Monitoring jar file expiry

We have a java deployment ruleset defined for one of our internal applications, deployed from a central location via GPO. Recently had the code signing certificate in that jar file expire. I’m thinking it might be possible to inspect the jar file as a custom datasource and report on the expiry. Would we need to be using jarsigner or openssl to do this?