Is certificate management priced per certificate?

Sometimes. Vendors may charge per CA, managed certificate, identity, location or agreed service scope. Record the billing unit and included work before comparing totals.

Does CertLocker publish monthly plan prices?

No. There is no charge to get started with hosted CertLocker. Scope, capacity, support and commercial terms are agreed before any paid service begins. The Services & access page is the current source; old tier screenshots are historical.

Does a CA subscription include deployment to every service?

Check the specific product and integration. Issuance, file delivery, service activation and live verification are separate steps. Ask the vendor to demonstrate the complete workflow for your destination systems.

Certificate Management Pricing: What Are You Paying For?

Certificate management pricing can use different units: a certificate authority (CA), a managed certificate, an identity, a location or agreed service scope. Two headline prices can cover different jobs. Write down the unit, the included workflow and the support terms before comparing them.

This is CertLocker’s own buying guide for infrastructure teams. It is not a lowest-price ranking. Vendor examples below were checked on 12 October 2026; confirm current packaging before procurement.

Start with the unit on the invoice

Certificate management billing units and questions for procurement
Unit	What to count	Question to settle
Per CA	Authorities required by your design	Are throughput, hosting and support included?
Per certificate	The vendor’s definition of a managed certificate	Do renewals, name sets, SANs or copies count separately?
Per identity	People and machines that authenticate	Which products and machine identities need a paid entitlement?
Per location	Deployment locations under the agreement	How are regions, disaster recovery and private installations counted?
Agreed scope	Capacity, integrations and support requirements	What recurring charges and additional work are in the written proposal?

For example, Keytos EZCA publishes Basic at $200 per CA per month and Premium at $500 per CA per month. Its private-infrastructure and self-hosted options use location pricing. That is a private-CA purchasing decision; it does not make $200 a comparable price for every certificate operations platform.

Infisical separates secrets, certificate management and privileged access packaging. Its secrets plans use identities, while certificate management has its own limits and enterprise pricing. Work out which products your team needs before treating one price as the full bill. Our Infisical comparison covers the overlap and current certificate limits.

Price one complete certificate workflow

Pick one service that is awkward to renew. A supplier portal on IIS or a listener behind HAProxy is more useful than an empty dashboard. Walk through the job from issuance to a live check:

Issue: identify the CA, validation method, renewal owner and permissions.
Deliver: identify the destination hosts, certificate format, credentials and network route.
Activate: name the import, binding or reload command and the account allowed to run it.
Verify: compare the certificate served by the listener with the expected record, including each relevant endpoint.
Recover: decide who gets a failure alert, how to retry or roll back, and what evidence remains.

Ask what the proposed package covers at each step. Keep a manual handoff visible in the estimate even if another team owns it. A subscription quote and an operating-cost estimate answer different questions.

Here is a hypothetical estate: one name is served from three Linux hosts and a Windows fallback. It may be one certificate name set, several delivery destinations and several verification checks. Record all three quantities. Let each vendor explain which of them changes the invoice.

What CertLocker currently offers

CertLocker does not publish a fixed hosted price list or an object-limit matrix. The Services & access page describes Early access, Infrastructure teams and Enterprise service paths. The old July billing screens are historical release material.

There is no charge to get started with hosted CertLocker. We agree the scope, capacity, support and commercial terms with you before any paid service begins. See the services and access page for the available paths.

In a hosted walkthrough, we can demonstrate inventory, renewal, scoped access, deployment and live endpoint checks. Automations uses standard SSH/SFTP for service-specific delivery and activation. Your team still needs a reachable route, suitable credentials, permissions and the tools used by the procedure. The last-mile walkthrough shows that setup.

A demonstration can show the product workflow. Compatibility with your private systems still needs checking against your access and deployment requirements.

Bring a short procurement checklist

Bring a redacted inventory, one renewal procedure, the destination systems and the support coverage you need. Ask for the billing unit, included capacity, integration work, support terms, renewal terms and any additional charges in writing. That makes the next decision much easier than comparing a price card with a quote-only product.

Arrange a face-to-face meeting or video call and we will walk through one of your workflows using hosted CertLocker. Bring the renewal path that keeps needing a person, and we will look at where the handoffs happen.