title: Signing Windows Executables with self-hosted certificate
body: <p>The question has already been asked and answered about how one can 'sign' a Windows executable;  however, the answer requires the ongoing expense of a hosted certificate.</p>
  
  <p>My company already has a VPS which we use for WWW, email and version control, so it seems to me that we could host our own certificate, albeit with rather less trustworthiness, but still sufficient for our clients.</p>
  
  <p>We already host a PEM certificate which a consultant sysadmin set up for our email (IMAP4) hosting;  can we use that and what would be the procedure for 'signing' the executable and hosting the certificate ?  Presumably somewhere the URL of the hosted certificate would be embedded in what is attached ('signed') to the executable.</p>