<?xml version="1.0" encoding="UTF-8"?>
<md:EntityDescriptor xmlns:md="urn:oasis:names:tc:SAML:2.0:metadata" entityID="https://www.digicert.com/sso">
  <md:Extensions>
    <mdrpi:RegistrationInfo xmlns:mdrpi="urn:oasis:names:tc:SAML:metadata:rpi" registrationAuthority="http://eduid.at" registrationInstant="2015-04-09T08:51:55Z"/>
  </md:Extensions>
  <md:SPSSODescriptor AuthnRequestsSigned="true" WantAssertionsSigned="false" protocolSupportEnumeration="urn:oasis:names:tc:SAML:2.0:protocol">
    <md:Extensions>
      <mdui:UIInfo xmlns:mdui="urn:oasis:names:tc:SAML:metadata:ui">
        <mdui:DisplayName xml:lang="en">DigiCert's TCS Portal</mdui:DisplayName>
        <mdui:Description xml:lang="en">Members from TCS-subscribing institutions can request personal, e-science and server certificates here.</mdui:Description>
        <mdui:Logo height="386" width="500">https://www.terena.org/news/img.php?file_id=1793</mdui:Logo>
      </mdui:UIInfo>
    </md:Extensions>
    <md:KeyDescriptor use="signing">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIFHzCCBAegAwIBAgIQDSPffA+3kdjXI6kqvoyBtDANBgkqhkiG9w0BAQsFADBl
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSQwIgYDVQQDExtEaWdpQ2VydCBTSEEyIEFzc3VyZWQg
SUQgQ0EwHhcNMTUwNDA3MDAwMDAwWhcNMTgwNzA1MTIwMDAwWjBtMQswCQYDVQQG
EwJVUzENMAsGA1UECBMEVXRhaDENMAsGA1UEBxMETGVoaTEXMBUGA1UEChMORGln
aUNlcnQsIEluYy4xJzAlBgNVBAMTHkRpZ2lDZXJ0IFNBTUwgU2VydmljZSBQcm92
aWRlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN/+/QfL6NXaO4Ob
gIzarBuLusqybTeFB5aRQRaTjYUGwTxbVSZWcKZFrfoki0InkQ4ez4+NGTglmObF
AUXafigKICJx7D1LzKfHSETIZmxODC7ztS1LAEa2YF+bSny+UqjC8iBpVSnOPuzY
emIntQGlgTC60QbGZ4jWGpAh/E4vuV+1ZEJlBMdo8OyVX7OKLqx0IZYnc5Ms8Q+P
8fQVAMmmkxqnDWQJG7+Dg95Ir8yP9IqBPFgW/oYmiiu9hJgg5Fw79FRVSbR4AM7m
H43grZdYwh2QhiBHe1RNMqSq8iqwRfQdgHCaXvTrAYRetXPAYl2aDZ5v+hiwYFeU
Da+yfCECAwEAAaOCAcEwggG9MB8GA1UdIwQYMBaAFOcCI4AAT9jXvJQL2T90OUky
PIp5MB0GA1UdDgQWBBTSQiXTihRDi2udzXW9NIwsexMenTAMBgNVHRMBAf8EAjAA
MA4GA1UdDwEB/wQEAwIEsDATBgNVHSUEDDAKBggrBgEFBQcDAjBCBgNVHSAEOzA5
MDcGCWCGSAGG/WwGATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2Vy
dC5jb20vQ1BTMIGIBgNVHR8EgYAwfjA9oDugOYY3aHR0cDovL2NybDMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0U0hBMkFzc3VyZWRJRENBLWcxLmNybDA9oDugOYY3aHR0
cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMkFzc3VyZWRJRENBLWcx
LmNybDB5BggrBgEFBQcBAQRtMGswJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp
Z2ljZXJ0LmNvbTBDBggrBgEFBQcwAoY3aHR0cDovL2NhY2VydHMuZGlnaWNlcnQu
Y29tL0RpZ2lDZXJ0U0hBMkFzc3VyZWRJRENBLmNydDANBgkqhkiG9w0BAQsFAAOC
AQEAza2jiq0WUEas3Ou70GkX9A2U9IkgFhYj7LsR2hxfwlnl/vDvHHxzZWuOJLIR
YN4VEY6B+/vl8P2p2OdjIMATba5rqMmho+UkF7p7I0Auwc18oQ9fzZRq8ul+xtIX
OiC2mZ2dG5VUXk1eR7qAKafGoNkOWzY6K0yb7NlUtGQDbZ5kBUqxH7z1uIPtjEBx
jv9ka0zHozKT+/vtNbAta7iuQtM05y2fSjXLeGpcTxnootfcFJtbpxiODd77a1Ax
0b2CWHv1aZaDQHlMjsf1ZaVPjHkgLlTFAtgzceimrdGM7PM/EHUFHP94H1EggcYt
n4mgYE+xr/VoR6tzNtvfyLXqxA==</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:KeyDescriptor use="encryption">
      <ds:KeyInfo xmlns:ds="http://www.w3.org/2000/09/xmldsig#">
        <ds:X509Data>
          <ds:X509Certificate>MIIFHzCCBAegAwIBAgIQDSPffA+3kdjXI6kqvoyBtDANBgkqhkiG9w0BAQsFADBl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</ds:X509Certificate>
        </ds:X509Data>
      </ds:KeyInfo>
    </md:KeyDescriptor>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.digicert.com/sso/saml/SingleLogout"/>
    <md:SingleLogoutService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect" Location="https://www.digicert.com/sso/saml/SingleLogout"/>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:transient</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:2.0:nameid-format:persistent</md:NameIDFormat>
    <md:NameIDFormat>urn:oasis:names:tc:SAML:1.1:nameid-format:X509SubjectName</md:NameIDFormat>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST" Location="https://www.digicert.com/sso/saml/SSO" index="0" isDefault="true"/>
    <md:AssertionConsumerService Binding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Artifact" Location="https://www.digicert.com/sso/saml/SSO" index="1"/>
    <md:AttributeConsumingService index="0">
      <md:ServiceName xml:lang="en">DigiCert's TCS Portal</md:ServiceName>
      <md:RequestedAttribute FriendlyName="eduPersonPrincipalName" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.6" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
      <md:RequestedAttribute FriendlyName="displayName" Name="urn:oid:2.16.840.1.113730.3.1.241" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
      <md:RequestedAttribute FriendlyName="mail" Name="urn:oid:0.9.2342.19200300.100.1.3" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
      <md:RequestedAttribute FriendlyName="schacHomeOrganization" Name="urn:oid:1.3.6.1.4.1.25178.1.2.9" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true"/>
      <md:RequestedAttribute FriendlyName="eduPersonEntitlement" Name="urn:oid:1.3.6.1.4.1.5923.1.1.1.7" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri" isRequired="true">
        <saml:AttributeValue xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">urn:mace:terena.org:tcs:personal-user</saml:AttributeValue>
        <saml:AttributeValue xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">urn:mace:terena.org:tcs:escience-user</saml:AttributeValue>
      </md:RequestedAttribute>
    </md:AttributeConsumingService>
  </md:SPSSODescriptor>
  <md:Organization>
    <md:OrganizationName xml:lang="en">DigiCert Inc.</md:OrganizationName>
    <md:OrganizationDisplayName xml:lang="en">DigiCert</md:OrganizationDisplayName>
    <md:OrganizationURL xml:lang="en">https://www.digicert.com/</md:OrganizationURL>
  </md:Organization>
</md:EntityDescriptor>