AWS Private Certificate Authority

6.8easy start · #8 of 25
in Public Key Infrastructure Software

Free to practise onnot on record
Free trialyes
Well documentedyes
Runs where you worknot on record

Runs on api, Web. Paid plans from $50/mo.

AWS Private Certificate Authority is ranked #8 of 25 in public key infrastructure software on The Geeks Club. It runs on API, Web. There is no free plan. A free trial is offered. Paid plans start at $50/mo.

AWS Private Certificate Authority plans and pricing

All plans

30-day CA operation trial Free First 30 days for the first private CA created in each account and Region CA operation only · Issued certificates still incur charges aws.amazon.com · 4 Oct 2026

Short-lived private certificates $0.06 once Per certificate issued Short-lived certificate mode CA · 1+ certificates aws.amazon.com · 4 Oct 2026

General-purpose private certificates $0.75 once Per certificate issued; calendar-month tiers per Region: 1–1,000 $0.75 each, 1,001–10,000 $0.35 each, 10,001+ $0.001 each General-purpose mode CA aws.amazon.com · 4 Oct 2026

Short-lived certificate mode CA operation $50/mo Per private CA; prorated for partial months Certificates valid up to 7 days · Certificate issuance charged separately aws.amazon.com · 4 Oct 2026

General-purpose mode CA operation $400/mo Per private CA; prorated for partial months Can issue certificates with any validity period · Certificate issuance charged separately aws.amazon.com · 4 Oct 2026

Compared on public key infrastructure software

Free plan: No
Paid from: $50/mo
Deployment model: cloud
SCEP support: Yes
HSM integration: Yes
Certificate profiles: Yes

Best AWS Private Certificate Authority alternatives

See all 20

EZCA 0 of 4 in the starter kit Lesson 17.3 KeyTalk CKMS 0 of 4 in the starter kit Lesson 27.2 OpenCA PKI 0 of 4 in the starter kit Lesson 37.2 step-ca 0 of 4 in the starter kit Lesson 47.2 XiPKI 0 of 4 in the starter kit Lesson 57.1 Keyfactor Platform 0 of 4 in the starter kit Lesson 67.0

The record

Purpose: AWS Private CA is a managed service for issuing and managing private certificates and maintaining an organization's internal PKI.
Resources protected: Certificates can identify and protect servers, applications, users, devices, and containers.
Operating modes: General-purpose mode supports any certificate validity period, while short-lived mode supports certificates valid for up to 7 days.
Automation: Certificate and CA management can be automated using APIs, AWS CLI commands, SDKs, and CloudFormation templates.
CA connectors: The service offers connectors for Active Directory, Kubernetes, and SCEP; the pricing page says these connectors have no additional charge.
Integrations: The SCEP connector can work with mobile device management solutions such as Microsoft Intune and Jamf Pro.
Key protection: AWS Private CA protects CA keys with AWS-managed hardware security modules that adhere to FIPS 140-2 security standards.
Access controls: IAM policies can control who manages certificate authorities and who can issue or revoke certificates.
Revocation: Customers can distribute certificate revocation information using OCSP, certificate revocation lists, or both.
Audit logging: AWS Private CA integrates with CloudTrail, which captures service API calls and can deliver log files to an Amazon S3 bucket.
CA hierarchy limit: AWS Private CA supports a hierarchy up to five tiers deep: a root, three subordinate CA levels, and one issuing CA.
Notable limitation: AWS Private CA does not currently support Merkle Tree Certificates.
Company background: Amazon Web Services says it launched in 2006 and is part of Amazon.
Support agreement: AWS states that AWS Private CA has a service level agreement.
Price from: $50/mo

Where it ranks on The Geeks Club

Best Public Key Infrastructure Software in 2026#8 of 25

Is AWS Private Certificate Authority yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote AWS Private Certificate Authority

Sources

aws.amazon.com/private-ca/faqs/· checked 4 Oct 2026
aws.amazon.com/private-ca/features/· checked 4 Oct 2026
aws.amazon.com/private-ca/pricing/· checked 4 Oct 2026
aws.amazon.com/about-aws/· checked 4 Oct 2026