shellext now checks digital signatures, and can get cert issuer/subject