MS-trusted-CAs is a set of batch and PHP scripts to automatically download every trusted CA certificates from Microsoft according to https://unmitigatedrisk.com/?p=259, and bundles them in a single PEM-formated file.

The batch script assumes you have wget, openssl and php.exe in your path.

The PHP script needs "allow_url_fopen = On" in your php.ini configuration file.

mscert.cmd

ms-cert.crt

-----BEGIN CERTIFICATE-----
MIID[...]
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIG[...]
-----END CERTIFICATE-----
[...]