@mostafa-soliman I found that deleting/revoking the certificate in the Apple developer portal (https://developer.apple.com/account/resources/certificates/list) allowed our CI pipeline to generate a new certificate that was then able to publish to app store connect. For me, the correct certificate was the one with the created by label of API key: xxxx