Update to CKBI 2.5 from NSS 3.19.3 with legacy modifications
    This update adjusts the diff-from-upstream patch (which is a patch purely provided for documentation purposes).
    It shows a modification that was made as part of the 2.4 update (which in fact removed legacy treatment for one certificate, because upstream had reverted it to an earlier trusted state, as documented on the package wiki page).
    No changes to the legacy treatment were made in this 2.5 update.