[detaro]

I don't think it particularly matters, any of the major CAs offers codesigning certs (worth shopping around a bit for prices and promotions though, the prices vary massively with little obvious reason why they should)

https://github.com/mtrojnar/osslsigncode should be able to sign windows executables on a mac, but I haven't tried that personally