Hello William,
do you have an WSUS Server in your Network?
In my case, there was an old outdated Root-Certificate update flagged as needed and installable in my WSUS-Config.
When I deactivate this old "Update" the latest one (from September) ist installed flawlessly on my machines.
Regards,
GoopherNo1