[xmlsec] Adding X509 Certificate

[Aleksey Sanin]

 > The manual says that "--privkey-pem" loads both private key and
 > certificate.

http://www.aleksey.com/xmlsec/xmlsec-man.html

  --privkey-pem[:<name>] <file>[,<cafile>[,<cafile>[...]]]
     load private key from PEM file and certificates that verify this key

Dmitry is correct. You are loading *only* private key. You need
to put certificate into a separate file and specify it after comma
(see the command above).

Aleksey