CloudFlare's MITM activity is widely discussed in the Tor Project ticket. This bug is mentioned on this webpage: https://trac.torproject.org/projects/tor/ticket/24351 iceweasel should not support MITM, therefore I want you to delist Cloudflare certificate from SSL trust chain. And also update F-Droid's iceweasel :)