How to renew a code signing certificate

Question

I have a Thawte code signing certificate that expires in a couple of weeks.

I paid for an extension and I received an updated .cer file.

I have successfully created an updated .pfx file that allows me to sign Firefox add-ons, and the signature is evaluated in the "future" time.

However, when I try to use the same .pfx file to sign the Internet Explorer plug-in, I get the signtool error 0x80880253 ("certificate is no longer valid").

I am trying to use mmc.exe and certmgr.exe to renew a certificate in the certificate manager console, but no matter what I do, the expiration date remains in 2010.

I was able to see the “updated” certificate in the certmgr wizard, but it was on the “other people” tab, and not on the “personal” tab.

Does anyone have an idea what I'm doing wrong?

thank

Answer 1

You must have a new certificate in Personal Store. Try to remove it and install it again.

If you are unsuccessful, you can try the workaround for linking directly to the .pfx file instead of the certificate store:

signtool.exe sign /f certificate.pfx /p MYPASSWORD ....