So the same key should not be used for both signing and encryption. Is this not applicable to PKI/TLS/SSL because a browser generated symmetric session key is used for traffic encryption? And asymmetric encryption is only used to transmit the public key which is used to encrypt the session key?