This test was failing because Firefox was displaying a download prompt rather than the page content, presumably because mumble mumble content-type sniffing. By explicitly setting a content-type, the test now passes.
This is a NixOS test for the security.pki options.