As root:

# mkdir -p /usr/local/share/ca-certificates
# cp CA.crt /usr/local/share/ca-certificates/CA.crt
# update-ca-certificates
  
Updating certificates in /etc/ssl/certs... 2 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d....done.