Trying to Use AzureSignTool to sign an existing MSIX File came up the following error

The Publisher Identity in the AppxManifest.xml does not match the subject on the certificate

Turns out the order of the Subject of the Cert matters, we had it opposite which is what we copied from Azure Key vault , it should be :

CN=xxxxx, O=xxxxxxx, L=xxxxxxxx, S=xxxxxxx, C=xxxx

Make sure you use S instead of ST as well