The 'debian:' prefix simply means the certificates were imported from
the system certificates installed in /etc/ssl/certs. It's not possible
to guess they come from Mozilla and change the prefix accordingly (and I
don't think that would make a significant difference anyway).
This is the maintainer address of Debian's Java team
debian-j...@lists.debian.org for discussions and questions.