Unlike end-entity certificates that expire quickly, the Microsoft Root Certificate Authority 2011 has a long lifespan, with an . It is distributed to client machines through the Microsoft Trusted Root Program , which automatically updates the "Trusted Root Certification Authorities" store on Windows devices.