AWS Private CA Pricing Calculator - CA Operation, Certificates & OCSP
AWS Private CA pricing calculator for general-purpose and short-lived certificate authorities. Estimate CA operation charges, private certificate issuance tiers, optional OCSP costs, and trial-adjusted first-month spend from the current AWS pricing page.
Frequently Asked Questions
What is the difference between general-purpose and short-lived Private CA mode?
General-purpose mode supports certificates with any validity period and has higher monthly CA operating charges. Short-lived mode is cheaper to operate, but it only supports certificates valid for up to 7 days.
When are private certificates billed?
AWS bills private certificates when they are issued directly from a private CA. For certificates requested through ACM, AWS bills the first time you export the private key and certificate for that renewed key pair.
How does OCSP pricing work in AWS Private CA?
OCSP pricing has two parts: a per-certificate monthly fee for certificates that generated an OCSP response, and a per-query fee based on total OCSP lookups during the month.
Related tools
CloudBurn
Catch AWS cost mistakes before they ship.
scan against Terraform and CloudFormation before deploy, then run discover against live AWS to find the waste that is already burning.Read the docs to learn how it works.