Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates

After a fresh installation of Windows 10, this registry key stores the following five subkeys:

• CA
• Disallowed
• Root
• trust
• TrustedPeople

Each of these subkeys, in turn, store the three subkeys

• Certificates
• CRLs
• CTLs

All of these subkeys are empty after a fresh installation of Windows 10.