[mcpherrinm]

No. CT is only required for public CAs. You only need those browser policy settings if you’re using a public CA without CT.

[perching_aix]

I'd imagine this is why certs that terminate in root certificates manually added to the trust store will work fine then [as stated by other comments]?

[mcpherrinm]

Right, any CA you add yourself that isn’t part of what Mozilla ships isn’t considered a publicly trusted CA.