certtool --outder should not emit signature verification status

When emitting binary-formatted output, send signature verification status to stderr, since it is not binary-formatted output.

A simpler version of this patch would be to always send signature verification to stderr, but that would change the text-formatted output.