Index: fedd/abac-src/ttg/test/rtml/ussh/signed-ussh.xml
===================================================================
--- fedd/abac-src/ttg/test/rtml/ussh/signed-ussh.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
+++ fedd/abac-src/ttg/test/rtml/ussh/signed-ussh.xml	(revision 8780cbecc6db2bdc2b9ef31eec6e5209ad3bff15)
@@ -0,0 +1,308 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<CredentialStore xmlns="http://crypto.stanford.edu/dc/RTMLv1.0" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://crypto.stanford.edu/dc/RTMLv1.0
+  file:///home/jay/rtml/schemas/RTMLv1.0q.xsd">
+<ApplicationDomainSpecification id="sfUaDpAeZKehc+igVGW/SulU+PY=" uri="" xmlns="">
+		<RoleDeclaration name="friendly" xmlns="">
+			<Plain issuerTraces="all" subjectTraces="none" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="getsSLocs" xmlns="">
+			<Plain issuerTraces="def" subjectTraces="none" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacCom" xmlns="">
+			<Plain issuerTraces="def" subjectTraces="none" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="usr" xmlns="">
+			<Plain issuerTraces="none" subjectTraces="all" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetTacUsr" xmlns="">
+			<Plain issuerTraces="none" subjectTraces="all" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="NRetUSTacCom" xmlns="">
+			<Plain issuerTraces="none" subjectTraces="all" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="assignedNRet" xmlns="">
+			<Plain issuerTraces="none" subjectTraces="all" xmlns=""/>
+		</RoleDeclaration>
+		<RoleDeclaration name="friendlyUsr" xmlns="">
+			<Plain issuerTraces="none" subjectTraces="all" xmlns=""/>
+		</RoleDeclaration>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:Reference URI="#xpointer(/)" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:Transforms xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:Transforms>
+<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:DigestValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:Reference>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+</ds:KeyInfo>
+</ds:Signature><ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:Reference URI="#xpointer(/)" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:Transforms xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:Transforms>
+<ds:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:DigestValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:Reference>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+</ds:KeyInfo>
+</ds:Signature></ApplicationDomainSpecification>
+<Credential id="FakeHashCredential01" xmlns="">
+		<!-- USN.assignedNRet <- USSH -->
+		<Preamble xmlns="">
+			<ImportDomain idref="sfUaDpAeZKehc+igVGW/SulU+PY" name="s" xmlns=""/>
+			<Principal shortName="USN" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyUSN</KeyHash>
+			</Principal>
+			<Principal shortName="USSH" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyUSSH</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer xmlns="">
+			<PrincipalRef shortName="USN" xmlns=""/>
+		</Issuer>
+		<SimpleMember xmlns="">
+			<HeadRoleTerm domain="s" name="assignedNRet" xmlns=""/>
+			<PrincipalRef shortName="USSH" xmlns=""/>
+		</SimpleMember>
+		<ValidityTime xmlns="">
+			<IssueTime xmlns="">2002-09-01T13:20:00</IssueTime>
+			<NotAfter xmlns="">2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">WiN7isNRlR968uck+pYDNorfGMVKG8WunEWMx9GXJeKC6tS5C6IUcw==</ds:SignatureValue>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Data xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Certificate xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+MIIC+zCCArkCBD6AqGQwCwYHKoZIzjgEAwUAMGMxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdVbmtu
+b3duMRAwDgYDVQQHEwdVbmtub3duMRAwDgYDVQQKEwdVbmtub3duMRAwDgYDVQQLEwdVbmtub3du
+MQwwCgYDVQQDEwNVU04wHhcNMDMwMzI1MTkwNTA4WhcNMDMwNjIzMTkwNTA4WjBjMQswCQYDVQQG
+EwJVUzEQMA4GA1UECBMHVW5rbm93bjEQMA4GA1UEBxMHVW5rbm93bjEQMA4GA1UEChMHVW5rbm93
+bjEQMA4GA1UECxMHVW5rbm93bjEMMAoGA1UEAxMDVVNOMIIBuDCCASwGByqGSM44BAEwggEfAoGB
+AP1/U4EddRIpUt9KnC7s5Of2EbdSPO9EAMMeP4C2USZpRV1AIlH7WT2NWPq/xfW6MPbLm1Vs14E7
+gB00b/JmYLdrmVClpJ+f6AR7ECLCT7up1/63xhv4O1fnxqimFQ8E+4P208UewwI1VBNaFpEy9nXz
+rith1yrv8iIDGZ3RSAHHAhUAl2BQjxUjC8yykrmCouuEC/BYHPUCgYEA9+GghdabPd7LvKtcNrhX
+uXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6EwoFhO3zwkyjMim4TwWeotUfI0o
+4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/hWuWfBpKLZl6Ae1UlZAFMO/7PSSoD
+gYUAAoGBAKC9uuqy7uEA61tBQFIR6TQpNXJhe0SXk6yiduT+hetf0SsaFJ4r8sLGZFol5PEbACyR
+v/HZngOaQEO2GTzZ//Q/v1mhP3GtRV/6sKqkIteKbqqqBU58143BUtltk8FxCEHuGuCKs044pMnZ
+LjhG9WE+EW3ksK1CxOEpPCjV0TwoMAsGByqGSM44BAMFAAMvADAsAhQrONJ2jp9AE1TvYsxF83Zk
+05py6wIUSPZuM85meqe7h7+CZNLTAVIZ8vI=
+</ds:X509Certificate>
+</ds:X509Data>
+</ds:KeyInfo>
+</ds:Signature></Credential>
+<Credential id="FakeHashCredential02" xmlns="">
+		<!-- US.usr <- USSH -->
+		<Preamble xmlns="">
+			<ImportDomain idref="sfUaDpAeZKehc+igVGW/SulU+PY=" name="s" xmlns=""/>
+			<Principal shortName="USSH" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyUSSH</KeyHash>
+			</Principal>
+			<Principal shortName="US" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer xmlns="">
+			<PrincipalRef shortName="US" xmlns=""/>
+		</Issuer>
+		<SimpleMember xmlns="">
+			<HeadRoleTerm domain="s" name="usr" xmlns=""/>
+			<PrincipalRef shortName="USSH" xmlns=""/>
+		</SimpleMember>
+		<ValidityTime xmlns="">
+			<IssueTime xmlns="">2002-09-01T13:20:00</IssueTime>
+			<NotAfter xmlns="">2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">CUMOleTexvXafsquxW0fUZKn1zVuMqFRE/sZdQ/65tVu7Y+MqQw78g==</ds:SignatureValue>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Data xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Certificate xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+MIIC+TCCArcCBD6AqHIwCwYHKoZIzjgEAwUAMGIxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdVbmtu
+b3duMRAwDgYDVQQHEwdVbmtub3duMRAwDgYDVQQKEwdVbmtub3duMRAwDgYDVQQLEwdVbmtub3du
+MQswCQYDVQQDEwJVUzAeFw0wMzAzMjUxOTA1MjJaFw0wMzA2MjMxOTA1MjJaMGIxCzAJBgNVBAYT
+AlVTMRAwDgYDVQQIEwdVbmtub3duMRAwDgYDVQQHEwdVbmtub3duMRAwDgYDVQQKEwdVbmtub3du
+MRAwDgYDVQQLEwdVbmtub3duMQswCQYDVQQDEwJVUzCCAbgwggEsBgcqhkjOOAQBMIIBHwKBgQD9
+f1OBHXUSKVLfSpwu7OTn9hG3UjzvRADDHj+AtlEmaUVdQCJR+1k9jVj6v8X1ujD2y5tVbNeBO4Ad
+NG/yZmC3a5lQpaSfn+gEexAiwk+7qdf+t8Yb+DtX58aophUPBPuD9tPFHsMCNVQTWhaRMvZ1864r
+Ydcq7/IiAxmd0UgBxwIVAJdgUI8VIwvMspK5gqLrhAvwWBz1AoGBAPfhoIXWmz3ey7yrXDa4V7l5
+lK+7+jrqgvlXTAs9B4JnUVlXjrrUWU/mcQcQgYC0SRZxI+hMKBYTt88JMozIpuE8FnqLVHyNKOCj
+rh4rs6Z1kW6jfwv6ITVi8ftiegEkO8yk8b6oUZCJqIPf4VrlnwaSi2ZegHtVJWQBTDv+z0kqA4GF
+AAKBgQCpfE80whmY35VhJRLufdz/Wjt0NTbR/Tqw04yH3BJQlE3TX+aJa0AkbsmxitRXKwm6ySox
+cE+TKHM16aHZ62/D0a0K5SkpCHD+DxSu4YVWUOwAJLV+a2P+iwPYSDEwiXQbgoP0rDCb50ha15Bl
+lDNhQErHk6vCgRu0wcL0Ms+VpTALBgcqhkjOOAQDBQADLwAwLAIUTfFudeSD58KPqSB7sLUDNbe8
+FqYCFEFFs0tBkHCeBdKszRWdVHybFx1G
+</ds:X509Certificate>
+</ds:X509Data>
+</ds:KeyInfo>
+</ds:Signature></Credential>
+<Credential id="FakeHashCredential03" xmlns="">
+		<!-- USEUCOM.NRetUSTacCom <- RADMSmith -->
+		<Preamble xmlns="">
+			<ImportDomain idref="sfUaDpAeZKehc+igVGW/SulU+PY=" name="s" xmlns=""/>
+			<Principal shortName="USEUCOM" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyUSEUCOM</KeyHash>
+			</Principal>
+			<Principal shortName="RADMSmith" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyRADMSmith</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer xmlns="">
+			<PrincipalRef shortName="USEUCOM" xmlns=""/>
+		</Issuer>
+		<SimpleMember xmlns="">
+			<HeadRoleTerm domain="s" name="NRetUSTacCom" xmlns=""/>
+			<PrincipalRef shortName="RADMSmith" xmlns=""/>
+		</SimpleMember>
+		<ValidityTime xmlns="">
+			<IssueTime xmlns="">2002-09-01T13:20:00</IssueTime>
+			<NotAfter xmlns="">2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">hoAe74xINpvdOzo8P//t46EY5jRjS3Stqz9b45NJRFzeif+T10vTgw==</ds:SignatureValue>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Data xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Certificate xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+MIIDDDCCAsoCBD6AqIMwCwYHKoZIzjgEAwUAMGwxEDAOBgNVBAYTB1Vua25vd24xEDAOBgNVBAgT
+B1Vua25vd24xEDAOBgNVBAcTB1Vua25vd24xEDAOBgNVBAoTB1Vua25vd24xEDAOBgNVBAsTB1Vu
+a25vd24xEDAOBgNVBAMTB3VzZXVjb20wHhcNMDMwMzI1MTkwNTM5WhcNMDMwNjIzMTkwNTM5WjBs
+MRAwDgYDVQQGEwdVbmtub3duMRAwDgYDVQQIEwdVbmtub3duMRAwDgYDVQQHEwdVbmtub3duMRAw
+DgYDVQQKEwdVbmtub3duMRAwDgYDVQQLEwdVbmtub3duMRAwDgYDVQQDEwd1c2V1Y29tMIIBtzCC
+ASwGByqGSM44BAEwggEfAoGBAP1/U4EddRIpUt9KnC7s5Of2EbdSPO9EAMMeP4C2USZpRV1AIlH7
+WT2NWPq/xfW6MPbLm1Vs14E7gB00b/JmYLdrmVClpJ+f6AR7ECLCT7up1/63xhv4O1fnxqimFQ8E
++4P208UewwI1VBNaFpEy9nXzrith1yrv8iIDGZ3RSAHHAhUAl2BQjxUjC8yykrmCouuEC/BYHPUC
+gYEA9+GghdabPd7LvKtcNrhXuXmUr7v6OuqC+VdMCz0HgmdRWVeOutRZT+ZxBxCBgLRJFnEj6Ewo
+FhO3zwkyjMim4TwWeotUfI0o4KOuHiuzpnWRbqN/C/ohNWLx+2J6ASQ7zKTxvqhRkImog9/hWuWf
+BpKLZl6Ae1UlZAFMO/7PSSoDgYQAAoGALtnRkwjZAILMKKL4USbwfTREsv3HjUw0SITuTX9kmycF
+57zzttWOpszz9HZTVvpMMCyDGr3M0US/flLBXEw4/CSzbOVy91LY2tjt+RDs88DJ8sfi3r81XksK
+BieKuVhVh8o9h+LZF8hVZcGUk5Ry6W62B4sSwVY+9rqQ9RCDnxYwCwYHKoZIzjgEAwUAAy8AMCwC
+FHkk/ZoCY+1Nps6OsbV/fFB1X0RwAhQqFKyWHJi5gay8+cZiVg4ur596sA==
+</ds:X509Certificate>
+</ds:X509Data>
+</ds:KeyInfo>
+</ds:Signature></Credential>
+<Credential id="FakeHashCredential04" xmlns="">
+		<!-- RADMSmith.NRetTacUsr <- USN.assignedNRet -->
+		<Preamble xmlns="">
+			<ImportDomain idref="sfUaDpAeZKehc+igVGW/SulU+PY=" name="s" xmlns=""/>
+			<Principal shortName="RADMSmith" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyRADMSmith</KeyHash>
+			</Principal>
+			<Principal shortName="USN" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyUSN</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer xmlns="">
+			<PrincipalRef shortName="RADMSmith" xmlns=""/>
+		</Issuer>
+		<SimpleContainment xmlns="">
+			<HeadRoleTerm domain="s" name="NRetTacUsr" xmlns=""/>
+			<ExternalRole xmlns="">
+				<PrincipalRef shortName="USN" xmlns=""/>
+				<RoleTerm domain="s" name="assignedNRet" xmlns=""/>
+			</ExternalRole>
+		</SimpleContainment>
+		<ValidityTime xmlns="">
+			<IssueTime xmlns="">2002-09-01T13:20:00</IssueTime>
+			<NotAfter xmlns="">2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">Eg5rggOp2FE3x+f5dlp4bCNJyzeJtgJmyZpQxhP2vOhrLW/Pv5L8hQ==</ds:SignatureValue>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Data xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Certificate xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+MIIDETCCAs8CBD6AqJQwCwYHKoZIzjgEAwUAMG4xEDAOBgNVBAYTB1Vua25vd24xEDAOBgNVBAgT
+B1Vua25vd24xEDAOBgNVBAcTB1Vua25vd24xEDAOBgNVBAoTB1Vua25vd24xEDAOBgNVBAsTB1Vu
+a25vd24xEjAQBgNVBAMTCVJBZG1TbWl0aDAeFw0wMzAzMjUxOTA1NTZaFw0wMzA2MjMxOTA1NTZa
+MG4xEDAOBgNVBAYTB1Vua25vd24xEDAOBgNVBAgTB1Vua25vd24xEDAOBgNVBAcTB1Vua25vd24x
+EDAOBgNVBAoTB1Vua25vd24xEDAOBgNVBAsTB1Vua25vd24xEjAQBgNVBAMTCVJBZG1TbWl0aDCC
+AbgwggEsBgcqhkjOOAQBMIIBHwKBgQD9f1OBHXUSKVLfSpwu7OTn9hG3UjzvRADDHj+AtlEmaUVd
+QCJR+1k9jVj6v8X1ujD2y5tVbNeBO4AdNG/yZmC3a5lQpaSfn+gEexAiwk+7qdf+t8Yb+DtX58ao
+phUPBPuD9tPFHsMCNVQTWhaRMvZ1864rYdcq7/IiAxmd0UgBxwIVAJdgUI8VIwvMspK5gqLrhAvw
+WBz1AoGBAPfhoIXWmz3ey7yrXDa4V7l5lK+7+jrqgvlXTAs9B4JnUVlXjrrUWU/mcQcQgYC0SRZx
+I+hMKBYTt88JMozIpuE8FnqLVHyNKOCjrh4rs6Z1kW6jfwv6ITVi8ftiegEkO8yk8b6oUZCJqIPf
+4VrlnwaSi2ZegHtVJWQBTDv+z0kqA4GFAAKBgQC7vIiQvH1Eh8HfUBpE7OMm82s3t574RmlbEMPW
+taFHHS1soKbi+czvaw2A+cE7GLFTHKh8Wr8frCBYOSxBmvxzLr1VsIdDiZ3ogzZVOzpM7L0BNQmF
+T9VcaoallPlYP3u5YdBTQFsO1zUK3n2Zdh74BUolr5tlNAdTiBZkFHI9aDALBgcqhkjOOAQDBQAD
+LwAwLAIUbopgJPvB3wnA5ZrCUEP3BG70OMcCFAqcZQJKiz6CY1oFxNH7Y0uTQxxM
+</ds:X509Certificate>
+</ds:X509Data>
+</ds:KeyInfo>
+</ds:Signature></Credential>
+<Credential id="FakeHashCredential05" xmlns="">
+		<!-- US.friendly <- SE -->
+		<Preamble xmlns="">
+			<ImportDomain idref="sfUaDpAeZKehc+igVGW/SulU+PY=" name="s" xmlns=""/>
+			<Principal shortName="SE" xmlns="">
+				<KeyHash xmlns="">FakeHashKeySE</KeyHash>
+			</Principal>
+			<Principal shortName="US" xmlns="">
+				<KeyHash xmlns="">FakeHashKeyUS</KeyHash>
+			</Principal>
+		</Preamble>
+		<Issuer xmlns="">
+			<PrincipalRef shortName="US" xmlns=""/>
+		</Issuer>
+		<SimpleMember xmlns="">
+			<HeadRoleTerm domain="s" name="friendly" xmlns=""/>
+			<PrincipalRef shortName="SE" xmlns=""/>
+		</SimpleMember>
+		<ValidityTime xmlns="">
+			<IssueTime xmlns="">2002-09-01T13:20:00</IssueTime>
+			<NotAfter xmlns="">2004-09-01T13:20:00</NotAfter>
+		</ValidityTime>
+	<ds:Signature xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:SignedInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:CanonicalizationMethod Algorithm="http://www.w3.org/TR/2001/REC-xml-c14n-20010315" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+<ds:SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#dsa-sha1" xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#"/>
+</ds:SignedInfo>
+<ds:SignatureValue xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">lcSNxI0Z7pso9dP0zHsCoZv/65paEmzz38NPk4OBWQh30cwkaVcS9w==</ds:SignatureValue>
+<ds:KeyInfo xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Data xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+<ds:X509Certificate xmlns="" xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
+MIIC+TCCArcCBD6AqHIwCwYHKoZIzjgEAwUAMGIxCzAJBgNVBAYTAlVTMRAwDgYDVQQIEwdVbmtu
+b3duMRAwDgYDVQQHEwdVbmtub3duMRAwDgYDVQQKEwdVbmtub3duMRAwDgYDVQQLEwdVbmtub3du
+MQswCQYDVQQDEwJVUzAeFw0wMzAzMjUxOTA1MjJaFw0wMzA2MjMxOTA1MjJaMGIxCzAJBgNVBAYT
+AlVTMRAwDgYDVQQIEwdVbmtub3duMRAwDgYDVQQHEwdVbmtub3duMRAwDgYDVQQKEwdVbmtub3du
+MRAwDgYDVQQLEwdVbmtub3duMQswCQYDVQQDEwJVUzCCAbgwggEsBgcqhkjOOAQBMIIBHwKBgQD9
+f1OBHXUSKVLfSpwu7OTn9hG3UjzvRADDHj+AtlEmaUVdQCJR+1k9jVj6v8X1ujD2y5tVbNeBO4Ad
+NG/yZmC3a5lQpaSfn+gEexAiwk+7qdf+t8Yb+DtX58aophUPBPuD9tPFHsMCNVQTWhaRMvZ1864r
+Ydcq7/IiAxmd0UgBxwIVAJdgUI8VIwvMspK5gqLrhAvwWBz1AoGBAPfhoIXWmz3ey7yrXDa4V7l5
+lK+7+jrqgvlXTAs9B4JnUVlXjrrUWU/mcQcQgYC0SRZxI+hMKBYTt88JMozIpuE8FnqLVHyNKOCj
+rh4rs6Z1kW6jfwv6ITVi8ftiegEkO8yk8b6oUZCJqIPf4VrlnwaSi2ZegHtVJWQBTDv+z0kqA4GF
+AAKBgQCpfE80whmY35VhJRLufdz/Wjt0NTbR/Tqw04yH3BJQlE3TX+aJa0AkbsmxitRXKwm6ySox
+cE+TKHM16aHZ62/D0a0K5SkpCHD+DxSu4YVWUOwAJLV+a2P+iwPYSDEwiXQbgoP0rDCb50ha15Bl
+lDNhQErHk6vCgRu0wcL0Ms+VpTALBgcqhkjOOAQDBQADLwAwLAIUTfFudeSD58KPqSB7sLUDNbe8
+FqYCFEFFs0tBkHCeBdKszRWdVHybFx1G
+</ds:X509Certificate>
+</ds:X509Data>
+</ds:KeyInfo>
+</ds:Signature></Credential>
+</CredentialStore>
