$ 0 0 Yes, it must be a code signing certificate. And private key must be, at least, 1024 bit length.