EJBCA vs SSL.com Certificate Lifecycle Management
EJBCA
ejbca.orgSSL.com Certificate Lifecycle Management
ssl.comSide by side
| Figure | EJBCA | SSL.com Certificate Lifecycle Management |
|---|---|---|
| Price from | £5,172.08/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 5 | 0 |
| Spec score · Certificate Management Software | 9.2 (#2) | 6.7 (#26) |
| Automation | Official materials provide Helm charts and Ansible playbooks for automated deployment and configuration. | SSL.com supports automated certificate issuance and renewal through ACME. |
| Founded | 2001 | 2002 |
| Intended users | EJBCA is presented for securing industrial environments, IoT devices, national eIDs, DevOps workflows, and internal PKIs. | The page recommends native notifications and ACME for smaller fleets, and integrations with Venafi or Keyfactor for organizations already using those CLM platforms or needing broader fleet capabilities. |
Plans
EJBCA
- EJBCA Community EditionFree
- EJBCA Enterprise Cloud trialFree
- EJBCA Enterprise trialFree
- EJBCA PKI SaaS£62,065 a year
- EJBCA EnterprisePriced on request
SSL.com Certificate Lifecycle Management
No plans published.
In their own words
EJBCA
EJBCA is open-source PKI and Certificate Authority software for managing certificates, registration, enrollment, and validation. A single installation can host multiple independent PKIs separated through CA, RA, and VA modules. Certificate validation uses OCSP and CRL, and enrollment options listed for Community and Enterprise include CMP, SCEP, EST, ACME, SOAP API, and REST APIs. Community Edition can be deployed with Helm, as a container, or from source, with Helm and Ansible playbooks available for automating setup and configuration. Its stated use cases include internal PKIs, DevOps workflows, industrial environments, IoT devices, and national eIDs. Community is free under LGPL version 2.1 or later for learning, testing, and prototyping, but is not intended for production because it lacks production audit, compliance, SLA, high-availability, and security capabilities. Enterprise adds advanced PKI functionality and professional support with an SLA; a 30-day trial is available through AWS or Azure marketplaces.
SSL.com Certificate Lifecycle Management
SSL.com Certificate Lifecycle Management supplies SSL.com certificates for use inside an existing certificate-lifecycle platform or a custom workflow. It acts as the Certificate Authority rather than a complete CLM system. An SSL.com account lists certificates issued through that account, supports downloading, renewal, reissue, and individual or bulk revocation, and sends email alerts before expiry. ACME can automate issuance and renewal. Venafi TPP users can connect through the Adaptable Driver for SSL/TLS, client-authentication, S/MIME, and code-signing certificates. The AnyCA Gateway REST plugin connects with Keyfactor Command 12.3 and later for issuing, revoking, and synchronizing certificates. Two REST/JSON APIs are available, with the Developer Portal API recommended for new integrations. Native network-wide discovery, multi-CA inventory, approval workflows, custom request forms, and fleet-wide RBAC are not provided. The service runs in the cloud and supports certificate profiles, SCEP, EST, HSM integration, cloud signing, trusted timestamping, and CI/CD signing.