I'm pretty sure I've got the right packages installed to test. But I only was able to look at the certificate module manager. For some reason my cacert access is not working anyway. Firefox is telling me that the algorithms are disabled for security reasons. But if I understand you correctly: The TW version from mozilla works on 42.3 correctly while the 42.3 version on TW and 42.3 does not, right? Both are built from the same sources and spec so a guess would be some miscompilation. Have you also switched all the NSS packages or just Firefox?