# Code signing certificates compared (OV and EV)

> OV and EV code signing certificates with verified prices. Since June 2023 private keys must live on a hardware token or HSM, including cloud signing.

Source: https://ssl.sh/certificates/type/code-signing/
Last updated: 2026-11-10

# Code signing certificates compared (OV and EV)

Code signing certificates let Windows, macOS tools and package managers verify who published a file. Since 1 June 2023 the CA/Browser Forum Code Signing Baseline Requirements require the private key to be generated and kept in a hardware crypto module, so every purchase now includes a USB token, your own HSM or a cloud signing service.

## What to check before buying

- Budget for key storage: The SSL Store lists a token with shipping for $90 (Sectigo) or $120 (DigiCert); SSL.com lists a YubiKey for $379 or an eSigner cloud subscription.
- Cloud signing (SSL.com eSigner, DigiCert KeyLocker, Microsoft Artifact Signing) works in CI pipelines where a USB token cannot be plugged in.
- EV code signing requires the strictest company checks; OV is enough for most desktop apps.
- Individuals can buy OV-style certificates from some CAs (SSL.com sells IV and EV Sole Proprietor variants).

## Certificates in this category

| Certificate | Brand | Validation | Covers | Lowest price / yr |
|---|---|---|---|---|
| [SSL.com OV Code Signing](/certificates/ssl-com-code-signing/) | SSL.com | OV (organization) | Software publisher identity | $129.00/yr (SSL.com) |
| [Sectigo Code Signing](/certificates/sectigo-code-signing/) | Sectigo | OV (organization) | Software publisher identity | $345.00/yr (GoGetSSL) |
| [SSL.com EV Code Signing](/certificates/ssl-com-ev-code-signing/) | SSL.com | EV (extended) | Software publisher identity | $349.00/yr (SSL.com) |
| [DigiCert Code Signing](/certificates/digicert-code-signing/) | DigiCert | OV (organization) | Software publisher identity | $438.24/yr (GoGetSSL) |
| [Sectigo EV Code Signing](/certificates/sectigo-ev-code-signing/) | Sectigo | EV (extended) | Software publisher identity | $453.00/yr (GoGetSSL) |
| [DigiCert EV Code Signing](/certificates/digicert-ev-code-signing/) | DigiCert | EV (extended) | Software publisher identity | $617.52/yr (GoGetSSL) |