Bug 1042889 (relanding with bustage fix), cannot override sec_error_ca_cert_invalid, r=dkeeler, a=bkerensa