meineschufa.de delivers a wrong RefreshAddress in the TCToken
The service at https://www.meineschufa.de/index.php?site=30_2_1_pa&#tabNPA delivers a TCToken which is not standard compliant. The RefreshAddress is placed in a CDATA block. This leads to failures in the eID Clients. According to TR-03124-1 section 2.3 contains the RefreshAddress element just an https-URL.