sudo trust anchor --store some_root_ca.pem
If this does not work, do it manually:
*.pem
*.crt
/etc/ca-certificates/trust-source/anchors/
update-ca-trust
TBD