SignedContentBlob.GetRawSignature() breaks ECDSA signature verification: r/s not left-padded to IEEE P1363 length (PSPKI Get-EnterprisePKIHealthStatus reports false InvalidIssuer)