Such a problem with Mozilla::CA should result in "certificate verify failed" rather than just the generic "can't connect" error. Here's what I see when I force that (host redacted):

Error GETing https://HOST/: Can't connect to HOST:443 (certificate verify failed)

Note that this isn't on MS Windows.