Side by side
AWS Private Certificate Authority vs OpenXPKI
Both stand on public key infrastructure software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free trial APIWeb
AWS Private Certificate Authority combines managed internal PKI operations with automation, access controls, revocation options, and integrations. Its paid CA operation and certificate charges should be considered alongside the available trial.
Visit AWS Private Certificate Authority Free plan APILinuxSelf-hosted+1
OpenXPKI covers certificate lifecycle workflows, multiple PKI Realms, integrations, and reporting. Community Edition is free; Enterprise Edition and service options list additional modules and support arrangements.
Visit OpenXPKIThe facts
| AWS Private Certificate Authority | OpenXPKI | |
|---|---|---|
| Free plan | A free trial | Yes |
| Open source | Not published | Not published |
| Runs on | API, Web | API, Linux, Self-hosted, Web |
| Lowest paid plan | See the plans | Free or on request |
| Plans published | 5 | 3 |
| Maker | Not published | Not published |
| Website | aws.amazon.com | openxpki.org |
| On public key infrastructure software | #12 of 26 | #8 of 26 |
AWS Private Certificate Authority: what it does well
- Supports general-purpose and short-lived certificates
- Automation through APIs, CLI, SDKs, and CloudFormation
- Connectors for Active Directory, Kubernetes, and SCEP
- HSM protection follows FIPS 140-2 standards
- OCSP and certificate revocation list support
What to know first
- No free plan
- General-purpose CA operation costs $400.00 per month
- Hierarchy limited to five tiers
- Does not support Merkle Tree Certificates
OpenXPKI: what it does well
- Supports certificate request, renewal, and revocation workflows.
- Enrollment interfaces include SCEP, EST, SimpleCMC, and ACME.
- A single instance can host multiple PKI Realms.
- Supports HSMs through PKCS#11.
- Community Edition is free and includes mailing-list support.
What to know first
- Community Edition packages are listed for Debian 12.
- Community Edition support is through a mailing list.
- Commercial support options and SLAs are separate offerings.
Alternatives to AWS Private Certificate Authority Alternatives to OpenXPKI The whole list