1. A computer-implemented method of assigning a trust level to a digitally-signed file, comprising: receiving, at a computer, signing information identifying a certificate used to sign the file; determining, by the computer, whether the certificate is compromised; responsive to determining that the certificate is compromised, comparing, by the computer, a discovery date of the file with a compromise date of the certificate; and generating, by the computer, trust data assigning the trust level to the file responsive to the comparison, the generating comprising: generating trust data assigning an intermediate trust level to the file responsive to the comparison of the compromise date with the discovery date indicating that the discovery date is within a threshold amount of time before or after the compromise date; generating trust data assigning a low trust level to the file responsive to the comparison of the compromise date with the discovery date indicating that the file discovery date is past the threshold amount of time after the compromise date; and generating trust data assigning a high trust level to the file responsive to the comparison of the compromise date with the discovery date indicating that the file discovery date is prior to the threshold amount of time before the compromise date.