Well you can look at the certificate store by running certmgr.msc, but it's a dangerous game - do you trust Go Daddy, COMODO or Symantec any more than you do Savitech? They have all at one point or another given reason to not even entrust them with organising a piss-up in a brewery.
Other applications like Firefox have their own independent root CA store.
Mmm. I think the brewery test is an unfair comparison. Our problem is not that the major CAs are hopeless. If they were hopeless we'd have abandoned PKIX years ago. Instead the problem is that they're good but not as good as we'd like.
We are looking for somebody who can run aforesaid event fifty times a year for the general public without anybody falling in any of the machinery. In hindsight drunk people in an industrial workplace was a mistake, and so we can and should demand they do their best to make it safe, but perfection just isn't to be expected.
