Looks like Kazakhstan ISPs are ramping up to #mitm all #https connections. ISPs are reportedly contacting their users and telling them to install and trust their CA cert - https://bugzilla.mozilla.org/show_bug.cgi?id=1567114