<wst:RequestSecurityTokenResponseCollection xmlns:wst="http://docs.oasis-open.org/ws-sx/ws-trust/200512"
                                            xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
  <wst:RequestSecurityTokenResponse Context="testcontext">
    <wst:TokenType>http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0</wst:TokenType>
    <wst:Lifetime>
      <wsu:Created>2010-11-11T16:34:19.602Z</wsu:Created>
      <wsu:Expires>2010-11-11T18:34:19.602Z</wsu:Expires>
    </wst:Lifetime>
    <wsp:AppliesTo xmlns:wsp="http://schemas.xmlsoap.org/ws/2004/09/policy">
      <wsa:EndpointReference xmlns:wsa="http://www.w3.org/2005/08/addressing">
        <wsa:Address>http://services.testcorp.org/provider2</wsa:Address>
      </wsa:EndpointReference>
    </wsp:AppliesTo>
    <wst:KeySize>128</wst:KeySize>
    <wst:KeyType>http://docs.oasis-open.org/ws-sx/ws-trust/200512/PublicKey</wst:KeyType>
    <wst:RequestedSecurityToken>
      <saml2:Assertion ID="ID_5a15fc70-daa1-4808-b70e-9cbf6b8e4d4f" IssueInstant="2010-11-11T16:34:19.602Z"
                       Version="2.0" xmlns:saml2="urn:oasis:names:tc:SAML:2.0:assertion">
        <saml2:Issuer>Test STS</saml2:Issuer>
        <saml2:Subject>
          <saml2:NameID NameQualifier="urn:picketlink:identity-federation">jduke</saml2:NameID>
          <saml2:SubjectConfirmation Method="urn:oasis:names:tc:SAML:2.0:cm:holder-of-key">
            <saml2:SubjectConfirmationData xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
                                           xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
                                           xsi:type="KeyInfoConfirmationDataType">
              <dsig:KeyInfo xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
                <dsig:X509Data>
                  <dsig:X509Certificate>
                    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
                  </dsig:X509Certificate>
                </dsig:X509Data>
              </dsig:KeyInfo>
            </saml2:SubjectConfirmationData>
          </saml2:SubjectConfirmation>
        </saml2:Subject>
        <saml2:Conditions NotBefore="2010-11-11T16:34:19.602Z" NotOnOrAfter="2010-11-11T18:34:19.602Z">
          <saml2:AudienceRestriction>
            <saml2:Audience>http://services.testcorp.org/provider2</saml2:Audience>
          </saml2:AudienceRestriction>
        </saml2:Conditions>
        <dsig:Signature xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
          <dsig:SignedInfo>
            <dsig:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#WithComments"/>
            <dsig:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
            <dsig:Reference URI="#ID_5cc7fe71-7d76-4615-93d7-6ecfb1e63aae">
              <dsig:Transforms>
                <dsig:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
                <dsig:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
              </dsig:Transforms>
              <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
              <dsig:DigestValue>XOHHAGsbjaDmICo3hwutC7N31Nk=</dsig:DigestValue>
            </dsig:Reference>
          </dsig:SignedInfo>
          <dsig:SignatureValue>
            RS/FTE78ndmSjuccLTn4HuzBO90/PYvIufv57eZHftSOZIPC/5LeycMHK84a7dsE+CEslLJYdKEU
            3+rbg8cnN9mhEJEmNjVmjKvCvCrWPOj/0p2vImZPMOCTimlhipUMd65ldtdvps35sQBtE4jBIJ+N
            OB+stBdZbMGw16AQ8S0=
          </dsig:SignatureValue>
          <dsig:KeyInfo>
            <dsig:KeyValue>
              <dsig:RSAKeyValue>
                <dsig:Modulus>
                  suGIyhVTbFvDwZdx8Av62zmP+aGOlsBN8WUE3eEEcDtOIZgO78SImMQGwB2C0eIVMhiLRzVPqoW1
                  dCPAveTm653zHOmubaps1fY0lLJDSZbTbhjeYhoQmmaBro/tDpVw5lKJns2qVnMuRK19ju2dxpKw
                  lYGGtrP5VQv00dfNPbs=
                </dsig:Modulus>
                <dsig:Exponent>AQAB</dsig:Exponent>
              </dsig:RSAKeyValue>
            </dsig:KeyValue>
          </dsig:KeyInfo>
        </dsig:Signature>
      </saml2:Assertion>
    </wst:RequestedSecurityToken>
    <wst:RequestedAttachedReference>
      <wsse:SecurityTokenReference xmlns:wsse11="http://docs.oasis-open.org/wss/oasis-wss-wssecurity-secext-1.1.xsd"
                                   wsse11:TokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLV2.0"
                                   xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
        <wsse:KeyIdentifier ValueType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.1#SAMLID">
          #ID_5a15fc70-daa1-4808-b70e-9cbf6b8e4d4f
        </wsse:KeyIdentifier>
      </wsse:SecurityTokenReference>
    </wst:RequestedAttachedReference>
  </wst:RequestSecurityTokenResponse>
</wst:RequestSecurityTokenResponseCollection>