Output Format

Example Output

{
  "result_type": "scan",
  "plugin_id": "ms-defender-cert-plugin",
  "plugin_version": "1.2.0",
  "data": {
    "type": "cert",
    "timestamp": "2026-04-15T10:00:00-05:00",
    "urn": "urn:cert:sha1:f7def4b6da84ec5d8264dc0233023313f99454ef",
    "url": "https://security.microsoft.com/vulnerabilities/certificates/F7DEF4B6DA84EC5D8264DC0233023313F99454EF",
    "extra": {
      "device_id": "15d113df6e2589f6b277699700bc93d0bb1d789c",
      "device_name": "defender-test-e",
      "path": "Microsoft.PowerShell.Security\\Certificate::LocalMachine\\REQUEST\\F7DEF4B6DA84EC5D8264DC0233023313F99454EF",
      "is_self_signed": false,
      "name": "defender-test-endpoint.eastus.cloudapp.azure.com",
      "signature_algorithm": "sha1RSA",
      "key_length": 2048,
      "serial_number": "6F7B40327AE7BA8E4785CBAACA3A10E2",
      "not_after": "2027-04-09T16:47:48Z",
      "not_before": "2026-04-09T16:27:48Z",
      "subject": "CN=defender-test-endpoint.eastus.cloudapp.azure.com,OU=PKI,O=Entrust,L=Kanata,ST=ON,C=CA",
      "issuer": "CN=defender-test-endpoint.eastus.cloudapp.azure.com,OU=PKI,O=Entrust,L=Kanata,ST=ON,C=CA",
      "key_usage": ["Data Encipherment", "Digital Signature", "Key Encipherment", "Non-Repudiation"],
      "extended_key_usage": ["Server Authentication"],
      "rbac_group_id": 0,
      "rbac_group_name": "Unassigned"
    },
    "cert_pem": "",
    "endpoint": {
      "host": "defender-test-e"
    }
  }
}
{
  "result_type": "state",
  "plugin_id": "ms-defender-cert-plugin",
  "plugin_version": "1.2.0",
  "data": {
    "lastRunDateTime": "2026-04-15T10:00:00-05:00"
  }
}