I’ll add my two cents - I actually know a little about this.
While these certs could have been installed specifically, they may also have been put there when the laptop was imaged.
We don’t know the details, but let’s say this laptop came from the DoD originally. The operating system and apps are installed together, along with all the certs typically needed in that department. Not saying he didn’t log into DoD DBs, but just having the certs without a password...
Oh, they have his password too? We’re screwed.
I was not aware that the DOD soled its laptops to the general public.