updating SP's signing cert in metadata

[Peter Schober]

* IAM David Bantz <dabantz at alaska.edu> [2017-10-12 20:45]:
> metadata markup says the cert is for signing; can I rely on that?

Well, you could check if their messages are in fact signed.

In the past I have occasionally directly replaced old certs with new
ones once I knew the SP wasn't in fact signing and the new cert was
alteady in place and usable.
-peter