the moment the main points are already labored out, You will need to go to the repository of that Root CA and obtain (and validate the hash) of that certificate before downloading it. you need to overview the CP/CPS of https://ca-none.com/