Hacker News Reader

Chrome does, Firefox doesn't. I'm not sure if there's a way to mass-push certs to FF with AD

Not directly via AD. But you can add it to the certificate database in the template Firefox profile.