Compare software

XCA vs step-ca: catalog facts
XCA	step-ca
Free Free to download, with source code published on GitHub.	Free Free and open source.
macOS	Linux, Self-hosted, Command line
Covers a full CA workflow including sub-CAs and CRLs Templates for issuing similar certificates	Issues both X.509 and SSH certificates Built-in ACME server for automated renewal
Assumes familiarity with PKI concepts Interface is functional rather than polished	Running a private CA requires careful key management Aimed at administrators comfortable with PKI concepts
Downloadable app	Downloadable app, Self-hosted
Closed source	Open source
License not stated	License not stated
Not stated if an account is needed	Not stated if an account is needed
Works offline	Not stated if it works offline
Official website Full listing and sources Checked October 1, 2026	Official website Full listing and sources Checked October 1, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.