Decode any CMS object. SignedData is verified; EnvelopedData is decrypted when a private key is provided.