A PKCS12 file (.pfx) contains a certificate and corresponding private key. Getting the expiration date is a two-step process.

Steps

1. Convert PFX to PEM

# Using -passin to avoid pem passphrase prompt
openssl pkcs12 -in testuser1.pfx -out temp.pem \
  -passout pass:"${pass}" -passin pass:"${pass}"

### 2. Get the Expiration Date
bash
openssl x509 -in temp.pem -noout -enddate

This outputs the certificate expiration date.