If passport-saml is configured with a privateCert, the generated metadata does not include the corresponding public certificate.
It would be useful to either have another parameter we could pass to include the public certificate in the metadata, or if it would be added automatically if the privateCert file contained both the private key and the public cert.