How DigiCert and Sectigo differ on deployment, pricing, openness and what each is actually built for.
| DigiCert | Sectigo | |
|---|---|---|
| Type | Public CA + CLM | Public CA + CLM |
| Deployment | SaaS | SaaS |
| How it works | Issues publicly trusted TLS, code-signing, S/MIME and document-signing certificates from its own roots. DigiCert ONE adds discovery, automation and policy enforcement across the estate, with ACME and REST APIs for issuance. | Formerly Comodo CA. Issues public TLS, code-signing and S/MIME at volume through a large reseller channel. Sectigo Certificate Manager handles discovery, renewal and private PKI alongside the public roots. |
| Pricing* | From $218/yr (Basic OV) | From $110/yr (1-yr DV) |
| Free tier | No | No |
| Open source | — | — |
| Compliance | WebTrust, CA/B Forum, FIPS 140-2 (HSM-backed) | WebTrust, CA/B Forum |
| Best for | Enterprises needing public trust plus governance | Cost-sensitive estates that still want a CLM |
Choose DigiCert for enterprises needing public trust plus governance. Choose Sectigo for cost-sensitive estates that still want a clm.
* Indicative list pricing (vendor documentation and public pricing pages, August 2026).