https://forge.liiib.re/indiehost/tech/infrastructure/libre/-/blob/master/pkg/libre/keycloak_realms.go#L26-30
It has 2 RSA certs:
It should only use the RSA256.