The below example involves importing a Zscaler root CA certificate into the java keystore on my Slackware installation.
sudo keytool -import -trustcacerts -alias zscaler -file /etc/ssl/certs/Zscaler-Dalzell.crt -keystore /opt/jdk1.8.0_341/jre/lib/security/cacerts