And in the basement, on a forgotten server, the file microsoft root certificate authority 2011.cer sat in a folder, its cryptographic heart finally still. It had done its job for fifteen years. It had vouched for the truth. And even in death, it had made one final promise possible.
Administrators can install microsoft root certificate authority 2011.cer using: microsoft root certificate authority 2011.cer
When analyzing the .cer file (DER or Base64 encoded X.509 certificate), the following technical attributes are standard for this specific root. Technical Report: microsoft root certificate authority 2011