There is undefined behavior in the `tor_cert_checksig` function when no separate public key is given (such as in the `src/test/test_routerkeys.c:140`).