Once in a while I've seen a .spc that had two certificates instead of one. The first certificate was the CA certificate for the code signing certificate, and the second one was the actual code signing certificate. I used certmgr again to delete the first certificate in the file. If not, then either the problem is occurring before that step, or your original information was itself wrong. The batch file above assumes that you want the low security level, which grants all possible privileges to the applet.
High level means that the applet is restricted to the sandbox, just like an unsigned applet.
This means that if you rely on these capabilities your code will be restricted to running on Microsoft platforms. Since I like conspiracy theories, I view this as one more attempt by Microsoft to lure programmers into writing Java code that only works on Microsoft platforms, thus subverting a major threat to their hegemony. Other, more charitable souls may see this as Microsoft's generous efforts to enhance Java. You'll have to decide for yourself. Daniel T. Griscom Created on Macintosh computers.