Signing Android Package Kit (APK) files requires the use of a certificate with a validity period of at least 25 years.

Public Certificate Authorities (CAs), including Entrust, do not issue certificates of such a lifetime. Thus, a public CA code signing certificate is not required for signing the APK files.

A self–signed certificate with minimum of 25 years validity period can be created.

In order to create a self-signed certificate with a minimum validity period of 25 years using Java Keytool, enter the command line below:

keytool.exe -genkey -v -keystore keystore.jks -alias Android -keyalg RSA -keysize 2048 -validity 20000

With 20,000 representing the number of days.

Android dev resources:

https://developer.android.com/studio/publish/app-signing.html#certificates-keystores

https://developer.android.com/studio/publish/preparing.html

If you have any questions or concerns please contact the Entrust Certificate Services Support department for further assistance:

Hours of Operation:
Sunday 8:00 PM ET to Friday 8:00 PM ET
North America (toll free): 1-866-267-9297
Outside North America: 1-613-270-2680 (or see the list below)
NOTE: It is very important that international callers dial the UITF format exactly as indicated. Do not dial an extra "1" before the "800" or your call will not be accepted as an UITF toll free call.