keytool -import -trustcacerts -file /etc/pki/some-ca.crt -keystore /usr/java/jdk/jre/lib/security/cacerts
default password for Oracle jdk changeme
java -XX:+PrintFlagsFinal -version note that names are used instead of commandline parameters, like MaxHeapSize
java -XX:+PrintCommandLineFlags - to see what java runs with as default