in SignerInfo, use ecdsa-with-SHA1 OID for ECDSA (not ecPublicKey)