A quick little snippet to check when an SSL certificate on a remote server is expiring:

1

openssl s_client -connect mail.example.com:25 | openssl x509 -noout -enddate

Works for any kind of SSL service, not just SMTP.