Signature encoded as per X.509:
RSA remains a bit string
EC is DER-encoded then wrapped in a bit string