{
    "policy":  {
                   "@odata.context":  "https://graph.microsoft.com/beta/$metadata#deviceManagement/deviceConfigurations/$entity",
                   "@odata.type":  "#microsoft.graph.windows10PkcsCertificateProfile",
                   "id":  "ca80c7c5-51ec-4440-9809-cddd53aa0bbd",
                   "lastModifiedDateTime":  "2026-08-20T14:07:11.256106Z",
                   "roleScopeTagIds":  [
                                           "0"
                                       ],
                   "supportsScopeTags":  true,
                   "deviceManagementApplicabilityRuleOsEdition":  null,
                   "deviceManagementApplicabilityRuleOsVersion":  null,
                   "deviceManagementApplicabilityRuleDeviceMode":  null,
                   "createdDateTime":  "2023-02-15T13:02:44.345151Z",
                   "description":  "Konfiguriert die Verwendung des Device Zertifikats",
                   "displayName":  "Default Windows Device Certificate",
                   "version":  5,
                   "renewalThresholdPercentage":  20,
                   "keyStorageProvider":  "useTpmKspOtherwiseFail",
                   "subjectNameFormat":  "custom",
                   "subjectAlternativeNameType":  "none",
                   "certificateValidityPeriodValue":  1,
                   "certificateValidityPeriodScale":  "years",
                   "certificationAuthority":  "hmsubca01.hh.hansemerkur.de",
                   "certificationAuthorityName":  "Hansemerkur-SubCA",
                   "certificateTemplateName":  "HMEndpointManagerDevices",
                   "subjectAlternativeNameFormatString":  null,
                   "subjectNameFormatString":  "CN={{DeviceName}}",
                   "certificateStore":  "machine",
                   "extendedKeyUsages":  [

                                         ],
                   "customSubjectAlternativeNames":  [
                                                         {
                                                             "sanType":  "customAzureADAttribute",
                                                             "name":  "{{DeviceName}}"
                                                         },
                                                         {
                                                             "sanType":  "customAzureADAttribute",
                                                             "name":  "{{SerialNumber}}"
                                                         },
                                                         {
                                                             "sanType":  "universalResourceIdentifier",
                                                             "name":  "MD:LAPTOP"
                                                         },
                                                         {
                                                             "sanType":  "customAzureADAttribute",
                                                             "name":  "{{AAD_Device_ID}}"
                                                         }
                                                     ]
               },
    "policyName":  "Default Windows Device Certificate",
    "policyType":  "ConfigurationProfile"
}