Certificate for a Windows System Service which will run in the background?

Hi, I'm Kareem. I have previously used code signing certificates for signing few applications (wpf and office vsto add-ins). I used certificates (purchased from comodo) which were issued based on individual identity under a nation. As per my experience, it is better to purchase an EV Code Signing Certificate in which you have to provide your registered organization detials to them. After they validate your and organization identity, they will send you a pendrive with the certificate which cannot be exported to .pfx file. You have to use the pendrive to sign your app/service. It is always better to start a conversation with them (comodo team) before you purchase any cert. Let me know if you need any further information, I'm here to share my experience.

unless you are shipping a kernel mode driver, you really don't need to bother with Authenticode on windows... just that your users would get an unknown publisher warning when the app requests for elevation.. besides that, the app would run just fine. DM me if you still need to sign your service binary with authenticode and we can take this forward.