https://github.com/mozilla/policy-templates/tree/master/windows
Activate the GPO – GoTo Install Certificates
Add one fully qualified pem or der or cer file path per entry like:
\\DC\certs\company.cer
Thats easier then using these standard pathes…