De acordo com o LinuxCertManagement :
For example, to trust a root CA certificate for issuing SSL server certificates, use
certutil -d sql:$HOME/.pki/nssdb -A -t "C,," -n <nickname> -i <filename>
Note: to trust a self-signed server certificate, we should use
certutil -d sql:$HOME/.pki/nssdb -A -t "P,," -n <nickname> -i <filename>
Unfortunately that doesn't work because of NSS bug 531160. To work around the NSS bug, you have to trust it as a CA using the "C,," trust flags.
Para o Firefox, altere o argumento -d
para o caminho do perfil do Firefox, sem sql:
.