On the Mozilla Support website https://support.mozilla.org/en-US/kb/root-certificate-expiration, you can find this announcement:
In terms of Window 7 computers, this means that users of Firefox 115 ESR should update their browser at least to version 115.13 ESR to fix certificate problems. As far as I know, the nssckbi.dll file inside the Firefox programme folder defines the default set of trusted root certificates. The more recent this nssckbi.dll file, the more recent Firefox's default root certificates.