backported signature checks.
gnutls_x509_crt_get_signature: corrected return size