...

/usr/share/crypto-policies/back-ends/DEFAULT/nss.config