Aha! Figured out how to get S/MIME signatures to verify.