BouncyCastle shouldn't be signed...