`go.mozilla.org/pkcs7` is unmaintained

[saschagrunert]

The dependency got archived and is unmaintained since February: https://github.com/mozilla-services/pkcs7

We need to find a replacement or maintain the pkcs7 package here on our own.

[stefanberger]

Unless there are issues in this package I think we should be able to use the archive.