The app bundle you uploaded should normally be signed with the certificate associated with the thumbprint