Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Trusted Root&Intermediate system certificates. Where check the list?

30 Oct 2014   #1
userwin

Windows 7 Pro 64bit
 
 
Trusted Root&Intermediate system certificates. Where check the list?

Hi.

We have many trusted root and intermediate certificates in the cert's store by default. Where to check these lists? To exclude "not default", "maybe potentially mаlware" root certs.



My System SpecsSystem Spec
.
30 Oct 2014   #2
townsbg

Windows 7 pro 64-bit sp 1
 
 

You can find certs as shown in the guide here: https://www.sslshopper.com/move-or-c...ws-server.html
My System SpecsSystem Spec
30 Oct 2014   #3
userwin

Windows 7 Pro 64bit
 
 

Thanks, but I don't need "Move or copy an SSL certificate from a Windows server to another Windows server".
I want to check (to examine) the lists of all trusted root and intermediate certs that installed by default in the system. How can I do this? Is it possible? Is there any official web-page on microsoft.com with lists of all provided by default root certs and their description?
My System SpecsSystem Spec
.

30 Oct 2014   #4
townsbg

Windows 7 pro 64-bit sp 1
 
 

None that I know of. That page shows where to go examine certs which is what I thought you wanted. If you see a suspicious cert try googling it but generally you shouldn't have to worry about certs unless you are a web admin. They are harmless and only used by the OS for encrypting information over the web and if you start removing them you could end up with website authentication issues. Due to the number of websites I doubt that Microsoft keeps any such lists.
My System SpecsSystem Spec
30 Oct 2014   #5
userwin

Windows 7 Pro 64bit
 
 

Quote   Quote: Originally Posted by townsbg View Post
Due to the number of websites I doubt that Microsoft keeps any such lists.
I speak about trusted root certs. For example I have only 56 now. That's why i think there is no technical problem to publicate such list.
My System SpecsSystem Spec
30 Oct 2014   #6
userwin

Windows 7 Pro 64bit
 
 

I'll explain in detail... We have preinstalled root certs in the system which came with OS and maybe some new through updates. But it's a security question, because any person who have local access to the computer and of course admin rights and even software can add a root cert to the store. And after that for example all web-server's certificates which signed with this root cert will be trusted! It's potentially dangerous and that's why i think microsoft must publicate officially this list on it's web-site .
My System SpecsSystem Spec
30 Oct 2014   #7
townsbg

Windows 7 pro 64-bit sp 1
 
 

I'm not sure how to answer your question or even what you are concerned with. Perhaps this will help though.

Windows and Windows Phone 8 SSL Root Certificate Program (Member CAs) - TechNet Articles - United States (English) - TechNet Wiki

Unless you are a webadmin I really don't see why you need to worry abput certs.
My System SpecsSystem Spec
30 Oct 2014   #8
oneeyed

Windows 8
 
 

You are right, and there is indeed such a list : Trusted root certificates that are required by Windows Server 2008 R2, by Windows 7, by Windows Server 2008, by Windows Vista, by Windows Server 2003, by Windows XP, and by Windows 2000

This the absolute minimum required for compatibility.

Windows updates do add to this list from time to time though, ex : How to get a Root Certificate update for Windows
My System SpecsSystem Spec
30 Oct 2014   #9
userwin

Windows 7 Pro 64bit
 
 

Quote   Quote: Originally Posted by townsbg View Post
I'm not sure how to answer your question or even what you are concerned with. Perhaps this will help though.

Windows and Windows Phone 8 SSL Root Certificate Program (Member CAs) - TechNet Articles - United States (English) - TechNet Wiki
Thanks, I also already found this and info about "Microsoft Root Certificate Program" and "How Update Root Certificates Communicates with Sites on the Internet"

Not a question but...The Update Root Certificates feature sends a request by HTTP? Certificate Support and Resulting Internet Communication in Windows Vista Why not by httpS? It's insecure!

Quote   Quote: Originally Posted by townsbg View Post
Unless you are a webadmin I really don't see why you need to worry abput certs.
See above. I think clients must also worry about root certs :) if they worry about security.
My System SpecsSystem Spec
30 Oct 2014   #10
userwin

Windows 7 Pro 64bit
 
 

Quote   Quote: Originally Posted by oneeyed View Post
Windows updates do add to this list from time to time though, ex : How to get a Root Certificate update for Windows
insecure update :) Why?
My System SpecsSystem Spec
Reply

 Trusted Root&Intermediate system certificates. Where check the list?




Thread Tools




Similar help and support threads
Thread Forum
How to update root certificates in installation ISO?
I want to integrate current certificates (root, disallowed) into Windows 7 installation ISO. How to do it (DISM?) and what cert files do I need: 404 - File or directory not found. http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab...
Installation & Setup
Microsoft move to revoke trust in 20 root certificates could wreak hav
Microsoft move to revoke trust in 20 root certificates could wreak havoc on sites Microsoft move to revoke trust in 20 root certificates could wreak havoc on sites | PCWorld
News
Trusted Root Certification Authorities in IE8
A week ago, I installed a fresh Win7 Home Premium on my laptop-A. After all the Windows Updates, I took a look inside the Trusted Root Certification Authorities, I found some entries appear twice. e.g. there are two Thawte Premium Server CA, and few other entries I known not there. I check my...
Browsers & Mail


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 22:58.
Twitter Facebook Google+