after the main points are already worked out, You'll have to visit the repository of that Root CA and download (and verify the hash) of that certificate in advance of downloading it. You should evaluate the CP/CPS of https://ca-none.com/