VBA project is digitally signed

Office can digitally sign a VBA project so it runs under a 'signed macros only' trust setting. The signer certificate, issuer and the signature's cryptographic validity are shown for context. Presence of a signature is NOT by itself a benign indicator — VBA stomping and signature-stripping mean a signed project can still be hostile — so this finding is informational and does not affect the risk score. It distinguishes the VBA-project signature from a whole-document signature, which is a separate feature.