Ask HN: Code signing certificates, and Stripe Atlas

#1

Post by sib301 » Mon, Jun 12, 2023, 5:08 PM UTC

Has anyone gotten their Stripe Atlas formed LLC verified by companies that provide EV certs for Code Signing?

I've made several attempts, but they're asking for things like phone bills in the name of my company, but since we don't have physical offices, I'm unable to provide that. How did you proceed?

Re: Ask HN: Code signing certificates, and Stripe Atlas

#2

Post by uLogMicheal » Mon, Jun 12, 2023, 5:58 PM UTC

You might've selected a higher verification level than you need, if not, you may be able to get an attorney/CPA to confirm existence. I vaguely recall needing to do something similar for domain verification and the verifier had a template for use.

Re: Ask HN: Code signing certificates, and Stripe Atlas

#3

Post by sib301 » Mon, Jun 12, 2023, 6:08 PM UTC

uLogMicheal wrote: post #2

You might've selected a higher verification level than you need, if not, you may be able to get an attorney/CPA to confirm existence. I vaguely recall needing to do something similar for domain verification and the verifier had a template for use.

Thank you for the response. On the sites I used, it seemed like they funnel you to EV - probably because they're more expensive. I'll look into DV certs.

Re: Ask HN: Code signing certificates, and Stripe Atlas

#4

Post by retrocryptid » Mon, Jun 12, 2023, 11:52 PM UTC

The good news is we're past the era where you have to have a D&B number and a reverse DNS mapping.

You should be able to get away with a bank statement listing the name of the LLC, any local DBA (fictitious name registration) and whatever your secretary of state gives LLCs to prove they're registered.

I'm sure they won't like it because it means a human has to get involved (probably a couple humans) for a few minutes which means their RA isn't the cash cow someone promised management it was going to be. (Having worked for three CAs, I have never known one to be a profitable profit center.)