Comment by tech234a

Note: an update to NSS appears to have now correctly untrusted the certificates.