Test signatures with a certificate file too

Use of fingerprints is deprecated elsewhere in the code, so we should
assume that to be the case here. Improves coverage in any event.