Option 1 — Download deploy script:
Option 2 — One-liner:
/usr/local/share/ca-certificates/
.crt
sudo update-ca-certificates
sudo openssl verify /etc/ssl/certs/<cert-hash>.pem