The article says firefox app comes with its own up to date certificates which they maintain outside of the os, so there's that solution apparently.