Specifies a file that contains an additional certificate to add to the signature block. (signtool option: /ac FileName)

Appends this signature. If no primary signature is present, this signature is made the primary signature. (signtool option: /as)

Specifies the certificate to use for signing. (signtool options: /a, /f, /p, /csp, /kc, /i, /n, /r, /s, /sha1, /sm)

Specifies the Certificate Template Name (a Microsoft extension) for the signing certificate. (signtool option: /c CertTemplateName)

Displays debugging information. (signtool option: /debug)

Specifies a description of the signed content. (signtool option: /d Desc)

Specifies the file digest algorithm to use to create file signatures. The default algorithm is Secure Hash Algorithm (SHA-1). (signtool option: /fd)

Specifies the enhanced key usage (EKU) that must be present in the signing certificate. The usage value can be specified by OID or string. The default usage is "Code Signing" (1.3.6.1.5.5.7.3.3). (signtool option: /u Usage)

Timeout.

Path to signtool.exe. If not provided, an attempt will be made to locate it automatically in 'Program Files (x86)\Windows Kits'.

Output verbosity. (signtool options: /q, /v)

Specifies using "Windows System Component Verification" (1.3.6.1.4.1.311.10.3.6). (signtool option: /uw)

Working directory. If not provided, current directory will be used.

Options default values.