Some major chinese browser doesn't validate any cert at all, even self signed is perfectly OK (360 Browser, very large install base)/