The processing of security certificates is an entire field : most of the time, web browsers don’t use high level certificates validation functions of security libraries like openssl directly, but uses sub functions of securities libraries instead.

In the current case, I need to know which browser support keyusage extension but not the extendedkeyusage extension and that support the subjectAltName extension (x509 extensions in all cases).