CertUtil -generateSSTFromWU Rootstore.sst
Run this to force download of the latest CA Root certificates from Windows update. You can then import the file in Certificate Manager and place these in the “Trusted Root Certification Authorities” for the Local Machine


