Cisco Email Encryption Compatibility Matrix

Revised: July 01, 2020

Contents
• Overview, page 1
• Supported Browsers for Desktop and Mobile, page 2
• Supported Email Clients for Email Security Plug-in, page 3
• Supported Configurations for Cisco Email Encryption Plug-in, page 3
• Supported Configurations for Cisco Email Reporting Plug-in, page 3
• Supported Certificate Authorities for CRES, page 4

Overview
The following tables show the compatibility for the following products and services:
• Cisco Registered Envelope Service
• Cisco Email Security Plug-in
• Cisco Email Encryption Plug-in
• Cisco Email Reporting Plug-in
The compatibility matrix tables include compatibility listings for operating systems, browsers, email
clients, and Certificate Authorities. The two tiers include:
• Certified. Cisco qualifies combinations that have reached significant market adoption. These fully
qualified combinations are said to be certified, and if issues are reported on these combinations, they
will be treated as bugs and given priority over issues found in compatible combinations.
Note that certification testing is done with the latest released version of email clients and databases
at the time of testing.

Cisco Systems, Inc.

www.cisco.com
 Supported Browsers for Desktop and Mobile

• Compatible. Combinations which have sufficient field evidence from customers and Cisco internal
users that they work are said to be compatible. If issues are found on these combinations they will
be treated as enhancements and will be addressed in a best-effort manner.

Supported Browsers for Desktop and Mobile

The following table shows supported browsers and their versions for Cisco Registered Envelope Service
(CRES) 6.0 and above:
Browser Desktop Supported Versions Mobile Supported Versions
Google Chrome Chrome 83 Chrome 78
(Windows, Linux, Mac) (Android, iOS)
Mozilla Firefox Firefox 77 Firefox 68 (Android)
(Windows, Linux, MacOS) Firefox 26 (iOS)
Windows Edge Edge 83 (Windows 10, MacOS) Edge 45.3 (Android)
Edge 45.4 (Android)
Note There is no support for Linux

Safari Safari 13.1 (MacOS) Safari 13.1 (iOS)

Note There is no support for Note There is no support for

Windows and Linux Android

* Envelope opens through forward to [email protected].

Note There is no browser support for Internet Explorer.

Note You will not be able to access the attachment in Secure Email if you are using the iOS
mobile browser. You must forward your secure email to [email protected] to open it.

SAML 2.0 Identity Providers for CRES

The following table shows the SAML 2.0 Identity Providers (IdPs) supported for CRES 6.0:

IdP IdP Version

Cisco Web Security 7.1.4-101
Appliance (WSA)
Ping Federate 6.4.1

Cisco Email Encryption Compatibility Matrix

2
 Supported Email Clients for Email Security Plug-in

IdP IdP Version

AD FS for Windows 2008 2.0
AD FS for Windows 2012 2.1

Supported Email Clients for Email Security Plug-in

The following configurations are supported for the Cisco Email Security Plug-in 7.6.2:
Cisco Email Security Outlook 2016 Outlook 2016 Outlook 2019 Outlook 365
Plug-in 7.6.x (32 bit) (64 bit) (64 bit)
Win 10 32 bit compatible — compatible —
Win 10 64 bit compatible certified certified certified

Note Support for Microsoft Windows 7 and 8.1 versions was available only till the Cisco Email Security
Plug-in release version 7.6.2-033. From this release onwards, there is only support for Microsoft
Windows 10 and Office 365.

Supported Configurations for Cisco Email Encryption Plug-in

The following configurations are supported for the Cisco Email Encryption Plug-in 1.2.1:
Cisco Email
Encryption Plug-in Outlook 2016 Outlook 2016 Outlook 2019 Outlook 365
1.x (32 bit) (64 bit) (64 bit)
Win 10 32 bit compatible — compatible —
Win 10 64 bit compatible certified certified certified

Note Support for Microsoft Windows 7 and 8.1 versions was available till the Cisco Email Encryption Plug-in
version 1.2.1-151. From this release onwards, there is only support for Microsoft Windows 10 and Office
365.

Supported Configurations for Cisco Email Reporting Plug-in

The following configurations are supported for the Cisco Email Reporting Plug-in 1.1.0:
Cisco Email
Reporting Plug-in Outlook 2016 Outlook 2016 Outlook 2019 Outlook 365
1.x (32 bit) (64 bit) (64 bit)
Win 10 32 bit compatible — compatible —
Win 10 64 bit certified compatible certified certified

Cisco Email Encryption Compatibility Matrix

3
 Supported Certificate Authorities for CRES

Note Support for Microsoft Windows 7 and 8.1 versions was available till the Cisco Email Encryption Plug-in
version 1.2.1-129. From this release onwards, there is only support for Microsoft Windows 10 and Office
365.

Supported Certificate Authorities for CRES

The following table shows the Certificate Authorities supported for CRES 6.0.

Alias name Owner SHA1

digicertassuredidrootca CN=DigiCert Assured ID Root CA, 05:63:B8:63:0D:62:D7:5A:BB:C8:
OU=www.digicert.com, O=DigiCert AB:1E:4B:DF:B5:A8:99:B2:4D:43
Inc, C=US
thawtepremiumserverca EMAILADDRESS=premium-server E0:AB:05:94:20:72:54:93:05:60:62
@thawte.com, CN=Thawte :02:36:70:F7:CD:2E:FC:66:66
Premium Server CA,
OU=Certification Services Division,
O=Thawte Consulting cc, L=Cape
Town, ST=Western Cape, C=ZA
startcom_g2_ca CN=StartCom Certification 31:F1:FD:68:22:63:20:EE:C6:3B:3
Authority G2, O=StartCom Ltd., F:9D:EA:4A:3E:53:7C:7C:39:17
C=IL
swisssignsilverg2ca CN=SwissSign Silver CA - G2, 9B:AA:E5:9F:56:EE:21:CB:43:5A:
O=SwissSign AG, C=CH BE:25:93:DF:A7:F0:40:D1:1D:CB
swisssignplatinumg2ca CN=SwissSign Platinum CA - G2, 56:E0:FA:C0:3B:8F:18:23:55:18:E
O=SwissSign AG, C=CH 5:D3:11:CA:E8:C2:43:31:AB:66
gd-root-g2 CN=Go Daddy Root Certificate 47:BE:AB:C9:22:EA:E8:0E:78:78:
Authority - G2, O="GoDaddy.com, 34:62:A7:9F:45:C2:54:FD:E6:8B
Inc.", L=Scottsdale, ST=Arizona,
C=US
equifaxsecureebusiness CN=Equifax Secure eBusiness AE:E6:3D:70:E3:76:FB:C7:3A:EB:
ca1 CA-1, O=Equifax Secure Inc., B0:A1:C1:D4:C4:7A:A7:40:B3:F4
C=US
valicert_class3 [email protected] 69:BD:8C:F4:9C:D3:00:FB:59:2E:
om, CN=http://www.valicert.com/, 17:93:CA:55:6A:F3:EC:AA:35:FB
OU=ValiCert Class 3 Policy
Validation Authority, O="ValiCert,
Inc.", L=ValiCert Validation
Network
valicert_class2 [email protected] 31:7A:2A:D0:7F:2B:33:5E:F5:A1:
om, CN=http://www.valicert.com/, C3:4E:4B:57:E8:B7:D8:F1:FC:A6
OU=ValiCert Class 2 Policy
Validation Authority, O="ValiCert,
Inc.", L=ValiCert Validation
Network

Cisco Email Encryption Compatibility Matrix

4
 Supported Certificate Authorities for CRES

utnuserfirstclientauthe CN=UTN-USERFirst-Client B1:72:B1:A5:6D:95:F9:1F:E5:02:8

mailca Authentication and Email, 7:E1:4D:37:EA:6A:44:63:76:8A
OU=http://www.usertrust.com,
O=The USERTRUST Network,
L=Salt Lake City, ST=UT, C=US
svrsecureg3 CN=VeriSign Class 3 Secure Server 5D:EB:8F:33:9E:26:4C:19:F6:68:6
CA - G3, OU=Terms of use at F:5F:8F:32:B5:4A:4C:46:B4:76
https://www.verisign.com/rpa (c)10,
OU=VeriSign Trust Network,
O="VeriSign, Inc.", C=US
utnuserfirsthardwareca CN=UTN-USERFirst-Hardware, 04:83:ED:33:99:AC:36:08:05:87:22
OU=http://www.usertrust.com, :ED:BC:5E:46:00:E3:BE:F9:D7
O=The USERTRUST Network,
L=Salt Lake City, ST=UT, C=US
entrustevca CN=Entrust Root Certification B3:1E:B1:B7:40:E3:6C:84:02:DA:
Authority, OU="(c) 2006 Entrust, DC:37:D4:4D:F5:D4:67:49:52:F9
Inc.", OU=www.entrust.net/CPS is
incorporated by reference,
O="Entrust, Inc.", C=US
certumca CN=Certum CA, O=Unizeto Sp. z 62:52:DC:40:F7:11:43:A2:2F:DE:9
o.o., C=PL E:F7:34:8E:06:42:51:B1:81:18
entrustrootcag2 CN=Entrust Root Certification 8C:F4:27:FD:79:0C:3A:D1:66:06:8
Authority - G2, OU="(c) 2009 D:E8:1E:57:EF:BB:93:22:72:D4
Entrust, Inc. - for authorized use
only", OU=See
www.entrust.net/legal-terms,
O="Entrust, Inc.", C=US
addtrustclass1ca CN=AddTrust Class 1 CA Root, CC:AB:0E:A0:4C:23:01:D6:69:7B:
OU=AddTrust TTP Network, DD:37:9F:CD:12:EB:24:E3:94:9D
O=AddTrust AB, C=SE
equifaxsecureca OU=Equifax Secure Certificate D2:32:09:AD:23:D3:14:23:21:74:E
Authority, O=Equifax, C=US 4:0D:7F:9D:62:13:97:86:63:3A
quovadisrootca3 CN=QuoVadis Root CA 3, 1F:49:14:F7:D8:74:95:1D:DD:AE:
O=QuoVadis Limited, C=BM 02:C0:BE:FD:3A:2D:82:75:51:85
quovadisrootca2 CN=QuoVadis Root CA 2, CA:3A:FB:CF:12:40:36:4B:44:B2:
O=QuoVadis Limited, C=BM 16:20:88:80:48:39:19:93:7C:F7
digicert security CN=DigiCert Security Services CA, 24:B5:76:81:21:DF:DD:10:FD:18:
services ca O=DigiCert Inc., C=US B0:0F:45:58:A4:63:72:BA:FA:90
dstrootcax3 CN=DST Root CA X3, O=Digital DA:C9:02:4F:54:D8:F6:DF:94:93:5
Signature Trust Co. F:B1:73:26:38:CA:6A:D7:7C:13
digicerthighassuranceev CN=DigiCert High Assurance EV 5F:B7:EE:06:33:E2:59:DB:AD:0C:
rootca Root CA, OU=www.digicert.com, 4C:9A:E6:D3:8F:1A:61:C7:DC:25
O=DigiCert Inc, C=US
equifaxsecureglobalebu CN=Equifax Secure Global 3A:74:CB:7A:47:DB:70:DE:89:1F:
sinessca1 eBusiness CA-1, O=Equifax Secure 24:35:98:64:B8:2D:82:BD:1A:36
Inc., C=US

Cisco Email Encryption Compatibility Matrix

5
Supported Certificate Authorities for CRES

geotrustuniversalca CN=GeoTrust Universal CA, E6:21:F3:35:43:79:05:9A:4B:68:30

O=GeoTrust Inc., C=US :9D:8A:2F:74:22:15:87:EC:79
affirmtrustnetworking CN=AffirmTrust Networking, 29:36:21:02:8B:20:ED:02:F5:66:C5
O=AffirmTrust, C=US :32:D1:D6:ED:90:9F:45:00:2F
thawteprimaryrootcag3 CN=thawte Primary Root CA - G3, F1:8B:53:8D:1B:E9:03:B6:A6:F0:5
OU="(c) 2008 thawte, Inc. - For 6:43:5B:17:15:89:CA:F3:6B:F2
authorized use only",
OU=Certification Services Division,
O="thawte, Inc.", C=US
verisignclass3ca OU=Class 3 Public Primary A1:DB:63:93:91:6F:17:E4:18:55:0
Certification Authority, 9:40:04:15:C7:02:40:B0:AE:6B
O="VeriSign, Inc.", C=US
deutschetelekomrootca CN=Deutsche Telekom Root CA 2, 85:A4:08:C0:9C:19:3E:5D:51:58:7
2 OU=T-TeleSec Trust Center, D:CD:D6:13:30:FD:8C:DE:37:BF
O=Deutsche Telekom AG, C=DE
utnuserfirstobjectca CN=UTN-USERFirst-Object, E1:2D:FB:4B:41:D7:D9:C3:2B:30:
OU=http://www.usertrust.com, 51:4B:AC:1D:81:D8:38:5E:2D:46
O=The USERTRUST Network,
L=Salt Lake City, ST=UT, C=US
geotrustprimaryca CN=GeoTrust Primary Certification 32:3C:11:8E:1B:F7:B8:B6:52:54:E
Authority, O=GeoTrust Inc., C=US 2:E2:10:0D:D6:02:90:37:F0:96
verisignclass1ca OU=Class 1 Public Primary CE:6A:64:A3:09:E4:2F:BB:D9:85:
Certification Authority, 1C:45:3E:64:09:EA:E8:7D:60:F1
O="VeriSign, Inc.", C=US
baltimorecodesigningca CN=Baltimore CyberTrust Code 30:46:D8:C8:88:FF:69:30:C3:4A:F
Signing Root, OU=CyberTrust, C:CD:49:27:08:7C:60:56:7B:0D
O=Baltimore, C=IE
baltimorecybertrustca CN=Baltimore CyberTrust Root, D4:DE:20:D0:5E:66:FC:53:FE:1A:
OU=CyberTrust, O=Baltimore, 50:88:2C:78:DB:28:52:CA:E4:74
C=IE
starfieldclass2ca OU=Starfield Class 2 Certification AD:7E:1C:28:B0:64:EF:8F:60:03:4
Authority, O="Starfield 0:20:14:C3:D0:E3:37:0E:B5:8A
Technologies, Inc.", C=US
camerfirmachambersco CN=Chambers of Commerce Root, 6E:3A:55:A4:19:0C:19:5C:93:84:3
mmerceca OU=http://www.chambersign.org, C:C0:DB:72:2E:31:30:61:F0:B1
O=AC Camerfirma SA CIF
A82743287, C=EU
ttelesecglobalrootclass3 CN=T-TeleSec GlobalRoot Class 3, 55:A6:72:3E:CB:F2:EC:CD:C3:23:
ca OU=T-Systems Trust Center, 74:70:19:9D:2A:BE:11:E3:81:D1
O=T-Systems Enterprise Services
GmbH, C=DE
verisignclass3g5ca CN=VeriSign Class 3 Public 4E:B6:D5:78:49:9B:1C:CF:5F:58:1
Primary Certification Authority - E:AD:56:BE:3D:9B:67:44:A5:E5
G5, OU="(c) 2006 VeriSign, Inc. -
For authorized use only",
OU=VeriSign Trust Network,
O="VeriSign, Inc.", C=US

Cisco Email Encryption Compatibility Matrix

6
 Supported Certificate Authorities for CRES

startcom_ca CN=StartCom Certification 3E:2B:F7:F2:03:1B:96:F3:8C:E6:C

Authority, OU=Secure Digital 4:D8:A8:5D:3E:2D:58:47:6A:0F
Certificate Signing, O=StartCom
Ltd., C=IL
startcom_sha2 CN=StartCom Certification A3:F1:33:3F:E2:42:BF:CF:C5:D1:
Authority, OU=Secure Digital 4E:8F:39:42:98:40:68:10:D1:A0
Certificate Signing, O=StartCom
Ltd., C=IL
ttelesecglobalrootclass2 CN=T-TeleSec GlobalRoot Class 2, 59:0D:2D:7D:88:4F:40:2E:61:7E:A
ca OU=T-Systems Trust Center, 5:62:32:17:65:CF:17:D8:94:E9
O=T-Systems Enterprise Services
GmbH, C=DE
verisignclass3g3ca CN=VeriSign Class 3 Public 13:2D:0D:45:53:4B:69:97:CD:B2:
Primary Certification Authority - D5:C3:39:E2:55:76:60:9B:5C:C6
G3, OU="(c) 1999 VeriSign, Inc. -
For authorized use only",
OU=VeriSign Trust Network,
O="VeriSign, Inc.", C=US
certumtrustednetworkca CN=Certum Trusted Network CA, 07:E0:32:E0:20:B7:2C:3F:19:2F:06
OU=Certum Certification Authority, :28:A2:59:3A:19:A7:0F:06:9E
O=Unizeto Technologies S.A.,
C=PL
certplusclass3pprimary CN=Class 3P Primary CA, 21:6B:2A:29:E6:2A:00:CE:82:01:4
ca O=Certplus, C=FR 6:D8:24:41:41:B9:25:11:B2:79
verisignclass3g2ca OU=VeriSign Trust Network, 85:37:1C:A6:E5:50:14:3D:CE:28:0
OU="(c) 1998 VeriSign, Inc. - For 3:47:1B:DE:3A:09:E8:F8:77:0F
authorized use only", OU=Class 3
Public Primary Certification
Authority - G2, O="VeriSign, Inc.",
C=US
globalsignr3ca CN=GlobalSign, O=GlobalSign, D6:9B:56:11:48:F0:1C:77:C5:45:7
OU=GlobalSign Root CA - R3 8:C1:09:26:DF:5B:85:69:76:AD
secomscrootca2 OU=Security Communication 5F:3B:8C:F2:F8:10:B3:7D:78:B4:C
RootCA2, O="SECOM Trust E:EC:19:19:C3:73:34:B9:C7:74
Systems CO.,LTD.", C=JP
secomscrootca1 OU=Security Communication 36:B1:2B:49:F9:81:9E:D7:4C:9E:B
RootCA1, O=SECOM Trust.net, C:38:0F:C6:56:8F:5D:AC:B2:F7
C=JP
gtecybertrustglobalca CN=GTE CyberTrust Global Root, 97:81:79:50:D8:1C:96:70:CC:34:D
OU="GTE CyberTrust Solutions, 8:09:CF:79:44:31:36:7E:F4:74
Inc.", O=GTE Corporation, C=US
verisignuniversalrootca CN=VeriSign Universal Root 36:79:CA:35:66:87:72:30:4D:30:A
Certification Authority, OU="(c) 5:FB:87:3B:0F:A7:7B:B7:0D:54
2008 VeriSign, Inc. - For authorized
use only", OU=VeriSign Trust
Network, O="VeriSign, Inc.", C=US
globalsignr2ca CN=GlobalSign, O=GlobalSign, 75:E0:AB:B6:13:85:12:27:1C:04:F
OU=GlobalSign Root CA - R2 8:5F:DD:DE:38:E4:B7:24:2E:FE

Cisco Email Encryption Compatibility Matrix

7
Supported Certificate Authorities for CRES

certplusclass2primaryc CN=Class 2 Primary CA, 74:20:74:41:72:9C:DD:92:EC:79:3

a O=Certplus, C=FR 1:D8:23:10:8D:C2:81:92:E2:BB
digicertglobalrootca CN=DigiCert Global Root CA, A8:98:5D:3A:65:E5:E5:C4:B2:D7:
OU=www.digicert.com, O=DigiCert D6:6D:40:C6:DD:2F:B1:9C:54:36
Inc, C=US
globalsignca CN=GlobalSign Root CA, OU=Root B1:BC:96:8B:D4:F4:9D:62:2A:A8:
CA, O=GlobalSign nv-sa, C=BE 9A:81:F2:15:01:52:A4:1D:82:9C
thawteprimaryrootca CN=thawte Primary Root CA, 91:C6:D6:EE:3E:8A:C8:63:84:E5:4
OU="(c) 2006 thawte, Inc. - For 8:C2:99:29:5C:75:6C:81:7B:81
authorized use only",
OU=Certification Services Division,
O="thawte, Inc.", C=US
geotrustglobalca CN=GeoTrust Global CA, DE:28:F4:A4:FF:E5:B9:2F:A3:C5:
O=GeoTrust Inc., C=US 03:D1:A3:49:A7:F9:96:2A:82:12
soneraclass2ca CN=Sonera Class2 CA, O=Sonera, 37:F7:6D:E6:07:7C:90:C5:B1:3E:9
C=FI 3:1A:B7:41:10:B4:F2:E4:9A:27
networksolutions CN=Network Solutions Certificate D6:C1:D1:45:29:E2:62:30:69:FD:D
Authority, O=Network Solutions E:A6:0C:0F:F6:88:43:29:9C:4A
L.L.C., C=US
verisigntsaca CN=Thawte Timestamping CA, 20:CE:B1:F0:F5:1C:0E:19:A9:F3:8
OU=Thawte Certification, D:B1:AA:8E:03:8C:AA:7A:C7:01
O=Thawte, L=Durbanville,
ST=Western Cape, C=ZA
quovadisrootca CN=QuoVadis Root Certification DE:3F:40:BD:50:93:D3:9B:6C:60:
Authority, OU=Root Certification F6:DA:BC:07:62:01:00:89:76:C9
Authority, O=QuoVadis Limited,
C=BM
verisignclass3secureser CN=VeriSign Class 3 Secure Server 18:85:90:E9:48:78:47:8E:33:B6:19:
ver CA, OU=Terms of use at 4E:59:FB:BB:28:FF:08:88:D5
https://www.verisign.com/rpa (c)05,
OU=VeriSign Trust Network,
O="VeriSign, Inc.", C=US
trustis OU=Trustis FPS Root CA, 3B:C0:38:0B:33:C3:F6:A6:0C:86:1
O=Trustis Limited, C=GB 5:22:93:D9:DF:F5:4B:81:C0:04
comodoaaaca CN=AAA Certificate Services, D1:EB:23:A4:6D:17:D6:8F:D9:25:
O=Comodo CA Limited, L=Salford, 64:C2:F1:F1:60:17:64:D8:E3:49
ST=Greater Manchester, C=GB
aolrootca2 CN=America Online Root 85:B5:FF:67:9B:0C:79:96:1F:C8:6
Certification Authority 2, E:44:22:00:46:13:DB:17:92:84
O=America Online Inc., C=US
keynectisrootca CN=KEYNECTIS ROOT CA, 9C:61:5C:4D:4D:85:10:3A:53:26:C
OU=ROOT, O=KEYNECTIS, C=FR 2:4D:BA:EA:E4:A2:D2:D5:CC:97
addtrustqualifiedca CN=AddTrust Qualified CA Root, 4D:23:78:EC:91:95:39:B5:00:7F:75
OU=AddTrust TTP Network, :8F:03:3B:21:1E:C5:4D:8B:CF
O=AddTrust AB, C=SE

Cisco Email Encryption Compatibility Matrix

8
 Supported Certificate Authorities for CRES

aolrootca1 CN=America Online Root 39:21:C1:15:C1:5D:0E:CA:5C:CB:

Certification Authority 1, 5B:C4:F0:7D:21:D8:05:0B:56:6A
O=America Online Inc., C=US
verisignclass2g3ca CN=VeriSign Class 2 Public 61:EF:43:D7:7F:CA:D4:61:51:BC:
Primary Certification Authority - 98:E0:C3:59:12:AF:9F:EB:63:11
G3, OU="(c) 1999 VeriSign, Inc. -
For authorized use only",
OU=VeriSign Trust Network,
O="VeriSign, Inc.", C=US
addtrustexternalca CN=AddTrust External CA Root, 02:FA:F3:E2:91:43:54:68:60:78:57:
OU=AddTrust External TTP 69:4D:F5:E4:5B:68:85:18:68
Network, O=AddTrust AB, C=SE
verisignclass2g2ca OU=VeriSign Trust Network, B3:EA:C4:47:76:C9:C8:1C:EA:F2:
OU="(c) 1998 VeriSign, Inc. - For 9D:95:B6:CC:A0:08:1B:67:EC:9D
authorized use only", OU=Class 2
Public Primary Certification
Authority - G2, O="VeriSign, Inc.",
C=US
geotrustprimarycag3 CN=GeoTrust Primary Certification 03:9E:ED:B8:0B:E7:A0:3C:69:53:
Authority - G3, OU=(c) 2008 89:3B:20:D2:D9:32:3A:4C:2A:FD
GeoTrust Inc. - For authorized use
only, O=GeoTrust Inc., C=US
swisssigngoldg2ca CN=SwissSign Gold CA - G2, D8:C5:38:8A:B7:30:1B:1B:6E:D4:
O=SwissSign AG, C=CH 7A:E6:45:25:3A:6F:9F:1A:27:61
entrust2048ca CN=Entrust.net Certification 50:30:06:09:1D:97:D4:F5:AE:39:F
Authority (2048), OU=(c) 1999 7:CB:E7:92:7D:7D:65:2D:34:31
Entrust.net Limited,
OU=www.entrust.net/CPS_2048
incorp. by ref. (limits liab.),
O=Entrust.net
camerfirmachambersig CN=Global Chambersign Root - 4A:BD:EE:EC:95:0D:35:9C:89:AE
nca 2008, O=AC Camerfirma S.A., :C7:52:A1:2C:5B:29:F6:D6:AA:0C
SERIALNUMBER=A82743287,
L=Madrid (see current address at
www.camerfirma.com/address),
C=EU
camerfirmachambersca CN=Chambers of Commerce Root - 78:6A:74:AC:76:AB:14:7F:9C:6A:
2008, O=AC Camerfirma S.A., 30:50:BA:9E:A8:7E:FE:9A:CE:3C
SERIALNUMBER=A82743287,
L=Madrid (see current address at
www.camerfirma.com/address),
C=EU
godaddyclass2ca OU=Go Daddy Class 2 Certification 27:96:BA:E6:3F:18:01:E2:77:26:1
Authority, O="The Go Daddy B:A0:D7:77:70:02:8F:20:EE:E4
Group, Inc.", C=US
utn CN=UTN-USERFirst-Hardware, 04:83:ED:33:99:AC:36:08:05:87:22
OU=http://www.usertrust.com, :ED:BC:5E:46:00:E3:BE:F9:D7
O=The USERTRUST Network,
L=Salt Lake City, ST=UT, C=US

Cisco Email Encryption Compatibility Matrix

9
 Supported Certificate Authorities for CRES

verisignclass1g3ca CN=VeriSign Class 1 Public 20:42:85:DC:F7:EB:76:41:95:57:8

Primary Certification Authority - E:13:6B:D4:B7:D1:E9:8E:46:A5
G3, OU="(c) 1999 VeriSign, Inc. -
For authorized use only",
OU=VeriSign Trust Network,
O="VeriSign, Inc.", C=US
secomevrootca1 OU=Security Communication EV FE:B8:C4:32:DC:F9:76:9A:CE:AE
RootCA1, O="SECOM Trust :3D:D8:90:8F:FD:28:86:65:64:7D
Systems CO.,LTD.", C=JP
verisignclass1g2ca OU=VeriSign Trust Network, 27:3E:E1:24:57:FD:C4:F9:0C:55:E
OU="(c) 1998 VeriSign, Inc. - For 8:2B:56:16:7F:62:F5:32:E5:47
authorized use only", OU=Class 1
Public Primary Certification
Authority - G2, O="VeriSign, Inc.",
C=US
starfieldrootcertificatea CN=Starfield Root Certificate B5:1C:06:7C:EE:2B:0C:3D:F8:55:
uthority-g2 Authority - G2, O="Starfield AB:2D:92:F4:FE:39:D4:E7:0F:0E
Technologies, Inc.", L=Scottsdale,
ST=Arizona, C=US
trustwave CN=SecureTrust CA, 87:82:C6:C3:04:35:3B:CF:D2:96:9
O=SecureTrust Corporation, C=US 2:D2:59:3E:7D:44:D9:34:FF:11
affirmtrustcommercial CN=AffirmTrust Commercial, F9:B5:B6:32:45:5F:9C:BE:EC:57:5
O=AffirmTrust, C=US F:80:DC:E9:6E:2C:C7:B2:78:B7
digicertassuredidg3 CN=DigiCert Assured ID Root G3, F5:17:A2:4F:9A:48:C6:C9:F8:A2:0
OU=www.digicert.com, O=DigiCert 0:26:9F:DC:0F:48:2C:AB:30:89
Inc, C=US
digicerttrustedrootg4 CN=DigiCert Trusted Root G4, DD:FB:16:CD:49:31:C9:73:A2:03:
OU=www.digicert.com, O=DigiCert 7D:3F:C8:3A:4D:7D:77:5D:05:E4
Inc, C=US
identrustpublicca CN=IdenTrust Public Sector Root BA:29:41:60:77:98:3F:F4:F3:EF:F
CA 1, O=IdenTrust, C=US 2:31:05:3B:2E:EA:6D:4D:45:FD
digicertglobalrootg3 CN=DigiCert Global Root G3, 7E:04:DE:89:6A:3E:66:6D:00:E6:8
OU=www.digicert.com, O=DigiCert 7:D3:3F:FA:D9:3B:E8:3D:34:9E
Inc, C=US
entrustrootcaec1 CN=Entrust Root Certification 20:D8:06:40:DF:9B:25:F5:12:25:3
Authority - EC1, OU="(c) 2012 A:11:EA:F7:59:8A:EB:14:B5:47
Entrust, Inc. - for authorized use
only", OU=See
www.entrust.net/legal-terms,
O="Entrust, Inc.", C=US
identrustdstx3 CN=DST Root CA X3, O=Digital DA:C9:02:4F:54:D8:F6:DF:94:93:5
Signature Trust Co. F:B1:73:26:38:CA:6A:D7:7C:13
comodoeccca CN=COMODO ECC Certification 9F:74:4E:9F:2B:4D:BA:EC:0F:31:
Authority, O=COMODO CA 2C:50:B6:56:3B:8E:2D:93:C3:11
Limited, L=Salford, ST=Greater
Manchester, C=GB
globalsigneccrootcar4 CN=GlobalSign, O=GlobalSign, 69:69:56:2E:40:80:F4:24:A1:E7:19
OU=GlobalSign ECC Root CA - R4 :9F:14:BA:F3:EE:58:AB:6A:BB

Cisco Email Encryption Compatibility Matrix

10
 Supported Certificate Authorities for CRES

usertrustrsaca CN=USERTrust RSA Certification 2B:8F:1B:57:33:0D:BB:A2:D0:7A:

Authority, O=The USERTRUST 6C:51:F7:0E:E9:0D:DA:B9:AD:8E
Network, L=Jersey City, ST=New
Jersey, C=US
digicertglobalrootg2 CN=DigiCert Global Root G2, DF:3C:24:F9:BF:D6:66:76:1B:26:8
OU=www.digicert.com, O=DigiCert 0:73:FE:06:D1:CC:8D:4F:82:A4
Inc, C=US
actalisauthenticationroo CN=Actalis Authentication Root F3:73:B3:87:06:5A:28:84:8A:F2:F
tca CA, O=Actalis 3:4A:CE:19:2B:DD:C7:8E:9C:AC
S.p.A./03358520967, L=Milan,
C=IT
digicertassuredidg2 CN=DigiCert Assured ID Root G2, A1:4B:48:D9:43:EE:0A:0E:40:90:4
OU=www.digicert.com, O=DigiCert F:3C:E0:A4:C0:91:93:51:5D:3F
Inc, C=US
swisscomrootevca2 CN=Swisscom Root EV CA 2, E7:A1:90:29:D3:D5:52:DC:0D:0F:
OU=Digital Certificate Services, C6:92:D3:EA:88:0D:15:2E:1A:6B
O=Swisscom, C=ch
quovadisrootca2g3 CN=QuoVadis Root CA 2 G3, 09:3C:61:F3:8B:8B:DC:7D:55:DF:
O=QuoVadis Limited, C=BM 75:38:02:05:00:E1:25:F5:C8:36
securetrustca CN=SecureTrust CA, 87:82:C6:C3:04:35:3B:CF:D2:96:9
O=SecureTrust Corporation, C=US 2:D2:59:3E:7D:44:D9:34:FF:11
identrustcommercial CN=IdenTrust Commercial Root CA DF:71:7E:AA:4A:D9:4E:C9:55:84:
1, O=IdenTrust, C=US 99:60:2D:48:DE:5F:BC:F0:3A:25
buypassclass3ca CN=Buypass Class 3 Root CA, DA:FA:F7:FA:66:84:EC:06:8F:14:5
O=Buypass AS-983163327, C=NO 0:BD:C7:C2:81:A5:BC:A9:64:57
verisignclass3g4ca CN=VeriSign Class 3 Public 22:D5:D8:DF:8F:02:31:D1:8D:F7:
Primary Certification Authority - 9D:B7:CF:8A:2D:64:C9:3F:6C:3A
G4, OU="(c) 2007 VeriSign, Inc. -
For authorized use only",
OU=VeriSign Trust Network,
O="VeriSign, Inc.", C=US
luxtrustglobalrootca CN=LuxTrust Global Root, C9:3C:34:EA:90:D9:13:0C:0F:03:0
O=LuxTrust s.a., C=LU 0:4B:98:BD:8B:35:70:91:56:11
affirmtrustnetworkingc CN=AffirmTrust Networking, 29:36:21:02:8B:20:ED:02:F5:66:C5
a O=AffirmTrust, C=US :32:D1:D6:ED:90:9F:45:00:2F
xrampglobalca CN=XRamp Global Certification B8:01:86:D1:EB:9C:86:A5:41:04:C
Authority, O=XRamp Security F:30:54:F3:4C:52:B7:E5:58:C6
Services Inc,
OU=www.xrampsecurity.com,
C=US
thawteprimaryrootcag2 CN=thawte Primary Root CA - G2, AA:DB:BC:22:23:8F:C4:01:A1:27:
OU="(c) 2007 thawte, Inc. - For BB:38:DD:F4:1D:DB:08:9E:F0:12
authorized use only", O="thawte,
Inc.", C=US

Cisco Email Encryption Compatibility Matrix

11
 Supported Certificate Authorities for CRES

usertrusteccca CN=USERTrust ECC Certification D1:CB:CA:5D:B2:D5:2A:7F:69:3B

Authority, O=The USERTRUST :67:4D:E5:F0:5A:1D:0C:95:7D:F0
Network, L=Jersey City, ST=New
Jersey, C=US
affirmtrustpremiumca CN=AffirmTrust Premium, D8:A6:33:2C:E0:03:6F:B1:85:F6:6
O=AffirmTrust, C=US 3:4F:7D:6A:06:65:26:32:28:27
dtrustclass3ca2 CN=D-TRUST Root Class 3 CA 2 58:E8:AB:B0:36:15:33:FB:80:F7:9
2009, O=D-Trust GmbH, C=DE B:1B:6D:29:D3:FF:8D:5F:00:F0
affirmtrustcommercialc CN=AffirmTrust Commercial, F9:B5:B6:32:45:5F:9C:BE:EC:57:5
a O=AffirmTrust, C=US F:80:DC:E9:6E:2C:C7:B2:78:B7
geotrustprimarycag2 CN=GeoTrust Primary Certification 8D:17:84:D5:37:F3:03:7D:EC:70:F
Authority - G2, OU=(c) 2007 E:57:8B:51:9A:99:E6:10:D7:B0
GeoTrust Inc. - For authorized use
only, O=GeoTrust Inc., C=US
starfieldrootg2ca CN=Starfield Root Certificate B5:1C:06:7C:EE:2B:0C:3D:F8:55:
Authority - G2, O="Starfield AB:2D:92:F4:FE:39:D4:E7:0F:0E
Technologies, Inc.", L=Scottsdale,
ST=Arizona, C=US
affirmtrustpremiumeccc CN=AffirmTrust Premium ECC, B8:23:6B:00:2F:1D:16:86:53:01:55
a O=AffirmTrust, C=US :6C:11:A4:37:CA:EB:FF:C3:BB
swisscomrootca2 CN=Swisscom Root CA 2, 77:47:4F:C6:30:E4:0F:4C:47:64:3F
OU=Digital Certificate Services, :84:BA:B8:C6:95:4A:8A:41:EC
O=Swisscom, C=ch
godaddyrootg2ca CN=Go Daddy Root Certificate 47:BE:AB:C9:22:EA:E8:0E:78:78:
Authority - G2, O="GoDaddy.com, 34:62:A7:9F:45:C2:54:FD:E6:8B
Inc.", L=Scottsdale, ST=Arizona,
C=US
chunghwaepkirootca OU=ePKI Root Certification 67:65:0D:F1:7E:8E:7E:5B:82:40:A
Authority, O="Chunghwa Telecom 4:F4:56:4B:CF:E2:3D:69:C6:F0
Co., Ltd.", C=TW
quovadisrootca3g3 CN=QuoVadis Root CA 3 G3, 48:12:BD:92:3C:A8:C4:39:06:E7:3
O=QuoVadis Limited, C=BM 0:6D:27:96:E6:A4:CF:22:2E:7D
quovadisrootca1g3 CN=QuoVadis Root CA 1 G3, 1B:8E:EA:57:96:29:1A:C9:39:EA:
O=QuoVadis Limited, C=BM B8:0A:81:1A:73:73:C0:93:79:67
comodorsaca CN=COMODO RSA Certification AF:E5:D2:44:A8:D1:19:42:30:FF:4
Authority, O=COMODO CA 7:9F:E2:F8:97:BB:CD:7A:8C:B4
Limited, L=Salford, ST=Greater
Manchester, C=GB
buypassclass2ca CN=Buypass Class 2 Root CA, 49:0A:75:74:DE:87:0A:47:FE:58:E
O=Buypass AS-983163327, C=NO E:F6:C7:6B:EB:C6:0B:12:40:99
dtrustclass3ca2ev CN=D-TRUST Root Class 3 CA 2 96:C9:1B:0B:95:B4:10:98:42:FA:D
EV 2009, O=D-Trust GmbH, C=DE 0:D8:22:79:FE:60:FA:B9:16:83

Cisco Email Encryption Compatibility Matrix

12
globalsigneccrootcar5 CN=GlobalSign, O=GlobalSign, 1F:24:C6:30:CD:A4:18:EF:20:69:F
OU=GlobalSign ECC Root CA - R5 F:AD:4F:DD:5F:46:3A:1B:69:AA
starfieldservicesrootg2c CN=Starfield Services Root 92:5A:8F:8D:2C:6D:04:E0:66:5F:5
a Certificate Authority - G2, 9:6A:FF:22:D8:63:E8:25:6F:3F
O="Starfield Technologies, Inc.",
L=Scottsdale, ST=Arizona, C=US

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of
Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The
use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R)

Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples,
command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use
of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

© 2019-2020 Cisco Systems, Inc. and/or its affiliates. All rights reserved.

Cisco Email Encryption Compatibility Matrix

13