Mozilla shipping SSL root certificate, has no idea how it got there