Menu
Timestamp servers cryptographically validate that a digital signature performing with a signing certificate took place at a specific time. That allows one to verify sometime in the future that a document, program or other file was digitally signed at a particular time.
Digicert timestamp services allow you to timestamp your signed code. Timestamping ensures that code will not expire when the certificate expires because the system validates the timestamp.
What is a Time Stamp Server? Once you receive a valid timestamp certificate from the TSA, whenever you sign, a hash of your code is uploaded on the timestamp server. This helps in recording the date and time of your signature and also certifies that the code was working during the time it was digitally signed.
I received an official response from Verisign this afternoon (on 2 Jan 2021):
Thank you for contacting Verisign Support.
This server was deprecated after our authentication services were sold to Symantec, which is now Digicert. You can find a list of free timestamp servers online or theirs is now at http://timestamp.digicert.com.
If you have additional questions, please do not hesitate to contact us.
So the http://timestamp.verisign.com timestamp server is no more.
At the moment I know of the following alternatives (in addition to Digicert above) which work well:
http://timestamp.comodoca.com/authenticodehttp://timestamp.globalsign.com/scripts/timestamp.dllhttp://tsa.starfieldtech.comWhen using Microsoft's SignTool.exe
Change the timestamping server (-t):
signcode -t "http://timestamp.verisign.com/scripts/timstamp.dll" (defunct)
signcode -t "http://timestamp.digicert.com"
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With