Make signing a certificate fail if CSR is invalid