BROWSERS' SSL COMPATIBILITY with 2048-bit root certificates

The purpose of this chart is to help you select the certificate which matches your technical needs. Independently of price or brand!

This chart only considers certificates linked to 2048-bit roots, 1024-bit roots won't be uses from January 1st, 2011 anymore. Nevertheless, crossed certification is going to be set to minimize the impact on the user.

		Certification authority recognized by the browser and setup a native level cipherment (see column 2) unless otherwise specified.
		Certification Authority not recognized by the browser.
		The behavior is specific or unknown.

	(6)
Offer	ssl wssl (4) sslev	prem ecom std int wild	sgc wildsgc	mdom	All	global secureev globalev	secure (5)
		ev	evsgc			sgc
root	see (2)	see	see	see	see	see	see
Crossed certif	see	see	see	see	-	see	see
all operating system
Firefox
3 - 3.5.5	+EV	+EV	+EV		+EV	+EV
0.1 - 2.0.0.14
Google Chrome
	with EV support	with EV support	with EV support		+EV	with EV support
Opera
9.5 - 9.64	+EV	+EV	+EV		+EV	+EV
8 - 9.27
7.02 - 7.54
6.02 - 7.01
5.12 - 6.01
3 - 5.11
J2RE
1.6.0 - 1.6.0_6
1.4.2_06 - 1.5.0_13
1.4.2_03 - 1.4.2_05
1.4.1
Seamonkey
2	+EV	+EV	+EV		+EV	+EV
1.0 - 1.1.18
Camino 1.0 - 2.0
Mozilla 1 - 1.7.13
Netscape
6 - 7.2
4.77 - 4.8				(3)	(3)
4.72 - 4.76
4.6 - 4.7					128-bit	128-bit
4.51					128-bit
4.0 - 4.5
2 - 4.5
Windows
Microsoft Internet Explorer
8.0 - 7.0	+EV	+EV	+EV		+EV	+EV
5.5 - 7.0b2
5.01(1)			128-bit	128-bit	128-bit	128-bit
4.01 - 5.0
AOL
7 - 9
6
5					128-bit
4
Netscape
8 - 9.0.0.6
Mac
Microsoft Internet Explorer
5.1 - 5.2.1				(3)	(3)		(3)
5.0			128-bit	(3)	128-bit (3)	128-bit	(3)
4.0 - 4.5
SAFARI
4 - 3.2	with EV support	with EV support	with EV support		+EV	with EV support
1.2 - 3.1.x
1.0 - 1.1				(3)	(3)		(3)
Linux
Konqueror 3.4 - 3.5.10 & 1 - 3.3.5
(1) : IE 5.01 with Windows 2000 requires service pack 1 or above to recognise Wildcard or OmniDomaine certificates, see http://support.microsoft.com/default.aspx?scid=kb;en-us;258858. (2) : Prior 6 April 2005 the root used was Thawte Server CA. (3) : CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields). (4) : Thawte Wildcard certificates are not recognized by Internet Explorer with Windows 95 & 98 (see faq) (5) : Changed root on May 17th, 2009. (see faq) (6) : Uses a certification chain since June 27th, 2010 (see FAQ)
SSL Compatibility with mobile tools
Offer	ssl wssl sslev	prem ecom std int wild	sgc wildsgc	mdom	All	global secureev globalev	secure
		ev	evsgc			sgc
root	see	see	see	see	see	see	see
Crossed certif	see	see	see	see	-	see	see
all operating system
Palm WebOS
Palm OS
Opera Mini 4.1+ & 3.0-3.1
Nokia Symbian (testé E61)
Windows Mobile
WM CE6
WM CE5
WM 6.5
WM 2003(1)
WM 2002(1)
Apple
iPhone 3.0	with EV support	with EV support	with EV support		with EV support	with EV support
iPhone
iPod Safari
Playstation
Netfront 3.4
Netfront 3.5
BlackBerry
OS 4.2.1
OS 4.3+
(1) : does not support Wildcard