ev-certificate-validator

// Validate EV code signing certificate chain and timestamp for Windows SmartScreen

$ git log --oneline --stat

stars:384

forks:73

updated:March 4, 2026

SKILL.mdreadonly

SKILL.md Frontmatter

nameev-certificate-validator

descriptionValidate EV code signing certificate chain and timestamp for Windows SmartScreen

allowed-toolsRead, Grep, Bash

tagswindows,codesigning,ev-certificate,security,validation

ev-certificate-validator

Validate EV (Extended Validation) code signing certificate chain and timestamp to ensure Windows SmartScreen compatibility.

Capabilities

Verify certificate chain validity
Check timestamp presence and validity
Validate EV certificate attributes
Check certificate expiration
Verify signature algorithm strength
Validate publisher information

Input Schema

{
  "type": "object",
  "properties": {
    "signedFile": { "type": "string" },
    "checkSmartScreen": { "type": "boolean", "default": true }
  },
  "required": ["signedFile"]
}

Validation Commands

# Verify signature with chain
signtool verify /pa /all /v signed.exe

# Check certificate details
certutil -dump signed.exe

# Verify timestamp
signtool verify /pa /tw signed.exe

Related Skills

windows-authenticode-signer
code-signing-setup process