Instead of Let's Encrypt
Let's Encrypt alternatives
Let’s Encrypt provides free Domain Validation certificates for HTTPS, with ACME-based issuance and clients that can automate management and renewal. It supports wildcard certificates, keeps private keys on subscribers’ own servers, and is trusted by most browsers and operating systems. Its default certificates last 90 days, with an optional six-day lifetime; those terms cannot be adjusted. It does not offer OV or EV certificates, direct subscriber support, or a Windows desktop platform, though its clients cover Windows and IIS environments.
- 1
Certify The Web
Free plan APILinuxMac+3Windows certificate deployment across varied services — Certify The Web can manage several ACME authorities and adds deployment integrations and centralized certificate monitoring.
- 2
GeoTrust
Paid APILinuxWeb+1Businesses needing certificates and security scans — GeoTrust adds OV and EV certificates, daily SSL monitoring, and vulnerability scanning, but is paid.
- 3
acme.sh
Free plan LinuxMacSelf-hosted+1Shell-based certificate automation across CAs — acme.sh is a shell-script ACME client that supports multiple CAs and certificate types, with ZeroSSL as its default CA.
- 4
Certbot
Free plan LinuxMacSelf-hosted+1Command-line admins automating website HTTPS — Certbot is free open-source software for automating Let’s Encrypt certificates from a command line, rather than a different CA.
- 5
EJBCA
Free plan Open source APILinuxMac+3Organizations building multi-PKI certificate systems — EJBCA provides PKI and CA software for multiple separated PKIs, enrollment protocols, and certificate validation.
- 6
lego
Free plan APILinuxMac+1Go developers needing an ACME client or library — lego offers both a Go library and CLI, with more than 200 DNS-provider integrations and certificate revocation.
- 7
OpenXPKI
Free plan APILinuxSelf-hosted+1Enterprises managing custom certificate policies — OpenXPKI manages customizable PKI realms, workflows, and policies, rather than only issuing Let’s Encrypt DV certificates.
- 8
AWS Certificate Manager
Free plan APIWeb - 9
cert-manager
Free plan APILinuxSelf-hosted - 10
Dogtag Certificate System
Free plan APILinuxSelf-hosted - 11
ManageEngine Key Manager Plus
Free plan APILinuxSelf-hosted+2 - 12
Google Cloud Certificate Manager
Free plan APIWeb - 13
win-acme
Free plan Windows - 14
KeyTalk CKMS
Free trial AndroidAPIiPhone+5 - 15
Keyfactor Platform
Free trial APISelf-hostedWeb - 16
Oracle Cloud Infrastructure Certificates
Free plan Web - 17
DigiCert ONE
Paid APILinuxMac+3 - 18
DigiCert Trust Lifecycle Manager
Paid APILinuxWeb+15.9 Visit site - 19
Entrust Certificate Manager
Paid AndroidAPIiPhone+3 - 20
Qualys Certificate Inventory
Free plan Web - 21
Garnet Certificate Lifecycle Management
Paid APILinuxWindows - 22
Sectigo Certificate Manager
Free trial APIWeb - 23
Certynx
Paid APISelf-hostedWeb - 24
GlobalSign Atlas
Paid APIWeb
Alternatives may suit readers who need other certificate authorities, broader certificate types, centralized oversight, or a private certificate authority for multiple systems. Some are tools for operating ACME workflows rather than certificate issuers, while others add monitoring, vulnerability scans, or wider PKI controls. Compare whether you need a different CA, an easier deployment path, or an organization-specific certificate system, and weigh cost, platform fit, validation and renewal options, and the level of administration required.
← Back to Let's Encrypt The whole certificate management software list