Check expiration of PKI certificates

Hi,

We have a lot of Cisco routers in our network and a lot of branches. All of the routers has certificates for DMVPN connectivity.

Can we periodically download output of 'show crypto pki certificates' command to NCM database and generate report with expiration dates?

The output of this command is something like this:

Certificate

  Status: Available

  Certificate Serial Number (hex): 65

  Certificate Usage: General Purpose

  Issuer:

    cn=IOSCA

  Subject:

    Name: RRR1RTR02

    hostname=RRR1RTR02

  CRL Distribution Points:

    http://test.loc

  Validity Date:

    start date: 16:41:27 MSK Oct 1 2012

    end   date: 00:19:12 MSK Aug 29 2013

  Associated Trustpoints: FMM

  Storage: nvram:IOSCA#65.cer

We need to make report about "end date" of routers certificate.

Can we do it with NCM ?

Thanks, Dmitry