Code Signing Certificates

Save Up to 37% on 3-Year Code Signing Certificates & Get a FREE Token!

Under the new CA/B Forum rules, all Code Signing Certificates must be issued on hardware-based tokens. Save on annual token and shipping costs by purchasing a 3-year certificate, paying for only one token and one shipping charge, and saving 37% compared to annual renewals.

Limited-Time Offer: Get a FREE token (worth $50) with every 3-year OV & EV Code Signing Certificate ordered this month!

Contact Us Now

Code Signing Certificate

  • Free token with 3-year certificate
  • Meet CA/Browser Forum authentication standards and Microsoft specifications
  • Establishes reputation in Windows, Microsoft Edge, and Microsoft SmartScreen® Application Reputation filter
  • Increase user confidence by showing the identity of the signing party before applications are run
  • Supports all major 32-bit/64-bit formats, including Microsoft Authenticode (kernel and user mode files, like .exe, .cab, .dll, .ocx, .msi, .xpi, and .xap), Adobe Air, Apple applications and plug-ins, Java, MS Office Macro and VBA, Mozilla object files, and Microsoft Silverlight applications
  • Includes timestamp functionality for continued operation even after the code signing certificate has expired
More Info

EV Code Signing Certificate

  • Extended validation (EV) offers highest level of security
  • Free USB token with 3-year certificate
  • Meet CA/Browser Forum authentication standards and Microsoft specifications
  • Establishes reputation in Windows 8.0 and later, Internet Explorer 9 and later, Microsoft Edge, and Microsoft SmartScreen® Application Reputation filter
  • Increase user confidence by showing the identity of the signing party before applications are run
  • Protects private key from theft via hardware token and PIN
  • Supports all major 32-bit/64-bit formats, including Microsoft Authenticode (kernel and user mode files, like .exe, .cab, .dll, .ocx, .msi, .xpi, and .xap), Adobe Air, Apple applications and plug-ins, Java, MS Office Macro and VBA, Mozilla object files, and Microsoft Silverlight applications
  • Includes timestamp functionality for continued operation even after the code signing certificate has expired
More Info

What changed?

As of June 1, 2023, all code signing certificates must comply with the new CA/B Forum regulations to ensure that the subscriber’s private key is generated, stored, and used in suitable FIPS-compliant hardware. ​

Requirements for private keys used with EV code signing certificates have been stronger than OV code signing certificates which are more relaxed.

The new rules are intended to reduce potential misuse of code signing certificates and to further protect those certificates from getting into the wrong hands by making key protection requirements for OV code signing certificates to be the same as EV code signing certificates.

As of June 1, 2023, you will no longer be able to issue your standard OV Code Signing certificates. All code signing certificates issued after June 1, 2023 will be:

  1. Installed on a token and shipped securely to the you or
  2. Available as a download to be installed on the customer’s own HSM. The hardware devices (e.g. tokens, HSMs, etc.) must be FIPS-compliant and support externally verifiable key attestation.

How they work

Code Signing Certificates enable software publishers to digitally sign applications, executables, scripts, and libraries, ensuring that the software remains untampered by external sources. Utilizing public key cryptography and code hashing, the signing process verifies the publisher's identity and confirms the software’s integrity. Without a valid digital signature, end users may receive security warnings or errors, potentially deterring installations.

Copyright © 2024. Sectigo Malaysia