UpdateRootCertificates

Downloads the latest root certificate lists from Microsoft and installs them on your computer.

Optionally you can specify the -Force parameter to skip the 10 second wait before continuing execution.

This program updates the Certificate Trust Lists on your computer. Root certificate lists have the hashes of the certificates and don't contain the 'actual' certificates themselves, HOWEVER, this is because when a Windows machine encounters a new certificate that is on the trust list that it hasn't seen before, it will automatically download the needed certificate behind-the-scenes (on demand). The reason we use Certificate Trust Lists instead of the 'actual' certificates is because Windows Update is required to generate the certificates using certutil. If Windows Update is enabled and in use, that means your root certificates would already be up-to-date as it handles root certificate updates automatically. Using this method, we're able to achieve our goal of having the latest root certificates without relying on Windows Update.

Its GUI counterpart is available at https://github.com/asheroto/Root-Certificate-Updater