Licensing and plans

Your DigiCert® Trust Lifecycle Manager account may use either the current or legacy licensing model, depending on when your subscription began. Both plans offer the same management features but package them differently.

Current model

The current licensing model for Trust Lifecycle Manager is being introduced in October 2025. It offers multi-tiered subscription plans that use a single, unified seat license type across all plans.

Subscription plans

The current model has three subscription plans, each designed to meet different PKI and certificate management needs:

Essentials
Advanced
Premium

Seat licenses

Seats are the licensing unit across all subscription plans. Each seat entitles you to use DigiCert's discovery, management, and automation tools in Trust Lifecycle Manager. Seats may be consumed for servers, sites, or users (and their associated devices), where each "site" represents a distinct combination of an FQDN and IP address.

Notice

Seat pricing varies by plan and reflects the management capabilities included in each plan. For details, contact us.

Legacy model

The legacy licensing model for Trust Lifecycle Manager applies to subscriptions that began before October 2025 and haven’t been transitioned to the current model. It uses separate seat license types to access different certificate management features.

Seat types

The following table describes the different seat types in the legacy licensing model for Trust Lifecycle Manager. Each seat type entitles you to a specific certificate use case.

Seat type	Issuing CA	Description
User	DigiCert® Private CA or DigiCert CertCentral®	A public or private trust certificate issued to a person, for use cases including authentication to a private network (VPN) or website, wireless access, or signing/encrypting emails.
Device	DigiCert® Private CA	A private trust certificate issued to a physical device (such as a laptop, computer, or mobile device), typically for authentication or encryption.
Server	DigiCert® Private CA	A private trust certificate issued by to an organization's internal servers (including web servers, proxy servers, load balancers, domain controllers, or wireless access points) for client or mutual authentication with users, devices, or other servers.
Organization	DigiCert® Private CA	A private trust certificate issued to an organization and used to create private external issuing CAs capable of issuing end-entity SSL certificates on-demand (typically used for TLS inspection) or used as a private code signing certificate.
Imported	Any	A public or private trust certificate issued by an external CA that was uploaded into Trust Lifecycle Manager, and which also had its issuing CA imported into DigiCert® Private CA.
Discovery	Any	A public or private trust certificate that was discovered and added to your account.
Certificate management	Any	A public or private trust certificate issued by an external CA that was generated and/or is being managed in Trust Lifecycle Manager through a CA connector.

In this section: