To verify that test signing mode is disabled, you can use the following command:
bcdedit /enum | find "testsigning"