I used Thawte and Verisign , and used them to run web on both Windows and Mac. However, I think that any code signing certificate will work and can be converted to one that the Java Sign tool will accept. The important part is that the Java Runtime Engine includes this provider root certificate.
Please note that they continue to add more and more root certificates to each issued JRE, so the parameters increase, but if you want even the oldest JRE to recognize the certificate, you must adhere to old standards such as the ones I mention.
Tucows resells Comodo signing certificates for pretty cheap. Comodo's root certificates have been in the JRE since May 2006, and it was version JRE 1.5. Therefore, JRE 1.6 and later must support Comodo code signing certificates.
source share