at the time the small print have been labored out, you'll need to go to the repository of that Root CA and download (and verify the hash) of that certification just before downloading it. You should review the CP/CPS of https://ca-none.com/