Dogtag Certificate System vs Let's Encrypt
Dogtag Certificate System
dogtagpki.orgLet's Encrypt
letsencrypt.orgSide by side
| Figure | Dogtag Certificate System | Let's Encrypt |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | Yes |
| Web | — | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Certificate Management Software | 7.9 (#12) | 8.6 (#5) |
| Spec score · Public Key Infrastructure Software | 7.9 (#11) | 8.6 (#3) |
| Intended users | The site describes Dogtag as a collection of technologies for enterprises deploying PKI on a large scale. | The service is available to people and organizations worldwide that need certificates for domain-named servers, including web, mail, and FTP servers. |
| License | The project README identifies the software license as GPL-2.0. | Boulder is open source under the Mozilla Public License 2.0. |
Plans
Let's Encrypt
- Let's Encrypt certificatesFree
- Let's Encrypt certificatesFree
- Short-lived certificatesFree
In their own words
Dogtag Certificate System
Dogtag Certificate System has no write-up on Specifiction yet; its figures are above.
Let's Encrypt
Let’s Encrypt is a global Certificate Authority that provides SSL/TLS certificates for HTTPS connections. The ACME protocol verifies control of a domain, and compatible clients can automate issuance, management, and renewal. Its client directory includes Apache HTTP Server, Caddy, nginx, Kubernetes, Docker, and Windows/IIS environments. Certificates are Domain Validation only; Let’s Encrypt says it does not plan to issue Organization Validation or Extended Validation certificates. Wildcard certificates are available through the DNS-01 challenge. Standard certificates last 90 days, with an optional six-day lifetime; these periods cannot be adjusted. Subscribers generate and manage private keys on their own servers. Issued and revoked certificates are publicly recorded, and the service says its certificates are trusted by most browsers and operating systems. Certificates cost nothing. A registered domain can receive up to 50 certificates every seven days under published rate limits. Direct subscriber support is not offered.