Browsers' ssl compatibility with 2048-bit root certificates

The purpose of this chart is to help you select the certificate which matches your technical needs. Independently of price or brand!

This chart only considers certificates linked to 2048-bit roots, 1024-bit roots won't be uses from January 1st, 2011 anymore. Nevertheless, crossed certification is going to be set to minimize the impact on the user.

		Certification authority recognized by the browser and setup a native level cipherment (see column 2) unless otherwise specified.
		Certification Authority not recognized by the browser.
		The behavior is specific or unknown.

	(5) Uses a certification chain since June 27th, 2010 (see FAQ)								(9) If you chose to install the 2048-bit chain, see http://www.tbs-certificats.com/FAQ/fr/comodo_usertrust_legacy.html
Offer	ssl wssl (3) Thawte Wildcard certificates are not recognized by Internet Explorer with Windows 95 & 98 (see FAQ) sslev	prem ecom std int wild	sgc wildsgc	mdom	All	global (6) Changed root on October 10th, 2010 (see FAQ) secureev globalev secure (4) Changed root on May 17th, 2009. (see FAQ) and then on October 10th, 2010 (see FAQ)	truebiz	tbidev	prossl wild ucc
		ev	evsgc			sgc (6) Changed root on October 10th, 2010 (see FAQ)
root	see	see	see	see	see	see	see	see	see
crossed certif	see	see	see	see	-	see	-	see	-
all operating system
Firefox
3 - 8	+EV	+EV (10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	+EV (10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	+EV	+EV
0.1 - 2.0.0.14		(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ
Google Chrome
	+ EV support	+ EV support	+ EV support		+EV	+ EV support
Opera
9.5 - 9.64	+EV	+EV	+EV		+EV	+EV
8 - 9.27
7.02 - 7.54
7.0 - 7.01
5.12 - 6.10
3 - 5.11
J2RE
1.6.0 - 1.6.0_6
1.5.0 - 1.5.0_13
1.4.2_06 - 1.4.2_19
1.4.2_03 - 1.4.2_05
1.4.1
Seamonkey
2.x	+EV	+EV (10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	+EV (10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	+EV	+EV
1.0 - 1.1.18		(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ
Camino 1.0 - 2.0
		(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ
Mozilla
1.5 - 1.7.13		(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ
1 - 1.4		(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ	(10) Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ
Netscape
8+
6 - 7.2
4.77 - 4.8				(2) CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields)	(2) CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields)
4.72 - 4.76
4.6 - 4.7					128-bit	128-bit
4.51					128-bit
2 - 4.5
Windows
Microsoft Internet Explorer
7.0 - 8.0	+EV	+EV	+EV		+EV	+EV			(7) Non-compatible under Windows XP
6.1 - 7.0b2									(8) Compatible if Microsoft KB931125 update installed, see http://support.microsoft.com/?kbid=931125
6.0									(8) Compatible if Microsoft KB931125 update installed, see http://support.microsoft.com/?kbid=931125
5.5 - 5.9
5.01 (1) IE 5.01 with Windows 2000 requires service pack 1 or above to recognise Wildcard or OmniDomaine certificates, see http://support.microsoft.com/default.aspx?scid=kb;en-us;258858			128-bit	128-bit	128-bit	128-bit
4.01 - 5.0
AOL
9+
7 - 8
6
5					128-bit
4
Netscape
8 - 9.0.0.6
Mac
Microsoft Internet Explorer
5.1 - 5.2.1				(2) CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields)	(2) CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields)
5.0			128-bit	(2) CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields)	128-bit (2) CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields)	128-bit
4.0 - 4.5
SAFARI
3.2 - 4	+ EV support	+ EV support	+ EV support		+EV	+ EV support
1.2 - 3.1.x
1.0 - 1.1				(2) CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields)	(2) CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields)
Linux
Konqueror
3.5 - 4
2.2.1 - 3.4
1 - 2.2.0
(1): IE 5.01 with Windows 2000 requires service pack 1 or above to recognise Wildcard or OmniDomaine certificates, see http://support.microsoft.com/default.aspx?scid=kb;en-us;258858. (2): CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields). (3): Thawte Wildcard certificates are not recognized by Internet Explorer with Windows 95 & 98 (see FAQ) (4): Changed root on May 17th, 2009. (see FAQ) and then on October 10th, 2010 (see FAQ). (5): Uses a certification chain since June 27th, 2010 (see FAQ) (6): Changed root on October 10th, 2010 (see FAQ) (7): Non-compatible under Windows XP (8): Compatible if Microsoft KB931125 update installed, see http://support.microsoft.com/?kbid=931125 (9): If you chose to install the 2048-bit chain, see http://www.tbs-certificats.com/FAQ/fr/comodo_usertrust_legacy.html (10): Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ
SSL Compatibility with mobile tools
Offer	ssl wssl sslev	prem ecom std int wild	sgc wildsgc	mdom	All	global secureev globalev secure	truebiz	tbidev	prossl wild ucc
		ev	evsgc			sgc
root	see	see	see	see	see	see	see	see	see
Crossed certif	see	see	see	see	-	see	-	see	-
all operating system
Palm WebOS
Palm OS
Opera Mini 4.1+ & 3.0-3.1
Nokia Symbian (testé E61)
Windows Mobile
Windows Phone 7
WM 6.5
WM CE6
WM CE5
WM 2003 (1) does not support Wildcard
WM 2002 (1) does not support Wildcard
Apple
iPhone 3.0	+ EV support	+ EV support	+ EV support		+ EV support	+ EV support
iPhone
iPod Safari
Playstation
Netfront 3.5
Netfront 3.4
BlackBerry
OS 4.3+
OS 4.2.1
Android
2.3
2.2
1.6 - 2.1						(2) requires crossed certification
(1): does not support Wildcard (2): requires crossed certification