Downloaded core and saw the exe was signed by "Bitcoin Core Code Signing Association".

This is new and I haven't heard of it.  Is it legit?  Also found this website:

https://bitcoincorecodesigning.org/