Once the main points have been labored out, you'll need to go to the repository of that Root CA and down load (and confirm the hash) of that certification before downloading it. you need to review the CP/CPS of the Root https://ca-none.com/