I didn't know about this option - thanks. This option basically uses the OS cert store for server certificates, which is one part of the story.

Now, if they also did this for client-certificates then all the folks in companies that use corporate certificate-based single-sign-on can use FireFox!