IV Code Signing
Key Benefits
Who Is It For?
Purchase & Pricing
1. Select Certificate Duration
2. Select Key Storage & Delivery (optional)
YubiKey
Physical TokenStandard
3ā5 business days after validation (Continental US)Express + $329.00
1 day after validationBring Your own Cloud HSM
Self-managed infrastructureSSL.com must attest your key to your chosen provider before issuing the certificate. This fee is a one-time charge per order.
What is attestation? Before issuing your certificate, SSL.com verifies that your private key was generated and is stored inside your cloud HSM ā not exportable to software. This one-time attestation fee covers the verification process with your chosen provider.
Looking for a simpler option? SSL.com eSigner for Code provides cloud-based signing with no HSM to provision, no attestation fee, and a lower total cost for most teams.
Bring your own on-premises HSM
SSL performs an attestation ceremony for your compliant on-premises HSM.Please contact sales.
3. Validation Speed (optional)
Choose how quickly your organization or identity is validated before your certificate is issued.
Standard
3ā5 day validation Ā· 2ā3 day US shipping Validation completed after all agreements, entity info submitted, and a successful callback to a listed phone number. International shipping tracked; delivery subject to customs. IncludedExpedited
2 business day validation Ā· overnight US delivery 2 business days priority validation from first complete submission and callback. Token shipped overnight in continental US. +$599.00How It Works
Compliance & Standards
CA/B Forum Code Signing BR
Issued under CA/B Forum Code Signing Baseline Requirements.
Microsoft Authenticode
IV certificates are trusted for Windows Authenticode executable signing.
WebTrust for Code Signing BR
SSL.com is audited annually by BDO under WebTrust for Code Signing Baseline Requirements.
2048+ bit RSA & ECC
Strong key sizes supported — compatible with modern signing toolchains.
Frequently Asked Questions
Not necessarily. IV private keys can be stored in software (PKCS#12 file) or on a FIPS hardware token. To use eSigner for Code cloud signing, enrollment is required after issuance.
IV certificates cover Windows Authenticode signing. macOS app signing requires Apple Developer ID certificates issued through Apple’s own developer program.
IV certificates are typically issued within minutes of identity validation. SSL.com validates your personal identity using government-issued ID.
Yes — always timestamp at signing time. A valid timestamp means your signed code remains trusted indefinitely, even after the certificate itself expires.
Ready to get IV Code Signing?
Related Products
OV Code Signing
Your organization’s name on every installer — for companies and ISVs.
Sole Proprietor EV
EV trust for individuals — instant SmartScreen reputation and driver signing.
EV Code Signing
Instant SmartScreen reputation and kernel-mode driver signing for registered organizations.
