Question to the certificateSigningAlgorithm field in UA_SecurityPolicy

[mcpat]

Currently, the certificateSigningAlgorithm field in UA_SecurityPolicy has type UA_SecurityPolicySignatureAlgorithm. But this type provides the API to sign & verify messages on secure channels and not an API to work with certificate signatures which is what I would expect.

Does it make more sense to define a new UA_SecurityPolicyCertificateSigningAlgorithm for this field with functions

• to sign a CSR to create a self-signed certificate (useful when eventually certificate signing requests can be created)
• to check the signature algorithm in a provided certificate (part of step "Security Policy Check")

Further functions may also be useful. What are your thoughts?