https://hg.mozilla.org/projects/nss/raw-file/tip/lib/ckfw/builtins/certdata.txt