Skip to content
SPECIFICTION
Get listed

DigiCert Trust Lifecycle Manager vs Let's Encrypt

DigiCert Trust Lifecycle Manager

digicert.com

Let's Encrypt

letsencrypt.org

Side by side

FigureDigiCert Trust Lifecycle ManagerLet's Encrypt
Price from$3.33/moFree
Free plan—Yes
Free trial——
Open source—Yes
WebYesYes
WindowsYesYes
macOS—Yes
LinuxYesYes
APIYesYes
Self-hosted—Yes
Plans published33
Spec score · Certificate Management Software8.0 (#11)8.6 (#5)
AutomationThe service automates certificate renewals and routine changes and supports ACME, EST, SCEP, CMPv2, and REST APIs.The ACME protocol verifies control of a domain and is used to issue certificates; clients can automate certificate management and renewal.
IntegrationsPre-built connectors cover appliances, certificate authorities, cloud services, DNS integrations, infrastructure automation, IT service management, scan solutions, secrets managers, UEM, and vaults.Hosting providers can obtain and manage certificates for customers through their own ACME clients.

Plans

DigiCert Trust Lifecycle Manager

  • Essentials$40 a year
  • AdvancedPriced on request
  • PremiumPriced on request

DigiCert Trust Lifecycle Manager pricing →

Let's Encrypt

  • Let's Encrypt certificatesFree
  • Let's Encrypt certificatesFree
  • Short-lived certificatesFree

Let's Encrypt pricing →

In their own words

DigiCert Trust Lifecycle Manager

DigiCert Trust Lifecycle Manager has no write-up on Specifiction yet; its figures are above.

Visit digicert.com

Let's Encrypt

Let’s Encrypt is a global Certificate Authority that provides SSL/TLS certificates for HTTPS connections. The ACME protocol verifies control of a domain, and compatible clients can automate issuance, management, and renewal. Its client directory includes Apache HTTP Server, Caddy, nginx, Kubernetes, Docker, and Windows/IIS environments. Certificates are Domain Validation only; Let’s Encrypt says it does not plan to issue Organization Validation or Extended Validation certificates. Wildcard certificates are available through the DNS-01 challenge. Standard certificates last 90 days, with an optional six-day lifetime; these periods cannot be adjusted. Subscribers generate and manage private keys on their own servers. Issued and revoked certificates are publicly recorded, and the service says its certificates are trusted by most browsers and operating systems. Certificates cost nothing. A registered domain can receive up to 50 certificates every seven days under published rate limits. Direct subscriber support is not offered.

Visit letsencrypt.org