[ultra2d]

I have not looked for an online tool, but you can download sigcheck [1] and run `sigcheck -tv` which will display "valid certificates not rooted to the Microsoft Certificate Trust List".

[1] https://technet.microsoft.com/en-us/sysinternals/bb897441