If these certificates don't exist, are out of date or are invalid on your Zorin installation; there might be some conflict with the Evince program installed with your OS as it checks the authenticity of the digitally-signed PDF against the system's trust store to determine the certificate chain in the embedded digital signature and checks it for validity/whether it was issued by a trusted CA.