Not sure if this is related / useful, but FWIW I recently had to get a code mark certificate for my Windows Store application (for local testing / installation). The following command line scripts work for me in case they help anyone.
Part 1: Certificate Generation
(Run them from the Visual Studio 201x command prompt)
MakeCert /n "CN=YourMSPartnerPublisherIDString" /r /h 0 /eku "1.3.6.1.5.5.7.3.3,1.3.6.1.4.1.311.10.3.13" /sv MyAppName.pvk MyAppName.cer
Pvk2Pfx /pvk MyAppName.pvk /pi "password" /spc MyAppName.cer /pfx MyAppName.pfx /po "password"
Part 2. Create APPX from EXE and sign APPX with certificate
(Run them from the command line as administrator)
"C:\Program Files (x86)\Windows Kits\10\bin\10.0.17763.0\x64\makeappx.exe" pack /p "C:\MyAppFolder\MyAppName.appx" /d "C:\MyAppFolder\AppxPackage"
"C:\Program Files (x86)\Windows Kits\10\bin\10.0.17763.0\x64\signtool.exe" sign /fd sha256 /a /f "C:\MyAppFolder\CertMyAppName.pfx" /p password "C:\MyAppFolder\MyAppName.appx"
source
share