diff --git a/azure-pipelines/dotnet.yml b/azure-pipelines/dotnet.yml
index 54b1d4e3..92ffd970 100644
--- a/azure-pipelines/dotnet.yml
+++ b/azure-pipelines/dotnet.yml
@@ -50,7 +50,6 @@ steps:
     --descriptionUrl 'https://github.com/dotnet/Nerdbank.GitVersioning'
   displayName: 🔏 Code sign
   condition: and(succeeded(), eq(variables['System.TeamFoundationCollectionUri'], 'https://dev.azure.com/andrewarnott/'), eq(variables['Agent.OS'], 'Windows_NT'), ne(variables['Build.Reason'], 'PullRequest'))
-  enabled: false # signing is broken with the expired cert, I suppose
 
 - pwsh: >
     obj/SignClient sign
@@ -64,7 +63,6 @@ steps:
     --descriptionUrl 'https://github.com/dotnet/Nerdbank.GitVersioning'
   displayName: 🔏 Code sign LKG
   condition: and(succeeded(), eq(variables['System.TeamFoundationCollectionUri'], 'https://dev.azure.com/andrewarnott/'), eq(variables['Agent.OS'], 'Windows_NT'), ne(variables['Build.Reason'], 'PullRequest'))
-  enabled: false # signing is broken with the expired cert, I suppose
 
 - powershell: azure-pipelines/variables/_pipelines.ps1
   failOnStderr: true