Where do I buy a code signing certificate I can just download and not get on a USB drive?

Question

I'm trying to get a new certificate for my open source SQL desktop app.

Previously I just downloaded the certificate from Sectigo.

Now all the certificate authorities want to ship me a physical drive with the certificate on it. This is crazy!

My certificate expires in 3 weeks and I'm going away on vacation in a week. I can't believe there's no way to do this entirely online.

My app provides a small, but important, revenue stream for me, I can't afford to have my binaries unsigned.

Hoping someone can help point me in the right direction?

Answer 1

Have a look at Certum. https://shop.certum.eu/data-safety/code-signing-certificates.html

They offer code signing certificates for open source projects which can be signed via the cloud which works as a virtual card.

And a helpful blog post here: https://blog.inkdrop.app/code-signing-certificate-for-indie-developers-564f86492957