Standard · Organisation validation
Certum Standard Code Signing in the Cloud
For companies that publish Windows software and want the SmartScreen warning to name them, not "Unknown publisher".
25 % MVA added at checkout. Companies outside Norway pay in EUR. Outside Norway the same term is €159 net.
Certificate term1 year
Order StandardYou pay when you order. If the certificate cannot be issued, we refund the full amount.
Why Klarseal
- Issued by Certum
- On the EU Trusted List
- Norwegian company
- No USB token
What you get
- Cloud signing, no tokenThe key is generated in Certum’s HSM. You reach it through SimplySign from your own machine.
- SimplySign appDesktop and mobile app for authorising each signing operation.
- TimestampingCertum’s timestamp service, so signatures stay valid after the certificate expires.
- Windows and SmartScreenRecognised by Windows; the publisher name replaces "Unknown publisher".
- 459 days of validityThe maximum a code signing certificate may carry. We email you before it expires.
- Details changed, new certificateIf your company details change, a new certificate is ordered for the new details.
Which certificate to choose
Choose Standard if
You ship installers, tools or plug-ins to customers and are a registered Norwegian company or sole trader.
Choose EV if
You sign drivers, or a customer or policy explicitly asks for EV. Otherwise Standard does the same job.
Read the EV page
What happens after you order
- 01You orderChoose Standard or EV, enter your organisation number, confirm who approves and who will use the certificate.You
- 02We pre-checkWe fetch your registry record, and Certum confirms the application is complete. Then you pay.Klarseal
- 03Certum validatesCertum checks the company against the registry and its own rules. Any document requests come from Certum and go directly to Certum.Certum
- 04Identity checkThe person named on the order confirms their identity in a short video session with Certum’s provider. We tell you what to have ready.You
- 05Issued and readyCertum issues the certificate into your SimplySign account. Install the app, sign your first file, and we show you how.Certum
What you need before you start
- An organisation number
- A person who can approve the order, or a signatory who can
- A person who will do Certum’s identity check
- A Windows machine or the SimplySign app
— if your company details change during the validity period, a new certificate is ordered for the new details.
Specification
- Product name
- Certum Standard Code Signing in the Cloud
- Certificate authority
- Certum (Asseco Data Systems S.A., Poland)
- Validation level
- Organisation validation (OV)
- Maximum validity
- 459 days
- Key storage
- Certum HSM
- Signing
- SimplySign cloud service and app
- Identity check
- Named person, video session or documents to Certum
- Sold to
- Norwegian companies and registered sole traders (ENK)
Sources: Certum product documentation; CA/Browser Forum code-signing baseline requirements. Last reviewed 5 September 2026 by Luis Santos.
Questions before you order
Every answer is on this page. If yours is not here, email support@klarseal.com and a person answers.
Will this remove the "Windows protected your PC" warning?
It replaces "Unknown publisher" with your verified company name, which is the part you control. SmartScreen also weighs reputation, and since March 2024 neither organisation validation nor extended validation clears the warning on sight — reputation builds as your signed installer is downloaded. It accrues to the certificate, so it carries from one release to the next.
Do I need a USB token?
No. The private key is generated inside Certum’s hardware security module and never leaves it. You sign from your own machine through SimplySign, which presents the certificate to Windows as a virtual smart card. Nothing is shipped, so there is no customs delay and nothing to lose.
Can I sign kernel-mode drivers with a Standard certificate?
No. Drivers submitted through the Windows Hardware Developer Program require an EV certificate — that is the one case where the choice is made for you. User-mode applications, installers, packages and scripts are all fine with Standard.
What can I sign with it?
Authenticode targets: .exe, .dll, .msi, .msix, .appx and .cab, plus PowerShell scripts and Office VBA macros. It works with signtool, SimplySign Desktop, Inno Setup, NSIS and Advanced Installer. Certum’s timestamp service is included, so signatures stay verifiable after the certificate expires.
What does Certum check before the certificate is issued?
That your company exists and is what it says it is — verified against Brønnøysundregistrene for a Norwegian company — and that the person named on the order is that person, through a short video session or documents sent to Certum. We pull the registry record and have Certum confirm the application is complete before you pay, because an incomplete application is the usual reason a certificate is slow.
How long is it valid, and can I buy two or three years at once?
A code signing certificate may carry at most 459 days, so a multi-year purchase is a sequence of certificates rather than one longer one. Klarseal sells one year at a time; 2- and 3-year terms are not offered. We email you before the certificate expires, and Certum reuses your documents for 13 months, so the second certificate is far less work than the first.
Who can buy from Klarseal?
Norwegian companies and registered sole traders with an organisation number. Klarseal is a brand of Archi Systems AS, a Norwegian company, so invoices carry 25 % MVA. As a private person you can buy the same certificate directly from Certum.
What happens if the certificate cannot be issued?
You get the full amount back. We issue a credit memo against the original invoice and refund through Mollie to the payment method you used. You pay when you order, and until the certificate is issued we tell you where the application stands and who it is waiting on.
Order Standard (OV)
One year, one price. We check the application with Certum before you pay, and refund in full if the certificate cannot be issued.