Sign a PE File

Sign a Windows executable or DLL using a leaf certificate from your CA Lab
Authenticode: Microsoft's format for digitally signing Windows executables and scripts.
A standard container format for cryptographic messages — used to bundle a signature with the signing certificate chain.
No leaf certificates available. Issue a leaf cert first.
Verifying the Signature

After downloading the signed file, verify it with:

osslsigncode verify -in signed_file.exe

Note: Your mock CA is not in any trusted root store, so Windows will show an "Unknown Publisher" warning. This is expected — it means the chain is valid but untrusted by default.