Community
For your homelab.
What's included:
- 2 certificates
- 1 agent
- 1 user
- 3 domain SSL monitors
Subscribe before May 31 and lock in 40% off forever.
All plans include a free 90-day trial. Long enough to see your certificates renew automatically. No credit card required.
For your homelab.
What's included:
For small deployments and consultants.
What's included:
For business IT and security teams.
What's included:
For corporations and MSPs.
What's included:
CertKit has transformed how Belden manages SSL certificate issuance, delivering a streamlined process that dramatically reduced both cost and complexity. Their solution has been a clear win for our organization.
Ryan Buckner
IT Infrastructure Analyst, Belden
A certificate is one managed identity, tracked by its private key lineage. Whether it covers one domain or fifty, whether it has been renewed twenty times or reissued last week, it counts as one certificate in your plan. We track the identity, not the individual files.
Yes. A wildcard certificate covers an unlimited number of subdomains but counts as one certificate.
A certificate for *.example.com covering api.example.com, app.example.com,
and a hundred others is still one certificate in your plan.
One certificate, regardless of how many domains are on it. A certificate covering ten domains in its Subject Alternative Names list counts the same as one covering a single domain. Adding or removing domains from a certificate does not change the count.
No. Renewals, reissuances, and rekeys all stay within the same certificate lineage. A certificate you have renewed fifty times is still one certificate. The count only increases when you bring a new managed identity into CertKit.
An agent is software you install on a server or appliance in your infrastructure. It watches for certificate updates from CertKit, deploys them to the right location, and triggers a service reload. One agent can manage multiple certificates on the same server.
Yes, one agent per server or appliance. If you have ten Linux servers and two load balancers, you would need twelve agents. The agent count in your plan is the number of places you can deploy certificates simultaneously.
You can add more certificates or agents at $2/month each, or upgrade to the next plan. We will let you know before anything stops working.
Founder pricing is a permanent discount for anyone who subscribes before May 31. You lock in 40% off the standard rate forever. If we raise prices in the future, your rate stays the same.
We will reach out before the trial ends to help you choose a plan and get set up. If you are not ready to subscribe, your account moves to the Community plan. Get in touch if you need more time or want to talk through your options.
Yes. Upgrades take effect immediately. Downgrades take effect at the end of your current billing period.
Your certificates keep running on your infrastructure after you cancel. CertKit already deployed them to your servers and they will continue to work until they expire. You will need to handle renewals manually after that, or resubscribe when you are ready.