c# - ClickOnce with expired certificate -

i have project use click once create installer package. sign project certificate issued vendor, not test certificate. had certificate expired on may, had update signing manifests new certificate.

so, created new certificate, signed clickonce manifests new certificate , created new installer package. works great new installations failed update application because certificates different. according search, customers have uninstall application , install new version, new signing certificate, manually. not cool :(

according robin shahan, best way create new installer remove existing version (with old cert) , install new version (with new cert). https://msdn.microsoft.com/en-us/library/ff369721.aspx

following steps suggested above, created new package new certificate , set in different url. then, tried create new package old certificate. failed on first attempt because previous certificate expired. way create package setting computer date april , create package.

that workflow of uninstalling old version , install new version works perfectly, only if computer's date set past (in case, on april). if try install package expired certificate, show following message , think expected:

system.security.securityexception: customized functionality in application not work because certificate used sign deployment manifest superplugin or location not trusted. contact administrator further assistance.

on same article, robin suggests workaround expired certificates, using renewcert, create new version same public/private key pair, https://robindotnet.wordpress.com/2010/01/26/how-to-extend-an-existing-certificate-even-if-it-has-expired/

so idea create package old certificate new expiration date , once user runs package, uninstall previous version , install new version, new certificate, different url.

so, tried run renewcert executable haven't had success. have downloaded , built project cliff stanford's website http://may.be/renewcert/ , got error:

pfximportcertstore failed error 0x56: specified network password not correct.

then got stuck...so according robin, if target framework .net 4.0 should not have problems, looks not case. using visual studio 2012, project's target framework .net 4.0 included in prerequisites. project updated 3.5 framework 4 2 years ago. maybe problem?

ok, question is: how solve problem? there easier way, using regular clickonce? if uninstall/install way go, how can change expired certificate in order create package? if target framework .net 4, why is not working?

thanks in advance