The digest of the signed bytes is not the one the signature carries: the bytes changed after signing (§12.8.1).
DigestMismatch = 6