# Yubikey signing error

**URL:** <https://www.finalbuilder.com/forums/t/yubikey-signing-error/7747>\
**Category:** Discussions\
**Created:** [January 7, 2026, 4:47am UTC](https://www.finalbuilder.com/forums/t/yubikey-signing-error/7747 "2026-01-07T04:47:45Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![DCornelius](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/dcornelius/32/2444_2.png) [@DCornelius](https://www.finalbuilder.com/forums/u/DCornelius)\
**Post date:** [January 7, 2026, 4:47am UTC](https://www.finalbuilder.com/forums/t/yubikey-signing-error/7747/1 "2026-01-07T04:47:45Z")

</div>

Just got a code-signing certificate that works with my Yubikey today from `ssl.com`. Tested with SignTool using /n to select the newly installed cert and it works.

Followed instructions to import a hardware-based key into my Signotaur server, gave it the Yubikey PIV library, it found and I selected the certificate, I typed in my PIN and saved. Copied the thumbprint to my batch file I had used in the past for the old certificate (which worked) and tried it.

Got an error saying that SHA384 was not supported so switched the `--file-digest` parameter to use SHA256; tried it again, now I get: “Failed to sign … Reason: An unknown result occurred…. Exit code: 130.”

How do I troubleshoot this?

---

<div class="post-metadata">

**Author:** ![DCornelius](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/dcornelius/32/2444_2.png) [@DCornelius](https://www.finalbuilder.com/forums/u/DCornelius)\
**Post date:** [January 7, 2026, 4:51am UTC](https://www.finalbuilder.com/forums/t/yubikey-signing-error/7747/2 "2026-01-07T04:51:09Z")

</div>

Nevermind. I had switched the time server to use `ssl.com` but just tried switching it back to the one I had originally used with Signotaur (digicert) and it worked.

---

<div class="post-metadata">

**Author:** ![Vincent](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/vincent/32/938_2.png) [@Vincent](https://www.finalbuilder.com/forums/u/Vincent)\
**Post date:** [January 7, 2026, 5:26am UTC](https://www.finalbuilder.com/forums/t/yubikey-signing-error/7747/3 "2026-01-07T05:26:12Z")

</div>

I could reproduce here - if I put [https://ssl.com](https://ssl.com) as the timestamp service - that is not the url for their timestamp service - use [http://ts.ssl.com/](http://ts.ssl.com/)

We do need to do better with the error message though, we’re looking into it.

---

<div class="post-metadata">

**Author:** ![DCornelius](https://www.finalbuilder.com/forums/user_avatar/www.finalbuilder.com/dcornelius/32/2444_2.png) [@DCornelius](https://www.finalbuilder.com/forums/u/DCornelius)\
**Post date:** [January 7, 2026, 5:43am UTC](https://www.finalbuilder.com/forums/t/yubikey-signing-error/7747/4 "2026-01-07T05:43:08Z")

</div>

> [@Vincent](#):
>
> that is not the url for their timestamp service - use [http://ts.ssl.com/](http://ts.ssl.com/)

Oh–duh! I knew that! I had used that in my signtool test! I just put that in and it works fine. 🙂