,
There should be few ways. The old way is to filter the audits.
Now, there is Look Up Certificate Assertion that can return the attributes of specified certificate.
for example, assume the output variable name is "certificate", you should get the expire date from ${certificate.notAfter}
And then you can use Send Email Assertion to send email if needed.
You can put them in a schedule task policy.
Regards,
Mark