OBHOST Loader
OBHost is Live 🚀 The wait is over, obhost.net is here. Explore Now
For Developers · Sign Software

Code Signing
Certificate

Stop losing users to "Unknown Publisher" warnings. Code Signing certificates digitally sign your .exe, .msi, .dll, drivers, and scripts — proving authenticity and integrity. Windows SmartScreen, macOS Gatekeeper, and antivirus engines trust signed software with your verified company name.

  • Eliminate publisher warnings
  • Sign unlimited files
  • Free timestamping
  • Multi-platform support
  • OV & EV available
  • Boost SmartScreen rep
Starting From
$270.68 /yr
Sign unlimited files · Permanent timestamps · 30-day money-back
4.4/5 Trustpilot 🛡 30-Day Refund 👥 200K+ Customers 📅 Since 2014
Unknown Publisher
MyApp.exe — signed
// digitally signed binary signtool sign /fd SHA256 \ /tr "http://ts.obhost.net" \ /td SHA256 "MyApp.exe" // Signature: verified publisher = "OBHost LLC"; timestamp = 2026-04-30; _
Code
Signed
Verified Publisher
Publisher: OBHost LLC
File origin: Hard drive
Status: ✓ Trusted
Trustpilot
4.4/5 · 9,840+ reviews
200,000+ Customers
Trusted since 2014
Code Signing Certificate
About Code Signing

What is a Code Signing Certificate?

When users download software today, their operating system — Windows, macOS, Linux — checks whether the file is digitally signed by a trusted publisher. If the software is unsigned, users see a security warning: "Unknown Publisher" or "This file may harm your computer." Many users abandon the installation entirely at this point.

A Code Signing certificate works differently from an SSL/TLS certificate. Instead of encrypting web traffic, it creates a cryptographic digital signature embedded into your executable file, installer, script, or driver. This signature proves two critical things: (1) the code was created by your verified identity, and (2) the code has not been modified or tampered with since you signed it.

Unsigned software damages user trust, increases support tickets ("is this safe to install?"), and triggers antivirus false positives. A Code Signing certificate is the professional standard for distributing any software.

01 Step 1 Browse Code Signing Certificates

Compare Code Signing Certificates

Filter by brand. Sign executables, installers, drivers, and scripts with trusted CA-issued certificates.

Brand
Product
Reissues
Files
Timestamp
Price
Action
Sectigo
Sectigo Code Signing SSL
Reissues: Free
Files: Unlimited
Timestamp:
$270.68/yr
Buy
02 Step 2 Choose OV or EV Code Signing
OV vs EV — Choose Your Tier

Standard Code Signing vs EV Code Signing

Both are issued by trusted CAs. The difference is reputation speed, key storage, and Windows kernel driver eligibility.

OV · Standard

OV Code Signing

Organization Validated — your verified company name displayed to users. Reputation builds gradually with usage.

  • Verified publisher name shown
  • 1-3 day issuance after verification
  • Sign unlimited files
  • Free timestamping included
  • Software-stored private key
  • SmartScreen reputation builds gradually
  • Cannot sign Windows kernel drivers
Choose OV Code Signing
★ Recommended EV · Premium

EV Code Signing

Extended Validation — instant SmartScreen reputation, USB hardware token required. Mandatory for kernel driver signing.

  • Instant SmartScreen reputation
  • Verified publisher name shown
  • Sign unlimited files
  • Free timestamping included
  • Hardware USB token for keys
  • Windows kernel driver signing
  • 3-7 day extended verification
Choose EV Code Signing
Why Sign Your Code?

Three reasons every developer needs Code Signing

Build user trust, prove code authenticity, and reduce antivirus false positives — automatically.

Eliminate "Unknown Publisher" Warnings

Replace Windows SmartScreen's "Unknown Publisher" warning with your verified company name — dramatically increasing user confidence and installation completion rates.

Prove Your Code Is Authentic & Unmodified

The cryptographic signature guarantees your code has not been tampered with, corrupted, or injected with malware after publication — protecting users and your reputation.

Reduce Antivirus False Positives

Unsigned software is frequently flagged by antivirus engines. A Code Signing certificate from a trusted CA significantly reduces false positives and improves your reputation score.

What Can Be Signed

Sign virtually any executable or distributable file

A single Code Signing certificate works across multiple platforms and file formats.

.exe / .dll
Windows Apps
.msi / .cab
Installers
.sys
Drivers (EV)
.ps1 / .vbs
Scripts
.app / .pkg
macOS Apps
.jar
Java Archives
.apk / .xap
Mobile Apps
.crx / .xpi
Browser Ext.
Certificate Features

Code Signing Certificate Features

Everything you get with every OBHost Code Signing certificate.

Signature

Digital Signature

Cryptographic signature embedded in the file — proves authenticity and integrity to every OS.

Multi-Platform

Multi-Platform

Sign .exe, .msi, .dll, drivers, scripts, macOS apps, Android APKs, Java JARs, and more.

Timestamp

Free Timestamping

Timestamp service included — signed files remain valid permanently, even after certificate expires.

Publisher ID

Publisher Identity

Your verified company or individual name is displayed to every user when running your software.

OS Compatible

OS Compatible

Compatible with Windows SmartScreen, macOS Gatekeeper, and all major antivirus engines.

Unlimited

Sign Unlimited Files

One certificate lets you sign unlimited files and software builds throughout its validity period.

Issuance

1-3 Day Issuance

OV Code Signing typically issued within 1-3 business days. EV may take 3-7 days.

Renewal

Annual Renewal

Renew Code Signing annually. Previously signed files remain valid permanently via timestamp.

Need Website SSL?

Need to secure your website too?

Code Signing is for software files. SSL/TLS is for websites. You may need both.

Domain Validation (DV) SSL

If you distribute software via your website, you also need an SSL certificate to secure your site. DV SSL activates HTTPS and shows the padlock — fast issuance in minutes.

View DV SSL

Organization Validation (OV) SSL

For software company websites where visitors verify your organization's identity. OV SSL shows your verified company name in certificate details — same trust layer as OV Code Signing.

View OV SSL
How It Works

How does Code Signing work?

When you sign your software with a Code Signing certificate, a cryptographic hash (a unique fingerprint) of your executable file is created and then encrypted using your certificate's private key. This encrypted hash — the digital signature — is embedded directly into the file itself.

When a user downloads and runs your software, their operating system uses your certificate's public key to decrypt the signature and recalculate the file's hash. If the hashes match, two things are confirmed: (1) the file was signed by the holder of that certificate, and (2) the file has not changed since signing — no malware, no bit alterations.

Timestamps are also included in the signature. This means even after your certificate expires, previously signed files remain valid — the signature is trusted permanently as long as it was valid at the time of signing.

How Code Signing works — digital signature process
⚠ Before vs After Code Signing

Stop losing users to "Unknown Publisher" warnings

What your users see — with vs. without a Code Signing certificate.

Without Code Signing
!
Windows protected your PC
Microsoft Defender SmartScreen prevented an unrecognized app from starting. Running this app might put your PC at risk.
Publisher: Unknown publisher
  • Scary red warning dialog
  • "Unknown publisher" damages trust
  • Many users abandon installation
  • Frequent antivirus false positives
With Code Signing
Verified Publisher
Do you want to allow this app from a known publisher to make changes to your device?
Verified publisher: OBHost LLC
  • Clear, trusted notification
  • Verified company name shown
  • Higher install completion
  • Reduced AV false positives
FAQ

Code Signing — Frequently Asked Questions

Everything about Code Signing certificates — what they sign, how they work, OV vs EV, and Windows SmartScreen.

Note
Code Signing is different from SSL/TLS. SSL secures web traffic. Code Signing signs software files. You may need both if you distribute software via a website.
Get Code Signing Cert

A Code Signing certificate is a digital certificate used to apply a cryptographic signature to software files — executables (.exe), installers (.msi), drivers, scripts (.ps1), mobile apps (.apk), and more. Any developer or software publisher who distributes software to end-users needs a Code Signing certificate. Without one, users on Windows, macOS, and Linux see "Unknown Publisher" or similar security warnings that significantly reduce installation rates. If you ship software of any kind, you need to sign it.

OV (Organization Validation) Code Signing verifies your company or individual identity and allows you to sign software. Users see your publisher name but Windows SmartScreen may still build reputation gradually. EV (Extended Validation) Code Signing requires a physical USB hardware token, undergoes more thorough identity verification, and provides immediate SmartScreen reputation — meaning users see no warning from the very first download. EV Code Signing is also mandatory for signing Windows kernel-mode drivers submitted to Microsoft's Windows Hardware Dev Center.

Code Signing certificates can sign a wide range of file types depending on the tool you use. Common supported formats include: Windows executables (.exe, .dll, .sys, .msi, .cab), PowerShell scripts (.ps1), macOS apps and packages (.app, .pkg, .dmg), Android apps (.apk), Java archives (.jar), Adobe Air applications, browser extensions (Chrome, Firefox), and firmware. Most Code Signing tools (like signtool.exe on Windows) are included free in the respective development SDKs.

A timestamp is a record embedded in the code signature confirming the exact date and time the code was signed. When you timestamp your signature (using a free timestamping authority), the signed file remains trusted permanently — even after your Code Signing certificate expires. Without a timestamp, all previously signed files would stop being trusted the moment your certificate expires, requiring you to re-sign all your software. Always use timestamping when signing — it's free and critical.

Windows SmartScreen is Microsoft's reputation-based security filter. It assigns reputation scores to software based on download volume, publisher history, and certificate type. Even after signing with an OV certificate, a newly issued certificate starts with zero reputation — SmartScreen may still warn users until the software accumulates enough downloads and positive history. EV Code Signing certificates bypass this reputation-building period and receive immediate SmartScreen trust from the first download. If you frequently release new software versions, EV Code Signing is highly recommended.

Since June 2023, the CA/Browser Forum has required all Code Signing certificate private keys to be stored on hardware security devices (HSMs) for higher assurance. EV Code Signing certificates are shipped on a physical USB hardware token — the private key is generated on the token and cannot be exported. This prevents key theft and unauthorized signing. The token must be physically connected to your computer when signing files. OV Code Signing also now requires hardware token storage following the same industry standard.

No — they serve completely different purposes. An SSL/TLS certificate secures the encrypted connection between a web browser and a web server, activating HTTPS and the padlock in the browser. A Code Signing certificate is used by software developers to digitally sign executable files, installers, and scripts before distributing them. They both involve cryptographic certificates from trusted CAs, but they are used in entirely different contexts. If you distribute software through a website, you need both: SSL for your website and Code Signing for your software files.
Sign Your Software · Build User Trust

Code Signing.
Verified Publisher. No More Warnings.

OV & EV Code Signing · Windows · macOS · Android · Scripts · Drivers

Sign unlimited files · Permanent timestamps · 30-day money-back · 200,000+ Customers · Since 2014