AWS Private Certificate Authority pricing
5 plans read from aws.amazon.com
30-day CA operation trialFree First 30 days for the first private CA created in each account and RegionCA operation only · Issued certificates still incur charges Read 4 Oct 2026 · aws.amazon.com
Short-lived private certificates$0.06, paid once Per certificate issuedShort-lived certificate mode CA · 1+ certificates Read 4 Oct 2026 · aws.amazon.com
General-purpose private certificates$0.75, paid once Per certificate issued; calendar-month tiers per Region: 1–1,000 $0.75 each, 1,001–10,000 $0.35 each, 10,001+ $0.001 eachGeneral-purpose mode CA Read 4 Oct 2026 · aws.amazon.com
Short-lived certificate mode CA operation$50 a month Per private CA; prorated for partial monthsCertificates valid up to 7 days · Certificate issuance charged separately Read 4 Oct 2026 · aws.amazon.com
General-purpose mode CA operation$400 a month Per private CA; prorated for partial monthsCan issue certificates with any validity period · Certificate issuance charged separately Read 4 Oct 2026 · aws.amazon.com
In short
- AWS Private Certificate Authority has a free plan (30-day CA operation trial).
- A free trial is offered.
- Paid plans published: 4, from $50 a month.
What the alternatives costAll alternatives →
| Tool | From | Free plan | Free trial |
|---|---|---|---|
| EJBCA | £5,172.08/mo | Yes | Yes |
| KeyTalk CKMS | €5/mo | No | Yes |
| Let's Encrypt | — | Yes | No |
| EZCA | $200/mo | No | Yes |
| OpenCA PKI | — | Yes | No |
| step-ca | — | Yes | No |
| AppViewX PKIaaS | — | No | Yes |
| Boulder | — | Yes | No |