I have created a runbook solution to check an internal certificate authority (CA) if there are certificates which expire within the next 30 days and notify the requesters.
You can find more details on my blog post: https://systemcentertipps.wordpress.com/2016/12/10/scor-2012-monitor-expired-ca-certificates/
