Check that the Extended Key Usage extension in the signing certificate contains the OID for code signing so that we reject other types of certificates.