Merge pull request #780 from paul-elliott-arm/discrepancy_cert_2_7

Backport 2.7: Add missing tag check to signature check on certificate load