The "does not throw for valid signature" test is failing, probably because the certificate is expired, but that needs to be double checked