openssl x509 -in  ca.crt --text

FQDN=ideapad.local
sscg -q                                                             \
     --cert-file           /etc/pki/tls/certs/localhost.crt         \
     --cert-key-file       /etc/pki/tls/private/localhost.key       \
     --ca-file             /etc/pki/tls/certs/localhost-ca.crt      \
     --hostname            $FQDN                                    \
     --email               root@$FQDN

cp /etc/pki/tls/certs/localhost-ca.crt /etc/pki/ca-trust/source/anchors/localhost-ca.crt
update-ca-trust