当我试图使用Firefox从Sectigo/Comodo下载代码签名证书时，最终只能下载一个名为
CollectCCC的没有文件扩展名的文件。我不清楚如何使用它来对二进制文件进行签名。当我尝试使用它对二进制文件进行签名（带上/debug），我会得到以下错误：> .\installation\signtool.exe sign /debug /f 'C:\Users\username\Downloads\CollectCCC' .\DraughtHub_Link.exe
The following certificates were considered:
Issued to: GoDragons
Issued by: Sectigo RSA Code Signing CA
Expires: Fri Oct 22 00:59:59 2021
SHA1 hash: <hash>
Issued to: Sectigo RSA Code Signing CA
Issued by: USERTrust RSA Certification Authority
Expires: Wed Jan 01 00:59:59 2031
SHA1 hash: <hash>
Issued to: USERTrust RSA Certification Authority
Issued by: AAA Certificate Services
Expires: Mon Jan 01 00:59:59 2029
SHA1 hash: <hash>
Issued to: AAA Certificate Services
Issued by: AAA Certificate Services
Expires: Mon Jan 01 00:59:59 2029
SHA1 hash: <hash>
After EKU filter, 4 certs were left.
After expiry filter, 4 certs were left.
After Private Key filter, 0 certs were left.
SignTool Error: No certificates were found that met all the given criteria.
问题的一部分在于我无法使用IE（他们推荐的方式，唉）下载他们的证书，因为我没有使用IE创建代码签名证书请求。 我使用openssl创建了代码签名证书请求。
这是我从IE获得的错误消息：
我也尝试将CollectCCC导入IE，但失败了。
声明：我不建议使用Sectigo和/或Comodo进行代码签名证书！ 我与他们的经历很糟糕！ 付出更多的代价以获得更好的服务是值得的。