test bad-signature, bad-contents