The xmlSecKeysMngrFindKey() function is only used when <KeyName> is specified. If you want to load cert by Issuer/Serial Number then you'll end up calling xmlSecMSCryptoX509StoreFindCert() function from xmlSecMSCryptoX509IssuerSerialNodeRead() called from xmlSecMSCryptoX509DataNodeRead(). Aleksey