Yup, It’s because it’s not signed with Authenticode, which is because it’s taking Comodo an insane amount of time to actually give me a certificate. Let’s Encrypt for code signing can’t come soon enough.
Eventually I complained to K-Software (the reseller) and the guy then referred me to some account rep or something with a Western name. Then she sent me instructions which I followed and uploaded their notarized form. Which the instructions did not even say to upload the documents, just the notarized form. Then they said nothing and I eventually asked them what was going on. Then the Comodo rep replies and first of all does not acknowledge that I uploaded anything, 100% contradicts what was in the instructions, saying that not only the form needed to be notarized, but every individual page. I told the K-Software guy I was not going back to the notary. Then he calls them, I wait, I email him again, then they say I have to have my phone number in a valid third party registry. But they don't say what the ___ is a valid third party registry. And they never said that was required before -- I gave them the phone bill with my phone number on it.
Anyway it took almost two months and maybe thirty emails before I finally got it.
AFAIK that will never happen because authenticode signing certificates are all essentially EV certificates, because they require verification of an individual's (or company's) identity. That's very expensive to do compared to DV certificates that letsecrypt currently issues, which have essentially $0 marginal cost.