I need to sign pdf documents using an external service which will return a PKCS1 signature. This means i do have to add the public key in an IExternalSignatureContainer instance