http://www.cacert.org/ has been jumping through Mozilla's hoops for years now, and no sign of being accepted. Shame, because they're certainly more secure than the typical "trusted" CA.

EDIT: Looks like CAcert withdrew their application until they get their internal audit out of the way: https://bugzilla.mozilla.org/show_bug.cgi?id=215243#c158