Public Key Infrastructure Software
Alternatives to Let's Encrypt
The tools Specifiction weighs against Let's Encrypt, from its list of public key infrastructure software, each with its plans, platforms and spec score.
- 01
EJBCA EJBCA suits organizations managing internal PKIs or securing industrial, IoT, DevOps, or national eID environments.
From £5,172.08/mo Free plan Open source Web · Windows · macOS · Linux9.2 Visit Specs - 02
KeyTalk CKMS CKMS suits businesses managing digital certificates and keys, including managed service providers serving customers.
From €5/mo Free trial Web · Windows · macOS · Linux8.8 Visit Specs - 03 EZCA
It suits organizations managing certificates across users, devices, applications, and IoT, especially those using Azure or existing PKI.
From $200/mo Free trial Web · Windows · macOS · Linux8.4 Visit Specs - 04 OpenCA PKI
OpenCA PKI suits teams seeking free, on-premises PKI management and able to meet its software prerequisites.
Free plan Open source Web · Windows · macOS · Linux8.4 Visit Specs - 05
AWS Private Certificate Authority From $50/mo Free trial Web · API8.3 Visit Specs - 06 step-ca
step-ca suits DevOps teams that need a private CA for certificates used by VMs, containers, APIs, databases, Kubernetes pods or people.
Free plan Open source Windows · macOS · Linux · API8.2 Visit Specs - 07
AppViewX PKIaaS Free trial Web · API · Self-hosted8.1 Visit Specs - 08 Boulder
Boulder suits developers experimenting with ACME or working on systems aligned with Let’s Encrypt’s needs.
Free plan Linux · API · Self-hosted8.0 Visit Specs - 09
cert-manager cert-manager suits teams running Kubernetes or OpenShift workloads that need managed certificates for public-facing or internal services.
Free plan Linux · API · Self-hosted8.0 Visit Specs - 10 Dogtag Certificate System Free plan Linux · API · Self-hosted7.9 Visit Specs
- 11
Keyfactor Platform It suits PKI, security, infrastructure, and DevOps teams that need certificate visibility, lifecycle controls, and automation across environments.
Free trial Web · API · Self-hosted7.9 Visit Specs - 12 Entrust Certificate Manager
It suits organizations that need to discover and manage certificates across varied environments and certificate authorities.
Web · Linux · iOS · Android7.7 Visit Specs - 13 OpenXPKI
It suits system administrators, IT operations staff, PKI operators, developers, and integration engineers managing professional PKI environments.
Free plan Web · Linux · API · Self-hosted7.6 Visit Specs - 14
DigiCert Private CA Web · Linux · API · Self-hosted7.4 Visit Specs - 15 XiPKI
XiPKI suits organizations needing self-hosted certificate authority, registration authority, and OCSP services, particularly in critical infrastructure.
Free plan macOS · Linux · API · Self-hosted7.3 Visit Specs - 16 Google Cloud Secret Manager From $0.01/mo Free plan Web7.0 Visit Specs
- 17
Microsoft Cloud PKI From $2/mo Windows · macOS · iOS · Android6.5 Visit Specs - 18 Microsoft Active Directory From $33.58/mo Windows6.4 Visit Specs
- 19 HashiCorp Vault Windows · macOS · Linux6.2 Visit Specs
- 20 CFSSL Windows · macOS · Linux6.1 Visit Specs
- 21 GlobalSign Managed PKI Web5.8 Visit Specs
- 22 SecureW2 Managed PKI Web · Windows · macOS · Linux5.7 Visit Specs
- 23 Sectigo Private PKI Web5.4 Visit Specs
- 24 SSL.com Private Enterprise PKI Web5.3 Visit Specs
- 25 Smallstep Certificate Manager Web5.2 Visit Specs
Let's Encrypt, head to head
- Let's Encrypt vs EJBCA
- Let's Encrypt vs KeyTalk CKMS
- Let's Encrypt vs EZCA
- Let's Encrypt vs OpenCA PKI
- Let's Encrypt vs AWS Private Certificate Authority
- Let's Encrypt vs step-ca
- Let's Encrypt vs AppViewX PKIaaS
- Let's Encrypt vs Boulder
- Let's Encrypt vs cert-manager
- Let's Encrypt vs Dogtag Certificate System
- Let's Encrypt vs Keyfactor Platform
- Let's Encrypt vs Entrust Certificate Manager