The Microsoft Certificates add-on for Splunk® provides functionality to ingest certificate information from the certificate store on Windows servers and workstations. The add-on also allows the collection of certificate information for issued certificates from Microsoft Certificate Servers.
https://github.com/dmuegge/TA_msft_certs