Let's Encrypt
7.6#3 in public key infrastructure softwareFree planFree planWebAPILinuxmacOS
VisitLet's Encrypt vs OpenCA PKI
OpenCA PKI
7.4#4 in public key infrastructure softwareFree planFree planWebLinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | Let's Encrypt | OpenCA PKI |
|---|---|---|
| Integrations | Hosting providers can obtain and manage certificates for customers through their own ACME clients. | Official dependencies and integrations include OpenLDAP, OpenSSL, Apache HTTP Server and Apache mod_ssl. |
| License | Boulder is open source under the Mozilla Public License 2.0. | The OpenCA source license is an Apache-style permissive license with attribution and trademark conditions. |
Let's Encrypt plans
- Let's Encrypt certificatesFree
- Short-lived certificatesFree
OpenCA PKI plans
- OpenCA PKIFree
Pick Let's Encrypt if…
Let's Encrypt serves people and organizations worldwide who need certificates for domain-named web, mail, or FTP servers. It suits users able to manage certificates through ACME clients and consult documentation or community forums when needed.
Pick OpenCA PKI if…
It suits organizations that need to run their own certificate authority and PKI on Linux, macOS, or a self-hosted web setup. Teams should be prepared to install its named prerequisites and work with limited, partly outdated documentation.