certutil -d sql:$HOME/.pki/nssdb -A -t C -n <cert-name> -i <certificate.pem>
-d sql:$HOME/.pki/nssdb specify database location
-A Add a certificate to the database. -D to delete
-t C Set the certificate trust attributes. C means trusted CA to issue server certs
-n <cert-name> Name of certificate to be used later with -D
-i <certificate.pem> Certificate file location