GlobalSign Extended SSL Validation (EV), $ 550.00/yr.

Extended Validation code signing is the higher assurance publisher certificate for software vendors that want the strongest verification path and the most authoritative trust presentation during software distribution. It undergoes stricter vetting than standard code signing, is described as the highest level of security on the storefront, and displays the software publisher name with stronger visual trust indicators during installation. Support content notes that EV code signing works on Windows and Mac OS X and can be used with Microsoft SignTool and Java Jarsigner. The storefront shows pricing from 550 USD per year, offers both token and HSM implementation choices, and the broader support guidance emphasizes password-protected, hardware-backed, non-exportable private key storage. Current issuance is 1 year only at 366 days, with renewals sometimes carrying forward remaining validity so the resulting certificate can reach as much as 460 days under current rules. Timestamping is strongly recommended for every signed file so signatures remain valid beyond certificate expiry. This is the appropriate choice for vendors that need the stricter EV validation model, stronger installer trust, and a signing platform built around controlled hardware key custody.

GlobalSign's code signing workflow is managed through GCC and supports hardware-protected key storage in line with current CA/B Forum rules. Private keys must reside on compliant token or HSM devices, non-exportable handling is expected under the current model, and HSM issuance requires an internal or external audit letter. Payment can be made by credit card, check payments, or wire transfer, support is available by phone, email, live chat, and helpdesk with 24x7 coverage, regional ordering requires the legal entity and currency to match the selected region, and refund requests can be made within 7 days. GlobalSign also supports timestamping so signed files can remain valid after the certificate itself expires, and the service is backed by the same long-established certificate authority infrastructure used across its broader trust portfolio.