Prerequisites:

To add a certificate to an NSS database as a trusted CA capable of issuing client and server certificates, execute the commands below, replacing NSS_DIR with the correct value and CA_CERT_PATH with the path to the certificate file and CERTIFICATE_NICKNAME with a certificate nickname. If prompted for a password, enter the master password used to secure passwords in the application (e.g., Firefox).

NSS_DIR='NSS_DIR'
        
certutil \
    -A \
    -d "${NSS_DIR}" \
    -i 'CA_CERT_PATH' \
    -n 'CERTIFICATE_NICKNAME' \
    -t CT