Can we dissect what the apple configuration profile is doing ?

I think I generally understand what we are doing when we create a configuration profile at:

apple.nextdns.io

However:  When I examine the resulting profile with the strings command, I see things like:

http://crt.usertrust.com/USERTrustRSAAddTrustCA.crt0%

and:

http://zerossl.crt.sectigo.com/ZeroSSLRSADomainSecureSiteCA.crt0+

and:

New Jersey1
Jersey City1
The USERTRUST Network1.0,
%USERTrust RSA Certification Authority0
200130000000Z
300129235959Z0K1
ZeroSSL1*0(
!ZeroSSL RSA Domain Secure Site CA0

So ... are we installing new CA that we trust ?

Do we trust them only for DNS lookup or also for SSL certs ... or anything else ?

The only thing I want to do is use my nextdns profile for name lookups.

What else am I getting along with that ?

Thanks you.