title: VeriSign Class 3 certificate not trusted by Windows?
body: <p>I distribute a Windows desktop app which has all executable files digitally signed by a Verisign Class 3 Code Signing certificate.  For the vast majority of users, this seems to work fine.</p>
  
  <p>However a small number of users report the certificate is invalid.  They say it comes up with the message <strong>"A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider"</strong>.  This corresponds to error code <code>CERT_E_UNTRUSTEDROOT (0x800B0109)</code>.  This has also been reported on a fully-updated Windows 7 machine.  So presumably my certificate is OK, but Windows sometimes doesn't trust VeriSign certificates.</p>
  
  <p>Why does Windows sometimes not trust VeriSign?  Is there anything I can add to my installer (also signed) which will tell Windows to trust the certificate?</p>