Probably more sensible and simple would just be a warning alert that pops up when launching an app with a certificate that will expire within X days.