Plans
Standard
Premium
Enterprise
Precreate account keys
Create ACME account keys in advance and add them to clients, ready-to-go.
✓
✓
✓
EAB tokens
Let clients register themselves with an EAB pre-auth token.
✓
✓
✓
Client open self-registration
Allow clients to self-register without an EAB token. May still restrict by IP address (recommended).
✓
✓
Restrict ACME access by IP
For added security, limit access to your ACME directory by IPs.
✓
✓
EC + RSA keys
CertFu supports EC 256, 384, 521 and RSA 2048, 3072, 4096 keys.
All
All
All
Restrict cert subject domains
Limit the allowed subjects for issued certs by domains.
✓
✓
✓
Restrict cert subject IPs
Limit the allowed subjects for issued certs by IPs, both IPv4 and IPv6.
✓
✓
✓
Auto-approved orders
Easily issue certs for internal domains and IPs even when processing challenges is impossible. Enabled per account key to keep things secure.
✓
✓
✓
DNS-01 + HTTP-01 challenges
✓
✓
✓
CAA validation checks
Checks for and validates CAA records before approving orders.
✓
✓
✓
Require CAA records
Optionally refuse issuance when CAA records are absent.
✓
✓
✓
Custom CAA values
Change the required CAA value from
certfu.com to your own value.✓
✓
Cert lifetimes
Clients may request a cert duration within this range. Custom allows minimum and maximum durations to be set from 2 days to 13 months.
2-97d
Custom
Custom
Online & offline root certs
Root cert keys may be stored online, or offline for enhanced security. When online, upload your own or let us generate one for you.
✓
✓
✓
Intermediate certs
Intermediate certs make it possible to rotate the active signing cert without having to replace the root cert.
✓
✓
✓
Archived order & cert history
History for active resources is always available. Once final or expired, resources are kept for this long (or less if you choose).
1d
90d
365d
Full IPv4 + IPv6 support
✓
✓
✓
Team members
Add as many team members to your account as you need.
Unlimited
Unlimited
Unlimited
ACME directories
Isolate clients and configurations by using separate ACME directories. Directories may have separate root and intermediate certs, or may share them.
4
25
100+
Issued certs per month
Successfully completed cert orders during the month. Unsuccessful orders not counted.
100
300
1000+
$49/month
$119/month
Starts at $349/mo
Free trial!
Questions? Need more? Let's talk!
Add-ons
Additional issued certs: 75¢/ea (Standard); 65¢/ea (Premium); 50¢/ea (Enterprise).
How does the free trial work?
The free trial is 14 days on our Standard plan. No credit card is required. At the end, keep Standard or easily switch to any other plan.
Is support included?
Yep, our Standard Support is included. For mission critical deployments, we also offer Priority Support.