It is sad that the attempt to regenerate the certificate failed. Waiting until the year-end expiration date sounds like an acceptable option. It is critical to maintain compatibility with InstallShield's certificate storage, which requires SHA1 or SH...