From nobody Sun Jun 27 23:53:34 2021 Return-Path: X-Original-To: bimi@ietfa.amsl.com Delivered-To: bimi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 743E33A2DFC for ; Sun, 27 Jun 2021 23:53:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.587 X-Spam-Level: X-Spam-Status: No, score=-1.587 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01, URIBL_BLOCKED=0.001, URI_NOVOWEL=0.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=mailkit.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 46b3dGJI7wo0 for ; Sun, 27 Jun 2021 23:53:27 -0700 (PDT) Received: from mail.mailkit.eu (mail.mailkit.eu [185.136.200.19]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 863D63A2E1E for ; Sun, 27 Jun 2021 23:53:26 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by mail.mailkit.eu (Postfix) with ESMTP id A90E22045C; Mon, 28 Jun 2021 08:53:22 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mailkit.eu Received: from mail.mailkit.eu ([127.0.0.1]) by localhost (mail.mailkit.eu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FT2uG1kn-8tq; Mon, 28 Jun 2021 08:53:18 +0200 (CEST) To: "Brotman, Alex" , "bimi@ietf.org" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mailkit.com; s=mk-2; t=1624863198; bh=WYJON3dVvmCyY9CUK/rp8W5RmfYheKAq/fhpHm4ruVM=; h=To:References:From:Subject:Date:In-Reply-To; b=IguhmRfpO6wHzX4YSzNZ6A47eMF1NgB5E8jvVPTRKZHGr45b9YQa1E3VN7xPHRwLe vaenYJNd83oFeGHH4bnK4popIKoMBTZgkvniOg1oXH+A4+rF1sz2M4keSBQBM7wQtO 6e5CsAmVcywZjdZCO80XcUOfQ51S+63o7jEYLgVZeGPheGoYjCOY3Ybw0uRtSMpKP6 Rz38kCKaRPmK60CrmlCHI03kk5kdKgz0il3p5hjmpHm26g5tewBKkEL4cgS45URytN 5riZzKLRm71l+ylXA1rFBAFbHPgNg8lhty26euAXg4tT15Qd6+aLp3VykCb8GLIXVT kgjcjR87J0bww== References: <152a93bd-754a-45d3-af84-b58d385d997a@beta.fastmail.com> <769bc0c8-9b1a-4f55-acea-8e3c1e95b6b5@beta.fastmail.com> From: Jakub Olexa Organization: Mailkit Message-ID: Date: Mon, 28 Jun 2021 08:53:19 +0200 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------C121A9047D60AF3120AAF305" Content-Language: en-US Archived-At: Subject: Re: [Bimi] What if DKIM doesn't validate the selector header. X-BeenThere: bimi@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Brand Indicators for Message Identification List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jun 2021 06:53:33 -0000 This is a multi-part message in MIME format. --------------C121A9047D60AF3120AAF305 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Hi Alex, sorry for the late response. I was thinking about this a lot and here=20 are my thoughts: a) the selector header really needs to be secure and therefore DKIM=20 signed and the DMARC must pass. Otherwise a third party may find an=20 abuse vector by relying on a fallback to default selector which may be=20 deceptive. In short - there should not be a fallback to default - there=20 was a clear intent in specifying the selector and that intent should be=20 honored as much as possible. b) If there is a trusted ARC signature the message and the selector used = should be trusted as well. While I believe marketers would prefer the fallback to default selector=20 if the specified selector fails, I'm also worried it may open doors to=20 DKIM replay attacks to get the BIMI displayed. Jakub Olexa Founder & CEO E-mail: jakub@mailkit.com Tel: +420 777 744 440 Mailkit - Closing the circle between Deliverability and Engagement=20 On 06.05.2021 15:19, Brotman, Alex wrote: > > Jakub, > > Are you suggesting that in order to use an alternate selector (beyond=20 > default._bimi.sub.example.com or similar default) that it MUST be=20 > DKIM-signed, and MUST align in the DMARC-sense?=C2=A0 I could see that = as=20 > being reasonable. Let=E2=80=99s say this happens.=C2=A0 If DKIM (which = originally=20 > signed the header and was properly aligned) is mangled during=20 > forwarding, and ARC is properly validated, is that also acceptable to=20 > use an specified selector? > > I=E2=80=99m also not sure it answers the original question (if DKIM fai= ls, and=20 > there=E2=80=99s a selector, should the evaluator fallback to default._b= imi,=20 > assuming SPF/DMARC pass/align). > > -- > > Alex Brotman > > Sr. Engineer, Anti-Abuse & Messaging Policy > > Comcast > > *From:* bimi *On Behalf Of * Jakub Olexa > *Sent:* Friday, April 30, 2021 2:44 AM > *To:* bimi@ietf.org > *Subject:* Re: [Bimi] What if DKIM doesn't validate the selector header= =2E > > If the logic relies only on DMARC authenticating rather than DKIM pass = > then what is the abuse risk if the BIMI-Selector header is unsigned?=20 > You trust the source domain, the BIMI record comes from that "trusted=20 > source" and there was a clear intent from the sender for a specific=20 > selector. I'd suggest a binary choice here - either MUST or no=20 > signature requirement for the selector at all. > > *Jakub Olexa** > *Founder & CEO* > *E-mail: jakub@mailkit.com * > *Tel: +420 777 744 440 * > > Mailkit - Closing the circle between Deliverability and Engagement=20 > =20 > * > > On 30.04.2021 3:33, Marc Bradshaw wrote: > > Hi, > > I see what you are saying, this is the section... > > If present, the BIMI-Selector header SHOULD be included in the > DMARC-aligned > > DKIM signature used to confirm authenticity of the message.=C2=A0 I= f it > is not > > included in the DMARC-compliant DKIM signature, the header SHOULD > be ignored. > > In the absence of a clear statement of what should happen if the > BIMI-Selector is included in a failing DKIM signature I had read > (and implemented) this as ignoring this header unless it has a > valid DKIM signature, but not considering a failed signature as a > blocker if DMARC passes for some other reason, either SPF, or the > presence of a second passing DKIM signature for the same domain. > > I propose the modification of this section to state that failing > DKIM signatures SHOULD be ignored, but BIMI processing SHOULD > continue. > > The use of SHOULD in this section was intended to cover the cases > where MBPs did not implement this check, however I would be happy > to make these checks a MUST, what is the opinion of the group? > > On Fri, 30 Apr 2021, at 1:45 AM, Zack Aab wrote: > > Hi, > > >Seems more a question about should a receiver go to > default._bimi (or something else) if the selector is specified > but seems unusable (either not signed or signature fails). > > This is it exactly.=C2=A0 Maybe I missed something, but as writ= ten > there is no suggested or required action if the receiver sees > that the BIMI-selector is DKIM signed but that DKIM fails to > validate.=C2=A0 This can probably be covered with one line in > section 5.4, it's just a question of "should the receiver skip > to default._bimi. or skip BIMI entirely?" > > Thanks! > > *Zack Aab*(He/Him) > Senior Consultant, Trendline Interactive > *O* +1 (512) 717-4097 | *C* +1 (404) > 317-6729 | *W* trendlinei.com > > > On Thu, Apr 29, 2021 at 11:19 AM Brotman, Alex > > wrote: > > I=E2=80=99m not entirely sure that answers the original que= stion.=C2=A0 > I don=E2=80=99t think the OP is an attempt to second guess = DMARC. > Seems more a question about should a receiver go to > default._bimi (or something else) if the selector is > specified but seems unusable (either not signed or > signature fails).=C2=A0 If we believe the sections A.1/A.5 > covers this scenario, perhaps we just need a little > embellishment on this scenario below to be more explicit.=C2= =A0 > And yes, local policy can impact this. > > -- > > Alex Brotman > > Sr. Engineer, Anti-Abuse & Messaging Policy > > Comcast > > *From:* bimi > *On Behalf Of *Marc Bradsha= w > > *Sent:* Thursday, April 29, 2021 2:56 AM > > *To:* bimi@ietf.org > > *Subject:* Re: [Bimi] What if DKIM doesn't validate the > selector header. > > Hi, > > Opinion: This feels like a discussion outside the scope of > BIMI, SPF forgery is a known issue ref the recent > Multipass attack at a well known vendor. There is a > related note in the "Unsigned BIMI-Selector Header" > section of the spec. > > We do see senders with p=3Dreject who rely entirely on SPF > and do not DKIM sign at all, I would argue that the > problem being described here is more about vulnerabilities > in some shared infrastructure platforms and not about how > BIMI should be implemented. At the very least, I would > expect that discussion to take place in the DMARC group, > and that BIMI should take the DMARC result as is as much > as is possible, without imposing additional constraints > over what constitutes a valid DMARC pass or fail. > > MBPs are, of course, free to implement whatever additional > constraints they see fit, but I don't feel that this one > belongs in BIMI. > > On Thu, 29 Apr 2021, at 4:26 PM, Jakub Olexa wrote: > > Hi, > > In my opinion if DKIM fails to validate the message > content the MBP should not display the BIMI at all (no > matter why the DKIM failed). The reasoning for this is > that SPFs validate shared infrastructures (OL365, > GSuite, etc) and as such domains can be spoofed while > DKIM authenticates the actual content. BIMI logos > being displayed on the message list (see Yahoo mail > app) they become sort of a "From" indicator from the > users perspective and over time will become sort of a > trust indicator. BIMI should make every effort on the > standard level to discourage any use of BIMI that > failed a critical validation of the message body as > that alone could be an abuse vector. > > If a phishing operation targets businesses that are > using shared infrastructures and have BIMI, they could > achieve quite a significant success if the messages > get highlighted with a logo while failing DKIM. This > would undermine BIMI in a major way and DKIM as well. > > Jakub Olexa > > Founder & CEO > > E-mail: jakub@mailkit.com > > Tel: +420 777 744 440 > > *Mailkit - *Closing the circle between Deliverability > and Engagement > > > On 28.04.2021 22:06, Zack Aab wrote: > > I was reading section 5.4 of the document and it's > pretty clear what to do if the selector header > (BIMI-selector) is not included in the > DMARC-aligned DKIM signature: treat it as if there > is no selector header and move on to default._bimi.= > > BUT > > What if the DKIM signature includes the > BIMI-selector header but doesn't pass validation > AND DMARC still passes via SPF? > > It seems to me (given DKIM's normal use - a broken > signature should be treated as not having a > signature) that the receiver should treat the > BIMI-selector header as unsigned and move on to > default._bimi, but it's not actually stated one > way or the other, so the response from the > receiver could be to stop BIMI validation entirely.= > > *Zack Aab*(He/Him) > Senior Consultant, Trendline Interactive > *O* +1 (512) 717-4097 | *C* +1 > (404) 317-6729 | *W* > trendlinei.com > > > --=20 > > bimi mailing list > > bimi@ietf.org > > https://www.ietf.org/mailman/listinfo/bimi > > > -- > > =09 > > =C2=A0 Marc Bradshaw > > marcbradshaw.net > > | @marcbradshaw > > > --=20 > > bimi mailing list > > bimi@ietf.org > > https://www.ietf.org/mailman/listinfo/bimi > > > --=20 > > bimi mailing list > > bimi@ietf.org > > https://www.ietf.org/mailman/listinfo/bimi > > > -- > > =09 > > =C2=A0 Marc Bradshaw > > marcbradshaw.net > > | @marcbradshaw > > > > --------------C121A9047D60AF3120AAF305 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: quoted-printable

Hi Alex,

sorry for the late response. I was thinking about this a lot and here are my thoughts:

a) the selector header really needs to be secure and therefore DKIM signed and the DMARC must pass. Otherwise a third party may find an abuse vector by relying on a fallback to default selector which may be deceptive. In short - there should not be a fallback to default - there was a clear intent in specifying the selector and that intent should be honored as much as possible.

b) If there is a trusted ARC signature the message and the selector used should be trusted as well.

While I believe marketers would prefer the fallback to default selector if the specified selector fails, I'm also worried it may open doors to DKIM replay attacks to get the BIMI displayed.

Jakub Olexa
= Founder & CEO
= E-mail: jakub= @mailkit.com
= Tel: +420 777 744 440

Mailkit - Closing the circle between Deliverability and Engagement

On 06.05.2021 15:19, Brotman, Alex wrote:

Jakub,

=C2=A0

Are you suggesting that in order to use an= alternate selector (beyond default._bimi.sub.example.com or similar default) that it MUST be DKIM-signed, and MUST align in the DMARC-sense?=C2=A0 I could see that as being reasonable.= =C2=A0 Let=E2=80=99s say this happens.=C2=A0 If DKIM (which originally= signed the header and was properly aligned) is mangled during forwarding, and ARC is properly validated, is that also acceptable to use an specified selector?

=C2=A0

I=E2=80=99m also not sure it answers the o= riginal question (if DKIM fails, and there=E2=80=99s a selector, should= the evaluator fallback to default._bimi, assuming SPF/DMARC pass/align).

=C2=A0

--

Alex Brotman

Sr. Engineer, Anti-Abuse & Messaging= Policy

Comcast

=C2=A0

From: bimi <bimi-bounces@ietf.org> On Behalf Of Jakub Olexa
Sent: Friday, April 30, 2021 2:44 AM
To: bimi@ietf.org
Subject: Re: [Bimi] What if DKIM doesn't validate the selector header.

=C2=A0

If the logic relies only on DMARC authenticating rather than DKIM pass then what is the abuse risk if the BIMI-Selector header is unsigned? You trust the source domain, the BIMI record comes from that "trusted source" and there was a clear intent from the sender for a specific selector. I'd suggest a binary choice here - either MUST or no signature requirement for the selector at all.<= /p>

On 30.04.2021 3:33, Marc Bradshaw wrote:

Hi,

=C2=A0

I see what you are saying, this is the section...

=C2=A0

If present, the BIMI-Selector header= SHOULD be included in the DMARC-aligned

DKIM signature used to confirm authenticity of the message.=C2=A0 If it is not

included in the DMARC-compliant DKIM= signature, the header SHOULD be ignored.

=C2=A0

In the absence of a clear statement of what should happen if the BIMI-Selector is included in a failing DKIM signature I had read (and implemented) this as ignoring this header unless it has a valid DKIM signature, but not considering a failed signature as a blocker if DMARC passes for some other reason, either SPF, or the presence of a second passing DKIM signature for the same domain.

=C2=A0

I propose the modification of this section to state that failing DKIM signatures SHOULD be ignored, but BIMI processing SHOULD continue.<= /p>

The use of SHOULD in this section wa= s intended to cover the cases where MBPs did not implement this check, however I would be happy to make these checks a MUST, what is the opinion of the group?

=C2=A0

On Fri, 30 Apr 2021, at 1:45 AM, Zac= k Aab wrote:

Hi,

>Seems more a question about should a receiver go to default._bimi (or something else) if the selector is specified but seems unusable (either not signed or signature fails).=

This is it exactly.=C2=A0 Maybe = I missed something, but as written there is no suggested or required action if the receiver sees that the BIMI-selector is DKIM signed but that DKIM fails to validate.=C2=A0 This can probably be covered= with one line in section 5.4, it's just a question of "should the receiver skip to default._bimi. or skip BIMI entirely?"

Thanks!

Zack= Aab (He/Him)
Senior Consultant, Trendline Interactive
O +1 (512) 717-409= 7 | C +1 (404) 317-6729 | W trendlinei.com

=C2=A0

=C2=A0

On Thu, Apr 29, 2021 at 11:19 AM= Brotman, Alex <Alex_Brotman=3D40comcast.com@dmarc.ietf.o= rg> wrote:

I=E2=80=99m not entirely = sure that answers the original question.=C2=A0 I don=E2=80=99= t think the OP is an attempt to second guess DMARC. Seems more a question about should a receiver go to default._bimi (or something else) if the selector is specified but seems unusable (either not signed or signature fails).=C2=A0 If we belie= ve the sections A.1/A.5 covers this scenario, perhaps we just need a little embellishment on this scenario below to be more explicit.=C2=A0 An= d yes, local policy can impact this.

=

=C2=A0

--

Alex Brotman=

Sr. Engineer, Anti-Abus= e & Messaging Policy

Comcast

=C2=A0

From: bimi <bimi-bounces@ietf.org> On Behalf Of Marc Bradshaw

Sent: Thursday, April 29, 2021 2:56 AM

Subject: Re: [Bimi] What if DKIM doesn't validate the selector header.

=C2=A0

Hi,

=C2=A0

=

Opinion: This feels like a discussion outside the scope of BIMI, SPF forgery is a known issue ref the recent Multipass attack at a well known vendor. There is a related note in the "Unsigned BIMI-Selector Header" section of the spec.

We do see senders wit= h p=3Dreject who rely entirely on SPF and do no= t DKIM sign at all, I would argue that the problem being described here is more about vulnerabilities in some shared infrastructure platforms and not about how BIMI should be implemented. At the very least, I would expect that discussion to take place in the DMARC group, and that BIMI should take the DMARC result as is as much as is possible, without imposing additional constraints over what constitutes a valid DMARC pass or fail.

MBPs are, of course, free to implement whatever additional constraints they see fit, but I don't feel that this one belongs in BIMI.

=

=C2=A0

=

On Thu, 29 Apr 2021, at 4:26 PM, Jakub Olexa wrote:

=

Hi,

In my opinion if DKIM fails to validate the message content the MBP should not display the BIMI at all (no matter why the DKIM failed). The reasoning for this is that SPFs validate shared infrastructures (OL365, GSuite, etc) and as such domains can be spoofed while DKIM authenticates the actual content. BIMI logos being displayed on the message list (see Yahoo mail app) they become sort of a "From" indicator from the users perspective and over time will become sort of a trust indicator. BIMI should make every effort on the standard level to discourage any use of BIMI that failed a critical validation of the message body as that alone could be an abuse vector.

If a phishing operation targets businesses that are using shared infrastructures and have BIMI, they could achieve quite a significant success if the messages get highlighted with a logo while failing DKIM. This would undermine BIMI in a major way and DKIM as well.

On 28.04.2021 22:06= , Zack Aab wrote:

I was reading section 5.4 of the document and it's pretty clear what to do if the selector header (BIMI-selector) is not included in the DMARC-aligned DKIM signature: treat it as if there is no selector header and move on to default._bimi.

BUT<= /p>

What if the DKI= M signature includes the BIMI-selector header but doesn't pass validation AND DMARC still passes via SPF?<= /p>

It seems to me (given DKIM's normal use - a broken signature should be treated as not having a signature) that the receiver should treat the BIMI-selector header as unsigned and move on to default._bimi, but it's not actually stated one way or the other, so the response from the receiver could be to stop BIMI validation entirely.

=C2=A0

=C2=A0

Zack Aab (He/Him)
Senior Consultant, Trendline Interactive
O +1 (512) 717-4097 | C<= /b> +1 (404) 317-6729 | W trendlinei.com

--=C2=A0=

bimi mailing list

=C2=A0

=C2=A0

=

--

=

=C2=A0 = Marc Bradshaw

=C2=A0=C2= =A0marc= bradshaw.net |=C2=A0@mar= cbradshaw

=C2=A0

=C2=A0

=

--

bimi mailing list

--=C2=A0

bimi mailing list

=C2=A0

=C2=A0

--

=

=C2=A0 Marc Bradshaw

=C2=A0

=C2=A0



--------------C121A9047D60AF3120AAF305-- From nobody Tue Jun 29 06:34:20 2021 Return-Path: X-Original-To: bimi@ietfa.amsl.com Delivered-To: bimi@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 79B613A347D; Tue, 29 Jun 2021 06:34:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.595 X-Spam-Level: X-Spam-Status: No, score=-1.595 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_BLOCKED=0.001, RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, URI_NOVOWEL=0.5] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=comcast.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id z-aEv5Kd9WiD; Tue, 29 Jun 2021 06:34:13 -0700 (PDT) Received: from mx0a-00143702.pphosted.com (mx0a-00143702.pphosted.com [148.163.145.77]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 312C63A347B; Tue, 29 Jun 2021 06:34:10 -0700 (PDT) Received: from pps.filterd (m0156891.ppops.net [127.0.0.1]) by mx0a-00143702.pphosted.com (8.16.0.43/8.16.0.43) with SMTP id 15TDVW8S031050; Tue, 29 Jun 2021 09:34:09 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=comcast.com; h=from : to : subject : date : message-id : references : in-reply-to : content-type : mime-version; s=20190412; bh=6JOCgiEA2E14I/S1vAS2pCOmUMtjKlUHuUAKRzcsnp8=; b=Y2VnpFOplN83x1LCHbRG3St/xzq/r6pv9hTSNgrju8X+ZyRr6iq8Y0Eck3TDkY6+WDmQ fL2HoR7YQ/xYrwN9MqH5wQI7aiLsbvlG46Xq2K9IRylfHfwz65N4JJjC32oxeKZb2eV2 YDtnJxxB7M+ySV1pTGND6d8uT1gVG8/C8zbFHdav1kopaiQYtkbYCzxR289vpJvDRSgJ 2EBAz7PollS/Rit6neLIiDMQ9kQjL7f8xdkibWnOF/9Cc8yNj12Du2g6M4nTyc2mWZMo LOjPjewTy4+q0b8gT6TuqSMAoBf8QV74KzDu6Q1Bx7ImRnAXurZ0hhb6jsgUurCn55yC gQ== Received: from pacdcex55.cable.comcast.com (dlppfpt-wc-1p.slb.comcast.com [96.99.226.136]) by mx0a-00143702.pphosted.com with ESMTP id 39ff0cg70g-4 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Tue, 29 Jun 2021 09:34:09 -0400 Received: from PACDCEX49.cable.comcast.com (24.40.2.148) by PACDCEX55.cable.comcast.com (24.40.2.154) with Microsoft SMTP Server (TLS) id 15.0.1497.18; Tue, 29 Jun 2021 09:33:59 -0400 Received: from pacdcexedge02.cable.comcast.com (68.87.38.198) by PACDCEX49.cable.comcast.com (24.40.2.148) with Microsoft SMTP Server (TLS) id 15.0.1497.18 via Frontend Transport; Tue, 29 Jun 2021 09:33:59 -0400 Received: from NAM04-DM6-obe.outbound.protection.outlook.com (104.47.73.43) by webmail.comcast.com (68.87.38.198) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.792.15; Tue, 29 Jun 2021 09:33:59 -0400 Received: from MN2PR11MB4351.namprd11.prod.outlook.com (2603:10b6:208:193::31) by MN2PR11MB4741.namprd11.prod.outlook.com (2603:10b6:208:26a::10) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4287.22; Tue, 29 Jun 2021 13:33:57 +0000 Received: from MN2PR11MB4351.namprd11.prod.outlook.com ([fe80::cddd:25b1:344d:8818]) by MN2PR11MB4351.namprd11.prod.outlook.com ([fe80::cddd:25b1:344d:8818%5]) with mapi id 15.20.4287.022; Tue, 29 Jun 2021 13:33:57 +0000 From: "Brotman, Alex" To: Jakub Olexa , "Brotman, Alex" , "bimi@ietf.org" Thread-Topic: [Bimi] What if DKIM doesn't validate the selector header. Thread-Index: AQHXPGot2EFOFQevBUCnzjvUFuXuvqrLCF2AgAAIN4CAAInsgIAACiKAgACkUoCAAFa2AIAJ2z+AgFLg0ICAAgHzsA== Date: Tue, 29 Jun 2021 13:33:57 +0000 Message-ID: References: <152a93bd-754a-45d3-af84-b58d385d997a@beta.fastmail.com> <769bc0c8-9b1a-4f55-acea-8e3c1e95b6b5@beta.fastmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: dmarc.ietf.org; dkim=none (message not signed) header.d=none; dmarc.ietf.org; dmarc=none action=none header.from=comcast.com; x-originating-ip: [2601:43:103:e60:414d:5e4e:9bbf:2ac8] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: ac5e1483-d531-4599-e056-08d93b028c37 x-ms-traffictypediagnostic: MN2PR11MB4741: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:10000; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:MN2PR11MB4351.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFS:(4636009)(396003)(376002)(366004)(136003)(346002)(39860400002)(166002)(83380400001)(9686003)(55016002)(478600001)(5660300002)(6506007)(52536014)(7696005)(8676002)(966005)(8936002)(53546011)(71200400001)(122000001)(186003)(66476007)(76116006)(66946007)(66446008)(38100700002)(2906002)(110136005)(66556008)(64756008)(316002)(33656002)(15650500001)(86362001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?dFY0QzZsdVNhQ1Y3NVRiOUtSZi8vQUVGL3ZPYStCbUZhbUZuaTdZbWVmdEVs?= =?utf-8?B?ZjFlRWcrMG1vMzc3TzhoSU9yemdsL004STk0dy91OEZKVUJEZVhUdEtjWlI2?= =?utf-8?B?LzdYTEYyWDEzUEFxSHNMYUpPRVVqQnpEK09RUkFBaGJXL1pPcTJydjFFV0RW?= =?utf-8?B?cGlkdEswTnRrZHMxZ1R1dGR3bzRIa2dUa243TW9rYklwbE55M3pGQTRET2py?= =?utf-8?B?VFFzcUxQWkdTakp2OEptTVEwN2RtekRBZlFYd0xxckgwd3lkOVRNRHBNSnhT?= =?utf-8?B?WG40NElvam1RODRMZ1FNS2FzTXpwcTlKRWUyejRjVEtwRlNQRWJZYkRnMEl0?= =?utf-8?B?cEtZVG9GWk1JMEcrMnN2THlhdW5hVEU4YitRSmtqL3BzTis4Z29jc2w0emFB?= =?utf-8?B?TjRKK3VtcXl6YVVrZkJkS0pVU0JHdGZuRzJoRjdLNnFMUVRWK2N4Q2JwQTZx?= =?utf-8?B?TEJEVXo4UWlWQTdJNEdkcTRIWC9lK0h6aDdQdmg3cjMxdFp4UXQ2Qy8yOW13?= =?utf-8?B?UnNpcTljNGVSTkNOdUVTMGFCWHVpaVp5M2FWRWNSbHk1a3Znbjc3bVJSWEZM?= =?utf-8?B?alRaMk1tVHJ1ZUNMTHhNK2VLcktqelp0YkM5ZmdEaXNhMUg1YlVtcU96eEZi?= =?utf-8?B?aXZaZGxXeEpKNW05Q085U2pUay9hQVhqam4yUGZFaTR1aEQ2SGJxd2dFcDlp?= =?utf-8?B?YU85aVRaRGpDWkwzUkVja1NHQzEvUm5JdllwcmhUOHhGR1l3T2Vrend1dFVm?= =?utf-8?B?cGxydHR0dWJ1aEJFMVAyN0VoSFhsMjVMU0I2UjdJVDQzK2N5UC9zc0hOVzBr?= =?utf-8?B?VlFESTY1aERQQS9RZmwyOHZ6KzFLU3FKYlZoUzFJWEc3NDNPY2o3bTRzUTVq?= =?utf-8?B?SnBmM3N6RjhpUlNWK1pZRjRjU1hQdjg3eGRkS0JiSjFhcS9FRnEzSGQvNTll?= =?utf-8?B?N3AzV01sdVdtQUtlU3hpdXp3ZEhmalpSdnZsNnVadmozNWRmWVV0NTZoMXBB?= =?utf-8?B?dGc4TEttUEhmaHJtUGVsdnBMQ1ppc2pWZUVKWkJiNkJaNFJOenlNa056QmNG?= =?utf-8?B?cTdOclVya083NUlXSExqZmtuVFRqODhjeUIwT1dDWGVWemE2L0NFV1drRHEr?= =?utf-8?B?VHhkNVhLblhKTHJOdDNIb1pIQmJtRnVyTUNCUjJwdjRLdnlkN0pmOVBoK2Zy?= =?utf-8?B?QVZDNG4rZ01kTmVNUkNmQ1JqSWlkTFBzeExwUGtYNmxZQTFzdTNlVUpJQmMy?= =?utf-8?B?ZjVFTnhML2pyeGJjWGNTdDlsMzJWbWNZc2JEbGo5QlQzRnZIUitERkV1THZH?= =?utf-8?B?UXhxSkhKam9Dd05jZDVXNXpjUThjZVd0YXZFRzdTSmRmZ25tV2dZTFZ1VmpP?= =?utf-8?B?eTl4UEhMQnlWcm1Qb096c3Z2RVM4bE9tOE8ycHloY01tbmFSMFA0cE9vck4x?= =?utf-8?B?dTNXYW5CeC83djVPU1QyRXJyMDZaSG5weFJqMU9oOWluZFduaWlKenpTeVBE?= =?utf-8?B?RXdEWFJWMkZGMGZ3bTRPK2V6cDBTcnBaOEJjODh5STNtZHFOakJzWVdQSDFF?= =?utf-8?B?dE8yNnNLaWJCVjg0akY3VjlqeDdGWFBGZmxiV09JZjVLRWVzSEhWR2t2bVJY?= =?utf-8?B?OXVkMmtta2kzSFdHVGY3OGhsTVdvSkh4WEdGSnM3Z3BVK0xQbmY1VHRMWmYv?= =?utf-8?B?OExMcm9vTkZhbXoyYjBuaVlkZ0ZOK2lzVGNqVE1Idm1WR2xMc2IzWDFDQXpI?= =?utf-8?B?dUI0REpoQ1o5OUd1aXljNXREK3RkdnMzUUlrSWFqUjhnNGhyQitsNnNWUFZH?= =?utf-8?Q?JAmvSv1GB42adlVoZfhKvPsKv3X0rvMRvDKII=3D?= x-ms-exchange-transport-forked: True arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=FpPr4qyNmlBJdllK6some6YvH0PDWgfQRV2HEzqgl4tU7BNS+gOhx+8NgXoZgRPH1PLH9jJIN7sE14x/mBXFIg0mA8AXYJeGZSVdiMJWpgzwHPHfsWAgNQY1LZvsKvO5twNDPcjU3n7aOp/T1P3LcNxFyq7Li2de4ten3Z0tbYWD4HiAhD5A0tY3Qr2iIYYmHCDZazvQGaJcJW4ru8xfSsyXuIG1g7D4FQRaKt57NNZRy01yuj9BaT8+QKmyjXAczB8fKtctUETm85ieYBCSby6lBxSuSktPCbxHlxkAM2XtaSTaocn1JKRJVyo7gZQxlsp+aoM1CDnhT8SNZgtBGQ== arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nb/vdsecYwT67lTdOWUg8qDB1knOvrpTUCnjQRheNGk=; b=n5PA9Ln85wXXO/AJnfuIuEmrFtf/CguK4zLFY70gsQO7cRezWTKVxaFreGK5qnGUKR9vlHgBjCFBz8mXBSBLUxM5R5jhk+fq4eSTjwHlZsrpyfJE0+vjngJvVZd2ZbVdz7zQUI2XUqB3MDceu00ZdXdgOF64A7XSHGn4ZG5jur5+t/cbXpiuQd2obfbkjh6sgAgXiJC2C5eKy7Hul40G9YKly3snbMy1FZPInh9AIHlGErBBaEsujEOA5ndbI2aP0d2NvqdxzF39IQsHMJs8snQjalhjPDj9mnED2OHGyIAj74KronXdZS/1EdEm3/8SuWwMpYiIz8HSjlIpmvhUQA== arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=comcast.com; dmarc=pass action=none header.from=comcast.com; dkim=pass header.d=comcast.com; arc=none x-ms-exchange-crosstenant-authas: Internal x-ms-exchange-crosstenant-authsource: MN2PR11MB4351.namprd11.prod.outlook.com x-ms-exchange-crosstenant-network-message-id: ac5e1483-d531-4599-e056-08d93b028c37 x-ms-exchange-crosstenant-originalarrivaltime: 29 Jun 2021 13:33:57.7091 (UTC) x-ms-exchange-crosstenant-fromentityheader: Hosted x-ms-exchange-crosstenant-id: 906aefe9-76a7-4f65-b82d-5ec20775d5aa x-ms-exchange-crosstenant-mailboxtype: HOSTED x-ms-exchange-crosstenant-userprincipalname: rz16JLAoK/Slp4lVBBZNY2HOCxhKdjWG1NpJKdPk34fIZKEJ6oBYzXmeLElnom4fIdf2ZhxR5qjvYX408OxaMu0WF7V3YykaxsknCE3dQLE= x-ms-exchange-transport-crosstenantheadersstamped: MN2PR11MB4741 x-originatororg: comcast.com Content-Type: multipart/alternative; boundary="_000_MN2PR11MB435119C784054F763618FC04F7029MN2PR11MB4351namp_" MIME-Version: 1.0 X-CFilter-Loop: Forward AAETWZ X-Proofpoint-ORIG-GUID: BO5W9k1qVmNLblmpYM5sLSUVPQKbKF5Q X-Proofpoint-GUID: BO5W9k1qVmNLblmpYM5sLSUVPQKbKF5Q X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.391, 18.0.790 definitions=2021-06-29_06:2021-06-28, 2021-06-29 signatures=0 X-Proofpoint-Spam-Reason: safe Archived-At: Subject: Re: [Bimi] What if DKIM doesn't validate the selector header. X-BeenThere: bimi@ietf.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Brand Indicators for Message Identification List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2021 13:34:19 -0000 --_000_MN2PR11MB435119C784054F763618FC04F7029MN2PR11MB4351namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SmFrdWIsDQoNClRoYW5rcyBmb3IgdGhlIGZlZWRiYWNrLiAgV2XigJl2ZSBoYWQgc29tZSBkaXNj dXNzaW9ucyBzaW5jZSB0aGlzLCBhbmQgSSBiZWxpZXZlIHdlIGNvbmN1ciB3aXRoIHRoZSBzdWdn ZXN0aW9ucyBiZWxvdy4gICBUaG9zZSBjaGFuZ2VzIHNob3VsZCBhcHBlYXIgaW4gdGhlIG5leHQg ZHJhZnQgcmV2aXNpb24uDQoNCi0tDQpBbGV4IEJyb3RtYW4NClNyLiBFbmdpbmVlciwgQW50aS1B YnVzZSAmIE1lc3NhZ2luZyBQb2xpY3kNCkNvbWNhc3QNCg0KRnJvbTogYmltaSA8YmltaS1ib3Vu Y2VzQGlldGYub3JnPiBPbiBCZWhhbGYgT2YgSmFrdWIgT2xleGENClNlbnQ6IE1vbmRheSwgSnVu ZSAyOCwgMjAyMSAyOjUzIEFNDQpUbzogQnJvdG1hbiwgQWxleCA8QWxleF9Ccm90bWFuPTQwY29t Y2FzdC5jb21AZG1hcmMuaWV0Zi5vcmc+OyBiaW1pQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW0Jp bWldIFdoYXQgaWYgREtJTSBkb2Vzbid0IHZhbGlkYXRlIHRoZSBzZWxlY3RvciBoZWFkZXIuDQoN Cg0KSGkgQWxleCwNCg0Kc29ycnkgZm9yIHRoZSBsYXRlIHJlc3BvbnNlLiBJIHdhcyB0aGlua2lu ZyBhYm91dCB0aGlzIGEgbG90IGFuZCBoZXJlIGFyZSBteSB0aG91Z2h0czoNCg0KYSkgdGhlIHNl bGVjdG9yIGhlYWRlciByZWFsbHkgbmVlZHMgdG8gYmUgc2VjdXJlIGFuZCB0aGVyZWZvcmUgREtJ TSBzaWduZWQgYW5kIHRoZSBETUFSQyBtdXN0IHBhc3MuIE90aGVyd2lzZSBhIHRoaXJkIHBhcnR5 IG1heSBmaW5kIGFuIGFidXNlIHZlY3RvciBieSByZWx5aW5nIG9uIGEgZmFsbGJhY2sgdG8gZGVm YXVsdCBzZWxlY3RvciB3aGljaCBtYXkgYmUgZGVjZXB0aXZlLiBJbiBzaG9ydCAtIHRoZXJlIHNo b3VsZCBub3QgYmUgYSBmYWxsYmFjayB0byBkZWZhdWx0IC0gdGhlcmUgd2FzIGEgY2xlYXIgaW50 ZW50IGluIHNwZWNpZnlpbmcgdGhlIHNlbGVjdG9yIGFuZCB0aGF0IGludGVudCBzaG91bGQgYmUg aG9ub3JlZCBhcyBtdWNoIGFzIHBvc3NpYmxlLg0KDQpiKSBJZiB0aGVyZSBpcyBhIHRydXN0ZWQg QVJDIHNpZ25hdHVyZSB0aGUgbWVzc2FnZSBhbmQgdGhlIHNlbGVjdG9yIHVzZWQgc2hvdWxkIGJl IHRydXN0ZWQgYXMgd2VsbC4NCg0KV2hpbGUgSSBiZWxpZXZlIG1hcmtldGVycyB3b3VsZCBwcmVm ZXIgdGhlIGZhbGxiYWNrIHRvIGRlZmF1bHQgc2VsZWN0b3IgaWYgdGhlIHNwZWNpZmllZCBzZWxl Y3RvciBmYWlscywgSSdtIGFsc28gd29ycmllZCBpdCBtYXkgb3BlbiBkb29ycyB0byBES0lNIHJl cGxheSBhdHRhY2tzIHRvIGdldCB0aGUgQklNSSBkaXNwbGF5ZWQuDQoNCkpha3ViIE9sZXhhDQpG b3VuZGVyICYgQ0VPDQpFLW1haWw6IGpha3ViQG1haWxraXQuY29tPG1haWx0bzpqYWt1YkBtYWls a2l0LmNvbT4NClRlbDogKzQyMCA3NzcgNzQ0IDQ0MDx0ZWw6KzQyMDc3Nzc0NDQ0MD4NCg0KTWFp bGtpdCAtIENsb3NpbmcgdGhlIGNpcmNsZSBiZXR3ZWVuIERlbGl2ZXJhYmlsaXR5IGFuZCBFbmdh Z2VtZW50PGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovd3d3Lm1haWxraXQuY29t X187ISFDUWwzbWNIWDJBIVU1U0VPWS1sMWpzN1k1aEF5UUhoWTFuMFk5bVAxZzd2aGhzNVFhc2Mz RHhyTjFTQUZ4WUdDZG9IdGdHYU1Ia0stX3k3Y3dNJD4NCk9uIDA2LjA1LjIwMjEgMTU6MTksIEJy b3RtYW4sIEFsZXggd3JvdGU6DQpKYWt1YiwNCg0KQXJlIHlvdSBzdWdnZXN0aW5nIHRoYXQgaW4g b3JkZXIgdG8gdXNlIGFuIGFsdGVybmF0ZSBzZWxlY3RvciAoYmV5b25kIGRlZmF1bHQuX2JpbWku c3ViLmV4YW1wbGUuY29tIG9yIHNpbWlsYXIgZGVmYXVsdCkgdGhhdCBpdCBNVVNUIGJlIERLSU0t c2lnbmVkLCBhbmQgTVVTVCBhbGlnbiBpbiB0aGUgRE1BUkMtc2Vuc2U/ICBJIGNvdWxkIHNlZSB0 aGF0IGFzIGJlaW5nIHJlYXNvbmFibGUuICBMZXTigJlzIHNheSB0aGlzIGhhcHBlbnMuICBJZiBE S0lNICh3aGljaCBvcmlnaW5hbGx5IHNpZ25lZCB0aGUgaGVhZGVyIGFuZCB3YXMgcHJvcGVybHkg YWxpZ25lZCkgaXMgbWFuZ2xlZCBkdXJpbmcgZm9yd2FyZGluZywgYW5kIEFSQyBpcyBwcm9wZXJs eSB2YWxpZGF0ZWQsIGlzIHRoYXQgYWxzbyBhY2NlcHRhYmxlIHRvIHVzZSBhbiBzcGVjaWZpZWQg c2VsZWN0b3I/DQoNCknigJltIGFsc28gbm90IHN1cmUgaXQgYW5zd2VycyB0aGUgb3JpZ2luYWwg cXVlc3Rpb24gKGlmIERLSU0gZmFpbHMsIGFuZCB0aGVyZeKAmXMgYSBzZWxlY3Rvciwgc2hvdWxk IHRoZSBldmFsdWF0b3IgZmFsbGJhY2sgdG8gZGVmYXVsdC5fYmltaSwgYXNzdW1pbmcgU1BGL0RN QVJDIHBhc3MvYWxpZ24pLg0KDQotLQ0KQWxleCBCcm90bWFuDQpTci4gRW5naW5lZXIsIEFudGkt QWJ1c2UgJiBNZXNzYWdpbmcgUG9saWN5DQpDb21jYXN0DQoNCkZyb206IGJpbWkgPGJpbWktYm91 bmNlc0BpZXRmLm9yZz48bWFpbHRvOmJpbWktYm91bmNlc0BpZXRmLm9yZz4gT24gQmVoYWxmIE9m IEpha3ViIE9sZXhhDQpTZW50OiBGcmlkYXksIEFwcmlsIDMwLCAyMDIxIDI6NDQgQU0NClRvOiBi aW1pQGlldGYub3JnPG1haWx0bzpiaW1pQGlldGYub3JnPg0KU3ViamVjdDogUmU6IFtCaW1pXSBX aGF0IGlmIERLSU0gZG9lc24ndCB2YWxpZGF0ZSB0aGUgc2VsZWN0b3IgaGVhZGVyLg0KDQoNCklm IHRoZSBsb2dpYyByZWxpZXMgb25seSBvbiBETUFSQyBhdXRoZW50aWNhdGluZyByYXRoZXIgdGhh biBES0lNIHBhc3MgdGhlbiB3aGF0IGlzIHRoZSBhYnVzZSByaXNrIGlmIHRoZSBCSU1JLVNlbGVj dG9yIGhlYWRlciBpcyB1bnNpZ25lZD8gWW91IHRydXN0IHRoZSBzb3VyY2UgZG9tYWluLCB0aGUg QklNSSByZWNvcmQgY29tZXMgZnJvbSB0aGF0ICJ0cnVzdGVkIHNvdXJjZSIgYW5kIHRoZXJlIHdh cyBhIGNsZWFyIGludGVudCBmcm9tIHRoZSBzZW5kZXIgZm9yIGEgc3BlY2lmaWMgc2VsZWN0b3Iu IEknZCBzdWdnZXN0IGEgYmluYXJ5IGNob2ljZSBoZXJlIC0gZWl0aGVyIE1VU1Qgb3Igbm8gc2ln bmF0dXJlIHJlcXVpcmVtZW50IGZvciB0aGUgc2VsZWN0b3IgYXQgYWxsLg0KDQpKYWt1YiBPbGV4 YQ0KRm91bmRlciAmIENFTw0KRS1tYWlsOiBqYWt1YkBtYWlsa2l0LmNvbTxtYWlsdG86amFrdWJA bWFpbGtpdC5jb20+DQpUZWw6ICs0MjAgNzc3IDc0NCA0NDA8dGVsOis0MjA3Nzc3NDQ0NDA+DQoN Ck1haWxraXQgLSBDbG9zaW5nIHRoZSBjaXJjbGUgYmV0d2VlbiBEZWxpdmVyYWJpbGl0eSBhbmQg RW5nYWdlbWVudDxodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L3d3dy5tYWlsa2l0 LmNvbV9fOyEhQ1FsM21jSFgyQSFUZkxDVlV3bEE2Ti1VbUdCZHNUSzgzRU1KN1k2ZTB2WkRiYWtt QWFkUUJVRXVrVmVLTlVsVlZiMmFZZGFUNnQ3aUtzNWFjVSQ+DQpPbiAzMC4wNC4yMDIxIDM6MzMs IE1hcmMgQnJhZHNoYXcgd3JvdGU6DQpIaSwNCg0KSSBzZWUgd2hhdCB5b3UgYXJlIHNheWluZywg dGhpcyBpcyB0aGUgc2VjdGlvbi4uLg0KDQpJZiBwcmVzZW50LCB0aGUgQklNSS1TZWxlY3RvciBo ZWFkZXIgU0hPVUxEIGJlIGluY2x1ZGVkIGluIHRoZSBETUFSQy1hbGlnbmVkDQpES0lNIHNpZ25h dHVyZSB1c2VkIHRvIGNvbmZpcm0gYXV0aGVudGljaXR5IG9mIHRoZSBtZXNzYWdlLiAgSWYgaXQg aXMgbm90DQppbmNsdWRlZCBpbiB0aGUgRE1BUkMtY29tcGxpYW50IERLSU0gc2lnbmF0dXJlLCB0 aGUgaGVhZGVyIFNIT1VMRCBiZSBpZ25vcmVkLg0KDQpJbiB0aGUgYWJzZW5jZSBvZiBhIGNsZWFy IHN0YXRlbWVudCBvZiB3aGF0IHNob3VsZCBoYXBwZW4gaWYgdGhlIEJJTUktU2VsZWN0b3IgaXMg aW5jbHVkZWQgaW4gYSBmYWlsaW5nIERLSU0gc2lnbmF0dXJlIEkgaGFkIHJlYWQgKGFuZCBpbXBs ZW1lbnRlZCkgdGhpcyBhcyBpZ25vcmluZyB0aGlzIGhlYWRlciB1bmxlc3MgaXQgaGFzIGEgdmFs aWQgREtJTSBzaWduYXR1cmUsIGJ1dCBub3QgY29uc2lkZXJpbmcgYSBmYWlsZWQgc2lnbmF0dXJl IGFzIGEgYmxvY2tlciBpZiBETUFSQyBwYXNzZXMgZm9yIHNvbWUgb3RoZXIgcmVhc29uLCBlaXRo ZXIgU1BGLCBvciB0aGUgcHJlc2VuY2Ugb2YgYSBzZWNvbmQgcGFzc2luZyBES0lNIHNpZ25hdHVy ZSBmb3IgdGhlIHNhbWUgZG9tYWluLg0KDQpJIHByb3Bvc2UgdGhlIG1vZGlmaWNhdGlvbiBvZiB0 aGlzIHNlY3Rpb24gdG8gc3RhdGUgdGhhdCBmYWlsaW5nIERLSU0gc2lnbmF0dXJlcyBTSE9VTEQg YmUgaWdub3JlZCwgYnV0IEJJTUkgcHJvY2Vzc2luZyBTSE9VTEQgY29udGludWUuDQpUaGUgdXNl IG9mIFNIT1VMRCBpbiB0aGlzIHNlY3Rpb24gd2FzIGludGVuZGVkIHRvIGNvdmVyIHRoZSBjYXNl cyB3aGVyZSBNQlBzIGRpZCBub3QgaW1wbGVtZW50IHRoaXMgY2hlY2ssIGhvd2V2ZXIgSSB3b3Vs ZCBiZSBoYXBweSB0byBtYWtlIHRoZXNlIGNoZWNrcyBhIE1VU1QsIHdoYXQgaXMgdGhlIG9waW5p b24gb2YgdGhlIGdyb3VwPw0KDQpPbiBGcmksIDMwIEFwciAyMDIxLCBhdCAxOjQ1IEFNLCBaYWNr IEFhYiB3cm90ZToNCkhpLA0KPlNlZW1zIG1vcmUgYSBxdWVzdGlvbiBhYm91dCBzaG91bGQgYSBy ZWNlaXZlciBnbyB0byBkZWZhdWx0Ll9iaW1pIChvciBzb21ldGhpbmcgZWxzZSkgaWYgdGhlIHNl bGVjdG9yIGlzIHNwZWNpZmllZCBidXQgc2VlbXMgdW51c2FibGUgKGVpdGhlciBub3Qgc2lnbmVk IG9yIHNpZ25hdHVyZSBmYWlscykuDQpUaGlzIGlzIGl0IGV4YWN0bHkuICBNYXliZSBJIG1pc3Nl ZCBzb21ldGhpbmcsIGJ1dCBhcyB3cml0dGVuIHRoZXJlIGlzIG5vIHN1Z2dlc3RlZCBvciByZXF1 aXJlZCBhY3Rpb24gaWYgdGhlIHJlY2VpdmVyIHNlZXMgdGhhdCB0aGUgQklNSS1zZWxlY3RvciBp cyBES0lNIHNpZ25lZCBidXQgdGhhdCBES0lNIGZhaWxzIHRvIHZhbGlkYXRlLiAgVGhpcyBjYW4g cHJvYmFibHkgYmUgY292ZXJlZCB3aXRoIG9uZSBsaW5lIGluIHNlY3Rpb24gNS40LCBpdCdzIGp1 c3QgYSBxdWVzdGlvbiBvZiAic2hvdWxkIHRoZSByZWNlaXZlciBza2lwIHRvIGRlZmF1bHQuX2Jp bWkuIG9yIHNraXAgQklNSSBlbnRpcmVseT8iDQpUaGFua3MhDQpaYWNrIEFhYiAoSGUvSGltKQ0K U2VuaW9yIENvbnN1bHRhbnQsIFRyZW5kbGluZSBJbnRlcmFjdGl2ZQ0KTyArMSAoNTEyKSA3MTct NDA5Nzx0ZWw6KzE1MTI3MTc0MDk3PiB8IEMgKzEgKDQwNCkgMzE3LTY3Mjk8dGVsOisxNDA0MzE3 NjcyOT4gfCBXIHRyZW5kbGluZWkuY29tPGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRw czovd3d3LnRyZW5kbGluZWludGVyYWN0aXZlLmNvbS9fXzshIUNRbDNtY0hYMkEhVGZMQ1ZVd2xB Nk4tVW1HQmRzVEs4M0VNSjdZNmUwdlpEYmFrbUFhZFFCVUV1a1ZlS05VbFZWYjJhWWRhVDZ0NzJS SWNEQW8kPg0KDQoNCk9uIFRodSwgQXByIDI5LCAyMDIxIGF0IDExOjE5IEFNIEJyb3RtYW4sIEFs ZXggPEFsZXhfQnJvdG1hbj00MGNvbWNhc3QuY29tQGRtYXJjLmlldGYub3JnPG1haWx0bzo0MGNv bWNhc3QuY29tQGRtYXJjLmlldGYub3JnPj4gd3JvdGU6DQoNCknigJltIG5vdCBlbnRpcmVseSBz dXJlIHRoYXQgYW5zd2VycyB0aGUgb3JpZ2luYWwgcXVlc3Rpb24uICBJIGRvbuKAmXQgdGhpbmsg dGhlIE9QIGlzIGFuIGF0dGVtcHQgdG8gc2Vjb25kIGd1ZXNzIERNQVJDLiBTZWVtcyBtb3JlIGEg cXVlc3Rpb24gYWJvdXQgc2hvdWxkIGEgcmVjZWl2ZXIgZ28gdG8gZGVmYXVsdC5fYmltaSAob3Ig c29tZXRoaW5nIGVsc2UpIGlmIHRoZSBzZWxlY3RvciBpcyBzcGVjaWZpZWQgYnV0IHNlZW1zIHVu dXNhYmxlIChlaXRoZXIgbm90IHNpZ25lZCBvciBzaWduYXR1cmUgZmFpbHMpLiAgSWYgd2UgYmVs aWV2ZSB0aGUgc2VjdGlvbnMgQS4xL0EuNSBjb3ZlcnMgdGhpcyBzY2VuYXJpbywgcGVyaGFwcyB3 ZSBqdXN0IG5lZWQgYSBsaXR0bGUgZW1iZWxsaXNobWVudCBvbiB0aGlzIHNjZW5hcmlvIGJlbG93 IHRvIGJlIG1vcmUgZXhwbGljaXQuICBBbmQgeWVzLCBsb2NhbCBwb2xpY3kgY2FuIGltcGFjdCB0 aGlzLg0KDQoNCg0KLS0NCg0KQWxleCBCcm90bWFuDQoNClNyLiBFbmdpbmVlciwgQW50aS1BYnVz ZSAmIE1lc3NhZ2luZyBQb2xpY3kNCg0KQ29tY2FzdA0KDQoNCkZyb206IGJpbWkgPGJpbWktYm91 bmNlc0BpZXRmLm9yZzxtYWlsdG86YmltaS1ib3VuY2VzQGlldGYub3JnPj4gT24gQmVoYWxmIE9m IE1hcmMgQnJhZHNoYXcNClNlbnQ6IFRodXJzZGF5LCBBcHJpbCAyOSwgMjAyMSAyOjU2IEFNDQpU bzogYmltaUBpZXRmLm9yZzxtYWlsdG86YmltaUBpZXRmLm9yZz4NClN1YmplY3Q6IFJlOiBbQmlt aV0gV2hhdCBpZiBES0lNIGRvZXNuJ3QgdmFsaWRhdGUgdGhlIHNlbGVjdG9yIGhlYWRlci4NCg0K DQoNCkhpLA0KDQoNCg0KT3BpbmlvbjogVGhpcyBmZWVscyBsaWtlIGEgZGlzY3Vzc2lvbiBvdXRz aWRlIHRoZSBzY29wZSBvZiBCSU1JLCBTUEYgZm9yZ2VyeSBpcyBhIGtub3duIGlzc3VlIHJlZiB0 aGUgcmVjZW50IE11bHRpcGFzcyBhdHRhY2sgYXQgYSB3ZWxsIGtub3duIHZlbmRvci4gVGhlcmUg aXMgYSByZWxhdGVkIG5vdGUgaW4gdGhlICJVbnNpZ25lZCBCSU1JLVNlbGVjdG9yIEhlYWRlciIg c2VjdGlvbiBvZiB0aGUgc3BlYy4NCg0KV2UgZG8gc2VlIHNlbmRlcnMgd2l0aCBwPXJlamVjdCB3 aG8gcmVseSBlbnRpcmVseSBvbiBTUEYgYW5kIGRvIG5vdCBES0lNIHNpZ24gYXQgYWxsLCBJIHdv dWxkIGFyZ3VlIHRoYXQgdGhlIHByb2JsZW0gYmVpbmcgZGVzY3JpYmVkIGhlcmUgaXMgbW9yZSBh Ym91dCB2dWxuZXJhYmlsaXRpZXMgaW4gc29tZSBzaGFyZWQgaW5mcmFzdHJ1Y3R1cmUgcGxhdGZv cm1zIGFuZCBub3QgYWJvdXQgaG93IEJJTUkgc2hvdWxkIGJlIGltcGxlbWVudGVkLiBBdCB0aGUg dmVyeSBsZWFzdCwgSSB3b3VsZCBleHBlY3QgdGhhdCBkaXNjdXNzaW9uIHRvIHRha2UgcGxhY2Ug aW4gdGhlIERNQVJDIGdyb3VwLCBhbmQgdGhhdCBCSU1JIHNob3VsZCB0YWtlIHRoZSBETUFSQyBy ZXN1bHQgYXMgaXMgYXMgbXVjaCBhcyBpcyBwb3NzaWJsZSwgd2l0aG91dCBpbXBvc2luZyBhZGRp dGlvbmFsIGNvbnN0cmFpbnRzIG92ZXIgd2hhdCBjb25zdGl0dXRlcyBhIHZhbGlkIERNQVJDIHBh c3Mgb3IgZmFpbC4NCg0KTUJQcyBhcmUsIG9mIGNvdXJzZSwgZnJlZSB0byBpbXBsZW1lbnQgd2hh dGV2ZXIgYWRkaXRpb25hbCBjb25zdHJhaW50cyB0aGV5IHNlZSBmaXQsIGJ1dCBJIGRvbid0IGZl ZWwgdGhhdCB0aGlzIG9uZSBiZWxvbmdzIGluIEJJTUkuDQoNCg0KDQpPbiBUaHUsIDI5IEFwciAy MDIxLCBhdCA0OjI2IFBNLCBKYWt1YiBPbGV4YSB3cm90ZToNCg0KSGksDQoNCkluIG15IG9waW5p b24gaWYgREtJTSBmYWlscyB0byB2YWxpZGF0ZSB0aGUgbWVzc2FnZSBjb250ZW50IHRoZSBNQlAg c2hvdWxkIG5vdCBkaXNwbGF5IHRoZSBCSU1JIGF0IGFsbCAobm8gbWF0dGVyIHdoeSB0aGUgREtJ TSBmYWlsZWQpLiBUaGUgcmVhc29uaW5nIGZvciB0aGlzIGlzIHRoYXQgU1BGcyB2YWxpZGF0ZSBz aGFyZWQgaW5mcmFzdHJ1Y3R1cmVzIChPTDM2NSwgR1N1aXRlLCBldGMpIGFuZCBhcyBzdWNoIGRv bWFpbnMgY2FuIGJlIHNwb29mZWQgd2hpbGUgREtJTSBhdXRoZW50aWNhdGVzIHRoZSBhY3R1YWwg Y29udGVudC4gQklNSSBsb2dvcyBiZWluZyBkaXNwbGF5ZWQgb24gdGhlIG1lc3NhZ2UgbGlzdCAo c2VlIFlhaG9vIG1haWwgYXBwKSB0aGV5IGJlY29tZSBzb3J0IG9mIGEgIkZyb20iIGluZGljYXRv ciBmcm9tIHRoZSB1c2VycyBwZXJzcGVjdGl2ZSBhbmQgb3ZlciB0aW1lIHdpbGwgYmVjb21lIHNv cnQgb2YgYSB0cnVzdCBpbmRpY2F0b3IuIEJJTUkgc2hvdWxkIG1ha2UgZXZlcnkgZWZmb3J0IG9u IHRoZSBzdGFuZGFyZCBsZXZlbCB0byBkaXNjb3VyYWdlIGFueSB1c2Ugb2YgQklNSSB0aGF0IGZh aWxlZCBhIGNyaXRpY2FsIHZhbGlkYXRpb24gb2YgdGhlIG1lc3NhZ2UgYm9keSBhcyB0aGF0IGFs b25lIGNvdWxkIGJlIGFuIGFidXNlIHZlY3Rvci4NCg0KSWYgYSBwaGlzaGluZyBvcGVyYXRpb24g dGFyZ2V0cyBidXNpbmVzc2VzIHRoYXQgYXJlIHVzaW5nIHNoYXJlZCBpbmZyYXN0cnVjdHVyZXMg YW5kIGhhdmUgQklNSSwgdGhleSBjb3VsZCBhY2hpZXZlIHF1aXRlIGEgc2lnbmlmaWNhbnQgc3Vj Y2VzcyBpZiB0aGUgbWVzc2FnZXMgZ2V0IGhpZ2hsaWdodGVkIHdpdGggYSBsb2dvIHdoaWxlIGZh aWxpbmcgREtJTS4gVGhpcyB3b3VsZCB1bmRlcm1pbmUgQklNSSBpbiBhIG1ham9yIHdheSBhbmQg REtJTSBhcyB3ZWxsLg0KDQpKYWt1YiBPbGV4YQ0KDQpGb3VuZGVyICYgQ0VPDQoNCkUtbWFpbDog amFrdWJAbWFpbGtpdC5jb208bWFpbHRvOmpha3ViQG1haWxraXQuY29tPg0KDQpUZWw6ICs0MjAg Nzc3IDc0NCA0NDA8dGVsOis0MjA3Nzc3NDQ0NDA+DQoNCg0KDQpNYWlsa2l0IC0gQ2xvc2luZyB0 aGUgY2lyY2xlIGJldHdlZW4gRGVsaXZlcmFiaWxpdHkgYW5kIEVuZ2FnZW1lbnQ8aHR0cHM6Ly91 cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi93d3cubWFpbGtpdC5jb21fXzshIUNRbDNtY0hYMkEh V1EtMjFITWpwOWtnOUdha3dCVF9wQVBjSFhNMzhLMnlVZF9yMWlJWllmRTk3YTM0d0FxZlVNaXhK WHVHY24zQTFER1VwdHckPg0KDQpPbiAyOC4wNC4yMDIxIDIyOjA2LCBaYWNrIEFhYiB3cm90ZToN Cg0KSSB3YXMgcmVhZGluZyBzZWN0aW9uIDUuNCBvZiB0aGUgZG9jdW1lbnQgYW5kIGl0J3MgcHJl dHR5IGNsZWFyIHdoYXQgdG8gZG8gaWYgdGhlIHNlbGVjdG9yIGhlYWRlciAoQklNSS1zZWxlY3Rv cikgaXMgbm90IGluY2x1ZGVkIGluIHRoZSBETUFSQy1hbGlnbmVkIERLSU0gc2lnbmF0dXJlOiB0 cmVhdCBpdCBhcyBpZiB0aGVyZSBpcyBubyBzZWxlY3RvciBoZWFkZXIgYW5kIG1vdmUgb24gdG8g ZGVmYXVsdC5fYmltaS4NCg0KQlVUDQoNCldoYXQgaWYgdGhlIERLSU0gc2lnbmF0dXJlIGluY2x1 ZGVzIHRoZSBCSU1JLXNlbGVjdG9yIGhlYWRlciBidXQgZG9lc24ndCBwYXNzIHZhbGlkYXRpb24g QU5EIERNQVJDIHN0aWxsIHBhc3NlcyB2aWEgU1BGPw0KDQpJdCBzZWVtcyB0byBtZSAoZ2l2ZW4g REtJTSdzIG5vcm1hbCB1c2UgLSBhIGJyb2tlbiBzaWduYXR1cmUgc2hvdWxkIGJlIHRyZWF0ZWQg YXMgbm90IGhhdmluZyBhIHNpZ25hdHVyZSkgdGhhdCB0aGUgcmVjZWl2ZXIgc2hvdWxkIHRyZWF0 IHRoZSBCSU1JLXNlbGVjdG9yIGhlYWRlciBhcyB1bnNpZ25lZCBhbmQgbW92ZSBvbiB0byBkZWZh dWx0Ll9iaW1pLCBidXQgaXQncyBub3QgYWN0dWFsbHkgc3RhdGVkIG9uZSB3YXkgb3IgdGhlIG90 aGVyLCBzbyB0aGUgcmVzcG9uc2UgZnJvbSB0aGUgcmVjZWl2ZXIgY291bGQgYmUgdG8gc3RvcCBC SU1JIHZhbGlkYXRpb24gZW50aXJlbHkuDQoNCg0KDQoNCg0KWmFjayBBYWIgKEhlL0hpbSkNClNl bmlvciBDb25zdWx0YW50LCBUcmVuZGxpbmUgSW50ZXJhY3RpdmUNCk8gKzEgKDUxMikgNzE3LTQw OTc8dGVsOisxNTEyNzE3NDA5Nz4gfCBDICsxICg0MDQpIDMxNy02NzI5PHRlbDorMTQwNDMxNzY3 Mjk+IHwgVyB0cmVuZGxpbmVpLmNvbTxodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6 L3d3dy50cmVuZGxpbmVpbnRlcmFjdGl2ZS5jb20vX187ISFDUWwzbWNIWDJBIVdRLTIxSE1qcDlr ZzlHYWt3QlRfcEFQY0hYTTM4SzJ5VWRfcjFpSVpZZkU5N2EzNHdBcWZVTWl4Slh1R2NuM0EydGlY V19ZJD4NCg0KLS0NCg0KYmltaSBtYWlsaW5nIGxpc3QNCg0KYmltaUBpZXRmLm9yZzxtYWlsdG86 YmltaSU0MGlldGYub3JnPg0KDQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZv L2JpbWk8aHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9iaW1pX187ISFDUWwzbWNIWDJBIVdRLTIxSE1qcDlrZzlHYWt3QlRfcEFQ Y0hYTTM4SzJ5VWRfcjFpSVpZZkU5N2EzNHdBcWZVTWl4Slh1R2NuM0EzUDRWY0dRJD4NCg0KDQoN Cg0KDQotLQ0KDQpbaHR0cHM6Ly9zZWN1cmUuZ3JhdmF0YXIuY29tL2F2YXRhci9iMjE0YTAyMGY0 ZWIxMzVjZTJhNjkwMWQ3NTQwYmRiMT9zPTQ0JmQ9NDA0XQ0KDQoNCiAgTWFyYyBCcmFkc2hhdw0K DQogIG1hcmNicmFkc2hhdy5uZXQ8aHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHA6L21h cmNicmFkc2hhdy5uZXQvX187ISFDUWwzbWNIWDJBIVdRLTIxSE1qcDlrZzlHYWt3QlRfcEFQY0hY TTM4SzJ5VWRfcjFpSVpZZkU5N2EzNHdBcWZVTWl4Slh1R2NuM0FqdjFkZW9jJD4gfCBAbWFyY2Jy YWRzaGF3PGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovdHdpdHRlci5jb20vbWFy Y2JyYWRzaGF3X187ISFDUWwzbWNIWDJBIVdRLTIxSE1qcDlrZzlHYWt3QlRfcEFQY0hYTTM4SzJ5 VWRfcjFpSVpZZkU5N2EzNHdBcWZVTWl4Slh1R2NuM0FZbnppUVhBJD4NCg0KDQoNCg0KDQotLQ0K YmltaSBtYWlsaW5nIGxpc3QNCmJpbWlAaWV0Zi5vcmc8bWFpbHRvOmJpbWlAaWV0Zi5vcmc+DQpo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2JpbWk8aHR0cHM6Ly91cmxkZWZl bnNlLmNvbS92My9fX2h0dHBzOi93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9iaW1pX187 ISFDUWwzbWNIWDJBIVRmTENWVXdsQTZOLVVtR0Jkc1RLODNFTUo3WTZlMHZaRGJha21BYWRRQlVF dWtWZUtOVWxWVmIyYVlkYVQ2dDd0bXRNaGZnJD4NCi0tDQpiaW1pIG1haWxpbmcgbGlzdA0KYmlt aUBpZXRmLm9yZzxtYWlsdG86YmltaSU0MGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9iaW1pPGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczov d3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vYmltaV9fOyEhQ1FsM21jSFgyQSFUZkxDVlV3 bEE2Ti1VbUdCZHNUSzgzRU1KN1k2ZTB2WkRiYWttQWFkUUJVRXVrVmVLTlVsVlZiMmFZZGFUNnQ3 dG10TWhmZyQ+DQoNCg0KLS0NCltodHRwczovL3NlY3VyZS5ncmF2YXRhci5jb20vYXZhdGFyL2Iy MTRhMDIwZjRlYjEzNWNlMmE2OTAxZDc1NDBiZGIxP3M9NDQmZD00MDRdDQoNCiAgTWFyYyBCcmFk c2hhdw0KICBtYXJjYnJhZHNoYXcubmV0PGh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRw Oi9tYXJjYnJhZHNoYXcubmV0L19fOyEhQ1FsM21jSFgyQSFUZkxDVlV3bEE2Ti1VbUdCZHNUSzgz RU1KN1k2ZTB2WkRiYWttQWFkUUJVRXVrVmVLTlVsVlZiMmFZZGFUNnQ3OU50S1ZzUSQ+IHwgQG1h cmNicmFkc2hhdzxodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L3R3aXR0ZXIuY29t L21hcmNicmFkc2hhd19fOyEhQ1FsM21jSFgyQSFUZkxDVlV3bEE2Ti1VbUdCZHNUSzgzRU1KN1k2 ZTB2WkRiYWttQWFkUUJVRXVrVmVLTlVsVlZiMmFZZGFUNnQ3YkNiV0tMOCQ+DQoNCg0KDQoNCg0K DQo= --_000_MN2PR11MB435119C784054F763618FC04F7029MN2PR11MB4351namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPCEtLVtp ZiAhbXNvXT48c3R5bGU+dlw6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kb1w6KiB7 YmVoYXZpb3I6dXJsKCNkZWZhdWx0I1ZNTCk7fQ0Kd1w6KiB7YmVoYXZpb3I6dXJsKCNkZWZhdWx0 I1ZNTCk7fQ0KLnNoYXBlIHtiZWhhdmlvcjp1cmwoI2RlZmF1bHQjVk1MKTt9DQo8L3N0eWxlPjwh W2VuZGlmXS0tPjxzdHlsZT48IS0tDQovKiBGb250IERlZmluaXRpb25zICovDQpAZm9udC1mYWNl DQoJe2ZvbnQtZmFtaWx5OiJDYW1icmlhIE1hdGgiOw0KCXBhbm9zZS0xOjIgNCA1IDMgNSA0IDYg MyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDYWxpYnJpOw0KCXBhbm9zZS0xOjIg MTUgNSAyIDIgMiA0IDMgMiA0O30NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6VmVyZGFuYTsN CglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAq Lw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGlu Ow0KCWZvbnQtc2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7 fQ0KYTpsaW5rLCBzcGFuLk1zb0h5cGVybGluaw0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJ Y29sb3I6Ymx1ZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnAucXQtbXNvbm9ybWFs LCBsaS5xdC1tc29ub3JtYWwsIGRpdi5xdC1tc29ub3JtYWwNCgl7bXNvLXN0eWxlLW5hbWU6cXQt bXNvbm9ybWFsOw0KCW1zby1tYXJnaW4tdG9wLWFsdDphdXRvOw0KCW1hcmdpbi1yaWdodDowaW47 DQoJbXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87DQoJbWFyZ2luLWxlZnQ6MGluOw0KCWZvbnQt c2l6ZToxMS4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0Kc3Bhbi5z aXplDQoJe21zby1zdHlsZS1uYW1lOnNpemU7fQ0Kc3Bhbi5xdC1nbWFpbC1tODc4MTA3NzEzNTM4 NDU0MTg3MnNpemUNCgl7bXNvLXN0eWxlLW5hbWU6cXQtZ21haWwtbV84NzgxMDc3MTM1Mzg0NTQx ODcyc2l6ZTt9DQpzcGFuLkVtYWlsU3R5bGUyMw0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1y ZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjp3aW5kb3d0 ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZv bnQtc2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGlu Ow0KCW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJ e3BhZ2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+ DQo8bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+ PCFbZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4 dD0iZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxh eW91dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5r PSJibHVlIiB2bGluaz0icHVycGxlIiBzdHlsZT0id29yZC13cmFwOmJyZWFrLXdvcmQiPg0KPGRp diBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkpha3ViLDxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MgZm9yIHRoZSBmZWVkYmFjay4mbmJzcDsgV2XigJl2 ZSBoYWQgc29tZSBkaXNjdXNzaW9ucyBzaW5jZSB0aGlzLCBhbmQgSSBiZWxpZXZlIHdlIGNvbmN1 ciB3aXRoIHRoZSBzdWdnZXN0aW9ucyBiZWxvdy4mbmJzcDsmbmJzcDsgVGhvc2UgY2hhbmdlcyBz aG91bGQgYXBwZWFyIGluIHRoZSBuZXh0IGRyYWZ0IHJldmlzaW9uLjxvOnA+PC9vOnA+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+LS08bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFs ZXggQnJvdG1hbjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U3IuIEVuZ2lu ZWVyLCBBbnRpLUFidXNlICZhbXA7IE1lc3NhZ2luZyBQb2xpY3k8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPkNvbWNhc3Q8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4w cHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0Ux RTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxiPkZyb206PC9iPiBiaW1pICZsdDtiaW1pLWJvdW5jZXNAaWV0Zi5vcmcmZ3Q7IDxiPk9u IEJlaGFsZiBPZiA8L2I+DQpKYWt1YiBPbGV4YTxicj4NCjxiPlNlbnQ6PC9iPiBNb25kYXksIEp1 bmUgMjgsIDIwMjEgMjo1MyBBTTxicj4NCjxiPlRvOjwvYj4gQnJvdG1hbiwgQWxleCAmbHQ7QWxl eF9Ccm90bWFuPTQwY29tY2FzdC5jb21AZG1hcmMuaWV0Zi5vcmcmZ3Q7OyBiaW1pQGlldGYub3Jn PGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbQmltaV0gV2hhdCBpZiBES0lNIGRvZXNuJ3QgdmFs aWRhdGUgdGhlIHNlbGVjdG9yIGhlYWRlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwPkhpIEFsZXgs PG86cD48L286cD48L3A+DQo8cD5zb3JyeSBmb3IgdGhlIGxhdGUgcmVzcG9uc2UuIEkgd2FzIHRo aW5raW5nIGFib3V0IHRoaXMgYSBsb3QgYW5kIGhlcmUgYXJlIG15IHRob3VnaHRzOjxvOnA+PC9v OnA+PC9wPg0KPHA+YSkgdGhlIHNlbGVjdG9yIGhlYWRlciByZWFsbHkgbmVlZHMgdG8gYmUgc2Vj dXJlIGFuZCB0aGVyZWZvcmUgREtJTSBzaWduZWQgYW5kIHRoZSBETUFSQyBtdXN0IHBhc3MuIE90 aGVyd2lzZSBhIHRoaXJkIHBhcnR5IG1heSBmaW5kIGFuIGFidXNlIHZlY3RvciBieSByZWx5aW5n IG9uIGEgZmFsbGJhY2sgdG8gZGVmYXVsdCBzZWxlY3RvciB3aGljaCBtYXkgYmUgZGVjZXB0aXZl LiBJbiBzaG9ydCAtIHRoZXJlIHNob3VsZCBub3QgYmUgYSBmYWxsYmFjaw0KIHRvIGRlZmF1bHQg LSB0aGVyZSB3YXMgYSBjbGVhciBpbnRlbnQgaW4gc3BlY2lmeWluZyB0aGUgc2VsZWN0b3IgYW5k IHRoYXQgaW50ZW50IHNob3VsZCBiZSBob25vcmVkIGFzIG11Y2ggYXMgcG9zc2libGUuPG86cD48 L286cD48L3A+DQo8cD5iKSBJZiB0aGVyZSBpcyBhIHRydXN0ZWQgQVJDIHNpZ25hdHVyZSB0aGUg bWVzc2FnZSBhbmQgdGhlIHNlbGVjdG9yIHVzZWQgc2hvdWxkIGJlIHRydXN0ZWQgYXMgd2VsbC48 bzpwPjwvbzpwPjwvcD4NCjxwPldoaWxlIEkgYmVsaWV2ZSBtYXJrZXRlcnMgd291bGQgcHJlZmVy IHRoZSBmYWxsYmFjayB0byBkZWZhdWx0IHNlbGVjdG9yIGlmIHRoZSBzcGVjaWZpZWQgc2VsZWN0 b3IgZmFpbHMsIEknbSBhbHNvIHdvcnJpZWQgaXQgbWF5IG9wZW4gZG9vcnMgdG8gREtJTSByZXBs YXkgYXR0YWNrcyB0byBnZXQgdGhlIEJJTUkgZGlzcGxheWVkLjxvOnA+PC9vOnA+PC9wPg0KPGRp dj4NCjxwPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuMHB0O2NvbG9yOmJsYWNrO2xldHRl ci1zcGFjaW5nOjEuNXB0Ij5KYWt1YiBPbGV4YTwvc3Bhbj48L2I+PGI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMy4wcHQ7Y29sb3I6YmxhY2siPjxicj4NCjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMC4wcHQ7Y29sb3I6IzY2NjY2NiI+Rm91bmRlciAmYW1wOyBDRU88L3NwYW4+ PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMy4wcHQ7Y29sb3I6YmxhY2siPjxicj4NCjwvc3Bh bj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Y29sb3I6IzY2NjY2NiI+RS1tYWls OiA8YSBocmVmPSJtYWlsdG86amFrdWJAbWFpbGtpdC5jb20iIHRhcmdldD0iX2JsYW5rIj4NCmph a3ViQG1haWxraXQuY29tPC9hPjwvc3Bhbj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjBw dDtjb2xvcjpibGFjayI+PGJyPg0KPC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEw LjBwdDtjb2xvcjojNjY2NjY2Ij5UZWw6IDxhIGhyZWY9InRlbDomIzQzOzQyMDc3Nzc0NDQ0MCIg dGFyZ2V0PSJfYmxhbmsiPg0KJiM0Mzs0MjAgNzc3IDc0NCA0NDA8L2E+PC9zcGFuPjxiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTMuMHB0O2NvbG9yOmJsYWNrIj4gPGJyPg0KPGJyPg0KPGEgaHJl Zj0iaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi93d3cubWFpbGtpdC5jb21fXzsh IUNRbDNtY0hYMkEhVTVTRU9ZLWwxanM3WTVoQXlRSGhZMW4wWTltUDFnN3ZoaHM1UWFzYzNEeHJO MVNBRnhZR0Nkb0h0Z0dhTUhrSy1feTdjd00kIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQiPk1haWxraXQgLQ0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTAuMHB0O2ZvbnQtd2VpZ2h0Om5vcm1hbCI+Q2xvc2luZyB0aGUgY2lyY2xlIGJldHdlZW4g RGVsaXZlcmFiaWxpdHkgYW5kIEVuZ2FnZW1lbnQ8L3NwYW4+PC9hPg0KPG86cD48L286cD48L3Nw YW4+PC9iPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIDA2LjA1 LjIwMjEgMTU6MTksIEJyb3RtYW4sIEFsZXggd3JvdGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SmFrdWIsPG86cD48L286cD48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFy ZSB5b3Ugc3VnZ2VzdGluZyB0aGF0IGluIG9yZGVyIHRvIHVzZSBhbiBhbHRlcm5hdGUgc2VsZWN0 b3IgKGJleW9uZCBkZWZhdWx0Ll9iaW1pLnN1Yi5leGFtcGxlLmNvbSBvciBzaW1pbGFyIGRlZmF1 bHQpIHRoYXQgaXQgTVVTVCBiZSBES0lNLXNpZ25lZCwgYW5kIE1VU1QgYWxpZ24gaW4gdGhlIERN QVJDLXNlbnNlPyZuYnNwOyBJIGNvdWxkIHNlZSB0aGF0IGFzIGJlaW5nIHJlYXNvbmFibGUuJm5i c3A7IExldOKAmXMgc2F5IHRoaXMNCiBoYXBwZW5zLiZuYnNwOyBJZiBES0lNICh3aGljaCBvcmln aW5hbGx5IHNpZ25lZCB0aGUgaGVhZGVyIGFuZCB3YXMgcHJvcGVybHkgYWxpZ25lZCkgaXMgbWFu Z2xlZCBkdXJpbmcgZm9yd2FyZGluZywgYW5kIEFSQyBpcyBwcm9wZXJseSB2YWxpZGF0ZWQsIGlz IHRoYXQgYWxzbyBhY2NlcHRhYmxlIHRvIHVzZSBhbiBzcGVjaWZpZWQgc2VsZWN0b3I/PG86cD48 L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPknigJltIGFsc28gbm90IHN1cmUgaXQgYW5zd2VycyB0aGUgb3Jp Z2luYWwgcXVlc3Rpb24gKGlmIERLSU0gZmFpbHMsIGFuZCB0aGVyZeKAmXMgYSBzZWxlY3Rvciwg c2hvdWxkIHRoZSBldmFsdWF0b3IgZmFsbGJhY2sgdG8gZGVmYXVsdC5fYmltaSwgYXNzdW1pbmcg U1BGL0RNQVJDIHBhc3MvYWxpZ24pLjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+LS08 bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFsZXggQnJvdG1hbjxvOnA+PC9v OnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+U3IuIEVuZ2luZWVyLCBBbnRpLUFidXNlICZh bXA7IE1lc3NhZ2luZyBQb2xpY3k8bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PkNvbWNhc3Q8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpz b2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYg c3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5n OjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPkZyb206PC9iPiBi aW1pIDxhIGhyZWY9Im1haWx0bzpiaW1pLWJvdW5jZXNAaWV0Zi5vcmciPiZsdDtiaW1pLWJvdW5j ZXNAaWV0Zi5vcmcmZ3Q7PC9hPg0KPGI+T24gQmVoYWxmIE9mIDwvYj5KYWt1YiBPbGV4YTxicj4N CjxiPlNlbnQ6PC9iPiBGcmlkYXksIEFwcmlsIDMwLCAyMDIxIDI6NDQgQU08YnI+DQo8Yj5Ubzo8 L2I+IDxhIGhyZWY9Im1haWx0bzpiaW1pQGlldGYub3JnIj5iaW1pQGlldGYub3JnPC9hPjxicj4N CjxiPlN1YmplY3Q6PC9iPiBSZTogW0JpbWldIFdoYXQgaWYgREtJTSBkb2Vzbid0IHZhbGlkYXRl IHRoZSBzZWxlY3RvciBoZWFkZXIuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8cD5JZiB0aGUgbG9naWMg cmVsaWVzIG9ubHkgb24gRE1BUkMgYXV0aGVudGljYXRpbmcgcmF0aGVyIHRoYW4gREtJTSBwYXNz IHRoZW4gd2hhdCBpcyB0aGUgYWJ1c2UgcmlzayBpZiB0aGUgQklNSS1TZWxlY3RvciBoZWFkZXIg aXMgdW5zaWduZWQ/IFlvdSB0cnVzdCB0aGUgc291cmNlIGRvbWFpbiwgdGhlIEJJTUkgcmVjb3Jk IGNvbWVzIGZyb20gdGhhdCAmcXVvdDt0cnVzdGVkIHNvdXJjZSZxdW90OyBhbmQgdGhlcmUgd2Fz IGEgY2xlYXIgaW50ZW50IGZyb20gdGhlDQogc2VuZGVyIGZvciBhIHNwZWNpZmljIHNlbGVjdG9y LiBJJ2Qgc3VnZ2VzdCBhIGJpbmFyeSBjaG9pY2UgaGVyZSAtIGVpdGhlciBNVVNUIG9yIG5vIHNp Z25hdHVyZSByZXF1aXJlbWVudCBmb3IgdGhlIHNlbGVjdG9yIGF0IGFsbC48bzpwPjwvbzpwPjwv cD4NCjxkaXY+DQo8cD48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjBwdDtjb2xvcjpibGFj aztsZXR0ZXItc3BhY2luZzoxLjVwdCI+SmFrdWIgT2xleGE8L3NwYW4+PC9iPjxiPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTMuMHB0O2NvbG9yOmJsYWNrIj48YnI+DQo8L3NwYW4+PC9iPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2NvbG9yOiM2NjY2NjYiPkZvdW5kZXIgJmFtcDsgQ0VP PC9zcGFuPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTMuMHB0O2NvbG9yOmJsYWNrIj48YnI+ DQo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2NvbG9yOiM2NjY2NjYi PkUtbWFpbDogPGEgaHJlZj0ibWFpbHRvOmpha3ViQG1haWxraXQuY29tIiB0YXJnZXQ9Il9ibGFu ayI+DQpqYWt1YkBtYWlsa2l0LmNvbTwvYT48L3NwYW4+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMy4wcHQ7Y29sb3I6YmxhY2siPjxicj4NCjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMC4wcHQ7Y29sb3I6IzY2NjY2NiI+VGVsOiA8YSBocmVmPSJ0ZWw6JiM0Mzs0MjA3Nzc3 NDQ0NDAiIHRhcmdldD0iX2JsYW5rIj4NCiYjNDM7NDIwIDc3NyA3NDQgNDQwPC9hPjwvc3Bhbj48 Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEzLjBwdDtjb2xvcjpibGFjayI+IDxicj4NCjxicj4N CjxhIGhyZWY9Imh0dHBzOi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovd3d3Lm1haWxraXQu Y29tX187ISFDUWwzbWNIWDJBIVRmTENWVXdsQTZOLVVtR0Jkc1RLODNFTUo3WTZlMHZaRGJha21B YWRRQlVFdWtWZUtOVWxWVmIyYVlkYVQ2dDdpS3M1YWNVJCIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0Ij5NYWlsa2l0IC0NCjwvc3Bhbj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjEwLjBwdDtmb250LXdlaWdodDpub3JtYWwiPkNsb3NpbmcgdGhlIGNpcmNsZSBi ZXR3ZWVuIERlbGl2ZXJhYmlsaXR5IGFuZCBFbmdhZ2VtZW50PC9zcGFuPjwvYT4NCjwvc3Bhbj48 L2I+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5P biAzMC4wNC4yMDIxIDM6MzMsIE1hcmMgQnJhZHNoYXcgd3JvdGU6PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206 NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpLDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5JIHNlZSB3aGF0IHlvdSBhcmUg c2F5aW5nLCB0aGlzIGlzIHRoZSBzZWN0aW9uLi4uPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPklmIHByZXNlbnQsIHRoZSBCSU1JLVNlbGVjdG9y IGhlYWRlciBTSE9VTEQgYmUgaW5jbHVkZWQgaW4gdGhlIERNQVJDLWFsaWduZWQ8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkRLSU0gc2lnbmF0dXJl IHVzZWQgdG8gY29uZmlybSBhdXRoZW50aWNpdHkgb2YgdGhlIG1lc3NhZ2UuJm5ic3A7IElmIGl0 IGlzIG5vdDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+aW5jbHVkZWQgaW4gdGhlIERNQVJDLWNvbXBsaWFudCBES0lNIHNpZ25hdHVyZSwgdGhlIGhl YWRlciBTSE9VTEQgYmUgaWdub3JlZC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+SW4gdGhlIGFic2VuY2Ugb2YgYSBjbGVhciBzdGF0ZW1lbnQg b2Ygd2hhdCBzaG91bGQgaGFwcGVuIGlmIHRoZSBCSU1JLVNlbGVjdG9yIGlzIGluY2x1ZGVkIGlu IGEgZmFpbGluZyBES0lNIHNpZ25hdHVyZSBJIGhhZCByZWFkIChhbmQgaW1wbGVtZW50ZWQpIHRo aXMgYXMgaWdub3JpbmcgdGhpcyBoZWFkZXIgdW5sZXNzIGl0IGhhcyBhIHZhbGlkIERLSU0gc2ln bmF0dXJlLCBidXQgbm90IGNvbnNpZGVyaW5nIGENCiBmYWlsZWQgc2lnbmF0dXJlIGFzIGEgYmxv Y2tlciBpZiBETUFSQyBwYXNzZXMgZm9yIHNvbWUgb3RoZXIgcmVhc29uLCBlaXRoZXIgU1BGLCBv ciB0aGUgcHJlc2VuY2Ugb2YgYSBzZWNvbmQgcGFzc2luZyBES0lNIHNpZ25hdHVyZSBmb3IgdGhl IHNhbWUgZG9tYWluLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj5JIHByb3Bvc2UgdGhlIG1vZGlmaWNhdGlvbiBvZiB0aGlzIHNlY3Rpb24gdG8g c3RhdGUgdGhhdCBmYWlsaW5nIERLSU0gc2lnbmF0dXJlcyBTSE9VTEQgYmUgaWdub3JlZCwgYnV0 IEJJTUkgcHJvY2Vzc2luZyBTSE9VTEQgY29udGludWUuPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGUgdXNlIG9mIFNIT1VMRCBpbiB0aGlzIHNl Y3Rpb24gd2FzIGludGVuZGVkIHRvIGNvdmVyIHRoZSBjYXNlcyB3aGVyZSBNQlBzIGRpZCBub3Qg aW1wbGVtZW50IHRoaXMgY2hlY2ssIGhvd2V2ZXIgSSB3b3VsZCBiZSBoYXBweSB0byBtYWtlIHRo ZXNlIGNoZWNrcyBhIE1VU1QsIHdoYXQgaXMgdGhlIG9waW5pb24gb2YgdGhlIGdyb3VwPzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBGcmks IDMwIEFwciAyMDIxLCBhdCAxOjQ1IEFNLCBaYWNrIEFhYiB3cm90ZTo8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRv bTo1LjBwdCIgaWQ9InF0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+SGks PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mZ3Q7 U2VlbXMgbW9yZSBhIHF1ZXN0aW9uIGFib3V0IHNob3VsZCBhIHJlY2VpdmVyIGdvIHRvIGRlZmF1 bHQuX2JpbWkgKG9yIHNvbWV0aGluZyBlbHNlKSBpZiB0aGUgc2VsZWN0b3IgaXMgc3BlY2lmaWVk IGJ1dCBzZWVtcyB1bnVzYWJsZSAoZWl0aGVyIG5vdCBzaWduZWQgb3Igc2lnbmF0dXJlIGZhaWxz KS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRo aXMgaXMgaXQgZXhhY3RseS4mbmJzcDsgTWF5YmUgSSBtaXNzZWQgc29tZXRoaW5nLCBidXQgYXMg d3JpdHRlbiB0aGVyZSBpcyBubyBzdWdnZXN0ZWQgb3IgcmVxdWlyZWQgYWN0aW9uIGlmIHRoZSBy ZWNlaXZlciBzZWVzIHRoYXQgdGhlIEJJTUktc2VsZWN0b3IgaXMgREtJTSBzaWduZWQgYnV0IHRo YXQgREtJTSBmYWlscyB0byB2YWxpZGF0ZS4mbmJzcDsgVGhpcyBjYW4gcHJvYmFibHkgYmUgY292 ZXJlZCB3aXRoIG9uZSBsaW5lDQogaW4gc2VjdGlvbiA1LjQsIGl0J3MganVzdCBhIHF1ZXN0aW9u IG9mICZxdW90O3Nob3VsZCB0aGUgcmVjZWl2ZXIgc2tpcCB0byBkZWZhdWx0Ll9iaW1pLiBvciBz a2lwIEJJTUkgZW50aXJlbHk/JnF1b3Q7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj5UaGFua3MhPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBjbGFzcz0i c2l6ZSI+PGI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo3LjVwdDtmb250LWZhbWlseTomcXVvdDtW ZXJkYW5hJnF1b3Q7LHNhbnMtc2VyaWYiPlphY2sgQWFiPC9zcGFuPjwvYj48L3NwYW4+PHNwYW4g Y2xhc3M9InNpemUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7VmVyZGFuYSZxdW90OyxzYW5zLXNlcmlmIj4gKEhlL0hpbSk8L3NwYW4+PC9zcGFuPjxzcGFu IHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90Oyxz YW5zLXNlcmlmIj48YnI+DQo8c3BhbiBjbGFzcz0ic2l6ZSI+U2VuaW9yIENvbnN1bHRhbnQsIFRy ZW5kbGluZSBJbnRlcmFjdGl2ZTwvc3Bhbj48YnI+DQo8c3BhbiBjbGFzcz0ic2l6ZSI+PGI+Tzwv Yj4gPGEgaHJlZj0idGVsOiYjNDM7MTUxMjcxNzQwOTciIHRhcmdldD0iX2JsYW5rIj4mIzQzOzEg KDUxMikgNzE3LTQwOTc8L2E+IHwNCjxiPkM8L2I+IDxhIGhyZWY9InRlbDomIzQzOzE0MDQzMTc2 NzI5IiB0YXJnZXQ9Il9ibGFuayI+JiM0MzsxICg0MDQpIDMxNy02NzI5PC9hPiB8IDxiPlc8L2I+ DQo8YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L3d3dy50cmVuZGxp bmVpbnRlcmFjdGl2ZS5jb20vX187ISFDUWwzbWNIWDJBIVRmTENWVXdsQTZOLVVtR0Jkc1RLODNF TUo3WTZlMHZaRGJha21BYWRRQlVFdWtWZUtOVWxWVmIyYVlkYVQ2dDcyUkljREFvJCIgdGFyZ2V0 PSJfYmxhbmsiPg0KdHJlbmRsaW5laS5jb208L2E+PC9zcGFuPjwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4m bmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBUaHUsIEFwciAyOSwgMjAyMSBhdCAxMToxOSBB TSBCcm90bWFuLCBBbGV4ICZsdDtBbGV4X0Jyb3RtYW49PGEgaHJlZj0ibWFpbHRvOjQwY29tY2Fz dC5jb21AZG1hcmMuaWV0Zi5vcmciPjQwY29tY2FzdC5jb21AZG1hcmMuaWV0Zi5vcmc8L2E+Jmd0 OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIHdpbmRvd3RleHQgMS4wcHQ7cGFkZGluZzowaW4gMGlu IDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1yaWdo dDowaW47bWFyZ2luLWJvdHRvbTo1LjBwdDtib3JkZXItbGVmdC1jb2xvcjpyZ2IoMjA0LA0KICAg ICAgICAgICAgICAgICAgMjA0LCAyMDQpIj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9InF0LW1z b25vcm1hbCI+SeKAmW0gbm90IGVudGlyZWx5IHN1cmUgdGhhdCBhbnN3ZXJzIHRoZSBvcmlnaW5h bCBxdWVzdGlvbi4mbmJzcDsgSSBkb27igJl0IHRoaW5rIHRoZSBPUCBpcyBhbiBhdHRlbXB0IHRv IHNlY29uZCBndWVzcyBETUFSQy4gU2VlbXMgbW9yZSBhIHF1ZXN0aW9uIGFib3V0IHNob3VsZCBh IHJlY2VpdmVyIGdvIHRvIGRlZmF1bHQuX2JpbWkgKG9yIHNvbWV0aGluZyBlbHNlKSBpZiB0aGUg c2VsZWN0b3IgaXMgc3BlY2lmaWVkIGJ1dA0KIHNlZW1zIHVudXNhYmxlIChlaXRoZXIgbm90IHNp Z25lZCBvciBzaWduYXR1cmUgZmFpbHMpLiZuYnNwOyBJZiB3ZSBiZWxpZXZlIHRoZSBzZWN0aW9u cyBBLjEvQS41IGNvdmVycyB0aGlzIHNjZW5hcmlvLCBwZXJoYXBzIHdlIGp1c3QgbmVlZCBhIGxp dHRsZSBlbWJlbGxpc2htZW50IG9uIHRoaXMgc2NlbmFyaW8gYmVsb3cgdG8gYmUgbW9yZSBleHBs aWNpdC4mbmJzcDsgQW5kIHllcywgbG9jYWwgcG9saWN5IGNhbiBpbXBhY3QgdGhpcy48bzpwPjwv bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0icXQtbXNvbm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjxwIGNsYXNzPSJxdC1tc29ub3JtYWwiPi0tPG86cD48L286cD48L3A+DQo8cCBjbGFz cz0icXQtbXNvbm9ybWFsIj5BbGV4IEJyb3RtYW48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJx dC1tc29ub3JtYWwiPlNyLiBFbmdpbmVlciwgQW50aS1BYnVzZSAmYW1wOyBNZXNzYWdpbmcgUG9s aWN5PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0icXQtbXNvbm9ybWFsIj5Db21jYXN0PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJxdC1tc29ub3JtYWwiPiZuYnNwOzxvOnA+PC9v OnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAx LjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0O2JvcmRlci10b3AtY29sb3I6Y3VycmVudGNv bG9yO2JvcmRlci1yaWdodC1jb2xvcjpjdXJyZW50Y29sb3I7Ym9yZGVyLWJvdHRvbS1jb2xvcjpj dXJyZW50Y29sb3IiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6 c29saWQgd2luZG93dGV4dCAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluO2JvcmRlci1y aWdodC1jb2xvcjpjdXJyZW50Y29sb3I7Ym9yZGVyLWJvdHRvbS1jb2xvcjpjdXJyZW50Y29sb3I7 Ym9yZGVyLWxlZnQtY29sb3I6Y3VycmVudGNvbG9yO2JvcmRlci10b3AtY29sb3I6cmdiKDIyNSwN CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAyMjUsDQogICAgICAgICAgICAgICAgICAgICAg ICAgICAgMjI1KSI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+RnJvbTo8L2I+IGJp bWkgJmx0OzxhIGhyZWY9Im1haWx0bzpiaW1pLWJvdW5jZXNAaWV0Zi5vcmciIHRhcmdldD0iX2Js YW5rIj5iaW1pLWJvdW5jZXNAaWV0Zi5vcmc8L2E+Jmd0Ow0KPGI+T24gQmVoYWxmIE9mIDwvYj5N YXJjIEJyYWRzaGF3PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48Yj5TZW50OjwvYj4gVGh1cnNkYXksIEFwcmlsIDI5LCAyMDIxIDI6NTYgQU08bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPlRvOjwv Yj4gPGEgaHJlZj0ibWFpbHRvOmJpbWlAaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5iaW1pQGll dGYub3JnPC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PGI+U3ViamVjdDo8L2I+IFJlOiBbQmltaV0gV2hhdCBpZiBES0lNIGRvZXNuJ3QgdmFs aWRhdGUgdGhlIHNlbGVjdG9yIGhlYWRlci48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8L2Rpdj4NCjxwIGNsYXNzPSJxdC1tc29ub3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PGRpdj4NCjxwIGNsYXNzPSJxdC1tc29ub3JtYWwiPkhpLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9InF0LW1zb25vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0icXQtbXNvbm9ybWFsIj5PcGluaW9uOiBUaGlzIGZlZWxz IGxpa2UgYSBkaXNjdXNzaW9uIG91dHNpZGUgdGhlIHNjb3BlIG9mIEJJTUksIFNQRiBmb3JnZXJ5 IGlzIGEga25vd24gaXNzdWUgcmVmIHRoZSByZWNlbnQgTXVsdGlwYXNzIGF0dGFjayBhdCBhIHdl bGwga25vd24gdmVuZG9yLiBUaGVyZSBpcyBhIHJlbGF0ZWQgbm90ZSBpbiB0aGUgJnF1b3Q7VW5z aWduZWQgQklNSS1TZWxlY3RvciBIZWFkZXImcXVvdDsgc2VjdGlvbiBvZiB0aGUgc3BlYy48bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJxdC1tc29ub3JtYWwiPldlIGRv IHNlZSBzZW5kZXJzIHdpdGggcD1yZWplY3Qgd2hvIHJlbHkgZW50aXJlbHkgb24gU1BGIGFuZCBk byBub3QgREtJTSBzaWduIGF0IGFsbCwgSSB3b3VsZCBhcmd1ZSB0aGF0IHRoZSBwcm9ibGVtIGJl aW5nIGRlc2NyaWJlZCBoZXJlIGlzIG1vcmUgYWJvdXQgdnVsbmVyYWJpbGl0aWVzIGluIHNvbWUg c2hhcmVkIGluZnJhc3RydWN0dXJlIHBsYXRmb3JtcyBhbmQgbm90IGFib3V0IGhvdyBCSU1JIHNo b3VsZA0KIGJlIGltcGxlbWVudGVkLiBBdCB0aGUgdmVyeSBsZWFzdCwgSSB3b3VsZCBleHBlY3Qg dGhhdCBkaXNjdXNzaW9uIHRvIHRha2UgcGxhY2UgaW4gdGhlIERNQVJDIGdyb3VwLCBhbmQgdGhh dCBCSU1JIHNob3VsZCB0YWtlIHRoZSBETUFSQyByZXN1bHQgYXMgaXMgYXMgbXVjaCBhcyBpcyBw b3NzaWJsZSwgd2l0aG91dCBpbXBvc2luZyBhZGRpdGlvbmFsIGNvbnN0cmFpbnRzIG92ZXIgd2hh dCBjb25zdGl0dXRlcyBhIHZhbGlkIERNQVJDIHBhc3Mgb3INCiBmYWlsLjxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9InF0LW1zb25vcm1hbCI+TUJQcyBhcmUsIG9mIGNv dXJzZSwgZnJlZSB0byBpbXBsZW1lbnQgd2hhdGV2ZXIgYWRkaXRpb25hbCBjb25zdHJhaW50cyB0 aGV5IHNlZSBmaXQsIGJ1dCBJIGRvbid0IGZlZWwgdGhhdCB0aGlzIG9uZSBiZWxvbmdzIGluIEJJ TUkuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0icXQtbXNvbm9ybWFs Ij4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJxdC1tc29u b3JtYWwiPk9uIFRodSwgMjkgQXByIDIwMjEsIGF0IDQ6MjYgUE0sIEpha3ViIE9sZXhhIHdyb3Rl OjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0IiBpZD0icXQtZ21haWwtbV84NzgxMDc3MTM1Mzg0NTQx ODcycXQiPg0KPHA+SGksPG86cD48L286cD48L3A+DQo8cD5JbiBteSBvcGluaW9uIGlmIERLSU0g ZmFpbHMgdG8gdmFsaWRhdGUgdGhlIG1lc3NhZ2UgY29udGVudCB0aGUgTUJQIHNob3VsZCBub3Qg ZGlzcGxheSB0aGUgQklNSSBhdCBhbGwgKG5vIG1hdHRlciB3aHkgdGhlIERLSU0gZmFpbGVkKS4g VGhlIHJlYXNvbmluZyBmb3IgdGhpcyBpcyB0aGF0IFNQRnMgdmFsaWRhdGUgc2hhcmVkIGluZnJh c3RydWN0dXJlcyAoT0wzNjUsIEdTdWl0ZSwgZXRjKSBhbmQgYXMgc3VjaCBkb21haW5zIGNhbiBi ZSBzcG9vZmVkDQogd2hpbGUgREtJTSBhdXRoZW50aWNhdGVzIHRoZSBhY3R1YWwgY29udGVudC4g QklNSSBsb2dvcyBiZWluZyBkaXNwbGF5ZWQgb24gdGhlIG1lc3NhZ2UgbGlzdCAoc2VlIFlhaG9v IG1haWwgYXBwKSB0aGV5IGJlY29tZSBzb3J0IG9mIGEgJnF1b3Q7RnJvbSZxdW90OyBpbmRpY2F0 b3IgZnJvbSB0aGUgdXNlcnMgcGVyc3BlY3RpdmUgYW5kIG92ZXIgdGltZSB3aWxsIGJlY29tZSBz b3J0IG9mIGEgdHJ1c3QgaW5kaWNhdG9yLiBCSU1JIHNob3VsZCBtYWtlIGV2ZXJ5IGVmZm9ydA0K IG9uIHRoZSBzdGFuZGFyZCBsZXZlbCB0byBkaXNjb3VyYWdlIGFueSB1c2Ugb2YgQklNSSB0aGF0 IGZhaWxlZCBhIGNyaXRpY2FsIHZhbGlkYXRpb24gb2YgdGhlIG1lc3NhZ2UgYm9keSBhcyB0aGF0 IGFsb25lIGNvdWxkIGJlIGFuIGFidXNlIHZlY3Rvci48bzpwPjwvbzpwPjwvcD4NCjxwPklmIGEg cGhpc2hpbmcgb3BlcmF0aW9uIHRhcmdldHMgYnVzaW5lc3NlcyB0aGF0IGFyZSB1c2luZyBzaGFy ZWQgaW5mcmFzdHJ1Y3R1cmVzIGFuZCBoYXZlIEJJTUksIHRoZXkgY291bGQgYWNoaWV2ZSBxdWl0 ZSBhIHNpZ25pZmljYW50IHN1Y2Nlc3MgaWYgdGhlIG1lc3NhZ2VzIGdldCBoaWdobGlnaHRlZCB3 aXRoIGEgbG9nbyB3aGlsZSBmYWlsaW5nIERLSU0uIFRoaXMgd291bGQgdW5kZXJtaW5lIEJJTUkg aW4gYSBtYWpvciB3YXkgYW5kIERLSU0NCiBhcyB3ZWxsLjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4N CjxkaXY+DQo8cCBjbGFzcz0icXQtbXNvbm9ybWFsIj48c3BhbiBzdHlsZT0ibGV0dGVyLXNwYWNp bmc6MS41cHQiPkpha3ViIE9sZXhhPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9InF0LW1zb25vcm1hbCI+PHNwYW4gY2xhc3M9InNpemUiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTAuMHB0O2NvbG9yOiM2NjY2NjYiPkZvdW5kZXIgJmFtcDsgQ0VPPC9zcGFu Pjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJxdC1tc29u b3JtYWwiPjxzcGFuIGNsYXNzPSJzaXplIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtj b2xvcjojNjY2NjY2Ij5FLW1haWw6DQo8YSBocmVmPSJtYWlsdG86amFrdWJAbWFpbGtpdC5jb20i IHRhcmdldD0iX2JsYW5rIj5qYWt1YkBtYWlsa2l0LmNvbTwvYT48L3NwYW4+PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9InF0LW1zb25vcm1hbCI+PHNwYW4g Y2xhc3M9InNpemUiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTAuMHB0O2NvbG9yOiM2NjY2NjYi PlRlbDoNCjxhIGhyZWY9InRlbDomIzQzOzQyMDc3Nzc0NDQ0MCIgdGFyZ2V0PSJfYmxhbmsiPiYj NDM7NDIwIDc3NyA3NDQgNDQwPC9hPjwvc3Bhbj48L3NwYW4+IDxvOnA+DQo8L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0icXQtbXNvbm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJxdC1tc29ub3JtYWwiPjxhIGhyZWY9Imh0dHBz Oi8vdXJsZGVmZW5zZS5jb20vdjMvX19odHRwczovd3d3Lm1haWxraXQuY29tX187ISFDUWwzbWNI WDJBIVdRLTIxSE1qcDlrZzlHYWt3QlRfcEFQY0hYTTM4SzJ5VWRfcjFpSVpZZkU5N2EzNHdBcWZV TWl4Slh1R2NuM0ExREdVcHR3JCIgdGFyZ2V0PSJfYmxhbmsiPjxiPk1haWxraXQgLQ0KPC9iPjxz cGFuIGNsYXNzPSJzaXplIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdCI+Q2xvc2luZyB0 aGUgY2lyY2xlIGJldHdlZW4gRGVsaXZlcmFiaWxpdHkgYW5kIEVuZ2FnZW1lbnQ8L3NwYW4+PC9z cGFuPjwvYT48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 InF0LW1zb25vcm1hbCI+T24gMjguMDQuMjAyMSAyMjowNiwgWmFjayBBYWIgd3JvdGU6PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21h cmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0icXQtbXNvbm9ybWFs Ij5JIHdhcyByZWFkaW5nIHNlY3Rpb24gNS40IG9mIHRoZSBkb2N1bWVudCBhbmQgaXQncyBwcmV0 dHkgY2xlYXIgd2hhdCB0byBkbyBpZiB0aGUgc2VsZWN0b3IgaGVhZGVyIChCSU1JLXNlbGVjdG9y KSBpcyBub3QgaW5jbHVkZWQgaW4gdGhlIERNQVJDLWFsaWduZWQgREtJTSBzaWduYXR1cmU6IHRy ZWF0IGl0IGFzIGlmIHRoZXJlIGlzIG5vIHNlbGVjdG9yIGhlYWRlciBhbmQgbW92ZSBvbiB0byBk ZWZhdWx0Ll9iaW1pLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9InF0 LW1zb25vcm1hbCI+QlVUPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i cXQtbXNvbm9ybWFsIj5XaGF0IGlmIHRoZSBES0lNIHNpZ25hdHVyZSBpbmNsdWRlcyB0aGUgQklN SS1zZWxlY3RvciBoZWFkZXIgYnV0IGRvZXNuJ3QgcGFzcyB2YWxpZGF0aW9uIEFORCBETUFSQyBz dGlsbCBwYXNzZXMgdmlhIFNQRj88bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNs YXNzPSJxdC1tc29ub3JtYWwiPkl0IHNlZW1zIHRvIG1lIChnaXZlbiBES0lNJ3Mgbm9ybWFsIHVz ZSAtIGEgYnJva2VuIHNpZ25hdHVyZSBzaG91bGQgYmUgdHJlYXRlZCBhcyBub3QgaGF2aW5nIGEg c2lnbmF0dXJlKSB0aGF0IHRoZSByZWNlaXZlciBzaG91bGQgdHJlYXQgdGhlIEJJTUktc2VsZWN0 b3IgaGVhZGVyIGFzIHVuc2lnbmVkIGFuZCBtb3ZlIG9uIHRvIGRlZmF1bHQuX2JpbWksIGJ1dCBp dCdzIG5vdCBhY3R1YWxseSBzdGF0ZWQNCiBvbmUgd2F5IG9yIHRoZSBvdGhlciwgc28gdGhlIHJl c3BvbnNlIGZyb20gdGhlIHJlY2VpdmVyIGNvdWxkIGJlIHRvIHN0b3AgQklNSSB2YWxpZGF0aW9u IGVudGlyZWx5LjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9InF0LW1z b25vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0i cXQtbXNvbm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9InF0LW1zb25vcm1hbCI+PHNwYW4gY2xhc3M9InNpemUiPjxiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6Ny41cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VmVyZGFuYSZxdW90 OyxzYW5zLXNlcmlmIj5aYWNrIEFhYjwvc3Bhbj48L2I+PC9zcGFuPjxzcGFuIGNsYXNzPSJzaXpl Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEm cXVvdDssc2Fucy1zZXJpZiI+IChIZS9IaW0pPC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjcuNXB0O2ZvbnQtZmFtaWx5OiZxdW90O1ZlcmRhbmEmcXVvdDssc2Fucy1zZXJpZiI+ PGJyPg0KPHNwYW4gY2xhc3M9InF0LWdtYWlsLW04NzgxMDc3MTM1Mzg0NTQxODcyc2l6ZSI+U2Vu aW9yIENvbnN1bHRhbnQsIFRyZW5kbGluZSBJbnRlcmFjdGl2ZTwvc3Bhbj48YnI+DQo8c3BhbiBj bGFzcz0icXQtZ21haWwtbTg3ODEwNzcxMzUzODQ1NDE4NzJzaXplIj48Yj5PPC9iPiA8YSBocmVm PSJ0ZWw6JiM0MzsxNTEyNzE3NDA5NyIgdGFyZ2V0PSJfYmxhbmsiPg0KJiM0MzsxICg1MTIpIDcx Ny00MDk3PC9hPiB8IDxiPkM8L2I+IDxhIGhyZWY9InRlbDomIzQzOzE0MDQzMTc2NzI5IiB0YXJn ZXQ9Il9ibGFuayI+JiM0MzsxICg0MDQpIDMxNy02NzI5PC9hPiB8DQo8Yj5XPC9iPiA8YSBocmVm PSJodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L3d3dy50cmVuZGxpbmVpbnRlcmFj dGl2ZS5jb20vX187ISFDUWwzbWNIWDJBIVdRLTIxSE1qcDlrZzlHYWt3QlRfcEFQY0hYTTM4SzJ5 VWRfcjFpSVpZZkU5N2EzNHdBcWZVTWl4Slh1R2NuM0EydGlYV19ZJCIgdGFyZ2V0PSJfYmxhbmsi Pg0KdHJlbmRsaW5laS5jb208L2E+PC9zcGFuPjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNz PSJxdC1tc29ub3JtYWwiPi0tJm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8 cCBjbGFzcz0icXQtbXNvbm9ybWFsIj5iaW1pIG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9InF0LW1zb25vcm1hbCI+PGEgaHJlZj0ibWFpbHRvOmJp bWklNDBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmJpbWlAaWV0Zi5vcmc8L2E+PG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0icXQtbXNvbm9ybWFsIj48YSBocmVmPSJo dHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xp c3RpbmZvL2JpbWlfXzshIUNRbDNtY0hYMkEhV1EtMjFITWpwOWtnOUdha3dCVF9wQVBjSFhNMzhL MnlVZF9yMWlJWllmRTk3YTM0d0FxZlVNaXhKWHVHY24zQTNQNFZjR1EkIiB0YXJnZXQ9Il9ibGFu ayI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9iaW1pPC9hPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9InF0LW1zb25vcm1hbCI+Jm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8cCBjbGFzcz0icXQt bXNvbm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBpZD0icXQtZ21h aWwtbV84NzgxMDc3MTM1Mzg0NTQxODcyc2lnNjM2OTUxMTMiPg0KPGRpdiBpZD0icXQtZ21haWwt bV84NzgxMDc3MTM1Mzg0NTQxODcyc2lnMjE1MDMzMTMiPg0KPGRpdj4NCjxwIGNsYXNzPSJxdC1t c29ub3JtYWwiPi0tPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8dGFibGUgY2xhc3M9 Ik1zb05vcm1hbFRhYmxlIiBib3JkZXI9IjAiIGNlbGxzcGFjaW5nPSIzIiBjZWxscGFkZGluZz0i MCI+DQo8dGJvZHk+DQo8dHI+DQo8dGQgc3R5bGU9InBhZGRpbmc6Ljc1cHQgLjc1cHQgLjc1cHQg Ljc1cHQiPg0KPHAgY2xhc3M9InF0LW1zb25vcm1hbCI+PGltZyBib3JkZXI9IjAiIHdpZHRoPSI0 NCIgaGVpZ2h0PSI0NCIgc3R5bGU9IndpZHRoOi40NTgzaW47aGVpZ2h0Oi40NTgzaW4iIGlkPSJf eDAwMDBfaTEwMjYiIHNyYz0iaHR0cHM6Ly9zZWN1cmUuZ3JhdmF0YXIuY29tL2F2YXRhci9iMjE0 YTAyMGY0ZWIxMzVjZTJhNjkwMWQ3NTQwYmRiMT9zPTQ0JmFtcDtkPTQwNCI+PG86cD48L286cD48 L3A+DQo8L3RkPg0KPHRkIHN0eWxlPSJwYWRkaW5nOi43NXB0IC43NXB0IC43NXB0IC43NXB0Ij4N CjxkaXY+DQo8cCBjbGFzcz0icXQtbXNvbm9ybWFsIj4mbmJzcDsgTWFyYyBCcmFkc2hhdzxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9InF0LW1zb25vcm1hbCI+Jm5ic3A7 Jm5ic3A7PGEgaHJlZj0iaHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHA6L21hcmNicmFk c2hhdy5uZXQvX187ISFDUWwzbWNIWDJBIVdRLTIxSE1qcDlrZzlHYWt3QlRfcEFQY0hYTTM4SzJ5 VWRfcjFpSVpZZkU5N2EzNHdBcWZVTWl4Slh1R2NuM0FqdjFkZW9jJCIgdGFyZ2V0PSJfYmxhbmsi Pm1hcmNicmFkc2hhdy5uZXQ8L2E+IHwmbmJzcDs8YSBocmVmPSJodHRwczovL3VybGRlZmVuc2Uu Y29tL3YzL19faHR0cHM6L3R3aXR0ZXIuY29tL21hcmNicmFkc2hhd19fOyEhQ1FsM21jSFgyQSFX US0yMUhNanA5a2c5R2Frd0JUX3BBUGNIWE0zOEsyeVVkX3IxaUlaWWZFOTdhMzR3QXFmVU1peEpY dUdjbjNBWW56aVFYQSQiIHRhcmdldD0iX2JsYW5rIj5AbWFyY2JyYWRzaGF3PC9hPjxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPC9kaXY+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0icXQtbXNvbm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9InF0LW1zb25vcm1hbCI+Jm5i c3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4tLSA8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPmJpbWkgbWFpbGluZyBsaXN0PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YSBocmVmPSJtYWlsdG86YmltaUBp ZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmJpbWlAaWV0Zi5vcmc8L2E+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YSBocmVmPSJodHRwczovL3Vy bGRlZmVuc2UuY29tL3YzL19faHR0cHM6L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2Jp bWlfXzshIUNRbDNtY0hYMkEhVGZMQ1ZVd2xBNk4tVW1HQmRzVEs4M0VNSjdZNmUwdlpEYmFrbUFh ZFFCVUV1a1ZlS05VbFZWYjJhWWRhVDZ0N3RtdE1oZmckIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9iaW1pPC9hPjxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij4tLSZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+YmltaSBtYWlsaW5nIGxpc3Q8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxhIGhyZWY9Im1haWx0bzpiaW1pJTQwaWV0Zi5vcmciPmJpbWlA aWV0Zi5vcmc8L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48YSBocmVmPSJodHRwczovL3VybGRlZmVuc2UuY29tL3YzL19faHR0cHM6L3d3dy5p ZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2JpbWlfXzshIUNRbDNtY0hYMkEhVGZMQ1ZVd2xBNk4t VW1HQmRzVEs4M0VNSjdZNmUwdlpEYmFrbUFhZFFCVUV1a1ZlS05VbFZWYjJhWWRhVDZ0N3RtdE1o ZmckIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL2JpbWk8L2E+PG86cD48 L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2IGlkPSJzaWc2MzY5NTEx MyI+DQo8ZGl2IGlkPSJzaWcyMTUwMzMxMyI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ LS08bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjx0YWJsZSBjbGFzcz0iTXNvTm9ybWFs VGFibGUiIGJvcmRlcj0iMCIgY2VsbHNwYWNpbmc9IjMiIGNlbGxwYWRkaW5nPSIwIj4NCjx0Ym9k eT4NCjx0cj4NCjx0ZCBzdHlsZT0icGFkZGluZzouNzVwdCAuNzVwdCAuNzVwdCAuNzVwdCI+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48aW1nIGJvcmRlcj0iMCIgaWQ9Il94MDAwMF9pMTAyNSIgc3Jj PSJodHRwczovL3NlY3VyZS5ncmF2YXRhci5jb20vYXZhdGFyL2IyMTRhMDIwZjRlYjEzNWNlMmE2 OTAxZDc1NDBiZGIxP3M9NDQmYW1wO2Q9NDA0Ij48bzpwPjwvbzpwPjwvcD4NCjwvdGQ+DQo8dGQg c3R5bGU9InBhZGRpbmc6Ljc1cHQgLjc1cHQgLjc1cHQgLjc1cHQiPg0KPGRpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPiZuYnNwOyBNYXJjIEJyYWRzaGF3PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDsmbmJzcDs8YSBocmVmPSJodHRwczov L3VybGRlZmVuc2UuY29tL3YzL19faHR0cDovbWFyY2JyYWRzaGF3Lm5ldC9fXzshIUNRbDNtY0hY MkEhVGZMQ1ZVd2xBNk4tVW1HQmRzVEs4M0VNSjdZNmUwdlpEYmFrbUFhZFFCVUV1a1ZlS05VbFZW YjJhWWRhVDZ0NzlOdEtWc1EkIj5tYXJjYnJhZHNoYXcubmV0PC9hPiB8Jm5ic3A7PGEgaHJlZj0i aHR0cHM6Ly91cmxkZWZlbnNlLmNvbS92My9fX2h0dHBzOi90d2l0dGVyLmNvbS9tYXJjYnJhZHNo YXdfXzshIUNRbDNtY0hYMkEhVGZMQ1ZVd2xBNk4tVW1HQmRzVEs4M0VNSjdZNmUwdlpEYmFrbUFh ZFFCVUV1a1ZlS05VbFZWYjJhWWRhVDZ0N2JDYldLTDgkIj5AbWFyY2JyYWRzaGF3PC9hPjxvOnA+ PC9vOnA+PC9wPg0KPC9kaXY+DQo8L3RkPg0KPC90cj4NCjwvdGJvZHk+DQo8L3RhYmxlPg0KPC9k aXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxicj4NCjxicj4N Cjxicj4NCjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Jsb2NrcXVv dGU+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1sPg0K --_000_MN2PR11MB435119C784054F763618FC04F7029MN2PR11MB4351namp_--