Content Management and Capture

3. Open each JAR with a zip explorer.

4. Go to META-INF (see above). 

5. Delete any file with these extensions: *.SF, *.RSA or *.DSA

6. When editing manifest.mf, retain the following text:

Delete everything else in this file, and save.

Signing with a new code signing certificate

Use the process documented here:

https://docs.oracle.com/javase/tutorial/deployment/jar/signing.html

NOTE: You must timestamp the JARs using a recognized time stamping authority.

i.e. -tsa http://timestamp.digicert.com

Validate your signed JAR

Here is a note from IBM on how to check the signing certificate date:

https://www.ibm.com/support/pages/viewing-java-security-certificate-jar-file