...
Firefox 54.0.1 (Windows) | Chrome 60 (Windows) | ||
|---|---|---|---|
| Certificate | |||
| expired | SEC_ERROR_EXPIRED_CERTIFICATE | NET::ERR_CERT_DATE_INVALID | Reset |
| wrong.host | SSL_ERROR_BAD_CERT_DOMAIN | NET::ERR_CERT_COMMON_NAME_INVALID | Certificate validation left up to client |
| self-signed | SEC_ERROR_UNKNOWN_ISSUER | NET::ERR_CERT_AUTHORITY_INVALID | Reset |
| untrusted-root | SEC_ERROR_UNKNOWN_ISSUER | NET::ERR_CERT_AUTHORITY_INVALID | Reset |
| revoked | SEC_ERROR_REVOKED_CERTIFICATE | NET::ERR_CERT_REVOKED | Allowed |
| pinning-test | MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE | NET::ERR_SSL_PINNED_KEY_NOT_IN_CERT_CHAIN | Allowed |
| no-common-name | Allowed | Allowed | Allowed |
| no-subject | Allowed | Allowed | Reset |
| incomplete-chain | Allowed | Allowed | Reset |
| sha1-intermediate | SEC_ERROR_CERT_SIGNATURE_ALGORITHM_DISABLED | Allowed | Allowed |
| sha256 | Allowed | Allowed | Allowed |
| sha384 | Allowed | Allowed | Allowed |
| sha512 | Allowed | Allowed | Allowed |
| Allowed | Allowed | Allowed | |
| 10000-sans | SSL_ERROR_RX_MALFORMED_HANDSHAKE | ERR_SSL_PROTOCOL_ERROR | Certificate validation left up to client |
| Allowed | Allowed | Allowed | |
| ecc384 | Allowed | Allowed | Allowed |
| rsa2048 | Allowed | Allowed | Allowed |
| rsa8192 | Allowed | Allowed | Allowed |
| Cipher Suite | |||
| cbc | Allowed | Allowed | Allowed |
| rc4-md5 | SSL_ERROR_NO_CYPHER_OVERLAP | ERR_SSL_VERSION_OR_CIPHER_MISMATCH | Reset |
| rc4 | SSL_ERROR_NO_CYPHER_OVERLAP | ERR_SSL_VERSION_OR_CIPHER_MISMATCH | Reset |
| 3des | Allowed | Allowed | Allowed |
| null | SSL_ERROR_NO_CYPHER_OVERLAP | ERR_SSL_VERSION_OR_CIPHER_MISMATCH | Reset |
| mozilla-old | Allowed | Allowed | Allowed |
| mozilla-intermediate | Allowed | Allowed | Allowed |
| mozilla-modern | Allowed | Allowed | Allowed |
| Key exchange | |||
| dh480 | SSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEY | ERR_SSL_VERSION_OR_CIPHER_MISMATCH | Reset |
| dh512 | SSL_ERROR_WEAK_SERVER_EPHEMERAL_DH_KEY | ERR_SSL_VERSION_OR_CIPHER_MISMATCH | Reset |
| dh1024 | Allowed | ERR_SSL_VERSION_OR_CIPHER_MISMATCH | Allowed |
| dh2048 | Allowed | ERR_SSL_VERSION_OR_CIPHER_MISMATCH | Allowed |
| dh-small-subgroup | Allowed | ERR_SSL_VERSION_OR_CIPHER_MISMATCH | Allowed |
| dh-composite | Allowed | ERR_SSL_VERSION_OR_CIPHER_MISMATCH | Reset |
| static-rsa | Allowed | Allowed | Allowed |
| Certificate Transparency | |||
| invalid-expected-sct | Allowed | NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED | Allowed |
| Defunct | |||
| sha1-2016 | SEC_ERROR_EXPIRED_CERTIFICATE | NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM | Reset |
| sha1-2017 | SEC_ERROR_EXPIRED_CERTIFICATE | NET::ERR_CERT_WEAK_SIGNATURE_ALGORITHM | Reset |
...