this Topic has been dormant for so long but I hope that you might still read this. We are facing the same or similar issue. Did you ever find a way to handle this? It seems as though the certificates get created in the provisioning machine, but only the trusted root gets exported with the AppStack. A workaround so far was to install it into the GoldenMaster Image. We are currently building a new GM for Windows 10 1809 and are trying to thin out the installed programs in the GM so it would be greatly appreciated if you could update us on this. We've tried it with the support but the last answer was that they do not support AppStacks.