> Perhaps "(as specified by > public key/cert format)" would be more > appropriate? *if we do that*, we may also need a statement that unless otherwise specified the sig format id == pk/cert format id. - Bill