My conspiracy theory: those signing keys are very “tasty” maybe Microsoft was aware that some state-sponsored attacker got hold on them and blacklisted for everyone’s safety.

Imagine what would happen if NSA or that other Israeli spy company could sign fake veracrypt or Wireshark binaries