==== Get end-date from .pem encoded file with openssl ====
openssl x509 -enddate -noout -in ACERTFILE.pem
>>> notAfter=Aug 28 23:59:59 2021 GMT
Also, you can get if a certain certificate is already expired or not (with 2 minutes (120 seconds) span)
openssl x509 -checkend 120 -noout -in ACERTFILE.pem