Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

C# 

Cert for object signing [pass zoneid/smartscreen] Cheap / only application not kernel

I have coded a bot in C#, can anyone recommend a place to get a legit cert, I looked at startssl class 2, they say they support object signing, would something like this be sufficient? Keep it mind this is 59.90$ for 2 years, It must pass the zoneid, and not say "Unknown publisher". Windows 10 and 8/8.1 are targeted to pass this. I know how to convert the .key and .crt/.cer file to a .pfx and sign it when publishing/building in VS 2015, but the test cert doesn't work, nor will other various free cert makers (Doesn't show in properties, I know it won't be a verified sign, but I wanted it to at least be signed) If this is legit, and it is a application not kernel driver (that ones more pricey on this site) why is comodo etc charging up to 100 for 1 year if not 200+?. If anyone has any info on this or can help, I'd really appreciate it. And if there are known places to get certs without showing ID/passport scans and all that please tell me.

Link to StartSSL comparison chart:

startssl.com/?app=40
Use this service to generate a self-signed certificate: http://www.mobilefish.com/services/ssl_c...icates.php

Use Visual Studio's sign tool (VS command prompt -> signtool) to certify a compiled application.
If you're using a self-signed cert why not just spoof a legit one? Free.
I can recommend startcom, I have a $59.00 class 2 code signing certificate. You also get unlimited wildcard SSL certificates with a class 2 which is nice.

You can follow the HOW-TO here: https forum.startcom.org/viewtopic.php?f=15&t=1654 to get started with a startcom certificate, and in Visual Studio you can have your code signed as a post-build step using signtool.

One thing you should be prepared for, is they have a identify check when registering for a class 2 (no different than any other certificate authority). They will ask for a copy or part of your phone bill/statement that has your number and name shown, to confirm your phone number before they call you, and they will also need two pieces of government issued photo-id (such as passport and drivers license).


One other option is if you plan to make your source code available, certum has cheap open source code signing certificates, you can read about those here:

https certum.eu/certum/cert,offer_en_open_source_cs.xml


Possibly Related Threads...
Thread / Author Replies Views Last Post
by Randy TaylorOct 4, 2026 09:11 AM 2 141 Oct 4, 2026 09:11 AM
Last Post: Randy Taylor
by KO666Apr 24, 2026 07:53 AM 2 162 Apr 24, 2026 07:53 AM
Last Post: KO666
by QiyanaDec 20, 2023 07:07 AM 4 248 Dec 20, 2023 07:07 AM
Last Post: Qiyana