You can use the
Certutil utility to list all Non-Default Root Certificate Settings.
Its a commandline tool, read more about it here: Windows & Unix.
The instructions below on how to run it against your Firefox Certificate Database and it's other uses can be found here.
The section on the Mozilla Wiki says the following:
There is currently no UI to list all built-in root certificates for
which you have overridden the default trust settings You can use the
certutil tool to list all the certificates in your personal database,
which includes built-in root certificates whose trust you have changed
along with added root certificates and many other kinds of
Run this command (doing it while the Mozilla application is running is
probably unsupported but does not seem to cause problems in practice):
certutil -d PROFILE_DIR -L
There is also a bug report to add the feature you are looking for:
Bug 545498 - Provide Capabilities to Detect and Manage Root Certificate Inconsistencies
In the meantime however, you could use the tool to extract your settings and compare your certificates against the list of CA certificates that are distributed with Mozilla software products, available in a spreadsheet or text file.