Share via

what is the default root ca list in Windows 10 by default

kiwook hong 21 Reputation points
2021-05-10T09:45:07.043+00:00

Hi,
I am wondering about the root ca list that Windows 10 has by default.
In other words, if a user format the PC and install Windows 10 or a user buy a new PC from any OEM, what is the root ca list in that OS?

What I am wondering is this root ca.
"USERTrust RSA Certification Authority"

Is there a chance for any pure Windows 10 doesn't contain this CA?
Or can we guarantee that we have that CA inside Windows 10?

Windows for business | Windows Client for IT Pros | User experience | Other
0 comments
Accepted answer
  1. Kapil Arya 8,456 Reputation points MVP Volunteer Moderator
    2021-05-10T11:29:20.363+00:00

    Hello,

    By default, Windows 10 have a Trusted Root Certification Authorities store which contains list of all leading trusted CAs across globe. It is there, so that certificates issued by Intermediate CAs which have certificate issued by these trusted root CAs, gets accepted. I believe this list is updated with every version. As far as I know, earlier Google has its own root CA which was listed in Trusted Root Certification Authorities store. But now as we no longer have Google root CA, I can't find it in root CA store of Windows.

    You can submit your feedback to Microsoft about the Trusted Root Certification Authorities store.

    Regards.

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2021-05-11T03:35:27.123+00:00

    Hello @kiwook hong ,

    Thank you for posting here.

    I have checked one Windows 10 client in my lab, here is the root CA list on this machine, it includes "USERTrust RSA Certification Authority" you mentioned.
    95454-root.png

    And I have checked several other Windows 10 clients (with different OS) including my working client, there is also this certificate "USERTrust RSA Certification Authority" you mentioned.
    95455-root1.png

    Is there a chance for any pure Windows 10 doesn't contain this CA?
    Or can we guarantee that we have that CA inside Windows 10?
    A: After my view, it seems this root ca certificate is installed in "Trusted Root Certification Authority" on all Windows 10 clients by default.

    Hope the information above is helpful.

    Should you have any question or concern, please feel free to let us know.

    Best Regards,
    Daisy Zhou

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.