Adding your own CA cert is simple, you just need to know where to add it in group policy! Check the picture below! Just go under the ‘Trusted Root Certification Authorities’ folder shown below and right click, then choose import. This way, all new computers on the domain will never get any cert errors.

Thanks dude, was googling a lot for this info. Really appreciate your sincere help
It is bad practice to edit the “Default Domain Policy”. Make a seperate one and apply it.