Just managed to get a new code-signing certificate after about 6 frustrating hours. With help from Andrea and Friedrich I learned that if the security level for the trusted sites zone is set too high the permission to generate a key is not granted. At their suggestion, I dropped it to medium-low and completed the order.

Might save some other light-weight some headaches.