CTLInfo can examine the full list of all windows root certificates.

Windows checks for trusted CTL updates once a week while untrusted CTL is checked once a day. A CTL is a predefined list of items signed by a trusted entity. A CTL is a list of hashes of certificates or a list of file names. All the items in the list are authenticated and approved by a trusted signing entity.

Windows currently trusts 374 root certificates, but the Certificate Manager only displays a subset. Enter CTLInfo.

CTLInfo is portable and once executed provides shows all your Trusted and Untrusted CTL information side-by-side:

Certificates

CTL raw file size

SequenceNumber

SignerExpiration

Contents last modified

Last Auto Update check

When available, you can also force an update check as well.

Clicking on details will bring up an entire list of all Trusted and Untrusted CTL details including Subject ID and Friendly Name.