With respect to the security update in 16.8, are the Diginotar certificates that appear in Cert. Manager the one provided to correct/protect the issue by Mozilla or are they not meant to be there?