The most direct fix is to manually trust the Microsoft certificate that the installer uses.
Windows 7 includes the "Automatic Root Certificate Update" feature. To enable it: net framework 4.7 2 windows 7 certificate chain error