All fixing MFSA-2011-11, see http://blog.mozilla.com/security/2011/03/22/firefox-blocking-fraudulent-certificates/ and https://blog.torproject.org/blog/detecting-certificate-authority-compromises-and-web-browser-collusion