ci: check cert location

Author: Kuingsmile

.github/workflows/build-test.yml

@@ -222,6 +222,31 @@ jobs:
           jq --arg thumbprint "$THUMBPRINT" '.bundle.windows.certificateThumbprint = $thumbprint' "$CONFIG_PATH" > tmp.$$ && mv tmp.$$ "$CONFIG_PATH"
           
           echo "Certificate thumbprint configured: $THUMBPRINT"
+      
+      - name: Diagnose cert store after SimplySign login (Windows)
+        if: matrix.platform == 'windows'
+        shell: pwsh
+        run: |
+          Start-Sleep -Seconds 60  # Wait for cert store to update
+          Write-Host "=== WHOAMI ==="
+          whoami
+
+           Write-Host "=== LIST CurrentUser\\My ==="
+           certutil -user -store My
+
+           Write-Host "=== LIST LocalMachine\\My ==="
+           certutil -store My
+
+           Write-Host "=== FILTER BY THUMBPRINT (if provided) ==="
+           $tp = "${{ secrets.CERTUM_CERTIFICATE_SHA1 }}".Replace(" ", "").ToUpper()
+           if ($tp) {
+             $hit = Get-ChildItem Cert:\CurrentUser\My | Where-Object { $_.Thumbprint -eq $tp }
+             if ($hit) {
+               $hit | Format-List Subject, Thumbprint, NotAfter, HasPrivateKey
+             } else {
+               Write-Host "NOT FOUND in CurrentUser\\My: $tp"
+             }
+           }
 
       - name: Build the app
         if: matrix.platform == 'windows' || matrix.platform == 'linux'