I'm struggling with signing my installer to keep *Gatekeeper* happy.

[![enter image description here](https://i.stack.imgur.com/Ws8Vp.png)](https://i.stack.imgur.com/Ws8Vp.png)

When building i sign the .pkg:

```
productsign --sign "3rd Party Mac Developer Installer: GNXXXXXXXXXX (XXXXXXXXXXX)" UnsignedJaXXXXXXXXXX0.5.pkg JaXXXXXXXXXXt0.5.pkg

```

using this certificate:

[![enter image description here](https://i.stack.imgur.com/MOSjI.png)](https://i.stack.imgur.com/MOSjI.png)

When checking with *pkgutil* I can see that the file is signed:

[![enter image description here](https://i.stack.imgur.com/294US.png)](https://i.stack.imgur.com/294US.png)

However still *Gatekeeper* is not happy.

*spctl* gives this result:

[![enter image description here](https://i.stack.imgur.com/eel8a.png)](https://i.stack.imgur.com/eel8a.png)

What am I missing?

**Update**

*spctl* with verbose:

[![enter image description here](https://i.stack.imgur.com/X6hV8.png)](https://i.stack.imgur.com/X6hV8.png)