Certificate-based signatures revisited