Fixing Windows installs that don't receive updates to their trusted roots

[rg305]

I don't really know which one he used.
It might be this one:

• Signed by ISRG Root X1: der, pem, txt