installing the certificate for ".local" addresses works well on linux and mac, but can't get it to work for firefox on Windows.

Surely, they must have Tailscale in another start9 repository?