How to be sure laptop's trusted certificates are safe

I have a Windows 8.1 Lenovo laptop. The evil Superfish app and certificate have been removed. My laptop has 36 certificates in certmgr.msc current user\third-party root certification authorities\certificates.

Is there a way to know if a certificate might be malicious or compromised? Since certificates are so important to security, there should be a way for an admin to be sure that the trusted certificates on user PC are safe or not.