Also:

- avoid writing ETSI.CAdES.detached for now on Windows till doing so
  results in an invalid signature in Acrobat
- extend the SEC_OID_PKCS1_SHA1_WITH_RSA_ENCRYPTION hack to do the same
  for SHA256 and SHA512 as well, as Acrobat and NSS accepts such
  signatures

Change-Id: Ibb0a204504b29230dd712ffb709d2037c1007218