I believe where PBG got the publisher name from was the signing certificate I was using. So my guess is that building my own signing cert with the requested CN= will fix that.)
I believe that this will fix both of your warnings. That _12mw2frq923c0 bit is auto-generated and appended and I think may be based upon the identity-name provided. Give it a try using a key with the correct Publisher Name.
Okay, thanks. I'll try that and report back!
Yep, that fixed it. The Microsoft documentation on how to create your own signing certificate is out of date for MakeCert. Here's what I had to run on Windows:
MakeCert -n "CN=your_app_id_from_windows_store" -r -h 0 -a SHA256 -eku "126.96.36.199.188.8.131.52.3,184.108.40.206.4.1.3220.127.116.11" -sv MyKey.pvk MyKey.cer
Pvk2Pfx /pvk MyKey.pvk /pi pvkPassword /spc MyKey.cer /pfx MyKey.pfx [/po pfxPassword]
You will have been prompted to supply a pvkPassword and pfxPassword during the MakeCert. You then upload MyKey.pfx to PGB (using the pfxPassword to unlock it when building).