Page History
...
- The above output tells you that the Signature is valid and has been verified.
- The
SignerCertificate
with the[subject]
provides the distinguished name of the SOS Code Signing Certificate. The[issuer]
indicates the certificate authority that issued the code signing certificate. The output provided with[Not Before]
and[Not After]
indicates the validity period of the certificate. - The
TimeStamperCertificate
proves that the PowerShell script was signed using a time stamp server with a valid certificate at the point in time of signing. - Should the PowerShell script be downloaded after expiration of the code signing certificate, i.e. after 2026-0605-1230, then the signature is no longer valid. However, the time stamp server's response tells you that the certificate was valid at the point in time of signing. If the signature is expired but still matches the unchanged PowerShell script then there is no harm in trusting such scripts.
...
Overview
Content Tools