For Open Source Software, you can use SignPath for free: https://signpath.org

That's what we did for DB Browser for SQLite (sqlitebrowser.org), and it works well: https://sqlitebrowser.org/blog/signing-windows-executables-o...

SignPath also does stuff for commercial places too (https://signpath.io), but I have no idea of the pricing.