Furthermore, you don't technically need the certificate. The deafest are protective but the system will happily launch unsigned apps if you right click them.
True, but that's a much higher barrier than "This application is from an unidentified developer. [OK]".