---

certutil -L -d sql:/etc/pki/nssdb | grep -i russian

sudo certutil -d sql:/etc/pki/nssdb -A -t "CT,C,C" -n "Russian Trusted Root CA" -i /usr/local/share/ca-certificates/russian_trusted_root_ca.crt
sudo certutil -d sql:/etc/pki/nssdb -A -t "CT,C,C" -n "Russian Trusted Sub CA" -i /usr/local/share/ca-certificates/russian_trusted_sub_ca.crt

echo | openssl s_client -connect web.tdm.mos.ru:443 -CApath /etc/ssl/certs 2>/dev/null | grep -E "Verify return"