Thanks guys, changing to an external SignTool.exe worked. There must have been something about the new certificate that the internal sign tool didn't like.
Anyhow fixed now by changing to an external SignTool.exe as per your suggestion.
Thanks again!