How much is a code signing certificate?

The code signing certificate is very important for software developers. In addition to protecting the released software from malicious tampering, it also allows the software to obtain a trusted digital identity in Windows, thereby reducing browser,The operating system, etc., intercepts and warns of risks when downloading, installing, and running software.At present, the price of code signing certificates issued in the market ranges from several hundred yuan to several thousand yuan.

Actually, compared to the investment in developing a software and the value brought by the code signing certificate, the code signing certificate is not expensive.

Code signing certificates are mainly divided into ordinary OV code signing certificates and extended validation EV Code Signing Certificate.In terms of usage cost, the price of a common code-signing certificate from the same CA is generally only a little more than half the price of an extended-validation code-signing certificate.But the functions of the two are also very different.

Common point: Both can digitally sign software codes such as exe, so that users can check the identity of the publisher of the software when running the software.Your organization name will be prominently displayed in the "Verified Publisher", which has a positive effect on improving the exposure rate and brand image of the company, and at the same time, it can also enhance users' trust and security in the software you publish.sense.

The difference: Microsoft's Windows has a SmartScreen filter. For example, when users run certain programs in the win10 system, the pop-up "windows has protected your computer, Microsoft Defender SmartScreen has prevented unrecognized applications from launching.. Running this application may put your computer at risk" as shown below:

This reason is exactly what Microsoft's SmartScreen does, which helps users block software that is not digitally signed or that is just digitally signed using a normal code signing certificate.And if the software developer is using the Extended Validation EV code signing certificate, there will be no interception and unrecognized situation by SmartScreen.In addition to being blocked by SmartScreen during installation and running, software without code signing or just using ordinary code signing has already begun to be treated unfriendly by SmartScreen when it is downloaded.

Therefore, Microsoft is not very friendly to software that is not code signed, or that does not have a sufficient level of code signing certificate.