CmdID / az / az keyvault / az keyvault certificate

az keyvault certificate get-default-policy

Get the default policy for self-signed certificates. Azure CLI reference

Its page in the Azure CLI reference