IBM MQ uses some strange to me certificate format with kdb extension.
How can I open it and change its validity date?
You can use IBM Key Management tool (aka Ikeyman) for this purpose. Yous should get it with MQ installation. Just review Working with WebSphere MQ TLS and SSL support Section of Websphere MQ documentation.