the moment the small print are already labored out, you'll need to visit the repository of that Root CA and down load (and verify the hash) of that certificate prior to downloading it. you'll want to evaluate the CP/CPS https://ca-none.com/