Subaccounts vs divisions
Both subaccounts and divisions allow you to separate certificate management across different customers, teams, or business units. The key difference is pricing and billing control.
Subaccounts have their own separate CertCentral accounts with customized product pricing and billing options. The parent account has limited visibility — it can view orders and revenue but cannot access or modify the subaccount's users, domains, organizations, or orders directly.
Divisions share the parent CertCentral account. The parent has full visibility and control over division users, orders, settings, and activity. Each division can have its own funds and pay for its own certificates.
When to use subaccounts
Use subaccounts when you need to control product pricing or billing for a customer or partner:
Enterprise subaccounts: for resellers or service providers who want to give customers a full CertCentral account as a product.
Reseller subaccounts: for resellers or service providers with their own customers or subreseller network who need their own CertCentral account.
Managed subaccounts: for resellers or service providers with their own customer portal who want customers to manage orders via API integration, not through the CertCentral UI.
Use divisions when you need to separate certificate management within your own organization — such as separate departments, offices, or subsidiaries — without the need for separate billing or pricing control.