checking ICA / SIC certificate expiration date
From cpwiki.net

How to list the expiration dates for objects managed by and MDS or CMA
cpca_client lscert
displaying vpn cert for a gateway
[Expert@MGMT:0]# fwm printcert -obj CXL_192.168.3.244 printing all certificates of CXL_192.168.3.244 defaultCert: Host Certificate (level 0): Subject: CN=CXL_192.168.3.244 VPN Certificate,O=MGMT.checkpoint.com.s6t98x Issuer: O=MGMT.checkpoint.com.s6t98x Not Valid Before: Sun Jun 3 19:58:19 2018 Local Time Not Valid After: Sat Jun 3 19:58:19 2023 Local Time ...(output truncated)