Retrieving of public key from certificates in missing for signed results in compare credential method of org.apache.wss4j.dom.saml.DOMSAMLUtil

org.apache.wss4j.dom.saml.DOMSAMLUtil compareCredentials , there is a check to compare the certificates , public key and secret key. There might be a case when client signed results contain public key and subjectKeyInfo contains certificate. There should be an additional check the retreive the public key from certificate whenever public key is null
"if(subjectPublicKey == null && subjectCerts != null && subjectCerts.length> 0)

{ subjectPublicKey = subjectCerts[0].getPublicKey();}

"