Validate X509SerialNumber as a string so that certs with very long numbers validate
Make the children of the AssertionType element not be strictly ordered

Fixes an issue with a partner not having validated saml