<html><body><div style="color:#000; background-color:#fff; font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1433509742559_5269"><span id="yui_3_16_0_1_1433509742559_5284">OK, no dupe MD - I even put this on a test system where that was the only metadata... So based on what you are saying is that they assert and the sigs do not match - correct?</span></div> <br><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: Courier New, courier, monaco, monospace, sans-serif; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Thursday, June 4, 2015 4:49 AM, Mike Flynn <shibbolethlynda@yahoo.com> wrote:<br> </font> </div> <br><br> <div class="y_msg_container"><div id="yiv2243417083"><div><div style="color:#000;background-color:#fff;font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px;"><div id="yiv2243417083yui_3_16_0_1_1433359183220_37900"><span id="yiv2243417083yui_3_16_0_1_1433359183220_37899">Thanks, Scott. Will check for dupe MD.</span></div> <br clear="none"><div class="yiv2243417083qtdSeparateBR"><br clear="none"><br clear="none"></div><div class="yiv2243417083yqt3762780627" id="yiv2243417083yqt84960"><div class="yiv2243417083yahoo_quoted" style="display: block;"> <div style="font-family:Courier New, courier, monaco, monospace, sans-serif;font-size:16px;"> <div style="font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Wednesday, June 3, 2015 2:32 PM, "Cantor, Scott" <cantor.2@osu.edu> wrote:<br clear="none"> </font> </div> <br clear="none"><br clear="none"> <div class="yiv2243417083y_msg_container">On 6/3/15, 7:23 PM, "Mike Flynn" <<a rel="nofollow" shape="rect" ymailto="mailto:shibbolethlynda@yahoo.com" target="_blank" href="mailto:shibbolethlynda@yahoo.com">shibbolethlynda@yahoo.com</a>> wrote:<div class="yiv2243417083yqt8173275597" id="yiv2243417083yqtfd74005"><br clear="none"><br clear="none"><br clear="none"><br clear="none">>So the certs match and the cert is valid (checked it with the SSLShopper <br clear="none">>tool). What am I missing here?</div><br clear="none"><br clear="none">There is no such thing as validity here, they simply didn't sign with that <br clear="none">key, or probably more likely there's a duplicate piece of metadata <br clear="none">somewhere that has a different one.<br clear="none"><br clear="none">-- Scott<br clear="none"><br clear="none">-- <br clear="none">To unsubscribe from this list send an email to <a rel="nofollow" shape="rect" ymailto="mailto:users-unsubscribe@shibboleth.net" target="_blank" href="mailto:users-unsubscribe@shibboleth.net">users-unsubscribe@shibboleth.net</a><div class="yiv2243417083yqt8173275597" id="yiv2243417083yqtfd42558"><br clear="none"></div><br clear="none"><br clear="none"></div> </div> </div> </div></div></div></div></div><br><br></div> </div> </div> </div></div></body></html>