Include new signing cert

nefed.xml

@@ -18422,6 +18422,45 @@ bHwSoBy5hLPNALaEUoa5zPDwlixwRjFQTc5XXaRpgIjy/2gsL8+Y5QRhyXnLqgO67BlLYW/GuHE=</ds
                     </ds:X509Data>
                 </ds:KeyInfo>
             </KeyDescriptor>
+            <KeyDescriptor use="signing">
+                <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+                    <ds:X509Data>
+                        <ds:X509Certificate>
+                            MIIGzTCCBbWgAwIBAgIQcdj5RA4fqcdWwBl/E/VgjzANBgkqhkiG9w0BAQsFADCBujELMAkGA1UE
+                            BhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50cnVzdC5u
+                            ZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0
+                            aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0
+                            eSAtIEwxSzAeFw0yMjEyMDUwMzE4NDNaFw0yMzEyMDUwMzE4NDNaMHQxCzAJBgNVBAYTAlVTMRYw
+                            FAYDVQQIEw1NYXNzYWNodXNldHRzMQ8wDQYDVQQHEwZCb3N0b24xHTAbBgNVBAoTFEZpZGVsaXR5
+                            IEludmVzdG1lbnRzMR0wGwYDVQQDExRzYW1sc3NvLmZpZGVsaXR5LmNvbTCCASIwDQYJKoZIhvcN
+                            AQEBBQADggEPADCCAQoCggEBAME5zjGTAQKlCquZ55eNxbtrqGEyNuSm0W7B84etEOU+/FuECbuq
+                            eswXHj5tp1AQvKA0r6ms0M3tHfnVVHcGgY/WBbJ7hJbQmDZm0yIiceweZ9xGR1BtuMIJuHW5rt6v
+                            gjZiUzGhvEtRQ+UrW49p9+2VzSaoKZcD/XSRiFDaK7HUbmstweKZ05ZVhrJR2b9Nrg85OuI8bAw6
+                            QTz+qpGbnGy+u+Rgpa1OlhwFEwZNn/KvWMsVCivT+FAoU77LviWVgMvnelyyvU9FNK3QSyCL4pT5
+                            vjyTf1q8wU612RvuIOL2w78Aax3wTCEszqbd7JDfqh47UW8aVEzcHoDZlmYDE1kCAwEAAaOCAxIw
+                            ggMOMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJJeSLnGkQ6awkl0VpXFuitkksswMB8GA1UdIwQY
+                            MBaAFIKicHTdvFM/z3vU981/p2DGCky/MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0
+                            cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQv
+                            bDFrLWNoYWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0
+                            L2xldmVsMWsuY3JsMB8GA1UdEQQYMBaCFHNhbWxzc28uZmlkZWxpdHkuY29tMA4GA1UdDwEB/wQE
+                            AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTAYDVR0gBEUwQzA3BgpghkgBhvps
+                            CgEFMCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIw
+                            ggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0H
+                            E9MMAAABhOBLBk8AAAQDAEcwRQIhALz2TzwnRhUAwbcg5X2CAxI7ySHn/s4tNJ2OnNm22aUxAiBw
+                            +q9Vd5HVwqQBMzGG+ebD3qCo2BxRc/JdcGPzhBwD4QB3ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwL
+                            h9zwAw55NqWaAAABhOBLBmoAAAQDAEgwRgIhAPGy6Cv1sqtCLFFyQh6Dk2xBxeW6E3toHI/vSvKS
+                            UTk2AiEA4FRdM286ew7qBntnLa5/cYZuLpQ9NGBjFcT4XWplmykAdgCt9776fP8QyIudPZwePhhq
+                            tGcpXc+xDCTKhYY069yCigAAAYTgSwZsAAAEAwBHMEUCIQDcWXzg/Z052rZ10kNxxty0ftIs1MTv
+                            7IZxfr+kZAw0UgIgEgZAKpexAAdz8LLR1oS2yBJA3zVcbEDuI0VHuIiiVs4wDQYJKoZIhvcNAQEL
+                            BQADggEBALMcStOhdcNOCbk8/ydwiE+ltbLyb2iUmogWhEYRkqQogdRF8pHZYeI/9iG+MqEt0iM4
+                            RwLK7xCI7nNW71gYtV8fiRRLIXthXTHIDTZSNi55vM5icMixSO1t7dRAM4il/nI/wFA5W9f1F5n8
+                            Agf0UzsrZusBPabsBpU3UJDAvTPP8WBCbAClJ40jflseNl8GBQBaQyOQXugMjTQLw2Or2mQbQwpZ
+                            dnZp3JYz+VurgMa4LZ7Zj1mCMwmy/PejjN3jQiLdRqxC3SKtY6h9kc3wsXkDVue53ehTU5rsxVUv
+                            sub0w4FQ9biZ9+4OsgBO8qHzN2v1wJAnlyNYjKmZ681nyXE=
+                            </ds:X509Certificate>
+                    </ds:X509Data>
+                </ds:KeyInfo>
+            </KeyDescriptor>
             <NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</NameIDFormat>
             <AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://loginxq1.fidelity.com/ftgw/Fas/NBExternal/NBPartSSO/InboundSSO/consumer/sp/ACS.saml2" index="1" />
         </SPSSODescriptor>