I had the same problem and ended up buying Certum Open Source set for 69 EUR: https://shop.certum.eu/open-source-code-signing.html https://shop.certum.eu/open-s

I had the same problem and ended up buying Certum Open Source set for 69 EUR: https://shop.certum.eu/open-source-code-signing.html https://shop.certum.eu/open-source-code-signing.html The set does include hardware token for storing the private key as well as a certificate valid for one year. Renewal is 25 EUR. It does require verifying identity with government issued ID though. I haven't seen anything cheaper on the market (happy to hear suggestions).