checking ICA / SIC certificate expiration date
From cpwiki.net

How to list the expiration dates for objects managed by and MDS or CMA
cpca_client lscert
displaying vpn cert for a gateway
[Expert@mycpmgr:0]# fwm printcert -obj "my_cpgateway1"
printing all certificates of my_cpgateway1
defaultCert: Host Certificate (level 0): Subject: CN=my_cpgateway1 VPN Certificate,O=mycpmgr.nqaxpt Issuer: O=mycpmgr.nqaxpt Not Valid Before: Mon Jun 20 12:14:15 2022 Local Time Not Valid After: Wed Jun 21 12:14:15 2023 Local Time