From Overview of Advanced JavaScript -- Web Scripting Language CPS616 Technologies of the Information Age -- Spring Semester 98. byTom Scavo,Geoffrey C. Fox
Signed objects are packaged in a JAR (Java Archive) file, a sort of "digital envelope" based on the ZIP archive format
Using signtool, one associates digital signatures with the files in a JAR, which:
confirm the identity of the entity whose digital signature is associated with the JAR
check whether the files have been tampered with since being signed