as soon as the details have already been worked out, You will need to go to the repository of that Root CA and obtain (and confirm the hash) of that certification ahead of downloading it. it is best to critique the https://ca-none.com/