Note that NSS contains a classic certificate verification engine, which was originally written in C. The above statement refers to an external contribution tha

Note that NSS contains a classic certificate verification engine, which was originally written in C. The above statement refers to an external contribution that was added to NSS. It added a second validation engine to NSS, libpkix. It's true that the libpkix portion is very complicated code, but the above statement doesn't apply to NSS in general.