Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

i'm running a program called PortableApps, which includes an executable called PortableAppsPlatform.exe.

The Portable Apps executable is digitally signed:

enter image description here

And the digital certificate is valid and non expired:

enter image description here

Yet when i use the "Verify Signer" feature of Process Explorer, it reports that it cannot verify the signer:

enter image description here

Why would Process Explorer be unable the verify the signer of a valid digitally signed executable?

share|improve this question
up vote 1 down vote accepted

The signing certificate might have expired... or perhaps the certificate was self-signed or signed to look like a valid certificate... or even perhaps the certificate was revoked. There are a long list of reasons a certificate can become invalid. Not all of which imply that the software is harmful... but at the very least it is questionable. If you clicked that "View Certificate" button we might be able to get more information as to why it's now considered invalid.

As far as "Process Explorer" goes... it relies on the Operating system to verify certificates. It does nothing special.

share|improve this answer
i forgot the exact reason; but i think one of the things you listed was right. – Ian Boyd Jun 15 '11 at 2:17
Well, thanks for the accept :D – TheCompWiz Jun 21 '11 at 16:29

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .