aws-private-caprivate-ca-pricing-calculator

AWS Private CA Pricing Calculator - CA Operation, Certificates & OCSP

AWS Private CA pricing calculator for general-purpose and short-lived certificate authorities. Estimate CA operation charges, private certificate issuance tiers, optional OCSP costs, and trial-adjusted first-month spend from the current AWS pricing page.

Frequently Asked Questions

What is the difference between general-purpose and short-lived Private CA mode?

General-purpose mode supports certificates with any validity period and has higher monthly CA operating charges. Short-lived mode is cheaper to operate, but it only supports certificates valid for up to 7 days.

When are private certificates billed?

AWS bills private certificates when they are issued directly from a private CA. For certificates requested through ACM, AWS bills the first time you export the private key and certificate for that renewed key pair.

How does OCSP pricing work in AWS Private CA?

OCSP pricing has two parts: a per-certificate monthly fee for certificates that generated an OCSP response, and a per-query fee based on total OCSP lookups during the month.

CloudBurn

Catch AWS cost mistakes before they ship.

Use the calculator for quick estimates, then use CloudBurn when you need a deterministic cost review workflow. Run scan against Terraform and CloudFormation before deploy, then run discover against live AWS to find the waste that is already burning.

Read the docs to learn how it works.