...
Note the PEM-encoded certificate appended to the output. In the next section, we will insert that certificate into SAML metadata.
...
Binding the SAML Certificate to a KeyDescriptor in Metadata
Finally, bind the above certificate to an <md:KeyDescriptor> element in SAML metadata:
...