Use hg.mozilla.org rather than mxr.mozilla.org to get the latest cert bundle