Best Public Key Infrastructure Software in 2026
Updated
In short: DigiCert Private CA is ranked #1 of 16 as of 3 October 2026, ahead of AppViewX PKIaaS and Keyfactor Platform. The best-ranked option with a free plan is step-ca. The lowest first paid tier on this page is KeyTalk CKMS at €5/mo.
16 public key infrastructure software ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
| # | Platform | Score | Why | From | Free plan | Paid from | Deployment model | |
|---|---|---|---|---|---|---|---|---|
| 1 | DigiCert Private CA | 8.3 | RecognisedAPIDocumented | — | — | — | hybrid | View |
| 2 | AppViewX PKIaaS | 8.1 | RecognisedAPIDocumented | — | No | — | cloud | View |
| 3 | Keyfactor Platform | 7.8 | RecognisedAPIDocumented | — | — | — | — | View |
| 4 |  step-ca | 7.8 | RecognisedAPIDocumented | Free | Yes | — | hybrid | View |
| 5 | Entrust Certificate Manager | 7.6 | RecognisedAPIDocumented | — | — | — | — | View |
| 6 |  EZCA | 7.4 | RecognisedAPIDocumented | $200/mo | No | 200 /mo | hybrid | View |
| 7 | EJBCA | 6.9 | RecognisedAPIDocumented | — | Yes | — | — | View |
| 8 |  XiPKI | 6.4 | RecognisedAPIDocumented | — | — | — | on_premises | View |
| 9 |  OpenXPKI | 6.4 | RecognisedAPIDocumented | — | Yes | — | — | View |
| 10 | AWS Private Certificate Authority | 5.9 | RecognisedAPIDocumented | — | No | 50 /mo | cloud | View |
| 11 |  OpenCA PKI | 5.9 | RecognisedAPIDocumented | — | Yes | — | on_premises | View |
| 12 | KeyTalk CKMS | 5.7 | RecognisedAPIDocumented | €5/mo | — | — | — | View |
| 13 |  Dogtag Certificate System | 5.3 | RecognisedAPIDocumented | — | Yes | — | — | View |
| 14 | cert-manager | 5.2 | RecognisedAPIDocumented | — | Yes | — | — | View |
| 15 |  Let's Encrypt | 5.2 | RecognisedAPIDocumented | — | Yes | — | — | View |
| 16 |  Boulder | 4.6 | RecognisedAPIDocumented | — | — | — | on_premises | View |
Is your platform on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which public key infrastructure software is ranked first on Inferse?
DigiCert Private CA is ranked #1 of 16 with a score of 8.3. AppViewX PKIaaS is second and Keyfactor Platform third.
How many of these have a free plan?
1 of the 16 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, KeyTalk CKMS has the lowest first paid tier we found: €5/mo.
How is this list ranked?
Ranked on what each maker publishes, open and connectable first: a public API, open-source code, the depth of its documentation and a free tier to try it on. Model lists are sorted by the figure in their title, exactly as each provider publishes it. Paid placements never change a rank.