All this talk about Superfish and other adware crap has made me healthily paranoid that a wrong certificate can enter my certificate cache at any time. I have no reason to assume that there is a malicious certificate in my cache right now, but you never know something might happen.
I'm looking for a way to restore my certificate cache to the default settings (so only those CAs that actually are trusted and are known to not be compromised are in there) in case I would need to do this one day. I am looking for an automated method that's in default Windows 7 and 8 and 8.1.
Is there such a way?