Listing of Trusted Root CA in IE

This section provides a tutorial example on how to see the list of trusted root CA (Certificate Authorities) pre-installed in IE.

As learned earlier, the trust of the entire HTTPS Website PKI is based on certificates of trusted root CA (Certificate Authorities) pre-installed in the browser.

Before using the Microsoft browser IE on my computer to visit any HTTPS Websites, I want to see who are those trusted root CAs pre-installed in IE.

1. Run IE and click the "Tools (or Alt-X)" > "Internet Options" menu. The Internet Options dialog box shows up.

2. Click the "Content" tab and the "Certificates" button. The Certificates dialog box shows up.

3. Click the "Trusted Root Certification Authorities" tab. A list of about 65 pre-installed trusted root CA certificates shows up.

Expiration   Root CA

2020-05-30   AddTrust External CA Root
2025-05-12   Baltimore CyberTrust Root
2005-01-05   CAEAST.CMGI.COM
2003-11-20   CAEAST.CMGI.COM
2005-01-05   CAEAST.CMGI.COM
2003-11-20   CAEAST.CMGI.COM
2027-06-11   Certum CA
2029-12-31   Certum Trusted Network CA
2019-07-06   Class 2 Primary CA
2028-08-01   Class 3 Public Primary Certification Authority
2038-01-18   COMODO RSA Certification Authority
2028-05-08   COMODO RSA Code Signing CA
1999-12-30   Copyright (c) 1997 Microsoft Corp.
2031-11-09   DigiCert Assured ID Root CA
2031-11-09   DigiCert Global Root CA
2038-01-15   DigiCert Global Root G2
2031-11-09   DigiCert High Assurance EV Root CA
2021-09-30   DST Root CA X3
2029-11-05   D-TRUST Root Class 3 CA 2 2009
2026-11-27   Entrust Root Certification Authority
2030-12-07   Entrust Root Certification Authority - G2
2029-07-24   Entrust.net Certification Authority (2048)
2018-08-22   Equifax Secure Certificate Authority
2022-05-21   GeoTrust Global CA
2036-07-16   GeoTrust Primary Certification Authority
2038-01-18   GeoTrust Primary Certification Authority - G2
2037-12-01   GeoTrust Primary Certification Authority - G3
2022-08-08   Global Enterprise CA
2015-11-17   Global Enterprise CA
2027-09-19   Global Enterprise CA
2029-03-18   GlobalSign
2021-12-15   GlobalSign
2028-01-28   GlobalSign Root CA
2034-06-29   Go Daddy Class 2 Certification Authority
2037-12-31   Go Daddy Root Certificate Authority - G2
...

But in back in 2015, my IE 10 included about 400 pre-installed trusted root CA certificates. I don't know why IE removed so many of them.

Trusted Root CA Certificate                                Expiration

AAA Certificate Services                                     12/31/28
ABA.ECOM Root CA                                             07/09/09
AC Raiz Certicamara S.A.                                     04/02/30
AC1 RAIZ MTIN                                                11/03/19
ACCVRAIZ1                                                    12/31/30
ACEDICOM Root                                                04/13/28
ACNLB                                                        05/15/23
Actalis Authentication CA G1                                 06/25/22
AddTrust External CA Root                                    05/30/20
AdminCA-CD-T01                                               01/25/16
Admin-Root-CA                                                11/10/21
ADOCA02                                                      01/26/19
AffirmTrust Commercial                                       12/31/30
Agence Nationale de Certification Electronique               08/12/37
Alibaba.com Corporation Root CA                              02/19/16
America Online Root Certification Authority 1                11/19/37
ANCERT Certificados CGN                                      02/11/24
ANF Server CA                                                11/30/21
Application CA G2                                            03/31/16
Arge Daten Oesterreichische Gesellschaft fuer Datenschutz    02/12/09
ATHEX Root CA                                                10/17/30
Atos TrustedRoot 2011                                        12/31/30
Autoridad Certificadora Raiz de la Secretaria de Economia    05/08/25
Baltimore CyberTrust Root                                    05/12/25
Buypass Class 2 CA 1                                         10/13/16
CA DATEV BT 01                                               01/09/17
CA Disig                                                     03/21/16
CCA India 2007                                               07/04/15
Certeurope Root CA 2                                         03/27/37
CERTICAMARA S.A.                                             02/23/15
Certificado de la Clave Principal                            04/27/12
Certigna                                                     06/29/27
Certinomis - Autorite Racine                                 09/17/28
Certipost E-Trust Primary Normalised CA                      07/26/20
Certisign - Autoridade Certificadora - AC2                   06/26/18/
...

Table of Contents

 About This Book

 Introduction of PKI (Public Key Infrastructure)

 Introduction of HTTPS (Hypertext Transfer Protocol Secure)

 Using HTTPS with Google Chrome

 Using HTTPS with Mozilla Firefox

 Using HTTPS with Microsoft Edge

 Using HTTPS with Apple Safari

Using HTTPS with IE (Internet Explorer)

 Visiting "https" Website with IE

 Viewing Server Certificate Details in IE

 Viewing Server Certificate Chain in IE

 Installing Server Certificate Permanently in IE

 Viewing Certificates in Certificate Stores in IE

Listing of Trusted Root CA in IE

 Exporting Certificate to File from IE

 Saving Server Certificate to File with IE

 Deleting Certificates from IE

 IE Supporting Multiple Certificate Chains

 IE Reinstalling Root Certificates Automatically

 Windows Automatic Root Update Mechanism

 Android and Server Certificate

 iPhone and Server Certificate

 Windows Certificate Stores and Console

 RDP (Remote Desktop Protocol) and Server Certificate

 macOS Certificate Stores and Keychain Access

 Linux Certificate Stores and Tools

 Perl Scripts Communicating with HTTPS Servers

 PHP Scripts Communicating with HTTPS Servers

 Python Scripts Communicating with HTTPS Servers

 Java Programs Communicating with HTTPS Servers

 .NET Programs Communicating with HTTPS Servers

 CAcert.org - Root CA Offering Free Certificates

 PKI CA Administration - Issuing Certificates

 Comodo Free Personal Certificate

 Digital Signature - Microsoft Word

 Digital Signature - OpenOffice.org 3

 S/MIME and Email Security

 PKI (Public Key Infrastructure) Terminology

 Archived Tutorials

 References

 Full Version in PDF/EPUB