Digital signatures: format, certificate, and validation policy — three layers people constantly mix up

When a digital signature fails, the instinct is to look at cryptography. Most of the time the problem is format or validation policy. Here I separate the three layers so the next error doesn't cost you hours.