Can't verify signature for 2.4.3-I602 Windows installer

alexvy86

I just downloaded the Windows installer for version 2.4.3-I602 together with its signature file, but when trying to verify them it says it was signed with unknown certificate 0xB59606E2D8C6E10B80BE2B31D72AF3448CC2B034. I have Samuli's new key and the security mailing list one (from here) in my keychain with full trust, but I see neither of them has that fingerprint... what am I missing?

alexvy86

Hmm once I certified the security mailing list key, I do get a "Signature is valid" message, although the details still say "Signed on 2017-07-14 08:28 with unknown certificate 0xB59606E2D8C6E10B80BE2B31D72AF3448CC2B034." Is that correct? I'm still a bit new to GPG so I thought just stating the "full trust" part would be enough.