http://4gmrlefxkq4mtan6a2lqwfwa7un4brjlatka75nwdczemqqwn3wznnad.onion/en/BestPractices/CodeSigning
If private keys will be transported, ensure that passwords are randomly generated with at least 16 characters containing uppercase letters, lowercase letters, numbers, and symbols. Time-stamp code Time-stamping allows code to be verified after the certificate has expired or been revoked.