figured it out. files were not signed normally.

just unpacked, remove certificates and resign. now everything works.

if you want to do something good - do it yourself. true for this thread.