Your Windows operating system comes pre-installed with a Trusted Root Store. Your computer checks this local store to see if it has a copy of the "Microsoft Root Certificate Authority 2011" public key.

"A certificate chain... terminated in a root certificate which is not trusted," you may need to manually import it. Microsoft Learn Microsoft Root Certificate 2011.cer

| Error Message | Likely Cause | |---------------|---------------| | NET::ERR_CERT_AUTHORITY_INVALID | Root certificate missing or not trusted. | | The certificate chain was issued by an authority that is not trusted | Manually removed root; or corporate GPO blocking it. | | Revocation status of the root certificate could not be determined | OCSP/CDP network issue (rare for roots). |

This root does not directly issue end-entity certificates (e.g., for websites or users). Instead, it signs one or more intermediate CAs (e.g., Microsoft RSA TLS CA 01 ).