Or maybe it does include the important info at sign time, but the attacker adds additional info that confuses the program parsing the document.