Download files
Generate fresh download links from your order page and save both certificate files.
Import together
Local signing tools usually need both P12 and mobileprovision to complete signing.
Use authorized IPAs
Only sign IPA files you own or have permission to test.