# XV-SA-15

Source: https://xmlvalid.com/rules/XV-SA-15

> The public key in the QR code (tag 8) is not that of the certificate in the signature.

- Level: error
- Rule sets: ZATCA cryptographic stamp and QR code checks Security Features Implementation Standards 1.1, SDK 3.4.6
- Context: `/*/cac:AdditionalDocumentReference[cbc:ID = 'QR']`
- Test: `not($readable and $certificate) or $fields[9] = '' or $fields[9] = js:xvCertificatePart($certificate, 'publicKey')`

Validate a document against these rules: https://xmlvalid.com/validate