Use EVP API instead of assuming EC for attestation cert verification.