Since I have the whole thread no correct solution for the update of the Roots certificates and revoked certificates found, I hereby would like to offer a way to keep them up to date.
For the security of Windows XP after the last condition no official patches more for blocking div. Roots certificates and certificate update available.
For revoked Certificate Update "rvkroots.exe" Microsoft download (http://www.microsoft.com/download/details.aspx?id=41542), unzip to a folder (eg with WinRAR), in "rvkroots.inf" entry in the string VERSION should "5,0,2195,0" loud and in VER "005". The next step is download the "http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcert.sst" and paste the unzipped folder and replace older file. Then with e.g. (Create Self-Extracting Archive) WinRAR all files in the folder to an archive option SFX with the following comment:
TempMode Silent=1 Overwrite=1 Setup=Rundll32.exe advpack.dll,LaunchINFSection rvkroots.inf,DefaultInstall
pack and you have a current update for blocking unsafe Certificates!
For Root Certificate Update "rootsupd.exe" Microsoft download (http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/rootsupd.exe), unzip to a folder (eg with WinRAR), in "rootsupd.inf" entry in the string VERSION should "40,0,2195,0" loud and in VER "040" , In the next step,
"http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/updroots.sst" download and paste the unzipped folder and replace older files. Then with e.g. (Create Self-Extracting Archive) WinRAR all files in the folder to an archive option SFX with the following comment:
TempMode Silent=1 Overwrite=1 Setup=Rundll32.exe advpack.dll,LaunchINFSection rootsupd.inf,DefaultInstall
pack and you have a current root certificate update!
For all languages!
If you do approximately every 3 months.
To re-update extends the generated SFX files to open with WinRAR and drag to the archives newer downloads (.sst files) by drag and drop into it.
