I set the trust for the application cert to "Use System Defaults" and it is working now. Thank you very much for your help!
Even though the installer cert is working as-is which is trusted for all uses, do you think I should set it to default trust also? I need clear steps to configure each of our instances that sign code and would like to follow the policy of least privilege if possible.