Renew certificate with expanding domains

I don't understand what you mean here.

try the command (where domain.crt is the certificate you want to check )

openssl x509 -in domain.crt -noout -text

or

openssl x509 -in domain.crt -noout -text | grep DNS

if you just want the SANS names.