AWS Private Certificate Authority vs Entrust Certificate Manager
AWS Private Certificate Authority
aws.amazon.comEntrust Certificate Manager
entrust.comSide by side
| Figure | AWS Private Certificate Authority | Entrust Certificate Manager |
|---|---|---|
| Price from | $50/mo | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| Linux | — | Yes |
| iOS | — | Yes |
| Android | — | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 5 | 1 |
| Spec score · Public Key Infrastructure Software | 8.3 (#6) | 7.7 (#13) |
| Purpose | AWS Private CA is a managed service for issuing and managing private certificates and maintaining an organization's internal PKI. | Certificate Manager centralizes visibility, control, and automated lifecycle management, covering discovery, audit, issuance, renewal, and revocation. |
Plans
AWS Private Certificate Authority
- 30-day CA operation trialFree
- Short-lived private certificates$0.06, paid once
- General-purpose private certificates$0.75, paid once
- Short-lived certificate mode CA operation$50 a month
- General-purpose mode CA operation$400 a month
Entrust Certificate Manager
- Entrust Certificate ManagerPriced on request
In their own words
AWS Private Certificate Authority
AWS Private Certificate Authority has no write-up on Specifiction yet; its figures are above.
Entrust Certificate Manager
Entrust Certificate Manager centralizes discovery and lifecycle management for digital certificates, from audit and issuance through renewal and revocation. It can find certificates across networks, cloud environments, and CA repositories, then provide continuous monitoring, reports, and alerts. Policy-driven workflows automate lifecycle steps, and certificates from Entrust and third-party CAs can be managed through one control point. Entrust describes deployment across on-premises, private cloud, and public cloud environments. Integration choices include cloud, automation, CA gateway, enrollment protocol, secrets management, and custom REST APIs. The API can query certificates by metadata, import certificates, and update custom-field metadata, subject to token permissions. Compatibility information lists PostgreSQL 15 or higher, OpenID Connect 1.0, LDAP v3, and other specified components. Entrust says the product supports crypto-agility and post-quantum readiness. Pricing is on request, and there is no free plan. Entrust was founded in 1969 and is headquartered in Minneapolis, Minnesota.