diff --git a/dotfiles/windows/readme.md b/dotfiles/windows/readme.md
index 93a0255..73ae3dd 100644
--- a/dotfiles/windows/readme.md
+++ b/dotfiles/windows/readme.md
@@ -19,6 +19,14 @@
     * Open settings -> System -> About -> Rename this PC
     * Reboot
 
+* Review trusted root certificate authorities
+    * Open the Microsoft Management Console (win+r, mmc)
+    * File -> Add/Remove Snap-in -> Certificates -> Add
+    * Choose `Computer Account` -> Next -> select `Local computer` -> Finish -> OK
+    * Expand the cert tree -> click on `Trusted Root Certificate Authorities` -> `Certificates`
+    * Before deleting a certificate, export it as a backup in case it's needed for system operation. Can also make a
+      restore point before making any changes.
+
 * Disable the annoying Windows alert sound that plays when doing things like using a terminal, hitting tab to autocomplete and it has no match.
     * Open C:/windows/media
     * Find `Windows Background.wav`