2017-08-17 UTC
# 
saranix true it should be specified, but it's not as if it's a paradox. One can safely assume that if they resolved the keyId, and it contains a publicKeyPem attribute, that is the key to use, if it further dereferences to a publicKey object, then that should be dereferenced to look for a publicKeyPem