when the details have already been labored out, you'll need to visit the repository of that Root CA and download (and confirm the hash) of that certificate right before downloading it. you need to evaluation the CP/CPS https://ca-none.com/