You run this from Powershell on the Azure subscription you want to identify the cert expirations for, including Azure Managed Certificates that will soon be affected by the DigiCert change effective Monday, July 28th, 2025. There’s probably an easier way but this is my starting point.
Get-AzWebApp | ForEach-Object {
$certs = Get-AzWebAppCertificate -ResourceGroupName $_.ResourceGroup
foreach ($cert in $certs) {
[PSCustomObject]@{
WebAppName = $_.Name
CertName = $cert.Name
Thumbprint = $cert.Thumbprint
ExpirationDate = $cert.ExpirationDate
}
}
}