Google Cloud Certificate Manager
docs.cloud.google.com
Spec sheet
- Purpose
- Certificate Manager simplifies the acquisition, deployment, and management of TLS certificates.Read 4 Oct 2026 · docs.cloud.google.com
- Security
- Google-managed certificates remove the need for customers to manage certificate private keys, and Certificate Manager supports mTLS on load balancers.Read 4 Oct 2026 · docs.cloud.google.com
- API quota
- The default Certificate Manager API request, read request, and write request quotas are each 300 per minute.Read 4 Oct 2026 · docs.cloud.google.com
- Certificate maps
- Certificate maps assign certificates to hostnames and can be reused across multiple target proxies.Read 4 Oct 2026 · docs.cloud.google.com
- Domain validation
- Domain ownership can be verified using DNS-based or load balancer-based authorization.Read 4 Oct 2026 · docs.cloud.google.com
- Issuance limits
- Google-managed certificates allow at most 100 subject alternative name domains with DNS authorization and five with load balancer authorization.Read 4 Oct 2026 · docs.cloud.google.com
- Issuing authorities
- Publicly trusted Google-managed certificates are issued through the Public Certificate Authority or Let's Encrypt; privately trusted Google-managed certificates use Certificate Authority Service.Read 4 Oct 2026 · docs.cloud.google.com
- Managed certificates
- Google-managed certificates can be automatically issued and renewed, while self-managed certificates are uploaded and managed by the user.Read 4 Oct 2026 · docs.cloud.google.com
- Management interfaces
- Certificates can be managed using the Google Cloud console, Google Cloud CLI, or Certificate Manager API.Read 4 Oct 2026 · docs.cloud.google.com
- Pricing requirement
- Using Certificate Manager requires a billing account, and Public CA-issued certificates are free while provisioning them through Certificate Manager can incur charges.Read 4 Oct 2026 · cloud.google.com
- Public certificate authority
- The Public Certificate Authority feature uses ACME to provide publicly trusted certificates for endpoints users manage.Read 4 Oct 2026 · docs.cloud.google.com
- Supported services
- It supports global and regional certificates on Google Cloud load balancers, regional certificates on Secure Web Proxy, and global certificates on Media CDN.Read 4 Oct 2026 · docs.cloud.google.com
Plans and prices
Certificate Manager Price not published Per certificate per month: 0–100 certificates are $0.00; 100–2,000 are $0.000273973 per hour; 2,000 and above are $0.000136986 per hour. RSA-3072/RSA-4096 deployment and qualifying mTLS connections cost $0.45 per 1,000,000; Public CA-issued certificates are free. Requires a billing account · Regional certificates are counted and tiered separately from global certificates · Other services, including Certificate Authority Service, may incur additional charges Read 4 Oct 2026 · cloud.google.com
Where Specifiction places it
- Certificate Management Software#24 of 317.0