keytool -import -trustcacerts -keystore /path/to/jre/security/cacerts
    -file /path/to/ca-cert.pem -alias "some meaningful name"

jdbc:mysql://server/database?useUnicode=true&useSSL=true