{
    "policy":  {
                   "@odata.context":  "https://graph.microsoft.com/beta/$metadata#deviceManagement/deviceConfigurations/$entity",
                   "@odata.type":  "#microsoft.graph.windows10PkcsCertificateProfile",
                   "id":  "4a574bfa-20fa-4377-b34c-120d29ef09d9",
                   "lastModifiedDateTime":  "2025-05-26T11:06:01.4969656Z",
                   "roleScopeTagIds":  [
                                           "0"
                                       ],
                   "supportsScopeTags":  true,
                   "deviceManagementApplicabilityRuleOsEdition":  null,
                   "deviceManagementApplicabilityRuleOsVersion":  null,
                   "deviceManagementApplicabilityRuleDeviceMode":  null,
                   "createdDateTime":  "2023-02-15T09:36:12.1367038Z",
                   "description":  "PKCS Konfiguration für das Benutzerzertifkat",
                   "displayName":  "Default Windows User Certificate",
                   "version":  7,
                   "renewalThresholdPercentage":  20,
                   "keyStorageProvider":  "useTpmKspOtherwiseFail",
                   "subjectNameFormat":  "custom",
                   "subjectAlternativeNameType":  "none",
                   "certificateValidityPeriodValue":  1,
                   "certificateValidityPeriodScale":  "years",
                   "certificationAuthority":  "hmsubca01.hh.hansemerkur.de",
                   "certificationAuthorityName":  "Hansemerkur-SubCA",
                   "certificateTemplateName":  "HMEndpointManagerDevices",
                   "subjectAlternativeNameFormatString":  null,
                   "subjectNameFormatString":  "CN={{onPremisesSamAccountName}},E={{EmailAddress}}",
                   "certificateStore":  "user",
                   "extendedKeyUsages":  [

                                         ],
                   "customSubjectAlternativeNames":  [
                                                         {
                                                             "sanType":  "universalResourceIdentifier",
                                                             "name":  "MD:LAPTOP"
                                                         }
                                                     ]
               },
    "policyName":  "Default Windows User Certificate",
    "policyType":  "ConfigurationProfile"
}