Browsers' compatibility with SHA256-signed SSL certificates

The purpose of this chart is to help you select the SSL certificate which matches your technical needs. Independently of price or brand!

This chart only considers RSA certificates signed in SHA256 (ECC certificates are not taken into account in this chart).

Certification authority recognized by the browser and setup a native level cipherment unless otherwise specified.

Certification Authority not recognized by the browser.

The behavior is specific or unknown.

40-bit native encryption. Concerns 10 years old browsers (recent browsers give priority to 128-bit or higher encryption).

2048-bit SSL compatibility with office browsers

	DigiCert	DigiCert	TBS X509	GlobalSign	Sectigo	Sectigo
Offer	All	All	All	All	All	All
	Thawte	Thawte			PositiveSSL	PositiveSSL
	All (1) Thawte Wildcard certificates are not recognized by Internet Explorer with Windows 95 & 98 (see FAQ)	All			All	All
	Geotrust	Geotrust				TBS X509
	All	All				All
root	G2	G5	AAA	R3	USERTrust	R46
all operating system
Firefox
117+
103 - 116.0.3
38 - 102.15.1
36 - 37	+EV			+EV
34 - 35	+EV
32 - 33.1.1
1 - 31.8.0
0.1 - 0.9
Opera
107+
91 - 106
25 - 90
20 - 24
15 - 19
12.12 - 12.18
9 - 12.11
3 - 8.54
J2RE
8u461+
8u51 - 8u451
8 - 8u45
7u411 - 7u471
1.8.0_131 - 7u401
1.5.0_08 - 1.8.0_25
1.4.1 - 1.5.0_07
NSS
3.92+
3.80 - 3.91
3.17.3 - 3.79.4
3.16.3 - 3.17.2
3.11.8 - 3.16.2.3
Windows
Microsoft Internet Explorer
Edge 91+ (2) For any OS updated since 2010/09/27	(3) From Windows 8.1 natively or Windows XP SP3+ if up-to-date			(3) From Windows 8.1 natively or Windows XP SP3+ if up-to-date	(4) From Windows XP	(4) From Windows XP
Edge 1 - 90 (2) For any OS updated since 2010/09/27	(3) From Windows 8.1 natively or Windows XP SP3+ if up-to-date			(3) From Windows 8.1 natively or Windows XP SP3+ if up-to-date	(4) From Windows XP
10.0 - 11.0 (2) For any OS updated since 2010/09/27	(3) From Windows 8.1 natively or Windows XP SP3+ if up-to-date			(3) From Windows 8.1 natively or Windows XP SP3+ if up-to-date	(4) From Windows XP
8.0.6 - 9.0 (2) For any OS updated since 2010/09/27	(3) From Windows 8.1 natively or Windows XP SP3+ if up-to-date				+EV (4) rom Windows XP
7.0 - 8.0 (2) For any OS updated since 2010/09/27	(3) From Windows 8.1 natively or Windows XP SP3+ if up-to-date
5.5 - 7.0b2
4.01 - 5.01
Google Chrome
108 - 121+ (5) On versions of Chrome using the Chrome Root Store
105 - 107 (2) For any OS updated since 2010/09/27
38 - 104 (2) For any OS updated since 2010/09/27
1 - 37 (2) For any OS updated since 2010/09/27
Mac
MacOS
15+
14.4 - 14.7.7
10.12.1 - 14.3.1
10.9 - 10.12
10.6.4 - 10.8.5
10.4 - 10.6.3
Linux
CA-Certificates
20240203+
20230311
20141019 - 20211016
20080411 - 20211004
20061027 - 20070303
20031007 - 20050804
Google Chrome
114+ (5) On versions of Chrome using the Chrome Root Store
40 - 113
38 - 39
1 - 37
(1): Thawte Wildcard certificates are not recognized by Internet Explorer with Windows 95 & 98 (see FAQ) (2): For any OS updated since 2010/09/27 (3): From Windows 8.1 natively or Windows XP SP3+ if up-to-date (4): From Windows XP (5): On versions of Chrome using the Chrome Root Store
SSL Compatibility with mobile tools
	DigiCert	DigiCert	TBS X509	GlobalSign	Sectigo	Sectigo
Offer	All	All	All	All	All	All
	Thawte	Thawte			PositiveSSL	PositiveSSL
	All (1) Thawte Wildcard certificates are not recognized by Internet Explorer with Windows 95 & 98 (see FAQ)	All			All	All
	Geotrust	Geotrust				TBS X509
	All	All				All
root	G2	G5	AAA	R3	USERTrust	R46
Apple
Apple
WatchOS
11+
10.4 - 10.6.1
3 - 10.3.1
1.0.1 - 2.2.2
iOS
18+
17 - 17.7.2
10 - 16.7.11
7.x - 9.x				+EV
3.x - 6.x
1.x - 2.x
Others
Windows Mobile
Windows Phone 8+
Windows Phone 7
WM 2002 - WM 6.5
BlackBerry
OS 10.3+
OS 5 - 10.2
OS 4.2.1 - 4.5.1+
Android
15
14
5.1 - 13
5.0 - 5.0.2
2.3 - 4.4W.2
1.1 - 2.2
all operating system
Palm WebOS
Palm OS
Opera Mini 4.2+
Opera Mini 4.1+ & 3.0-3.1
Nokia Symbian 9.2+
Nokia Symbian 9.1 (testé E61)