If the decrypted message contains a binary encoded signature, then _pkcs7_base64() prior to checking signature, (see sub decode_message).
If the decrypted message contains a binary encoded signature, then _pkcs7_base64() prior to checking signature, (see sub decode_message).