Comparision of Code Signing CERTUM Certificates


  OpenSource Code Signing Standard Code Signing MS Code Signing
Version  from 28 euroBuy now  from 98 euroBuy now  from 273 euroBuy now
Renewal not applicable Renew Renew
Encrypted digital signature tak tak tak
Distribution Electronic code (only for customers who have their own cryptographic card and reader) or Certum Suite (which contains reader and cryptographic card) Electronic code (only for customers who have their own cryptographic card and reader) or Certum Suite (which contains reader and cryptographic card) Certum Suite (which contains reader and cryptographic card)
Requires rigorous extended validation of organisation nie nie tak
Immediate reputation with Microsoft SmartScreen nie nie tak
Purpose
  • Reliable authentication of software publisher
  • User protection against downloading dangerous software
  • For software publishers working under the Open Source license
  • Digital signing of: code, applications, drivers (learn more)
  • Increases clients’ trust
  • Ensures security of software distributed on-line
  • Certifies code/software origin
  • Safeguards the reputation of the software publisher
  • Protects both the publisher and user against modifications made by third parties
  • Eliminates system messages such as:
    • „Unknown publisher”
    • „Dangerous software”
  • Digital signing of: code, applications, drivers (learn more)
Characteristics
  • Minimum formalities
  • Immediate issue
  • Verification of user/organization data
  • Possible application in various technologies
  • Verification of user/organization data
  • Microsoft cross-certified certificate
  • signing of code, application, drivers for Windows 32 and 64-bit systems in Kernel Mode.
Free technical support tak tak tak
Client/Organization Data on the certificate tak tak tak
Validity period 1 year 1-3 years 1-3 years
Standard issue time after verification 24h 24h 24h
Free revocation and exchange tak tak tak
Compliance wuth WebTrust tak tak tak
Free time stamp tak tak tak
Click to see additional information
Recommended key lenght 2048 / 4096 2048 / 4096 2048 / 4096
Certificate function SHA-2 SHA-2 SHA-2
Supported by all major browsers tak
Types of supported files1 .docm, .xlsm, .pptm, .xpi, .jar, .war, .ear, exe, .dll, .ocx, .cab, .msi .docm, .xlsm, .pptm, .xpi, .jar, .war, .ear, exe, .dll, .ocx, .cab, .msi .exe, .dll, .sys files, .ocx, .cab, .cat, .msi, .msp, .xpi, .ocx
Possible internal signature2 tak tak tak
Possible external signature2 tak tak tak
Required installing the certificate on the cryptographic smart card tak tak tak
OCSP – Online Certificate Status Protocol tak tak tak
Digital signature
  • UNIX/Linux programs
  • VBA macros
  • Apple Software (MacOS X)
  • Adobe AIR
  • Firefox and Netscape add-ons
  • Java applets
  • Aplikacji internetowych opartych o technologię JAVA
  • Komponentów i kontrolek ActiveX
  • Plików binarnych (.exe)
  • UNIX/Linux software
  • VBA Macros
  • Apple Software (MacOS X)
  • Adobe AIR
  • Firefox and Netscape add-ons
  • Java applets
  • Internet applications based on JAVA technology
  • ActiveX components and controls
  • Binary files (.exe)
  • Windows operating system libraries
  • Program codes
  • ActiveX components and controls
  • Drivers for Windows 32 and 64-bit systems and systems operating in Kernel Mode
  • In software kernel mode
Examples of tools that may be used for signing
  • MS Office 2000+
  • ToolSign.sh and open SSL for UNIX/Linux/li>
  • Firefox, Key Manager
  • Jarsigner and verifier z Java JDK 1.5+
  • SignTool
  • SignCode
  • Visual Studio Express
  • MS Office 2000+
  • ToolSign.sh and open SSL for UNIX/Linux
  • Firefox, Key Manager
  • Jarsigner and verifier with Java JDK 1.5+
  • SignTool
  • SignCode
  • Visual Studio Express
  • SignTool
  • Code-Signing Tools Overview
  • MakeCert
  • CertMgr
  • Capicom.dll
  • MakeCat
  • Signability
  • Inf2Cat
  • PVK2PFX
  • Code Sign Example Script
Technical requirements for downloading the certificate
  • Web browser supporting the X.509 v.3 certificates (e.g. Internet Explorer, Opera, Firefox)
  • MS Windows 2000, XP, Vista (32 bit), Windows 7 (32 bit), Linux/UNIX
  • Java JDK 1.5+
  • Web browser supporting the X.509 v.3 certificates (e.g. Internet Explorer, Opera, Firefox)
  • MS Windows 2000, XP, Vista (32 bit), Windows 7 (32 bit), Linux/UNIX
  • Java JDK 1.5+
  • Microsoft Internet Explorer 5.0 or newer
  • MS Windows XP, Vista (32 bit, 64 bit), Windows 7 (32 bit, 64 bit)

1 – and other types of files supporting digital signature

2 – depends on the tool used for signing