Section 8.4 - Register entry
DOC-REF: FRC-MKT-FR2635050845
DigiCert for Government
DigiCert, Inc. lists DigiCert for Government on the FedRAMP Marketplace with the status Initial Implementation, at no impact level listed, on the Program path under the 20x process. Package FR2635050845, read from the marketplace feed as of September 28, 2026.
Section A. Register entry
What the marketplace records
- FedRAMP package ID
- FR2635050845
- Cloud service provider
- DigiCert, Inc.
- Certification status
- Initial Implementation
- Impact level
- Not listed
- Certification class
- Not listed
- Authorization path
- Program
- Certification type
- 20x
- Marketplace phase
- Initial Implementation
- Deployment model
- Public Cloud
- Register snapshot
- September 28, 2026
- Service model
- SaaS
- Independent assessor
- Schellman
- Status date
- September 21, 2026
- Business categories
- Cybersecurity & Risk Management, Data Management, Development Tools, Governance, Risk, and Compliance (GRC)
- SAM.gov UEI
- XW8XSKM51JJ4
- Milestones on record
- 1
The marketplace carries DigiCert for Government under package FR2635050845 with 16 recorded fields. Its current status was set on September 21, 2026. Schellman is named as the independent assessor. No agency authorizations are listed against it in the current feed. It is delivered as SaaS on a public cloud, filed under 4 business categories including Cybersecurity & Risk Management, Data Management, Development Tools and 1 more. Its SAM.gov unique entity identifier is XW8XSKM51JJ4.
Section B. Milestones
1 entry in the marketplace event log
Most recent first, as recorded by FedRAMP.
| Date | Category | Recorded |
|---|---|---|
| September 21, 2026 | Status Change | Status set to Initial Implementation |
Section C. Cost context
What reaching this stage costs
Our own published ranges for a provider going through this level. Nothing here is a figure this provider has disclosed.
Cost context
No range published for this level
The marketplace lists no impact level here, so no cost range is quoted. Our impact level reference sets out what each baseline costs to reach.
Read the impact level reference / continuous monitoring cost
Path
The marketplace records 105 offerings on the Program path, 63 of them 20x. Our 20x page covers what that model is estimated to cost. FedRAMP 20x cost analysis
20x
This package is on the 20x track. Our 20x page puts an early estimate of $100,000 to $300,000 on a Low or Moderate authorization under 20x against $500,000 to $2,000,000+ on the traditional path. Those are estimates from early pilot data, not observed invoices. 20x cost analysis
Section D. Services in scope
4 services listed inside the assessment boundary
DigiCert Trust Lifecycle Manager
Available from April 15, 2027
DigiCert® Trust Lifecycle Manager (TLM) is a SaaS-based, CA-agnostic certificate lifecycle management (CLM) and PKI services platform built on the DigiCert ONE architecture. TLM enables enterprise and government customers to discover, inventory, automate, and govern digital certificates (TLS/SSL, S/MIME, device, code signing) across cloud, hybrid, and on-premises environments. Core capabilities include certificate discovery and inventory, policy-based issuance workflows, last-mile automation for servers and devices, private CA creation and management, and integrations with ITSM and DevOps toolchains. The platform prevents certificate-related outages, reduces manual operations overhead, and maintains continuous compliance across the certificate estate.
DigiCert Software Trust Manager
Available from April 15, 2027
DigiCert® Software Trust Manager (STM) is a SaaS-based code signing and software supply chain security platform built on the DigiCert ONE architecture. STM provides centralized, policy-driven management of code signing keys and certificates, with private keys protected in FIPS 140-2 Level 3 hardware security modules (HSMs). It integrates natively with CI/CD pipelines (Jenkins, Azure DevOps, GitHub Actions, Gradle) and supports remote signing via API, CLI (SMCTL), and pre-built DevOps connectors. STM enforces multi-person approval workflows, tracks all signing activity in tamperproof audit logs, and helps organizations comply with government software supply chain security mandates including EO 14028 and NIST SP 800-218.
DigiCert Private CA
Available from April 15, 2027
DigiCert® Private CA (also known as CA Manager / Private PKI Services) is a SaaS and on-premises private certificate authority platform within the DigiCert ONE suite. It enables organizations to create, manage, and operate privately trusted root and intermediate CAs for issuing certificates to internal users, devices, servers, and workloads. Key capabilities include HSM-backed key protection (FIPS 140-2 Level 3), support for post-quantum cryptography (ML-DSA via Crypto4A HSMs), OCSP/CRL publishing, SCEP and EST enrollment protocol support, and integration with DigiCert Trust Lifecycle Manager for unified certificate lifecycle governance. Supports deployment models including cloud-hosted managed PKI, customer-managed on- premises, and hybrid.
DigiCert Account Manager
Available from April 15, 2027
DigiCert® Account Manager is the administrative and identity governance layer of the DigiCert ONE platform. It provides centralized user management, role-based access control (RBAC), single sign-on (SSO/SAML) configuration, API token and service user credential management, organization management, and audit logging across all DigiCert ONE services (including Trust Lifecycle Manager, Software Trust Manager, Private CA, and Device Trust Manager). Account Manager is bundled with all DigiCert ONE subscriptions and is the authoritative access control plane for the platform. Note: Account Manager is a platform module, not a standalone purchasable product; it is included with each of the above service subscriptions.
Section G. Nearest entries on the register
Comparable offerings
Scored on impact level, path, status, shared business categories and how close the two entries sit in the register's own timeline.
- SuperFile
SuperGov, Inc
Initial Implementation, no impact level listed, Program path, 20x.
- Vastian (MediaLab by Vastian)
MediaLab Solutions LLC
Initial Implementation, no impact level listed, Program path, 20x.
- Enablement®
Advent Business Company Inc.
Initial Implementation, no impact level listed, Program path, Rev5.
- Partos for Government
Partos Inc.
Initial Implementation, no impact level listed, Program path, Rev5.
- TNT Business Resilience Platform
Tactical Takedown LLC
Initial Implementation, no impact level listed, Program path, 20x.
Section H. Description
As published on the marketplace
The provider's own description of the service, reproduced from the FedRAMP feed without edits.
DigiCert ONE is a unified digital trust platform that delivers certificate lifecycle management, code signing security, private PKI, and centralized access governance for enterprise and government customers. The platform is offered as a SaaS-based suite of four integrated services: DigiCert® Trust Lifecycle Manager (TLM) - CA-agnostic certificate lifecycle management (CLM) providing discovery, inventory, automated issuance and renewal, private CA management, and integrations with ITSM and DevOps toolchains across cloud, hybrid, and on-premises environments. DigiCert® Software Trust Manager (STM) - Code signing and software supply chain security platform providing centralized, policy-driven key and certificate management, HSM-backed private key protection (FIPS 140-2 Level 3), CI/CD pipeline integrations, multi-person approval workflows, and tamperproof audit logging to support compliance with EO 14028 and NIST SP 800-218. DigiCert® Private CA - Private certificate authority platform enabling organizations to create, manage, and operate privately trusted root and intermediate CAs for issuing certificates to internal users, devices, servers, and workloads. Supports cloud-hosted, on-premises, and hybrid deployment models with HSM-backed key protection and post-quantum cryptography readiness. DigiCert® Account Manager - Administrative and identity governance layer of the DigiCert ONE platform providing centralized user management, role-based access control (RBAC), SSO/SAML configuration, API credential management, organization management, and audit logging across all DigiCert ONE services.
Next step
What the same authorization would cost you
The worksheet turns an impact level, an existing security posture and an organization size into a line-by-line budget, with the 3PAO fee split out.
Provenance and independence
Source: the FedRAMP Marketplace product feed, produced by the General Services Administration. The feed's own last-change stamp is September 28, 2026; this copy was taken on October 3, 2026.
GSA's disclaimers page states that FedRAMP content about a specific commercial product or service is provided for the information and convenience of the public and “does not constitute endorsement, recommendation, or favoring by the General Services Administration”. A listing here is a record of a certification status, not a judgment about the product.
FedRAMPCost.com is an independent cost reference. We are not affiliated with FedRAMP, the GSA, any provider listed on this page, or any assessment organization, and no provider pays to appear in this register.