PKCS#7: fix certificate blacklisting