The purpose of this chart is to help you select the SSL certificate which matches your technical needs. Independently of price or brand!
This chart only considers SHA1 certificates linked to 2048-bit roots, 1024-bit roots won't be uses from January 1st, 2011 anymore. Nevertheless, crossed certification is going to be set to minimize the impact on the user.
Certification authority recognized by the browser and setup a native level cipherment unless otherwise specified.Thawte | TBS X509 | GlobalSign | Symantec | Geotrust | ||||
---|---|---|---|---|---|---|---|---|
Offer |
ssl
wssl
sslev |
prem ecom std int wild |
sgc wildsgc |
mdom | All |
global
secureev globalev vswild secure |
truebiz |
tbidev |
Comodo | Thawte | |||||||
ev prossl wild ucc |
evsgc | sgc | ||||||
root | see |
see | see | see | see | see | see | see |
Crossed certif | see | see | see | see | - | see | - | see |
compatibility | TEST → | TEST → | TEST → | TEST → | ||||
all operating system | ||||||||
Firefox | ||||||||
15+ | +EV | +EV | +EV | +EV | +EV | +EV | ||
3.5 - 14 | +EV | +EV | +EV | +EV | +EV | +EV | ||
3.0.2 - 3.4 | +EV | +EV | +EV | +EV | +EV | +EV | ||
3 - 3.0.1 | +EV | +EV | +EV | +EV | +EV | |||
1.5 - 2.0.0.14 | ||||||||
0.1 - 1.0.8 | ||||||||
display / hide | ||||||||
Google Chrome | ||||||||
+EV | +EV | +EV | +EV | +EV | +EV | |||
Opera | ||||||||
9.5 - 12 | +EV | +EV | +EV | +EV | +EV | +EV | ||
9.26 - 9.27 | ||||||||
9 - 9.25 | ||||||||
8 - 8.54 | ||||||||
7.02 - 7.54 | ||||||||
7.0 - 7.01 | ||||||||
5.12 - 6.10 | ||||||||
3 - 5.11 | ||||||||
display / hide | ||||||||
J2RE | ||||||||
1.6.0 - 1.7 | ||||||||
1.5.0 - 1.5.0_13 | ||||||||
1.4.2_06 - 1.4.2_19 | ||||||||
1.4.2_03 - 1.4.2_05 | ||||||||
1.4.1 | ||||||||
display / hide | ||||||||
Seamonkey | ||||||||
2.0 - 2.17 | +EV | +EV | +EV | +EV | +EV | +EV | ||
1.1.18 | ||||||||
1.0 - 1.1.17 | ||||||||
display / hide | ||||||||
Camino | ||||||||
2.0+ | ||||||||
1.6.9 - 1.6.11 | ||||||||
1.0 - 1.6.8 | ||||||||
display / hide | ||||||||
Mozilla | ||||||||
1.5 - 1.7.13 | ||||||||
1 - 1.4 | ||||||||
display / hide | ||||||||
Netscape | ||||||||
8+ | ||||||||
7.1 - 7.2 | ||||||||
6 - 7.0.2 | ||||||||
4.77 - 4.8 |
|
|||||||
4.72 - 4.76 | ||||||||
4.6 - 4.7 | 128-bit | |||||||
4.51 | ||||||||
2 - 4.5 | ||||||||
display / hide | ||||||||
Windows | ||||||||
Microsoft Internet Explorer | ||||||||
Edge | +EV | +EV | +EV | +EV | +EV | +EV | ||
7.0 - 11.0 | +EV | +EV | +EV | +EV | +EV | +EV | ||
6.0 - 7.0b2 | ||||||||
5.5 - 5.6 | ||||||||
5.01
|
128-bit | 128-bit | 128-bit | |||||
4.01 - 5.0 | ||||||||
display / hide | ||||||||
Netscape | ||||||||
8 - 9.0.0.6 | ||||||||
Mac | ||||||||
Microsoft Internet Explorer | ||||||||
5.1 - 5.2.1 |
|
|||||||
5.0 | 128-bit |
|
128-bit | |||||
4.0 - 4.5 | ||||||||
display / hide | ||||||||
SAFARI | ||||||||
3.2+ | +EV | +EV | +EV | +EV | +EV | +EV | ||
3.0 - 3.1.2 | ||||||||
1.2 - 2.0.4 | ||||||||
1.0 - 1.1 |
|
|||||||
display / hide | ||||||||
Linux | ||||||||
CA-Certificates | ||||||||
20080411+ | ||||||||
20050518 - 20070303 | ||||||||
20031007 - 20040809 | ||||||||
display / hide | ||||||||
(1): IE 5.01 with Windows 2000 requires service pack 1 or above to recognise Wildcard or OmniDomaine certificates, see http://support.microsoft.com/default.aspx?scid=kb;en-us;258858. (2): CA recognized by the browser but does not support Multiple Sites (several CN or SAN fields). (3): Thawte Wildcard certificates are not recognized by Internet Explorer with Windows 95 & 98 (see FAQ) (4): Changed root on May 17th, 2009. (see FAQ) and then on October 10th, 2010 (see FAQ). (5): Uses a certification chain since June 27th, 2010 (see FAQ) (6): Changed root on October 10th, 2010 (see FAQ) (7): Firefox and by-products may encounter loop issue when checking SSL certificates. See FAQ (8): 1024-bit roots will be deactivated by several browsers as of December, 31st 2013 (see FAQ) |
||||||||
SSL Compatibility with mobile tools |
||||||||
Thawte | TBS X509 | GlobalSign | Symantec | Geotrust | ||||
Offer | ssl wssl sslev |
prem ecom std int wild |
sgc wildsgc |
mdom | All | global secureev globalev secure vswild |
truebiz |
tbidev |
Comodo | Thawte | |||||||
ev prossl wild ucc |
evsgc | sgc | ||||||
root | see | see | see | see | see | see | see | see |
Crossed certif | see | see | see | see | - | see | - | see |
compatibility | TEST → | TEST → | TEST → | TEST → | ||||
Apple | ||||||||
iOS 5.1.1 - iOS 9+ | +EV | +EV | +EV | +EV | +EV | +EV | ||
iOS 3.x - iOS 5 | +EV | +EV | +EV | +EV | +EV | +EV | ||
iOS 1.x - iOS 2.x | ||||||||
display / hide | ||||||||
Windows Mobile | ||||||||
Windows Phone 8+ | ||||||||
Windows Phone 7 | ||||||||
WM 6.5 | ||||||||
WM CE6 | ||||||||
WM CE5 | ||||||||
WM 2003
|
||||||||
WM 2002
|
||||||||
display / hide | ||||||||
Playstation | ||||||||
Netfront 3.5 | ||||||||
Netfront 3.4 | ||||||||
display / hide | ||||||||
BlackBerry | ||||||||
OS 5+ | ||||||||
OS 4.5.1+ | ||||||||
OS 4.3+ | ||||||||
OS 4.2.1 | ||||||||
display / hide | ||||||||
Android | ||||||||
4.1.2 - 4.3+ | ||||||||
2.3 - 4.1.1 | ||||||||
2.2 | ||||||||
1.6 - 2.1 |
|
|||||||
display / hide | ||||||||
all operating system | ||||||||
Palm WebOS | ||||||||
Palm OS | ||||||||
Opera Mini 4.2+ | ||||||||
Opera Mini 4.1+ & 3.0-3.1 | ||||||||
Nokia Symbian 9.2+ | ||||||||
Nokia Symbian 9.1 (tested E61) | ||||||||
display / hide | ||||||||
(1): does not support Wildcard (2): requires crossed certification (3): 1024-bit roots will be deactivated by several browsers as of December, 31st 2013 (see FAQ) |