I'm not sure signature is required, notebook should just be untrusted if there is no signature, And I suppose it might not be sha256 as the Notary is configurable.