Hi,

thank you very much for your free StartSSL certificates, they are great! However (mainly to convince others ), it would be great to have a definitive list of web browsers and their versions where the StartSSL certificate is included so it doesn't cause an error. A compatibility list like the ones from Comodo, DigiCert, Entrust, GeoTrust, GoDaddy or Thawte would be great, or better even with links to more details. There used to be such a list on http://cert.startcom.org/?app=140 (see http://web.archive.org/web/200806070130 ... g/?app=140), but thats no more, why? I think its needed. For example, I've read many times that only Windows Vista and 7 download new SSL certs "on-the-fly", but I just checked out Windows XP without any SPs or updates in a VM and it didn't show an error on my SSL website with the free StartSSL cert!

I tried to collected the information by myself, this is what I got, still several question marks:

Operating Systems:

• Microsoft Windows - Windows XP+ (2001-10-25) Support started on 2009-09-21, but since then it works even on a fresh Windows XP without any updates (http://technet.microsoft.com/en-us/libr ... 51157.aspx)
• Apple Mac OS - Mac OS X 10.5 Leopard+ (2007-10-26)
• Linux - No system root store (https://wiki.mozilla.org/NSS_Shared_DB_And_LINUX)

Web browsers:

• Mozilla Firefox - since 2.0+ (2006-10-24) based on Mozilla Gecko 1.8.1+ (https://bugzilla.mozilla.org/show_bug.cgi?id=338552, http://www.mozilla.org/projects/securit ... /#StartCom)
  
• Microsoft Internet Explorer - depends on OS
  
• Apple Safari - depends on OS
  
• Google Chrome - depends on OS (on Linux it uses the Mozilla NSS, so yes http://code.google.com/p/chromium/wiki/ ... Management)
  
• Opera - since July 2010 , http://my.opera.com/rootstore/blog/2010 ... uffix-file
  
• Ephiphany - since 2.16+ (2006-09-25) based on Mozilla Gecko 1.8.1+
  
• Camino: - since 1.5+ (2007-06-05) based on Mozilla Gecko 1.8.1+
  
• K-Meleon since 1.1+ (2007-05-22) based on Mozilla Gecko 1.8.1+
  
• SeaMonkey - since 1.1+ (2007-01-18) based on Mozilla Gecko 1.8.1+
  
• Flock - since 0.9+ (2007-07-10) based on Mozilla Gecko 1.8.1+
  
• Netscape Navigator - since 9.0 (2007-10-15) based on Mozilla Gecko 1.8.1+
  
• Sleipnir - ??? based on Trident or Gecko
  
• Lunarscape - ??? based on Trident, WebKit or Gecko
  
• Avant Browser - depends on OS (based on Internet Explorer)
  
• SlimBrowser - depends on OS (based on Internet Explorer)
  
• Maxthon/MyIE2 - depends on OS (based on Internet Explorer)
  
• GreenBrowser - depends on OS (based on Internet Explorer)
  
• Konqueror - since 2006-08-02 and version 3.5.4+

Mail clients:

• Mozilla Thunderbird - since 2.0+ (2007-04-18) (https://bugzilla.mozilla.org/show_bug.cgi?id=338552)
• Microsoft Outlook/Windows Mail/Windows Live Mail - depends on OS
• The Bat! - ???
• Qualcomm Eudora - 7.x with S/MIME plugin depends on the OS. 8.x is based on Thunderbird 3.x (http://eudorabb.qualcomm.com/showthread.php?p=44735).
• Mulberry Mail - ???
• Pegasus Mail - The S/MIME extension depends on OS (http://community.pmail.com/forums/thread/22254.aspx)
• Apple Mail/Mail.App - depends on OS
• Lotus Notes - ???

Mobile Operating systems and mobile browsers:

• Windows Mobile - ???
  
• Symbian S60 - v3 not yet
  
• Apple iPhone OS - since 2.0+ (2008-07-11) (http://forum.startcom.org/viewtopic.php?f=15&t=1725)
  
• Maemo/MicroB - Since OS2008 browser based on Mozilla, so probably yes (http://maemo.nokia.com/features/maemo-browser/)
  
• MeeGoo - not yet released
  
• Google Android - since 2.2 (http://code.google.com/p/android/issues/detail?id=5657)
  
• Access NetFront - Not yet? (http://www.access-company.com/products/ ... index.html)
  
• Opera mini/Opera mobile - since July 2010
  
• RIM BlackBerry - Not yet? (http://supportforums.blackberry.com/t5/ ... m-p/444578)
  
• PalmOS - ???
  
• WebOS - ??? (http://developer.palm.com/distribution/ ... =20&t=5561)
  
• Openwave - ???

Others:

• Java Runtime Environment (JRE) - No
• Adobe Acrobat Reader - No (http://www.adobe.com/security/partners_cds.html)
• Citrix - ???
• Wget - depends on OpenSSL (http://www.gnu.org/software/wget/manual ... tions.html)
• cURL - comes with no certs at all, promotes the use of the Mozilla CA cert bundle (http://curl.haxx.se/docs/sslcerts.html and http://curl.haxx.se/docs/caextract.html)
• OpenSSL - comes with no certs at all, promotes the use of the Mozilla CA cert bundle (http://www.openssl.org/support/faq.html#USER16, http://gagravarr.org/writing/openssl-certs/ and http://www.mail-archive.com/modssl-user ... 16980.html)
• Sony Playstation Portable - ???
• Nintendo Wii - Since July 2010 ???, because its Opera

Disclaimer: I did not test all the programs, there may be errors in this list! Please report any mistakes or additions in this thread so I can correct it/add it. Thank you.

in the mobile platform there is also symbian.

The certificate is not part of the default S60 OS (at least not with S60 v3), but ca.crt is easy to import http://jnsc.ch/symbian.php (only in french, but I can translate is needed)

maybe we should submit the inclusion as an idea (http://ideas.symbian.org)

I can confirm that you get a warning message on Wii.

Thank you very much for your feedback, I added the info in the first topic.

Best,
cider

Nice effort

Minor corrections. Mozilla had support also for Firefox 1.5 eventually when the NSS module was back-ported. Apple and friends had support also in Tiger 10.4 through an update. But in both cases, only the old CA root was supported. The new and current CA root is supported as stated above (IIRC).

Your experience is btw correct, Microsoft Windows support starts with XP and above and for any Internet Explorer version. Just EV is only supported from IE7 and up.

Continue to enhance the list!

Eddy, thanks for your feedback. I tried Firefox 1.5.0.12 (which is the latest 1.5.x version) in my VM and it didn't recognize the StartSSL cert on my domain. I guess if only the old "Free SSL Certification Authority" CA root was included it makes no sense to add it to the list.

EV-SSL certs "with the green bar" are generally only supported in Firefox 3+, IE7+, Opera 9.5+, Safari 3.2+ and Chrome (all). Thats true for all certs, so I don't have to add it to the list I think.

I anyone posts his experience with other programs I'd be happy to add it to the list.

Best,
cider

I have just installed my first certificate... it's working fine in IE 8, Safari and Chrome under Windows Seven

BUT NOT Firefox 3.6 !!?!!?!?

Anybody has an idea ?

@smartek: Most probably you didn't install the intermediate certificate. Check your Domain here: http://www.sslshopper.com/ssl-checker.html
And I think you are in the wrong thread...

Huh... how come ?

You are talking about compatiblity with navigators... and it's working great with IE 8, Safari and Chrome, but not Firefox...

In Firefox 3.6 the StartCom cert is definitively included, we don't have to discuss that here
Its an error in your server configuration, nothing about browser compatibility.