Do PDF signatures use public key infrastructure or web of trust? (note that PDFs support both e-signatures and digital signatures... we care for the latter)