Skip to main content

DigiCert Private CA licenses

DigiCert Private CA operates on a subscription licensing model, offering a range of licenses corresponding to different activities within your account. Understanding these licenses and their limits is essential for managing your accounts effectively.OLD CA Manager

The current licensing model for DigiCert Private CA was introduced in October 2025. If your subscription began before that date, your licenses might still follow the Legacy licensing model. Licenses that began after that date follow the Current licensing model.

License type

Description

Consumption

Private root certificates

One license is consumed when you:

  • Establish a trust anchor for your PKI

  • Import trusted roots from DigiCert-hosted or third-party PKI setups

  • Create online or offline root certificates

DigiCert-hosted customers have a soft limit and can exceed the allotted number of licenses, however this incurs additional overages.

On-premises customers have a hard limit and won't be able to exceed the allotted number of licenses.

Private intermediate CA (ICA) certificates

One license is consumed when you issue, create, or import an intermediate CA.

DigiCert-hosted customers have a soft limit and can exceed the allotted number of licenses, however this incurs additional overages.

On-premises customers have a hard limit and won't be able to exceed the allotted number of licenses.

Private end-entity certificates

Licenses are consumed when you issue end-entity certificates. End-entity certificates can be issued for:

  • Servers

  • Users

  • Organizations

  • Code signing

  • Wildcards

DigiCert-hosted customers have a soft limit and can exceed the allotted number of licenses, however this incurs additional overages.

On-premises customers have a hard limit and won't be able to exceed the allotted number of licenses.

提示

You can view your license consumption report in your DigiCert Private CA account.

License type

Description

Consumption

Root certificates

One license is consumed when you:

  • Establish a trust anchor for your PKI

  • Import trusted roots from DigiCert-hosted or third-party PKI setups

  • Create online or offline root certificates

DigiCert-hosted customers have a soft limit and can exceed the allotted number of licenses, however this incurs additional overages.

On-premises customers have a hard limit and won't be able to exceed the allotted number of licenses.

Intermediate CA (ICA) certificates

One license is consumed when you issue or import an intermediate CA.

DigiCert-hosted customers have a soft limit and can exceed the allotted number of licenses, however this incurs additional overages.

On-premises customers have a hard limit and won't be able to exceed the allotted number of licenses.

Dynamic intermediate CA certificates

One license is consumed when you issue a:

  • Multi-tenant or customer-specific certificate

  • Automate pipelines needing short-lived or isolated trust chains

  • CI/CD environments or IoT deployments with unique intermediate CAs per workload

DigiCert-hosted customers have a soft limit and can exceed the allotted number of licenses, however this incurs additional overages.

On-premises customers have a hard limit and won't be able to exceed the allotted number of licenses.