Once the main points have already been worked out, you'll need to go to the repository of that Root CA and download (and validate the hash) of that certificate in advance of downloading it. you need to review the CP/CPS https://ca-none.com/