Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Trusted Root&Intermediate system certificates. Where check the list?

30 Oct 2014   #1
userwin

Windows 7 Pro 64bit
 
 
Trusted Root&Intermediate system certificates. Where check the list?

Hi.

We have many trusted root and intermediate certificates in the cert's store by default. Where to check these lists? To exclude "not default", "maybe potentially mаlware" root certs.



My System SpecsSystem Spec
.
30 Oct 2014   #2
townsbg

Windows 7 pro 64-bit
 
 

You can find certs as shown in the guide here: https://www.sslshopper.com/move-or-c...ws-server.html
My System SpecsSystem Spec
30 Oct 2014   #3
userwin

Windows 7 Pro 64bit
 
 

Thanks, but I don't need "Move or copy an SSL certificate from a Windows server to another Windows server".
I want to check (to examine) the lists of all trusted root and intermediate certs that installed by default in the system. How can I do this? Is it possible? Is there any official web-page on microsoft.com with lists of all provided by default root certs and their description?
My System SpecsSystem Spec
.

30 Oct 2014   #4
townsbg

Windows 7 pro 64-bit
 
 

None that I know of. That page shows where to go examine certs which is what I thought you wanted. If you see a suspicious cert try googling it but generally you shouldn't have to worry about certs unless you are a web admin. They are harmless and only used by the OS for encrypting information over the web and if you start removing them you could end up with website authentication issues. Due to the number of websites I doubt that Microsoft keeps any such lists.
My System SpecsSystem Spec
30 Oct 2014   #5
userwin

Windows 7 Pro 64bit
 
 

Quote   Quote: Originally Posted by townsbg View Post
Due to the number of websites I doubt that Microsoft keeps any such lists.
I speak about trusted root certs. For example I have only 56 now. That's why i think there is no technical problem to publicate such list.
My System SpecsSystem Spec
30 Oct 2014   #6
userwin

Windows 7 Pro 64bit
 
 

I'll explain in detail... We have preinstalled root certs in the system which came with OS and maybe some new through updates. But it's a security question, because any person who have local access to the computer and of course admin rights and even software can add a root cert to the store. And after that for example all web-server's certificates which signed with this root cert will be trusted! It's potentially dangerous and that's why i think microsoft must publicate officially this list on it's web-site .
My System SpecsSystem Spec
30 Oct 2014   #7
townsbg

Windows 7 pro 64-bit
 
 

I'm not sure how to answer your question or even what you are concerned with. Perhaps this will help though.

Windows and Windows Phone 8 SSL Root Certificate Program (Member CAs) - TechNet Articles - United States (English) - TechNet Wiki

Unless you are a webadmin I really don't see why you need to worry abput certs.
My System SpecsSystem Spec
30 Oct 2014   #8
oneeyed

Windows 8
 
 

You are right, and there is indeed such a list : Trusted root certificates that are required by Windows Server 2008 R2, by Windows 7, by Windows Server 2008, by Windows Vista, by Windows Server 2003, by Windows XP, and by Windows 2000

This the absolute minimum required for compatibility.

Windows updates do add to this list from time to time though, ex : How to get a Root Certificate update for Windows
My System SpecsSystem Spec
30 Oct 2014   #9
userwin

Windows 7 Pro 64bit
 
 

Quote   Quote: Originally Posted by townsbg View Post
I'm not sure how to answer your question or even what you are concerned with. Perhaps this will help though.

Windows and Windows Phone 8 SSL Root Certificate Program (Member CAs) - TechNet Articles - United States (English) - TechNet Wiki
Thanks, I also already found this and info about "Microsoft Root Certificate Program" and "How Update Root Certificates Communicates with Sites on the Internet"

Not a question but...The Update Root Certificates feature sends a request by HTTP? Certificate Support and Resulting Internet Communication in Windows Vista Why not by httpS? It's insecure!

Quote   Quote: Originally Posted by townsbg View Post
Unless you are a webadmin I really don't see why you need to worry abput certs.
See above. I think clients must also worry about root certs if they worry about security.
My System SpecsSystem Spec
30 Oct 2014   #10
userwin

Windows 7 Pro 64bit
 
 

Quote   Quote: Originally Posted by oneeyed View Post
Windows updates do add to this list from time to time though, ex : How to get a Root Certificate update for Windows
insecure update Why?
My System SpecsSystem Spec
Reply

 Trusted Root&Intermediate system certificates. Where check the list?




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
do i miss a service? can you check please the list
Hi while i was deleting an weird service MPlayerWWService.exe i'm worried to have delete an important windows 7 service can you check my list the screenshot and tell me if i miss 1 serice? i will appreicate it a lot , really thanks
General Discussion
Intel USB 3.0 root hub and USB root hub registries missing/incomplete?
Ok, so I've run into a very tricky spot: Yesterday, I successfully resolved a windows update issue (thread can be found here: http://www.sevenforums.com/windows-updates-activation/301935-unable-get-any-updates-all-error-800f0900.html ). Basically, one problem led to another and I ended up...
Drivers
How to delete intermediate system backup images?
Hi! Can anyone tell me how to delete only intermediate system backup images of windows own backup facility? I want to keep the first and the last images and delete all images between them. Is it possible? Thank you.
Backup and Restore
How to regain personal certificates after System Repair?
Hello Week ago just experienced something very strange: while casual surfin' - PC crashed - rebooted and opted 2 options: normal start, system repaire (recommened). I don't know exactly what was written,but that's basically it. The startup repair always failed to identify the problem. And...
BSOD Help and Support
Undeleteable non-system folders in root
Hey, I have a question. My C: drive has two (non-system and non-hidden) folders which I do not think should be there - these are 'boot' and 'clean'. I do not think 'boot' should be there as I already have a system folder named 'Boot' which is identical to the 'boot' folder. However, I cannot...
Performance & Maintenance
Trusted Root Certification Authorities in IE8
A week ago, I installed a fresh Win7 Home Premium on my laptop-A. After all the Windows Updates, I took a look inside the Trusted Root Certification Authorities, I found some entries appear twice. e.g. there are two Thawte Premium Server CA, and few other entries I known not there. I check my...
Browsers & Mail


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:45.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App