I saw a cipher suite EXP-EDH-RSA-DES-CBC-SHA, EXP stands for export, How do I explain the "export"? What is the different between "EXP-EDH-RSA-DES-CBC-SHA" and "EDH-RSA-DES-CBC-SHA"?
"Export" means ciphersuites that were designed to be sufficiently weak they could legally be exported from the US back in the 1990s when there were much stricter legal limits on exporting encryption from the US (and some other countries, but Netscape was in the US). See Which SSL/TLS ciphers can be considered secure? for a summary, various sections of TLSv1 for the gory details, and TLSv1.1 for a vestige. TLSv1.2 deleted it altogether except for a reserved alert code.
The difference between EXP-EDH-RSA-DES-CBC-SHA and EDH-RSA-DES-CBC-SHA is that the first uses export-limited ephemeral Diffie-Hellman key exchange with RSA authentication (EDH-RSA) and 40-bit DES in CBC mode symmetric encryption with HMAC-SHA1 integrity (DES-CBC-SHA); the second uses export-limited RSA key exchange and authentication (RSA) (which possibly/usually uses a temporary RSA key for key exchange) and the same symmetric encryption and integrity.
The similarities are that both use a special variant key-derivation function, and both should not be or have been used for any security purpose after about 2002.