Windows 10: Microsoft certificate trust list publisher not valid for the selected purpose error causing...

Hi all, I'm not super experienced with the technical details of it and I really hope this is the right place for it, but for some reason I'm having issues with validating certificates on my PC. I only really learned what a certificate was because of this issue. At first I hadn't changed anything and was getting an error with R3 certs I think? because it had expired, but I have been unable to connect to windows update which I thought would fix it, I believe I'm on the latest update anyway 21H2. After looking on some forums and reading some documentation I replaced the cert with the updated

:)

 

N8 certificates not trusted/don't match the name

Well I worked out for myself how to verify the certificates are genuine:

• Using a desktop computer
• Go to the page with the certificates
• Select a certificate
• It will say either:
  • Certificate already exists - this confirms that the certificate on the website matches one already in your browser, which we already trust, therefore the certificate on the website is trustworthy
  • Asks if you want to install the certificate, DON'T.
    • First view the certificate details.
    • Copy the certificate serial number or SHA1/SHA256/MD5/etc hash
    • Paste this into a search engine
    • If another website that you trust lists the certificate, e.g. your phone manufacturer or another trusted website (preferably a secure website, therefore you have confidence the website is genuine), then you can trust the certificate
    • If no trustworthy sites are returned in the search then try another hash or serial number
    • If you can't find any trustworthy sites listing the certificate then I suggest you don't trust it.
• Finally, if you decide you trust a certificate then you can download and install on your phone.

 

Microsoft updates Trusted Root Certificate Program

Source: Microsoft updates Trusted Root Certificate Program to reinforce trust in the Internet | Microsoft Malware Protection Center

 

'Update Trusted Microsoft Certificates' -- How To Do It?

Hi Paul,

I suggest you to follow the below and check if it helps.

For Microsoft Edge:

• Navigate to a web page that uses your certificate.
• Click the Lock icon (in the web address field); the company under “Website Identification” is the company that owns the root.

For Internet Explorer:

• Navigate to a web page that uses your certificate.
• Click the Lock icon (in the web address field).
• Click View Certificates then Certification Path.
• View the certificate name at the top of the Certificate Path.

Hope it helps. Update us the status of updating the Trusted Microsoft Certificates for further assistance.

Thank you.