In that case use an SSH session (via Open-Ssh) to your VCSA and use the /usr/lib/vmware-vmafd/bin/vecs-cli command to list the certificates.

From the Validity - Not After you can extract the expiration date.

See also KB2111411