It took 3 months to get their customers transferred over to this new cert. https://bugzilla.mozilla.org/show_bug.cgi?id=622589 I wonder if the CA was compromised since earlier this year, or if it's more recent?