Digicert Code Signing Certificates
Digicert Code Signing Certificates create a
digital "shrink-wrap"
for code and content to protect software publishers and users when they download code and content
over the Internet and mobile networks. Digital signatures authenticate the source and verify the integrity of content.
Looking for instant reputation with Microsoft's SmartScreen Filter? The Digicert EV Code Signing Certificate provides this. Learn More about it here: EV Code Signing Certificates
Digicert Code Signing Certificates for: Microsoft Authenticode (Multi-Purpose) Microsoft Office / Microsoft VBA Java Code Signing Adobe AIR Code Signing |
|
Give Customers the Confidence to Trust Your Code With Digicert Code
Signing Certificates
Digicert Code Signing Certificates protect your customer, your brand, and your
intellectual property by making your applications identifiable and harder to falsify or damage with a time-stamped digital signature certified by the most trusted security brand on the Internet (Tec-Ed Whitepaper, PDF, Oct. 2007).
A Digicert Code Signing Certificate is strongly recommended for any publisher intending to distribute code or other content over the Internet or over corporate networks. Software and other content providers who wish to provide extra assurance to their customers about who produced the content and that it has not been tampered with should use Digicert Code Signing Certificates. Newer operating systems and Internet browsers are often set to higher security levels, which often require signed content. Use of Digicert Code Signing Certificates help enhance a publisher's reputation.
How Does Digicert Code Signing Work?
Digicert Code signing uses embedded digital signatures to assure the publisher details and
content integrity of downloadable code. Digicert Code signing certificates are valid for one, two, or three years depending on which duration was specified when the certificate was purchased.
Digicert Code Signing Certificates Support Multiple Applications
You can sign as many applications or other content with a Digicert Code Signing Certificate as
you wish, provided that the applications are going to be used for
and distributed by the organization that owns the certificate.
Secure Hash Algorithm (SHA) 256 Support is available for Digicert Code Signing Certificates
SHA-256, also known as SHA-2 support is available for Digicert Code Signing starting April 1st, 2013 at no extra charge. SHA-2 was developed by
National Institute of Standards and Technology (NIST) and is the recommended cryptographic hash function to replace SHA-1 by the end of 2014.
The option for SHA-2 is available through both the ordering process and reissue process.
Please note some older applications and operating systems may not support SHA-2, for example, Windows XP Service Pack 2 or lower does not support
the use of SHA-2. Java SDK 1.4.2 or higher needs to be installed and used on the server for SHA-2 support for Java server support.
For Windows environment, please refer to the following blog for SHA-2 deployment:
http://blogs.technet.com/b/pki/archive/2010/09/30/sha2-and-windows.aspx
For Java environment, please refer to the following link regarding SHA-2 deployment on Java Servers:
http://docs.oracle.com/javase/1.4.2/docs/guide/security/CryptoSpec.html
In addition, Apache version 2.x or higher is required to support SHA-2 on Apache based servers and Open SSL 1.1.x will be required for certificate
signing request and private key generation. SHA-2 support is available to you as an option in securing your code signing certificates. Please check
with your Security Officer on your corporate policy.