We are also having an issue where monitoring tools report these certificates (vc and myvc) for having an invalid digital signature. I have found i can remove them and still use the client without issue but they are just subsequently recreated. I know you mentioned you were planning to deprecate these in the past, has that occurred yet? do the latest versions of cron still use these certificates? or could you provide some more insight into why the signature is not considered valid by windows? thanks.