That's strange.
Who generated the certificate?
You may want to check the integrity of the certificate before it is decrypted (in case of corruption during transfer/install - but unlikely).
If you don't use the Windows store you may very well use an X.509 certificate or a PEM certificate format.