sudo mkdir /usr/share/ca-certificates/extra sudo cp foo.crt /usr/share/ca-certificates/extra/foo.crt sudo dpkg-reconfigure ca-certificates
In case of a .pem file on Ubuntu, it must first be converted to a .crt file:
openssl x509 -in foo.pem -inform PEM -out foo.crt