How to register a Code Signing certificate for an individual?

N

niki_parnasov2017-11-23 17:40:28

Digital certificates

niki_parnasov, 2017-11-23 17:40:28

I am a software developer. In 2015, in order to eliminate SmartScreen triggers when downloading, to remove false positives from antiviruses / browser warnings when downloading software, I purchased a StartSSL certificate for $59. In 2016, after a year passed, I acquired a new StartSSL certificate.
I need to sign exe files of application programs (MS Authenticode), which I have successfully done for the last 2 years.
Now the certificate is about to expire, I need to purchase a new certificate, but StartCOM writes that their code signing certificates for individual developers are no longer trusted.
>Thank you for a Class 2 request. Are you aware that our certificates are not trusted on any platform at the moment?
>All certificates, issued after 26/9/2017 are not distrusted on any platform, but we started to have distrust issues with Mozilla from October 2016. Do you require SSL certificate only? Please advise Kind regards
In this regard, the question arises, if things are bad with StartSSL - where can I get a code signing certificate for an individual developer now?

Reply

Answer the question

In order to leave comments, you need to log in

4 answer(s)

N

niki_parnasov, 2017-11-23
@niki_parnasov

Here's what they have on the site right now (below). Considering what is written below, I think whether it makes sense to order at least some kind of certificate from them - even if not completely trusted - because without a certificate it’s really bad, but I don’t know how else you can quickly get a certificate for an individual except through them ..
Dear customer, As
you are surely aware, the browser makers distrusted StartCom around a year ago and therefore all the end entity certificates newly issued by StartCom are not trusted by default in browsers.
The browsers imposed some conditions in order for the certificates to be re-accepted. While StartCom believes that these conditions have been met, it appears there are still certain difficulties
forthcoming. Considering this situation, the owners of StartCom have decided to terminate the company as a Certification Authority as mentioned in Startcom´s website.
StartCom will stop issuing new certificates starting from January 1st, 2018 and will provide only CRL and OCSP services for two more years.
StartCom would like to thank you for your support during this difficult time.
StartCom is contacting some other CAs to provide you with the certificates needed
Please let us know if you need any further assistance with the transition process. We deeply apologize for any inconveniences that this may cause.

C

CityCat4, 2017-11-24
@CityCat4

StartSSL is dead . And for a very long time. He had already rotten and decomposed.
The request "code signing certificate buy" gives a lot of links - what's the problem?

I

IamG, 2017-12-01
@IamG

just the other day I made out a komodo for an individual through emaro-ssl.ru
, in principle, everything is simple - scans of a passport, tax number, utility bills.
though I haven't signed it yet :-)
and by the way, I have a question: do I need to sign both the installer and the program inside or just the installer?

V

Vladislav Kuvarin, 2020-07-03
@Modaje

For individuals, you can get a certificate from Sectigo, if you take the price for 1 year, it is exactly 7,490 rubles, if you buy for a longer period of validity, you can achieve a price of 5,992 rubles. These certificates are in demand and dozens of certificates have been issued to individual developers. For all questions about obtaining a certificate, please contact emaro-ssl.