<s:Envelope xmlns:s="http://schemas.xmlsoap.org /soap/envelope/"
          xmlns:sb="urn:liberty:sb:20 05-11"
          xmlns:pp="urn:liberty:id-sis-pp:2003- 08"
          xmlns:sec="urn:liberty:security:2005-11"
          xmlns:wsse="http://docs.oasis-open.org/wss/20 04/01/oasis-200401-wss-wssecurity-secext-1.0.xsd"
          xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis- 200401-wss-wssecurity-utility-1.0.xsd"
          xmlns:wsa="http://www.w3.org/2005/08/ addressing">
<s:Header>
  <wsa:MessageID wsu:Id="mid">...</wsa:MessageID>
  <wsa:To wsu:Id="to">...</wsa:To>
  <wsa:Action wsu:Id="action">...</wsa:Action>
  <wsse:Security mustUnderstand="1">
   <wsu:Timestamp wsu:Id="ts">
     <wsu:Created>2005-06-17T04:49:17Z</wsu:Created >
   </wsu:Timestamp>
   <wsse:BinarySecurityToken
       ValueType="http://docs.oasis-open.org/wss/2004/0 1/oasis-200401-wss-x509-token-
rofile-1.0#X509v3"
       wsu:Id="X509Token"
       EncodingType="http://docs.oas is-open.org/wss/2004/01/oasis- 200401-wss-soap-message-securi
y-1.0#Base64Binary">
     MIIB9zCCAWSgAwIBAgIQ...
   </wsse:BinarySecurityToken>
   <ds:Signature xmlns:ds="http://www.w3.org/2000/09/x mldsig#">
     <ds:SignedInfo>
       <!-- in general include a ds:Reference for each wsa: header
           added according to SOAP binding -->
       <!-- include the MessageID in the signature -->
       <ds:Reference URI="#mid">...</ds:Reference>
       <!-- include the To in the signature -->
       <ds:Reference URI="#to">...</ds:Reference>
       <!-- include the Action in the signature -->
       <ds:Reference URI="#action">...</ds:Reference>
       <!-- include the Timestamp in the signature -->
       <ds:Reference URI="#ts">...</ds:Reference>
       <!-- bind the security token (thwart cert substitution attacks) -->
       <ds:Reference URI="#X509Token">
        <ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
        <ds:DigestValue>Ru4cAfeBABE...</ds:DigestValue>
       </ds:Reference>
       <!-- bind the body of the message -->
       <ds:Reference URI="#MsgBody">
        <ds:DigestMethod Algorithm="http://www.w3.org/ 2000/09/xmldsig#sha1"/>
        <ds:DigestValue>YgGfS0pi56pu...</ds:DigestValue>
       </ds:Reference>
     </ds:SignedInfo>
     <ds:KeyInfo>
       <wsse:SecurityTokenReference>
        <wsse:Reference URI="#X509Token" />
       </wsse:SecurityTokenReference>
     </ds:KeyInfo>
     <ds:SignatureValue>
       HJJWbvqW9E84vJVQkjjLLA6nNvBX7mY0 0TZhwBdFNDElgscSXZ5Ekw==
     </ds:SignatureValue>
   </ds:Signature>
  </wsse:Security>
</s:Header>
<s:Body wsu:Id="MsgBody">
   <xx:Query>
   </xx:Query>
 </s:Body>
</s:Envelope>
