Considering that mozilla is one of the founding members of Let's Encrypt, I think and hope that they are pretty competent in PKI.