Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • The above output tells you that the Signature is valid and has been verified.
  • The SignerCertificate with the [subject] provides the distinguished name of the SOS Code Signing Certificate. The [issuer] indicates the certificate authority that issued the code signing certificate. The output provided with [Not Before] and [Not After] indicates the validity period of the certificate.
  • The TimeStamperCertificate proves that the PowerShell script was signed using a time stamp server with a valid certificate at the point in time of signing.
  • Should the PowerShell script be downloaded after expiration of the code signing certificate, i.e. after 2026-0605-1230, then the signature is no longer valid. However, the time stamp server's response tells you that the certificate was valid at the point in time of signing. If the signature is expired but still matches the unchanged PowerShell script then there is no harm in trusting such scripts.

...