title: What does the digest and signature fields correspond to in the WS-Security x509 token profile?
body: <p>an x509 cert has:
  a) the info, 
  b) the public key, 
  c) a signed value made from hashing (a)+(b), and then encrypted using the private key </p>
  
  <p>The x509 token profile includes the digestValue and signatureValue elements, shown in this example:
  <a href="http://publib.boulder.ibm.com/infocenter/cicsts/v3r1/index.jsp?topic=/com.ibm.cics.ts31.doc/dfhws/wsSecurity/dfhws_soapmsg_signed.htm" rel="nofollow">http://publib.boulder.ibm.com/infocenter/cicsts/v3r1/index.jsp?topic=/com.ibm.cics.ts31.doc/dfhws/wsSecurity/dfhws_soapmsg_signed.htm</a></p>
  
  <p>My question is, is the value of signatureValue the same as c)? And is digestValue the hash of a)+b)? If so, why is there a redundancy? Or am I not understanding something? Thanks.</p>