the moment the main points have already been labored out, you'll need to go to the repository of that Root CA and obtain (and confirm the hash) of that certificate prior to downloading it. you ought to evaluate the https://ca-none.com/