certutil -d sql:$HOME/.pki/nssdb -A -t C -n <cert-name> -i <certificate.pem>

    -d sql:$HOME/.pki/nssdb     specify database location
    -A                          Add a certificate to the database. -D to delete
    -t C                        Set the certificate trust attributes. C means trusted CA to issue server certs
    -n <cert-name>              Name of certificate to be used later with -D
    -i <certificate.pem>        Certificate file location