We are using BoringSSL for parsing SPKI, and it does not support id-RSASSA-PSS.

Not sure how important this is or what BoringSSL plans are for this, or if it is needed for TLS 1.3 etc.

Either way documenting the task here since it is currently a TODO in the code for RSASSA-PSS support in cert verification.