An Implementer’s Guide to the Identity Selector ...

Furthermore, instead of using the RP Identifier value to compute both the PPID and the Signing Key, separate related RP Identifier and RP PPID Seed values are computed, both using only information from the leaf certificate, with the Signing Key being derived from the RP Identifier and the PPID being derived from the RP PPID Seed. ................
................