Roots stored in your browser. Use them to sign issued certificates.
Create your first private CA to start issuing certificates.