Before performing the upgrade the certificate can be reviewed by going to:
No ORGs appliances: AdminUI > Settings > Security Settings
ORGs enabled appliances: SystemUI > Settings > Security Settings

Then click on View CA Certificate.

The certificate then can be decoded to review the Expiry date.
The default certificates are self-signed and can be regenerated from the graphical interface, to do this:
Under "Enabled Secure database access (SSL)" > click on "Override Default Certificates" > Enable "Reset to Default Certificate Files" and click on "Save and Restart Services".
Note: if the appliance finished the upgrade and is stuck at Starting MYSQL or if the appliance is reporting the correct version, but no graphical interface please contact support.