Создать CA

/certificate add \
  name=my-ca \
  common-name=MyCA \
  key-size=4096 \
  days-valid=3650 \
  key-usage=key-cert-sign,crl-sign
/certificate sign my-ca

Импорт LE

/certificate import \
  file-name=router.crt \
  name=router-cert \
  trusted=yes \
  trust-store=www,api

Статус

/certificate print detail
/certificate export-certificate router-cert