fixed in add_der_header: escape and unescape base64 string for UTF8 safety
removed base64
changed in add_der_signature_header: removed URIComponent codex because we're getting an actual byte array