Software developers digitally sign their software programs, apps, and drivers,  with code signing certificates to prevent tampering or compromise of applications by unauthorized parties.

These digital certificates are especially useful in applications that are distributed through the Internet, where applications can pass through a number of suspicious parties or websites before it finally gets downloaded and installed.

Unsigned applications can easily be altered to include malware or viruses, and these untrusted applications will display warning messages resulting in lower installation yields. A code signing certificate issued from a trusted Certificate Authority such as SSL.com can prevent all of those problems.
Code signing certificates can be enrolled to SSL.com eSigner cloud code signing service which lets you conveniently add globally trusted digital signatures and timestamps to your software code from anywhere, with no need for USB tokens, HSMs, or other special hardware.

eSigner’s  digital signatures use PKI-based digital certificates that bind an identity (such as a person or company) to a cryptographic key pair. When a file like a PDF or Word document, executable application, or driver is digitally signed, a cryptographic hash of the document’s content and the identity of the signatory are bound together to form a unique digital fingerprint, ensuring:

Code signing certificates can be enrolled to SSL.com eSigner cloud code signing service which lets you conveniently add globally trusted digital signatures and timestamps to your software code from anywhere, with no need for USB tokens, HSMs, or other special hardware.

• eSigner information is available on SSL.com’s main eSigner page. Please read Remote Code Signing with eSigner for information on enrollment and use
• eSigner CKA (Cloud Key Adapter) is also available, allowing tools such as SignTool.exe or Certutil.exe to use eSigner CSC for EV code signing operations
• Supports CI/CD integration for full automation of signings