DigiCert Private CA

What DigiCert Private CA is

DigiCert Private CA lets organizations build and operate private public key infrastructure for users, devices, applications, and digital assets across on-premises and cloud environments. Certificates issued by a private PKI are trusted only within the organization’s systems. The service can be deployed through DigiCert hosting or customer hosting, with customer-hosted deployments supporting offline or air-gapped certificate authorities. It covers root and intermediate CA creation, HSM integration, CRL and OCSP configuration, enrollment protocols, and end-entity certificate issuance. The API can create, import, and recertify CAs, configure responders, manage templates, and monitor audit logs; authentication supports service-user API tokens and mutual TLS. Security controls include FIPS 140-2 Level 3 HSM key protection, role-based access, and audit logging. DigiCert says the service can manage billions of certificates. Integrations include existing PKI tools and infrastructure, REST API workflows, and DigiCert Trust Lifecycle Manager. Pricing is on request.