Mozilla explicitly wants to have a system where the extension is uploaded to them for signing, unlike the Apple / MS Authenticode systems where the developer gets a certificate to sign locally.
https://wiki.mozilla.org/Addons/Extension_Signing (look for "not hosted")