Looks like this is an issue with nss 3.43. Firefox was build on that version, but nss 3.43 is still in [build].
Probably why I never saw this.....
EDIT:
New nss has moved, also moved is firefox 66.0.1, so issue should be resolved once your mirror has synced.