The List of Root Certificates in STL Format This file is a container containing trusted root certificates. To generate an SST file, run this command with the administrator privileges on a computer running Windows 10 and having a direct access to the Internet:Ĭertutil.exe -generateSSTFromWU roots.sstĪs a result, an SST file containing up-to-date list of root certificates will appear in the target directory. The latest version of the Certutil.exe tool for managing certificates (available in Windows 10), allows you to download from Windows Update and save the actual root certificates list to the SST file. Certutil: Getting Latest Root Certificates from Windows Update A little later we will need the updroots.exe file. Thus, since then the utility has not been updated and cannot be used to install up-to-date certificates.
However, as you can see, these certificate files were created on Ap(almost a year before the end of official support of Windows XP). To delete/install a certificate, you can use the following commands: