What Google Trust Services is
Google Trust Services (GTS) is the CA Google uses for its own services — and makes available to everyone through its Public CA. It issues free DV certificates, and the roots (GTS Root R1–R4) are among the most widely trusted in the world.
ACME with EAB
Like ZeroSSL, GTS requires EAB credentials to use ACME. Once EAB is set up, it works like any other ACME CA: automatic issuance and renewal with a standard client. The lifetime is 90 days.
Not just for Google Cloud
A common misconception is that GTS is only for GCP customers. That is not true — anyone can generate EAB credentials and use GTS via ACME. It is, however, most tightly integrated with the Google ecosystem, which makes setup easiest if you are already there.
When GTS fits you
When you want a stable, free, widely trusted ACME CA — especially if you already use Google Cloud. Compare it with the others in best free SSL providers.
How CertControl helps
CertControl's ACME server can relay to Google Trust Services, and CertControl monitors the certificates whatever the CA — so you can choose GTS without losing the overall overview of expiry and renewals.
Frequently asked questions
Is Google Trust Services free?
Yes. GTS issues free DV certificates via ACME. You just need to generate EAB credentials first.
Do I need to be a Google Cloud customer?
No. GTS is available to everyone through its Public CA — not just GCP customers.
Does Google Trust Services require EAB?
Yes. You need EAB credentials (External Account Binding) to use GTS via ACME.