MS-trusted-CAs is a set of batch and PHP scripts to automatically download every trusted CA certificates from Microsoft according to https://unmitigatedrisk.com/?p=259, and bundles them in a single PEM-formated file.
The batch script assumes you have wget, openssl and php.exe in your path.
The PHP script needs "allow_url_fopen = On" in your php.ini configuration file.
mscert.cmd
ms-cert.crt
-----BEGIN CERTIFICATE-----
MIID[...]
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIG[...]
-----END CERTIFICATE-----
[...]