if len(ai.Parameters.FullBytes) != 0 {
			return UnknownSignatureAlgorithm
		}
	}

	if !ai.Algorithm.Equal(oidSignatureRSAPSS) {
		for _, details := range signatureAlgorithmDetails {
			if ai.Algorithm.Equal(details.oid) {
				return details.algo
			}
		}
		return UnknownSignatureAlgorithm
	}

	// RSA PSS is special because it encodes important parameters

	block, _ := pem.Decode([]byte(certISOOID))
	if cert, err := ParseCertificate(block.Bytes); err != nil {
		t.Errorf("certificate with ISO OID failed to parse: %s", err)
	} else if cert.SignatureAlgorithm == UnknownSignatureAlgorithm {
		t.Errorf("ISO OID not recognised in certificate")
	}
}

// certMultipleRDN contains a RelativeDistinguishedName with two elements (the

		{"UnhandledCriticalExtension", Type, 0},
		{"UnknownAuthorityError", Type, 0},
		{"UnknownAuthorityError.Cert", Field, 8},
		{"UnknownPublicKeyAlgorithm", Const, 0},
		{"UnknownSignatureAlgorithm", Const, 0},
		{"VerifyOptions", Type, 0},
		{"VerifyOptions.CurrentTime", Field, 0},
		{"VerifyOptions.DNSName", Field, 0},
		{"VerifyOptions.Intermediates", Field, 0},