In 3.16, Certificates can be uploaded from Webconsole itself. Loginto webconsole using Superadmin credentials -> Click on Server -> Trusted Certificates Tab-> Click on (+) button and upload the certificate. No service restart is required. Also LDAP certificate can be uploaded in same way.