PKI has been mature for thirty years. So why is interoperability still an open question? A credential is a proxy, and it can come apart from the person it stands for in five ways. None of them are described by any assurance level we have.
Most organizations pick one electronic signature level and apply it to everything they sign. That single decision costs them either customers or court cases, and usually they cannot tell which.
