export DOMAIN_NAME=<my-dtr-domain>

echo -n | openssl s_client -showcerts -connect itapregistry.a1.vary.redhat.com:443 2>/dev/null |sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' >> /etc/pki/ca-trust/source/anchors/$DOMAIN_NAME.crt

update-ca-trust

/bin/systemctl restart docker.service