title: What is difference between signature and certificate in apk file?
body: <p>I know a certificate contains a public key and some extra info (I hope) but is it saved in the apk file? Is it a file or text or what? And what is a signature exactly?
  And in Android which one could we easily read to verify the app?</p>