Standard Code Signing

• UNIX/Linux applications
• VBA macros
• Apple (MacOS X) applications
• Firefox and Netscape Add-ons
• Adobe AIR
• Java applets
• Java-based application
• ActiveX controls
• Binary files (.exe)
• Binary files for Visual Studio
• Example of supported file formats: .exe, .dll, .ocx, .cab, .msi, .msp, jar, .war, .ear

See certificates comparision

• reliable software identification – certified information concerning an author of an application and/or a company that produced the software,
• guaranteed security of an application – protection against code modifications by third parties,
• protection against getting infected with a harmful code (viruses, Trojan horses, etc.),
• protection of intellectual property

• X.509 v.3 (RFC5280), compliant,
• secured with RSA-SHA1 cryptographic function,
• minimal cryptographic key length RSA/DSA 2048 bit, EC 571 bit: sect571k1 (NIST K-571) and sect571r1 (NIST B-571),
• issued by CERTUM - a certificate authority holding a WebTrust certificate which confirms the compliance with international standards for Certification Authorities,
• issued by CERTUM - whose root certificate is automatically recognized as trusted in modern web browsers,
• verification of the certificate's status is possible via CRL lists and the OCSP protocol.

To obtain the certificate:

• Internet browser supporting X.509 certificates (e.g. Internet Explorer, Netscape Comunicator, Opera, Firefox)
• MS Windows XP, Vista (32 bit, 64 bit), Windows 7 (32 bit, 64 bit), Linux/UNIX

To sign code or file:

• MS Office 2000 or later / Visual Basic – to sign macros based on Microsoft Visual Basic for Applications (VBA) technology,
• ToolSign.sh script to sign on UNIX/Linux platforms,
• OpenSSL 1.0.0e or later,
• KeyTool and Jarsigner - Java JDK 1.1 + package
• SignTool
• SignCode – for previous Windows versions
• Visual Studio Express

• Standard Code Signing certificate is issued for 1,2 or 3 years

In order to verify the data contained in the request for certificate issuance, please provide within 7 days copies of the following documents:

For private persons:

• copy of ID document of a person responsible for the certification procedure (ID card, passport, residence permit, student’s ID card, social insurance ID, etc.) to check the data given in a form filled in on a website

For company / organisation representatives:

• copy of ID document of a person responsible for the certification procedure (ID card, passport, residence permit, student’s ID card, social insurance ID, etc.) to check the data given in a form filled in on a website
• document to assure the person responsible for certification procedure is an employee or representative of company/institution
• document to verify company/institution authenticity, e.g.
  • DUNS number (Dun and Bradstreet)
  • Articles of Incorporation
  • Business License
  • Doing Business As (DBA) registration
  • Partnership documentation
  • Sole Proprietorship documentation
  • Factitious Name Statement
  • Assumed Name Statement
  • Seller's Permit
  • Occupational License
  • Sales Permit

All collected documents should be sent within 7 days to CERTUM in one of the following ways:

1. by fax: 004891 4257 422
2. via e-mail: info@certum.pl
3. per post:
CERTUM PCC
ul. Bajeczna 13
71-838 Szczecin, Poland