SOAP Operation GetCards
Headers:
SOAPAction: "http://ws.gematik.de/conn/EventService/v7.2#GetCards"
Content-Type: text/xml; charset=utf-8
Body:
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
  <soap-env:Body>
    <ns0:GetCards xmlns:ns0="http://ws.gematik.de/conn/EventService/v7.2" 
mandant-wide="false">
      <conn:Context 
xmlns:conn="http://ws.gematik.de/conn/ConnectorContext/v2.0">
        <com:MandantId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">m1</com:MandantId>
        <com:ClientSystemId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">c1</com:ClientSystemI
d>
        <com:WorkplaceId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">w1</com:WorkplaceId>
        <com:UserId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">user1</com:UserId>
      </conn:Context>
    </ns0:GetCards>
  </soap-env:Body>
</soap-env:Envelope>

Response (0:00:00.141406):
Headers:
Server: nginx/1.23.4
Date: Sun, 08 Oct 2023 08:16:22 GMT
Content-Type: text/xml;charset=utf-8
Content-Length: 4501
Connection: keep-alive
Accept: text/xml, text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Expires: 0
SOAPAction: ""
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
X-XSS-Protection: 1; mode=block
Pragma: no-cache
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Body:
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
  <SOAP-ENV:Header/>
  <SOAP-ENV:Body>
    <ns6:GetCardsResponse 
xmlns:ns2="http://ws.gematik.de/conn/ConnectorCommon/v5.0" 
xmlns:ns3="http://ws.gematik.de/tel/error/v2.0" 
xmlns:ns4="http://ws.gematik.de/conn/CardServiceCommon/v2.0" 
xmlns:ns5="http://ws.gematik.de/conn/CardService/v8.1" 
xmlns:ns6="http://ws.gematik.de/conn/EventService/v7.2">
      <ns2:Status>
        <ns2:Result>OK</ns2:Result>
      </ns2:Status>
      <ns5:Cards>
        <ns5:Card>
          <ns2:CardHandle>SMC-KT-8</ns2:CardHandle>
          <ns4:CardType>SMC-KT</ns4:CardType>
          <ns5:CardVersion>
            <ns5:COSVersion>
              <ns5:Major>4</ns5:Major>
              <ns5:Minor>3</ns5:Minor>
              <ns5:Revision>2</ns5:Revision>
            </ns5:COSVersion>
            <ns5:ObjectSystemVersion>
              <ns5:Major>4</ns5:Major>
              <ns5:Minor>7</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:ObjectSystemVersion>
            <ns5:CardPTPersVersion>
              <ns5:Major>4</ns5:Major>
              <ns5:Minor>2</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:CardPTPersVersion>
            <ns5:ATRVersion>
              <ns5:Major>2</ns5:Major>
              <ns5:Minor>0</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:ATRVersion>
            <ns5:GDOVersion>
              <ns5:Major>1</ns5:Major>
              <ns5:Minor>0</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:GDOVersion>
          </ns5:CardVersion>
          <ns4:Iccsn>80276001011699900339</ns4:Iccsn>
          <ns4:CtId>b5126d2f-e07a-4831-a017-8e940544423b</ns4:CtId>
          <ns4:SlotId>1</ns4:SlotId>
          <ns5:InsertTime>2023-07-03T19:23:05.767Z</ns5:InsertTime>
          <ns5:CardHolderName>80276001011699900339</ns5:CardHolderName>
          <ns5:CertificateExpirationDate>2027-04-07Z</ns5:CertificateExpirationD
ate>
        </ns5:Card>
        <ns5:Card>
          <ns2:CardHandle>EGK-9</ns2:CardHandle>
          <ns4:CardType>EGK</ns4:CardType>
          <ns5:CardVersion>
            <ns5:COSVersion>
              <ns5:Major>0</ns5:Major>
              <ns5:Minor>0</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:COSVersion>
            <ns5:ObjectSystemVersion>
              <ns5:Major>4</ns5:Major>
              <ns5:Minor>4</ns5:Minor>
              <ns5:Revision>32</ns5:Revision>
            </ns5:ObjectSystemVersion>
            <ns5:LoggingVersion>
              <ns5:Major>1</ns5:Major>
              <ns5:Minor>32</ns5:Minor>
              <ns5:Revision>32</ns5:Revision>
            </ns5:LoggingVersion>
            <ns5:ATRVersion>
              <ns5:Major>2</ns5:Major>
              <ns5:Minor>32</ns5:Minor>
              <ns5:Revision>32</ns5:Revision>
            </ns5:ATRVersion>
            <ns5:GDOVersion>
              <ns5:Major>1</ns5:Major>
              <ns5:Minor>32</ns5:Minor>
              <ns5:Revision>32</ns5:Revision>
            </ns5:GDOVersion>
          </ns5:CardVersion>
          <ns4:Iccsn>80276881042001575452</ns4:Iccsn>
          <ns4:CtId>b5126d2f-e07a-4831-a017-8e940544423b</ns4:CtId>
          <ns4:SlotId>2</ns4:SlotId>
          <ns5:InsertTime>2023-07-03T19:23:05.885Z</ns5:InsertTime>
          <ns5:CardHolderName>Daniel Mustermann</ns5:CardHolderName>
          <ns5:Kvnr>T026540286</ns5:Kvnr>
          <ns5:CertificateExpirationDate>2028-02-07Z</ns5:CertificateExpirationD
ate>
        </ns5:Card>
        <ns5:Card>
          <ns2:CardHandle>HBA-10</ns2:CardHandle>
          <ns4:CardType>HBA</ns4:CardType>
          <ns5:CardVersion>
            <ns5:COSVersion>
              <ns5:Major>4</ns5:Major>
              <ns5:Minor>6</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:COSVersion>
            <ns5:ObjectSystemVersion>
              <ns5:Major>4</ns5:Major>
              <ns5:Minor>7</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:ObjectSystemVersion>
            <ns5:ATRVersion>
              <ns5:Major>2</ns5:Major>
              <ns5:Minor>0</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:ATRVersion>
            <ns5:GDOVersion>
              <ns5:Major>1</ns5:Major>
              <ns5:Minor>0</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:GDOVersion>
          </ns5:CardVersion>
          <ns4:Iccsn>80276883110000129111</ns4:Iccsn>
          <ns4:CtId>b5126d2f-e07a-4831-a017-8e940544423b</ns4:CtId>
          <ns4:SlotId>3</ns4:SlotId>
          <ns5:InsertTime>2023-07-03T19:23:06.138Z</ns5:InsertTime>
          <ns5:CardHolderName>Arzt Bernadette Birkengrund 
TEST-ONLY</ns5:CardHolderName>
          <ns5:CertificateExpirationDate>2028-01-25Z</ns5:CertificateExpirationD
ate>
        </ns5:Card>
        <ns5:Card>
          <ns2:CardHandle>SMC-B-11</ns2:CardHandle>
          <ns4:CardType>SMC-B</ns4:CardType>
          <ns5:CardVersion>
            <ns5:COSVersion>
              <ns5:Major>4</ns5:Major>
              <ns5:Minor>6</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:COSVersion>
            <ns5:ObjectSystemVersion>
              <ns5:Major>4</ns5:Major>
              <ns5:Minor>7</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:ObjectSystemVersion>
            <ns5:ATRVersion>
              <ns5:Major>2</ns5:Major>
              <ns5:Minor>0</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:ATRVersion>
            <ns5:GDOVersion>
              <ns5:Major>1</ns5:Major>
              <ns5:Minor>0</ns5:Minor>
              <ns5:Revision>0</ns5:Revision>
            </ns5:GDOVersion>
          </ns5:CardVersion>
          <ns4:Iccsn>80276883110000129116</ns4:Iccsn>
          <ns4:CtId>b5126d2f-e07a-4831-a017-8e940544423b</ns4:CtId>
          <ns4:SlotId>5</ns4:SlotId>
          <ns5:InsertTime>2023-07-03T19:23:06.446Z</ns5:InsertTime>
          <ns5:CardHolderName>Arztpraxis Bernadette Birkengrund 
TEST-ONLY</ns5:CardHolderName>
          <ns5:CertificateExpirationDate>2028-01-25Z</ns5:CertificateExpirationD
ate>
        </ns5:Card>
      </ns5:Cards>
    </ns6:GetCardsResponse>
  </SOAP-ENV:Body>
</SOAP-ENV:Envelope>

SOAP Operation ReadCardCertificate
Headers:
SOAPAction: 
"http://ws.gematik.de/conn/CertificateService/v6.0#ReadCardCertificate"
Content-Type: text/xml; charset=utf-8
Body:
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
  <soap-env:Body>
    <ns0:ReadCardCertificate 
xmlns:ns0="http://ws.gematik.de/conn/CertificateService/v6.0">
      <com:CardHandle 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">SMC-B-11</com:CardHan
dle>
      <conn:Context 
xmlns:conn="http://ws.gematik.de/conn/ConnectorContext/v2.0">
        <com:MandantId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">m1</com:MandantId>
        <com:ClientSystemId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">c1</com:ClientSystemI
d>
        <com:WorkplaceId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">w1</com:WorkplaceId>
        <com:UserId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">user1</com:UserId>
      </conn:Context>
      <ns0:CertRefList>
        <ns0:CertRef>C.AUT</ns0:CertRef>
      </ns0:CertRefList>
      <ns0:Crypt>RSA</ns0:Crypt>
    </ns0:ReadCardCertificate>
  </soap-env:Body>
</soap-env:Envelope>

Response (0:00:00.144274):
Headers:
Server: nginx/1.23.4
Date: Sun, 08 Oct 2023 08:16:22 GMT
Content-Type: text/xml;charset=utf-8
Content-Length: 2841
Connection: keep-alive
Accept: text/xml, text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Expires: 0
SOAPAction: ""
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
X-XSS-Protection: 1; mode=block
Pragma: no-cache
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Body:
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
  <SOAP-ENV:Header/>
  <SOAP-ENV:Body>
    <ns5:ReadCardCertificateResponse 
xmlns:ns2="http://ws.gematik.de/conn/ConnectorCommon/v5.0" 
xmlns:ns3="http://ws.gematik.de/tel/error/v2.0" 
xmlns:ns4="http://ws.gematik.de/conn/CertificateServiceCommon/v2.0" 
xmlns:ns5="http://ws.gematik.de/conn/CertificateService/v6.0">
      <ns2:Status>
        <ns2:Result>OK</ns2:Result>
      </ns2:Status>
      <ns4:X509DataInfoList>
        <ns4:X509DataInfo>
          <ns4:CertRef>C.AUT</ns4:CertRef>
          <ns4:X509Data>
            <ns4:X509IssuerSerial>
              <ns4:X509IssuerName>CN=GEM.SMCB-CA41 TEST-ONLY,OU=Institution des 
Gesundheitswesens-CA der Telematikinfrastruktur,O=gematik GmbH 
NOT-VALID,C=DE</ns4:X509IssuerName>
              <ns4:X509SerialNumber>732205226119364</ns4:X509SerialNumber>
            </ns4:X509IssuerSerial>
            <ns4:X509SubjectName>CN=Arztpraxis Bernadette Birkengrund 
TEST-ONLY,2.5.4.42=#0c0a4265726e616465747465,2.5.4.4=#0c0b4269726b656e6772756e64
,O=302326011 NOT-VALID,C=DE</ns4:X509SubjectName>
            <ns4:X509Certificate>MIIE9DCCA9ygAwIBAgIHApnv0GfQxDANBgkqhkiG9w0BAQs
FADCBmjELMAkGA1UEBhMCREUxHzAdBgNVBAoMFmdlbWF0aWsgR21iSCBOT1QtVkFMSUQxSDBGBgNVBAs
MP0luc3RpdHV0aW9uIGRlcyBHZXN1bmRoZWl0c3dlc2Vucy1DQSBkZXIgVGVsZW1hdGlraW5mcmFzdHJ
1a3R1cjEgMB4GA1UEAwwXR0VNLlNNQ0ItQ0E0MSBURVNULU9OTFkwHhcNMjMwMTI1MjMwMDAwWhcNMjg
wMTI1MjI1OTU5WjCBjDELMAkGA1UEBhMCREUxHDAaBgNVBAoMEzMwMjMyNjAxMSBOT1QtVkFMSUQxFDA
SBgNVBAQMC0JpcmtlbmdydW5kMRMwEQYDVQQqDApCZXJuYWRldHRlMTQwMgYDVQQDDCtBcnp0cHJheGl
zIEJlcm5hZGV0dGUgQmlya2VuZ3J1bmQgVEVTVC1PTkxZMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMII
BCgKCAQEArIBDR1/o5a185f82/GtnEVKxRhcNJps58UHHP10/KP8t3sHjXnvYDmlLVK3TXbEEco4+m0L
HZVEOkzzMEy4o3mUPP7Z5Hzc3UcTZW5txr/TZVIS/AJXnL8auCABdnKdANu5ONiq5g0mNmz4WC9vy84H
cilEInLi5Pz/1NgfYLXZhq8OTZm6jdeOY+2byLUAEFhiUYtE4Wnv+bVJaVmWwQGSFaIfL72vycFxyWU6
Fpcwyz75spuFsLgkPaTLe6LkEu8WNkw0XyTC4SPIsJl3YI0eu5lcJx02LwC6cTWS0P5UUWnDEKnIFIzf
IcALP5uLlvUUHfysXz6xmNJkItek0DQIDAQABo4IBSTCCAUUwDgYDVR0PAQH/BAQDAgWgMCAGA1UdIAQ
ZMBcwCgYIKoIUAEwEgSMwCQYHKoIUAEwETTATBgNVHSUEDDAKBggrBgEFBQcDAjBGBgUrJAgDAwQ9MDs
wOTA3MDUwMzAWDBRCZXRyaWVic3N0w6R0dGUgQXJ6dDAJBgcqghQATAQyEw4xLTItMjAyMzAxMjYtMTA
fBgNVHSMEGDAWgBS6+DpYEfaG6gSibcR667mz+ktvwjAsBgNVHR8EJTAjMCGgH6AdhhtodHRwOi8vZWh
jYS5nZW1hdGlrLmRlL2NybC8wOAYIKwYBBQUHAQEELDAqMCgGCCsGAQUFBzABhhxodHRwOi8vZWhjYS5
nZW1hdGlrLmRlL29jc3AvMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFBxLUIcqfkCD6w2n88DYlYdzLFy
kMA0GCSqGSIb3DQEBCwUAA4IBAQCXqR97QP6WfgvCEEBeQxdY6GUTr+ClTDdxkxxLryi/YbQO1i3W5ej
FenlNPkqlpGaCZvOEhMKaqG5Ac8lF9EhBIx4EYCw71qPqKJEJGxBv22ljO65zaGVG1cXgm3VYaV1+9sW
/fjLntpKfCBVno8u2xAT0e1tL1javIfTk+XrRrNugVLYVwjV3EmHodwbQWqNON4jLSnfHO6Cx4yD4+bc
/Kc9/6HUqmB2DkVfYi4w4AQRpGFTV2sOM5t4qC6p5eMKLPSAIG4hAgpSeBwEHRxQzue8dvmKpQH9rSES
J7UZ6nW9+z36FMQA7AmSZNYfcSRuCVhASSBjPELph3qkIwe0t</ns4:X509Certificate>
          </ns4:X509Data>
        </ns4:X509DataInfo>
      </ns4:X509DataInfoList>
    </ns5:ReadCardCertificateResponse>
  </SOAP-ENV:Body>
</SOAP-ENV:Envelope>

SOAP Operation ExternalAuthenticate
Headers:
SOAPAction: 
"http://ws.gematik.de/conn/SignatureService/v7.4#ExternalAuthenticate"
Content-Type: text/xml; charset=utf-8
Body:
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
  <soap-env:Body>
    <ns0:ExternalAuthenticate 
xmlns:ns0="http://ws.gematik.de/conn/SignatureService/v7.4">
      <com:CardHandle 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">SMC-B-11</com:CardHan
dle>
      <conn:Context 
xmlns:conn="http://ws.gematik.de/conn/ConnectorContext/v2.0">
        <com:MandantId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">m1</com:MandantId>
        <com:ClientSystemId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">c1</com:ClientSystemI
d>
        <com:WorkplaceId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">w1</com:WorkplaceId>
        <com:UserId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">user1</com:UserId>
      </conn:Context>
      <ns0:OptionalInputs>
        <ns1:SignatureType 
xmlns:ns1="urn:oasis:names:tc:dss:1.0:core:schema">urn:ietf:rfc:3447</ns1:Signat
ureType>
        <ns0:SignatureSchemes>RSASSA-PSS</ns0:SignatureSchemes>
      </ns0:OptionalInputs>
      <ns0:BinaryString>
        <ns2:Base64Data xmlns:ns2="urn:oasis:names:tc:dss:1.0:core:schema" 
MimeType="application/octet-stream">ZyYQdqaBd8TJC1dan7lLyYpYBev7KPd6s3xp+9+AWBc=
</ns2:Base64Data>
      </ns0:BinaryString>
    </ns0:ExternalAuthenticate>
  </soap-env:Body>
</soap-env:Envelope>

Response (0:00:00.157993):
Headers:
Server: nginx/1.23.4
Date: Sun, 08 Oct 2023 08:16:22 GMT
Content-Type: text/xml;charset=utf-8
Content-Length: 1351
Connection: keep-alive
Accept: text/xml, text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Expires: 0
SOAPAction: ""
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
X-XSS-Protection: 1; mode=block
Pragma: no-cache
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Body:
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
  <SOAP-ENV:Header/>
  <SOAP-ENV:Body>
    <ns11:ExternalAuthenticateResponse 
xmlns:ns10="http://uri.etsi.org/02231/v2#" 
xmlns:ns11="http://ws.gematik.de/conn/SignatureService/v7.4" 
xmlns:ns12="urn:oasis:names:tc:dss-x:1.0:profiles:SignaturePolicy:schema#" 
xmlns:ns2="http://ws.gematik.de/conn/ConnectorCommon/v5.0" 
xmlns:ns3="http://ws.gematik.de/conn/ConnectorContext/v2.0" 
xmlns:ns4="http://ws.gematik.de/conn/nfds/NFDService/v1.0" 
xmlns:ns5="http://ws.gematik.de/tel/error/v2.0" 
xmlns:ns6="urn:oasis:names:tc:dss:1.0:core:schema" 
xmlns:ns7="http://www.w3.org/2000/09/xmldsig#" 
xmlns:ns8="urn:oasis:names:tc:dss-x:1.0:profiles:verificationreport:schema#" 
xmlns:ns9="http://uri.etsi.org/01903/v1.3.2#">
      <ns2:Status>
        <ns2:Result>OK</ns2:Result>
      </ns2:Status>
      <ns6:SignatureObject>
        <ns6:Base64Signature 
Type="urn:ietf:rfc:3447">mRxta7hOXMswnD8IUHFDLTeaIBIZ+QBBath0evFUh3RlfJPMPqhDRQZ
tuy0oN0CSkwM5UA5vhV9Yuw4OVF/SnhVU0SVklzBV2XocMEHeLsoThuFb9ckrYeIhqI50udQY0yN6pOc
SN2lP662ur3h+DXXYMSsMKMJ0YrsBLP2ToGEaCkoCvlyzdubWTsw2iIgb6FT7/YvNrX98Lz/ZmcwM6SX
fmv+YK0cb3V4xKTyND3z6rnl5rw2b3pc0i1EOxw7X36VeLGaAot+B1NPKMxXm0lZTsdUpAmU35OEbyJf
nYMvP/ZQRK8YkrH9ar1lrrpkETG/XmkDFJJXWARPkrB//iw==</ns6:Base64Signature>
      </ns6:SignatureObject>
    </ns11:ExternalAuthenticateResponse>
  </SOAP-ENV:Body>
</SOAP-ENV:Envelope>

RSA Signature:
b'\x99\x1cmk\xb8N\\\xcb0\x9c?\x08PqC-7\x9a 
\x12\x19\xf9\x00Aj\xd8tz\xf1T\x87te|\x93\xcc>\xa8CE\x06m\xbb-(7@\x92\x93\x039P\x
0eo\x85_X\xbb\x0e\x0eT_\xd2\x9e\x15T\xd1%d\x970U\xd9z\x1c0A\xde.\xca\x13\x86\xe1
[\xf5\xc9+a\xe2!\xa8\x8et\xb9\xd4\x18\xd3#z\xa4\xe7\x127iO\xeb\xad\xae\xafx~\ru\
xd81+\x0c(\xc2tb\xbb\x01,\xfd\x93\xa0a\x1a\nJ\x02\xbe\\\xb3v\xe6\xd6N\xcc6\x88\x
88\x1b\xe8T\xfb\xfd\x8b\xcd\xad\x7f|/?\xd9\x99\xcc\x0c\xe9%\xdf\x9a\xff\x98+G\x1
b\xdd^1)<\x8d\x0f|\xfa\xaeyy\xaf\r\x9b\xde\x974\x8bQ\x0e\xc7\x0e\xd7\xdf\xa5^,f\
x80\xa2\xdf\x81\xd4\xd3\xca3\x15\xe6\xd2VS\xb1\xd5)\x02e7\xe4\xe1\x1b\xc8\x97\xe
7`\xcb\xcf\xfd\x94\x11+\xc6$\xac\x7fZ\xafYk\xae\x99\x04Lo\xd7\x9a@\xc5$\x95\xd6\
x01\x13\xe4\xac\x1f\xff\x8b'
SOAP Operation ReadCardCertificate
Headers:
SOAPAction: 
"http://ws.gematik.de/conn/CertificateService/v6.0#ReadCardCertificate"
Content-Type: text/xml; charset=utf-8
Body:
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
  <soap-env:Body>
    <ns0:ReadCardCertificate 
xmlns:ns0="http://ws.gematik.de/conn/CertificateService/v6.0">
      <com:CardHandle 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">SMC-B-11</com:CardHan
dle>
      <conn:Context 
xmlns:conn="http://ws.gematik.de/conn/ConnectorContext/v2.0">
        <com:MandantId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">m1</com:MandantId>
        <com:ClientSystemId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">c1</com:ClientSystemI
d>
        <com:WorkplaceId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">w1</com:WorkplaceId>
        <com:UserId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">user1</com:UserId>
      </conn:Context>
      <ns0:CertRefList>
        <ns0:CertRef>C.AUT</ns0:CertRef>
      </ns0:CertRefList>
      <ns0:Crypt>ECC</ns0:Crypt>
    </ns0:ReadCardCertificate>
  </soap-env:Body>
</soap-env:Envelope>

Response (0:00:00.144919):
Headers:
Server: nginx/1.23.4
Date: Sun, 08 Oct 2023 08:16:22 GMT
Content-Type: text/xml;charset=utf-8
Content-Length: 2313
Connection: keep-alive
Accept: text/xml, text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Expires: 0
SOAPAction: ""
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
X-XSS-Protection: 1; mode=block
Pragma: no-cache
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Body:
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
  <SOAP-ENV:Header/>
  <SOAP-ENV:Body>
    <ns5:ReadCardCertificateResponse 
xmlns:ns2="http://ws.gematik.de/conn/ConnectorCommon/v5.0" 
xmlns:ns3="http://ws.gematik.de/tel/error/v2.0" 
xmlns:ns4="http://ws.gematik.de/conn/CertificateServiceCommon/v2.0" 
xmlns:ns5="http://ws.gematik.de/conn/CertificateService/v6.0">
      <ns2:Status>
        <ns2:Result>OK</ns2:Result>
      </ns2:Status>
      <ns4:X509DataInfoList>
        <ns4:X509DataInfo>
          <ns4:CertRef>C.AUT</ns4:CertRef>
          <ns4:X509Data>
            <ns4:X509IssuerSerial>
              <ns4:X509IssuerName>CN=GEM.SMCB-CA51 TEST-ONLY,OU=Institution des 
Gesundheitswesens-CA der Telematikinfrastruktur,O=gematik GmbH 
NOT-VALID,C=DE</ns4:X509IssuerName>
              <ns4:X509SerialNumber>456196588522462</ns4:X509SerialNumber>
            </ns4:X509IssuerSerial>
            <ns4:X509SubjectName>CN=Arztpraxis Bernadette Birkengrund 
TEST-ONLY,2.5.4.42=#0c0a4265726e616465747465,2.5.4.4=#0c0b4269726b656e6772756e64
,O=302326011 NOT-VALID,C=DE</ns4:X509SubjectName>
            <ns4:X509Certificate>MIIDaDCCAw+gAwIBAgIHAZ7oi5tL3jAKBggqhkjOPQQDAjC
BmjELMAkGA1UEBhMCREUxHzAdBgNVBAoMFmdlbWF0aWsgR21iSCBOT1QtVkFMSUQxSDBGBgNVBAsMP0l
uc3RpdHV0aW9uIGRlcyBHZXN1bmRoZWl0c3dlc2Vucy1DQSBkZXIgVGVsZW1hdGlraW5mcmFzdHJ1a3R
1cjEgMB4GA1UEAwwXR0VNLlNNQ0ItQ0E1MSBURVNULU9OTFkwHhcNMjMwMTI1MjMwMDAwWhcNMjgwMTI
1MjI1OTU5WjCBjDELMAkGA1UEBhMCREUxHDAaBgNVBAoMEzMwMjMyNjAxMSBOT1QtVkFMSUQxFDASBgN
VBAQMC0JpcmtlbmdydW5kMRMwEQYDVQQqDApCZXJuYWRldHRlMTQwMgYDVQQDDCtBcnp0cHJheGlzIEJ
lcm5hZGV0dGUgQmlya2VuZ3J1bmQgVEVTVC1PTkxZMFowFAYHKoZIzj0CAQYJKyQDAwIIAQEHA0IABEt
y3vHWSQ/rHszAH0cOylu8MZB4gyAExXmWz4zwXPp5O15PBvP9IeqFytSSsuVWeqYtwoBeRh5D4oaWfv2
joRqjggFJMIIBRTAdBgNVHQ4EFgQUCnLMAhUqjAYD/9eFS2q5l7RTRHIwLAYDVR0fBCUwIzAhoB+gHYY
baHR0cDovL2VoY2EuZ2VtYXRpay5kZS9jcmwvMB8GA1UdIwQYMBaAFAaY6QJV/8mfXKNlDvFd4iD1hPu
TMAwGA1UdEwEB/wQCMAAwOAYIKwYBBQUHAQEELDAqMCgGCCsGAQUFBzABhhxodHRwOi8vZWhjYS5nZW1
hdGlrLmRlL29jc3AvMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDAjBGBgUrJAgDAwQ
9MDswOTA3MDUwMzAWDBRCZXRyaWVic3N0w6R0dGUgQXJ6dDAJBgcqghQATAQyEw4xLTItMjAyMzAxMjY
tMTAgBgNVHSAEGTAXMAoGCCqCFABMBIEjMAkGByqCFABMBE0wCgYIKoZIzj0EAwIDRwAwRAIgHc4VlNI
uTNhz83ZTa2DOqkJPbQKXMNCjykaURNjt+TgCIBeSSIPEjJUx3UcclafkKHDd1geZvI/2BUyFOPk9Hq+
4</ns4:X509Certificate>
          </ns4:X509Data>
        </ns4:X509DataInfo>
      </ns4:X509DataInfoList>
    </ns5:ReadCardCertificateResponse>
  </SOAP-ENV:Body>
</SOAP-ENV:Envelope>

[
    {
    'CertRef': 'C.AUT',
    'X509Data': {
        'X509IssuerSerial': {
            'X509IssuerName': 'CN=GEM.SMCB-CA51 TEST-ONLY,OU=Institution des 
Gesundheitswesens-CA der Telematikinfrastruktur,O=gematik GmbH NOT-VALID,C=DE',
            'X509SerialNumber': '456196588522462'
        },
        'X509SubjectName': 'CN=Arztpraxis Bernadette Birkengrund 
TEST-ONLY,2.5.4.42=#0c0a4265726e616465747465,2.5.4.4=#0c0b4269726b656e6772756e64
,O=302326011 NOT-VALID,C=DE',
        'X509Certificate': 
b'0\x82\x03h0\x82\x03\x0f\xa0\x03\x02\x01\x02\x02\x07\x01\x9e\xe8\x8b\x9bK\xde0\
n\x06\x08*\x86H\xce=\x04\x03\x020\x81\x9a1\x0b0\t\x06\x03U\x04\x06\x13\x02DE1\x1
f0\x1d\x06\x03U\x04\n\x0c\x16gematik GmbH 
NOT-VALID1H0F\x06\x03U\x04\x0b\x0c?Institution des Gesundheitswesens-CA der 
Telematikinfrastruktur1 0\x1e\x06\x03U\x04\x03\x0c\x17GEM.SMCB-CA51 
TEST-ONLY0\x1e\x17\r230125230000Z\x17\r280125225959Z0\x81\x8c1\x0b0\t\x06\x03U\x
04\x06\x13\x02DE1\x1c0\x1a\x06\x03U\x04\n\x0c\x13302326011 
NOT-VALID1\x140\x12\x06\x03U\x04\x04\x0c\x0bBirkengrund1\x130\x11\x06\x03U\x04*\
x0c\nBernadette1402\x06\x03U\x04\x03\x0c+Arztpraxis Bernadette Birkengrund 
TEST-ONLY0Z0\x14\x06\x07*\x86H\xce=\x02\x01\x06\t+$\x03\x03\x02\x08\x01\x01\x07\
x03B\x00\x04Kr\xde\xf1\xd6I\x0f\xeb\x1e\xcc\xc0\x1fG\x0e\xca[\xbc1\x90x\x83 
\x04\xc5y\x96\xcf\x8c\xf0\\\xfay;^O\x06\xf3\xfd!\xea\x85\xca\xd4\x92\xb2\xe5Vz\x
a6-\xc2\x80^F\x1eC\xe2\x86\x96~\xfd\xa3\xa1\x1a\xa3\x82\x01I0\x82\x01E0\x1d\x06\
x03U\x1d\x0e\x04\x16\x04\x14\nr\xcc\x02\x15*\x8c\x06\x03\xff\xd7\x85Kj\xb9\x97\x
b4SDr0,\x06\x03U\x1d\x1f\x04%0#0!\xa0\x1f\xa0\x1d\x86\x1bhttp://ehca.gematik.de/
crl/0\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14\x06\x98\xe9\x02U\xff\xc9\x9f\\\xa3e
\x0e\xf1]\xe2 
\xf5\x84\xfb\x930\x0c\x06\x03U\x1d\x13\x01\x01\xff\x04\x020\x0008\x06\x08+\x06\x
01\x05\x05\x07\x01\x01\x04,0*0(\x06\x08+\x06\x01\x05\x05\x070\x01\x86\x1chttp://
ehca.gematik.de/ocsp/0\x0e\x06\x03U\x1d\x0f\x01\x01\xff\x04\x04\x03\x02\x07\x800
\x13\x06\x03U\x1d%\x04\x0c0\n\x06\x08+\x06\x01\x05\x05\x07\x03\x020F\x06\x05+$\x
08\x03\x03\x04=0;090705030\x16\x0c\x14Betriebsst\xc3\xa4tte 
Arzt0\t\x06\x07*\x82\x14\x00L\x042\x13\x0e1-2-20230126-10 \x06\x03U\x1d 
\x04\x190\x170\n\x06\x08*\x82\x14\x00L\x04\x81#0\t\x06\x07*\x82\x14\x00L\x04M0\n
\x06\x08*\x86H\xce=\x04\x03\x02\x03G\x000D\x02 
\x1d\xce\x15\x94\xd2.L\xd8s\xf3vSk`\xce\xaaBOm\x02\x970\xd0\xa3\xcaF\x94D\xd8\xe
d\xf98\x02 
\x17\x92H\x83\xc4\x8c\x951\xddG\x1c\x95\xa7\xe4(p\xdd\xd6\x07\x99\xbc\x8f\xf6\x0
5L\x858\xf9=\x1e\xaf\xb8'
    }
}
]
SOAP Operation ExternalAuthenticate
Headers:
SOAPAction: 
"http://ws.gematik.de/conn/SignatureService/v7.4#ExternalAuthenticate"
Content-Type: text/xml; charset=utf-8
Body:
<soap-env:Envelope xmlns:soap-env="http://schemas.xmlsoap.org/soap/envelope/">
  <soap-env:Body>
    <ns0:ExternalAuthenticate 
xmlns:ns0="http://ws.gematik.de/conn/SignatureService/v7.4">
      <com:CardHandle 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">SMC-B-11</com:CardHan
dle>
      <conn:Context 
xmlns:conn="http://ws.gematik.de/conn/ConnectorContext/v2.0">
        <com:MandantId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">m1</com:MandantId>
        <com:ClientSystemId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">c1</com:ClientSystemI
d>
        <com:WorkplaceId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">w1</com:WorkplaceId>
        <com:UserId 
xmlns:com="http://ws.gematik.de/conn/ConnectorCommon/v5.0">user1</com:UserId>
      </conn:Context>
      <ns0:OptionalInputs>
        <ns1:SignatureType 
xmlns:ns1="urn:oasis:names:tc:dss:1.0:core:schema">urn:bsi:tr:03111:ecdsa</ns1:S
ignatureType>
      </ns0:OptionalInputs>
      <ns0:BinaryString>
        <ns2:Base64Data xmlns:ns2="urn:oasis:names:tc:dss:1.0:core:schema" 
MimeType="application/octet-stream">ZyYQdqaBd8TJC1dan7lLyYpYBev7KPd6s3xp+9+AWBc=
</ns2:Base64Data>
      </ns0:BinaryString>
    </ns0:ExternalAuthenticate>
  </soap-env:Body>
</soap-env:Envelope>

Response (0:00:00.161960):
Headers:
Server: nginx/1.23.4
Date: Sun, 08 Oct 2023 08:16:23 GMT
Content-Type: text/xml;charset=utf-8
Content-Length: 1108
Connection: keep-alive
Accept: text/xml, text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Expires: 0
SOAPAction: ""
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
X-XSS-Protection: 1; mode=block
Pragma: no-cache
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Body:
<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/">
  <SOAP-ENV:Header/>
  <SOAP-ENV:Body>
    <ns11:ExternalAuthenticateResponse 
xmlns:ns10="http://uri.etsi.org/02231/v2#" 
xmlns:ns11="http://ws.gematik.de/conn/SignatureService/v7.4" 
xmlns:ns12="urn:oasis:names:tc:dss-x:1.0:profiles:SignaturePolicy:schema#" 
xmlns:ns2="http://ws.gematik.de/conn/ConnectorCommon/v5.0" 
xmlns:ns3="http://ws.gematik.de/conn/ConnectorContext/v2.0" 
xmlns:ns4="http://ws.gematik.de/conn/nfds/NFDService/v1.0" 
xmlns:ns5="http://ws.gematik.de/tel/error/v2.0" 
xmlns:ns6="urn:oasis:names:tc:dss:1.0:core:schema" 
xmlns:ns7="http://www.w3.org/2000/09/xmldsig#" 
xmlns:ns8="urn:oasis:names:tc:dss-x:1.0:profiles:verificationreport:schema#" 
xmlns:ns9="http://uri.etsi.org/01903/v1.3.2#">
      <ns2:Status>
        <ns2:Result>OK</ns2:Result>
      </ns2:Status>
      <ns6:SignatureObject>
        <ns6:Base64Signature 
Type="urn:bsi:tr:03111:ecdsa">MEQCIGJen75dz8hH3nffosaehbxhxXLoNE1k5oq89tCZxppGAi
AUGvPVmC+rkQ/n7IJzcp47rImRC4X5iOqZL6zwATy+XQ==</ns6:Base64Signature>
      </ns6:SignatureObject>
    </ns11:ExternalAuthenticateResponse>
  </SOAP-ENV:Body>
</SOAP-ENV:Envelope>

ECC Signature:
b'0D\x02 
b^\x9f\xbe]\xcf\xc8G\xdew\xdf\xa2\xc6\x9e\x85\xbca\xc5r\xe84Md\xe6\x8a\xbc\xf6\x
d0\x99\xc6\x9aF\x02 
\x14\x1a\xf3\xd5\x98/\xab\x91\x0f\xe7\xec\x82sr\x9e;\xac\x89\x91\x0b\x85\xf9\x88
\xea\x99/\xac\xf0\x01<\xbe]'