To install as a root certificate on:
sudo cp ZscalerRootCertificate-2048-SHA256.crt /etc/pki/ca-trust/source/anchors sudo update-ca-trust extract
That gets the ability to use firefox,wget, and to install docker-ce.
sudo cp ZscalerRootCertificate-2048-SHA256.crt /usr/local/share/ca-certificates/ sudo update-ca-certificate
That gets firefox and wget working.