Pricing and billing

You need a billing account to use Certificate Manager. For more information about billing, see Billing questions.

Pricing

The use of Certificate Manager incurs the following charges:

Number of certificates Price per certificate
0 to 100 Free
101 to 2000 $0.20 per month
More than 2000 $0.10 per month

For more information, see the Google Cloud SKU page.

Deploying TLS certificates

If you use Certificate Manager to deploy TLS certificates, then the following pricing applies for TLS certificates deployed across all your load balancers.

Price Description
$0.45 per million connections Certificates that use the following key types:
  • RSA-3072
  • RSA-4096

There are no per-connection charges for certificates that use RSA-2048, ECDSA P-256, or ECDSA P-384 key types.

For more information, see the Google Cloud SKU page.

Deploying regional certificates

Using Certificate Manager to deploy regional certificates is billed at the same rates and tiers as using Certificate Manager to deploy global certificates.

However, for billing purposes, regional certificates are counted and tiered separately from global certificates. The number of regional certificates deployed across all regions are added together.

mTLS connections configured using Certificate Manager

If you are using Certificate Manager to configure mutual TLS (mTLS) authentication on your load balancer, then the following pricing applies to mTLS connections established across all your load balancers.

Price Description
$0.45 per million connections mTLS connections have the following provisions:
  • RSA key size: over 4096 bits
  • ECDSA allowed keys: P-256, P-384
  • Intermediate certificates: up to 100 certificates
  • Chain length: up to 10 certificates
  • Trust anchors: up to 100 trust anchors
  • Intermediate certificates: up to 100 intermediate certificates

Non-mutual TLS connections configured by using Certificate Manager do not incur additional charges.

For more information, see the Google Cloud SKU page.

Products used in conjunction with Certificate Manager

If you use Certificate Manager to deploy certificates issued by the Certificate Authority Service, you incur charges for using the Certificate Authority Service (as described in Certificate Authority Service pricing) in addition to the charges for using Certificate Manager described earlier.

Certificates issued by the Public CA feature of Certificate Manager are free of charge. However, using Certificate Manager to provision them incurs the same charges as provisioning other types of certificates.