<saml1:Assertion xmlns:saml1="urn:oasis:names:tc:SAML:1.0:assertion" AssertionID="_c6f245c3bf81f68e034dc101f64d88b2" IssueInstant="2014-04-11T09:08:45.199Z" Issuer="urn:be:fgov:ehealth:sts:1_0" MajorVersion="1" MinorVersion="1">
	<saml1:Conditions NotBefore="2014-04-11T09:03:37.426Z" NotOnOrAfter="2014-04-12T09:08:37.426Z"/>
	<saml1:AuthenticationStatement AuthenticationInstant="2014-04-11T09:08:45.199Z" AuthenticationMethod="urn:oasis:names:tc:SAML:1.0:am:X509-PKI">
		<saml1:Subject>
			<saml1:NameIdentifier Format="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName" NameQualifier="SERIALNUMBER=201011, CN=Citizen CA, C=BE">SERIALNUMBER=${user.inss}, GIVENNAME=Hannes Hans, SURNAME=De Clercq, CN=Hannes De Clercq (Authentication), C=BE</saml1:NameIdentifier>
			<saml1:SubjectConfirmation>
				<saml1:ConfirmationMethod>urn:oasis:names:tc:SAML:1.0:cm:holder-of-key</saml1:ConfirmationMethod>
				<ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
					<ds:X509Data>
						<ds:X509Certificate>${hok}</ds:X509Certificate>
					</ds:X509Data>
				</ds:KeyInfo>
			</saml1:SubjectConfirmation>
		</saml1:Subject>
	</saml1:AuthenticationStatement>
	<saml1:AttributeStatement>
		<saml1:Subject>
			<saml1:NameIdentifier Format="urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName" NameQualifier="SERIALNUMBER=201011, CN=Citizen CA, C=BE">SERIALNUMBER=${user.inss}, GIVENNAME=Hannes Hans, SURNAME=De Clercq, CN=Hannes De Clercq (Authentication), C=BE</saml1:NameIdentifier>
		</saml1:Subject>
		<saml1:Attribute AttributeName="urn:be:fgov:person:ssin" AttributeNamespace="urn:be:fgov:identification-namespace">
			<saml1:AttributeValue>${user.inss}</saml1:AttributeValue>
		</saml1:Attribute>
		<saml1:Attribute AttributeName="urn:be:fgov:ehealth:1.0:certificateholder:person:ssin" AttributeNamespace="urn:be:fgov:identification-namespace">
			<saml1:AttributeValue>${user.inss}</saml1:AttributeValue>
		</saml1:Attribute>
	</saml1:AttributeStatement>
	<ds:Signature xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
		<ds:SignedInfo>
			<ds:CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
			<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
			<ds:Reference URI="#_c6f245c3bf81f68e034dc101f64d88b2">
				<ds:Transforms>
					<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
					<ds:Transform Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
				</ds:Transforms>
				<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
				<ds:DigestValue>JcCNIM+MG3iKfioxvVE0M6TcXQ4=</ds:DigestValue>
			</ds:Reference>
		</ds:SignedInfo>
		<ds:SignatureValue>gKptNKj/zi8eJgBJ+XPlHn4Es8B8XDNw4s1XHa3O96xaJaPJIKH0KWX7Pi0smE9Lrio7tKCVQVNMBhyjLsfBYurqmid74HOuq9oYh9HwEOhe6DW390xXeV4uF5LIyYnx+GCHPXNQz/aZEJ/n7Bf/cCbfOy5BytrMRAnrom+9sayReDGjEZZ74cd+p8r9nasu44Xw4o1nsXbuGyCWyTDlxeBtXkQEiUR80sKrIdvu2aQMWbQwVFTg8NwAmz3ffy8toriJ9ubrH7D9A8wf42l3N0fLocIVwG1t7EKpBOgH3i6bs0STlsl9wXz9Ll/RdoRI6C+CAC1DbcdCKwgT1Y7zkQ==</ds:SignatureValue>
		<ds:KeyInfo>
			<ds:X509Data>
				<ds:X509Certificate>MIIE2TCCA8GgAwIBAgIOAQAAAAABPWj6jy7pe6QwDQYJKoZIhvcNAQEFBQAwNDELMAkGA1UEBhMC
QkUxFjAUBgNVBAMTDUdvdmVybm1lbnQgQ0ExDTALBgNVBAUTBDIwMTEwHhcNMTMwMzE0MTMwMjU5
WhcNMTYwNjE0MTMwMjU5WjCBszEfMB0GA1UEAxMWQ0JFPTA4MDkzOTQ0MjcsIElBTUFDQzELMAkG
A1UEBhMCQkUxDzANBgNVBAsTBklBTUFDQzEXMBUGA1UECxMOQ0JFPTA4MDkzOTQ0MjcxGTAXBgNV
BAsTEEVIRUFMVEgtUExBVEZPUk0xITAfBgNVBAsTGGVIZWFsdGgtcGxhdGZvcm0gQmVsZ2l1bTEb
MBkGA1UEChMSRmVkZXJhbCBHb3Zlcm5tZW50MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAhRLVuRRL5plr0BxsyB2kESDaIYysvgXR3B8LuzV19C6BPF4A6lBFh1fF915o3OCh8T54Icg0
K6WQPwy149dxPOTeWnDLqPGU0A+PDg5op3xK83XMmMOB2gMZz/wwaVS9JScpQ6ltPauaQ8xdAR52
5ifnQ379cexH2fX5kFP3bV2mS14/wvcyZI6MMYgebj69wuF7214WSlFi9w6/uzmKcmYHQV0B3wXG
c0nH/UjzOgEGKW40fjgkyTHTbRLpmERMbaZ7hl8dUB1RDbV6yS1wj7M7Np0abOujTRTTSh/wmVj+
N5Fni81uzLK7J/oKrBk+pmDwWFGu+dvuqBa8sfkuXwIDAQABo4IBZzCCAWMwHwYDVR0jBBgwFoAU
x6NGme6ot+h9Jfmf6ZpFddTOU3owbgYIKwYBBQUHAQEEYjBgMDYGCCsGAQUFBzAChipodHRwOi8v
Y2VydHMucGtpLmJlbGdpdW0uYmUvYmVsZ2l1bXJzMi5jcnQwJgYIKwYBBQUHMAGGGmh0dHA6Ly9v
Y3NwLnBraS5iZWxnaXVtLmJlMAkGA1UdEwQCMAAwRAYDVR0gBD0wOzA5BgdgOAkBAQMEMC4wLAYI
KwYBBQUHAgEWIGh0dHA6Ly9yZXBvc2l0b3J5LnBraS5iZWxnaXVtLmJlMD0GA1UdHwQ2MDQwMqAw
oC6GLGh0dHA6Ly9jcmwucGtpLmJlbGdpdW0uYmUvZ292ZXJubWVudDIwMTEuY3JsMA4GA1UdDwEB
/wQEAwIE8DARBglghkgBhvhCAQEEBAMCBaAwHQYDVR0OBBYEFONbdP3Yh3kIQwo3DnDRa5xntT1b
MA0GCSqGSIb3DQEBBQUAA4IBAQCEXq0MRjozBI00x3ojjAUvCSEsROmo9bDnGUFB0xsMqNEpW2Nq
MM/Vy19ESPUpbBx8YoTcZyb2klOTRX7Akwms0vfzQJ1uoxLp0vzS1A4GJ/pZHU4XDGikg1JRybLn
pzda3pLXG7N4ds+PoJaYcW1bRHZxs+/MiUVKWg52jV9usAYNu+1/VS+O+aoysg9G51HkVpKPFe/o
YKz1NYGIIYNz+VFLdRsTlpeY9LEQPajKlD0CU6jjxSdwDFTUO/uaTgdShkqTFmIEw/TYCYMH8pD7
bTwOFcKJIIxHNNXFAaI5rUN6VOtL4Y5JCcurIOPJF6tH6IWO4c7Tr+1w6VZUUrxl</ds:X509Certificate>
			</ds:X509Data>
		</ds:KeyInfo>
	</ds:Signature>
</saml1:Assertion>