certutil -repairstore my <certificate serial number>