I have multiple client certificates in Firefox. When I go to a site which requires a client certificate it pops up the selector for the client certificate. With Firefox 70 (I think) by default it chose a matching and valid client certificate. Now with Firefox 71 it seems to sort the client certificates by serial number and thus the one selected by default is the first one in the list, which is expired in my case. Thus, now each time I go to a site where I need a client cert I must manually pick the correct, valid certificate.

Doesn't looks like an improvement to me. Or is there a new config setting which I have missed?