Nagios can do that (and you could borrow from its check_http)

  define command {
    command_name                    check_certificate
    command_line                    $USER1$/check_http -H $ARG1$ -p $ARG2$ -4 -S -C 21 -t 20 --sni
  }

A bigger challenge is getting a complete list of your https websites, and an even bigger one is finding and monitoring all those non-https certificates, eg payment gateway certificates.