> > Perhaps "(as specified by > > public key/cert format)" would be more > > appropriate? > > *if we do that*, we may also need a statement that unless otherwise > specified the sig format id == pk/cert format id. That sounds reasonable. - Joseph