X509: change return value for validateSignature when cert isn't loaded