| KeyDescriptor use="encryption" only | KeyDescriptor use="signing" only | KeyDescriptor use="encryption" + KeyDescriptor use="signing" | KeyDescriptor only |
---|
1 | <md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor>
| <md:KeyDescriptor> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> |
2 | <md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> |
3 | <md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>Old cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> |
4 | <md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> |
5 | <md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor use="encryption"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> <md:KeyDescriptor use="signing"> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> | <md:KeyDescriptor> <ds:KeyInfo> <ds:X509Data> <ds:X509Certificate>New cert</ds:X509Certificate> </ds:X509Data> </ds:KeyInfo> </md:KeyDescriptor> |