diff --git a/electron-builder-requirements.txt b/electron-builder-requirements.txt
new file mode 100644
index 00000000..e886bb32
--- /dev/null
+++ b/electron-builder-requirements.txt
@@ -0,0 +1 @@
+designated => anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and ( certificate leaf[subject.OU] = "YWCG8FZTLT" or certificate leaf[subject.OU] = "TT53HD8N84" )
\ No newline at end of file
diff --git a/package.json b/package.json
index 2298acbb..db26cca6 100644
--- a/package.json
+++ b/package.json
@@ -3,8 +3,8 @@
   "description": "OONI Probe Desktop app",
   "author": "Open Observatory of Network Interference (OONI) <contact@openobservatory.org>",
   "productName": "OONI Probe",
-  "version": "3.9.4",
-  "probeVersion": "3.20.1",
+  "version": "3.9.5",
+  "probeVersion": "3.21.0",
   "main": "main/index.js",
   "license": "BSD-3-Clause",
   "repository": "ooni/probe-desktop",
@@ -62,6 +62,10 @@
       ]
     },
     "win": {
+      "publisherName": [
+        "ASSOCIAZIONE HERMES",
+        "Open Observatory of Network Interference (OONI)"
+      ],
       "target": [
         "nsis"
       ],
@@ -131,6 +135,7 @@
       "entitlementsInherit": "./build/entitlements.mac.inherit.plist",
       "category": "public.app-category.tools",
       "icon": "build/icons/app.icns",
+      "requirements": "electron-builder-requirements.txt",
       "extraResources": [
         {
           "from": "./build/probe-cli/darwin_amd64/ooniprobe",