Windows Certificate MMC snapin shows that there're two "root" certificate stores on Windows:
- Trusted Root Certification Authorities
- Third-Party Root Certification Authorities
I'm trying to setup mutual SSL for an application running in IIS and it looks like the client self-signed certificate must be added into either of the listed stores or otherwise IIS refuses to even pass the request to application code.
So to me they look identical. Both contain some certificates of well-known certificate authorities (such as VeriSign).
What's the difference between the two? Suppose I decide to import the self-signed client certificate into either of them - which do I prefer and why?