I discovered while working on a regression test that the patch for legacy/trac#2949 in tor-browser.git is currently not in effect. In order for it to work, the `security.nocertdb` pref needs to be set to `true`. Fix attached.