This topic describes the billing methods and pricing of SSL Certificates Service features, including the certificate and Private Certificate Authority (PCA) features.

Certificate

The prices of certificates vary based on types and brands. For more information about certificate prices, visit the SSL Certificates Service buy page.

PCA

SSL Certificates Service supports PCA. PCA allows you to build a private certificate authority (CA) for your enterprise in an efficient manner. You can use the private CA to issue and manage self-signed private certificates within your enterprise. PCA is suitable for the scenarios in which regulatory requirements and industry standards are not involved. For more information about PCA, see Overview.

PCA is billed on a subscription basis. You can set the subscription duration to one month, two months, three months, four months, five months, six months, one year, two years, or three years. A private CA is billed on a subscription basis. Private CAs are classified into two types: private root CAs and private intermediate CAs. During the validity period of a private CA, you can use the private CA to issue private certificates. By default, you can use a private CA to issue a specific number of private certificates free of charge. If you want to use the private CA to issue more private certificates, you must purchase an additional quota for private certificates.

A private CA supports different types of algorithms. The costs of a private CA and a private certificate vary based on algorithms. The following list describes the pricing details. For more information, visit the PCA buy page.

  • Private root CA: consists of 1 private root CA, 1 private intermediate CA, and a quota for 10 private certificates by default.
    Notice If you enable PCA for the first time, you must first purchase a private root CA. For more information, see Create a private root CA.
    Algorithm Price (USD per month)
    RSA 760
    SM 1,000
    ECC 800
  • Private intermediate CA: consists of only one private intermediate CA.

    By default, a private root CA contains one private intermediate CA. If you want to create multiple private intermediate CAs under the private root CA, you must separately purchase private intermediate CAs. For more information, see Create a private intermediate CA. A separately purchased intermediate CA does not contain the quota for private certificates. If you want to issue private certificates by using an intermediate CA that you separately purchase, you must purchase a specific quota for private certificates.

    Algorithm Price (USD per month)
    RSA 380
    SM 500
    ECC 400
  • Private certificate

    If you want to issue more private certificates by using a private CA, you must purchase a specific quota for private certificates. For more information, see Purchase the quota for private certificates.

    Algorithm Price for each private certificate (USD)
    RSA
    • 0 ≤ Number of private certificates ≤ 1,000: USD 0.7
    • 1,001 ≤ Number of private certificates ≤ 10,000: USD 0.3
    • 10,001 ≤ Number of private certificates ≤ 99,999,999: USD 0.001
    SM
    • 0 ≤ Number of private certificates ≤ 1,000: USD 0.85
    • 1,001 ≤ Number of private certificates ≤ 10,000: USD 0.45
    • 10,001 ≤ Number of private certificates ≤ 99,999,999: USD 0.003
    ECC
    • 0 ≤ Number of private certificates ≤ 1,000: USD 0.75
    • 1,001 ≤ Number of private certificates ≤ 10,000: USD 0.35
    • 10,001 ≤ Number of private certificates ≤ 99,999,999: USD 0.002