By the way, you can still use the new SHA-2 based certificates to code-sign
with SHA-1. Absolutely no problem. But Microsoft will cease trusting Code
Signing Certificates using SHA-1 on January 1, 2016.
You can use SetupBuilder 10 to code-sign your files and installations with
SHA-1, SHA-2 or dual SHA-1/SHA-2.
Friedrich