CIS 3.5 download page doesn't provide the MD5/SHA1 information

though I could find the md5/sha1 numbers for other products such as comodo firewall pro 3.0

Providing these information can make people feel safe as they can verify.

Setup files are digitally signed, is that not enough?