德国个体开发者如何获取代码签名证书？

Hey there, as someone who’s supported indie devs through code signing challenges for years, I can confirm plenty of German solo operators have successfully secured code signing certificates—even without a formal business entity or DBA setup. Here’s what’s worked based on local developer experiences:

1. Target CAs that recognize German solo business status #

Not all CAs enforce strict "corporate only" rules, especially European-based providers who understand Germany’s Selbstständiger (self-employed) framework:

• Look for European CAs that explicitly list support for individual developers/self-employed professionals. Many will accept your Gewerbeanmeldung (business registration certificate) plus personal ID (Personalausweis) and Steuer-ID as valid verification documents.
• A number of international CAs also offer individual code signing certificates. Several German devs have shared success stories using these: they submitted their Gewerbeanmeldung, personal ID, and even a quick demo of their software (Isadora, in your case) to prove active commercial development, and got approved within 1-2 weeks.

2. Lean into your official German business documentation #

Your Gewerbeanmeldung is your secret weapon here. Even without a corporate structure, this document proves you’re legally operating a business in Germany. When applying:

• Clearly state you’re a Selbstständiger (self-employed software developer) in your application notes.
• Attach a scanned copy of your Gewerbeanmeldung, your personal ID, and if you have them, past sales invoices or proof of your software’s existing user base—this helps CAs see you’re running a legitimate, ongoing project.

3. Alternative paths if mainstream CAs say no #

If you hit walls with big-name providers, these workarounds have helped other German indie devs:

• Join a local German developer association or tech network. Many have partnerships with CAs that offer simplified application processes for members, with more flexible identity checks.
• For Windows-specific code signing, some devs have used individual EV code signing certificates (though these usually require more rigorous identity checks, like remote video verification—many CAs now offer this for German residents).

内容的提问来源于stack exchange，提问作者Mark Coniglio