The OID sanity check was incorrect. It should only disallow *leading* 0x80