Comparision of Code Signing CERTUM Certificates


  OpenSource Code Signing Standard Code Signing MS Code Signing
Version  from 28 euroBuy now  from 98 euroBuy now  from 273 euroBuy now
Renewal not applicable Renew Renew
Encrypted digital signature tak tak tak
Distribution Electronic code (only for customers who have their own cryptographic card and reader) or Certum Suite (which contains reader and cryptographic card) Electronic code (only for customers who have their own cryptographic card and reader) or Certum Suite (which contains reader and cryptographic card) Certum Suite (which contains reader and cryptographic card)
Requires rigorous extended validation of organisation nie nie tak
Immediate reputation with Microsoft SmartScreen nie nie tak
Purpose
  • Reliable authentication of software publisher
  • User protection against downloading dangerous software
  • For software publishers working under the Open Source license
  • Digital signing of: code, applications, drivers (learn more)
  • Increases clients’ trust
  • Ensures security of software distributed on-line
  • Certifies code/software origin
  • Safeguards the reputation of the software publisher
  • Protects both the publisher and user against modifications made by third parties
  • Eliminates system messages such as:
    • „Unknown publisher”
    • „Dangerous software”
  • Digital signing of: code, applications, drivers (learn more)
Characteristics
  • Minimum formalities
  • Immediate issue
  • Verification of user/organization data
  • Possible application in various technologies
  • Verification of user/organization data
  • Microsoft cross-certified certificate
  • signing of code, application, drivers for Windows 32 and 64-bit systems in Kernel Mode.
Free technical support tak tak tak
Client/Organization Data on the certificate tak tak tak
Validity period 1 year 1-3 years 1-3 years
Standard issue time after verification 24h 24h 24h
Free revocation and exchange tak tak tak
Compliance wuth WebTrust tak tak tak
Free time stamp tak tak tak
Click to see additional information
Recommended key lenght 2048 / 4096 2048 / 4096 2048 / 4096
Certificate function SHA-2 SHA-2 SHA-2
Supported by all major browsers tak
Types of supported files1 .docm, .xlsm, .pptm, .xpi, .jar, .war, .ear, exe, .dll, .ocx, .cab, .msi .docm, .xlsm, .pptm, .xpi, .jar, .war, .ear, exe, .dll, .ocx, .cab, .msi .exe, .dll, .sys files, .ocx, .cab, .cat, .msi, .msp, .xpi, .ocx
Possible internal signature2 tak tak tak
Possible external signature2 tak tak tak
Required installing the certificate on the cryptographic smart card tak tak tak
OCSP – Online Certificate Status Protocol tak tak tak
Digital signature
  • UNIX/Linux programs
  • VBA macros
  • Apple Software (MacOS X)
  • Adobe AIR
  • Firefox and Netscape add-ons
  • Java applets
  • Aplikacji internetowych opartych o technologię JAVA
  • Komponentów i kontrolek ActiveX
  • Plików binarnych (.exe)
  • UNIX/Linux software
  • VBA Macros
  • Apple Software (MacOS X)
  • Adobe AIR
  • Firefox and Netscape add-ons
  • Java applets
  • Internet applications based on JAVA technology
  • ActiveX components and controls
  • Binary files (.exe)
  • Windows operating system libraries
  • Program codes
  • ActiveX components and controls
  • Drivers for Windows 32 and 64-bit systems and systems operating in Kernel Mode
  • In software kernel mode
Examples of tools that may be used for signing
  • MS Office 2000+
  • ToolSign.sh and open SSL for UNIX/Linux/li>
  • Firefox, Key Manager
  • Jarsigner and verifier z Java JDK 1.5+
  • SignTool
  • SignCode
  • Visual Studio Express
  • MS Office 2000+
  • ToolSign.sh and open SSL for UNIX/Linux
  • Firefox, Key Manager
  • Jarsigner and verifier with Java JDK 1.5+
  • SignTool
  • SignCode
  • Visual Studio Express
  • SignTool
  • Code-Signing Tools Overview
  • MakeCert
  • CertMgr
  • Capicom.dll
  • MakeCat
  • Signability
  • Inf2Cat
  • PVK2PFX
  • Code Sign Example Script
Technical requirements for downloading the certificate
  • Web browser supporting the X.509 v.3 certificates (e.g. Internet Explorer, Opera, Firefox)
  • MS Windows 2000, XP, Vista (32 bit), Windows 7 (32 bit), Linux/UNIX
  • Java JDK 1.5+
  • Web browser supporting the X.509 v.3 certificates (e.g. Internet Explorer, Opera, Firefox)
  • MS Windows 2000, XP, Vista (32 bit), Windows 7 (32 bit), Linux/UNIX
  • Java JDK 1.5+
  • Microsoft Internet Explorer 5.0 or newer
  • MS Windows XP, Vista (32 bit, 64 bit), Windows 7 (32 bit, 64 bit)

1 – and other types of files supporting digital signature

2 – depends on the tool used for signing

Dear User

Pursuant to Article 13(1)(2) of the General Data Protection Regulation of 27 April 2016 (hereinafter referred to as the “Regulation”), please be informed that:

  • The administrator of your personal data is Asseco Data Systems S.A. with registered office in Gdynia, ul. Podolska 21, 81-321 Gdynia;
  • The Data Protection Officer at Asseco Data Systems S.A. can be contacted at e-mail address: IOD@assecods.pl, tel. +48 42 675 63 60.
  • Your personal data will be processed for the purpose of:
    1. preparing a response to your enquiry, pursuant to Art. 6(1)(b) of the Regulation.
    2. sending marketing information by means of electronic communication and automation software on the basis of the Act on the provision of services by electronic means of 18 July 2002 and in connection with Article 172(1) of the Act “Telecommunications Law” of 16 July 2004 (alternative consent), pursuant to Article 6(1)(a) of the Regulation.
  • Your personal data will be stored for the time necessary to prepare a response to your enquiry and to respond it until you withdraw your consent for receipt of marketing information.
  • You have the right to access the contents of your data and the right to correct it, to have it removed/forgotten, to restrict its processing, to transfer it, to make an objection, to withdraw consent at any time without affecting the lawfulness of processing carried out on the basis of your consent prior to its withdrawal. All the above rights may be exercised through an application submitted at https://www.daneosobowe.assecods.pl
  • You have the right to lodge a complaint with the Regulator if you consider that the processing of your personal data is in breach of provisions of the Regulation.
  • Provision of personal data by you is necessary for the execution of your enquiry. You must provide it, and the consequence of not providing personal data will be that you will not be able to receive a response to your enquiry.
  • Your data will be processed automatically, also in the form of profiling. Automated decision making will be based on the principles of processing personal data supplied at the time of creating an Account and any supplemented data stored in it as well as data concerning activity on the Websites (in accordance with the Privacy Policy of Asseco Data Systems S.A. website Privacy Policy) and activity related to our communication with you through e-mail, and such processing will result in adjustment of marketing information concerning our products and services that may be of interest to you.
Privacy policy