If you are looking for all certificates on your servers in the certificate store then i’d recommend looking at what C3-Inventory/Strawgate did quite a while back. This is probably the best that i’ve seen for addressing collecting this information and having it in a usable format for reporting on it in Webreports. There is a Task that is deployed and you can have it re-run at whatever interval you choose, then an analysist that reads in the results so that it can be reported on in the future.
C3-Inventory/Analyses/Certificates - Windows.bes at master · strawgate/C3-Inventory · GitHub