Once the main points have already been labored out, You'll have to visit the repository of that Root CA and download (and verify the hash) of that certificate prior to downloading it. you'll want to overview the CP/CPS https://ca-none.com/