cert-install.sh

#!/bin/bash

# path to PEM or CRT file
IN="/path-to-cert/file.crt"

OUT="$(openssl x509 -inform PEM -subject_hash_old -in $IN | head -1).0"
cat $IN > $OUT
openssl x509 -inform PEM -text -in $IN -out /dev/null >> $OUT

# adb root
# adb shell mount -o remount,rw /system
# adb shell mount -o rw,remount,rw /system
adb remount

adb push $OUT /system/etc/security/cacerts/
adb shell chmod 644 /system/etc/security/cacerts/$OUT
adb reboot

rm $OUT