Check for expired certificates
powershell to get all certificates fromm ntauth/ntauthcertificates in Active Directory and see if they're still valid.
Removal can be done using certutil
Definitely bugs in it -> static parse on "sha1", more should be included here. And the amount of lines also has more variables...