Are there any cheaper sources than verisign and thawte for code signing certificates - Garnet's Wiki

I used The AnswerSleuth to search for information about code signing certificates.

Lists of code signing authorities

A Survey of code signing authorities seems to show that out of the very few services that sell code signing certs, only Thawte and Verisign are selling Adobe AIR Digital Certificates.

Unknown if they offer Adobe AIR Certificates

	1 yr	2 yrs	3 yrs
Instant SSL by COMODO	$180	$340	$166.95	"Microsoft and Comodo are committed to making the Internet a secure and viable platform for commerce and the distribution of content" I couldn't find any assertion that their certs go back to verisign or thawte, their own site is not HTTPS. (More below.) They offer "free website authentication". Strange: In the initial stages, they don't ask what kind of cert you are buying. Their FAQ seems very microsoft centric.

http://www.instantssl.com/code-signing/code-signing-faq.html - Code signing faq
Requires that the applications signed be used for and distributed by the Organization that owns the certificate

These don't offer Adobe AIR Certificates

	1 yr	2 yrs	3 yrs
GlobalSign - ObjectSign Code Signing Certificates	$229	$422	$563	At least the https version of their website works.

Includes time stamping service, ensuring signature does not expire, but only 50 times per year.
Appears like they will do the signature, not the developer.

Notes

https://www.comodo.com - 404 error! As does secure.comodo.com
- Gives an IE security alert - Cert date is valid, cert is from trusted cert authority, but "The name on the security certiifcate is invalid or does not match the name of the site." Issued to secure.comodo.net. Here is their cert path:
  - GTE [CyberTrust] Global Root -> Comodo Class 3 Security Services CA -> secure.comodo.net
    - GTE [CyberTrust] Global Root -> 8/12/98 - 8/13/2018 ->

Other choices, some day:

https://www.sslgenie.com/ - They'll offer code signing certificates in the future. I was impressed that when I went to their SSL website, my browser didn't squak. They had to get approval from a CA (Certificate Authority), either verisign or thawte, in order to be able to issue certs. Guess the incumbents on code signing aren't letting them sell code signing certificates yet.
https://www.assertia.com - Free certificates that don't link back to any CA. But it only seems like it is for Sun Object Signing. They say that someday they'll offer commercial certificates.