OCI Certificates

OracleSecurityFree tier available

Managed public and private TLS certificate service with private CA hierarchies, automatic rotation, wildcard and SAN support, and native integration with Load Balancer, API Gateway, and the OCI Web Application Firewall

Jurisdictional exposure

Provider HQ
USAustin, USA

Subject to CLOUD Act, FISA-702, DPF

Region locations
APACEEAEUUKUSOther56 regions across 6 jurisdictions
Sovereign option
Yes — 10 sovereign-flagged regions available

Attributes

Auto Renew
Yes

Sub-services (3)

Public Certificates

Domain-validated TLS certs issued by Oracle-managed public CA

Private CA

Hierarchical private certificate authorities for internal PKI

Imported Certificates

Bring-your-own certificates stored in OCI Vault and deployed to services

Compliance & Certifications

This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.

Where this runs

56 regions
27 countries
10sovereign
Sovereign regions (10)
  • EU Sovereign South (Madrid) · MadridOracle EU Sovereign Cloud
  • EU Sovereign Central (Frankfurt) · FrankfurtOracle EU Sovereign Cloud
  • US Gov East (Ashburn) · AshburnOracle US Government Cloud
  • US Gov West (Phoenix) · PhoenixOracle US Government Cloud
  • US DoD East (Ashburn) · AshburnOracle US Defense Cloud
  • US DoD North (Chicago) · ChicagoOracle US Defense Cloud
  • US DoD West (Phoenix) · PhoenixOracle US Defense Cloud
  • UK Gov South (London) · LondonOracle UK Sovereign Cloud
  • UK Gov West (Newport) · NewportOracle UK Sovereign Cloud
  • Australia Dedicated Region (Canberra) · CanberraOracle Cloud Infrastructure for Australia Government and Defence
Commercial regions (46)

Europe (13)

  • France South (Marseille)
  • France Central (Paris)
  • Germany Central (Frankfurt)
  • Italy Northwest (Milan)
  • Italy North (Turin)
  • Netherlands Northwest (Amsterdam)
  • Serbia Central (Jovanovac)
  • Spain Central (Madrid)
  • Spain Central (Madrid 3)
  • Sweden Central (Stockholm)
  • Switzerland North (Zurich)
  • UK South (London)
  • UK West (Newport)

North America (9)

  • Canada Southeast (Montreal)
  • Canada Southeast (Toronto)
  • Mexico Northeast (Monterrey)
  • Mexico Central (Querétaro)
  • US East (Ashburn)
  • US Midwest (Chicago)
  • US West (Phoenix)
  • US West (Salt Lake City)
  • US West (San Jose)

South America (5)

  • Brazil East (São Paulo)
  • Brazil Southeast (Vinhedo)
  • Chile Central (Santiago)
  • Chile West (Valparaíso)
  • Colombia Central (Bogotá)

Asia (10)

  • India South (Hyderabad)
  • India West (Mumbai)
  • Indonesia North (Batam)
  • Japan Central (Osaka)
  • Japan East (Tokyo)
  • Malaysia West 2 (Kulai)
  • Singapore (Singapore)
  • Singapore West
  • South Korea North (Chuncheon)
  • South Korea Central (Seoul)

Oceania (2)

  • Australia Southeast (Melbourne)
  • Australia East (Sydney)

Middle East (5)

  • Israel Central (Jerusalem)
  • Saudi Arabia West (Jeddah)
  • Saudi Arabia Central (Riyadh)
  • UAE Central (Abu Dhabi)
  • UAE East (Dubai)

Africa (2)

  • Morocco West (Casablanca)
  • South Africa Central (Johannesburg)

Tags

Equivalent services on other platforms

AWS Certificate ManagerAWS

Provision, manage and deploy public and private SSL/TLS certificates for AWS services, with free public certificates for integrated services, optional exportable public certificates, and private certificates issued through AWS Private CA.

AWS Private Certificate AuthorityAWS

Managed private certificate authority for internal TLS / mTLS / device identity — issues X.509 certificates without running your own CA infrastructure, integrates with ACM for private-cert lifecycle

Azure Key VaultAzure

Centralised vault for cryptographic keys, secrets, and certificates with HSM-backed keys, managed certificate renewal, and RBAC or access-policy enforcement

Bleu Key VaultBleu

Managed key, secret and certificate store: Azure Key Vault operated by Bleu from data centres located exclusively in France, keeping keys within the Bleu perimeter.

Certificate ManagerGCP

Centralised TLS certificate provisioning and lifecycle management across Google-managed and self-managed certs, with wildcard and SAN support, automatic renewal, and deployment to External Application Load Balancers, Cross-Cloud Network Load Balancers, and Cloud Run

Certificate Authority ServiceGCP

Hosted private PKI for issuing and managing X.509 certificates inside an organisation — root and subordinate CAs, automated lifecycle (rotation, revocation), and Cloud KMS-backed signing keys, replacing self-managed OpenSSL or Active Directory CS deployments

IONOS Certificate ManagerIONOS

Manages SSL/TLS certificates for IONOS services, with uploaded certificates or automated ACME-based issuance and renewal, integrating with the Managed Application Load Balancer and CDN.

Pricing

Pricing model:pay-as-you-go