4

Which are more widely supported by browser clients, wildcard or SAN certificates?

I need to decide between using a SAN cert or a wildcard cert. Client/browser compatibility is my biggest concern.

6

Digicert maintains pages for compatibility with certificate types:

They note several server side compatibility problems with wildcard certificates but no client side problems. SAN certificates are problemic for some older browsers:

  • Versions of major web browsers from before 2003.
  • Older smart phones running Symbian OS
  • Older Palm Treo

If supporting these older browsers is important to you, then wildcard certificates have wider browser support.

| improve this answer | |
  • Thanks Stephen! An excellent answer and getting a compatibility listing for both from the same source is a good way to make a comparison. I had trouble finding such a thing so I am very glad to see that Digicert provides compatibility information for both. – ghbarratt Sep 26 '13 at 19:39
  • Does Chrome really lack SAN support in September 2016? I am missing it on Digicert's compatibility page referenced in this answer. – Adam Mackler Sep 18 '16 at 19:30
  • Chrome supports SAN just fine and has for years. All major web browsers have supported SAN since about 2003. – Stephen Ostermiller Sep 18 '16 at 20:43

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.