Windows 10: Why is Microsoft installing Microsoft Programs that have expired digital certificates?

Sumi1962 · Jun 16, 2023

Windows 11 22H2 22621.1848I know a year or so ago there was a problem with Expired Digital Certificates crashing programs etc.I just found in my C drive under Windows Defender that all the applications within have expired digital certificates.Could this be a reason why so many people are having problems?

:)

Le Boule · Jun 16, 2023

Expired Microsoft Timestamp Root Certificate

Hi,

Out organization has Server 2012R2 Domain Controllers. We have been been getting dinged by Retina scans for some expired Certificates, among them Microsoft Timestamp Root, and Microsoft Authenticode(tm) Root. Some of them expired in 1999. Can these certificates
be renewed or deleted without breaking something?

Thanks.

Click to expand...

Suggest you try the Technet Forum if you need assistance with a server issue.

Technet forums

Regards...

stratmajik · Jun 16, 2023

Expired Microsoft Timestamp Root Certificate

Hi,

Out organization has Server 2012R2 Domain Controllers. We have been been getting dinged by Retina scans for some expired Certificates, among them Microsoft Timestamp Root, and Microsoft Authenticode(tm) Root. Some of them expired in 1999. Can these certificates
be renewed or deleted without breaking something?

Thanks.

Brink · Jun 16, 2023

Microsoft updates Trusted Root Certificate Program

At Microsoft, we are continuously working to deliver on our commitment to the security of our customers and their ecosystems. A core component of our strategy to inform Windows users about the safety of the websites, apps and software they’re accessing online is built into the Microsoft Trusted Root Certificate Program. This program takes root certificates supplied by authorized Certificate Authorities (CAs) around the world and ships them to your device to tell it which programs, apps and websites are trusted by Microsoft.

Our efforts to provide a seamless and secure experience usually take place in the background, but today, we want to tell you about some changes we have made to this program. These crucial modifications will help us better guard against evolving threats affecting websites and the apps ecosystem, but they may impact a small set of customers who have certificates from affected partners.

This past spring, we began engaging with Certificate Authorities (CA) to solicit feedback and talk about upcoming changes to our Trusted Root Certificate Program. Among other things, the changes included more stringent technical and auditing requirements. The final program changes were published in June 2015. Since then, we have been working, directly and through community forums, to help our partners understand and comply with the new program requirements.

Through this effort, we identified a few partners who will no longer participate in the program, either because they have chosen to leave voluntarily or because they will not be in compliance with the new requirements. We’ve published a complete list of Certificate Authorities below that are out of compliance or voluntarily chose to leave the program and will have their roots removed from the Trusted Root CA Store in January 2016. We encourage all owners of digital certificates currently trusted by Microsoft to review the list and take action as necessary.

The certificate-dependent services you manage will be impacted if the certificates you use chain up to a root certificate Microsoft removes from the store. Though the actual screens and text vary depending on which browser a customer is using, here’s what will usually happen:

If you use one of these certificates to secure connections to your server over https, when a customer attempts to navigate to your site, that customer will see a message that there is a problem with the security certificate.

If you use one of these certificates to sign software, when a customer attempts to install that software on a Windows operating system, Windows will display a warning that the publisher may not be trusted. In either case, the customer may choose to continue.

We strongly encourage all owners of digital certificates currently trusted by Microsoft to review the below list and investigate whether their certificates are associated with any of the roots we will be removing as part of the update. If you use a certificate that was issued by one of these companies, we strongly recommend that you obtain a replacement certificate from another program provider. The list of all providers is located at List of Participants - Microsoft Trusted Root Program.

With Windows 10 we will continue to work hard to provide you with safer experiences you expect from Windows, keeping you in control and helping you do great things.

Certificate Authorities to be removed in January 2016

[table][tr][td]CA [/td] [td]Root Name [/td] [td]SHA1 Thumbprint[/td] [/tr] [tr][td]Certigna[/td] [td]Certigna[/td] [td]B12E13634586A46F1AB2606837582DC4ACFD9497[/td] [/tr] [tr][td]Ceska Posta[/td] [td]PostSignum Root QCA 2[/td] [td]A0F8DB3F0BF417693B282EB74A6AD86DF9D448A3[/td] [/tr] [tr][td]CyberTrust[/td] [td]Japan Certification Services, Inc. SecureSign RootCA1[/td] [td]CABB51672400588E6419F1D40878D0403AA20264[/td] [/tr] [tr][td]CyberTrust[/td] [td]Japan Certification Services, Inc. SecureSign RootCA2[/td] [td]00EA522C8A9C06AA3ECCE0B4FA6CDC21D92E8099[/td] [/tr] [tr][td]CyberTrust[/td] [td]Japan Certification Services, Inc. SecureSign RootCA3[/td] [td]8EB03FC3CF7BB292866268B751223DB5103405CB[/td] [/tr] [tr][td]DanID[/td] [td]DanID[/td] [td]8781C25A96BDC2FB4C65064FF9390B26048A0E01[/td] [/tr] [tr][td]E-Certchile[/td] [td]E-Certchile Root CA[/td] [td]C18211328A92B3B23809B9B5E2740A07FB12EB5E[/td] [/tr] [tr][td]e-Tugra[/td] [td]EBG Elektronik Sertifika Hizmet Saglayicisi[/td] [td]8C96BAEBDD2B070748EE303266A0F3986E7CAE58[/td] [/tr] [tr][td]e-Tugra[/td] [td]E-Tugra Certification Authority[/td] [td]51C6E70849066EF392D45CA00D6DA3628FC35239[/td] [/tr] [tr][td]LuxTrust[/td] [td]LuxTrust Global Root CA[/td] [td]C93C34EA90D9130C0F03004B98BD8B3570915611[/td] [/tr] [tr][td]Nova Ljubljanska[/td] [td]NLB Nova Ljubljanska Banka d.d. Ljubljana[/td] [td]0456F23D1E9C43AECB0D807F1C0647551A05F456[/td] [/tr] [tr][td]Post.Trust[/td] [td]Post.Trust Root CA[/td] [td]C4674DDC6CE2967FF9C92E072EF8E8A7FBD6A131[/td] [/tr] [tr][td]Secom[/td] [td]SECOM Trust Systems Co Ltd.[/td] [td]36B12B49F9819ED74C9EBC380FC6568F5DACB2F7[/td] [/tr] [tr][td]Secom[/td] [td]SECOM Trust Systems CO LTD[/td] [td]5F3B8CF2F810B37D78B4CEEC1919C37334B9C774[/td] [/tr] [tr][td]Secom[/td] [td]SECOM Trust Systems CO LTD[/td] [td]FEB8C432DCF9769ACEAE3DD8908FFD288665647D[/td] [/tr] [tr][td]Serasa[/td] [td]Serasa Certificate Authority I[/td] [td]A7F8390BA57705096FD36941D42E7198C6D4D9D5[/td] [/tr] [tr][td]Serasa[/td] [td]Serasa Certificate Authority II[/td] [td]31E2C52CE1089BEFFDDADB26DD7C782EBC4037BD[/td] [/tr] [tr][td]Serasa[/td] [td]Serasa Certificate Authority III[/td] [td]9ED18028FB1E8A9701480A7890A59ACD73DFF871[/td] [/tr] [tr][td]Wells Fargo[/td] [td]WellsSecure Public Certificate Authority[/td] [td]E7B4F69D61EC9069DB7E90A7401A3CF47D4FE8EE[/td] [/tr] [tr][td]Wells Fargo[/td] [td]WellsSecure Public Root Certification Authority 01 G2[/td] [td]B42C86C957FD39200C45BBE376C08CD0F4D586DB[/td] [/tr] [/table]

How to determine your digital certificates

If you are unsure of how to determine the root of your digital certificates, I have included some guidance, by browser, below. For more information on the program itself, visit Program Requirements - Microsoft Trusted Root Program.

Microsoft Edge

Navigate to a web page that uses your certificate.

Click the Lock icon (in the web address field); the company under “Website Identification” is the company that owns the root.

Internet Explorer

Navigate to a web page that uses your certificate.

Click the Lock icon (in the web address field).

Click View Certificates then Certification Path.

View the certificate name at the top of the Certificate Path.

Chrome

Navigate to a web page that uses your certificate.

Click the Lock icon (in the web address field).

Click Connection then Certificate Information.

Click Certification Path.

View the certificate name at the top of the Certificate Path.

Firefox

Navigate to a web page that uses your certificate.

Click the Lock icon (in the web address field) then click the arrow on the right.

Click More Information then View Certificate.

Click Details.

View the certificate name at the top of the Certificate Path.

Aaron Kornblum Enterprise & Security Group Program Manager, Governance, Risk Management & Compliance
Click to expand...

Source: Microsoft updates Trusted Root Certificate Program to reinforce trust in the Internet | Microsoft Malware Protection Center

Windows 10: Why is Microsoft installing Microsoft Programs that have expired digital certificates?

Why is Microsoft installing Microsoft Programs that have expired digital certificates?

Why is Microsoft installing Microsoft Programs that have expired digital certificates?

Why is Microsoft installing Microsoft Programs that have expired digital certificates?

Why is Microsoft installing Microsoft Programs that have expired digital certificates? - Similar Threads - Why Microsoft installing

Why is Microsoft installing Microsoft Programs that have expired digital certificates?

Why is Microsoft Installing Programs with Expired Certificates?

Why is Microsoft Installing Programs with Expired Certificates?

why was the great program Microsoft digital image discontinued?

why was the great program Microsoft digital image discontinued?

Expired certificate

Expired certificate

Expired certificate

Microsoft Windows Certificate Expired?