title: How to sign windows executables without having access to the certificate itself?
body: <p>I am looking for a solution that would allow me to sign windows executables without having access to the certificates from the build machine. </p>
  
  <p>Imagine that you are building a branded version of your software and you must sign the code with a certificate to which you do not have access.</p>
  
  <p>Is there anything already implemented that can do this? Like a HTTPS service where you can upload unsigned binaries and download them signed?</p>