upgrade to 3.14.1 and enable our crude nss multi-cert patch