Recently our website code signing certificate expired and we had to update a jar that we long time back got from a third party. There was no way to get the unsigned jar back so I had to find a trick to update the expired certificate. The solution was elegant and simple : Unzip the jar remove the META-INF folder Use jar command to create the jar again Use jarsigner to sign the jar with the updated keystore