The original exe has a certificate to let users know it has not been modified since it was published. It would defeat the purpose of the certificate if someone different from the author could transfer the certificate to another exe.
Your app.exe has been verified by a Certification Authority. Only the publisher can sign app.exe. App.cameyo.exe would need to be signed by the same publisher.
Example: if you download VLC from numerous sites online, the Verified Publisher should be VideoLAN. If you create an SFX of VLC with 7-Zip, the SFX file will show publisher unknown. If you extract VLC from the SFX, the VLC publisher shows VideoLAN.
Similarly, the extracted app.exe from app.cameyo.exe will show the same verified publisher as app.exe, but app.cameyo.exe is a different file from app.exe; therefore, it cannot show anything except unknown unless someone signs it.
How to then sign Cameyo's Packaged application? We have a certificate we can apply. What would be the instructions to sign exe - there is no option in the packaging instructions.