Sectigo Code signing
simply http://timestamp.sectigo.com does not work.
It even stops me in signing.
If I say -
<DigitalSignature TimestampRFC3161 = "http://timestamp.sectigo.com"/>
Then it allows me to sign the files - but does not time stamp.
I believe, if the above statement can be modified to do timestamp also - many will be benefited.
For the time being - I do time stamping of the setup.exe outside using signtool.
One need to also be aware that the manifest files should have sha256 instead of sha1 - whether it is IS manifests or application manifests.
Hope this will help others.