Support X509 pem cert and signature verification using PyCrypto.

Does this mean that the previous cert types will not be tested? I'd think making this addition would be one or more *new* tests, rather than changing an existing one.