Expiring certificates on all domain joined servers

How to identify and track all Certificates on domain servers? What are best practices? Are there third party tools out there?

- I have CA Authority Server on my network domain.

- I consolidated my public Certificates with GoDaddy.

There are some powershell scripts which list all expiring certificates on domain joined servers as for example:

Invoke-Command -ComputerName (get-adcomputer -LDAPFilter "(&(objectCategory=computer)(operatingSystem=Windows Server*)(!serviceprincipalname=*MSClusterVirtualServer*)(!(userAccountControl:1.2.840.113556.1.4.803:=2)))" -Property name | sort-object Name).Name -Command {
   get-childitem cert:LocalMachine\My -recurse | where-object {$_.NotAfter -gt (get-date)} | select Subject,FriendlyName,Thumbprint,@{Name="Expires in (Days)";Expression={($_.NotAfter).subtract([DateTime]::Now).days}} | where "Expires in (Days)" -lt 90  
  }


But I wonder if there is something better out there? How to go about reminders? It would be nice to have some tool.

Please let me know what do you think and recommend?