Signature trust could not be established via PKIX validation of signing credential

[Cantor, Scott]

(And the first step to sanity check is to scan all the metadata sources
loaded for a duplicate of the entityID involved, that would have the wrong
key and be superseding.)

-- Scott