Authenticode uses timestamp servers. http://blogs.msdn.com/b/ieinternals/archive/2011/03/22/authenticode-code-signing-for-developers-for-file-downloads-buildin

Authenticode uses timestamp servers. http://blogs.msdn.com/b/ieinternals/archive/2011/03/22/authenticode-code-signing-for-developers-for-file-downloads-building-smartscreen-application-reputation.aspx http://blogs.msdn.com/b/ieinternals/archive/2011/03/22/authe... > Time-stamping adds a cryptographically-verifiable timestamp to your > signature, proving when the code was signed. [...] not all publisher > certificates are enabled to permit timestamping to provide indefinite > lifetime [...] to free a Certificate Authority from the burden of > maintaining Revocation lists (CRL, OCSP) in perpetuity.