at the time the small print have been labored out, You will need to go to the repository of that Root CA and down load (and confirm the hash) of that certificate before downloading it. it is best to evaluation the https://ca-none.com/