CA	Critical	cRLSign	dataEncipherment	decipherOnly	digitalSignature	encipherOnly	keyAgreement	keyCertSign	keyEncipherment	nonRepudiation
Comodo	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
Comodo DV	✓	✓	✗	✗	✓	✗	✗	✓	✗	✗
Comodo EV	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
DST X3	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
DigiCert EV Root	✓	✓	✗	✗	✓	✗	✗	✓	✗	✗
DigiCert Global Root	✓	✓	✗	✗	✓	✗	✗	✓	✗	✗
DigiCert HA Intermediate	✓	✓	✗	✗	✓	✗	✗	✓	✗	✗
DigiCert Secure Server	✓	✓	✗	✗	✓	✗	✗	✓	✗	✗
GeoTrust
GlobalSign	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
GlobalSign DV	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
GlobalSign R2	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
Go Daddy G2	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
Go Daddy G2 Intermediate	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
Google G3	✓	✓	✗	✗	✓	✗	✗	✓	✗	✗
IdenTrust	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
Let’s Encrypt X1	✓	✓	✗	✗	✓	✗	✗	✓	✗	✗
Let’s Encrypt X3	✓	✓	✗	✗	✓	✗	✗	✓	✗	✗
RapidSSL G3	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
StartSSL	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
StartSSL class 2	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
StartSSL class 2	✓	✓	✗	✗	✗	✗	✗	✓	✗	✗
TrustID Server A52	✓	✓	✗	✗	✓	✗	✗	✓	✗	✗