Don't require there to be any digests, to allow in particular for a certs-only SignedData