GlobalSign Organization Validation (OV), $ 434.00/yr.

Organization Validation code signing is the standard publisher certificate for legally registered organizations that need to sign executables, drivers, installers, scripts, and other distributable files with a trusted publisher identity. It verifies the publisher name, helps operating systems recognize that the software comes from a legitimate source, and supports timestamping so signatures can remain valid long after the certificate itself expires. The storefront shows the product from 434 USD per year and presents both token implementation and HSM implementation paths. A USB token is included in the price for the simpler deployment path, while HSM-based deployment is available for more centralized team workflows. Current issuance is 1 year only, defined as 366 days, because 2 year and 3 year code signing certificates were retired on 26 December 2025. Hardware-protected private key storage is now mandatory for both standard and EV code signing, so the certificate is issued for compliant token or HSM use rather than exportable PFX distribution. This plan is best suited to organizations that want strong publisher identity and routine software distribution workflows without the heavier EV vetting layer.

GlobalSign's code signing workflow is managed through GCC and supports hardware-protected key storage in line with current CA/B Forum rules. Private keys must reside on compliant token or HSM devices, non-exportable handling is expected under the current model, and HSM issuance requires an internal or external audit letter. Payment can be made by credit card, check payments, or wire transfer, support is available by phone, email, live chat, and helpdesk with 24x7 coverage, regional ordering requires the legal entity and currency to match the selected region, and refund requests can be made within 7 days. GlobalSign also supports timestamping so signed files can remain valid after the certificate itself expires, and the service is backed by the same long-established certificate authority infrastructure used across its broader trust portfolio.