Characterizing Android App Signing Issues