<div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Jun 25, 2014 at 1:49 PM, Cantor, Scott <span dir="ltr"><<a href="mailto:cantor.2@osu.edu" target="_blank">cantor.2@osu.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">When you say "includes certificate X", we don't know what that means for certain. Saying metadata includes a certificate generally means it includes a KeyDescriptor for that certificate and that matters a lot. A certificate inside a Signature as a KeyInfo hint means essentially nothing.</blockquote>
</div><br>Sorry. The certificates are in KeyInfo -> X509Data -> X509Certificate. One cert in each ds:Signature block.</div><div class="gmail_extra"><br></div><div class="gmail_extra">Liam</div><div class="gmail_extra">
<br></div></div>