Look through the alphabetical list for .
certutil -dump "Microsoft Root Certificate Authority 2011.cer" microsoft root certificate authority 2011.cer