How to install subordinate CA certificate into keychain from Terminal?
Solution 1:
Since the subordinate CA's certificate is already "trusted" due to the root CA's cert being in the System Roots, you just need to use the add-certificates command, specifying the System keychain.
sudo security add-certificates -k /Library/Keychains/System.keychain your_cert_file