EJBCA vs GeoTrust
EJBCA
ejbca.org
GeoTrust
geotrust.comSide by side
| Figure | EJBCA | GeoTrust |
|---|---|---|
| Price from | £5,172.08/mo | $2/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | — |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 5 | 8 |
| Spec score · Certificate Management Software | 9.2 (#2) | 8.3 (#8) |
| Certificate validation | EJBCA supports certificate validation through OCSP and CRL functionality. | DV certificates are issued immediately, OV certificates in one day, and EV certificates in one to three days, according to the product page. |
| Intended users | EJBCA is presented for securing industrial environments, IoT devices, national eIDs, DevOps workflows, and internal PKIs. | GeoTrust says Horizon is built for small and medium businesses and fast-moving builders. |
| Support | Enterprise includes professional support with an SLA, while Community users can access GitHub Discussions on a best-effort basis. | Technical chat support is available 24/7, email support is offered through ticket submission, and phone support is available five days a week. |
Plans
EJBCA
- EJBCA Community EditionFree
- EJBCA Enterprise Cloud trialFree
- EJBCA Enterprise trialFree
- EJBCA PKI SaaS£62,065 a year
- EJBCA EnterprisePriced on request
GeoTrust
- AutoInstall SSLFree
- SSL Monitor$2 a month
- Vulnerability Manager$12 a month
- QuickSSL Premium (DV SSL)$192 a year
- TrueBusiness ID (OV SSL)$372 a year
- TrueBusiness ID with EV (EV SSL)$540 a year
- DMARC ManagerPriced on request
- Uptime MonitorPriced on request
In their own words
EJBCA
EJBCA is open-source PKI and Certificate Authority software for managing certificates, registration, enrollment, and validation. A single installation can host multiple independent PKIs separated through CA, RA, and VA modules. Certificate validation uses OCSP and CRL, and enrollment options listed for Community and Enterprise include CMP, SCEP, EST, ACME, SOAP API, and REST APIs. Community Edition can be deployed with Helm, as a container, or from source, with Helm and Ansible playbooks available for automating setup and configuration. Its stated use cases include internal PKIs, DevOps workflows, industrial environments, IoT devices, and national eIDs. Community is free under LGPL version 2.1 or later for learning, testing, and prototyping, but is not intended for production because it lacks production audit, compliance, SLA, high-availability, and security capabilities. Enterprise adds advanced PKI functionality and professional support with an SLA; a 30-day trial is available through AWS or Azure marketplaces.
GeoTrust
GeoTrust Horizon is a security platform for SSL certificates, certificate automation and monitoring, and vulnerability management. GeoTrust says it is intended for small and medium businesses and fast-moving builders. It offers DV, OV, and EV certificates issued from DigiCert trusted roots. AutoInstall SSL automates certificate installation, re-issuance, and renewal, supporting Apache, NGINX, IIS, LiteSpeed, cPanel, Kubernetes, Docker, and more. With automatic renewal enabled, certificates renew 28 days before expiry. SSL Monitor checks domains and subdomains daily for certificate expiry, trust issues, HTTPS vulnerabilities, and more than 110 SSL issues. Vulnerability Manager scans servers daily for more than 375,000 vulnerabilities and provides remediation instructions; scans can be internal with an installed agent or external without one. GeoTrust says the tool uses Qualys vulnerability detection technology. SSL Monitor costs $2 a month per standard domain, and Vulnerability Manager costs $12 a month per server. Technical chat support is available 24/7; email support uses tickets and phone support is available five days a week.