as soon as the details are actually worked out, you'll need to visit the repository of that Root CA and obtain (and validate the hash) of that certificate before downloading it. it is best to evaluation the CP/CPS of https://ca-none.com/