diff --git a/.github/SSLcom-sandbox.crt b/.github/SSLcom-sandbox.crt
new file mode 100644
index 00000000..35de9181
Binary files /dev/null and b/.github/SSLcom-sandbox.crt differ
diff --git a/.github/workflows/build_windows.yaml b/.github/workflows/build_windows.yaml
index 2a3ecd99..db3a7ab0 100644
--- a/.github/workflows/build_windows.yaml
+++ b/.github/workflows/build_windows.yaml
@@ -178,14 +178,7 @@ jobs:
               if: inputs.sign == ''
               run: |
                   Set-StrictMode -Version 'Latest'
-                  $Cert = Get-ChildItem Cert:\CurrentUser\My -CodeSigningCert | Select-Object -First 1
-                  echo Certificate: $Cert
-                  $Chain = New-Object System.Security.Cryptography.X509Certificates.X509Chain
-                  echo Chain: $Chain
-                  echo Root: $Chain.ChainElements[2].Certificate
-                  [void]$Chain.Build($Cert)
-                  $Chain.ChainElements[2].Certificate | Export-Certificate -Type CERT -FilePath SSLcom-sandbox-root.crt
-                  certutil.exe -addstore root ./SSLcom-sandbox-root.crt
+                  certutil.exe -addstore root ./.github/SSLcom-sandbox.crt
               env:
                   INSTALL_DIR: C:\Users\runneradmin\eSignerCKA
                   MASTER_KEY_FILE: C:\Users\runneradmin\eSignerCKA\master.key