SHA256 compatibility list
Since 2014, CAs recommend SHA256 for new SSL requests; certificates valid past 1 Jan 2017 may only be issued with SHA256. Existing SHA1 certificates can be re-signed to SHA256 for free.
SHA256 has some compatibility constraints across web servers, browsers and operating systems. The requirements are listed below; if your software, browser or OS is below the minimum, upgrade to use the certificate securely.
Operating systems & environments
- Android 2.3+
- Apple iOS 3.0+
- Apple OS X 10.5+
- Blackberry 5.0+
- ChromeOS All
- Windows Outlook 2003 SP3+ (Vista and above)
- Windows Phone 7+
- Windows XP SP3+
- OpenSSL 0.9.8o+
- Java 1.4.2+
Browsers
- Adobe Acrobat / Reader 7
- Chrome 26+
- Chrome for Linux
- Chrome for Mac OS X 10.5+
- Firefox 1.5+
- Internet Explorer 6+ (Windows XP SP3 and above)
- Mozilla 1.4+ (NSS 3.8+)
- Netscape 7.1+
- Opera 9.0+
- Safari 3+ for Mac OS X 10.5+
Web servers
- Apache 2.0.63+ with OpenSSL 0.9.8o+
- Windows Server 2003+ with patch 938397 (or SP3+)
- Windows XP / Server 2003 with patch 968730 (or SP3+)
- Windows Server 2008+
- Java-based servers, Java 1.4.2+
- Oracle WebLogic v10.3.1+
- Oracle Wallet Manager 11.2.0.1+
- IBM HTTP Server 8.5
- Lotus Domino 9+
- Websphere Application Server v8.0.0.4+
- Juniper Secure Access — SA 6.4R5, 6.5R3 or 7.0R1+