use the correct code-sign certificate