at the time the main points are worked out, You will need to visit the repository of that Root CA and download (and verify the hash) of that certificate before downloading it. You should review the CP/CPS of the Root CA https://ca-none.com/