When you say "the public key for that root certificate is hosted in our private DNS", does that mean the public key is in.. a txt record?