To return the Client Certificate type (PKI or Self-Signed), use this code in the CM Console:
Go to CM Console > Monitoring > Overview > Queries > Create Query
Code
SELECT DISTINCT SMS_R_System.Name, SMS_CombinedDeviceResources.UserName, SMS_CombinedDeviceResources.Domain, SMS_G_System_OPERATING_SYSTEM.BuildNumber, SMS_CombinedDeviceResources.ClientCertType FROM SMS_CombinedDeviceResources INNER JOIN SMS_R_System ON SMS_R_System.ResourceID = SMS_CombinedDeviceResources.ResourceID INNER JOIN SMS_G_System_OPERATING_SYSTEM ON SMS_G_System_OPERATING_SYSTEM.ResourceID = SMS_CombinedDeviceResources.ResourceID
Screenshot