librewolf startup connections

This is rather a question than an issue, i am sure the creators of librewolf are monitoring any privacy threatening developements regarding mozilla firefox.

With that said, libre wolf on startup connects to two domains: r3.o.lencr.org push.services.mozilla.com

The portable version to four: r3.o.lencr.org push.services.mozilla.com shavar.services.mozilla.com ocsp.digicert.com

Why does the portable version have two more connections than the other? I use on both only ublock. I have the ability to block these domains via the windows hosts file or firewall, but most likely it wont be necessary otherwise librewolf would have already done so. These domains must be update / security releated? Seemingly librewolf already eliminated the threat of incoming.telemetry.mozilla.org

I wanted to ask about the startup connections after reading this report: (push services is mentioned here) https://www.scss.tcd.ie/Doug.Leith/pubs/browser_privacy.pdf