From Googling it looks like an issue with how libcurl was built against NSS, but installing more NSS packages didn't seem to fix it