I now tested Firefox from mozilla built for 42.3 on Tumbleweed and it seems to work. It says "standby" but I wasn't able to test with a real client certificate. The CACert testcase still fails for me but this might have different reasons still.