I\'ve been signing compiled apps for several months and have a script that calls the Windows 10 SDK signtool. It\'s been working fine on two different computers and my cert
"C:\Program Files (x86)\Windows Kits\10\bin\10.0.18362.0\x64\signtool.exe" sign /tr http://timestamp.sectigo.com/?td=sha256 /td sha256 ....
the /?td=sha256 actually working, but recommend using their new domain name http://timestamp.sectigo.com and need add extra parameter /td sha256