We're migrating from Silverline, where we have a weekly report that gets mailed to us with a list of expiring certificates. This way, we can check for certs that need to be updated without having to log into the system (no need for that if ther are no expiring certs).