I am contemplating adding AD CA role to our server and using GPO to add a self signed, trusted certificate to all internal clients (to ease testing)...
Some of the related questions regarding this are:

* [How do I deploy an internal certificate authority?](https://serverfault.com/questions/12323/how-do-i-deploy-an-internal-certificate-authority)
* [In-house Trusted Certificate](https://serverfault.com/questions/143047/in-house-trusted-certificate)

My question is, will using GPO to "push" self signed cert only work for Internet Explorer or will it work for *any* browser from clients? Also, will it allow client trusts in case of non-browser applications (such as web service clients)?