signing exe with SSL certificate using eclipse tycho

Question

I would like to use our code-signing SSL certificate to sign our product exe which is an eclipse RCP application and is built with eclipse tycho.

Is there an official way to do this? There seems to be a sign-p2-artifacts-mojo plugin, but I can't find an example.

I found this example (servoy-eclipse) which uses jsign, but I would prefer not to interfere with the default tycho build process (publisher, director). I also try to stay pom-less at the bundle level (where the product file lays).

<plugin>
    <groupId>net.jsign</groupId>
    <artifactId>jsign-maven-plugin</artifactId>
    <version>4.0</version>
    <executions>
        <execution>
            <goals>
                <goal>sign</goal>
            </goals>
            <phase>generate-resources</phase>
            <configuration>
                <file>${project.build.directory}/tosign/servoy.exe</file>
                <name>Servoy</name>
                <url>http://servoy.com</url>
                <keystore>${jarsigner.keystore}</keystore>
                <alias>${jarsigner.alias}</alias>
                <storepass>${jarsigner.storepass}</storepass>
                <tsaurl>http://timestamp.sectigo.com,http://timestamp.digicert.com,${jarsigner.tsa}</tsaurl>
            </configuration>
        </execution>
    </executions>
</plugin>