During our last release of Firefox within our organisation, we added the security.enterprise_roots.enabled into our mozilla.cfg to finally import our group policy deployed certificates, but were seeing some off behaviour with this. Before enabling the setting we cleared the cert8 and cert9 db files so we have a clean cert store, but when we enable the security.enterprise_roots.enabled value, we only seem to see one of our root authority certs appear, even though we have several in the local machine store. has anyone seen this behaviour before, or have any idea why firefox only seems to pull certain certificates into its local store.