Took longer then expected to work this out, here it is
Get-ADUser -filter * -properties * | Where-Object {$_.Enabled -eq $true} |where-object {$_.Passw
ordExpired -eq $true} |select name,passwordexpired,mail
You can see where there are 2 properties being checked, and I think is should be easy to add a third. wonder if there is a cleaner command to get this.