PKCS#7: Handle blacklisted certificates