[CinematicStudio]

There's no single goto place. I bought mine from comodo, which is now sectigo.com

Indeed, an OV is sufficient, Sectigo is pretty fast at this -- you will need proof of business (phone number + proof to see that the business is still running), and that's about it.

Another "fun" fact - when you start signing, every browser will flag your app as "this application is not commonly downloaded", and this will go on for a while (2-3 weeks, sometimes even more). This might also happen for Antiviruses -- yeah, it's really fucked, I could say.

A few years back Microsoft came up with another type of code signing certificate (don't remember the name), that doesn't have the problems I outlined above. However, it usually costs 4-5x as much, and personally I don't think it's worth it.