List service principal certificates expiring in the next 7 days

ExpiringCerts.ps1

Get-AzureRmADApplication |% {
    $app = $_;
    Get-AzureRmADAppCredential -ApplicationId $_.ApplicationId `
    | Where-Object { $_.Type -eq "AsymmetricX509Cert" -and (Get-Date $_.EndDate) -lt (Get-Date).AddDays(7) } |% {
        Write-Host "Cert for application $($app.DisplayName) ($($app.ApplicationId)) expires on $($_.EndDate)"
    }
}