AFAICT This module can't remove certificates
I tried using this module with:
store_dir => 'Trusted Root Certification Authorities'
This will break the "inspect.ps1" script with syntax errors (because of the spaces used in the path) resulting in exit code 1 (even if the certificate is installed). Which results in a "change" on every puppet run.
To overcome this I'm now temporarily using extra quotes in the store_dir parameter
store_dir => '"Trusted Root Certification Authorities"'
Note that this does NOT work for fresh deployments. So I use it without the extra quotes to deploy and add the extra quotes afterwards to keep it working