I am unable to determine the physical store that a root certificate is located. the LocalMachine\My\Root contains several physical stores including Registry, Third-Party, Group Policy, Enterprise and Smart Card. I have two certificates with the same serial and thumbprint that appear in the Root store. They are in different physical stores, and I want to delete the one in the Enterprise Store. When I use the below command, the only difference between the 2 outputs is the Handle. I don't mind using the Handle as the differentiating factor, but I don't know how to do that.
$x = Get-ChildItem -Path Cert:\Localmachine\* -recurse | where {$_.Thumbprint -eq "59741974EF379804E416D3F49AAE176D630820EF"}
Question: How do I tell which certificate is in which Physical Store?