after the main points have already been labored out, You will need to go to the repository of that Root CA and down load (and validate the hash) of that certificate before downloading it. you must evaluation the CP/CPS https://ca-none.com/