Note: Currently, only certificates issued by a trused certificate authority (CA) are supported. This means signatures with a self-signed certificate will not pass the validation.
Or at least it will, once I finish the slow process of documenting everything ...