FWIW, tapping on .crt files in Chrome offers to open them with the certificate manager on Android, where it's then straightforward to install them. Unfortunately this also produces some very irritating (non-removable) notifications... >.<
...And I can't deny I was fetching the certificate from my PC across the room over HTTP, not HTTPS.
