Maybe it's the fact it's (still) a StartSSL cert?
[1] https://blog.mozilla.org/security/2016/10/24/distrusting-new...
Maybe it's the fact it's (still) a StartSSL cert?