Side by side
DigiCert Private CA vs EZCA
Both stand on public key infrastructure software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Choose DigiCert Private CA if you need private PKI across on-premises or cloud environments, with hosted and customer-hosted deployment choices and API-based management. Check the subscription licensing limits for the deployment model you plan to use, and request pricing from DigiCert.
Visit DigiCert Private CAChoose EZCA if you need cloud CA management with protocol support, Microsoft integrations, and options for connecting an existing CA. Compare the per-CA and per-location plan costs against your deployment needs; there is no free plan.
Visit EZCAThe facts
| DigiCert Private CA | EZCA | |
|---|---|---|
| Free plan | Not published | A free trial |
| Open source | Not published | Not published |
| Runs on | API, Linux, Self-hosted, Web | Android, API, iPhone, Linux, Mac, Self-hosted, Web, Windows |
| Lowest paid plan | Free or on request | Basic: $200 a month |
| Plans published | 1 | 4 |
| Maker | Not published | Not published |
| Website | digicert.com | keytos.io |
| On public key infrastructure software | #17 of 26 | #13 of 26 |
DigiCert Private CA: what it does well
- Choose DigiCert-hosted or customer-hosted deployment.
- Customer-hosted deployments support offline or air-gapped authorities.
- Configure roots, intermediates, HSMs, CRL, OCSP, and enrollment protocols.
- API supports CA lifecycle tasks, templates, and audit log monitoring.
- API authentication supports service-user tokens and mutual TLS.
What to know first
- Pricing is available on request.
- DigiCert-hosted deployments have soft limits with overages.
- On-premises licensing has hard limits.
EZCA: what it does well
- Issues certificates through ACME, EST, and SCEP.
- Integrates with Azure, Entra ID, Intune, and Azure Key Vault.
- Supports device certificates through Intune and Jamf.
- Logs CA changes, requests, and approvals for SIEM export.
- Supports revocation checks through CRLs and OCSP.
What to know first
- No free plan is listed.
- Basic and Premium are priced per CA per month.
- Private Infrastructure and Self-Hosted Licensing are priced per location per month.
Alternatives to DigiCert Private CA Alternatives to EZCA The whole list