EJBCA
8.2#1 in certificate management softwareFrom £62,065 a yearFree planWebAPILinuxmacOS
VisitEJBCA vs Let's Encrypt
Let's Encrypt
7.6#3 in public key infrastructure softwareFree planFree planWebAPILinuxmacOS
VisitWhat both publish
| Fact | EJBCA | Let's Encrypt |
|---|---|---|
| Automation | Official materials provide Helm charts and Ansible playbooks for automated deployment and configuration. | The ACME protocol verifies control of a domain and is used to issue certificates; clients can automate certificate management and renewal. |
| Documentation | The official documentation includes concepts, installation, operations, integration guides, tutorials, troubleshooting, release notes and supported-version information. | The official documentation covers onboarding, ACME clients, rate limits, staging, certificate policy, challenge types, profiles, revocation, compatibility and integration guidance. |
| Integrations | The comparison lists HSM and crypto-token support, including PKCS#11-based and REST API-based key vault integration, AWS CloudHSM, and AWS KMS. | Hosting providers can obtain and manage certificates for customers through their own ACME clients. |
| Intended users | EJBCA is presented for securing industrial environments, IoT devices, national eIDs, DevOps workflows, and internal PKIs. | The service is available to people and organizations worldwide that need certificates for domain-named servers, including web, mail, and FTP servers. |
| License | EJBCA Community is released under LGPL version 2.1 or later. | Boulder is open source under the Mozilla Public License 2.0. |
| Rating on G2 | 4.5 out of 5 from 38 reviews | 4.8 out of 5 from 22 reviews. |
EJBCA plans
- EJBCA Community EditionFree
- EJBCA Enterprise Cloud trialFree
- EJBCA Enterprise trialFree
- EJBCA PKI SaaS£62,065 a year
- EJBCA EnterprisePriced on request
Let's Encrypt plans
- Let's Encrypt certificatesFree
- Short-lived certificatesFree
Pick EJBCA if…
EJBCA suits teams managing PKI for internal systems, DevOps, industrial environments, IoT devices, or national eIDs. Community is for learning, testing, and prototyping; production users should consider its stated limitations and Enterprise support offering.
Pick Let's Encrypt if…
Let's Encrypt serves people and organizations worldwide who need certificates for domain-named web, mail, or FTP servers. It suits users able to manage certificates through ACME clients and consult documentation or community forums when needed.