Copy CA file with extension `crt` into `/usr/local/share/ca-certificates/`. Call `update-ca-certificates` as root.