Scale Your SSL Certificate Business with Sectigo CaaS
Subscription-Based SSL/TLS Certificates with ACME Automation
Simplify SSL/TLS certificate delivery and grow your recurring service opportunities with Sectigo Certificate as a Service (CaaS).
Designed for domain resellers, hosting providers, and digital service providers, Sectigo CaaS combines per-domain subscriptions with ACME automation to streamline certificate issuance and renewal.
Reduce manual operations, support growing customer demand, and deliver more efficient SSL/TLS certificate services.
Why Traditional SSL Certificate Management Is Becoming Harder to Scale
As SSL/TLS certificate lifespans become shorter and customer demand for automation grows, traditional certificate purchasing and renewal models are becoming less convenient.
For resellers, the challenge is no longer just selling SSL/TLS certificates. It is offering a certificate solution that meets customers’ evolving needs while supporting sustainable business growth.
Shorter Certificate Lifespans, More Frequent Renewals
Publicly trusted TLS certificate validity periods are being reduced in stages, reaching a maximum of 47 days by 2029.
Customers relying on manual certificate management will face more frequent renewal cycles, creating greater demand for automated solutions.
Traditional Certificate Sales Limit Recurring Business Opportunities
Customer Expectations Are Shifting Toward Automation
Resellers who offer only traditional certificate products may struggle to meet the needs of customers seeking ACME-compatible, automated certificate solutions.
The Opportunity
How Can Resellers Grow Their SSL/TLS Business While Meeting the Demand for Certificate Automation?
Sectigo Certificate as a Service (CaaS) offers a different approach: sell per-domain SSL/TLS subscriptions while allowing customers to automate certificate issuance and renewal using their own ACME clients.
What Is Sectigo Certificate
as a Service (CaaS)?
Sectigo Certificate as a Service (CaaS) is a subscription-based SSL/TLS certificate solution that allows customers to automate certificate issuance and renewal using the ACME protocol.
Unlike traditional certificate purchasing, which commonly involves individual certificate orders, CaaS enables eligible domains to receive multiple certificate issuances throughout an active subscription period.
For resellers, this means a simpler way to sell SSL/TLS certificates through recurring subscriptions.
For your customers, it means greater flexibility to automate certificate issuance and renewal using their own ACME-compatible clients.
Subscribe Once. Automate Continuously.
Pay Per Domain, Not Per Certificate
Pay Per Domain,
Not Per Certificate
Offer SSL/TLS certificate services through a subscription-based model.
Unlimited Eligible
Certificate Issuance
Customers can issue eligible certificates for subscribed domains throughout the active subscription period, subject to service conditions.
Customer-Managed
ACME Automation
Recurring Sales
Opportunities
Scalable Service
Delivery
How Does Sectigo CaaS Work for Resellers and Their Customers?
Sectigo CaaS uses the Automated Certificate Management Environment (ACME) protocol to automate SSL/TLS certificate issuance and renewal.
From Subscription to
Automated Certificate Renewal
01
Reseller Sells CaaS
02
Customer Activates the Service
03
Customer Configures ACME
04
Automated Certificate Issuance
05
Automated Renewal
Less manual work. More automation. Continuous certificate management.
Why Should Resellers Offer Sectigo CaaS Instead of Only Traditional SSL/TLS Certificates?
Sectigo CaaS Help resellers expand their SSL/TLS portfolio and meet customer demand for automation while supporting recurring service delivery.
Expand Your SSL/TLS Product Portfolio
Offer an automation-ready SSL/TLS subscription solution alongside your existing certificate products.
Build Recurring Revenue Opportunities
Meet Growing Demand for Certificate Automation
Offer an automation-ready SSL/TLS subscription solution alongside your existing certificate products.
Simplify Your Selling Model
Let Customers Control Their Own Automation
Your customers configure and manage their ACME clients, while your business focuses on subscription sales and customer relationships.
Prepare Your SSL Certificate Business
for Shorter Certificate Lifespans
The SSL/TLS certificate industry is moving toward shorter certificate validity periods.
For SSL/TLS resellers, this creates an opportunity to offer certificate solutions that meet customers’ growing need for automation, without taking on the responsibility of managing their certificate infrastructure.
Sectigo CaaS helps resellers prepare for this shift by offering subscription-based SSL/TLS certificates that customers can issue and renew automatically using their own ACME-compatible clients.
By expanding your portfolio with automation-ready SSL/TLS subscriptions, you can:
Meet customer demand for automated certificate issuance and renewal.
Build recurring revenue opportunities through per-domain subscriptions.
Support customers adapting to shorter certificate lifespans.
Keep your business focused on certificate sales and customer relationships.
Prepare Your SSL/TLS Reseller Business for the Next Stage of Certificate Automation.
Ready to Scale Your SSL Certificate Services
with Sectigo CaaS?
Simplify certificate operations, reduce manual renewal tasks, and explore subscription-based SSL/TLS service opportunities.
Discover how Sectigo CaaS through WebNIC can help you offer automation-ready SSL/TLS subscriptions to a growing customer base with ACME automation.
Frequently Asked Questions
Sectigo Certificate as a Service (CaaS) is a subscription-based SSL/TLS certificate solution that enables automated certificate issuance and renewal through the ACME protocol. Resellers sell CaaS subscriptions, while their customers configure and manage their own ACME-compatible clients.
Sectigo CaaS allows resellers to expand their SSL/TLS product portfolio with per-domain subscriptions, create recurring revenue opportunities, and meet growing customer demand for certificate automation.
Resellers focus on selling subscriptions and maintaining customer relationships, rather than configuring customers’ ACME clients or managing their certificate renewals.
ACME stands for Automated Certificate Management Environment. It is a standard protocol that enables compatible software to automate SSL/TLS certificate requests, supported domain validation processes, and certificate renewals.
With Sectigo CaaS, customers configure their own ACME clients to manage these processes.
No. Under WebNIC’s Sectigo CaaS reseller model, customers are responsible for configuring and managing their own ACME-compatible clients.
Resellers focus on selling CaaS subscriptions rather than providing managed certificate automation services.
Yes. Sectigo CaaS supports automated SSL/TLS certificate renewal through ACME-compatible clients.
Customers must configure their ACME clients correctly and maintain active subscriptions. Successful renewals also depend on meeting applicable validation requirements.
Sectigo CaaS supports unlimited eligible certificate issuance for subscribed domains during the active subscription period, subject to service conditions and certificate issuance policies.
This allows customers to request and renew eligible certificates without purchasing a separate certificate for every issuance.
A CaaS subscription determines how long a subscribed domain can access the certificate service. Certificate validity determines how long an individual issued certificate remains valid.
For example, a one-year subscription can support multiple shorter-lived certificates through automated issuance and renewal.
According to the supplied Sectigo CaaS product information, certificates currently have a maximum and default validity of 90 days.
Customers can configure compatible ACME clients to renew certificates before expiration, provided their subscriptions remain active and applicable validation requirements are met.
Certificate validity periods may change as industry requirements evolve.
Traditional SSL/TLS certificates are commonly sold through individual certificate purchases and renewal transactions.
Sectigo CaaS introduces a per-domain subscription model that allows customers to automate eligible certificate issuance and renewal using ACME-compatible clients.
Both provide SSL/TLS certificates. The main difference is the purchasing and delivery model, rather than the underlying encryption technology.
Traditional certificate products may also support automation, depending on the product and provider.
PositiveSSL is a range of Sectigo SSL/TLS certificate products, while Sectigo CaaS is a subscription-based service model that supports automated issuance and renewal of eligible certificates.
For resellers, CaaS provides an additional way to offer SSL/TLS certificates to customers who prefer subscription-based purchasing and ACME automation.
Based on the supplied product information, Sectigo CaaS and Sectigo Certificate Manager (SCM) are separate solutions with different service models and account structures. Direct integration is not currently identified as supported in that information.
CaaS focuses on subscription-based certificate issuance and renewal through ACME, while SCM provides broader enterprise Certificate Lifecycle Management (CLM) capabilities, including certificate discovery, centralised management, and governance.
Yes. Sectigo CaaS is suitable for domain resellers, hosting providers, and managed service providers looking to offer subscription-based SSL/TLS certificate solutions.
Their customers can configure their own ACME clients to automate certificate issuance and renewal, while the reseller focuses on subscription sales.