Summer Savings on Website Security
All summer long, protect your website with trusted SSL certificates at reduced prices — simple, secure, and cost-effective.
Get 10% off with coupon: SUMMER10
FAQs
All
Business Validation
Certificate Authorities
Changes
Code Signing
Configuration
CPAC
CSR Code
CSR Decoder
CSR Generation Tutorials
CSR Generator
DigiCert
Domain Validation
Extended Validation
General
Install SSL Certificates
Installation
IP Address
LEI
Multi Domain
Payments
Private Key
Renewal
S/MIME
Types
Updates
Wildcard
Will my signed software stop working when the certificate expires?
No. Code signed with a valid timestamp stays trusted past expiry; only new signing ends. Use tsa.digicert.com or timestamp.sectigo.com as a free TSA.
Copy Link
Can I sign code in CI/CD without a physical USB token?
Yes. DigiCert KeyLocker cloud HSM signing lets you sign over an API with no token, and it covers macOS or Linux build agents where a USB token isn’t practical.
Copy Link
Which is the cheapest EV code signing certificate SSL Dragon carries?
Comodo EV and Sectigo EV both start at $287/year, the joint-lowest EV options on this page. Multi-year orders lower the per-year cost, with annual reissuance under the 460-day rule.
Copy Link
Do I need an EV code signing certificate for Windows drivers?
For kernel-mode drivers, yes; Microsoft’s WHQL portal rejects anything below EV. User-mode drivers can be signed with OV under the same Authenticode flow as ordinary applications.
Copy Link
What’s the difference between OV and EV code signing certificates?
EV requires registered-organization vetting and is the only tier accepted for Windows kernel-mode drivers; OV permits individual developers at lower cost. EV vetting typically takes 3–5 business days longer than OV.
Copy Link
Does code signing work on macOS and Linux?
Yes for general signing of cross-platform binaries, including .jar files and many container formats. macOS App Store distribution requires a separate Apple Developer ID program; Linux signing is less standardized but supported across most package formats.
Copy Link
How long does code signing issuance take?
1–7 business days depending on the CA and validation level. EV usually takes longer than OV because the organization vetting is more involved, so plan extra time on a tight release deadline.
Copy Link
Which certificate do I need for Windows kernel-mode drivers?
Any EV code signing certificate. Microsoft’s WHQL portal and attestation signing flow both reject non-EV certificates outright.
Copy Link
Can I get a free code signing certificate?
No publicly-trusted CA issues them. The full reasoning and the cheapest paid alternatives are in the Why Free Code Signing Isn’t Realistic section above.
Copy Link
How long is a code signing certificate valid?
Maximum 460 days per issuance under current rules. Always sign with a timestamping authority (DigiCert’s tsa.digicert.com or Sectigo’s timestamp.sectigo.com) so binaries stay trusted past expiration. Full context in the 460-Day Validity section above.
Copy Link