They're stored as binary blobs in the registry.
User specific are HKEY_CURRENT_USER\SOFTWARE\Microsoft\SystemCertificates
> Group Name > Certificates
Localmachine are HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates
> Group Name > Certificates