...
The header contains elements such as ds:DigestValue, where the message digest, generated with ds:DigestMethod Algorithm, is displayed (in this case, sha1). The ds:Reference URI shows the content being signed. The element ds:SignatureValue contains the digital signature, and wsse:BinarySecurityToken has information about the X.509 certificate, including the public key, encoded in base64Binary.
...