Can both the service and the signing certificate only be purchased for 1 year? Can I unsubscribe?

Yes, currently, purchasing a remote code signing service only supports a 1-year subscription, and the certificate purchased simultaneously also only supports a 1-year validity period. Once the subscription service is activated, unsubscription is not supported.