Comment # 28 on bug 1221531 from Neike

My workaround:
Reset mozilla-nss and mozilla-nss-certs to version 3.97-lp155.2.1 from the
mozilla-Repo and set this variable:
export NSS_IGNORE_SYSTEM_POLICY=1

After that Fx works without problems.