What are required root certificates for Windows 7 and other Windows systems? I was told to not touch these certificates.

Some root certificates are required and trusted in Windows 7, in Windows Vista, in Windows Server 2008 R2, and in Windows Server 2008. Here is why:

As part of a public key infrastructure (PKI) trust management procedure, some administrators may decide to remove trusted root certificates from a Windows-based domain, a Windows-based server, or a Windows-based client. However, these root certificates are required for the operating system to operate correctly. Because removal of the following certificates may limit functionality of the operating system or may cause the computer to fail, you should not remove them.

Required root certificates in Windows 7, in Windows Vista, in Windows Server 2008 R2, and in Windows Server 2008 - do not touch them:

Issued by - Expiration date - Friendly name 

Microsoft Root Authority - 12/31/2020 - Microsoft Root Authority
Thawte Timestamping CA - 12/31/2020 - Thawte Timestamping CA
Microsoft Root Certificate Authority - 5/9/2021 - Microsoft Root Certificate Authority

⇒General Information about Certificates on Windows

⇒⇒Windows Certificates Tutorials