ssh-add adds private key identities to the authentication agent, ssh-agent. After loading a private key, ssh-add will try to load corresponding certificate information from the filename obtained by appending -cert.pub to the name of the private key file.