image: use ucert to append signature