PDFBOX-2801 and PDFBOX-2469 result in the signature dictionary not being decrypted in encrypted files. Because these aren't visible signatures, this is noticed only when looking at the signature dictionary in PDFDebugger.
See also this thread in the dev mailing list:
I did not find anything in the "32000" spec that the signature dictionary is not to be encrypted.
Encryption applies to all strings and streams in the document's PDF file, with the following exceptions:
The values for the ID entry in the trailer
Any strings in an Encrypt dictionary
Any strings that are inside streams such as content streams and compressed object streams, which themselves are encrypted
Any hexadecimal strings representing the value of the Contents key in a Signature dictionary