Founder Pricing Special

Subscribe before May 31 and lock in 40% off forever.

All plans include a free 90-day trial. Long enough to see your certificates renew automatically. No credit card required.

Community

For your homelab.

Free

What's included:

  • 2 certificates
  • 1 agent
  • 1 user
  • 3 domain SSL monitors

Sign up

Professional

For small deployments and consultants.

$99/mo $59/mo
Billed yearly at $712

What's included:

  • 10 certificates
    + $2/mo additional certs
  • 10 agents
    + $2/mo additional agent
  • 3 users
    + $5/mo additional seats
  • 100 domain SSL monitors

Sign up

Business

For business IT and security teams.

$399/mo $239/mo
Billed yearly at $2,872

What's included:

  • 50 certificates
    + $2/mo additional certs
  • 50 agents
    + $2/mo additional agent
  • 5 users
    + $5/mo additional seats
  • Unlimited domain SSL monitors
  • Single-Sign On
  • Certificate Transparency Log Monitoring
  • Audit Logs Coming Soon
  • Invoice Payments (NET30)

Sign up

Enterprise

For corporations and MSPs.

Contact

What's included:

  • Everything in Business
  • Unlimited certificates
  • Unlimited agents
  • Unlimited users
  • Whitelabeling
  • Security Compliance
  • CertKit Keystore
  • Dedicated support engineers

Book a meeting
CertKit has transformed how Belden manages SSL certificate issuance, delivering a streamlined process that dramatically reduced both cost and complexity. Their solution has been a clear win for our organization.

Ryan Buckner
IT Infrastructure Analyst, Belden

Pricing FAQ

What is a certificate?

A certificate is one managed identity, tracked by its private key lineage. Whether it covers one domain or fifty, whether it has been renewed twenty times or reissued last week, it counts as one certificate in your plan. We track the identity, not the individual files.

Does a wildcard certificate count as one certificate?

Yes. A wildcard certificate covers an unlimited number of subdomains but counts as one certificate. A certificate for *.example.com covering api.example.com, app.example.com, and a hundred others is still one certificate in your plan.

What about certificates with multiple domains (SANs)?

One certificate, regardless of how many domains are on it. A certificate covering ten domains in its Subject Alternative Names list counts the same as one covering a single domain. Adding or removing domains from a certificate does not change the count.

If I renew or reissue a certificate, does it use another slot?

No. Renewals, reissuances, and rekeys all stay within the same certificate lineage. A certificate you have renewed fifty times is still one certificate. The count only increases when you bring a new managed identity into CertKit.

What is an agent?

An agent is software you install on a server or appliance in your infrastructure. It watches for certificate updates from CertKit, deploys them to the right location, and triggers a service reload. One agent can manage multiple certificates on the same server.

Do I need one agent per server?

Yes, one agent per server or appliance. If you have ten Linux servers and two load balancers, you would need twelve agents. The agent count in your plan is the number of places you can deploy certificates simultaneously.

What happens when I reach my plan limits?

You can add more certificates or agents at $2/month each, or upgrade to the next plan. We will let you know before anything stops working.

What is founder pricing?

Founder pricing is a permanent discount for anyone who subscribes before May 31. You lock in 40% off the standard rate forever. If we raise prices in the future, your rate stays the same.

What happens at the end of my 90-day trial?

We will reach out before the trial ends to help you choose a plan and get set up. If you are not ready to subscribe, your account moves to the Community plan. Get in touch if you need more time or want to talk through your options.

Can I upgrade or downgrade my plan?

Yes. Upgrades take effect immediately. Downgrades take effect at the end of your current billing period.

What happens to my certificates if I cancel?

Your certificates keep running on your infrastructure after you cancel. CertKit already deployed them to your servers and they will continue to work until they expire. You will need to handle renewals manually after that, or resubscribe when you are ready.