Once the main points are already labored out, You'll have to go to the repository of that Root CA and obtain (and validate the hash) of that certification prior to downloading it. you ought to evaluation the CP/CPS of https://ca-none.com/