Windows 7 Ultimate getting tons of CAPI2- 4107 errors in application event log.

Log Name:      Application

Source:        Microsoft-Windows-CAPI2

Date:          7/11/2010 11:57:04 AM

Event ID:      4107

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:    

Description:

Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />

    <EventID Qualifiers="0">4107</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x8080000000000000</Keywords>

    <TimeCreated SystemTime="2010-07-11T16:57:04.513600000Z" />

    <EventRecordID>3251</EventRecordID>

    <Correlation />

    <Execution ProcessID="1156" ThreadID="1192" />

    <Channel>Application</Channel>

    <Computer>Kronos</Computer>

    <Security />

  </System>

  <EventData>

    <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>

    <Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

</Data>

  </EventData>

</Event>

I started getting this error on July 11th at 11:57am CST.  I was doing nothing at the time other than browsing.  My computer is properly time syncing.  It appears that Microsoft is issuing a certificate with bad info, since downloading the cert myself and viewing it says that the certificate is not valid for the requested usage.  There are literally over a thousand of these errors now piled up but there seems to be no end in sight.  I tripped across them doing a weekly check of the logs.  I am experiencing no performance degradation or BSODs.  I ran "sfc /scannow" as admin and it found no problems.

The certificate is issued by Microsoft and signed by Microsoft, off of Microsoft servers.

Other places mention that the windows media player media server can cause this but their only fix is to disable the service.  Not kosher.