A computer implemented method to prevent security problems in the use of digital certificates in code signing, comprising: - signing, by a software distributor via a first server, at least one software file using a digital certificate with a digital signature identifying said software distributor; and - acquiring, by at least one user via a computing device, a copy of said at least one signed software file; and - generating, by a second server in communication with said first server, upon a request made by the software distributor, a hashstamp of the at least one signed software file, said computer implemented method, wherein, prior to the second server receiving the request, - said digital certificate to be used for said signing is recorded in said second server, the digital certificate to be recorded being provided by the software distributor upon registration of the latter in said second server and the digital certificate including information obtained from a trust certificate chain associated to the digital certificate when performing said registration, wherein said registration comprises checking, by the second server, data included in the provided digital certificate including at least a domain and/or an electronic address; and wherein said registration further comprises: - performing, by the second server, an authentication of said digital certificate by performing following steps: - generating a one-time password, OTP; - sending, said generated OTP to the software distributor through a communication channel including at least a text message, an electronic message or an instant message; and - certifying, upon receiving said OTP from the software distributor, that the received OTP matches with said generated OTP, and in that: - said hashstamp includes information about the software distributor and about the signed software file and a time record certifying a time at which the signing of the software file is reported to the software distributor. - signing, by a software distributor via a first server, at least one software file using a digital certificate with a digital signature identifying said software distributor; and - acquiring, by at least one user via a computing device, a copy of said at least one signed software file; and - generating, by a second server in communication with said first server, upon a request made by the software distributor, a hashstamp of the at least one signed software file, said computer implemented method, wherein, prior to the second server receiving the request, - said digital certificate to be used for said signing is recorded in said second server, the digital certificate to be recorded being provided by the software distributor upon registration of the latter in said second server and the digital certificate including information obtained from a trust certificate chain associated to the digital certificate when performing said registration, wherein said registration comprises checking, by the second server, data included in the provided digital certificate including at least a domain and/or an electronic address; and wherein said registration further comprises: - performing, by the second server, an authentication of said digital certificate by performing following steps: - generating a one-time password, OTP; - sending, said generated OTP to the software distributor through a communication channel including at least a text message, an electronic message or an instant message; and - certifying, upon receiving said OTP from the software distributor, that the received OTP matches with said generated OTP, and in that: - said hashstamp includes information about the software distributor and about the signed software file and a time record certifying a time at which the signing of the software file is reported to the software distributor. - performing, by the second server, an authentication of said digital certificate by performing following steps: - generating a one-time password, OTP; - sending, said generated OTP to the software distributor through a communication channel including at least a text message, an electronic message or an instant message; and - certifying, upon receiving said OTP from the software distributor, that the received OTP matches with said generated OTP, and in that: - generating a one-time password, OTP; - sending, said generated OTP to the software distributor through a communication channel including at least a text message, an electronic message or an instant message; and - certifying, upon receiving said OTP from the software distributor, that the received OTP matches with said generated OTP, and in that: - said hashstamp includes information about the software distributor and about the signed software file and a time record certifying a time at which the signing of the software file is reported to the software distributor.