When decoding a signed cert, make sure it's really a cert.