<Signature>
<SignedInfo>
(CanonicalizationMethod)
(SignatureMethod)
(ObjectReference)+
</SignedInfo>
(SignatureValue)
(KeyInfo)?
(Object)*
</Signature>
SignedInfo is the stuff that is signed.
ObjectReferences identify the resources that the have content being signed
(via a DigestValue)
- Other
KeyInfo and Objects may be included within the Signature
element.