* fix(certificates): disclose undecoded unsigned attributes * test(certificates): use parser-owned limitation text