How to install subordinate CA certificate into keychain from Terminal?
Since the subordinate CA's certificate is already "trusted" due to the root CA's cert being in the System Roots, you just need to use the add-certificates command, specifying the System keychain.

sudo security add-certificates -k /Library/Keychains/System.keychain your_cert_file