SAML Signing Certificate expiration date

Is it possible to use PowerShell (AzureAD) to expose the expiration dates of SAML certs? I would identify apps with expiring certs so they can be renewed in a timely fashion. Or is there a report or something else in Azure that can be run to expose this?