Differences among digicert, SECTIONO and globalsign code signing certificates

Many software developers do not know which code signing certificate to choose when signing software programs , Or hesitate in different brand code signing certificates . This article will frequently-used Digicert、Sectigo、Globalsign Make detailed comments on the code signature certificate , So that people in need can clearly choose their own appropriate certificates .

Look at the picture below , Preview first Digicert、Sectigo、Globalsign The difference between code signing certificates , Then explain in detail the similarities and differences between them .

（Digicert、Sectigo、Globalsign Comparison diagram of code signing certificate ）

Digicert、Sectigo、Globalsign The same points of code signature

Common brands of code signature certificates mainly include Digicert、Sectigo、Globalsign etc. , They all provide OV Code signing certificate （ Also called common code signature / Standard code signing certificate ） and EV Code signing certificate .

Whether it's OV Code signing certificate or EV Code signing certificate , All support .exe,.cab,.dll,.ocx,.msi,.xpi,.xap Software signature , Compatible Authenticode, Office VBA, Java, Adobe AIR, Mac OS, Mozilla And other major platforms . After the software signature is successful, the system can be eliminated “ Unknown Developer ” Safety warning for , Display the Chinese or English name of the software developer , Identify the software publisher and ensure the integrity of the code , Prevent code from being tampered with .

Besides , For security reasons ,SHA1 The signature algorithm has been eliminated , At present, the above code signing certificates all use SHA2 Signature algorithm . Code visa books of different brands can provide time stamping service free of charge , Ensure that the signed code is valid for a long time , And there is no limit to the number of signatures within the validity period of the certificate . These are OV Code signature and EV Basic features of code signature , therefore Digicert、Sectigo、Globalsign All code signing certificates have .

Digicert、Sectigo、Globalsign Differences in code signatures

According to the type ,OV The verification process of code signature certificate is relatively simple , commonly 1-2 You can quickly sign and issue... Within working days , And CA The organization sends the certificate directly to the user by e-mail . If you want to get Microsoft Smartscreen instant , You need to download cumulatively to get .

EV The verification process of code signing certificate is better than OV The code signature is slightly more complex , More strictly , Not only need to do enterprise information verification , Telephone verification , You also need to fill in the certificate application agreement and other materials and wait for them CA Issued after final review . For safety's sake ,EV The code signing certificate is stored in Ukey in ,CA Send it to users by mail . therefore , obtain EV Code signing certificates takes longer . however , If you want to get Microsoft immediately Smartscreen Instant reputation , You need to choose EV Code signing certificate .

According to the brand , The biggest difference is price and performance .

Sectigo Code signing certificates are cheap , Only one thousand yuan can get , High cost performance , It is the brand with the largest number of signatures .EV The code signing certificate takes a long time to review , It's usually 1-7 Working day , There is no need to clear the Customs by mail .

Globalsign The stability of code signing certificate is good , Chinese technical support , The issuing speed is fast ,EV The code signature is sent by domestic mail , There is no need for a long wait , But the price is higher .

Digicert High brand awareness , The code signature certificate is stable , Naturally, the price is also expensive .Digicert EV Code signing certificate 1-3 It can be issued within working days , But mailing requires customs clearance , So you can't get the certificate quickly .

No matter which brand of code signature certificate you choose, you need to verify the enterprise information , Therefore, when applying for code signature certificate, you need to provide relevant information of legal enterprise . If you need to apply for a code signature certificate, you can ask Ruicheng customer service for assistance ！

This article is reproduced in https://www.racent.com/blog/differences-of-code-signing-among-digicert-sectigo-globalsign