
From internet-drafts@ietf.org  Sun Jul  1 06:27:29 2012
Return-Path: <internet-drafts@ietf.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D256611E808D; Sun,  1 Jul 2012 06:27:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.538
X-Spam-Level: 
X-Spam-Status: No, score=-102.538 tagged_above=-999 required=5 tests=[AWL=0.061, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id P-ZZEytAajOz; Sun,  1 Jul 2012 06:27:29 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4BEEB21F8AC9; Sun,  1 Jul 2012 06:27:29 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.21p1
Message-ID: <20120701132729.6338.32457.idtracker@ietfa.amsl.com>
Date: Sun, 01 Jul 2012 06:27:29 -0700
Cc: pkix@ietf.org
Subject: [pkix] I-D Action: draft-ietf-pkix-caa-09.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Jul 2012 13:27:30 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Public-Key Infrastructure (X.509) Working=
 Group of the IETF.

	Title           : DNS Certification Authority Authorization (CAA) Resource=
 Record
	Author(s)       : Phillip Hallam-Baker
                          Rob Stradling
	Filename        : draft-ietf-pkix-caa-09.txt
	Pages           : 16
	Date            : 2012-06-29

Abstract:
   The Certification Authority Authorization (CAA) DNS Resource Record
   allows a DNS domain name holder to specify one or more Certification
   Authorities (CAs) authorized to issue certificates for that domain.
   CAA resource records allow a public Certification Authority to
   implement additional controls to reduce the risk of unintended
   certificate mis-issue.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-pkix-caa

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-pkix-caa-09

A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-pkix-caa-09


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From hallam@gmail.com  Sun Jul  1 06:47:30 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF81D21F8B71 for <pkix@ietfa.amsl.com>; Sun,  1 Jul 2012 06:47:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.473
X-Spam-Level: 
X-Spam-Status: No, score=-3.473 tagged_above=-999 required=5 tests=[AWL=0.126,  BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EbSKZmZDBo1r for <pkix@ietfa.amsl.com>; Sun,  1 Jul 2012 06:47:30 -0700 (PDT)
Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) by ietfa.amsl.com (Postfix) with ESMTP id 11C0221F8B34 for <pkix@ietf.org>; Sun,  1 Jul 2012 06:47:29 -0700 (PDT)
Received: by obbwc20 with SMTP id wc20so7703857obb.31 for <pkix@ietf.org>; Sun, 01 Jul 2012 06:47:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=NfCHxzaUWkvTN2CWDuyDCLlWbCNnLgqGDFcmCr1RnOs=; b=hz8JCOFb4J1ahSN0THINRS6jQWhPP/cvpuN9Kb6bZXyG6Y6uUTLQ2TTf7uU7X/kVMr 4VsAtDD6pKFX5/LLeAvLnKP5OwzlcKHNvOaPuCQyinqDycZoakL6KvB1FgWB8ndIMjy+ Da+AdZmxjy1I7LjnqyIzlQWda3SayXpjjngIWLA4ZQsfuIlhSETmgOrcfQC9AWq0FrO7 EsA0ncJcq9xGiVUW8mA5M/1MPyC5nYiwvjqRlsHr1XmgQdbQ8fnf5PO2cDtpsFVQeBLG oMziroWulwcVIyG0M6CNLtGg/WpFISWjYR4xP3BXSOe+nwFz1hMQBaBrRjF5zWDVoDiH LBcw==
MIME-Version: 1.0
Received: by 10.60.18.114 with SMTP id v18mr9669886oed.34.1341150451728; Sun, 01 Jul 2012 06:47:31 -0700 (PDT)
Received: by 10.182.64.166 with HTTP; Sun, 1 Jul 2012 06:47:31 -0700 (PDT)
In-Reply-To: <p06240803cc08e11b69a8@128.89.89.227>
References: <p06240803cc08e11b69a8@128.89.89.227>
Date: Sun, 1 Jul 2012 09:47:31 -0400
Message-ID: <CAMm+Lwh9SAVqyxiiw37m5xfU_wM5FvKC+PuGncZqbXbVCeQh3g@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: Stephen Kent <kent@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Cc: pkix@ietf.org
Subject: Re: [pkix] agenda topics?
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 01 Jul 2012 13:47:30 -0000

I would like to present:

http://tools.ietf.org/html/draft-hallambaker-ocspdigest-00

We have discussed this in the past and the response was 'write a
draft'. So here is a draft.

The motivation for this extension is twofold:

First it enables a better upgrade path for digest algorithm agility. A
certificate signed with SHA1 can be 'endorsed' by an OCSP token with
SHA2 or SHA3. This breaks a deployment deadlock issue that would
otherwise make deployment of SHA1 infeasible due to the limited
support for SHA2 in the deployed base.

Second it enables a capability similar to Certificate Transparency but
without the need to deploy a new infrastructure and without the direct
client enforcement capability that Google's CT provides. The concern
that drives both proposals is that DigiNotar was reporting the status
of certificates that did not exist. The digest extension makes it
possible for a third party to audit compliance with a requirement to
distinguish between certificates known to have been issued and
non-existent certificates.


In the model I am anticipating, indirect client enforcement of the
criteria would still be possible via either SCVP or the omnibroker
protocol being developed:

http://tools.ietf.org/html/draft-hallambaker-omnibroker-00


The transparency criteria is only relevant to authoritative OCSP
responders being operated by CAs or their agents. Thus the inability
of a CRL responder to support this feature is irrelevant as far as I
am concerned.

The choice for the group and the ADs is whether they want the feature
developed in PKIX or elsewhere. I am quite happy discussing it in a
new PKI extensions group or in CABForum as alternatives.

Also note that doing the digest extension does not mean not doing
Google's CT as well. But that is clearly going to take longer to
deploy.


SCVP was considered and rejected as a basis for the protocol as
architecturally inappropriate. While SCVP and OCSP both appear to do
the same thing they are actually designed for services to two
different parties. OCSP is best suited for use by a CA publishing
authoritative statements about the status of certificates. SCVP is
best suited to implement a service that supports the client, providing
trust statements that are relevant to the client's trust criteria.
Since the objective here is to support authoritative status
information, OCSP is the correct choice.




On Thu, Jun 21, 2012 at 10:33 AM, Stephen Kent <kent@bbn.com> wrote:
> Folks,
>
> Please send requests for agenda time to Stefan and cc me.
>
> Thanks,
>
> Steve
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix



-- 
Website: http://hallambaker.com/

From linjingqiang@iie.ac.cn  Sun Jul  1 23:13:28 2012
Return-Path: <linjingqiang@iie.ac.cn>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4401811E817A for <pkix@ietfa.amsl.com>; Sun,  1 Jul 2012 23:13:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.001
X-Spam-Level: 
X-Spam-Status: No, score=0.001 tagged_above=-999 required=5 tests=[BAYES_50=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6mMpGbV6CJN2 for <pkix@ietfa.amsl.com>; Sun,  1 Jul 2012 23:13:27 -0700 (PDT)
Received: from cstnet.cn (smtp21.cstnet.cn [159.226.251.21]) by ietfa.amsl.com (Postfix) with ESMTP id F1F0811E817F for <pkix@ietf.org>; Sun,  1 Jul 2012 23:13:24 -0700 (PDT)
Received: from caslin (unknown [159.226.95.67]) by app1 (Coremail) with SMTP id RgCowJA7IwkGPPFPVxQqAA--.19057S2; Mon, 02 Jul 2012 14:13:26 +0800 (CST)
From: "Jingqiang LIN" <linjingqiang@iie.ac.cn>
To: <pkix@ietf.org>
Date: Mon, 2 Jul 2012 14:13:25 +0800
Message-ID: <!&!AAAAAAAAAAAYAAAAAAAAAGl0Z13c+yhHohEvakGUD5jCgAAAEAAAACbUfhNC+GZCs8TvX9ZrhwIBAAAAAA==@iie.ac.cn>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Ac1YGcpM9HEz0Cj/T+6gUXvr2ARD/g==
Content-Language: zh-cn
X-CM-TRANSID: RgCowJA7IwkGPPFPVxQqAA--.19057S2
X-Coremail-Antispam: 1UD129KBjvJXoWxJryftrW3CrWrAFyxGw4xCrg_yoW5Jr47pF WDKrySqwnrJ34xArWrJw48Gr4rJFZ5tr4UCryvqw18AFs8GFyF9rWFkFWjkay7Cr1rCr1j qws0gr13Xa1DZaDanT9S1TB71UUUUUUqnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUyab7Iv0xC_tr1lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2z4x0Y4vE2Ix0cI8IcVAFwI0_Gr0_Xr1l84ACjcxK6xIIjxv20xvEc7CjxVAFwI0_Gr0_ Cr1l84ACjcxK6I8E87Iv67AKxVW8Jr0_Cr1UM28EF7xvwVC2z280aVCY1x0267AKxVWxJr 0_GcWle2I262IYc4CY6c8Ij28IcVAaY2xG8wAqx4xG64xvF2IEw4CE5I8CrVC2j2WlYx0E 2Ix0cI8IcVAFwI0_Jrv_JF1lYx0Ex4A2jsIE14v26r4j6F4UMcvjeVCFs4IE7xkEbVWUJV W8JwACjcxG0xvY0x0EwIxGrwACjcxG0xvY0x0EwIxGrVCF72vEw4AK0wCY02Avz4vE14v_ GF1l42xK82IYc2Ij64vIr41lx2IqxVAqx4xG67AKxVWUJVWUGwC20s026x8GjcxK67AKxV WUGVWUWwC2zVAF1VAY17CE14v26r1j6r15MIIYrxkI7VAKI48JMIIF0xvE2Ix0cI8IcVAF wI0_Jr0_JF4lIxAIcVC0I7IYx2IY6xkF7I0E14v26r1j6r4UMIIF0xvE42xK8VAvwI8IcI k0rVWrZr1j6s0DMIIF0xvEx4A2jsIE14v26r1j6r4UMIIF0xvEx4A2jsIEc7CjxVAFwI0_ Jr0_GrUvcSsGvfC2KfnxnUUI43ZEXa7IU0uuWPUUUUU==
X-CM-SenderInfo: xolqyx5qjtxt1qj6xxnhoduhdfq/
Subject: [pkix] A work item proposal for PKIX WG - A certificate extension to support key escrow in PKIs
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Jul 2012 06:13:28 -0000

Dear all,
=A0 We design a scheme called RIKE, to support key escrow in PKIs =
convenient
and efficiently.
This scheme is compatible with X.509 certificates, and a certificate
extension is needed for this scheme.

The basic idea is as follows.
1. Application Requirement
The key pair for digital signatures shall NOT be escrowed, but the key =
pair
of for confidentiality usually shall be escrowed.
These two conflicting requirements can exist in one certain entity.

2. Current Solution
An entity owns two certificates and consequently two key pairs.
One is escrowed and used for confidentiality.
The other is not escrowed and used for digital signatures.
The key usage extension is needed to indicate its purposes.

3. Our Solution - RIKE
An entity with these two conflicting requirements, owns only ONE =
certificate
for digital signatures.
The corresponding key pair is not escrowed.
At the same time, a public key for confidentiality is derived from (the =
hash
value of) the certificate based on an IBE algorithm.
An IBE private key is inherently escrowed.
Note that, an IBE public key usually is derived from an =93identity=94,
but in the RIKE solution, an IBE public key is derived from the =
entity=92s
=93certificate=94.
The entity obtains the corresponding IBE private key from the CA (or =
other
special component).

4. Benefit
An entity has only ONE certificate, but TWO key pairs are published via =
the
certificate.
One is escrowed inherently, and the other is not escrowed.
Then, one of these two key pairs can be used for digital signatures, and =
the
other can be used for confidentiality.
A PKI client queries and validates one certificate from the PKI =
repository,
but he or she obtains two key pairs.

5. Certificate Extension
The IBE algorithm OID and the public parameters of the IBE algorithm are
embedded as a certificate extension in the user's certificate.
The information is needed to derive the IBE public key of the user.


If this proposal is adopted, I would like to take the drafting task.
If PKIX WG is not interested, I plan to submit it as an individual
submission.

Thanks very much.

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D
Jingqiang Lin
+8610-82546531
+86-18910039067
Chinese Academy of Sciences
=A0 =A0Institute of Information Engineering
=A0 =A0Data Assurance and Communication Security Center
=A0 =A0State Key Laboratory of Information Security
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D




From wwwrun@rfc-editor.org  Fri Jun 29 10:23:01 2012
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6B2BC21F86AA for <pkix@ietfa.amsl.com>; Fri, 29 Jun 2012 10:23:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.18
X-Spam-Level: 
X-Spam-Status: No, score=-102.18 tagged_above=-999 required=5 tests=[AWL=0.420, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1BvG5w77-IDH for <pkix@ietfa.amsl.com>; Fri, 29 Jun 2012 10:22:59 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id 61B3F21F864B for <pkix@ietf.org>; Fri, 29 Jun 2012 10:22:59 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id 65B21621A0; Fri, 29 Jun 2012 10:21:49 -0700 (PDT)
To: mmyers@verisign.com, rankney@erols.com, ambarish@valicert.com, galperin@mycfo.com, cadams@entrust.com, stephen.farrell@cs.tcd.ie, turners@ieca.com, kent@bbn.com, stefan@aaa-sec.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Message-Id: <20120629172149.65B21621A0@rfc-editor.org>
Date: Fri, 29 Jun 2012 10:21:49 -0700 (PDT)
X-Mailman-Approved-At: Mon, 02 Jul 2012 08:50:20 -0700
Cc: mathias.moore@gmail.com, rfc-editor@rfc-editor.org, pkix@ietf.org
Subject: [pkix] [Technical Errata Reported] RFC2560 (3272)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 29 Jun 2012 17:23:03 -0000

The following errata report has been submitted for RFC2560,
"X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=2560&eid=3272

--------------------------------------
Type: Technical
Reported by: Matthew Moore <mathias.moore@gmail.com>

Section: 4.1.1

Original Text
-------------
   OCSPRequest     ::=     SEQUENCE {
       tbsRequest                  TBSRequest,
       optionalSignature   [0]     EXPLICIT Signature OPTIONAL }

   TBSRequest      ::=     SEQUENCE {
       version             [0]     EXPLICIT Version DEFAULT v1,
       requestorName       [1]     EXPLICIT GeneralName OPTIONAL,
       requestList                 SEQUENCE OF Request,
       requestExtensions   [2]     EXPLICIT Extensions OPTIONAL }

   Signature       ::=     SEQUENCE {
       signatureAlgorithm      AlgorithmIdentifier,
       signature               BIT STRING,
       certs               [0] EXPLICIT SEQUENCE OF Certificate 
   OPTIONAL}

   Version         ::=             INTEGER  {  v1(0) }

   Request         ::=     SEQUENCE {
       reqCert                     CertID,
       singleRequestExtensions     [0] EXPLICIT Extensions OPTIONAL }

   CertID          ::=     SEQUENCE {
       hashAlgorithm       AlgorithmIdentifier,
       issuerNameHash      OCTET STRING, -- Hash of Issuer's DN
       issuerKeyHash       OCTET STRING, -- Hash of Issuers public key
       serialNumber        CertificateSerialNumber }

Corrected Text
--------------
...
   Version         ::=             INTEGER  {  v1(0) }

   GeneralName     ::=      ????
...

Notes
-----
The format of the GeneralName in the request syntax is never detailed.

Instructions:
-------------
This errata is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC2560 (draft-ietf-pkix-ocsp-07)
--------------------------------------
Title               : X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Publication Date    : June 1999
Author(s)           : M. Myers, R. Ankney, A. Malpani, S. Galperin, C. Adams
Category            : PROPOSED STANDARD
Source              : Public-Key Infrastructure (X.509)
Area                : Security
Stream              : IETF
Verifying Party     : IESG

From peter.sylvester@edelweb.fr  Mon Jul  2 09:27:19 2012
Return-Path: <peter.sylvester@edelweb.fr>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 991A621F8760 for <pkix@ietfa.amsl.com>; Mon,  2 Jul 2012 09:27:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tgdwWWD7QuwC for <pkix@ietfa.amsl.com>; Mon,  2 Jul 2012 09:27:18 -0700 (PDT)
Received: from mx1.on-x.com (mx1.on-x.com [92.103.215.13]) by ietfa.amsl.com (Postfix) with ESMTP id 8CE1D21F8768 for <pkix@ietf.org>; Mon,  2 Jul 2012 09:27:18 -0700 (PDT)
Received: from varuna.puteaux.on-x (varuna.puteaux.on-x [192.168.10.6]) by mx1.on-x.com (Postfix) with ESMTP id 8B5585E064 for <pkix@ietf.org>; Mon,  2 Jul 2012 18:27:07 +0200 (CEST)
Received: from smtps.on-x.com (mintaka.puteaux.on-x [192.168.14.11]) by varuna.puteaux.on-x (Postfix) with ESMTP id 009078203D0 for <pkix@ietf.org>; Mon,  2 Jul 2012 18:07:54 +0200 (CEST)
Received: from [192.168.18.180] (unknown [192.168.18.180]) by smtps.on-x.com (Postfix) with ESMTPSA id D379323632F for <pkix@ietf.org>; Mon,  2 Jul 2012 12:11:55 -0400 (EDT)
Message-ID: <4FF1CC0C.3020101@edelweb.fr>
Date: Mon, 02 Jul 2012 18:27:56 +0200
From: Peter Sylvester <peter.sylvester@edelweb.fr>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:13.0) Gecko/20120615 Thunderbird/13.0.1
MIME-Version: 1.0
To: pkix@ietf.org
References: <20120629172149.65B21621A0@rfc-editor.org>
In-Reply-To: <20120629172149.65B21621A0@rfc-editor.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [pkix] [Technical Errata Reported] RFC2560 (3272)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Jul 2012 16:27:19 -0000

The errata is invalid since the definitions are imported from other modules.

On the other hand, since ocsp might be updated, it seems useful to me
to add two sections at the beginning:

x: This documents defines one ASN.1 module:

OCSP-2009
       {iso(1) identified-organization(3) dod(6) internet(1) security(5)
       mechanisms(5) pkix(7) id-mod(0) id-mod-ocsp-02(48)}
   DEFINITIONS EXPLICIT TAGS ::=
   BEGIN

y: The module imports the following definitions from other modules:

   IMPORTS

   Extensions{}, EXTENSION, ATTRIBUTE
   FROM PKIX-CommonTypes-2009
       {iso(1) identified-organization(3) dod(6) internet(1) security(5)
       mechanisms(5) pkix(7) id-mod(0) id-mod-pkixCommon-02(57)}

   AlgorithmIdentifier{}, DIGEST-ALGORITHM, SIGNATURE-ALGORITHM
   FROM AlgorithmInformation-2009
       {iso(1) identified-organization(3) dod(6) internet(1) security(5)
       mechanisms(5) pkix(7) id-mod(0)
       id-mod-algorithmInformation-02(58)}

   AuthorityInfoAccessSyntax, GeneralName, CrlEntryExtensions
   FROM PKIX1Implicit-2009
       {iso(1) identified-organization(3) dod(6) internet(1) security(5)
       mechanisms(5) pkix(7) id-mod(0) id-mod-pkix1-implicit-02(59)}

   Name, CertificateSerialNumber, id-kp, id-ad-ocsp, Certificate
   FROM PKIX1Explicit-2009
       {iso(1) identified-organization(3) dod(6) internet(1) security(5)
       mechanisms(5) pkix(7) id-mod(0) id-mod-pkix1-explicit-02(51)}

   sa-dsaWithSHA1, sa-rsaWithMD2, sa-rsaWithMD5, sa-rsaWithSHA1
   FROM PKIXAlgs-2009
       {iso(1) identified-organization(3) dod(6) internet(1) security(5)
       mechanisms(5) pkix(7) id-mod(0)
       id-mod-pkix1-algorithms2008-02(56)};

etc.


On 06/29/2012 07:21 PM, RFC Errata System wrote:
> The following errata report has been submitted for RFC2560,
> "X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP".
>
> --------------------------------------
> You may review the report below and at:
> http://www.rfc-editor.org/errata_search.php?rfc=2560&eid=3272
>
> --------------------------------------
> Type: Technical
> Reported by: Matthew Moore <mathias.moore@gmail.com>
>
> Section: 4.1.1
>
> Original Text
> -------------
>     OCSPRequest     ::=     SEQUENCE {
>         tbsRequest                  TBSRequest,
>         optionalSignature   [0]     EXPLICIT Signature OPTIONAL }
>
>     TBSRequest      ::=     SEQUENCE {
>         version             [0]     EXPLICIT Version DEFAULT v1,
>         requestorName       [1]     EXPLICIT GeneralName OPTIONAL,
>         requestList                 SEQUENCE OF Request,
>         requestExtensions   [2]     EXPLICIT Extensions OPTIONAL }
>
>     Signature       ::=     SEQUENCE {
>         signatureAlgorithm      AlgorithmIdentifier,
>         signature               BIT STRING,
>         certs               [0] EXPLICIT SEQUENCE OF Certificate
>     OPTIONAL}
>
>     Version         ::=             INTEGER  {  v1(0) }
>
>     Request         ::=     SEQUENCE {
>         reqCert                     CertID,
>         singleRequestExtensions     [0] EXPLICIT Extensions OPTIONAL }
>
>     CertID          ::=     SEQUENCE {
>         hashAlgorithm       AlgorithmIdentifier,
>         issuerNameHash      OCTET STRING, -- Hash of Issuer's DN
>         issuerKeyHash       OCTET STRING, -- Hash of Issuers public key
>         serialNumber        CertificateSerialNumber }
>
> Corrected Text
> --------------
> ...
>     Version         ::=             INTEGER  {  v1(0) }
>
>     GeneralName     ::=      ????
> ...
>
> Notes
> -----
> The format of the GeneralName in the request syntax is never detailed.
>
> Instructions:
> -------------
> This errata is currently posted as "Reported". If necessary, please
> use "Reply All" to discuss whether it should be verified or
> rejected. When a decision is reached, the verifying party (IESG)
> can log in to change the status and edit the report, if necessary.
>
> --------------------------------------
> RFC2560 (draft-ietf-pkix-ocsp-07)
> --------------------------------------
> Title               : X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
> Publication Date    : June 1999
> Author(s)           : M. Myers, R. Ankney, A. Malpani, S. Galperin, C. Adams
> Category            : PROPOSED STANDARD
> Source              : Public-Key Infrastructure (X.509)
> Area                : Security
> Stream              : IETF
> Verifying Party     : IESG
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix



From internet-drafts@ietf.org  Mon Jul  2 11:43:06 2012
Return-Path: <internet-drafts@ietf.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6984D21F85EA; Mon,  2 Jul 2012 11:43:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.495
X-Spam-Level: 
X-Spam-Status: No, score=-102.495 tagged_above=-999 required=5 tests=[AWL=0.104, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ckVZJLeYFjCR; Mon,  2 Jul 2012 11:43:05 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E36A921F85A1; Mon,  2 Jul 2012 11:43:05 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.21p1
Message-ID: <20120702184305.10109.48138.idtracker@ietfa.amsl.com>
Date: Mon, 02 Jul 2012 11:43:05 -0700
Cc: pkix@ietf.org
Subject: [pkix] I-D Action: draft-ietf-pkix-caa-10.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Jul 2012 18:43:06 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Public-Key Infrastructure (X.509) Working=
 Group of the IETF.

	Title           : DNS Certification Authority Authorization (CAA) Resource=
 Record
	Author(s)       : Phillip Hallam-Baker
                          Rob Stradling
	Filename        : draft-ietf-pkix-caa-10.txt
	Pages           : 16
	Date            : 2012-07-02

Abstract:
   The Certification Authority Authorization (CAA) DNS Resource Record
   allows a DNS domain name holder to specify one or more Certification
   Authorities (CAs) authorized to issue certificates for that domain.
   CAA resource records allow a public Certification Authority to
   implement additional controls to reduce the risk of unintended
   certificate mis-issue.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-pkix-caa

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-pkix-caa-10

A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-pkix-caa-10


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From Walter.Goulet@rsa.com  Mon Jul  2 14:31:07 2012
Return-Path: <Walter.Goulet@rsa.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DCAFE11E8093 for <pkix@ietfa.amsl.com>; Mon,  2 Jul 2012 14:31:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kybxBzNJd8V8 for <pkix@ietfa.amsl.com>; Mon,  2 Jul 2012 14:31:06 -0700 (PDT)
Received: from mexforward.lss.emc.com (hop-nat-141.emc.com [168.159.213.141]) by ietfa.amsl.com (Postfix) with ESMTP id BE77F11E80D3 for <pkix@ietf.org>; Mon,  2 Jul 2012 14:31:06 -0700 (PDT)
Received: from hop04-l1d11-si01.isus.emc.com (HOP04-L1D11-SI01.isus.emc.com [10.254.111.54]) by mexforward.lss.emc.com (Switch-3.4.3/Switch-3.4.3) with ESMTP id q62LVAXb025744 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for <pkix@ietf.org>; Mon, 2 Jul 2012 17:31:10 -0400
Received: from mailhub.lss.emc.com (mailhub.lss.emc.com [10.254.221.251]) by hop04-l1d11-si01.isus.emc.com (RSA Interceptor) for <pkix@ietf.org>; Mon, 2 Jul 2012 17:30:55 -0400
Received: from mxhub23.corp.emc.com (mxhub23.corp.emc.com [128.222.70.135]) by mailhub.lss.emc.com (Switch-3.4.3/Switch-3.4.3) with ESMTP id q62LUrEA009474 for <pkix@ietf.org>; Mon, 2 Jul 2012 17:30:53 -0400
Received: from mx32a.corp.emc.com ([169.254.1.243]) by mxhub23.corp.emc.com ([128.222.70.135]) with mapi; Mon, 2 Jul 2012 17:30:52 -0400
From: <Walter.Goulet@rsa.com>
To: <pkix@ietf.org>
Date: Mon, 2 Jul 2012 17:30:52 -0400
Thread-Topic: Compiling ASN.1 for PKCS10 (RFC 2986)
Thread-Index: Ac1YmfKms/0ilLKwRUGLXPU2qrb0xg==
Message-ID: <1F94BBCDF9E6E7438147ABA3C338441AF4C6F3F8@MX32A.corp.emc.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: multipart/alternative; boundary="_000_1F94BBCDF9E6E7438147ABA3C338441AF4C6F3F8MX32Acorpemccom_"
MIME-Version: 1.0
X-EMM-MHVC: 1
Subject: [pkix] Compiling ASN.1 for PKCS10 (RFC 2986)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Jul 2012 21:31:08 -0000

--_000_1F94BBCDF9E6E7438147ABA3C338441AF4C6F3F8MX32Acorpemccom_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Hi,

Hoping someone can provide me with a pointer. I'm trying to compile the ASN=
.1 for PKCS10 embedded in RFC 2986 to C structures & definitions. Both of m=
y ASN1 compilers (asn1c and snacc) are complaining when they parse the ASN.=
1; they both appear to be hanging at parsing the ALGORITHM import statement=
.

I've taken care to include the UsefulDefinitions module which defines the I=
MPORTs required for PKCS10, but I'm still not having any luck.

Has anyone else recently compiled the PKCS10 ASN.1?

Thanks,
Walter Goulet
Senior Practice Consultant
RSA, The Security Division of EMC
M: (224) 277-6821


--_000_1F94BBCDF9E6E7438147ABA3C338441AF4C6F3F8MX32Acorpemccom_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40"><head><meta http-equiv=3DContent-Type content=
=3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros=
oft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:11.0pt;
	font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:"Calibri","sans-serif";
	color:windowtext;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-family:"Calibri","sans-serif";}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue vli=
nk=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal>Hi,<o:p></o:p></=
p><p class=3DMsoNormal><o:p>&nbsp;</o:p></p><p class=3DMsoNormal>Hoping som=
eone can provide me with a pointer. I&#8217;m trying to compile the ASN.1 f=
or PKCS10 embedded in RFC 2986 to C structures &amp; definitions. Both of m=
y ASN1 compilers (asn1c and snacc) are complaining when they parse the ASN.=
1; they both appear to be hanging at parsing the ALGORITHM import statement=
.<o:p></o:p></p><p class=3DMsoNormal><o:p>&nbsp;</o:p></p><p class=3DMsoNor=
mal>I&#8217;ve taken care to include the UsefulDefinitions module which def=
ines the IMPORTs required for PKCS10, but I&#8217;m still not having any lu=
ck.<o:p></o:p></p><p class=3DMsoNormal><o:p>&nbsp;</o:p></p><p class=3DMsoN=
ormal>Has anyone else recently compiled the PKCS10 ASN.1?<o:p></o:p></p><p =
class=3DMsoNormal><o:p>&nbsp;</o:p></p><p class=3DMsoNormal>Thanks,<o:p></o=
:p></p><p class=3DMsoNormal>Walter Goulet<o:p></o:p></p><p class=3DMsoNorma=
l>Senior Practice Consultant<o:p></o:p></p><p class=3DMsoNormal>RSA, The Se=
curity Division of EMC<o:p></o:p></p><p class=3DMsoNormal>M: (224) 277-6821=
<o:p></o:p></p><p class=3DMsoNormal><o:p>&nbsp;</o:p></p></div></body></htm=
l>=

--_000_1F94BBCDF9E6E7438147ABA3C338441AF4C6F3F8MX32Acorpemccom_--

From Walter.Goulet@rsa.com  Mon Jul  2 15:01:12 2012
Return-Path: <Walter.Goulet@rsa.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00D4A21F853B for <pkix@ietfa.amsl.com>; Mon,  2 Jul 2012 15:01:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.001,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8uHtL0URtbkF for <pkix@ietfa.amsl.com>; Mon,  2 Jul 2012 15:01:11 -0700 (PDT)
Received: from mexforward.lss.emc.com (hop-nat-141.emc.com [168.159.213.141]) by ietfa.amsl.com (Postfix) with ESMTP id 61EDF21F8541 for <pkix@ietf.org>; Mon,  2 Jul 2012 15:01:11 -0700 (PDT)
Received: from hop04-l1d11-si02.isus.emc.com (HOP04-L1D11-SI02.isus.emc.com [10.254.111.55]) by mexforward.lss.emc.com (Switch-3.4.3/Switch-3.4.3) with ESMTP id q62M1B0b025101 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Mon, 2 Jul 2012 18:01:11 -0400
Received: from mailhub.lss.emc.com (mailhubhoprd03.lss.emc.com [10.254.221.145]) by hop04-l1d11-si02.isus.emc.com (RSA Interceptor); Mon, 2 Jul 2012 18:00:58 -0400
Received: from mxhub23.corp.emc.com (mxhub23.corp.emc.com [128.222.70.135]) by mailhub.lss.emc.com (Switch-3.4.3/Switch-3.4.3) with ESMTP id q62M0wLD013062; Mon, 2 Jul 2012 18:00:58 -0400
Received: from mx32a.corp.emc.com ([169.254.1.243]) by mxhub23.corp.emc.com ([128.222.70.135]) with mapi; Mon, 2 Jul 2012 18:00:57 -0400
From: <Walter.Goulet@rsa.com>
To: <pgut001@cs.auckland.ac.nz>, <pkix@ietf.org>
Date: Mon, 2 Jul 2012 18:00:56 -0400
Thread-Topic: [pkix] Compiling ASN.1 for PKCS10 (RFC 2986)
Thread-Index: Ac1YnYhvNyMLO2rhQhSgL4+EJmWqPAAADMKA
Message-ID: <1F94BBCDF9E6E7438147ABA3C338441AF4C6F401@MX32A.corp.emc.com>
References: <1F94BBCDF9E6E7438147ABA3C338441AF4C6F3F8@MX32A.corp.emc.com> <E1Sloak-0003Od-02@login01.fos.auckland.ac.nz>
In-Reply-To: <E1Sloak-0003Od-02@login01.fos.auckland.ac.nz>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-EMM-MHVC: 1
Subject: Re: [pkix] Compiling ASN.1 for PKCS10 (RFC 2986)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Jul 2012 22:01:12 -0000

Ah ok, that makes sense. Debugging the ASN.1 compiler errors seems to be dr=
agging me down quite the rathole.

> -----Original Message-----
> From: Peter Gutmann [mailto:pgut001@cs.auckland.ac.nz]
> Sent: Monday, July 02, 2012 4:56 PM
> To: pkix@ietf.org; Goulet, Walter
> Subject: Re: [pkix] Compiling ASN.1 for PKCS10 (RFC 2986)
>=20
> <Walter.Goulet@rsa.com> writes:
>=20
> >Hoping someone can provide me with a pointer. I'm trying to compile the
> >ASN.1 for PKCS10 embedded in RFC 2986 to C structures & definitions.
> >Both of my
> >ASN1 compilers (asn1c and snacc) are complaining when they parse the
> >ASN.1; they both appear to be hanging at parsing the ALGORITHM import
> statement.
>=20
> Until relatively recently, a lot of the IETF's ASN.1, particularly the '8=
8 form that
> was still used years after it was withdrawn by the ISO as a standard, was
> present for sort of illustrative purposes rather than for machine process=
ing.
> It's quite possible that this ASN.1 has never been compilable, so you'd h=
ave
> to adapt it yourself to make it work.
>=20
> Peter.


From kent@bbn.com  Mon Jul  2 15:16:08 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AA25E11E80E1 for <pkix@ietfa.amsl.com>; Mon,  2 Jul 2012 15:16:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.477
X-Spam-Level: 
X-Spam-Status: No, score=-106.477 tagged_above=-999 required=5 tests=[AWL=0.122, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q+70AO1hfUpc for <pkix@ietfa.amsl.com>; Mon,  2 Jul 2012 15:16:08 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 3336D11E80D5 for <pkix@ietf.org>; Mon,  2 Jul 2012 15:16:08 -0700 (PDT)
Received: from dhcp89-089-227.bbn.com ([128.89.89.227]:49266) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1Slouj-000Dkh-OQ for pkix@ietf.org; Mon, 02 Jul 2012 18:16:13 -0400
Mime-Version: 1.0
Message-Id: <p06240822cc17cdae5873@[128.89.89.227]>
Date: Mon, 2 Jul 2012 18:16:09 -0400
To: pkix@ietf.org
From: Stephen Kent <kent@bbn.com>
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
Subject: [pkix] WGLC for 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 02 Jul 2012 22:16:08 -0000

Folks,

Since this version (05)is very brief and has very few substantiative changes
I am initiating a WGLC that will end on Friday, July 13.

Thanks,

Steve

From housley@vigilsec.com  Tue Jul  3 06:58:54 2012
Return-Path: <housley@vigilsec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BF42E21F881A for <pkix@ietfa.amsl.com>; Tue,  3 Jul 2012 06:58:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.079
X-Spam-Level: 
X-Spam-Status: No, score=-102.079 tagged_above=-999 required=5 tests=[AWL=0.519, BAYES_00=-2.599, HTML_MESSAGE=0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FT4LyN-lG0Oh for <pkix@ietfa.amsl.com>; Tue,  3 Jul 2012 06:58:54 -0700 (PDT)
Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id CFEC321F86D4 for <pkix@ietf.org>; Tue,  3 Jul 2012 06:58:53 -0700 (PDT)
Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id ECB24F2403D; Tue,  3 Jul 2012 09:59:15 -0400 (EDT)
X-Virus-Scanned: amavisd-new at smetech.net
Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id az10BmhUgI4e; Tue,  3 Jul 2012 09:58:55 -0400 (EDT)
Received: from [192.168.2.100] (pool-96-255-10-63.washdc.fios.verizon.net [96.255.10.63]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 793C5F2403A; Tue,  3 Jul 2012 09:59:14 -0400 (EDT)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: multipart/alternative; boundary=Apple-Mail-42-92003321
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <1F94BBCDF9E6E7438147ABA3C338441AF4C6F3F8@MX32A.corp.emc.com>
Date: Tue, 3 Jul 2012 09:58:59 -0400
Message-Id: <233AEFB5-B238-49EA-9F60-4A1B3D08B302@vigilsec.com>
References: <1F94BBCDF9E6E7438147ABA3C338441AF4C6F3F8@MX32A.corp.emc.com>
To: <Walter.Goulet@rsa.com> <Walter.Goulet@rsa.com>
X-Mailer: Apple Mail (2.1084)
Cc: pkix@ietf.org
Subject: Re: [pkix] Compiling ASN.1 for PKCS10 (RFC 2986)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Jul 2012 13:58:54 -0000

--Apple-Mail-42-92003321
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252

I compiled it many years ago with ESNACC.  I had to make a few changes =
to make it work.  These are the notes I left behind:

-- The following is a translation of the ASN.1 module from RFC 2986, =
which
-- makes use of the 1993 ASN.1 syntax and IMPLICIT tags.  Also, revised
-- the IMPORT to take advantage of the ASN.1 module from RFC 3280.

Russ


On Jul 2, 2012, at 5:30 PM, <Walter.Goulet@rsa.com> =
<Walter.Goulet@rsa.com> wrote:

> Hi,
> =20
> Hoping someone can provide me with a pointer. I=92m trying to compile =
the ASN.1 for PKCS10 embedded in RFC 2986 to C structures & definitions. =
Both of my ASN1 compilers (asn1c and snacc) are complaining when they =
parse the ASN.1; they both appear to be hanging at parsing the ALGORITHM =
import statement.
> =20
> I=92ve taken care to include the UsefulDefinitions module which =
defines the IMPORTs required for PKCS10, but I=92m still not having any =
luck.
> =20
> Has anyone else recently compiled the PKCS10 ASN.1?
> =20
> Thanks,
> Walter Goulet
> Senior Practice Consultant
> RSA, The Security Division of EMC
> M: (224) 277-6821
> =20
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix


--Apple-Mail-42-92003321
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html;
	charset=windows-1252

<html><head></head><body style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I =
compiled it many years ago with ESNACC. &nbsp;I had to make a few =
changes to make it work. &nbsp;These are the notes I left =
behind:<div><br></div><div><div>-- The following is a translation of the =
ASN.1 module from RFC 2986, which</div><div>-- makes use of the 1993 =
ASN.1 syntax and IMPLICIT tags. &nbsp;Also, revised</div><div>-- the =
IMPORT to take advantage of the ASN.1 module from RFC =
3280.</div><div><br></div><div>Russ</div><div><br></div><div><br></div><di=
v><div>On Jul 2, 2012, at 5:30 PM, &lt;<a =
href=3D"mailto:Walter.Goulet@rsa.com">Walter.Goulet@rsa.com</a>&gt; =
&lt;<a href=3D"mailto:Walter.Goulet@rsa.com">Walter.Goulet@rsa.com</a>&gt;=
 wrote:</div><br class=3D"Apple-interchange-newline"><blockquote =
type=3D"cite"><div lang=3D"EN-US" link=3D"blue" vlink=3D"purple"><div =
class=3D"WordSection1" style=3D"page: WordSection1; "><div =
style=3D"margin-top: 0in; margin-right: 0in; margin-left: 0in; =
margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, =
sans-serif; ">Hi,<o:p></o:p></div><div style=3D"margin-top: 0in; =
margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: =
11pt; font-family: Calibri, sans-serif; "><o:p>&nbsp;</o:p></div><div =
style=3D"margin-top: 0in; margin-right: 0in; margin-left: 0in; =
margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, =
sans-serif; ">Hoping someone can provide me with a pointer. I=92m trying =
to compile the ASN.1 for PKCS10 embedded in RFC 2986 to C structures =
&amp; definitions. Both of my ASN1 compilers (asn1c and snacc) are =
complaining when they parse the ASN.1; they both appear to be hanging at =
parsing the ALGORITHM import statement.<o:p></o:p></div><div =
style=3D"margin-top: 0in; margin-right: 0in; margin-left: 0in; =
margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, =
sans-serif; "><o:p>&nbsp;</o:p></div><div style=3D"margin-top: 0in; =
margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: =
11pt; font-family: Calibri, sans-serif; ">I=92ve taken care to include =
the UsefulDefinitions module which defines the IMPORTs required for =
PKCS10, but I=92m still not having any luck.<o:p></o:p></div><div =
style=3D"margin-top: 0in; margin-right: 0in; margin-left: 0in; =
margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, =
sans-serif; "><o:p>&nbsp;</o:p></div><div style=3D"margin-top: 0in; =
margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: =
11pt; font-family: Calibri, sans-serif; ">Has anyone else recently =
compiled the PKCS10 ASN.1?<o:p></o:p></div><div style=3D"margin-top: =
0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; =
font-size: 11pt; font-family: Calibri, sans-serif; =
"><o:p>&nbsp;</o:p></div><div style=3D"margin-top: 0in; margin-right: =
0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 11pt; =
font-family: Calibri, sans-serif; ">Thanks,<o:p></o:p></div><div =
style=3D"margin-top: 0in; margin-right: 0in; margin-left: 0in; =
margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, =
sans-serif; ">Walter Goulet<o:p></o:p></div><div style=3D"margin-top: =
0in; margin-right: 0in; margin-left: 0in; margin-bottom: 0.0001pt; =
font-size: 11pt; font-family: Calibri, sans-serif; ">Senior Practice =
Consultant<o:p></o:p></div><div style=3D"margin-top: 0in; margin-right: =
0in; margin-left: 0in; margin-bottom: 0.0001pt; font-size: 11pt; =
font-family: Calibri, sans-serif; ">RSA, The Security Division of =
EMC<o:p></o:p></div><div style=3D"margin-top: 0in; margin-right: 0in; =
margin-left: 0in; margin-bottom: 0.0001pt; font-size: 11pt; font-family: =
Calibri, sans-serif; ">M: (224) 277-6821<o:p></o:p></div><div =
style=3D"margin-top: 0in; margin-right: 0in; margin-left: 0in; =
margin-bottom: 0.0001pt; font-size: 11pt; font-family: Calibri, =
sans-serif; =
"><o:p>&nbsp;</o:p></div></div>___________________________________________=
____<br>pkix mailing list<br><a href=3D"mailto:pkix@ietf.org" =
style=3D"color: blue; text-decoration: underline; =
">pkix@ietf.org</a><br><a =
href=3D"https://www.ietf.org/mailman/listinfo/pkix" style=3D"color: =
blue; text-decoration: underline; =
">https://www.ietf.org/mailman/listinfo/pkix</a><br></div></blockquote></d=
iv><br></div></body></html>=

--Apple-Mail-42-92003321--

From Walter.Goulet@rsa.com  Tue Jul  3 07:19:30 2012
Return-Path: <Walter.Goulet@rsa.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 175F521F8834 for <pkix@ietfa.amsl.com>; Tue,  3 Jul 2012 07:19:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.598
X-Spam-Level: 
X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M0QHl2shZHzJ for <pkix@ietfa.amsl.com>; Tue,  3 Jul 2012 07:19:28 -0700 (PDT)
Received: from mexforward.lss.emc.com (hop-nat-141.emc.com [168.159.213.141]) by ietfa.amsl.com (Postfix) with ESMTP id 1A40521F87EF for <pkix@ietf.org>; Tue,  3 Jul 2012 07:19:27 -0700 (PDT)
Received: from hop04-l1d11-si01.isus.emc.com (HOP04-L1D11-SI01.isus.emc.com [10.254.111.54]) by mexforward.lss.emc.com (Switch-3.4.3/Switch-3.4.3) with ESMTP id q63EJYFc031659 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 3 Jul 2012 10:19:35 -0400
Received: from mailhub.lss.emc.com (mailhubhoprd04.lss.emc.com [10.254.222.226]) by hop04-l1d11-si01.isus.emc.com (RSA Interceptor); Tue, 3 Jul 2012 10:19:15 -0400
Received: from mxhub08.corp.emc.com (mxhub08.corp.emc.com [128.222.70.205]) by mailhub.lss.emc.com (Switch-3.4.3/Switch-3.4.3) with ESMTP id q63EJElf031861; Tue, 3 Jul 2012 10:19:14 -0400
Received: from mx32a.corp.emc.com ([169.254.1.243]) by mxhub08.corp.emc.com ([128.222.70.205]) with mapi; Tue, 3 Jul 2012 10:19:13 -0400
From: <Walter.Goulet@rsa.com>
To: <housley@vigilsec.com>
Date: Tue, 3 Jul 2012 10:19:12 -0400
Thread-Topic: [pkix] Compiling ASN.1 for PKCS10 (RFC 2986)
Thread-Index: Ac1ZJDEvlZrvzezjSLC4weg3rcVwzgAAjbFg
Message-ID: <1F94BBCDF9E6E7438147ABA3C338441AF4C6F456@MX32A.corp.emc.com>
References: <1F94BBCDF9E6E7438147ABA3C338441AF4C6F3F8@MX32A.corp.emc.com> <233AEFB5-B238-49EA-9F60-4A1B3D08B302@vigilsec.com>
In-Reply-To: <233AEFB5-B238-49EA-9F60-4A1B3D08B302@vigilsec.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: multipart/alternative; boundary="_000_1F94BBCDF9E6E7438147ABA3C338441AF4C6F456MX32Acorpemccom_"
MIME-Version: 1.0
X-EMM-MHVC: 1
Cc: pkix@ietf.org
Subject: Re: [pkix] Compiling ASN.1 for PKCS10 (RFC 2986)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Jul 2012 14:19:30 -0000

--_000_1F94BBCDF9E6E7438147ABA3C338441AF4C6F456MX32Acorpemccom_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Thanks for the notes Russ.

From: Russ Housley [mailto:housley@vigilsec.com]
Sent: Tuesday, July 03, 2012 8:59 AM
To: Goulet, Walter
Cc: pkix@ietf.org
Subject: Re: [pkix] Compiling ASN.1 for PKCS10 (RFC 2986)

I compiled it many years ago with ESNACC.  I had to make a few changes to m=
ake it work.  These are the notes I left behind:

-- The following is a translation of the ASN.1 module from RFC 2986, which
-- makes use of the 1993 ASN.1 syntax and IMPLICIT tags.  Also, revised
-- the IMPORT to take advantage of the ASN.1 module from RFC 3280.

Russ


On Jul 2, 2012, at 5:30 PM, <Walter.Goulet@rsa.com<mailto:Walter.Goulet@rsa=
.com>> <Walter.Goulet@rsa.com<mailto:Walter.Goulet@rsa.com>> wrote:


Hi,

Hoping someone can provide me with a pointer. I'm trying to compile the ASN=
.1 for PKCS10 embedded in RFC 2986 to C structures & definitions. Both of m=
y ASN1 compilers (asn1c and snacc) are complaining when they parse the ASN.=
1; they both appear to be hanging at parsing the ALGORITHM import statement=
.

I've taken care to include the UsefulDefinitions module which defines the I=
MPORTs required for PKCS10, but I'm still not having any luck.

Has anyone else recently compiled the PKCS10 ASN.1?

Thanks,
Walter Goulet
Senior Practice Consultant
RSA, The Security Division of EMC
M: (224) 277-6821

_______________________________________________
pkix mailing list
pkix@ietf.org<mailto:pkix@ietf.org>
https://www.ietf.org/mailman/listinfo/pkix


--_000_1F94BBCDF9E6E7438147ABA3C338441AF4C6F456MX32Acorpemccom_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40"><head><meta http-equiv=3DContent-Type content=
=3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros=
oft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-reply;
	font-family:"Calibri","sans-serif";
	color:#1F497D;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3Dblue vli=
nk=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal><span style=3D'f=
ont-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Thanks fo=
r the notes Russ. <o:p></o:p></span></p><p class=3DMsoNormal><span style=3D=
'font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p>&n=
bsp;</o:p></span></p><div style=3D'border:none;border-left:solid blue 1.5pt=
;padding:0in 0in 0in 4.0pt'><div><div style=3D'border:none;border-top:solid=
 #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'><p class=3DMsoNormal><b><span sty=
le=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><=
span style=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif"'> Russ Hou=
sley [mailto:housley@vigilsec.com] <br><b>Sent:</b> Tuesday, July 03, 2012 =
8:59 AM<br><b>To:</b> Goulet, Walter<br><b>Cc:</b> pkix@ietf.org<br><b>Subj=
ect:</b> Re: [pkix] Compiling ASN.1 for PKCS10 (RFC 2986)<o:p></o:p></span>=
</p></div></div><p class=3DMsoNormal><o:p>&nbsp;</o:p></p><p class=3DMsoNor=
mal>I compiled it many years ago with ESNACC. &nbsp;I had to make a few cha=
nges to make it work. &nbsp;These are the notes I left behind:<o:p></o:p></=
p><div><p class=3DMsoNormal><o:p>&nbsp;</o:p></p></div><div><div><p class=
=3DMsoNormal>-- The following is a translation of the ASN.1 module from RFC=
 2986, which<o:p></o:p></p></div><div><p class=3DMsoNormal>-- makes use of =
the 1993 ASN.1 syntax and IMPLICIT tags. &nbsp;Also, revised<o:p></o:p></p>=
</div><div><p class=3DMsoNormal>-- the IMPORT to take advantage of the ASN.=
1 module from RFC 3280.<o:p></o:p></p></div><div><p class=3DMsoNormal><o:p>=
&nbsp;</o:p></p></div><div><p class=3DMsoNormal>Russ<o:p></o:p></p></div><d=
iv><p class=3DMsoNormal><o:p>&nbsp;</o:p></p></div><div><p class=3DMsoNorma=
l><o:p>&nbsp;</o:p></p></div><div><div><p class=3DMsoNormal>On Jul 2, 2012,=
 at 5:30 PM, &lt;<a href=3D"mailto:Walter.Goulet@rsa.com">Walter.Goulet@rsa=
.com</a>&gt; &lt;<a href=3D"mailto:Walter.Goulet@rsa.com">Walter.Goulet@rsa=
.com</a>&gt; wrote:<o:p></o:p></p></div><p class=3DMsoNormal><br><br><o:p><=
/o:p></p><div><div><p class=3DMsoNormal><span style=3D'font-size:11.0pt;fon=
t-family:"Calibri","sans-serif"'>Hi,<o:p></o:p></span></p></div><div><p cla=
ss=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-=
serif"'>&nbsp;<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span s=
tyle=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>Hoping someone=
 can provide me with a pointer. I&#8217;m trying to compile the ASN.1 for P=
KCS10 embedded in RFC 2986 to C structures &amp; definitions. Both of my AS=
N1 compilers (asn1c and snacc) are complaining when they parse the ASN.1; t=
hey both appear to be hanging at parsing the ALGORITHM import statement.<o:=
p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'font-size=
:11.0pt;font-family:"Calibri","sans-serif"'>&nbsp;<o:p></o:p></span></p></d=
iv><div><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"C=
alibri","sans-serif"'>I&#8217;ve taken care to include the UsefulDefinition=
s module which defines the IMPORTs required for PKCS10, but I&#8217;m still=
 not having any luck.<o:p></o:p></span></p></div><div><p class=3DMsoNormal>=
<span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>&nbsp;<=
o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'font-si=
ze:11.0pt;font-family:"Calibri","sans-serif"'>Has anyone else recently comp=
iled the PKCS10 ASN.1?<o:p></o:p></span></p></div><div><p class=3DMsoNormal=
><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif"'>&nbsp;=
<o:p></o:p></span></p></div><div><p class=3DMsoNormal><span style=3D'font-s=
ize:11.0pt;font-family:"Calibri","sans-serif"'>Thanks,<o:p></o:p></span></p=
></div><div><p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-famil=
y:"Calibri","sans-serif"'>Walter Goulet<o:p></o:p></span></p></div><div><p =
class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","sa=
ns-serif"'>Senior Practice Consultant<o:p></o:p></span></p></div><div><p cl=
ass=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans=
-serif"'>RSA, The Security Division of EMC<o:p></o:p></span></p></div><div>=
<p class=3DMsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri",=
"sans-serif"'>M: (224) 277-6821<o:p></o:p></span></p></div><div><p class=3D=
MsoNormal><span style=3D'font-size:11.0pt;font-family:"Calibri","sans-serif=
"'>&nbsp;<o:p></o:p></span></p></div><p class=3DMsoNormal>_________________=
______________________________<br>pkix mailing list<br><a href=3D"mailto:pk=
ix@ietf.org">pkix@ietf.org</a><br><a href=3D"https://www.ietf.org/mailman/l=
istinfo/pkix">https://www.ietf.org/mailman/listinfo/pkix</a><o:p></o:p></p>=
</div></div><p class=3DMsoNormal><o:p>&nbsp;</o:p></p></div></div></div></b=
ody></html>=

--_000_1F94BBCDF9E6E7438147ABA3C338441AF4C6F456MX32Acorpemccom_--

From iesg-secretary@ietf.org  Tue Jul  3 08:01:31 2012
Return-Path: <iesg-secretary@ietf.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7F88311E80D5; Tue,  3 Jul 2012 08:01:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.559
X-Spam-Level: 
X-Spam-Status: No, score=-102.559 tagged_above=-999 required=5 tests=[AWL=0.040, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HBqGUMITnsGZ; Tue,  3 Jul 2012 08:01:30 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B4E7821F8842; Tue,  3 Jul 2012 08:01:30 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 4.21p1
Message-ID: <20120703150130.23982.95569.idtracker@ietfa.amsl.com>
Date: Tue, 03 Jul 2012 08:01:30 -0700
Cc: pkix@ietf.org
Subject: [pkix] Last Call: <draft-ietf-pkix-caa-10.txt> (DNS Certification Authority	Authorization (CAA) Resource Record) to Proposed Standard
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: ietf@ietf.org
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 03 Jul 2012 15:01:32 -0000

The IESG has received a request from the Public-Key Infrastructure
(X.509) WG (pkix) to consider the following document:
- 'DNS Certification Authority Authorization (CAA) Resource Record'
  <draft-ietf-pkix-caa-10.txt> as Proposed Standard

The IESG plans to make a decision in the next few weeks, and solicits
final comments on this action. Please send substantive comments to the
ietf@ietf.org mailing lists by 2012-07-17. Exceptionally, comments may be
sent to iesg@ietf.org instead. In either case, please retain the
beginning of the Subject line to allow automated sorting.

Abstract


   The Certification Authority Authorization (CAA) DNS Resource Record
   allows a DNS domain name holder to specify one or more Certification
   Authorities (CAs) authorized to issue certificates for that domain.
   CAA resource records allow a public Certification Authority to
   implement additional controls to reduce the risk of unintended
   certificate mis-issue.




The file can be obtained via
http://datatracker.ietf.org/doc/draft-ietf-pkix-caa/

IESG discussion can be tracked via
http://datatracker.ietf.org/doc/draft-ietf-pkix-caa/ballot/


No IPR declarations have been submitted directly on this I-D.



From turners@ieca.com  Tue Jul  3 20:14:16 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEA0111E80F4 for <pkix@ietfa.amsl.com>; Tue,  3 Jul 2012 20:14:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.252
X-Spam-Level: 
X-Spam-Status: No, score=-102.252 tagged_above=-999 required=5 tests=[AWL=0.013, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id H30Ld5eClqTZ for <pkix@ietfa.amsl.com>; Tue,  3 Jul 2012 20:14:16 -0700 (PDT)
Received: from gateway09.websitewelcome.com (gateway09.websitewelcome.com [67.18.14.9]) by ietfa.amsl.com (Postfix) with ESMTP id 233E711E80EE for <pkix@ietf.org>; Tue,  3 Jul 2012 20:14:16 -0700 (PDT)
Received: by gateway09.websitewelcome.com (Postfix, from userid 507) id F412EA5F816C3; Tue,  3 Jul 2012 22:14:25 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway09.websitewelcome.com (Postfix) with ESMTP id E4973A5F81689 for <pkix@ietf.org>; Tue,  3 Jul 2012 22:14:25 -0500 (CDT)
Received: from [96.231.119.66] (port=41537 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1SmG2q-0005MB-Lk for pkix@ietf.org; Tue, 03 Jul 2012 22:14:24 -0500
Message-ID: <4FF3B50F.3080306@ieca.com>
Date: Tue, 03 Jul 2012 23:14:23 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: pkix@ietf.org
References: <20120704031131.5588.71244.idtracker@ietfa.amsl.com>
In-Reply-To: <20120704031131.5588.71244.idtracker@ietfa.amsl.com>
X-Forwarded-Message-Id: <20120704031131.5588.71244.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (thunderfish.local) [96.231.119.66]:41537
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 2
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Subject: [pkix] Fwd: I-D Action: draft-turner-additional-methods-4kis-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Jul 2012 03:14:16 -0000

I've uploaded the next version.  James Manager agreed to join as a 
co-author after providing much valued input.  We tweaked the syntax and 
added and examples section.  Comments are welcome.

spt

-------- Original Message --------
Subject: I-D Action: draft-turner-additional-methods-4kis-06.txt
Date: Tue, 03 Jul 2012 20:11:31 -0700
From: internet-drafts@ietf.org
Reply-To: internet-drafts@ietf.org
To: i-d-announce@ietf.org


A New Internet-Draft is available from the on-line Internet-Drafts 
directories.


	Title           : Additional Methods for Generating Subject Key 
Identifiers and Subject Key Identifier Semantics Extension
	Author(s)       : Sean Turner
                           Stephen Kent
	Filename        : draft-turner-additional-methods-4kis-06.txt
	Pages           : 12
	Date            : 2012-07-03

Abstract:
    This document specifies additional methods for generating Subject Key
    Identifiers (SKI).  This document also specifies an extension to
    identify the algorithms used to generate the SKI.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-turner-additional-methods-4kis

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-turner-additional-methods-4kis-06

A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=draft-turner-additional-methods-4kis-06


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt




From turners@ieca.com  Tue Jul  3 20:42:52 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9912B11E80F5 for <pkix@ietfa.amsl.com>; Tue,  3 Jul 2012 20:42:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.253
X-Spam-Level: 
X-Spam-Status: No, score=-102.253 tagged_above=-999 required=5 tests=[AWL=0.012, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D-DELq6dYh8h for <pkix@ietfa.amsl.com>; Tue,  3 Jul 2012 20:42:51 -0700 (PDT)
Received: from gateway14.websitewelcome.com (gateway14.websitewelcome.com [69.93.179.25]) by ietfa.amsl.com (Postfix) with ESMTP id 949F711E80E2 for <pkix@ietf.org>; Tue,  3 Jul 2012 20:42:51 -0700 (PDT)
Received: by gateway14.websitewelcome.com (Postfix, from userid 5007) id BF8AF9EDF72C9; Tue,  3 Jul 2012 22:43:01 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway14.websitewelcome.com (Postfix) with ESMTP id B200E9EDF729E for <pkix@ietf.org>; Tue,  3 Jul 2012 22:43:01 -0500 (CDT)
Received: from [96.231.119.66] (port=38539 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1SmGUW-0007vo-H4 for pkix@ietf.org; Tue, 03 Jul 2012 22:43:00 -0500
Message-ID: <4FF3BBC2.4060102@ieca.com>
Date: Tue, 03 Jul 2012 23:42:58 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: pkix@ietf.org
References: <20120704034158.21514.44909.idtracker@ietfa.amsl.com>
In-Reply-To: <20120704034158.21514.44909.idtracker@ietfa.amsl.com>
X-Forwarded-Message-Id: <20120704034158.21514.44909.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (thunderfish.local) [96.231.119.66]:38539
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 4
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Subject: [pkix] Fwd: I-D Action: draft-turner-additional-methods-4kis-07.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 04 Jul 2012 03:42:52 -0000

-------- Original Message --------
Subject: I-D Action: draft-turner-additional-methods-4kis-07.txt
Date: Tue, 03 Jul 2012 20:41:58 -0700
From: internet-drafts@ietf.org
Reply-To: internet-drafts@ietf.org
To: i-d-announce@ietf.org


A New Internet-Draft is available from the on-line Internet-Drafts 
directories.


	Title           : Additional Methods for Generating Subject Key 
Identifiers and Subject Key Identifier Semantics Extension
	Author(s)       : Sean Turner
                           Stephen Kent
                           James Manger
	Filename        : draft-turner-additional-methods-4kis-07.txt
	Pages           : 12
	Date            : 2012-07-03

Abstract:
    This document specifies additional methods for generating Subject Key
    Identifiers (SKI).  This document also specifies an extension to
    identify the algorithms used to generate the SKI.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-turner-additional-methods-4kis

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-turner-additional-methods-4kis-07

A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=draft-turner-additional-methods-4kis-07


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt




From rbarnes@bbn.com  Sun Jul  8 18:22:13 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C724F21F87EA for <pkix@ietfa.amsl.com>; Sun,  8 Jul 2012 18:22:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -107.237
X-Spam-Level: 
X-Spam-Status: No, score=-107.237 tagged_above=-999 required=5 tests=[AWL=0.762, BAYES_00=-2.599, GB_I_LETTER=-2, J_CHICKENPOX_74=0.6, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GeM3hHQQJePA for <pkix@ietfa.amsl.com>; Sun,  8 Jul 2012 18:22:12 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id ABD8521F87D0 for <pkix@ietf.org>; Sun,  8 Jul 2012 18:22:12 -0700 (PDT)
Received: from [128.89.253.212] (port=65479) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1So2gN-000PNb-7V for pkix@ietf.org; Sun, 08 Jul 2012 21:22:35 -0400
From: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Sun, 8 Jul 2012 21:22:35 -0400
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com>
To: pkix@ietf.org
Message-Id: <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com>
Mime-Version: 1.0 (Apple Message framework v1278)
X-Mailer: Apple Mail (2.1278)
Subject: [pkix] Fwd: [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Jul 2012 01:22:13 -0000

FYI, my comments on CAA.

Begin forwarded message:

> From: "Richard L. Barnes" <rbarnes@bbn.com>
> Subject: [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
> Date: July 6, 2012 5:44:06 PM EDT
> To: ietf@ietf.org
> Cc: gen-art@ietf.org, draft-ietf-pkix-caa.all@tools.ietf.org
>=20
> I am the assigned Gen-ART reviewer for this draft. For background on =
Gen-ART,
> please see the FAQ at
> <http://wiki.tools.ietf.org/area/gen/trac/wiki/GenArtfaq>.
>=20
> Please resolve these comments along with any other Last Call comments =
you may
> receive.
>=20
> Document: draft-ietf-pkix-caa-10
> Reviewer: Richard Barnes
> Review Date: 06-July-2012
> IETF LC End Date: 17-July-2012
> IESG Telechat date: TBD
>=20
> Summary: Nearly ready, but has a couple of major issues, and would =
benefit from several clarifications
>=20
> MAJOR:
>=20
> General: Why not DANE?
> It would help prevent confusion if this document could differentiate =
itself a little more clearly from the DANE/TLSA specifications, =
especially since the RRs have largely the same information content.  It =
seems to me that there are a few main reasons:
> -- Authorization without exclusion.  A domain holder might wish to =
authorize an issuer to issue a certificate without invalidating any =
other certificates that it has deployed.
> -- Avoiding confusion: Having a different RRtype helps avoid these =
authorizations being confused with DANE records by relying parties.
> -- Incident reporting via the "iodef" type.
>=20
> General: Tree walking
> The tree walking algorithm specified in Section 3 seems like a really =
bad idea.  It saves the domain holder from having to deploy separate CAA =
records for every subdomain, but has some tricky consequences.  For =
example, because the algorithm stops at the first CAA it finds, =
authorizations don't flow all the way down the tree, just to the first =
CAA point, where they get replaced.  Likewise, if a domain holder =
doesn't agree with a parent domain's CAAs for his domain, he's forced to =
deploy a null CAA defensively.  Recommend removing the tree walking / =
Extended Issuer Authorization Set.
>=20
> General: Public Delegation Points
> The concept of a Public Delegation Point seems unhelpful here, because =
it is not well-defined. =20
>=20
> Section 5.4. "... civil or criminal sanctions."
> This is complete speculation, and highly contingent on legal matters =
that don't belong in a technical specification.  Suggested cutting this =
sentence off:
> "It is thus unlikely that the attack would succeed."
>=20
>=20
> MINOR:
>=20
> Section 2. "CAA records MAY be used by Certificate Evaluators..."
> This recommendation seems to contradict the sentence immediately =
preceding.  =46rom the perspective of deciding whether a certificate is =
valid, a Certificate Evaluator is the same as a Relying Party, so if RPs =
shouldn't use CAA, then neither should Certificate Evaluators.  (In =
general, the concept of a Certificate Evaluator seems unhelpful and =
confusing; I would suggest just using RP, if anything.)
>=20
> Section 2.1. "express written authority"
> Requiring "written" authority seems like it goes beyond the scope of a =
technical specification.
>=20
> Section 4.1.1. "ASCII letter and numbers in lower case."
> Is there any particular reason that this has to be lower case?  It =
might be helpful to specify ABNF for it, e.g.:
>  tag =3D 1*(ALPHA/DIGIT)
>=20
> Section 4.2. ABNF
> This section should specify that IDNs MUST be represented in A-label =
form, with a reference to RFC 5890.
>=20
> Section 4.2. "This form of issue restriction..."
> It would be helpful to explain this a little more fully.  The major =
point of a "null CAA" record seems to (1) stop the tree-climbing in the =
CA processing, and (2) let CAs know that the domain owner understands =
CAA.  If the tree-climbing is removed (as suggested above), then is =
there really value in this beyond having no CAA at all?  (If not, then =
just make the "[domain]" above into "domain".)
>=20
> Section 5.1.=20
> It would be helpful to have a pointer to DANE here.
>=20
>=20
> EDITORIAL:
>=20
> Section 2. "issueance" -> "issuance"=20
>=20
> Section 2. "Certificate Policy Statement"=20
> Seems like "Certification Practices Statement" would be more =
appropriate here.
>=20
> Section 2.1. "a Web service"
> It would be helpful to have a reference to RFC 6546 at this point, =
instead of all the way at the end.
>=20
> Section 3. Bullets
> It would be helpful to describe the process for assembling the =
Extended Issuer Authorization Set.  Namely, something like the =
following:
> 1. Check for CAA records under the target domain name. =20
> 2. If they exist, then they are the EIAS.
> 3. Otherwise, remove a label from the name
> 4. If the name is now empty (the root), then the EIAS is empty
> 5. Otherwise go to step (1) with the new domain name
>=20
> Section 5. "Observance of CAA records by issuers is subject to =
accountability controls."
> This is obviously not true as written;even after this RFC is =
published, not every CA will have controls enforced on it.  Suggested =
text:
> "An issuer's practices with regard to CAA records can be made subject =
to accountability  controls."
> In a similar vein, further down, "Since  CA could have avoided ... is =
increased."  It doesn't seem useful to speculate on probability, but the =
possibility is good to point out.  Suggested text for this and the =
following sentence:
> "Since CAs can have avoided the mis-issue by performing CAA =
processing, if a particular CA does not use CAA, it could cause other =
entities to regard it as less trustworthy.  For example, failure to =
observe CAA issue restrictions might be used as an objective criterion =
for excluding issuers from embedded trust anchor lists."
>=20
> Section 5. "negligent CAs will likely increase" -> "negligent CAs may =
increase"
>=20
>=20
>=20
>=20
>=20
> _______________________________________________
> Gen-art mailing list
> Gen-art@ietf.org
> https://www.ietf.org/mailman/listinfo/gen-art


From dev+ietf@seantek.com  Mon Jul  9 01:11:18 2012
Return-Path: <dev+ietf@seantek.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 109C721F865D for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 01:11:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 29bneMWEbxdV for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 01:11:17 -0700 (PDT)
Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) by ietfa.amsl.com (Postfix) with ESMTP id 4449C21F85D0 for <pkix@ietf.org>; Mon,  9 Jul 2012 01:11:15 -0700 (PDT)
Received: from [192.168.123.7] (unknown [76.173.239.154]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 6721D50A5D for <pkix@ietf.org>; Mon,  9 Jul 2012 04:11:33 -0400 (EDT)
Message-ID: <4FFA9233.3030109@seantek.com>
Date: Mon, 09 Jul 2012 01:11:31 -0700
From: Sean Leonard <dev+ietf@seantek.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120604 Thunderbird/13.0
MIME-Version: 1.0
To: pkix@ietf.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Subject: [pkix] URN certspec draft (in Apps WG)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Jul 2012 08:11:19 -0000

Hello PKIX Folks:

I have made an individual submission titled "A Uniform Resource Name=20
(URN) Namespace for Certificates". Basically, it lets you identify a=20
certificate in ways such as this:

urn:cert:SHA-1:b1f090a8e2d70353107454f9618347b18b321bf1

Because URNs are managed by the Apps WG, I am continuing the=20
conversation in that context. If you are interested, however, I would=20
value your review.

Thank you,

Sean Leonard

Filename:	 draft-seantek-certspec
Revision:	 00
Title:		 A Uniform Resource Name (URN) Namespace for Certificates
Creation date:	 2012-07-08
WG ID:		 Individual Submission
Number of pages: 13
URL:http://www.ietf.org/internet-drafts/draft-seantek-certspec-00.txt
Status:http://datatracker.ietf.org/doc/draft-seantek-certspec
Htmlized:http://tools.ietf.org/html/draft-seantek-certspec-00




From stefan@aaa-sec.com  Mon Jul  9 15:19:45 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A53E621F8722 for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 15:19:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.249
X-Spam-Level: 
X-Spam-Status: No, score=-103.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kZwV7f8xU2pJ for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 15:19:45 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id D52B821F8720 for <pkix@ietf.org>; Mon,  9 Jul 2012 15:19:44 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id D4CA61FCF84B for <pkix@ietf.org>; Tue, 10 Jul 2012 00:20:08 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id g0yB3Kh6lMc9 for <pkix@ietf.org>; Tue, 10 Jul 2012 00:20:08 +0200 (CEST)
Received: from s327.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id A0A6D1FCF826 for <pkix@ietf.org>; Tue, 10 Jul 2012 00:20:08 +0200 (CEST)
Received: (qmail 42869 invoked from network); 9 Jul 2012 22:20:08 -0000
Received: from 78-2-136-161.adsl.net.t-com.hr (HELO [192.168.1.25]) (stefan@fiddler.nu@[78.2.136.161]) (envelope-sender <stefan@aaa-sec.com>) by s327.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <kent@bbn.com>; 9 Jul 2012 22:20:08 -0000
User-Agent: Microsoft-MacOutlook/14.2.2.120421
Date: Tue, 10 Jul 2012 00:20:16 +0200
From: Stefan Santesson <stefan@aaa-sec.com>
To: Stephen Kent <kent@bbn.com>, <pkix@ietf.org>
Message-ID: <CC21257E.476E3%stefan@aaa-sec.com>
Thread-Topic: [pkix] agenda topics?
In-Reply-To: <p06240803cc08e11b69a8@[128.89.89.227]>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Subject: Re: [pkix] agenda topics?
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Jul 2012 22:19:45 -0000

A reminder to send agenda proposals for PKIX meeting in Vancouver to me
and Steve

/Stefan

On 12-06-21 4:33 PM, "Stephen Kent" <kent@bbn.com> wrote:

>Folks,
>
>Please send requests for agenda time to Stefan and cc me.
>
>Thanks,
>
>Steve
>_______________________________________________
>pkix mailing list
>pkix@ietf.org
>https://www.ietf.org/mailman/listinfo/pkix



From pala@isis.poly.edu  Mon Jul  9 15:34:31 2012
Return-Path: <pala@isis.poly.edu>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E9CB911E80C5 for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 15:34:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.11
X-Spam-Level: 
X-Spam-Status: No, score=-1.11 tagged_above=-999 required=5 tests=[BAYES_05=-1.11]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L2sHlVbOwz08 for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 15:34:31 -0700 (PDT)
Received: from isis.poly.edu (isis.poly.edu [128.238.66.15]) by ietfa.amsl.com (Postfix) with ESMTP id C24C911E80BE for <pkix@ietf.org>; Mon,  9 Jul 2012 15:34:30 -0700 (PDT)
Received: (qmail 39720 invoked from network); 9 Jul 2012 22:34:53 -0000
Received: from unknown (HELO zeus.openca.dyndns.org) (madwolf@128.238.102.139) by isis.poly.edu with CAMELLIA256-SHA encrypted SMTP; 9 Jul 2012 22:34:53 -0000
Message-ID: <4FFB5C66.9090402@isis.poly.edu>
Date: Mon, 09 Jul 2012 18:34:14 -0400
From: Massimiliano Pala <pala@isis.poly.edu>
Organization: NYU Poly
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:13.0) Gecko/20120615 Thunderbird/13.0.1
MIME-Version: 1.0
To: "pkix@ietf.org" <pkix@ietf.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [pkix] String Representation of SHA algorithms
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: Massimiliano Pala <pala@isis.poly.edu>
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Jul 2012 22:34:32 -0000

Dear PKIX,

I was wondering if there is an official document describing the string
identifiers associated to SHA algorithms, i.e. to identify an hash algorithm
should we use:

   SHA-1, SHA-256, SHA-384, SHA-512

or

   SHA1, SHA256, SHA384, SHA512

or

   sha1, sha256, sha384, sha512

(of course, this covers the case when you do not want to use OIDs)

RFC 4051 covers the case for full-blown URIs for algorithms, but is there
any document that covers what the string should be used ?

Cheers,
Max

-- 

tel.718-260-4009 | web: http://member.acm.org/~openca/

Massimiliano Pala, Ph.D.
Director & Founder, OpenCA Labs
Research Professor, NYU Poly
Assistant Director, CRISSP

http://crissp.poly.edu


From turners@ieca.com  Mon Jul  9 15:45:32 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8CC2111E80A4 for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 15:45:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.368
X-Spam-Level: 
X-Spam-Status: No, score=-102.368 tagged_above=-999 required=5 tests=[AWL=0.231, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qOwlRrQbbLKf for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 15:45:31 -0700 (PDT)
Received: from gateway11.websitewelcome.com (gateway11.websitewelcome.com [64.5.52.14]) by ietfa.amsl.com (Postfix) with ESMTP id A8C4011E80A3 for <pkix@ietf.org>; Mon,  9 Jul 2012 15:45:31 -0700 (PDT)
Received: by gateway11.websitewelcome.com (Postfix, from userid 5011) id 32D3EA9B16C08; Mon,  9 Jul 2012 17:45:58 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway11.websitewelcome.com (Postfix) with ESMTP id 2501FA9B16BD2 for <pkix@ietf.org>; Mon,  9 Jul 2012 17:45:58 -0500 (CDT)
Received: from [96.231.119.66] (port=47903 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1SoMiL-000393-8r; Mon, 09 Jul 2012 17:45:57 -0500
Message-ID: <4FFB5F24.8080401@ieca.com>
Date: Mon, 09 Jul 2012 18:45:56 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: Massimiliano Pala <pala@isis.poly.edu>
References: <4FFB5C66.9090402@isis.poly.edu>
In-Reply-To: <4FFB5C66.9090402@isis.poly.edu>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (thunderfish.local) [96.231.119.66]:47903
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 2
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] String Representation of SHA algorithms
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Jul 2012 22:45:32 -0000

There's an IANA registry for hash function textual names:

https://www.iana.org/assignments/hash-function-text-names/hash-function-text-names.xml

But, I've seen all three.  FIPS 180 uses SHA-*.

spt

On 7/9/12 6:34 PM, Massimiliano Pala wrote:
> Dear PKIX,
>
> I was wondering if there is an official document describing the string
> identifiers associated to SHA algorithms, i.e. to identify an hash
> algorithm
> should we use:
>
>    SHA-1, SHA-256, SHA-384, SHA-512

or sha-1, sha-256, sha-384, sha-512 ;)

> or
>
>    SHA1, SHA256, SHA384, SHA512
>
> or
>
>    sha1, sha256, sha384, sha512
>
> (of course, this covers the case when you do not want to use OIDs)
>
> RFC 4051 covers the case for full-blown URIs for algorithms, but is there
> any document that covers what the string should be used ?
>
> Cheers,
> Max
>


From pala@isis.poly.edu  Mon Jul  9 16:49:05 2012
Return-Path: <pala@isis.poly.edu>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0373E11E8111 for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 16:49:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.855
X-Spam-Level: 
X-Spam-Status: No, score=-1.855 tagged_above=-999 required=5 tests=[AWL=0.745,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kG7ocU5BvjNb for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 16:49:04 -0700 (PDT)
Received: from isis.poly.edu (isis.poly.edu [128.238.66.15]) by ietfa.amsl.com (Postfix) with ESMTP id A408E11E8108 for <pkix@ietf.org>; Mon,  9 Jul 2012 16:49:03 -0700 (PDT)
Received: (qmail 41210 invoked from network); 9 Jul 2012 23:49:23 -0000
Received: from unknown (HELO zeus.openca.dyndns.org) (madwolf@128.238.102.139) by isis.poly.edu with CAMELLIA256-SHA encrypted SMTP; 9 Jul 2012 23:49:23 -0000
Message-ID: <4FFB6DDB.7080601@isis.poly.edu>
Date: Mon, 09 Jul 2012 19:48:43 -0400
From: Massimiliano Pala <pala@isis.poly.edu>
Organization: NYU Poly
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:13.0) Gecko/20120615 Thunderbird/13.0.1
MIME-Version: 1.0
To: pkix@ietf.org
References: <4FFA9233.3030109@seantek.com>
In-Reply-To: <4FFA9233.3030109@seantek.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [pkix] URN certspec draft (in Apps WG)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: pala@isis.poly.edu
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Jul 2012 23:49:05 -0000

On 07/09/2012 04:11 AM, Sean Leonard wrote:
> Hello PKIX Folks:
>
> I have made an individual submission titled "A Uniform Resource Name (URN) Namespace for 
> Certificates". Basically, it lets you identify a certificate in ways such as this:
>
> urn:cert:SHA-1:b1f090a8e2d70353107454f9618347b18b321bf1
>
> Because URNs are managed by the Apps WG, I am continuing the conversation in that 
> context. If you are interested, however, I would value your review.
>

I think this could be useful for PKIX as well - maybe you should present at the next IETF.. :D

  --- Max

-- 

tel.718-260-4009 | web: http://member.acm.org/~openca/

Massimiliano Pala, Ph.D.
Director & Founder, OpenCA Labs
Research Professor, NYU Poly
Assistant Director, CRISSP

http://crissp.poly.edu


From pala@isis.poly.edu  Mon Jul  9 16:54:28 2012
Return-Path: <pala@isis.poly.edu>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0264621F85B8 for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 16:54:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.581
X-Spam-Level: 
X-Spam-Status: No, score=-1.581 tagged_above=-999 required=5 tests=[AWL=-0.274, BAYES_00=-2.599, MISSING_HEADERS=1.292]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id n+9jUeFOAdxt for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 16:54:27 -0700 (PDT)
Received: from isis.poly.edu (isis.poly.edu [128.238.66.15]) by ietfa.amsl.com (Postfix) with ESMTP id 134F221F854E for <pkix@ietf.org>; Mon,  9 Jul 2012 16:54:25 -0700 (PDT)
Received: (qmail 41278 invoked from network); 9 Jul 2012 23:54:51 -0000
Received: from unknown (HELO zeus.openca.dyndns.org) (madwolf@128.238.102.139) by isis.poly.edu with CAMELLIA256-SHA encrypted SMTP; 9 Jul 2012 23:54:51 -0000
Message-ID: <4FFB6F24.7020602@isis.poly.edu>
Date: Mon, 09 Jul 2012 19:54:12 -0400
From: Massimiliano Pala <pala@isis.poly.edu>
Organization: NYU Poly
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:13.0) Gecko/20120615 Thunderbird/13.0.1
MIME-Version: 1.0
CC: "pkix@ietf.org" <pkix@ietf.org>
References: <4FFB5C66.9090402@isis.poly.edu> <4FFB5F24.8080401@ieca.com>
In-Reply-To: <4FFB5F24.8080401@ieca.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [pkix] String Representation of SHA algorithms
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: pala@isis.poly.edu
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 09 Jul 2012 23:54:28 -0000

Hi Sean,

thanks.. that's what I expected - it seems that there is no real "authoritative" source of 
information about
this issue - I see it could be useful in different scenarios (e.g., Sean Leonard's work on 
cert identifiers
or any environment where OIDs (and their text representations) are not particularly 
desirable).

Do you (list) think there is any utility for a small I-D (also informational) on the topic 
? It seems
a very small item, but it is potentially very useful (e.g., for URLs..).

Cheers,
Max


On 07/09/2012 06:45 PM, Sean Turner wrote:
> There's an IANA registry for hash function textual names:
>
> https://www.iana.org/assignments/hash-function-text-names/hash-function-text-names.xml
>
> But, I've seen all three.  FIPS 180 uses SHA-*.
>
> spt

-- 

tel.718-260-4009 | web: http://member.acm.org/~openca/

Massimiliano Pala, Ph.D.
Director & Founder, OpenCA Labs
Research Professor, NYU Poly
Assistant Director, CRISSP

http://crissp.poly.edu


From turners@ieca.com  Mon Jul  9 18:40:25 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ADD6E11E80F4 for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 18:40:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.207
X-Spam-Level: 
X-Spam-Status: No, score=-102.207 tagged_above=-999 required=5 tests=[AWL=0.058, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qfA9K60A6GUd for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 18:40:25 -0700 (PDT)
Received: from gateway14.websitewelcome.com (gateway14.websitewelcome.com [69.93.35.27]) by ietfa.amsl.com (Postfix) with ESMTP id 1D8C911E80E4 for <pkix@ietf.org>; Mon,  9 Jul 2012 18:40:25 -0700 (PDT)
Received: by gateway14.websitewelcome.com (Postfix, from userid 5007) id B587DA7A93518; Mon,  9 Jul 2012 20:40:51 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway14.websitewelcome.com (Postfix) with ESMTP id A8170A7A934F8 for <pkix@ietf.org>; Mon,  9 Jul 2012 20:40:51 -0500 (CDT)
Received: from [96.231.119.66] (port=42062 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1SoPRa-0007pB-Gt for pkix@ietf.org; Mon, 09 Jul 2012 20:40:50 -0500
Message-ID: <4FFB8821.5080508@ieca.com>
Date: Mon, 09 Jul 2012 21:40:49 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: pkix@ietf.org
References: <20120710013925.12032.61708.idtracker@ietfa.amsl.com>
In-Reply-To: <20120710013925.12032.61708.idtracker@ietfa.amsl.com>
X-Forwarded-Message-Id: <20120710013925.12032.61708.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (thunderfish.local) [96.231.119.66]:42062
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 1
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Subject: [pkix] Fwd: I-D Action: draft-turner-additional-methods-4kis-08.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 01:40:25 -0000

Updated some examples.

spt

-------- Original Message --------
Subject: I-D Action: draft-turner-additional-methods-4kis-08.txt
Date: Mon, 09 Jul 2012 18:39:25 -0700
From: internet-drafts@ietf.org
Reply-To: internet-drafts@ietf.org
To: i-d-announce@ietf.org


A New Internet-Draft is available from the on-line Internet-Drafts 
directories.


	Title           : Additional Methods for Generating Subject Key 
Identifiers and Subject Key Identifier Semantics Extension
	Author(s)       : Sean Turner
                           Stephen Kent
                           James Manger
	Filename        : draft-turner-additional-methods-4kis-08.txt
	Pages           : 12
	Date            : 2012-07-09

Abstract:
    This document specifies additional methods for generating Subject Key
    Identifiers (SKI).  This document also specifies an extension to
    identify the algorithms used to generate the SKI.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-turner-additional-methods-4kis

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-turner-additional-methods-4kis-08

A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=draft-turner-additional-methods-4kis-08


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt




From mrex@sap.com  Mon Jul  9 20:28:49 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7BFDB11E8123 for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 20:28:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.249
X-Spam-Level: 
X-Spam-Status: No, score=-10.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0wFOXaPUDBTk for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 20:28:48 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id 9C13411E811F for <pkix@ietf.org>; Mon,  9 Jul 2012 20:28:48 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id q6A3TBJe007883 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Tue, 10 Jul 2012 05:29:11 +0200 (MEST)
In-Reply-To: <4FFB6F24.7020602@isis.poly.edu>
To: pala@isis.poly.edu
Date: Tue, 10 Jul 2012 05:29:11 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120710032911.852EC1A0B2@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] String Representation of SHA algorithms
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 03:28:49 -0000

Massimiliano Pala wrote:
> 
>Sean Turner wrote:
>>
>> There's an IANA registry for hash function textual names:
>>
>> https://www.iana.org/assignments/hash-function-text-names/hash-function-text-names.xml
>>
>> But, I've seen all three.  FIPS 180 uses SHA-*.
>
> thanks.. that's what I expected - it seems that there is no real
> "authoritative" source of information about this issue - I see it
> could be useful in different scenarios (e.g., Sean Leonard's work on 
> cert identifiers or any environment where OIDs (and their text
> representations) are not particularly desirable).
> 
> Do you (list) think there is any utility for a small I-D
> (also informational) on the topic ? It seems
> a very small item, but it is potentially very useful (e.g., for URLs..).


The situation is *MUCH* worse with dsa signature algorithms,
where from the list

dsaWithSHA1

dsaWithSHA224
dsaWithSHA256

the first one is an "illegal alien" (you need id_dsa_with_sha1 instead).


dsaWithSHA1       { 1, 3, 14, 3, 2, 27 }

dsaWithSHA224     { 2, 16, 840, 1, 101, 3, 4, 3, 1 }
dsaWithSHA256     { 2, 16, 840, 1, 101, 3, 4, 3, 2 }
id_dsa_with_sha1  { 1, 2, 840, 10040, 4, 3 }


-Martin

From dev+ietf@seantek.com  Mon Jul  9 21:58:09 2012
Return-Path: <dev+ietf@seantek.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 54C1421F850F for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 21:58:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hrc0CjGo4-UL for <pkix@ietfa.amsl.com>; Mon,  9 Jul 2012 21:58:06 -0700 (PDT)
Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) by ietfa.amsl.com (Postfix) with ESMTP id 6CF4821F8499 for <pkix@ietf.org>; Mon,  9 Jul 2012 21:58:06 -0700 (PDT)
Received: from [192.168.123.7] (unknown [76.173.239.154]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id A8CE450A6B for <pkix@ietf.org>; Tue, 10 Jul 2012 00:58:26 -0400 (EDT)
Message-ID: <4FFBB671.3020907@seantek.com>
Date: Mon, 09 Jul 2012 21:58:25 -0700
From: Sean Leonard <dev+ietf@seantek.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120604 Thunderbird/13.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <4FFB5C66.9090402@isis.poly.edu> <4FFB5F24.8080401@ieca.com> <4FFB6F24.7020602@isis.poly.edu>
In-Reply-To: <4FFB6F24.7020602@isis.poly.edu>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Subject: Re: [pkix] String Representation of SHA algorithms
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 04:58:09 -0000

Overall, the way that the hash algorithm is identified probably depends=20
on the interplay between what the protocol supports and what the=20
original authors intended.

NIST is very consistent in calling them "SHA-1", "SHA-256", "SHA-384",=20
and "SHA-512" in FIPS 180-4 (as Sean pointed out).

In contrast, the Whirlpool hash algorithm is called "Whirlpool" by its=20
creators, Vincent Rijmen and Paulo S.L.M. Barreto. Actually they call it =

<font color=3D"#003377">W</font><font color=3D"#003377"=20
size=3D"-1">HIRLPOOL</font> in the HTML, but in the metadata and in their=
=20
publications, it's pretty clearly Whirlpool and not WHIRLPOOL.

Now that "SHA-512/256" is "official", one wonders what to do with the=20
"/". My preference is to go with however the algorithm creators=20
themselves call it, unless the protocol doesn't support it.

Just my 2=A2,

Sean (L)

On 7/9/2012 4:54 PM, Massimiliano Pala wrote:
> Hi Sean,
>
> thanks.. that's what I expected - it seems that there is no real=20
> "authoritative" source of information about
> this issue - I see it could be useful in different scenarios (e.g.,=20
> Sean Leonard's work on cert identifiers
> or any environment where OIDs (and their text representations) are not =

> particularly desirable).
>
> Do you (list) think there is any utility for a small I-D (also=20
> informational) on the topic ? It seems
> a very small item, but it is potentially very useful (e.g., for URLs..)=
=2E
>
> Cheers,
> Max
>
>
> On 07/09/2012 06:45 PM, Sean Turner wrote:
>> There's an IANA registry for hash function textual names:
>>
>> https://www.iana.org/assignments/hash-function-text-names/hash-functio=
n-text-names.xml=20
>>
>>
>> But, I've seen all three.  FIPS 180 uses SHA-*.
>>
>> spt
>




From turners@ieca.com  Tue Jul 10 04:38:55 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AF13D21F8770 for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 04:38:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.209
X-Spam-Level: 
X-Spam-Status: No, score=-102.209 tagged_above=-999 required=5 tests=[AWL=0.056, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AaLc2qSf2OV2 for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 04:38:55 -0700 (PDT)
Received: from gateway15.websitewelcome.com (gateway15.websitewelcome.com [69.56.150.8]) by ietfa.amsl.com (Postfix) with ESMTP id 17D6221F85FB for <pkix@ietf.org>; Tue, 10 Jul 2012 04:38:44 -0700 (PDT)
Received: by gateway15.websitewelcome.com (Postfix, from userid 5007) id 8CACAAC81975A; Tue, 10 Jul 2012 06:39:12 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway15.websitewelcome.com (Postfix) with ESMTP id 7BC99AC8196EB for <pkix@ietf.org>; Tue, 10 Jul 2012 06:39:12 -0500 (CDT)
Received: from [96.231.119.66] (port=40463 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1SoYmd-0004pf-05; Tue, 10 Jul 2012 06:39:11 -0500
Message-ID: <4FFC145E.6080308@ieca.com>
Date: Tue, 10 Jul 2012 07:39:10 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: Sean Leonard <dev+ietf@seantek.com>
References: <4FFB5C66.9090402@isis.poly.edu> <4FFB5F24.8080401@ieca.com> <4FFB6F24.7020602@isis.poly.edu> <4FFBB671.3020907@seantek.com>
In-Reply-To: <4FFBB671.3020907@seantek.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (thunderfish.local) [96.231.119.66]:40463
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 2
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Cc: pkix@ietf.org
Subject: Re: [pkix] String Representation of SHA algorithms
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 11:38:55 -0000

On 7/10/12 12:58 AM, Sean Leonard wrote:
> Overall, the way that the hash algorithm is identified probably depends
> on the interplay between what the protocol supports and what the
> original authors intended.
>
> NIST is very consistent in calling them "SHA-1", "SHA-256", "SHA-384",
> and "SHA-512" in FIPS 180-4 (as Sean pointed out).
>
> In contrast, the Whirlpool hash algorithm is called "Whirlpool" by its
> creators, Vincent Rijmen and Paulo S.L.M. Barreto. Actually they call it
> <font color="#003377">W</font><font color="#003377"
> size="-1">HIRLPOOL</font> in the HTML, but in the metadata and in their
> publications, it's pretty clearly Whirlpool and not WHIRLPOOL.
>
> Now that "SHA-512/256" is "official", one wonders what to do with the
> "/". My preference is to go with however the algorithm creators
> themselves call it, unless the protocol doesn't support it.

I've been asking for an applicability statement of some kind on 
SHA-512/256 because I don't think they're we ought to really promote 
these as general purpose hashes.

spt

> Just my 2¢,
>
> Sean (L)
>
> On 7/9/2012 4:54 PM, Massimiliano Pala wrote:
>> Hi Sean,
>>
>> thanks.. that's what I expected - it seems that there is no real
>> "authoritative" source of information about
>> this issue - I see it could be useful in different scenarios (e.g.,
>> Sean Leonard's work on cert identifiers
>> or any environment where OIDs (and their text representations) are not
>> particularly desirable).
>>
>> Do you (list) think there is any utility for a small I-D (also
>> informational) on the topic ? It seems
>> a very small item, but it is potentially very useful (e.g., for URLs..).
>>
>> Cheers,
>> Max
>>
>>
>> On 07/09/2012 06:45 PM, Sean Turner wrote:
>>> There's an IANA registry for hash function textual names:
>>>
>>> https://www.iana.org/assignments/hash-function-text-names/hash-function-text-names.xml
>>>
>>>
>>> But, I've seen all three.  FIPS 180 uses SHA-*.
>>>
>>> spt
>>
>
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>


From turners@ieca.com  Tue Jul 10 06:26:14 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B538A11E808E for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 06:26:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.204
X-Spam-Level: 
X-Spam-Status: No, score=-102.204 tagged_above=-999 required=5 tests=[AWL=0.061, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M2mOCqLgBXZy for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 06:26:14 -0700 (PDT)
Received: from gateway11.websitewelcome.com (gateway11.websitewelcome.com [67.18.7.10]) by ietfa.amsl.com (Postfix) with ESMTP id 391BA11E8089 for <pkix@ietf.org>; Tue, 10 Jul 2012 06:26:14 -0700 (PDT)
Received: by gateway11.websitewelcome.com (Postfix, from userid 5011) id 73D7DAAA6B6A4; Tue, 10 Jul 2012 08:26:42 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway11.websitewelcome.com (Postfix) with ESMTP id 63843AAA6B66B for <pkix@ietf.org>; Tue, 10 Jul 2012 08:26:42 -0500 (CDT)
Received: from [96.231.119.66] (port=45533 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1SoaSe-0006Fa-EK for pkix@ietf.org; Tue, 10 Jul 2012 08:26:40 -0500
Message-ID: <4FFC2D8F.6000702@ieca.com>
Date: Tue, 10 Jul 2012 09:26:39 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: pkix@ietf.org
References: <20120708140755.16513.71464.idtracker@ietfa.amsl.com>
In-Reply-To: <20120708140755.16513.71464.idtracker@ietfa.amsl.com>
X-Forwarded-Message-Id: <20120708140755.16513.71464.idtracker@ietfa.amsl.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (thunderfish.local) [96.231.119.66]:45533
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 14
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Subject: [pkix] Fwd: I-D Action: draft-ietf-tls-multiple-cert-status-extension-01.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 13:26:14 -0000

This draft might be of interest to some.  The last go around I asked 
Yngve to add support for SCVP.  Some additional eyes on this draft, 
especially the SCVP part, are welcome.

spt
-------- Original Message --------
Subject: I-D Action: draft-ietf-tls-multiple-cert-status-extension-01.txt
Date: Sun, 08 Jul 2012 07:07:55 -0700
From: internet-drafts@ietf.org
Reply-To: internet-drafts@ietf.org
To: i-d-announce@ietf.org
CC: tls@ietf.org


A New Internet-Draft is available from the on-line Internet-Drafts 
directories.
  This draft is a work item of the Transport Layer Security Working 
Group of the IETF.

	Title           : The TLS Multiple Certificate Status Request Extension
	Author(s)       : Yngve N. Pettersen
	Filename        : draft-ietf-tls-multiple-cert-status-extension-01.txt
	Pages           : 10
	Date            : 2012-07-08

Abstract:
    This document defines the Transport Layer Security (TLS) Certificate
    Status Version 2 Extension to allow clients to specify and support
    multiple certificate status methods.  Also defined is a new method
    that a server can use to provide status information (i.e., based on
    the Online Certificate Status Protocol and Server-Based Certificate
    Validation Protocol) not just about the server's own certificate, but
    also the status of intermediate certificates in the chain.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-tls-multiple-cert-status-extension

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-tls-multiple-cert-status-extension-01

A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=draft-ietf-tls-multiple-cert-status-extension-01


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
I-D-Announce mailing list
I-D-Announce@ietf.org
https://www.ietf.org/mailman/listinfo/i-d-announce
Internet-Draft directories: http://www.ietf.org/shadow.html
or ftp://ftp.ietf.org/ietf/1shadow-sites.txt




From kent@bbn.com  Tue Jul 10 08:22:33 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EF7A11E8088 for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 08:22:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.439
X-Spam-Level: 
X-Spam-Status: No, score=-106.439 tagged_above=-999 required=5 tests=[AWL=0.160, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l2Ictc7QRyo6 for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 08:22:33 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id 1E4B611E8085 for <pkix@ietf.org>; Tue, 10 Jul 2012 08:22:33 -0700 (PDT)
Received: from dhcp89-089-043.bbn.com ([128.89.89.43]:49254) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1SocGm-000Ogd-TJ; Tue, 10 Jul 2012 11:22:33 -0400
Mime-Version: 1.0
Message-Id: <p06240801cc21ec711078@[128.89.89.43]>
In-Reply-To: <4FFB5C66.9090402@isis.poly.edu>
References: <4FFB5C66.9090402@isis.poly.edu>
Date: Tue, 10 Jul 2012 10:49:46 -0400
To: Massimiliano Pala <pala@isis.poly.edu>
From: Stephen Kent <kent@bbn.com>
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] String Representation of SHA algorithms
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 15:22:33 -0000

At 6:34 PM -0400 7/9/12, Massimiliano Pala wrote:
>Dear PKIX,
>
>I was wondering if there is an official document describing the string
>identifiers associated to SHA algorithms, i.e. to identify an hash algorithm
>should we use:
>

As you note later in your message, in PKIX we use OIDs, so I would 
not expect to find a standards for character string names for hash 
algs in any of our RFCs.  TLS and IKE use strings to specify algs, so 
maybe you should looks for IANA registries associated with those and 
similar security protocols.

Steve

From hallam@gmail.com  Tue Jul 10 08:48:24 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0291321F854A for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 08:48:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.847
X-Spam-Level: 
X-Spam-Status: No, score=-4.847 tagged_above=-999 required=5 tests=[AWL=0.152,  BAYES_00=-2.599, GB_I_LETTER=-2, J_CHICKENPOX_74=0.6, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uSM-zut3Dudy for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 08:48:19 -0700 (PDT)
Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) by ietfa.amsl.com (Postfix) with ESMTP id 4703011E8138 for <pkix@ietf.org>; Tue, 10 Jul 2012 08:48:10 -0700 (PDT)
Received: by obbwc20 with SMTP id wc20so123027obb.31 for <pkix@ietf.org>; Tue, 10 Jul 2012 08:48:38 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=+Uf82TzXQJN/q98MGoEBQd6YbuzSqQOcHd4SnqMX8HM=; b=Ga2uyovWLfb0dnIjeOUXjTfj3peXj0pTvMT0gmMwGOCNE6qQSoOBBkOsGjtBXP5IJb vxQSj6DrHtZN/rPOKVZ2pdHAMWpeJVPBGS3BYV652zClK5ndzff4kOr2dSQ+NwT01t8S FRvzfKeJtc6iYcW5AAkJOQw7r2u3nuRbG/scp02wRVc5LM45dhB4sAmHqQWhWHaVIuju 1JsSEiFv1J67I1CBz/c3+qRZjA+ALnGmhXO0xiVhqTNxCMtmQQGpWGWf9KaCPADlDB/v 1Bsc1Q8btEcLRQGyIpwSj4DCqhVUDIjpd2LzApuqFqmFCazDOGccFwi36lA1JnS5lLG4 ubLQ==
MIME-Version: 1.0
Received: by 10.182.110.102 with SMTP id hz6mr40980466obb.79.1341935318117; Tue, 10 Jul 2012 08:48:38 -0700 (PDT)
Received: by 10.182.64.166 with HTTP; Tue, 10 Jul 2012 08:48:38 -0700 (PDT)
In-Reply-To: <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com>
Date: Tue, 10 Jul 2012 11:48:38 -0400
Message-ID: <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: pkix@ietf.org
Subject: Re: [pkix] Fwd: [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 15:48:24 -0000

There are quite a few comments here, some I think can be taken as
editorial, others are more substantial.

On Sun, Jul 8, 2012 at 9:22 PM, Richard L. Barnes <rbarnes@bbn.com> wrote:

>> MAJOR:
>>
>> General: Why not DANE?
>> It would help prevent confusion if this document could differentiate its=
elf a little more clearly from the DANE/TLSA specifications, especially sin=
ce the RRs have largely the same information content.  It seems to me that =
there are a few main reasons:

The use cases and action are entirely disjoint. DANE is attempting to
establish a new method of key distribution and specifies steps to be
taken in the client to verify keys. CAA specifies steps to be taken by
issuers to validate subjects.

I can write a mention in the preamble. I was avoiding doing that when
DANE was a draft as having two drafts cross reference when not
essential is usually a bad idea.


>> -- Authorization without exclusion.  A domain holder might wish to autho=
rize an issuer to issue a certificate without invalidating any other certif=
icates that it has deployed.
>> -- Avoiding confusion: Having a different RRtype helps avoid these autho=
rizations being confused with DANE records by relying parties.
>> -- Incident reporting via the "iodef" type.

I think the more obvious one being that DANE records make statements
about certificates and CAA is about what happens before a certificate
is created.


>> General: Tree walking
>> The tree walking algorithm specified in Section 3 seems like a really ba=
d idea.  It saves the domain holder from having to deploy separate CAA reco=
rds for every subdomain, but has some tricky consequences.  For example, be=
cause the algorithm stops at the first CAA it finds, authorizations don't f=
low all the way down the tree, just to the first CAA point, where they get =
replaced.  Likewise, if a domain holder doesn't agree with a parent domain'=
s CAAs for his domain, he's forced to deploy a null CAA defensively.  Recom=
mend removing the tree walking / Extended Issuer Authorization Set.

We went through this on the list. Originally there was no tree
walking, only the leaf node and public delegation point were looked
at. This was changed to being the whole length of the tree because it
is only being done at time of issue of a cert. I think this makes best
sense.

The assumption is that a DNS domain superior node has the capability
to enforce as much control as it likes on subordinate nodes. Therefore
any delegation of control is a matter of choice and should be assumed
is done because the superior node wants to delegate that control.

Since CAA authorizations are additive, this is the only way that
allows the use cases to be met. There is a need to carve out
exceptions when a subdomain is being delegated to another party such
as an outsourced mail provider.


Without any form of climbing, the spec is broken as an attacker can
request a certificate for bogus.paypal.com and evade the CAA checks
completely.

>> General: Public Delegation Points
>> The concept of a Public Delegation Point seems unhelpful here, because i=
t is not well-defined.

CAs are already required to manage lists of public delegation points
to ensure that certificates are properly issued. It is a fuzzy concept
because of the way DNS has evolved and in particular the way certain
TLDs like .uk are structured.


>> Section 5.4. "... civil or criminal sanctions."
>> This is complete speculation, and highly contingent on legal matters tha=
t don't belong in a technical specification.  Suggested cutting this senten=
ce off:
>> "It is thus unlikely that the attack would succeed."

No, knowingly making an untrue statement to obtain a valuable
consideration is fraud under UK, US and pretty much any other legal
system. An audit statement is quite obviously a valuable
consideration.

I don't see that there is any speculation there. I will ask the
CABForum folk for an opinion. We have no shortage of lawyers.


>> MINOR:
>>
>> Section 2. "CAA records MAY be used by Certificate Evaluators..."
>> This recommendation seems to contradict the sentence immediately precedi=
ng.  From the perspective of deciding whether a certificate is valid, a Cer=
tificate Evaluator is the same as a Relying Party, so if RPs shouldn't use =
CAA, then neither should Certificate Evaluators.  (In general, the concept =
of a Certificate Evaluator seems unhelpful and confusing; I would suggest j=
ust using RP, if anything.)

The circumstances are entirely different.

It is assumed that a client only has direct access to the DNS which
only holds current statements about the DNS and can only make a go/no
go decision. I don't think that you are going to find any DNS
information suitable for a go/no go decision.

A certificate evaluator is going to be taking information from a wide
variety of sources and make use of archival series. If it has been
sampling the CAA records of a domain on a daily basis for 5 years it
can make decisions that are rather more robust. But even then I would
not want to rely on the DNS information alone, I would tie in
information from checking the Web site, IP blacklists and the like.

CAA records are intelligence, but they are not directly actionable
without other data.


>> Section 2.1. "express written authority"
>> Requiring "written" authority seems like it goes beyond the scope of a t=
echnical specification.

Written authority means authority expressed in a fixed medium that can
be produced on demand. That seems like a necessary requirement if the
accountability control is going to mean anything. Written does not
have to be written on paper, emails are written but they do have to be
fixed.

I don't think we want to allow someone to claim that they were
authorized to issue for Comodo or Symantec on the basis of a phone
call or a chat session.


>> Section 4.1.1. "ASCII letter and numbers in lower case."
>> Is there any particular reason that this has to be lower case?  It might=
 be helpful to specify ABNF for it, e.g.:
>>  tag =3D 1*(ALPHA/DIGIT)

There is no particular reason to use upper case. Mandating registry
tags be lower case is a low cost way to avoid ambiguity and confusion
down the line.

>> Section 4.2. ABNF
>> This section should specify that IDNs MUST be represented in A-label for=
m, with a reference to RFC 5890.

OK, will do that.


>> Section 4.2. "This form of issue restriction..."
>> It would be helpful to explain this a little more fully.  The major poin=
t of a "null CAA" record seems to (1) stop the tree-climbing in the CA proc=
essing, and (2) let CAs know that the domain owner understands CAA.  If the=
 tree-climbing is removed (as suggested above), then is there really value =
in this beyond having no CAA at all?  (If not, then just make the "[domain]=
" above into "domain".)

We have a very good reason for requiring climbing.


>> Section 5.1.
>> It would be helpful to have a pointer to DANE here.

Umm. I am willing to do that now its in the RFC editor queue.

>> EDITORIAL:
>>
>> Section 2. "issueance" -> "issuance"
>>
>> Section 2. "Certificate Policy Statement"
>> Seems like "Certification Practices Statement" would be more appropriate=
 here.

No, there is a difference between the two and I am very clear on which
one is being specified.

A policy statement sets out criteria that the practices must meet. A
relying party should only rely on the undertakings set out in the
policy. The practices statement specifies how the policy is met and is
principally a document for the auditors to work against.

>> Section 2.1. "a Web service"
>> It would be helpful to have a reference to RFC 6546 at this point, inste=
ad of all the way at the end.

OK

>> Section 3. Bullets
>> It would be helpful to describe the process for assembling the Extended =
Issuer Authorization Set.  Namely, something like the following:
>> 1. Check for CAA records under the target domain name.
>> 2. If they exist, then they are the EIAS.
>> 3. Otherwise, remove a label from the name
>> 4. If the name is now empty (the root), then the EIAS is empty
>> 5. Otherwise go to step (1) with the new domain name
>>
>> Section 5. "Observance of CAA records by issuers is subject to accountab=
ility controls."
>> This is obviously not true as written;even after this RFC is published, =
not every CA will have controls enforced on it.  Suggested text:
>> "An issuer's practices with regard to CAA records can be made subject to=
 accountability  controls."

I think it is a MAY.

The criteria here will come from CABForum but I don't want to tie this
draft to one particular body as there may be others.

>> In a similar vein, further down, "Since  CA could have avoided ... is in=
creased."  It doesn't seem useful to speculate on probability, but the poss=
ibility is good to point out.  Suggested text for this and the following se=
ntence:
>> "Since CAs can have avoided the mis-issue by performing CAA processing, =
if a particular CA does not use CAA, it could cause other entities to regar=
d it as less trustworthy.  For example, failure to observe CAA issue restri=
ctions might be used as an objective criterion for excluding issuers from e=
mbedded trust anchor lists."

OK

>> Section 5. "negligent CAs will likely increase" -> "negligent CAs may in=
crease"

OK


--=20
Website: http://hallambaker.com/

From rbarnes@bbn.com  Tue Jul 10 11:29:40 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B2CF21F85D2 for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 11:29:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -107.271
X-Spam-Level: 
X-Spam-Status: No, score=-107.271 tagged_above=-999 required=5 tests=[AWL=0.728, BAYES_00=-2.599, GB_I_LETTER=-2, J_CHICKENPOX_74=0.6, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tbNbtB3b+5kE for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 11:29:39 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 6F0A621F85D0 for <pkix@ietf.org>; Tue, 10 Jul 2012 11:29:38 -0700 (PDT)
Received: from ros-dhcp192-1-51-6.bbn.com ([192.1.51.6]:56166) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SofCF-000DYo-K7; Tue, 10 Jul 2012 14:30:03 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com>
Date: Tue, 10 Jul 2012 14:30:03 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
X-Mailer: Apple Mail (2.1278)
Cc: pkix@ietf.org
Subject: Re: [pkix] Fwd: [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 18:29:40 -0000

Areas of agreement trimmed; responses inline.=20

>>> General: Tree walking
>>> The tree walking algorithm specified in Section 3 seems like a =
really bad idea.  It saves the domain holder from having to deploy =
separate CAA records for every subdomain, but has some tricky =
consequences.  For example, because the algorithm stops at the first CAA =
it finds, authorizations don't flow all the way down the tree, just to =
the first CAA point, where they get replaced.  Likewise, if a domain =
holder doesn't agree with a parent domain's CAAs for his domain, he's =
forced to deploy a null CAA defensively.  Recommend removing the tree =
walking / Extended Issuer Authorization Set.
>=20
> We went through this on the list. Originally there was no tree
> walking, only the leaf node and public delegation point were looked
> at. This was changed to being the whole length of the tree because it
> is only being done at time of issue of a cert. I think this makes best
> sense.

Was the possibility of looking only at the leaf node discussed?  It =
seems like if you're requesting a cert for a domain, you should be =
authorized to provision a record for that domain, so walking up the tree =
is really just an optimization.


> The assumption is that a DNS domain superior node has the capability
> to enforce as much control as it likes on subordinate nodes. Therefore
> any delegation of control is a matter of choice and should be assumed
> is done because the superior node wants to delegate that control.
>=20
> Since CAA authorizations are additive, this is the only way that
> allows the use cases to be met. There is a need to carve out
> exceptions when a subdomain is being delegated to another party such
> as an outsourced mail provider.

> Without any form of climbing, the spec is broken as an attacker can
> request a certificate for bogus.paypal.com and evade the CAA checks
> completely.

OK, I think I understand this better now.  As I understand the scenario, =
you mean:
1. paypal.com provisions CAA 0 issue ";"
2. Attacker who cannot control bogus.paypal.com asks for a cert
3. CA finds nothing under bogus.paypal.com, but finds ";" CAA under =
paypal.com
4. Because (1) there is a CAA record, and (2) issuing would not match a =
CAA record, the CA MUST NOT issue.

The crux of this seems to be that provisioning a null issuer (";") =
conveys a different policy than having no CAA record at all.  That was =
not apparent to me from reading the text, so it might be something =
helpful to call out specifically.

Alternatively, couldn't you just say that in situations where a CA =
requires CAA, it MUST NOT issue if there are no CAA records provisioned =
for the target domain?  It seems like that would be simpler (as a true =
default-deny), and would address your use case without the need for =
tree-walking.

Also, the need to carve out exceptions goes away if you only look at the =
leaf.



>>> General: Public Delegation Points
>>> The concept of a Public Delegation Point seems unhelpful here, =
because it is not well-defined.
>=20
> CAs are already required to manage lists of public delegation points
> to ensure that certificates are properly issued. It is a fuzzy concept
> because of the way DNS has evolved and in particular the way certain
> TLDs like .uk are structured.

OK.  I did not realize this.  I certainly agree it's fuzzy! =20

Is there any guidance you could point to on how a CA should determine =
what domains are public delegation points?  What happens if it guesses =
wrong?  If a CA doesn't know anything about public delegation points, is =
it safe to just go all the way to the root? =20


>>> Section 5.4. "... civil or criminal sanctions."
>>> This is complete speculation, and highly contingent on legal matters =
that don't belong in a technical specification.  Suggested cutting this =
sentence off:
>>> "It is thus unlikely that the attack would succeed."
>=20
> No, knowingly making an untrue statement to obtain a valuable
> consideration is fraud under UK, US and pretty much any other legal
> system. An audit statement is quite obviously a valuable
> consideration.
>=20
> I don't see that there is any speculation there. I will ask the
> CABForum folk for an opinion. We have no shortage of lawyers.

I'm not trying to bring lawyers to bear on this document, I'm trying to =
keep them out :)

The text in question simply isn't technically relevant or useful, and =
could be wrong in some places. =20

(What does this have to do with audit?)


>>> MINOR:
>>>=20
>>> Section 2. "CAA records MAY be used by Certificate Evaluators..."
>>> This recommendation seems to contradict the sentence immediately =
preceding.  =46rom the perspective of deciding whether a certificate is =
valid, a Certificate Evaluator is the same as a Relying Party, so if RPs =
shouldn't use CAA, then neither should Certificate Evaluators.  (In =
general, the concept of a Certificate Evaluator seems unhelpful and =
confusing; I would suggest just using RP, if anything.)
>=20
> The circumstances are entirely different.
>=20
> It is assumed that a client only has direct access to the DNS which
> only holds current statements about the DNS and can only make a go/no
> go decision. I don't think that you are going to find any DNS
> information suitable for a go/no go decision.
>=20
> A certificate evaluator is going to be taking information from a wide
> variety of sources and make use of archival series. If it has been
> sampling the CAA records of a domain on a daily basis for 5 years it
> can make decisions that are rather more robust. But even then I would
> not want to rely on the DNS information alone, I would tie in
> information from checking the Web site, IP blacklists and the like.
>=20
> CAA records are intelligence, but they are not directly actionable
> without other data.

Could you provide an example of a Certificate Evaluator in the real =
world? =20


>>> Section 2.1. "express written authority"
>>> Requiring "written" authority seems like it goes beyond the scope of =
a technical specification.
>=20
> Written authority means authority expressed in a fixed medium that can
> be produced on demand. That seems like a necessary requirement if the
> accountability control is going to mean anything. Written does not
> have to be written on paper, emails are written but they do have to be
> fixed.
>=20
> I don't think we want to allow someone to claim that they were
> authorized to issue for Comodo or Symantec on the basis of a phone
> call or a chat session.

That seems like it's up to the CA!  I don't see much reason why an XMPP =
message should have less authority than an email -- they're both just =
bits.

This is a policy/legal-level requirement, not a technical one.


>>> Section 4.1.1. "ASCII letter and numbers in lower case."
>>> Is there any particular reason that this has to be lower case?  It =
might be helpful to specify ABNF for it, e.g.:
>>> tag =3D 1*(ALPHA/DIGIT)
>=20
> There is no particular reason to use upper case. Mandating registry
> tags be lower case is a low cost way to avoid ambiguity and confusion
> down the line.

I don't really agree that lower case has any benefit.  Requiring it to =
be lower case just means that someone has to check this and reject.  If =
you want case not to cause mismatches, make it case insensitive.  If you =
want to make matching simple make it case sensitive and allow both =
cases.

Still think that there needs to be ABNF for this.


>>> Section 4.2. "This form of issue restriction..."
>>> It would be helpful to explain this a little more fully.  The major =
point of a "null CAA" record seems to (1) stop the tree-climbing in the =
CA processing, and (2) let CAs know that the domain owner understands =
CAA.  If the tree-climbing is removed (as suggested above), then is =
there really value in this beyond having no CAA at all?  (If not, then =
just make the "[domain]" above into "domain".)
>=20
> We have a very good reason for requiring climbing.

As noted above, it would be helpful to explain that the reason is (2), =
i.e., that the policy is different if there is a CAA vs. if there isn't, =
even if the CAA is empty.  So showing that you understand CAA activates =
the default-deny policy.

Also as above, it would be simpler if this mechanism could be true =
default-deny.


>>> EDITORIAL:
>>>=20
>>> Section 2. "issueance" -> "issuance"
>>>=20
>>> Section 2. "Certificate Policy Statement"
>>> Seems like "Certification Practices Statement" would be more =
appropriate here.
>=20
> No, there is a difference between the two and I am very clear on which
> one is being specified.
>=20
> A policy statement sets out criteria that the practices must meet. A
> relying party should only rely on the undertakings set out in the
> policy. The practices statement specifies how the policy is met and is
> principally a document for the auditors to work against.

What statement are you referring to?  In RFC 3647, I see only a =
"Certificate Policy" and a "Certification Practice Statement", not =
"Certificate Policy Statement".

Maybe you mean "Certificate Policy"?  It seems like a mention of CAA =
would fit under the "Certificate Application Processing" heading:
<http://tools.ietf.org/html/rfc3647#section-4.4.2>


>>> Section 3. Bullets
>>> It would be helpful to describe the process for assembling the =
Extended Issuer Authorization Set.  Namely, something like the =
following:
>>> 1. Check for CAA records under the target domain name.
>>> 2. If they exist, then they are the EIAS.
>>> 3. Otherwise, remove a label from the name
>>> 4. If the name is now empty (the root), then the EIAS is empty
>>> 5. Otherwise go to step (1) with the new domain name
>>>=20
>>> Section 5. "Observance of CAA records by issuers is subject to =
accountability controls."
>>> This is obviously not true as written;even after this RFC is =
published, not every CA will have controls enforced on it.  Suggested =
text:
>>> "An issuer's practices with regard to CAA records can be made =
subject to accountability  controls."
>=20
> I think it is a MAY.
>=20
> The criteria here will come from CABForum but I don't want to tie this
> draft to one particular body as there may be others.

Hence the "can be", as in "Someone can do this if they want to".  Like =
CABF.=20




From internet-drafts@ietf.org  Tue Jul 10 14:54:10 2012
Return-Path: <internet-drafts@ietf.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3ECE411E80E6; Tue, 10 Jul 2012 14:54:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.458
X-Spam-Level: 
X-Spam-Status: No, score=-102.458 tagged_above=-999 required=5 tests=[AWL=0.141, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ftxm0bDZrQtW; Tue, 10 Jul 2012 14:54:09 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17BE711E80F8; Tue, 10 Jul 2012 14:54:09 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.30p3
Message-ID: <20120710215409.15427.69818.idtracker@ietfa.amsl.com>
Date: Tue, 10 Jul 2012 14:54:09 -0700
Cc: pkix@ietf.org
Subject: [pkix] I-D Action: draft-ietf-pkix-est-02.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 21:54:10 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Public-Key Infrastructure (X.509) Working=
 Group of the IETF.

	Title           : Enrollment over Secure Transport
	Author(s)       : Max Pritikin
                          Peter E. Yee
                          Dan Harkins
	Filename        : draft-ietf-pkix-est-02.txt
	Pages           : 46
	Date            : 2012-07-10

Abstract:
   This document profiles certificate enrollment for clients using
   Certificate Management over CMS (CMC) messages over a secure
   transport.  This profile, called Enrollment over Secure Transport
   (EST), describes a simple yet functional certificate management
   protocol targeting simple Public Key Infrastructure clients that need
   to acquire client certificate(s) and associated Certification
   Authority (CA) certificate(s).


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-pkix-est

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-pkix-est-02

A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-pkix-est-02


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From peter@akayla.com  Tue Jul 10 15:14:23 2012
Return-Path: <peter@akayla.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FCA211E80C4 for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 15:14:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FJJvw8RG4Kpq for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 15:14:22 -0700 (PDT)
Received: from p3plsmtpa01-01.prod.phx3.secureserver.net (p3plsmtpa01-01.prod.phx3.secureserver.net [72.167.82.81]) by ietfa.amsl.com (Postfix) with SMTP id 80AC921F856D for <pkix@ietf.org>; Tue, 10 Jul 2012 15:14:22 -0700 (PDT)
Received: (qmail 26149 invoked from network); 10 Jul 2012 22:14:50 -0000
Received: from unknown (173.8.184.78) by p3plsmtpa01-01.prod.phx3.secureserver.net (72.167.82.81) with ESMTP; 10 Jul 2012 22:14:50 -0000
From: "Peter Yee" <peter@akayla.com>
To: <pkix@ietf.org>
References: <20120710215409.15427.69818.idtracker@ietfa.amsl.com>
In-Reply-To: <20120710215409.15427.69818.idtracker@ietfa.amsl.com>
Date: Tue, 10 Jul 2012 15:14:47 -0700
Message-ID: <016a01cd5ee9$6aff0060$40fd0120$@akayla.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQJ2WxZiKHfNQ+uHyfHaHSPKvj/OuZXRGawQ
Content-Language: en-us
Subject: Re: [pkix] I-D Action: draft-ietf-pkix-est-02.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jul 2012 22:14:23 -0000

This is a substantially revised draft from the previous one we posted.  A
lot
of reorganization of the text has been done for clarity.  We've also added
a fair amount of new text which we hope makes the intent of the protocol
clearer.  In addition to that, we've also incorporated the CSR attributes
draft from Dan Harkins and Sean Turner, with Dan joining us as an editor
of the document.  We've dropped the crypto algorithms section for now,
although we're considering a secondary draft which will address TLS
cipher suites for use with EST.  Support for server-generated keys is now
available for cases where the client does not want to or cannot generate
its own keys.  New tables provide a handy means to collate pointers to
the various parallel sections of the document.

Your input on the document would be most welcome.  This draft
represents our response to the large amount of input we received from
interested parties.

Max, Dan, and I look forward to presenting our update in Vancouver and
seeing you there.

Thank you.

		-Peter

-----Original Message-----
From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of
internet-drafts@ietf.org
Sent: Tuesday, July 10, 2012 2:54 PM
To: i-d-announce@ietf.org
Cc: pkix@ietf.org
Subject: [pkix] I-D Action: draft-ietf-pkix-est-02.txt


A New Internet-Draft is available from the on-line Internet-Drafts
directories.
 This draft is a work item of the Public-Key Infrastructure (X.509) Working
Group of the IETF.

	Title           : Enrollment over Secure Transport
	Author(s)       : Max Pritikin
                          Peter E. Yee
                          Dan Harkins
	Filename        : draft-ietf-pkix-est-02.txt
	Pages           : 46
	Date            : 2012-07-10

Abstract:
   This document profiles certificate enrollment for clients using
   Certificate Management over CMS (CMC) messages over a secure
   transport.  This profile, called Enrollment over Secure Transport
   (EST), describes a simple yet functional certificate management
   protocol targeting simple Public Key Infrastructure clients that need
   to acquire client certificate(s) and associated Certification
   Authority (CA) certificate(s).


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-pkix-est

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-pkix-est-02

A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=draft-ietf-pkix-est-02


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix


From dev+ietf@seantek.com  Tue Jul 10 19:39:54 2012
Return-Path: <dev+ietf@seantek.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E545711E80E0 for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 19:39:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kHNHf-836hpF for <pkix@ietfa.amsl.com>; Tue, 10 Jul 2012 19:39:54 -0700 (PDT)
Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) by ietfa.amsl.com (Postfix) with ESMTP id D13DC11E80A1 for <pkix@ietf.org>; Tue, 10 Jul 2012 19:39:53 -0700 (PDT)
Received: from [192.168.123.7] (unknown [76.173.239.154]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 7FAAD50A6C for <pkix@ietf.org>; Tue, 10 Jul 2012 22:40:16 -0400 (EDT)
Message-ID: <4FFCE78E.7050107@seantek.com>
Date: Tue, 10 Jul 2012 19:40:14 -0700
From: Sean Leonard <dev+ietf@seantek.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120604 Thunderbird/13.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <4FFB5C66.9090402@isis.poly.edu> <4FFB5F24.8080401@ieca.com> <4FFB6F24.7020602@isis.poly.edu> <4FFBB671.3020907@seantek.com> <4FFC145E.6080308@ieca.com>
In-Reply-To: <4FFC145E.6080308@ieca.com>
Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms060309020903010900070401"
Subject: Re: [pkix] String Representation of SHA algorithms
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Jul 2012 02:39:55 -0000

This is a cryptographically signed message in MIME format.

--------------ms060309020903010900070401
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable

On 7/10/2012 4:39 AM, Sean Turner wrote:
> On 7/10/12 12:58 AM, Sean Leonard wrote:
>> Overall, the way that the hash algorithm is identified probably depend=
s
>> on the interplay between what the protocol supports and what the
>> original authors intended.
>>
>> NIST is very consistent in calling them "SHA-1", "SHA-256", "SHA-384",=

>> and "SHA-512" in FIPS 180-4 (as Sean pointed out).
>>
>> In contrast, the Whirlpool hash algorithm is called "Whirlpool" by its=

>> creators, Vincent Rijmen and Paulo S.L.M. Barreto. Actually they call =
it
>> <font color=3D"#003377">W</font><font color=3D"#003377"
>> size=3D"-1">HIRLPOOL</font> in the HTML, but in the metadata and in th=
eir
>> publications, it's pretty clearly Whirlpool and not WHIRLPOOL.
>>
>> Now that "SHA-512/256" is "official", one wonders what to do with the
>> "/". My preference is to go with however the algorithm creators
>> themselves call it, unless the protocol doesn't support it.
>
> I've been asking for an applicability statement of some kind on=20
> SHA-512/256 because I don't think they're we ought to really promote=20
> these as general purpose hashes.

http://www.schneier.com/blog/archives/2011/02/nist_defines_ne.html

"They've done this because SHA-512 is faster than SHA-256 on 64-bit=20
CPUs, so these new SHA variants will be faster."


As an aside, I intentionally omitted:
SHA-512/224 and SHA-512/256
SHA-3 (candidates)
Whirlpool
RIPEMD
[and everything else]

from this draft. If there is demand then I'll consider them, but I=20
wanted to discourage the proliferation of identifiers.

-Sean



--------------ms060309020903010900070401
Content-Type: application/pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature
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--------------ms060309020903010900070401--

From hallam@gmail.com  Wed Jul 11 07:21:45 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 418D221F86C9 for <pkix@ietfa.amsl.com>; Wed, 11 Jul 2012 07:21:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.743
X-Spam-Level: 
X-Spam-Status: No, score=-4.743 tagged_above=-999 required=5 tests=[AWL=-0.344, BAYES_00=-2.599, GB_I_LETTER=-2, J_CHICKENPOX_47=0.6, J_CHICKENPOX_74=0.6, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rd3+ONQ+jtSJ for <pkix@ietfa.amsl.com>; Wed, 11 Jul 2012 07:21:41 -0700 (PDT)
Received: from mail-vc0-f172.google.com (mail-vc0-f172.google.com [209.85.220.172]) by ietfa.amsl.com (Postfix) with ESMTP id 6BB7E21F86CB for <pkix@ietf.org>; Wed, 11 Jul 2012 07:21:41 -0700 (PDT)
Received: by mail-vc0-f172.google.com with SMTP id p1so843470vcq.31 for <pkix@ietf.org>; Wed, 11 Jul 2012 07:22:12 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=jq9eYcY1P+0S+SIAI6hjmi4JMIUpX9mv7uNMMtHcP+o=; b=zSiDMywnBGmqThyPkwzuex1aRf24roERrw+wJfKlt9lxd/Ms/MVThvulccw2y3ZHO5 5cv0lgSoCEPYzbrh673PvqPqe3j333ZjU+xXN7nysERLHzuYnx2GFSMTxC4ZolM39Cry h+nIBNjGrxnUEtlw6DVUgA/NiCfSKyrKZ2fBUDu1wT4/Ee2PWX+BRI1aBGZVzM6WpTQi NF4LOwrGpywFrnSg6cEng4S+fgwriWRuLV1vK7NYqE8M7ZDc4MbG8dsf8j4vVfpr5/PP WH4GM7MJyoW7PsAawM2K0+Diyjxoq3dP8b4mIa8S7ocu34kjkjf0SM2MhlyWk8fRJ/6y Ml5Q==
MIME-Version: 1.0
Received: by 10.52.26.81 with SMTP id j17mr19965979vdg.94.1342016531704; Wed, 11 Jul 2012 07:22:11 -0700 (PDT)
Received: by 10.58.161.139 with HTTP; Wed, 11 Jul 2012 07:22:11 -0700 (PDT)
In-Reply-To: <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com>
Date: Wed, 11 Jul 2012 10:22:11 -0400
Message-ID: <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: pkix@ietf.org
Subject: Re: [pkix] Fwd: [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Jul 2012 14:21:45 -0000

On Tue, Jul 10, 2012 at 2:30 PM, Richard L. Barnes <rbarnes@bbn.com> wrote:
> Areas of agreement trimmed; responses inline.
>
>>>> General: Tree walking
>>>> The tree walking algorithm specified in Section 3 seems like a really =
bad idea.  It saves the domain holder from having to deploy separate CAA re=
cords for every subdomain, but has some tricky consequences.  For example, =
because the algorithm stops at the first CAA it finds, authorizations don't=
 flow all the way down the tree, just to the first CAA point, where they ge=
t replaced.  Likewise, if a domain holder doesn't agree with a parent domai=
n's CAAs for his domain, he's forced to deploy a null CAA defensively.  Rec=
ommend removing the tree walking / Extended Issuer Authorization Set.
>>
>> We went through this on the list. Originally there was no tree
>> walking, only the leaf node and public delegation point were looked
>> at. This was changed to being the whole length of the tree because it
>> is only being done at time of issue of a cert. I think this makes best
>> sense.
>
> Was the possibility of looking only at the leaf node discussed?  It seems=
 like if you're requesting a cert for a domain, you should be authorized to=
 provision a record for that domain, so walking up the tree is really just =
an optimization.


Today the practice for validation checks is to ONLY check for the
public delegation point. Subdomains are not a concern for CAs, they
are assumed to be purely a matter of internal administrative policy.

The number of domains where this is not the case is vanishingly small.
Yes, at MIT there are subdomains for the departments but outside CSAIL
they are all run by the MIT network staff anyway.

Checking the leaf node only would make no sense at all to me, consider
the cases for leaf.example.com and example.com

1) No CAA record at either - anyone can issue

2) CAA record at example.com for Alice.ca,
     only Alice can issue for *.example.com

3) CAA record at leaf.example.com for Bob.ca,
     only Bob can issue for leaf.example,com, anyone can issue for the rest

4) CAA record at leaf.example.com for Bob.ca, CAA record at
example.com for Alice.ca,
     only Bob can issue for leaf.example,com, anyone can issue for the rest


You seem to be arguing that in case 2, anyone could issue for
leaf.example.com. That seems like nonsense to me.


>> The assumption is that a DNS domain superior node has the capability
>> to enforce as much control as it likes on subordinate nodes. Therefore
>> any delegation of control is a matter of choice and should be assumed
>> is done because the superior node wants to delegate that control.
>>
>> Since CAA authorizations are additive, this is the only way that
>> allows the use cases to be met. There is a need to carve out
>> exceptions when a subdomain is being delegated to another party such
>> as an outsourced mail provider.
>
>> Without any form of climbing, the spec is broken as an attacker can
>> request a certificate for bogus.paypal.com and evade the CAA checks
>> completely.
>
> OK, I think I understand this better now.  As I understand the scenario, =
you mean:
> 1. paypal.com provisions CAA 0 issue ";"
> 2. Attacker who cannot control bogus.paypal.com asks for a cert
> 3. CA finds nothing under bogus.paypal.com, but finds ";" CAA under paypa=
l.com
> 4. Because (1) there is a CAA record, and (2) issuing would not match a C=
AA record, the CA MUST NOT issue.
>
> The crux of this seems to be that provisioning a null issuer (";") convey=
s a different policy than having no CAA record at all.  That was not appare=
nt to me from reading the text, so it might be something helpful to call ou=
t specifically.
>
> Alternatively, couldn't you just say that in situations where a CA requir=
es CAA, it MUST NOT issue if there are no CAA records provisioned for the t=
arget domain?  It seems like that would be simpler (as a true default-deny)=
, and would address your use case without the need for tree-walking.

Are you seriously suggesting that CAs are going to deploy a spec that
required every one of their customers to deploy a new record before
they could issue a cert?

> Also, the need to carve out exceptions goes away if you only look at the =
leaf.

So does the effectiveness of the control.


>>>> General: Public Delegation Points
>>>> The concept of a Public Delegation Point seems unhelpful here, because=
 it is not well-defined.
>>
>> CAs are already required to manage lists of public delegation points
>> to ensure that certificates are properly issued. It is a fuzzy concept
>> because of the way DNS has evolved and in particular the way certain
>> TLDs like .uk are structured.
>
> OK.  I did not realize this.  I certainly agree it's fuzzy!
>
> Is there any guidance you could point to on how a CA should determine wha=
t domains are public delegation points?  What happens if it guesses wrong? =
 If a CA doesn't know anything about public delegation points, is it safe t=
o just go all the way to the root?

That is all stuff that represents 'policy' which would have to be
harmonized in CABForum if it is going to be harmonized anywhere.

One of the new corner cases is that we now have a real possibility of
TLDs that are going to not be public delegation points like .google
and .apple.




>>>> Section 5.4. "... civil or criminal sanctions."
>>>> This is complete speculation, and highly contingent on legal matters t=
hat don't belong in a technical specification.  Suggested cutting this sent=
ence off:
>>>> "It is thus unlikely that the attack would succeed."
>>
>> No, knowingly making an untrue statement to obtain a valuable
>> consideration is fraud under UK, US and pretty much any other legal
>> system. An audit statement is quite obviously a valuable
>> consideration.
>>
>> I don't see that there is any speculation there. I will ask the
>> CABForum folk for an opinion. We have no shortage of lawyers.
>
> I'm not trying to bring lawyers to bear on this document, I'm trying to k=
eep them out :)
>
> The text in question simply isn't technically relevant or useful, and cou=
ld be wrong in some places.
>
> (What does this have to do with audit?)

Once we get CAA signed off here, the next stage is to have it adopted
as a Basic Requirement for validation by CABForum. At which point
compliance with CAA will become an audit requirement within a couple
of years.

This is an accountability control and so the enforcement is by
consequences and not purely technical.


>>>> MINOR:
>>>>
>>>> Section 2. "CAA records MAY be used by Certificate Evaluators..."
>>>> This recommendation seems to contradict the sentence immediately prece=
ding.  From the perspective of deciding whether a certificate is valid, a C=
ertificate Evaluator is the same as a Relying Party, so if RPs shouldn't us=
e CAA, then neither should Certificate Evaluators.  (In general, the concep=
t of a Certificate Evaluator seems unhelpful and confusing; I would suggest=
 just using RP, if anything.)
>>
>> The circumstances are entirely different.
>>
>> It is assumed that a client only has direct access to the DNS which
>> only holds current statements about the DNS and can only make a go/no
>> go decision. I don't think that you are going to find any DNS
>> information suitable for a go/no go decision.
>>
>> A certificate evaluator is going to be taking information from a wide
>> variety of sources and make use of archival series. If it has been
>> sampling the CAA records of a domain on a daily basis for 5 years it
>> can make decisions that are rather more robust. But even then I would
>> not want to rely on the DNS information alone, I would tie in
>> information from checking the Web site, IP blacklists and the like.
>>
>> CAA records are intelligence, but they are not directly actionable
>> without other data.
>
> Could you provide an example of a Certificate Evaluator in the real world=
?

Comodo CertSentry, Kasperky also have a product. I would expect McAfee
and Symantec also have ideas for product.

Before that we had the EFF certificate observatory, Convergence and
Perspectives. Though I suspect those will be seen as forerunners of
the commercial services as open source services don't scale quite the
same way as open source software as the marginal cost of service is
negligible rather than zero and those negligible amounts add up.

I have a draft out on an open protocol, reference code to follow:

http://www.ietf.org/id/draft-hallambaker-omnibroker-00.txt


>>>> Section 2.1. "express written authority"
>>>> Requiring "written" authority seems like it goes beyond the scope of a=
 technical specification.
>>
>> Written authority means authority expressed in a fixed medium that can
>> be produced on demand. That seems like a necessary requirement if the
>> accountability control is going to mean anything. Written does not
>> have to be written on paper, emails are written but they do have to be
>> fixed.
>>
>> I don't think we want to allow someone to claim that they were
>> authorized to issue for Comodo or Symantec on the basis of a phone
>> call or a chat session.
>
> That seems like it's up to the CA!  I don't see much reason why an XMPP m=
essage should have less authority than an email -- they're both just bits.

The point is that you have to save it.

If you have a saved jabber log, well it might count. But since jabber
is a conversation, well I don't think I would rely on it for authority
to issue on behalf of Symantec.

> This is a policy/legal-level requirement, not a technical one.

As is pretty much the whole subject matter of PKI.


>>>> Section 4.1.1. "ASCII letter and numbers in lower case."
>>>> Is there any particular reason that this has to be lower case?  It mig=
ht be helpful to specify ABNF for it, e.g.:
>>>> tag =3D 1*(ALPHA/DIGIT)
>>
>> There is no particular reason to use upper case. Mandating registry
>> tags be lower case is a low cost way to avoid ambiguity and confusion
>> down the line.
>
> I don't really agree that lower case has any benefit.  Requiring it to be=
 lower case just means that someone has to check this and reject.  If you w=
ant case not to cause mismatches, make it case insensitive.  If you want to=
 make matching simple make it case sensitive and allow both cases.
>
> Still think that there needs to be ABNF for this.
>
>
>>>> Section 4.2. "This form of issue restriction..."
>>>> It would be helpful to explain this a little more fully.  The major po=
int of a "null CAA" record seems to (1) stop the tree-climbing in the CA pr=
ocessing, and (2) let CAs know that the domain owner understands CAA.  If t=
he tree-climbing is removed (as suggested above), then is there really valu=
e in this beyond having no CAA at all?  (If not, then just make the "[domai=
n]" above into "domain".)
>>
>> We have a very good reason for requiring climbing.
>
> As noted above, it would be helpful to explain that the reason is (2), i.=
e., that the policy is different if there is a CAA vs. if there isn't, even=
 if the CAA is empty.  So showing that you understand CAA activates the def=
ault-deny policy.
>
> Also as above, it would be simpler if this mechanism could be true defaul=
t-deny.

And a non-starter for deployment.


>>>> EDITORIAL:
>>>>
>>>> Section 2. "issueance" -> "issuance"
>>>>
>>>> Section 2. "Certificate Policy Statement"
>>>> Seems like "Certification Practices Statement" would be more appropria=
te here.
>>
>> No, there is a difference between the two and I am very clear on which
>> one is being specified.
>>
>> A policy statement sets out criteria that the practices must meet. A
>> relying party should only rely on the undertakings set out in the
>> policy. The practices statement specifies how the policy is met and is
>> principally a document for the auditors to work against.
>
> What statement are you referring to?  In RFC 3647, I see only a "Certific=
ate Policy" and a "Certification Practice Statement", not "Certificate Poli=
cy Statement".
>
> Maybe you mean "Certificate Policy"?  It seems like a mention of CAA woul=
d fit under the "Certificate Application Processing" heading:
> <http://tools.ietf.org/html/rfc3647#section-4.4.2>

Ah, the word statement should have been killed.


>>>> Section 3. Bullets
>>>> It would be helpful to describe the process for assembling the Extende=
d Issuer Authorization Set.  Namely, something like the following:
>>>> 1. Check for CAA records under the target domain name.
>>>> 2. If they exist, then they are the EIAS.
>>>> 3. Otherwise, remove a label from the name
>>>> 4. If the name is now empty (the root), then the EIAS is empty
>>>> 5. Otherwise go to step (1) with the new domain name
>>>>
>>>> Section 5. "Observance of CAA records by issuers is subject to account=
ability controls."
>>>> This is obviously not true as written;even after this RFC is published=
, not every CA will have controls enforced on it.  Suggested text:
>>>> "An issuer's practices with regard to CAA records can be made subject =
to accountability  controls."
>>
>> I think it is a MAY.
>>
>> The criteria here will come from CABForum but I don't want to tie this
>> draft to one particular body as there may be others.
>
> Hence the "can be", as in "Someone can do this if they want to".  Like CA=
BF.

I think that counts as normative language.

--=20
Website: http://hallambaker.com/

From mrex@sap.com  Wed Jul 11 16:31:14 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 45EE211E80BE for <pkix@ietfa.amsl.com>; Wed, 11 Jul 2012 16:31:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.249
X-Spam-Level: 
X-Spam-Status: No, score=-10.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hv0wphbVxM94 for <pkix@ietfa.amsl.com>; Wed, 11 Jul 2012 16:31:13 -0700 (PDT)
Received: from smtpde01.sap-ag.de (smtpde01.sap-ag.de [155.56.68.170]) by ietfa.amsl.com (Postfix) with ESMTP id 5919E11E80F8 for <pkix@ietf.org>; Wed, 11 Jul 2012 16:31:12 -0700 (PDT)
Received: from mail.sap.corp by smtpde01.sap-ag.de (26) with ESMTP id q6BNVTmj023910 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL); Thu, 12 Jul 2012 01:31:30 +0200 (MEST)
In-Reply-To: <033201cd567c$ef626970$ce273c50$@akayla.com>
To: Peter Yee <peter@akayla.com>
Date: Thu, 12 Jul 2012 01:31:28 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120711233128.C682F1A0C1@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: pkix@ietf.org
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 11 Jul 2012 23:31:14 -0000

Peter Yee wrote:
>
> The updated draft has been posted.  Please let me know if further changes
> are required.
> 
> Steve Kent wrote: 
>> A new version of 5280 clarifications will be published shortly.
>>
>> Peter Yee has taken over from David Copper as the document editor.
>> 
>> There are very few changes since the last published version. The only major
>> change is a new paragraph on our favorite topic of self-signed EE certs.
>> Hopefully this text will be acceptable.


A brief scan of the -05 diffs
http://tools.ietf.org/rfcdiff?url2=draft-ietf-pkix-rfc5280-clarifications-05

creates the impression of a slight inconsistency with rfc5937 Section 2
by making appear the "optionality" of trust anchor constraints differ between
the 3 rfc5914 formats (TrustAnchorInfo, Certificate, and TBSCertificate)
and rfc5280-update.

in rfc5937 section 2, they appear fully equivalent to me:


  http://tools.ietf.org/html/rfc5937#section-2

   2. Identifying Trust Anchor Constraints

   TAF supports three formats for representing trust anchor information:
   TrustAnchorInfo, Certificate, and TBSCertificate.  In all three
   cases, trust anchor constraints may be represented as extensions.  In
   the TrustAnchorInfo structure, certificate policies, policy
   constraints, name constraints, inhibit any policy, and basic
   constraints do not appear as extensions and instead appear as part of
   the CertPathControls field.

   Extensions may be marked critical or not critical.  When trust anchor
   constraints are enforced, clients MUST reject certification paths
   containing a trust anchor with unrecognized critical extensions.
   When trust anchor constraints are not enforced, clients MAY accept
   certification paths containing a trust anchor with unrecognized
   critical extensions.  Information appearing in the CertPathControls
   field of a TrustAnchorInfo object MUST be processed, ensuring
   enforcement of the constraints indicated by this field in all cases.


 
Excerpts from 5280-update-05:

      The path validation algorithm presented
   |  in Section 6.1 does not assume that trust anchor information is
   |  provided in self-signed certificates

huh?  rfc-5280 currently makes these statements in 6.1.1:

   (d)  trust anchor information, describing a CA that serves as a
        trust anchor for the certification path.  The trust anchor
        information includes:

         (1)  the trusted issuer name,
         (2)  the trusted public key algorithm,
         (3)  the trusted public key, and
         (4)  optionally, the trusted public key parameters associated
              with the public key.

      The trust anchor information may be provided to the path
      processing procedure in the form of a self-signed certificate.

The only trust anchor format mentioned in rfc5280 is *self-signed* certificate
so "does not assume that trust anchor information is provided in self-signed
certificate looks weird to me.

To me, rfc5280 says that trust anchors *ARE* often supplied as self-signed
certificates to the path validation function, but there *may* exist different
trust anchor formats, or formats where a self-signed cert is a subset of
the (trust anchor) information (though the latter is unfortunately
unsupported by rfc5914).



  |
  |  and does not specify processing
  |  rules for additional information included in such certificates.

and neither for any other Trust Anchor Format there might be.


  |  However, [RFC5937] provides an example of how additional information
  |  included in self-signed certificates may be used to initialize the
  |  path validation inputs.  Implementations that use self-signed
  |  certificates to specify trust anchor information are free to make
  |  use of any additional information that is included in the
  |  certificates, or to ignore such information.

RFC5937 section 2 IMO declares constraints in *ALL 3* TAFs defined by rfc5914
to be equivalent.  It looks weird for this new text to reference rfc5937,
but single out the "additional information" of only self-signed certificates
to be "freely ignored"--shouldn't this apply to trust anchor constraints
for all 3 rfc5914 TAFs in the same fashion?


-Martin

From hallam@gmail.com  Wed Jul 11 18:09:29 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9E25511E80CA for <pkix@ietfa.amsl.com>; Wed, 11 Jul 2012 18:09:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.542
X-Spam-Level: 
X-Spam-Status: No, score=-4.542 tagged_above=-999 required=5 tests=[AWL=-0.943, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oAsj7Cdv6HeA for <pkix@ietfa.amsl.com>; Wed, 11 Jul 2012 18:09:28 -0700 (PDT)
Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) by ietfa.amsl.com (Postfix) with ESMTP id C4EE611E8133 for <pkix@ietf.org>; Wed, 11 Jul 2012 18:09:28 -0700 (PDT)
Received: by obbwc20 with SMTP id wc20so2545182obb.31 for <pkix@ietf.org>; Wed, 11 Jul 2012 18:10:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=ooxNC79tkN6laskDAeYmtUfwp6bWA5q1bi4nqqvpFEs=; b=DZ1UvGmeeb3nYr4MO0ybEUFzwTYPn9r/UqtbtGpu26YYsn+jah617rNjmCkyWt4cXm fpe+CyNh1zhelWOCLdLRQr9iOBmUl2KV/ks7LWjR9UNtx7STrB17cP+SvM913DrWoUHU jGZ0gBFpFaAxAi32iP3IMZBsW7QLzSQN2/dAxeZn7K16x/SGtZcZju0B9X6HKWXiQ/AA cog3UDXmrm9acSrH6SeGY4aASZ1Caz1tQAKMcBapaUy6qNQPBSDulq5XXGMUewEK4eGD HorWvBxx99MfESrqm7dGMMeyfG0zF2bD7NmKHoY4WTVVPaTnF+wSvJxCEanCffmlKEm/ Os7A==
MIME-Version: 1.0
Received: by 10.182.111.74 with SMTP id ig10mr46658489obb.14.1342055400500; Wed, 11 Jul 2012 18:10:00 -0700 (PDT)
Received: by 10.76.120.110 with HTTP; Wed, 11 Jul 2012 18:10:00 -0700 (PDT)
In-Reply-To: <4FFC145E.6080308@ieca.com>
References: <4FFB5C66.9090402@isis.poly.edu> <4FFB5F24.8080401@ieca.com> <4FFB6F24.7020602@isis.poly.edu> <4FFBB671.3020907@seantek.com> <4FFC145E.6080308@ieca.com>
Date: Wed, 11 Jul 2012 21:10:00 -0400
Message-ID: <CAMm+Lwioe46FAHd6i4Y+2orCvnDnxitgaFoy956fQm=yYiaWJA@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: Sean Turner <turners@ieca.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: pkix@ietf.org, Sean Leonard <dev+ietf@seantek.com>
Subject: Re: [pkix] String Representation of SHA algorithms
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 01:09:29 -0000

Should the JSON Signature folk be told to use the same registry?

(Says someone who just wrote code with their different identifiers this mor=
ning)

On Tue, Jul 10, 2012 at 7:39 AM, Sean Turner <turners@ieca.com> wrote:
> On 7/10/12 12:58 AM, Sean Leonard wrote:
>>
>> Overall, the way that the hash algorithm is identified probably depends
>> on the interplay between what the protocol supports and what the
>> original authors intended.
>>
>> NIST is very consistent in calling them "SHA-1", "SHA-256", "SHA-384",
>> and "SHA-512" in FIPS 180-4 (as Sean pointed out).
>>
>> In contrast, the Whirlpool hash algorithm is called "Whirlpool" by its
>> creators, Vincent Rijmen and Paulo S.L.M. Barreto. Actually they call it
>> <font color=3D"#003377">W</font><font color=3D"#003377"
>> size=3D"-1">HIRLPOOL</font> in the HTML, but in the metadata and in thei=
r
>> publications, it's pretty clearly Whirlpool and not WHIRLPOOL.
>>
>> Now that "SHA-512/256" is "official", one wonders what to do with the
>> "/". My preference is to go with however the algorithm creators
>> themselves call it, unless the protocol doesn't support it.
>
>
> I've been asking for an applicability statement of some kind on SHA-512/2=
56
> because I don't think they're we ought to really promote these as general
> purpose hashes.
>
> spt
>
>
>> Just my 2=A2,
>>
>> Sean (L)
>>
>> On 7/9/2012 4:54 PM, Massimiliano Pala wrote:
>>>
>>> Hi Sean,
>>>
>>> thanks.. that's what I expected - it seems that there is no real
>>> "authoritative" source of information about
>>> this issue - I see it could be useful in different scenarios (e.g.,
>>> Sean Leonard's work on cert identifiers
>>> or any environment where OIDs (and their text representations) are not
>>> particularly desirable).
>>>
>>> Do you (list) think there is any utility for a small I-D (also
>>> informational) on the topic ? It seems
>>> a very small item, but it is potentially very useful (e.g., for URLs..)=
.
>>>
>>> Cheers,
>>> Max
>>>
>>>
>>> On 07/09/2012 06:45 PM, Sean Turner wrote:
>>>>
>>>> There's an IANA registry for hash function textual names:
>>>>
>>>>
>>>> https://www.iana.org/assignments/hash-function-text-names/hash-functio=
n-text-names.xml
>>>>
>>>>
>>>> But, I've seen all three.  FIPS 180 uses SHA-*.
>>>>
>>>> spt
>>>
>>>
>>
>>
>>
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix



--=20
Website: http://hallambaker.com/

From rbarnes@bbn.com  Wed Jul 11 19:52:06 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 76FED21F85F0 for <pkix@ietfa.amsl.com>; Wed, 11 Jul 2012 19:52:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -105.996
X-Spam-Level: 
X-Spam-Status: No, score=-105.996 tagged_above=-999 required=5 tests=[AWL=-0.597, BAYES_00=-2.599, J_CHICKENPOX_47=0.6, J_CHICKENPOX_74=0.6, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aQqnTzhCrJ+j for <pkix@ietfa.amsl.com>; Wed, 11 Jul 2012 19:52:04 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 1A21821F85EF for <pkix@ietf.org>; Wed, 11 Jul 2012 19:52:04 -0700 (PDT)
Received: from [128.89.253.251] (port=62853) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1Sp9Vz-0000An-1e; Wed, 11 Jul 2012 22:52:27 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com>
Date: Wed, 11 Jul 2012 22:52:26 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
X-Mailer: Apple Mail (2.1278)
Cc: pkix@ietf.org
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 02:52:06 -0000

On Jul 11, 2012, at 10:22 AM, Phillip Hallam-Baker wrote:

> On Tue, Jul 10, 2012 at 2:30 PM, Richard L. Barnes <rbarnes@bbn.com> =
wrote:
>> Areas of agreement trimmed; responses inline.
>>=20
>>>>> General: Tree walking
>>>>> The tree walking algorithm specified in Section 3 seems like a =
really bad idea.  It saves the domain holder from having to deploy =
separate CAA records for every subdomain, but has some tricky =
consequences.  For example, because the algorithm stops at the first CAA =
it finds, authorizations don't flow all the way down the tree, just to =
the first CAA point, where they get replaced.  Likewise, if a domain =
holder doesn't agree with a parent domain's CAAs for his domain, he's =
forced to deploy a null CAA defensively.  Recommend removing the tree =
walking / Extended Issuer Authorization Set.
>>>=20
>>> We went through this on the list. Originally there was no tree
>>> walking, only the leaf node and public delegation point were looked
>>> at. This was changed to being the whole length of the tree because =
it
>>> is only being done at time of issue of a cert. I think this makes =
best
>>> sense.
>>=20
>> Was the possibility of looking only at the leaf node discussed?  It =
seems like if you're requesting a cert for a domain, you should be =
authorized to provision a record for that domain, so walking up the tree =
is really just an optimization.
>=20
>=20
> Today the practice for validation checks is to ONLY check for the
> public delegation point. Subdomains are not a concern for CAs, they
> are assumed to be purely a matter of internal administrative policy.
>=20
> The number of domains where this is not the case is vanishingly small.
> Yes, at MIT there are subdomains for the departments but outside CSAIL
> they are all run by the MIT network staff anyway.
>=20
> Checking the leaf node only would make no sense at all to me, consider
> the cases for leaf.example.com and example.com
>=20
> 1) No CAA record at either - anyone can issue
>=20
> 2) CAA record at example.com for Alice.ca,
>     only Alice can issue for *.example.com
>=20
> 3) CAA record at leaf.example.com for Bob.ca,
>     only Bob can issue for leaf.example,com, anyone can issue for the =
rest
>=20
> 4) CAA record at leaf.example.com for Bob.ca, CAA record at
> example.com for Alice.ca,
>     only Bob can issue for leaf.example,com, anyone can issue for the =
rest
>=20
>=20
> You seem to be arguing that in case 2, anyone could issue for
> leaf.example.com. That seems like nonsense to me.

No, I'm saying that the policy should be default-deny with =
authorizations applying to specific names (not sub-domains). =20

1) No CAA record:=20
   Nobody is authorized to issue

2) CAA at example.com for Alice:=20
   Only Alice can issue for example.com (exactly)
   Nobody is authorized to issue for any other name

3) CAA at leaf.example.com for Bob:=20
   Only Bob can issue for leaf.example.com (exactly)
   Nobody is authorized to issue for any other name

4) CAA at leaf.example.com/Bob, example.com/Alice:
   Only Bob can issue for leaf.example.com
   Only Alice can issue for example.com
   Nobody is authorized to issue for any other name

It seems like what you want is an explicit assertion that flows down (as =
opposed to a global default deny).  That's a different semantic than the =
positive authorization that the "issue" tag creates.  Why not just =
create another =20


>>> The assumption is that a DNS domain superior node has the capability
>>> to enforce as much control as it likes on subordinate nodes. =
Therefore
>>> any delegation of control is a matter of choice and should be =
assumed
>>> is done because the superior node wants to delegate that control.
>>>=20
>>> Since CAA authorizations are additive, this is the only way that
>>> allows the use cases to be met. There is a need to carve out
>>> exceptions when a subdomain is being delegated to another party such
>>> as an outsourced mail provider.
>>=20
>>> Without any form of climbing, the spec is broken as an attacker can
>>> request a certificate for bogus.paypal.com and evade the CAA checks
>>> completely.
>>=20
>> OK, I think I understand this better now.  As I understand the =
scenario, you mean:
>> 1. paypal.com provisions CAA 0 issue ";"
>> 2. Attacker who cannot control bogus.paypal.com asks for a cert
>> 3. CA finds nothing under bogus.paypal.com, but finds ";" CAA under =
paypal.com
>> 4. Because (1) there is a CAA record, and (2) issuing would not match =
a CAA record, the CA MUST NOT issue.
>>=20
>> The crux of this seems to be that provisioning a null issuer (";") =
conveys a different policy than having no CAA record at all.  That was =
not apparent to me from reading the text, so it might be something =
helpful to call out specifically.
>>=20
>> Alternatively, couldn't you just say that in situations where a CA =
requires CAA, it MUST NOT issue if there are no CAA records provisioned =
for the target domain?  It seems like that would be simpler (as a true =
default-deny), and would address your use case without the need for =
tree-walking.
>=20
> Are you seriously suggesting that CAs are going to deploy a spec that
> required every one of their customers to deploy a new record before
> they could issue a cert?

No, I'm saying that "in situations where the CA requires CAA", the =
customer would be required to provision a record.  Which situations =
require CAA would be up to a CA's Certificate Policy.

All this document defines is a standard version of Google's "set a TXT =
record with a validation token" verification protocol for Google Apps.  =
That protocol (1) only looks at the leaf, (2) doesn't require a DNS =
record in all cases, and (3) works.
<http://support.google.com/a/bin/topic.py?hl=3Den&topic=3D9196>



>>>>> General: Public Delegation Points
>>>>> The concept of a Public Delegation Point seems unhelpful here, =
because it is not well-defined.
>>>=20
>>> CAs are already required to manage lists of public delegation points
>>> to ensure that certificates are properly issued. It is a fuzzy =
concept
>>> because of the way DNS has evolved and in particular the way certain
>>> TLDs like .uk are structured.
>>=20
>> OK.  I did not realize this.  I certainly agree it's fuzzy!
>>=20
>> Is there any guidance you could point to on how a CA should determine =
what domains are public delegation points?  What happens if it guesses =
wrong?  If a CA doesn't know anything about public delegation points, is =
it safe to just go all the way to the root?
>=20
> That is all stuff that represents 'policy' which would have to be
> harmonized in CABForum if it is going to be harmonized anywhere.
>=20
> One of the new corner cases is that we now have a real possibility of
> TLDs that are going to not be public delegation points like .google
> and .apple.

This seems like all the more reason to avoid tree walking.


>>>>> Section 5.4. "... civil or criminal sanctions."
>>>>> This is complete speculation, and highly contingent on legal =
matters that don't belong in a technical specification.  Suggested =
cutting this sentence off:
>>>>> "It is thus unlikely that the attack would succeed."
>>>=20
>>> No, knowingly making an untrue statement to obtain a valuable
>>> consideration is fraud under UK, US and pretty much any other legal
>>> system. An audit statement is quite obviously a valuable
>>> consideration.
>>>=20
>>> I don't see that there is any speculation there. I will ask the
>>> CABForum folk for an opinion. We have no shortage of lawyers.
>>=20
>> I'm not trying to bring lawyers to bear on this document, I'm trying =
to keep them out :)
>>=20
>> The text in question simply isn't technically relevant or useful, and =
could be wrong in some places.
>>=20
>> (What does this have to do with audit?)
>=20
> Once we get CAA signed off here, the next stage is to have it adopted
> as a Basic Requirement for validation by CABForum. At which point
> compliance with CAA will become an audit requirement within a couple
> of years.
>=20
> This is an accountability control and so the enforcement is by
> consequences and not purely technical.

If we're seriously going to do legal stuff here, then we need to =
actually have some lawyers review the document.  Has that been done?  =
Otherwise, let's take the legal language out.

We do not have to broach legal topics in this document in order for it =
to be a useful accountability control.  If we define a clear technical =
mechanism, then the CABF or some other group can define how that =
technical mechanism should be used and wrap legal requirements around =
it. =20



>>>>> MINOR:
>>>>>=20
>>>>> Section 2. "CAA records MAY be used by Certificate Evaluators..."
>>>>> This recommendation seems to contradict the sentence immediately =
preceding.  =46rom the perspective of deciding whether a certificate is =
valid, a Certificate Evaluator is the same as a Relying Party, so if RPs =
shouldn't use CAA, then neither should Certificate Evaluators.  (In =
general, the concept of a Certificate Evaluator seems unhelpful and =
confusing; I would suggest just using RP, if anything.)
>>>=20
>>> The circumstances are entirely different.
>>>=20
>>> It is assumed that a client only has direct access to the DNS which
>>> only holds current statements about the DNS and can only make a =
go/no
>>> go decision. I don't think that you are going to find any DNS
>>> information suitable for a go/no go decision.
>>>=20
>>> A certificate evaluator is going to be taking information from a =
wide
>>> variety of sources and make use of archival series. If it has been
>>> sampling the CAA records of a domain on a daily basis for 5 years it
>>> can make decisions that are rather more robust. But even then I =
would
>>> not want to rely on the DNS information alone, I would tie in
>>> information from checking the Web site, IP blacklists and the like.
>>>=20
>>> CAA records are intelligence, but they are not directly actionable
>>> without other data.
>>=20
>> Could you provide an example of a Certificate Evaluator in the real =
world?
>=20
> Comodo CertSentry, Kasperky also have a product. I would expect McAfee
> and Symantec also have ideas for product.
>=20
> Before that we had the EFF certificate observatory, Convergence and
> Perspectives. Though I suspect those will be seen as forerunners of
> the commercial services as open source services don't scale quite the
> same way as open source software as the marginal cost of service is
> negligible rather than zero and those negligible amounts add up.
>=20
> I have a draft out on an open protocol, reference code to follow:
>=20
> http://www.ietf.org/id/draft-hallambaker-omnibroker-00.txt

OK.  Leave it in if you want.  I still don't really find it all that =
helpful; these entities exist already (based on certs and CRLs) without =
a need for standards guidance.


>>>>> Section 2.1. "express written authority"
>>>>> Requiring "written" authority seems like it goes beyond the scope =
of a technical specification.
>>>=20
>>> Written authority means authority expressed in a fixed medium that =
can
>>> be produced on demand. That seems like a necessary requirement if =
the
>>> accountability control is going to mean anything. Written does not
>>> have to be written on paper, emails are written but they do have to =
be
>>> fixed.
>>>=20
>>> I don't think we want to allow someone to claim that they were
>>> authorized to issue for Comodo or Symantec on the basis of a phone
>>> call or a chat session.
>>=20
>> That seems like it's up to the CA!  I don't see much reason why an =
XMPP message should have less authority than an email -- they're both =
just bits.
>=20
> The point is that you have to save it.
>=20
> If you have a saved jabber log, well it might count. But since jabber
> is a conversation, well I don't think I would rely on it for authority
> to issue on behalf of Symantec.
>=20
>> This is a policy/legal-level requirement, not a technical one.
>=20
> As is pretty much the whole subject matter of PKI.

Like I said above, if this document is going to specify legal =
requirements, then bring in the lawyers.  (Cf. RFC 3647)  Otherwise, =
just leave it out, and leave the lawyering to the attorneys at the CAs / =
CABF. =20


>>>>> Section 4.2. "This form of issue restriction..."
>>>>> It would be helpful to explain this a little more fully.  The =
major point of a "null CAA" record seems to (1) stop the tree-climbing =
in the CA processing, and (2) let CAs know that the domain owner =
understands CAA.  If the tree-climbing is removed (as suggested above), =
then is there really value in this beyond having no CAA at all?  (If =
not, then just make the "[domain]" above into "domain".)
>>>=20
>>> We have a very good reason for requiring climbing.
>>=20
>> As noted above, it would be helpful to explain that the reason is =
(2), i.e., that the policy is different if there is a CAA vs. if there =
isn't, even if the CAA is empty.  So showing that you understand CAA =
activates the default-deny policy.
>>=20
>> Also as above, it would be simpler if this mechanism could be true =
default-deny.
>=20
> And a non-starter for deployment.

See the Google example above.  They require every single one of their =
Google Apps customers to deploy a domain name or a special web page.  =
This has not killed their deployment.

This document also doesn't say that every CA in the world has to require =
CAA for every transaction.  It says "If you're using CAA for =
authorization, here's where you look and what the octets mean."  CA =
policy says when you use CAA for authorization.


>>>>> Section 3. Bullets
>>>>> It would be helpful to describe the process for assembling the =
Extended Issuer Authorization Set.  Namely, something like the =
following:
>>>>> 1. Check for CAA records under the target domain name.
>>>>> 2. If they exist, then they are the EIAS.
>>>>> 3. Otherwise, remove a label from the name
>>>>> 4. If the name is now empty (the root), then the EIAS is empty
>>>>> 5. Otherwise go to step (1) with the new domain name
>>>>>=20
>>>>> Section 5. "Observance of CAA records by issuers is subject to =
accountability controls."
>>>>> This is obviously not true as written;even after this RFC is =
published, not every CA will have controls enforced on it.  Suggested =
text:
>>>>> "An issuer's practices with regard to CAA records can be made =
subject to accountability  controls."
>>>=20
>>> I think it is a MAY.
>>>=20
>>> The criteria here will come from CABForum but I don't want to tie =
this
>>> draft to one particular body as there may be others.
>>=20
>> Hence the "can be", as in "Someone can do this if they want to".  =
Like CABF.
>=20
> I think that counts as normative language.

I don't see "CAN BE" in RFC 2119.  How can the expression of an =
existential possibility be normative?  If I say, "Cookies can be =
delicious, but they can also be too chewy", how do you write a =
compliance test for that?




From carl@redhoundsoftware.com  Thu Jul 12 05:30:28 2012
Return-Path: <carl@redhoundsoftware.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E619321F87AE for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 05:30:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level: 
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5K9hjx5xXXfi for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 05:30:28 -0700 (PDT)
Received: from mail-yx0-f172.google.com (mail-yx0-f172.google.com [209.85.213.172]) by ietfa.amsl.com (Postfix) with ESMTP id 043D621F87B8 for <pkix@ietf.org>; Thu, 12 Jul 2012 05:30:27 -0700 (PDT)
Received: by yenq13 with SMTP id q13so2529836yen.31 for <pkix@ietf.org>; Thu, 12 Jul 2012 05:31:01 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :in-reply-to:mime-version:content-type:content-transfer-encoding :x-gm-message-state; bh=hiNlp1zi84KJ3H4L6IWqyiCIQS+DlT5AdynGmBdookk=; b=esw7kFRuxFsq3oSA4WfOIuzHwnsDAqJCk7Jpst/IdueHjB4tpHyDZogcw6kLYXHPNn 3ZDi9f6QWKrt3J9yZJWU5F9IDwUjoT9OihC0W+cyvzjqgGmlcye36RS6Oi15vyUJwUcJ fCwhg4jT7xN/gJODZ+DdgBdtcS5neNmkibVZRwvtgnBVE9qu/GobWPf0hftrJpA3QM35 Sbvqq6JzaoosEKR69oSLRJu/LFMt3M6YvZzpJGzTnA6Oftam/W8xqj5mTv9RDZ6qmV9x 7MjwauGGK10t8DOJd5+3L6HFOrP3uKznJBLuiAkEyjkQrhLcBJycjhBFiKA7HZifLDsc CFmg==
Received: by 10.236.176.5 with SMTP id a5mr60841432yhm.67.1342096260872; Thu, 12 Jul 2012 05:31:00 -0700 (PDT)
Received: from [192.168.1.4] (pool-173-79-171-131.washdc.fios.verizon.net. [173.79.171.131]) by mx.google.com with ESMTPS id z19sm4216102anh.22.2012.07.12.05.30.58 (version=SSLv3 cipher=OTHER); Thu, 12 Jul 2012 05:31:00 -0700 (PDT)
User-Agent: Microsoft-MacOutlook/14.2.2.120421
Date: Thu, 12 Jul 2012 08:30:58 -0400
From: Carl Wallace <carl@redhoundsoftware.com>
To: <mrex@sap.com>, Peter Yee <peter@akayla.com>
Message-ID: <CC2439E6.1C9F5%carl@redhoundsoftware.com>
Thread-Topic: [pkix] new version of 5280 clarifications
In-Reply-To: <20120711233128.C682F1A0C1@ld9781.wdf.sap.corp>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
X-Gm-Message-State: ALoCoQmMnKzZZCqO2iN73NmVJ48hSSDagG2PWyJMJLKyjfD7gOkizI/RVqHO1KcjBqdxN31TeKxh
Cc: pkix@ietf.org
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 12:30:29 -0000

On 7/11/12 7:31 PM, "Martin Rex" <mrex@sap.com> wrote:
<snip>

>  |
>  |  and does not specify processing
>  |  rules for additional information included in such certificates.
>
>and neither for any other Trust Anchor Format there might be.
>
>
>  |  However, [RFC5937] provides an example of how additional information
>  |  included in self-signed certificates may be used to initialize the
>  |  path validation inputs.  Implementations that use self-signed
>  |  certificates to specify trust anchor information are free to make
>  |  use of any additional information that is included in the
>  |  certificates, or to ignore such information.
>
>RFC5937 section 2 IMO declares constraints in *ALL 3* TAFs defined by
>rfc5914
>to be equivalent.  It looks weird for this new text to reference rfc5937,
>but single out the "additional information" of only self-signed
>certificates
>to be "freely ignored"--shouldn't this apply to trust anchor constraints
>for all 3 rfc5914 TAFs in the same fashion?

Perhaps replacing the two sentences in your snip with the following would
address your concern:

However, [RFC5914] defines several formats for representing trust anchor
information, including self-signed certificates, and [RFC5937] provides an
example of how information included in a trust anchor may be used to
initialize the path validation inputs. Implementations are free to make
use of any additional information that is included in a trust anchor, or
to ignore such information.




From turners@ieca.com  Thu Jul 12 07:01:28 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6FB1521F8842 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 07:01:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.211
X-Spam-Level: 
X-Spam-Status: No, score=-102.211 tagged_above=-999 required=5 tests=[AWL=0.054, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QJesv8G8FGI3 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 07:01:27 -0700 (PDT)
Received: from gateway04.websitewelcome.com (gateway04.websitewelcome.com [67.18.44.19]) by ietfa.amsl.com (Postfix) with ESMTP id ADEA121F87BC for <pkix@ietf.org>; Thu, 12 Jul 2012 07:01:27 -0700 (PDT)
Received: by gateway04.websitewelcome.com (Postfix, from userid 5007) id 6C600B14E76A5; Thu, 12 Jul 2012 09:02:01 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway04.websitewelcome.com (Postfix) with ESMTP id 60A16B14E767F for <pkix@ietf.org>; Thu, 12 Jul 2012 09:02:01 -0500 (CDT)
Received: from [96.231.119.66] (port=34970 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1SpJxw-0000jZ-B3; Thu, 12 Jul 2012 09:02:00 -0500
Message-ID: <4FFED8D7.5070001@ieca.com>
Date: Thu, 12 Jul 2012 10:01:59 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: Phillip Hallam-Baker <hallam@gmail.com>
References: <4FFB5C66.9090402@isis.poly.edu> <4FFB5F24.8080401@ieca.com> <4FFB6F24.7020602@isis.poly.edu> <4FFBB671.3020907@seantek.com> <4FFC145E.6080308@ieca.com> <CAMm+Lwioe46FAHd6i4Y+2orCvnDnxitgaFoy956fQm=yYiaWJA@mail.gmail.com>
In-Reply-To: <CAMm+Lwioe46FAHd6i4Y+2orCvnDnxitgaFoy956fQm=yYiaWJA@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (thunderfish.local) [96.231.119.66]:34970
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 1
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Cc: pkix@ietf.org, Sean Leonard <dev+ietf@seantek.com>
Subject: Re: [pkix] String Representation of SHA algorithms
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 14:01:28 -0000

I did ask about their names: HS256, HS384 ... the response was that 
these were to ensure a compact representation.  Note they also allow for 
use of the XMLDSig identifiers.

spt

On 7/11/12 9:10 PM, Phillip Hallam-Baker wrote:
> Should the JSON Signature folk be told to use the same registry?
>
> (Says someone who just wrote code with their different identifiers this morning)
>
> On Tue, Jul 10, 2012 at 7:39 AM, Sean Turner <turners@ieca.com> wrote:
>> On 7/10/12 12:58 AM, Sean Leonard wrote:
>>>
>>> Overall, the way that the hash algorithm is identified probably depends
>>> on the interplay between what the protocol supports and what the
>>> original authors intended.
>>>
>>> NIST is very consistent in calling them "SHA-1", "SHA-256", "SHA-384",
>>> and "SHA-512" in FIPS 180-4 (as Sean pointed out).
>>>
>>> In contrast, the Whirlpool hash algorithm is called "Whirlpool" by its
>>> creators, Vincent Rijmen and Paulo S.L.M. Barreto. Actually they call it
>>> <font color="#003377">W</font><font color="#003377"
>>> size="-1">HIRLPOOL</font> in the HTML, but in the metadata and in their
>>> publications, it's pretty clearly Whirlpool and not WHIRLPOOL.
>>>
>>> Now that "SHA-512/256" is "official", one wonders what to do with the
>>> "/". My preference is to go with however the algorithm creators
>>> themselves call it, unless the protocol doesn't support it.
>>
>>
>> I've been asking for an applicability statement of some kind on SHA-512/256
>> because I don't think they're we ought to really promote these as general
>> purpose hashes.
>>
>> spt
>>
>>
>>> Just my 2¢,
>>>
>>> Sean (L)
>>>
>>> On 7/9/2012 4:54 PM, Massimiliano Pala wrote:
>>>>
>>>> Hi Sean,
>>>>
>>>> thanks.. that's what I expected - it seems that there is no real
>>>> "authoritative" source of information about
>>>> this issue - I see it could be useful in different scenarios (e.g.,
>>>> Sean Leonard's work on cert identifiers
>>>> or any environment where OIDs (and their text representations) are not
>>>> particularly desirable).
>>>>
>>>> Do you (list) think there is any utility for a small I-D (also
>>>> informational) on the topic ? It seems
>>>> a very small item, but it is potentially very useful (e.g., for URLs..).
>>>>
>>>> Cheers,
>>>> Max
>>>>
>>>>
>>>> On 07/09/2012 06:45 PM, Sean Turner wrote:
>>>>>
>>>>> There's an IANA registry for hash function textual names:
>>>>>
>>>>>
>>>>> https://www.iana.org/assignments/hash-function-text-names/hash-function-text-names.xml
>>>>>
>>>>>
>>>>> But, I've seen all three.  FIPS 180 uses SHA-*.
>>>>>
>>>>> spt
>>>>
>>>>
>>>
>>>
>>>
>>> _______________________________________________
>>> pkix mailing list
>>> pkix@ietf.org
>>> https://www.ietf.org/mailman/listinfo/pkix
>>>
>>
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>
>
>


From kent@bbn.com  Thu Jul 12 08:03:42 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 055F321F86F1 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 08:03:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.599
X-Spam-Level: 
X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rbkMBDEtXCSE for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 08:03:21 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id 5DBC521F8622 for <pkix@ietf.org>; Thu, 12 Jul 2012 08:03:21 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:59953 helo=comsec.home) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1SpKvn-0007ty-47; Thu, 12 Jul 2012 11:03:51 -0400
Message-ID: <4FFEE756.6030503@bbn.com>
Date: Thu, 12 Jul 2012 11:03:50 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: mrex@sap.com
References: <20120711233128.C682F1A0C1@ld9781.wdf.sap.corp>
In-Reply-To: <20120711233128.C682F1A0C1@ld9781.wdf.sap.corp>
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Cc: pkix@ietf.org
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 15:03:42 -0000

Martin,

I agree that the cited text gives the wrong impression.

I like Carl's suggested replacement text.

What do you, and others, think?

Steve

From hallam@gmail.com  Thu Jul 12 09:11:58 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B8C7F11E8073 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 09:11:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.259
X-Spam-Level: 
X-Spam-Status: No, score=-4.259 tagged_above=-999 required=5 tests=[AWL=-1.260, BAYES_00=-2.599, J_CHICKENPOX_47=0.6, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g17zvqUqW81d for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 09:11:57 -0700 (PDT)
Received: from mail-vb0-f44.google.com (mail-vb0-f44.google.com [209.85.212.44]) by ietfa.amsl.com (Postfix) with ESMTP id 7203B11E80B7 for <pkix@ietf.org>; Thu, 12 Jul 2012 09:11:57 -0700 (PDT)
Received: by vbbez10 with SMTP id ez10so1768001vbb.31 for <pkix@ietf.org>; Thu, 12 Jul 2012 09:12:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=O6hbm2c4Iwd7tliTrcF9Wi45K8oUf8bveNBjKZYfWfQ=; b=OlHsHfEXiGeIXM0G/kkon4jeIVABOalMKbu2+ionRDIcLB/EPyNBUKngs4KbyRROph ssC7T76z9fMEc6MA1FTLXJ/bhccy8PtkHdaAPMICml4WDda1nbHqXfAbqPiDeQA+Jk7I Ml7fcYez69nK82I+gChTR7PeIBjkdVC9gjr9dKFCxtQeCfcxFt+hitwuHUewCFyG4xIA 8GNcS8FdUGinXOb1HHD0dS00CfLMo9HdQHrb3hv+GYhoUqe8jWCfMZN0VTF/gX0M+MVu 3r4Yb3ct9Y7V8pJQyHoVVE23mp7Eg9/rOxSHDUbEZ4BUwNXjL3YpF8GGSqPerAC7uFfv 1Ipg==
MIME-Version: 1.0
Received: by 10.52.26.81 with SMTP id j17mr21887933vdg.94.1342109550836; Thu, 12 Jul 2012 09:12:30 -0700 (PDT)
Received: by 10.58.161.139 with HTTP; Thu, 12 Jul 2012 09:12:30 -0700 (PDT)
In-Reply-To: <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com>
Date: Thu, 12 Jul 2012 12:12:30 -0400
Message-ID: <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: pkix@ietf.org
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 16:11:58 -0000

On Wed, Jul 11, 2012 at 10:52 PM, Richard L. Barnes <rbarnes@bbn.com> wrote=
:
> On Jul 11, 2012, at 10:22 AM, Phillip Hallam-Baker wrote:
>> Today the practice for validation checks is to ONLY check for the
>> public delegation point. Subdomains are not a concern for CAs, they
>> are assumed to be purely a matter of internal administrative policy.
>>
>> The number of domains where this is not the case is vanishingly small.
>> Yes, at MIT there are subdomains for the departments but outside CSAIL
>> they are all run by the MIT network staff anyway.
>>
>> Checking the leaf node only would make no sense at all to me, consider
>> the cases for leaf.example.com and example.com
>>
>> 1) No CAA record at either - anyone can issue
>>
>> 2) CAA record at example.com for Alice.ca,
>>     only Alice can issue for *.example.com
>>
>> 3) CAA record at leaf.example.com for Bob.ca,
>>     only Bob can issue for leaf.example,com, anyone can issue for the re=
st
>>
>> 4) CAA record at leaf.example.com for Bob.ca, CAA record at
>> example.com for Alice.ca,
>>     only Bob can issue for leaf.example,com, anyone can issue for the re=
st
>>
>>
>> You seem to be arguing that in case 2, anyone could issue for
>> leaf.example.com. That seems like nonsense to me.
>
> No, I'm saying that the policy should be default-deny with authorizations=
 applying to specific names (not sub-domains).
>
> 1) No CAA record:
>    Nobody is authorized to issue

Non starter, not going to happen for reasons that are obvious. No CA
is ever going to process CAA records under that restriction.

I suggest that before you continue with this line you need to find a
CA with an embedded trust anchor (aka public root) that would be
willing to deploy if your proposal was approved. I think you will find
the number is zero.

I am all for default deny security, it is the name of my private
consulting company for a start.


> All this document defines is a standard version of Google's "set a TXT re=
cord with a validation token" verification protocol for Google Apps.  That =
protocol (1) only looks at the leaf, (2) doesn't require a DNS record in al=
l cases, and (3) works.
> <http://support.google.com/a/bin/topic.py?hl=3Den&topic=3D9196>

That is a different situation. It is easy to set security criteria
when deploying a completely new scheme.  Adding requirements to a
deployed scheme is much harder.

>> This is an accountability control and so the enforcement is by
>> consequences and not purely technical.
>
> If we're seriously going to do legal stuff here, then we need to actually=
 have some lawyers review the document.  Has that been done?  Otherwise, le=
t's take the legal language out.
>
> We do not have to broach legal topics in this document in order for it to=
 be a useful accountability control.  If we define a clear technical mechan=
ism, then the CABF or some other group can define how that technical mechan=
ism should be used and wrap legal requirements around it.

I will remove the mention of sanctions and reword to something like
"intentionally make a false representation to obtain an audit" that
work for you?


>> If you have a saved jabber log, well it might count. But since jabber
>> is a conversation, well I don't think I would rely on it for authority
>> to issue on behalf of Symantec.
>>
>>> This is a policy/legal-level requirement, not a technical one.
>>
>> As is pretty much the whole subject matter of PKI.
>
> Like I said above, if this document is going to specify legal requirement=
s, then bring in the lawyers.  (Cf. RFC 3647)  Otherwise, just leave it out=
, and leave the lawyering to the attorneys at the CAs / CABF.

I think what you are really asking here is for the avoidance of
lawyers to rewrite the statement in a form that the lawyers will no
longer understand and will lead to ambiguity rather than use a term of
art.

When lawyers do the same we go nuts and with good cause.

> This document also doesn't say that every CA in the world has to require =
CAA for every transaction.  It says "If you're using CAA for authorization,=
 here's where you look and what the octets mean."  CA policy says when you =
use CAA for authorization.

No but the statement that the CABForum has asked me to draft does
precisely that. But they are not going to accept this specification if
it is going to make issue of certs dependent on deployment of CAA.

I think that you really need to consider whether you should be doing
this GenArt review. This seems to me to be a wrecking amendment.

>> I think that counts as normative language.
>
> I don't see "CAN BE" in RFC 2119.  How can the expression of an existenti=
al possibility be normative?  If I say, "Cookies can be delicious, but they=
 can also be too chewy", how do you write a compliance test for that?

OK it is a statement of fact so it does not need to be normative. It
does not define a choice that the CA or any party can make.


--=20
Website: http://hallambaker.com/

From paul.hoffman@vpnc.org  Thu Jul 12 09:45:49 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2FF3E11E8098 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 09:45:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.575
X-Spam-Level: 
X-Spam-Status: No, score=-102.575 tagged_above=-999 required=5 tests=[AWL=0.024, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lOxXSdltGgNZ for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 09:45:48 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id C8B1911E808F for <pkix@ietf.org>; Thu, 12 Jul 2012 09:45:45 -0700 (PDT)
Received: from [10.20.30.102] (50-1-50-97.dsl.dynamic.fusionbroadband.com [50.1.50.97]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6CGJQKp080632 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for <pkix@ietf.org>; Thu, 12 Jul 2012 09:19:27 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1278)
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com>
Date: Thu, 12 Jul 2012 09:46:16 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <435D0E11-1EFB-4E28-8C9F-5A8FDB6A38BA@vpnc.org>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com>
To: IETF PKIX <pkix@ietf.org>
X-Mailer: Apple Mail (2.1278)
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 16:45:49 -0000

On Jul 12, 2012, at 9:12 AM, Phillip Hallam-Baker wrote:

> On Wed, Jul 11, 2012 at 10:52 PM, Richard L. Barnes <rbarnes@bbn.com> =
wrote:
>> No, I'm saying that the policy should be default-deny with =
authorizations applying to specific names (not sub-domains).
>>=20
>> 1) No CAA record:
>>   Nobody is authorized to issue
>=20
> Non starter, not going to happen for reasons that are obvious. No CA
> is ever going to process CAA records under that restriction.

+1 to Phill here. I would have never supported this document if that was =
a design requirement. (The rest of Richard's more recent suggestion =
seems predicated on this, so I don't think I need to rebut it as Phill =
did.)

--Paul Hoffman


From david.cooper@nist.gov  Thu Jul 12 11:16:08 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0B55511E80D3 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 11:16:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KgCEPIOJMqR4 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 11:16:07 -0700 (PDT)
Received: from wsget1.nist.gov (wsget1.nist.gov [129.6.13.150]) by ietfa.amsl.com (Postfix) with ESMTP id 31D0D11E80C0 for <pkix@ietf.org>; Thu, 12 Jul 2012 11:16:07 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget1.nist.gov (129.6.13.150) with Microsoft SMTP Server (TLS) id 14.1.355.2; Thu, 12 Jul 2012 14:16:33 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Thu, 12 Jul 2012 14:13:03 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6CIGbgS007299; Thu, 12 Jul 2012 14:16:38 -0400
Message-ID: <4FFF1485.30507@nist.gov>
Date: Thu, 12 Jul 2012 14:16:37 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:13.0) Gecko/20120609 Thunderbird/13.0
MIME-Version: 1.0
To: Carl Wallace <carl@redhoundsoftware.com>
References: <CC2439E6.1C9F5%carl@redhoundsoftware.com>
In-Reply-To: <CC2439E6.1C9F5%carl@redhoundsoftware.com>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 18:16:08 -0000

Carl,

This text isn't quite correct since it refers to "information included 
in a trust anchor."  Note that the abstract for RFC 5914 begins:

    This document describes a structure for representing trust anchor
    information.  A trust anchor is an authoritative entity represented
    by a public key and associated data.

So this text is confusing a trust anchor with trust anchor information.

Another problem is that the proposed changes are to text that has been 
taken out of context.  The entire paragraph (with proposed 
modifications) is:

|  Where a CA distributes self-signed certificates to specify trust
|  anchor information, certificate extensions can be used to specify
|  recommended inputs to path validation.  For example, a policy
|  constraints extension could be included in the self-signed
|  certificate to indicate that paths beginning with this trust anchor
|  should be trusted only for the specified policies.  Similarly, a name
|  constraints extension could be included to indicate that paths
|  beginning with this trust anchor should be trusted only for the
|  specified name spaces.  The path validation algorithm presented
|  in Section 6.1 does not assume that trust anchor information is
|  provided in self-signed certificates and does not specify processing
|  rules for additional information included in such certificates.
|  However, [RFC5937] provides an example of how additional information
|  included in self-signed certificates may be used to initialize the
|  path validation inputs.  Implementations that use self-signed
|  certificates to specify trust anchor information are free to make
|  use of any additional information that is included in the
|  certificates, or to ignore such information.


So, adding a reference to RFC 5914's definition of several formats for 
representing trust anchor information into a paragraph that is all about 
self-signed certificates is rather awkward.

Dave

On 07/12/2012 08:30 AM, Carl Wallace wrote:
> Perhaps replacing the two sentences in your snip with the following would
> address your concern:
>
> However, [RFC5914] defines several formats for representing trust anchor
> information, including self-signed certificates, and [RFC5937] provides an
> example of how information included in a trust anchor may be used to
> initialize the path validation inputs. Implementations are free to make
> use of any additional information that is included in a trust anchor, or
> to ignore such information.

From carl@redhoundsoftware.com  Thu Jul 12 11:35:28 2012
Return-Path: <carl@redhoundsoftware.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 192EE11E80E9 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 11:35:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level: 
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EUZUzQhrU-kG for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 11:35:27 -0700 (PDT)
Received: from mail-gh0-f172.google.com (mail-gh0-f172.google.com [209.85.160.172]) by ietfa.amsl.com (Postfix) with ESMTP id 237EE11E80E8 for <pkix@ietf.org>; Thu, 12 Jul 2012 11:35:27 -0700 (PDT)
Received: by ghbg16 with SMTP id g16so2994562ghb.31 for <pkix@ietf.org>; Thu, 12 Jul 2012 11:36:01 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :in-reply-to:mime-version:content-type:content-transfer-encoding :x-gm-message-state; bh=CzNrFx88TKWfG8NMYev+fmaRoBkPg+NxwRCGcHKyWbk=; b=FP4HWAfyonLzMigFMcRgmZkk1zpaXcxCbkBQnHP2extSGxpfssDKCYjo8M2DYd9PT+ GXYWviCJkUQ2qRAdYaHiA80Ri1VJrMMsqsrot+EF/ONVx8arAs8lEuW6EBlmlvaKyU26 ypDfkTJMlDq88Mjjkac7sURx9rfoHC2SA4efk921uv7CCrKtKRZDOw7F4rOkUfDzd+k+ IFuFl9Dv8Ff5foGBHzFMptzgpuMKG5vQHdykVOgDhJZIz/4KqtiC6e+pFa/o+LqCuSGX li9WfLURZire0eV78AcOEY5oWwb0BB+kuNc+wzgKW7CL3BCyjrOKarFRIdvCzu1i7kdZ RDmA==
Received: by 10.101.165.37 with SMTP id s37mr18558289ano.71.1342118160929; Thu, 12 Jul 2012 11:36:00 -0700 (PDT)
Received: from [192.168.1.4] (pool-173-79-171-131.washdc.fios.verizon.net. [173.79.171.131]) by mx.google.com with ESMTPS id b8sm5198830anm.4.2012.07.12.11.35.58 (version=SSLv3 cipher=OTHER); Thu, 12 Jul 2012 11:36:00 -0700 (PDT)
User-Agent: Microsoft-MacOutlook/14.2.2.120421
Date: Thu, 12 Jul 2012 14:35:54 -0400
From: Carl Wallace <carl@redhoundsoftware.com>
To: "David A. Cooper" <david.cooper@nist.gov>
Message-ID: <CC248EF8.1CAD5%carl@redhoundsoftware.com>
Thread-Topic: [pkix] new version of 5280 clarifications
In-Reply-To: <4FFF1485.30507@nist.gov>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
X-Gm-Message-State: ALoCoQn1iaQlmDqZ4dDvJRgVbZMyYYnNo8cQ06Hsm5Sr2cw9Sjl8wHVIz67hmp8xejovMEunpaOo
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 18:35:28 -0000

On 7/12/12 2:16 PM, "David A. Cooper" <david.cooper@nist.gov> wrote:

>Carl,
>
>This text isn't quite correct since it refers to "information included
>in a trust anchor."  Note that the abstract for RFC 5914 begins:
>
>    This document describes a structure for representing trust anchor
>    information.  A trust anchor is an authoritative entity represented
>    by a public key and associated data.
>
>So this text is confusing a trust anchor with trust anchor information.

Minor edit below to address this.

>
>Another problem is that the proposed changes are to text that has been
>taken out of context.  The entire paragraph (with proposed
>modifications) is:
>
>|  Where a CA distributes self-signed certificates to specify trust
>|  anchor information, certificate extensions can be used to specify
>|  recommended inputs to path validation.  For example, a policy
>|  constraints extension could be included in the self-signed
>|  certificate to indicate that paths beginning with this trust anchor
>|  should be trusted only for the specified policies.  Similarly, a name
>|  constraints extension could be included to indicate that paths
>|  beginning with this trust anchor should be trusted only for the
>|  specified name spaces.  The path validation algorithm presented
>|  in Section 6.1 does not assume that trust anchor information is
>|  provided in self-signed certificates and does not specify processing
>|  rules for additional information included in such certificates.
>|  However, [RFC5937] provides an example of how additional information
>|  included in self-signed certificates may be used to initialize the
>|  path validation inputs.  Implementations that use self-signed
>|  certificates to specify trust anchor information are free to make
>|  use of any additional information that is included in the
>|  certificates, or to ignore such information.
>
>
>So, adding a reference to RFC 5914's definition of several formats for
>representing trust anchor information into a paragraph that is all about
>self-signed certificates is rather awkward.

The sentence before the two sentences for which replacement text was
provided states that trust anchor information is not necessarily provided
in a self-signed certificate.  Noting that RFC 5914 defines several
formats seems fair here.  New candidate text:

"However, [RFC5914] defines several formats for representing trust anchor
information, including self-signed certificates, and [RFC5937] provides an
example of how such information may be used to initialize the path
validation inputs. Implementations are free to make use of any additional
information that is included in a trust anchor representation, or to
ignore such information."



>
>Dave
>
>On 07/12/2012 08:30 AM, Carl Wallace wrote:
>> Perhaps replacing the two sentences in your snip with the following
>>would
>> address your concern:
>>
>> However, [RFC5914] defines several formats for representing trust anchor
>> information, including self-signed certificates, and [RFC5937] provides
>>an
>> example of how information included in a trust anchor may be used to
>> initialize the path validation inputs. Implementations are free to make
>> use of any additional information that is included in a trust anchor, or
>> to ignore such information.



From rbarnes@bbn.com  Thu Jul 12 11:56:09 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03E5C11E80F9 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 11:56:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.293
X-Spam-Level: 
X-Spam-Status: No, score=-106.293 tagged_above=-999 required=5 tests=[AWL=-0.294, BAYES_00=-2.599, J_CHICKENPOX_47=0.6, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XBhn6QfLux4i for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 11:56:07 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id B4CFA21F85A7 for <pkix@ietf.org>; Thu, 12 Jul 2012 11:56:07 -0700 (PDT)
Received: from ros-dhcp192-1-51-20.bbn.com ([192.1.51.20]:49695) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SpOZ4-000Cyf-6u; Thu, 12 Jul 2012 14:56:38 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: Richard L. Barnes <rbarnes@bbn.com>
In-Reply-To: <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com>
Date: Thu, 12 Jul 2012 14:56:37 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
X-Mailer: Apple Mail (2.1278)
Cc: pkix@ietf.org
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 18:56:09 -0000

On Jul 12, 2012, at 12:12 PM, Phillip Hallam-Baker wrote:

> On Wed, Jul 11, 2012 at 10:52 PM, Richard L. Barnes <rbarnes@bbn.com> =
wrote:
>> On Jul 11, 2012, at 10:22 AM, Phillip Hallam-Baker wrote:
>>> Today the practice for validation checks is to ONLY check for the
>>> public delegation point. Subdomains are not a concern for CAs, they
>>> are assumed to be purely a matter of internal administrative policy.
>>>=20
>>> The number of domains where this is not the case is vanishingly =
small.
>>> Yes, at MIT there are subdomains for the departments but outside =
CSAIL
>>> they are all run by the MIT network staff anyway.
>>>=20
>>> Checking the leaf node only would make no sense at all to me, =
consider
>>> the cases for leaf.example.com and example.com
>>>=20
>>> 1) No CAA record at either - anyone can issue
>>>=20
>>> 2) CAA record at example.com for Alice.ca,
>>>    only Alice can issue for *.example.com
>>>=20
>>> 3) CAA record at leaf.example.com for Bob.ca,
>>>    only Bob can issue for leaf.example,com, anyone can issue for the =
rest
>>>=20
>>> 4) CAA record at leaf.example.com for Bob.ca, CAA record at
>>> example.com for Alice.ca,
>>>    only Bob can issue for leaf.example,com, anyone can issue for the =
rest
>>>=20
>>>=20
>>> You seem to be arguing that in case 2, anyone could issue for
>>> leaf.example.com. That seems like nonsense to me.
>>=20
>> No, I'm saying that the policy should be default-deny with =
authorizations applying to specific names (not sub-domains).
>>=20
>> 1) No CAA record:
>>   Nobody is authorized to issue
>=20
> Non starter, not going to happen for reasons that are obvious. No CA
> is ever going to process CAA records under that restriction.
>=20
> I suggest that before you continue with this line you need to find a
> CA with an embedded trust anchor (aka public root) that would be
> willing to deploy if your proposal was approved. I think you will find
> the number is zero.
>=20
> I am all for default deny security, it is the name of my private
> consulting company for a start.

We must be talking past each other here.  I don't think what I'm =
proposing here is radical, just that CAA actually be a =
default-deny/positive-authorization system in terms of its internal =
semantics.  It's still a CA's choice when to apply these semantics, and =
when to apply other authorization mechanisms. =20

Indeed, several other IETF technologies follow the design pattern I'm =
proposing.  RFC 5280 doesn't tell a Relying Party when to require a =
certificate, only how to interpret a certificate if once he gets one.  =
TLS doesn't tell a server when it needs to require a client cert, just =
what to do if one does.  The CAA specification shouldn't specify *when* =
a CA needs to require a CAA record be present, only how to find and =
interpret a CAA record if one is required.

So in the above, "Nobody is authorized to issue" really means "Nobody is =
authorized to issue *by* *CAA*".  That is, it doesn't mean "A CA MUST =
NOT issue", it says "A CA MUST NOT issue if it requires a CAA =
authorization."  If the CA's CP allows it to use some other form of =
authorization, then it can use that.


>> All this document defines is a standard version of Google's "set a =
TXT record with a validation token" verification protocol for Google =
Apps.  That protocol (1) only looks at the leaf, (2) doesn't require a =
DNS record in all cases, and (3) works.
>> <http://support.google.com/a/bin/topic.py?hl=3Den&topic=3D9196>
>=20
> That is a different situation. It is easy to set security criteria
> when deploying a completely new scheme.  Adding requirements to a
> deployed scheme is much harder.

Not in this case: The presence or absence of the new mechanism is clear =
to the CA.  If the new authorization is absent (no CAA), then the CA can =
fall back to whatever it did before -- or it can choose not to issue. =20=



>>> This is an accountability control and so the enforcement is by
>>> consequences and not purely technical.
>>=20
>> If we're seriously going to do legal stuff here, then we need to =
actually have some lawyers review the document.  Has that been done?  =
Otherwise, let's take the legal language out.
>>=20
>> We do not have to broach legal topics in this document in order for =
it to be a useful accountability control.  If we define a clear =
technical mechanism, then the CABF or some other group can define how =
that technical mechanism should be used and wrap legal requirements =
around it.
>=20
> I will remove the mention of sanctions and reword to something like
> "intentionally make a false representation to obtain an audit" that
> work for you?

Removing the mention of sanctions sound good, but I'm not sure revision =
you're proposing otherwise.  Making statements about "intention" and =
"false representation" makes me generally uneasy, again because terms =
that lawyers know much better than us.

If I were to suggest something, I think it would still be my original =
suggestion. =20
OLD: "It is thus unlikely that the attack would succeed and the attempt =
might lay the perpetrator open to civil or criminal sanctions."
NEW: "It is thus unlikely that the attack would succeed."  =20

We've already called this usage of the "critical" flag an "attack", =
"abuse", and "deception".  So I think it's clear enough that it is an =
undesirable action, regardless of any specific legal consequences.


>>> If you have a saved jabber log, well it might count. But since =
jabber
>>> is a conversation, well I don't think I would rely on it for =
authority
>>> to issue on behalf of Symantec.
>>>=20
>>>> This is a policy/legal-level requirement, not a technical one.
>>>=20
>>> As is pretty much the whole subject matter of PKI.
>>=20
>> Like I said above, if this document is going to specify legal =
requirements, then bring in the lawyers.  (Cf. RFC 3647)  Otherwise, =
just leave it out, and leave the lawyering to the attorneys at the CAs / =
CABF.
>=20
> I think what you are really asking here is for the avoidance of
> lawyers to rewrite the statement in a form that the lawyers will no
> longer understand and will lead to ambiguity rather than use a term of
> art.
>=20
> When lawyers do the same we go nuts and with good cause.

Let me be a little more concrete.  I would make the following change to =
the text:
OLD: "party acting under the express written authority of the holder"
NEW: "party acting under the authority of the holder"

Lawyers can then decide how that authority is delegated, whether IM, =
email, blood oath, etc.  They're good at that sort of thing.


>> This document also doesn't say that every CA in the world has to =
require CAA for every transaction.  It says "If you're using CAA for =
authorization, here's where you look and what the octets mean."  CA =
policy says when you use CAA for authorization.
>=20
> No but the statement that the CABForum has asked me to draft does
> precisely that. But they are not going to accept this specification if
> it is going to make issue of certs dependent on deployment of CAA.
>=20
> I think that you really need to consider whether you should be doing
> this GenArt review. This seems to me to be a wrecking amendment.

There's nothing special about a Gen-ART review.
"
Gen-ART review comments should be treated as any other IETF last Call =
comment. The comments become blocking only if the IESG review process =
makes them so. That is, one of the Area Directors, agrees with the =
comments and incorporates them in their IESG ballot as"DISCUSS" =
comments. Gen-ART does not have a formal role in the standards approval =
process; they are simply providing input to the General AD.
"
<http://www.ietf.org/iesg/directorate/gen-art.html>







From david.cooper@nist.gov  Thu Jul 12 12:51:50 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 226C811E8107 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 12:51:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x6MGWL-Yc-jW for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 12:51:49 -0700 (PDT)
Received: from wsget1.nist.gov (wsget1.nist.gov [129.6.13.150]) by ietfa.amsl.com (Postfix) with ESMTP id 09D0011E809B for <pkix@ietf.org>; Thu, 12 Jul 2012 12:51:49 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget1.nist.gov (129.6.13.150) with Microsoft SMTP Server (TLS) id 14.1.355.2; Thu, 12 Jul 2012 15:52:15 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Thu, 12 Jul 2012 15:48:45 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6CJqLT0015040; Thu, 12 Jul 2012 15:52:22 -0400
Message-ID: <4FFF2AF5.4070007@nist.gov>
Date: Thu, 12 Jul 2012 15:52:21 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:13.0) Gecko/20120609 Thunderbird/13.0
MIME-Version: 1.0
To: Peter Yee <peter@akayla.com>
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com>
In-Reply-To: <033201cd567c$ef626970$ce273c50$@akayla.com>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 19:51:50 -0000

On 06/30/2012 12:58 AM, Peter Yee wrote:
> The updated draft has been posted.  Please let me know if further changes
> are required.

Peter,

I disagree with the changes that you made for the new paragraph to 
appear at the end of Section 3.2.  The text that you included in the -05 
draft says:

|  In some cases, a self-signed certificate that does not contain a
|  BasicConstraints extension (and thus is implicitly an EE certificate)
|  is used to convey a public key. Such a certificate (i.e., a self-
|  signed certificate not marked as a CA certificate) is not compatible
|  with the path validation rules described in Section 6, or the
|  definitions in the paragraph above. This document RECOMMENDS that
|  self-signed certificates used to convey trust anchor data be marked
|  (see Section 4.2.1.9) as CA certificates, but acknowledges that this
|  convention is often not adopted in practice. Other uses of self-
|  signed EE certificates are outside the scope of this specification.

The inclusion of this paragraph was prompted by a request from Sean 
Turner (http://www.ietf.org/mail-archive/web/pkix/current/msg29661.html) 
that was motivated by discussions in other working groups, such as 
DANE.  These discussions were about the use of self-signed certificates 
for purposes other than conveying trust anchor information, not about 
whether self-signed certificates used to convey trust anchor information 
should include a BasicConstraints extension.  Yet, the paragraph in the 
-05 draft, unlike in the -04 draft, is all about including 
BasicConstraints extensions in self-signed certificates used to convey 
trust anchor information. Section 4.2.1.9 of RFC 5280 already says that 
conforming CAs MUST include a BasicConstraints extension in self-signed 
certificates used to convey trust anchor information:

    Conforming CAs MUST include [the BasicConstraints]
    extension in all CA certificates that contain public keys
    used to validate digital signatures on certificates and
    MUST mark the extension as critical in such certificates.

So, adding a sentence to Section 3.2 that RECOMMENDS including a 
BasicConstraints extension would be inconsistent.  So, why not remove 
all the text about whether a self-signed certificates used to convey 
trust anchor information should include a BasicConstraints extension and 
replace it with text (such as was in the -04 draft) that addresses the 
use of self-signed certificates for purposes other than conveying trust 
anchor information?

I also believe that the proposed text in the -05 draft is wrong for 
several other reasons.

The text states that a self-signed certificate that does not contain a 
BasicConstraints extension is implicitly an EE certificate.  Does this 
mean that all version 1 certificates are implicitly EE certificates?  
Additionally, the text goes on to talk about the use of these 
certificates to convey trust anchor information.  However, according to 
X.509 an EE certificate is a certificate issued to an end entity, and an 
end entity is a certificate subject that uses its private key for 
purposes other than signing certificates.  So, if the subject of the 
self-signed certificate signs certificates (and if it didn't then why 
would anyone be using the its self-signed certificate as a trust anchor 
for path validation) then it is not an end entity and the self-signed 
certificate is not an EE certificate.

The proposed paragraph then goes on to incorrectly state that the use of 
a self-signed certificate that does not contain a BasicConstraints 
extension as the source of trust anchor information is not compatible 
with the path validation rules specified in Section 6 of RFC 5280.  
However, Section 6 of RFC 5280 simply says that trust anchor information 
consists of a name and a public key, and that this information may be 
obtained from a self-signed certificate.  So, there is no basis for an 
assertion that it is incompatible with Section 6 of RFC 5280 to obtain 
trust anchor information from a self-signed certificate that does not 
include a BasicConstraints extension.

The next sentence in the proposed paragraph says that the document 
acknowledges that the convention of including a BasicConstraints 
extension in a self-signed certificate used to convey trust anchor 
information is often not adopted in practice.  What is the basis of this 
assertion?  Can you provide examples of self-signed certificates used to 
convey trust anchor information that do not include BasicConstraints 
extensions (and not just the names of software products that are capable 
of generating self-signed certificate without BasicConstraints extensions)?

I haven't even addressed the fact that a certificate could include a 
BasicConstraints extension, but set the cA flag to FALSE.

RFC 5280 already specifies what information conforming CAs need to 
include in certificates, including self-signed certificates, so there is 
no need to add this paragraph to address that.  So, why not revert to 
the text that was in the -04 draft, which addressed the issue that was 
supposed to be covered by this new text, the use of self-signed 
certificate for purposes other than conveying trust anchor information, 
rather than the text in this draft?

Dave


From hallam@gmail.com  Thu Jul 12 15:14:28 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D952221F857A for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 15:14:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.386
X-Spam-Level: 
X-Spam-Status: No, score=-4.386 tagged_above=-999 required=5 tests=[AWL=-1.387, BAYES_00=-2.599, J_CHICKENPOX_47=0.6, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wp6gt9gyjYfk for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 15:14:27 -0700 (PDT)
Received: from mail-vb0-f44.google.com (mail-vb0-f44.google.com [209.85.212.44]) by ietfa.amsl.com (Postfix) with ESMTP id 705CA21F8570 for <pkix@ietf.org>; Thu, 12 Jul 2012 15:14:27 -0700 (PDT)
Received: by vbbez10 with SMTP id ez10so2007027vbb.31 for <pkix@ietf.org>; Thu, 12 Jul 2012 15:15:01 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=zcT9YTzF3Uyx6L7UE6CUKmw/Bymkpr4RdW5Ej+AGUIQ=; b=05HPhEbLKXvK4iUXCN3k2QjpUPKAslHRVNi0trl8N+/ZHPsbP54bVIOPGWMa75BSS+ PwA7ZSp0tZ3kGFK7ZodS5CBcvm4f8uWWiwJRxZS+fLGfPWdveHtSpkXXUIqej1J0H+xm bu2jTXU7ppIOj+7os78hcZDhboJW+vHyhvN6paDwMvbhn2GF1NxWKciMOqC5SbrEO6Om ztegPb8OomANLlskgfrYfK/ifpv12NnDKgM0sRwjTKOHZHX3P6/gBnn3drL88T8y8CCV 7W2+Gl9DhDH6t7gqcY/c+Brgzl8v4Fixi1CEgYi7AHeTURXMTrEDAd6Im5nzeKIJSOR7 aKuA==
MIME-Version: 1.0
Received: by 10.52.26.240 with SMTP id o16mr9819vdg.20.1342131301233; Thu, 12 Jul 2012 15:15:01 -0700 (PDT)
Received: by 10.58.161.139 with HTTP; Thu, 12 Jul 2012 15:15:01 -0700 (PDT)
In-Reply-To: <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com> <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com>
Date: Thu, 12 Jul 2012 18:15:01 -0400
Message-ID: <CAMm+Lwg+pQdGjGKG+hnA7suiQyxpKTGkzhetoYD5y5y9RFUZaQ@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: pkix@ietf.org
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 12 Jul 2012 22:14:29 -0000

On Thu, Jul 12, 2012 at 2:56 PM, Richard L. Barnes <rbarnes@bbn.com> wrote:
>
> On Jul 12, 2012, at 12:12 PM, Phillip Hallam-Baker wrote:
>
>> On Wed, Jul 11, 2012 at 10:52 PM, Richard L. Barnes <rbarnes@bbn.com> wr=
ote:
>>> On Jul 11, 2012, at 10:22 AM, Phillip Hallam-Baker wrote:
>>>> Today the practice for validation checks is to ONLY check for the
>>>> public delegation point. Subdomains are not a concern for CAs, they
>>>> are assumed to be purely a matter of internal administrative policy.
>>>>
>>>> The number of domains where this is not the case is vanishingly small.
>>>> Yes, at MIT there are subdomains for the departments but outside CSAIL
>>>> they are all run by the MIT network staff anyway.
>>>>
>>>> Checking the leaf node only would make no sense at all to me, consider
>>>> the cases for leaf.example.com and example.com
>>>>
>>>> 1) No CAA record at either - anyone can issue
>>>>
>>>> 2) CAA record at example.com for Alice.ca,
>>>>    only Alice can issue for *.example.com
>>>>
>>>> 3) CAA record at leaf.example.com for Bob.ca,
>>>>    only Bob can issue for leaf.example,com, anyone can issue for the r=
est
>>>>
>>>> 4) CAA record at leaf.example.com for Bob.ca, CAA record at
>>>> example.com for Alice.ca,
>>>>    only Bob can issue for leaf.example,com, anyone can issue for the r=
est
>>>>
>>>>
>>>> You seem to be arguing that in case 2, anyone could issue for
>>>> leaf.example.com. That seems like nonsense to me.
>>>
>>> No, I'm saying that the policy should be default-deny with authorizatio=
ns applying to specific names (not sub-domains).
>>>
>>> 1) No CAA record:
>>>   Nobody is authorized to issue
>>
>> Non starter, not going to happen for reasons that are obvious. No CA
>> is ever going to process CAA records under that restriction.
>>
>> I suggest that before you continue with this line you need to find a
>> CA with an embedded trust anchor (aka public root) that would be
>> willing to deploy if your proposal was approved. I think you will find
>> the number is zero.
>>
>> I am all for default deny security, it is the name of my private
>> consulting company for a start.
>
> We must be talking past each other here.  I don't think what I'm proposin=
g here is radical, just that CAA actually be a default-deny/positive-author=
ization system in terms of its internal semantics.  It's still a CA's choic=
e when to apply these semantics, and when to apply other authorization mech=
anisms.


Quite. You seem to think that the presence of this record indicates an
authority to issue without any other checks. That is not the case at
all.

All it states is that if there is a CAA record set and you are not a
member of the authorized set then you MUST NOT issue.

If you are the CA specified you still have to meet all the
requirements of your practices plus any additional requirements that
you may have agreed out of band.


> Indeed, several other IETF technologies follow the design pattern I'm pro=
posing.  RFC 5280 doesn't tell a Relying Party when to require a certificat=
e, only how to interpret a certificate if once he gets one.  TLS doesn't te=
ll a server when it needs to require a client cert, just what to do if one =
does.  The CAA specification shouldn't specify *when* a CA needs to require=
 a CAA record be present, only how to find and interpret a CAA record if on=
e is required.

Which is exactly how it works. If there is no CAA record that means
that the domain holder is not deploying CAA controls. If there is at
least one CAA record then the domain is under CAA control. If the
holder wishes that nobody be allowed to issue then they put in an
empty authorization.




>>> All this document defines is a standard version of Google's "set a TXT =
record with a validation token" verification protocol for Google Apps.  Tha=
t protocol (1) only looks at the leaf, (2) doesn't require a DNS record in =
all cases, and (3) works.
>>> <http://support.google.com/a/bin/topic.py?hl=3Den&topic=3D9196>
>>
>> That is a different situation. It is easy to set security criteria
>> when deploying a completely new scheme.  Adding requirements to a
>> deployed scheme is much harder.
>
> Not in this case: The presence or absence of the new mechanism is clear t=
o the CA.  If the new authorization is absent (no CAA), then the CA can fal=
l back to whatever it did before -- or it can choose not to issue.

That is what the text says to do.


We have a situation where we are moving from a default permit
situation to one where we have access controls. We cannot transition
to default deny immediately.

--=20
Website: http://hallambaker.com/

From rbarnes@bbn.com  Thu Jul 12 18:20:20 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7DD7D11E80E6 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 18:20:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.561
X-Spam-Level: 
X-Spam-Status: No, score=-106.561 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JWYp0kPDJ2z8 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 18:20:19 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id 08E8111E80CA for <pkix@ietf.org>; Thu, 12 Jul 2012 18:20:17 -0700 (PDT)
Received: from [128.89.253.196] (port=53642) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SpUYs-000IC8-Gc; Thu, 12 Jul 2012 21:20:50 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <CAMm+Lwg+pQdGjGKG+hnA7suiQyxpKTGkzhetoYD5y5y9RFUZaQ@mail.gmail.com>
Date: Thu, 12 Jul 2012 21:20:49 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <61E183CD-BAB9-43F4-B57F-1941CB0C076B@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com> <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com> <CAMm+Lwg+pQdGjGKG+hnA7suiQyxpKTGkzhetoYD5y5y9RFUZaQ@mail.gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
X-Mailer: Apple Mail (2.1278)
Cc: pkix@ietf.org
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 01:20:20 -0000

>>>> No, I'm saying that the policy should be default-deny with =
authorizations applying to specific names (not sub-domains).
>>>>=20
>>>> 1) No CAA record:
>>>>  Nobody is authorized to issue
>>>=20
>>> Non starter, not going to happen for reasons that are obvious. No CA
>>> is ever going to process CAA records under that restriction.
>>>=20
>>> I suggest that before you continue with this line you need to find a
>>> CA with an embedded trust anchor (aka public root) that would be
>>> willing to deploy if your proposal was approved. I think you will =
find
>>> the number is zero.
>>>=20
>>> I am all for default deny security, it is the name of my private
>>> consulting company for a start.
>>=20
>> We must be talking past each other here.  I don't think what I'm =
proposing here is radical, just that CAA actually be a =
default-deny/positive-authorization system in terms of its internal =
semantics.  It's still a CA's choice when to apply these semantics, and =
when to apply other authorization mechanisms.
>=20
>=20
> Quite. You seem to think that the presence of this record indicates an
> authority to issue without any other checks. That is not the case at
> all.
>=20
> All it states is that if there is a CAA record set and you are not a
> member of the authorized set then you MUST NOT issue.
>=20
> If you are the CA specified you still have to meet all the
> requirements of your practices plus any additional requirements that
> you may have agreed out of band.

OK, I think we are starting to converge.  I talked with Paul this =
afternoon, and he made me realize how poor my wording is here.  I used =
the phrase "Nobody is authorized" without noting "neither is anyone =
prohibited".  So let me go back to the original cases and try to say =
what I meant more clearly, using some RFC 2119 language.

1) No CAA record:=20
   Any CA MAY issue

2) CAA at example.com for Alice:=20
   Alice MAY issue for example.com (exactly)
   CAs other than Alice MUST NOT issue for example.com (exactly)
   Any CA MAY issue for any other name (no impact on other names)

3) CAA at leaf.example.com for Bob:=20
   Bob MAY issue for leaf.example.com (exactly)
   CAs other than Bob MUST NOT issue for leaf.example.com (exactly)
   Any CA MAY issue for any other name (no impact on other names)

4) CAA at leaf.example.com/Bob, example.com/Alice:
   Bob MAY issue for leaf.example.com
   CAs other than Bob MUST NOT issue for leaf.example.com
   Alice MAY issue for example.com
   CAs other than Alice MUST NOT issue for example.com
   Any CA MAY issue for any other name (no impact on other names)

And in reality, the MAYs here actually mean "MAY, subject to other =
provisions of the CP".

Comparing these to your original responses, ISTM that the only =
difference is with respect to case (2):
RLB: Alice MAY issue for example.com
     CAs other than Alice MUST NOT issue for example.com
     CAs other than Alice MAY issue for *.example.com
PHB: Alice MAY issue for *.example.com (others MUST NOT)
     CAs other than Alice MUST NOT issue for *.example.com

This brings us back to what we were talking about originally, namely =
tree climbing.  In your (2), the RP/Evaluator has to climb up from the =
leaf to find whether there's some parent domain that has a CAA.  What =
I'm suggesting is that you just omit the tree climbing and only look at =
the leaf. =20

That removes the complexity of the tree climbing and the ambiguity about =
delegation points. The only cost is if someone wants to register enough =
subdomains that provisioning CAAs is painful, but not enough for a =
wildcard CAA.


>>>> All this document defines is a standard version of Google's "set a =
TXT record with a validation token" verification protocol for Google =
Apps.  That protocol (1) only looks at the leaf, (2) doesn't require a =
DNS record in all cases, and (3) works.
>>>> <http://support.google.com/a/bin/topic.py?hl=3Den&topic=3D9196>
>>>=20
>>> That is a different situation. It is easy to set security criteria
>>> when deploying a completely new scheme.  Adding requirements to a
>>> deployed scheme is much harder.
>>=20
>> Not in this case: The presence or absence of the new mechanism is =
clear to the CA.  If the new authorization is absent (no CAA), then the =
CA can fall back to whatever it did before -- or it can choose not to =
issue.
>=20
> That is what the text says to do.
>=20
>=20
> We have a situation where we are moving from a default permit
> situation to one where we have access controls. We cannot transition
> to default deny immediately.

It's becoming increasingly apparent that what we're both talking about =
isn't really "default deny", it's "default no information" -- by =
default, issuance is neither authorized nor denied.  The becomes =
"default deny" only if a CP construes "lack of CAA authorization" to =
imply "deny", as opposed to "use some other verification mechanism".

Thanks for bearing with me on this,
--Richard







From i.grok@comcast.net  Thu Jul 12 18:30:14 2012
Return-Path: <i.grok@comcast.net>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1758E11E80F5 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 18:30:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100.437
X-Spam-Level: 
X-Spam-Status: No, score=-100.437 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611,  RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PYBh2wk68cOw for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 18:30:13 -0700 (PDT)
Received: from qmta02.westchester.pa.mail.comcast.net (qmta02.westchester.pa.mail.comcast.net [IPv6:2001:558:fe14:43:76:96:62:24]) by ietfa.amsl.com (Postfix) with ESMTP id B33C511E80CC for <pkix@ietf.org>; Thu, 12 Jul 2012 18:30:11 -0700 (PDT)
Received: from omta01.westchester.pa.mail.comcast.net ([76.96.62.11]) by qmta02.westchester.pa.mail.comcast.net with comcast id ZdRo1j0040EZKEL51dWo5J; Fri, 13 Jul 2012 01:30:48 +0000
Received: from odin.ulthar.us ([IPv6:2001:470:8c86:0:225:64ff:fe8b:c2f2]) by omta01.westchester.pa.mail.comcast.net with comcast id ZdWq1j00A2Ekl483MdWt49; Fri, 13 Jul 2012 01:30:53 +0000
Received: from odin.ulthar.us (localhost [127.0.0.1]) by odin.ulthar.us (8.14.5/8.14.5) with ESMTP id q6D1UgnY011085 for <pkix@ietf.org>; Thu, 12 Jul 2012 21:30:42 -0400
Received: (from draco@localhost) by odin.ulthar.us (8.14.5/8.14.5/Submit) id q6D1UgnU011084 for pkix@ietf.org; Thu, 12 Jul 2012 21:30:42 -0400
Date: Thu, 12 Jul 2012 21:30:42 -0400
From: Scott Schmit <i.grok@comcast.net>
To: pkix@ietf.org
Message-ID: <20120713013042.GA11010@odin.ulthar.us>
Mail-Followup-To: pkix@ietf.org
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com> <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com> <CAMm+Lwg+pQdGjGKG+hnA7suiQyxpKTGkzhetoYD5y5y9RFUZaQ@mail.gmail.com> <61E183CD-BAB9-43F4-B57F-1941CB0C076B@bbn.com>
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="PNTmBPCT7hxwcZjr"
Content-Disposition: inline
In-Reply-To: <61E183CD-BAB9-43F4-B57F-1941CB0C076B@bbn.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 01:30:14 -0000

--PNTmBPCT7hxwcZjr
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Jul 12, 2012 at 09:20:49PM -0400, Richard L. Barnes wrote:
> That removes the complexity of the tree climbing and the ambiguity
> about delegation points. The only cost is if someone wants to register
> enough subdomains that provisioning CAAs is painful, but not enough
> for a wildcard CAA.

Actually, that brings up an important question: how does a CA using CAA
know that it's allowed to issue a wildcard certificate?

I was going to say using Richard's scheme, but I suppose it could apply
to PHB's too.

--=20
Scott Schmit

--PNTmBPCT7hxwcZjr
Content-Type: application/x-pkcs7-signature
Content-Disposition: attachment; filename="smime.p7s"
Content-Transfer-Encoding: base64

MIIQBAYJKoZIhvcNAQcCoIIP9TCCD/ECAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC
DTUwggY0MIIEHKADAgECAgEeMA0GCSqGSIb3DQEBBQUAMH0xCzAJBgNVBAYTAklMMRYwFAYD
VQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0
ZSBTaWduaW5nMSkwJwYDVQQDEyBTdGFydENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTAe
Fw0wNzEwMjQyMTAxNTVaFw0xNzEwMjQyMTAxNTVaMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UE
ChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUg
U2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xhc3MgMSBQcmltYXJ5IEludGVybWVkaWF0
ZSBDbGllbnQgQ0EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHCYPMzi3YGrEp
pC4Tq5a+ijKDjKaIQZZVR63UbxIP6uq/I0fhCu+cQhoUfE6ERKKnu8zPf1Jwuk0tsvVCk6U9
b+0UjM0dLep3ZdE1gblK/1FwYT5Pipsu2yOMluLqwvsuz9/9f1+1PKHG/FaR/wpbfuIqu54q
zHDYeqiUfsYzoVflR80DAC7hmJ+SmZnNTWyUGHJbBpA8Q89lGxahNvuryGaC/o2/ceD2uYDX
9U8Eg5DpIpGQdcbQeGarV04WgAUjjXX5r/2dabmtxWMZwhZna//jdiSyrrSMTGKkDiXm6/3/
4ebfeZuCYKzN2P8O2F/Xe2AC/Y7zeEsnR7FOp+uXAgMBAAGjggGtMIIBqTAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjAdBgNVHQ4EFgQUU3Ltkpzg2ssBXHx+ljVO8tS4UYIw
HwYDVR0jBBgwFoAUTgvvGqRAW6UXaYcwyjRoQ9BBrvIwZgYIKwYBBQUHAQEEWjBYMCcGCCsG
AQUFBzABhhtodHRwOi8vb2NzcC5zdGFydHNzbC5jb20vY2EwLQYIKwYBBQUHMAKGIWh0dHA6
Ly93d3cuc3RhcnRzc2wuY29tL3Nmc2NhLmNydDBbBgNVHR8EVDBSMCegJaAjhiFodHRwOi8v
d3d3LnN0YXJ0c3NsLmNvbS9zZnNjYS5jcmwwJ6AloCOGIWh0dHA6Ly9jcmwuc3RhcnRzc2wu
Y29tL3Nmc2NhLmNybDCBgAYDVR0gBHkwdzB1BgsrBgEEAYG1NwECATBmMC4GCCsGAQUFBwIB
FiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMDQGCCsGAQUFBwIBFihodHRw
Oi8vd3d3LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUucGRmMA0GCSqGSIb3DQEBBQUAA4IC
AQAKgwh9eKssBly4Y4xerhy5I3dNoXHYfYa8PlVLL/qtXnkFgdtY1o95CfegFJTwqBBmf8py
TUnFsukDFUI22zF5bVHzuJ+GxhnSqN2sD1qetbYwBYK2iyYA5Pg7Er1A+hKMIzEzcduRkIMm
CeUTyMyikfbUFvIBivtvkR8ZFAk22BZy+pJfAoedO61HTz4qSfQoCRcLN5A0t4DkuVhTMXIz
uQ8CnykhExD6x4e6ebIbrjZLb7L+ocR0y4YjCl/Pd4MXU91y0vTipgr/O75CDUHDRHCCKBVm
z/Rzkc/b970MEeHt5LC3NiWTgBSvrLEuVzBKM586YoRD9Dy3OHQgWI270g+5MYA8GfgI/EPT
5G7xPbCDz+zjdH89PeR3U4So4lSXur6H6vp+m9TQXPF3a0LwZrp8MQ+Z77U1uL7TelWO5lAp
sbAonrqASfTpaprFVkL4nyGH+NHST2ZJPWIBk81i6Vw0ny0qZW2Niy/QvVNKbb43A43ny076
khXO7cNbBIRdJ/6qQNq9Bqb5C0Q5nEsFcj75oxQRqlKf6TcvGbjxkJh8BYtv9ePsXklAxtm8
J7GCUBthHSQgepbkOexhJ0wP8imUkyiPHQ0GvEnd83129fZjoEhdGwXV27ioRKbj/cIq7JRX
un0NbeY+UdMYu9jGfIpDLtUUGSgsg2zMGs5R4jCCBvkwggXhoAMCAQICAwR4CjANBgkqhkiG
9w0BAQsFADCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNV
BAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0
Q29tIENsYXNzIDEgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBMB4XDTEyMDcwNDEz
NTc1MVoXDTEzMDcwNTA1MjcyNlowQDEbMBkGA1UEAwwSaS5ncm9rQGNvbWNhc3QubmV0MSEw
HwYJKoZIhvcNAQkBFhJpLmdyb2tAY29tY2FzdC5uZXQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxn+QJTgdUJ1RAOi6JbFsDfl21ZX/OPx/ttuXWQP1vWwBZybHU+4/+bRXH
5ONhjbc5ikZvz/E406iQLy2xMT5PI/hx4uIZQQYpkjxd4rCbbvLNACz5L+cFaGj4WfGwAXDv
bw4nx8Mh3WjbR5yjBCWYqadiv7HWAWmhaJmuaTp/e+mO2EEOOdoNQ8b2mxMyN43TlElx6Zos
t7g/eQUcLWgTB5apPhowCCGnFU6uHK053QsPmsmZ67gg8acpb5ic0+P+X1j+IgD3jcsDzjrF
TPlrvU4ZuBYQJISqngbc2ua/uutx75Xs4iFXWNRlnYfZMFJy96USzrhIBRqcORrjbyGXAgMB
AAGjggOtMIIDqTAJBgNVHRMEAjAAMAsGA1UdDwQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcD
AgYIKwYBBQUHAwQwHQYDVR0OBBYEFAxkdHPHW3mhf+gXJjezdazgoDRuMB8GA1UdIwQYMBaA
FFNy7ZKc4NrLAVx8fpY1TvLUuFGCMB0GA1UdEQQWMBSBEmkuZ3Jva0Bjb21jYXN0Lm5ldDCC
AiEGA1UdIASCAhgwggIUMIICEAYLKwYBBAGBtTcBAgIwggH/MC4GCCsGAQUFBwIBFiJodHRw
Oi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMDQGCCsGAQUFBwIBFihodHRwOi8vd3d3
LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUucGRmMIH3BggrBgEFBQcCAjCB6jAnFiBTdGFy
dENvbSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTADAgEBGoG+VGhpcyBjZXJ0aWZpY2F0ZSB3
YXMgaXNzdWVkIGFjY29yZGluZyB0byB0aGUgQ2xhc3MgMSBWYWxpZGF0aW9uIHJlcXVpcmVt
ZW50cyBvZiB0aGUgU3RhcnRDb20gQ0EgcG9saWN5LCByZWxpYW5jZSBvbmx5IGZvciB0aGUg
aW50ZW5kZWQgcHVycG9zZSBpbiBjb21wbGlhbmNlIG9mIHRoZSByZWx5aW5nIHBhcnR5IG9i
bGlnYXRpb25zLjCBnAYIKwYBBQUHAgIwgY8wJxYgU3RhcnRDb20gQ2VydGlmaWNhdGlvbiBB
dXRob3JpdHkwAwIBAhpkTGlhYmlsaXR5IGFuZCB3YXJyYW50aWVzIGFyZSBsaW1pdGVkISBT
ZWUgc2VjdGlvbiAiTGVnYWwgYW5kIExpbWl0YXRpb25zIiBvZiB0aGUgU3RhcnRDb20gQ0Eg
cG9saWN5LjA2BgNVHR8ELzAtMCugKaAnhiVodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9jcnR1
MS1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcC5z
dGFydHNzbC5jb20vc3ViL2NsYXNzMS9jbGllbnQvY2EwQgYIKwYBBQUHMAKGNmh0dHA6Ly9h
aWEuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczEuY2xpZW50LmNhLmNydDAjBgNVHRIE
HDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcNAQELBQADggEBACJi0f4m
0bSVq+pq4AHeC2Rj4S8rciW+Uce6LC69UlyVMijKv/pZNFM08vqRXEI9WpKQhKXacJ+rK9az
DBmnxq1scqKhn7991V6Yt2t0tEY8vUX7q330GybUB/rQLNrh66GFXaEWU/S692pGzvUXeV+w
zz48snMpoMHQdxkHHW5sQkpo99SF/vOA5/sqvFmJ+ai1iDRjtKcChjkmAtFmCKv/dNrXnvew
5+QnLlnE/TsW4Sdv3bcLdlthD4eavS3BdgXfX7dfj0ykel53J2Us3CikNbyuCsJpwMH+gX1j
LcXZOYIDLzZXCFEOFajhgsAZ5JQrW0fFRxjGIp8Rs+rxdFwxggKXMIICkwIBATCBlDCBjDEL
MAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBE
aWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0Q29tIENsYXNzIDEg
UHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgMEeAowCQYFKw4DAhoFAKCB2DAYBgkq
hkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0xMjA3MTMwMTMwNDJaMCMG
CSqGSIb3DQEJBDEWBBRdCbbnxK+XjPo4bxGXHu8LO3syxjB5BgkqhkiG9w0BCQ8xbDBqMAsG
CWCGSAFlAwQBKjALBglghkgBZQMEARYwCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqG
SIb3DQMCAgIAgDANBggqhkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDANBgkq
hkiG9w0BAQEFAASCAQCupbtYt4xJ4OytTxMBxrJuhe6qssl3iC4X0kjAQLaLdSJlL2x58lJ+
++ExZrk5Nzjaccq7gY4OSEwxiuK2QHg1JvpMzwp5aSdKc1NvM/DVi5v/T+KUgMUZYPpRRDeo
O7t+U00cX2l653vg46m5DNDCnBsg+U2bF55lkm3TRCkDCbCsxQ+OiQAxZ4UKQDkInXDcF0C3
mTlW0X1C/2JbBA2G32ZOtS9J1ZzoirSyUUboQDxQgE5d8zN9ex/4tKy3qqVx5vYEdooSnFJe
vX/7TOreLTOyeVhP/03lKHJUCfItYdJVTFJ83Vct1LgMXiQ182Y+r182B5sg9q1T/4g20orZ

--PNTmBPCT7hxwcZjr--

From i.grok@comcast.net  Thu Jul 12 18:38:03 2012
Return-Path: <i.grok@comcast.net>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D0A2521F8449 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 18:38:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100.437
X-Spam-Level: 
X-Spam-Status: No, score=-100.437 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FH_RELAY_NODNS=1.451, HELO_MISMATCH_NET=0.611,  RDNS_NONE=0.1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t2Lct7mIps3x for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 18:38:03 -0700 (PDT)
Received: from qmta02.westchester.pa.mail.comcast.net (qmta02.westchester.pa.mail.comcast.net [IPv6:2001:558:fe14:43:76:96:62:24]) by ietfa.amsl.com (Postfix) with ESMTP id F215711E8087 for <pkix@ietf.org>; Thu, 12 Jul 2012 18:38:02 -0700 (PDT)
Received: from omta02.westchester.pa.mail.comcast.net ([76.96.62.19]) by qmta02.westchester.pa.mail.comcast.net with comcast id ZdTY1j0090QuhwU51degTA; Fri, 13 Jul 2012 01:38:40 +0000
Received: from odin.ulthar.us ([IPv6:2001:470:8c86:0:225:64ff:fe8b:c2f2]) by omta02.westchester.pa.mail.comcast.net with comcast id ZdeY1j0012Ekl483NdeYNg; Fri, 13 Jul 2012 01:38:32 +0000
Received: from odin.ulthar.us (localhost [127.0.0.1]) by odin.ulthar.us (8.14.5/8.14.5) with ESMTP id q6D1caB0011108 for <pkix@ietf.org>; Thu, 12 Jul 2012 21:38:36 -0400
Received: (from draco@localhost) by odin.ulthar.us (8.14.5/8.14.5/Submit) id q6D1caWj011107 for pkix@ietf.org; Thu, 12 Jul 2012 21:38:36 -0400
Date: Thu, 12 Jul 2012 21:38:36 -0400
From: Scott Schmit <i.grok@comcast.net>
To: pkix@ietf.org
Message-ID: <20120713013836.GB11010@odin.ulthar.us>
Mail-Followup-To: pkix@ietf.org
References: <4FFA9233.3030109@seantek.com>
MIME-Version: 1.0
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="kORqDWCi7qDJ0mEj"
Content-Disposition: inline
In-Reply-To: <4FFA9233.3030109@seantek.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [pkix] URN certspec draft (in Apps WG)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 01:38:03 -0000

--kORqDWCi7qDJ0mEj
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Jul 09, 2012 at 01:11:31AM -0700, Sean Leonard wrote:
> I have made an individual submission titled "A Uniform Resource Name
> (URN) Namespace for Certificates". Basically, it lets you identify a
> certificate in ways such as this:
>=20
> urn:cert:SHA-1:b1f090a8e2d70353107454f9618347b18b321bf1
>=20
> Because URNs are managed by the Apps WG, I am continuing the
> conversation in that context. If you are interested, however, I
> would value your review.

How does this compare/contrast to draft-farrell-decade-ni?

--=20
Scott Schmit

--kORqDWCi7qDJ0mEj
Content-Type: application/x-pkcs7-signature
Content-Disposition: attachment; filename="smime.p7s"
Content-Transfer-Encoding: base64
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--kORqDWCi7qDJ0mEj--

From rbarnes@bbn.com  Thu Jul 12 18:45:09 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7565B11E812B for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 18:45:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.563
X-Spam-Level: 
X-Spam-Status: No, score=-106.563 tagged_above=-999 required=5 tests=[AWL=0.036, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1+HMVv7Gn7Ax for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 18:45:09 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id E354311E812A for <pkix@ietf.org>; Thu, 12 Jul 2012 18:45:08 -0700 (PDT)
Received: from [128.89.253.196] (port=54610) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SpUwx-000IKT-FT; Thu, 12 Jul 2012 21:45:43 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=us-ascii
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <20120713013042.GA11010@odin.ulthar.us>
Date: Thu, 12 Jul 2012 21:45:42 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <ABD45F3A-B781-44CC-855C-FA22D3F92A29@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com> <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com> <CAMm+Lwg+pQdGjGKG+hnA7suiQyxpKTGkzhetoYD5y5y9RFUZaQ@mail.gmail.com> <61E183CD-BAB9-43F4-B57F-1941CB0C076B@bbn.com> <20120713013042.GA11010@odin.ulthar.us>
To: Scott Schmit <i.grok@comcast.net>
X-Mailer: Apple Mail (2.1278)
Cc: pkix@ietf.org
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 01:45:09 -0000

On Jul 12, 2012, at 9:30 PM, Scott Schmit wrote:

> On Thu, Jul 12, 2012 at 09:20:49PM -0400, Richard L. Barnes wrote:
>> That removes the complexity of the tree climbing and the ambiguity
>> about delegation points. The only cost is if someone wants to =
register
>> enough subdomains that provisioning CAAs is painful, but not enough
>> for a wildcard CAA.
>=20
> Actually, that brings up an important question: how does a CA using =
CAA
> know that it's allowed to issue a wildcard certificate?
>=20
> I was going to say using Richard's scheme, but I suppose it could =
apply
> to PHB's too.

Well, the simple answer is "don't issue wildcard certificates" :)

A few possibilities:

OPTION 0: CA randomly samples N names matching the wildcard.  But that's =
just silly.

OPTION 1: CA checks for CAA at the label above the wildcard.=20

In the RLB scheme, that would create the somewhat weird situation that a =
CAA at example.com would authorize an issuer to issue for *.example.com, =
but not for leaf.example.com specifically.  But in either case, the CA =
processing is deterministic; you just make one query.  In the PHB =
scheme, there's not that wrinkle in the semantics, but you have to do =
tree climbing even in the simple case.  =20

OPTION 2: CA looks for CAA under a special label _wildcard.example.com.

This avoids the conflict with example.com, in the sense that you can =
authorize a wildcard without authorizing the domain itself.  It also =
resolves the weird situation in the RLB scheme. =20

My vote would be for OPTION 2.  Labels are cheap.

--Richard



From hallam@gmail.com  Thu Jul 12 19:01:05 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5EF5921F8644 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 19:01:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.655
X-Spam-Level: 
X-Spam-Status: No, score=-4.655 tagged_above=-999 required=5 tests=[AWL=-1.056, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fVi1zHda+hHl for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 19:01:04 -0700 (PDT)
Received: from mail-vc0-f172.google.com (mail-vc0-f172.google.com [209.85.220.172]) by ietfa.amsl.com (Postfix) with ESMTP id 8F84F21F863C for <pkix@ietf.org>; Thu, 12 Jul 2012 19:01:04 -0700 (PDT)
Received: by vcbfo14 with SMTP id fo14so315069vcb.31 for <pkix@ietf.org>; Thu, 12 Jul 2012 19:01:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=wpT4Cf2+9Zd/b+Za5ktTlrW2LOAJ0uHBDnkWM5uVaS0=; b=sgGwm+rU1MGHJ7rTiNzHCqTCle7BMMsutssqbbZ65wyNB5GQibSxG91KEd2X5XTuli 4brvv2h3/kE7kJdNvi1Oz3zQzI3lZ4sAYZ4iXWhWyiEFWNOBGoBn1LzwdUSejueTwxQn Rh+Qt0RxqmYnZVRQGPI+Lf6qloWPviEZeDiiVcgkJEUh5B6p8Abmw3Fxhz3Gv0VLq+kS WivDghZaP9KHIT/rxaNn5bJJFhirHgSmHTDKOYDlj3t2VtXhZFjSpUqmSv2tZ27abJRL 0OyeoKsb5+Mprvfnju72t6235MEWdLnsC4rR5Ku6y/UAWj+ntqVTo3Q8qtchvQHGEAfs O7GA==
MIME-Version: 1.0
Received: by 10.221.10.73 with SMTP id oz9mr252714vcb.33.1342144899083; Thu, 12 Jul 2012 19:01:39 -0700 (PDT)
Received: by 10.58.161.139 with HTTP; Thu, 12 Jul 2012 19:01:39 -0700 (PDT)
In-Reply-To: <20120713013042.GA11010@odin.ulthar.us>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com> <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com> <CAMm+Lwg+pQdGjGKG+hnA7suiQyxpKTGkzhetoYD5y5y9RFUZaQ@mail.gmail.com> <61E183CD-BAB9-43F4-B57F-1941CB0C076B@bbn.com> <20120713013042.GA11010@odin.ulthar.us>
Date: Thu, 12 Jul 2012 22:01:39 -0400
Message-ID: <CAMm+Lwib-ao685mq=7Q7RCk8YFE-0jnpP0nzWeg1cGD+neOALw@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: pkix@ietf.org
Content-Type: text/plain; charset=ISO-8859-1
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 02:01:05 -0000

The wildcard cert is of the form *.suffix, so the test would have to
start at suffix.

But good catch, it should be specified in the draft. I will fix that.



On Thu, Jul 12, 2012 at 9:30 PM, Scott Schmit <i.grok@comcast.net> wrote:
> On Thu, Jul 12, 2012 at 09:20:49PM -0400, Richard L. Barnes wrote:
>> That removes the complexity of the tree climbing and the ambiguity
>> about delegation points. The only cost is if someone wants to register
>> enough subdomains that provisioning CAAs is painful, but not enough
>> for a wildcard CAA.
>
> Actually, that brings up an important question: how does a CA using CAA
> know that it's allowed to issue a wildcard certificate?
>
> I was going to say using Richard's scheme, but I suppose it could apply
> to PHB's too.
>
> --
> Scott Schmit
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>



-- 
Website: http://hallambaker.com/

From hallam@gmail.com  Thu Jul 12 19:04:33 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEAC821F8653 for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 19:04:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.631
X-Spam-Level: 
X-Spam-Status: No, score=-4.631 tagged_above=-999 required=5 tests=[AWL=-1.032, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O-BsrCLs7-WR for <pkix@ietfa.amsl.com>; Thu, 12 Jul 2012 19:04:33 -0700 (PDT)
Received: from mail-vb0-f44.google.com (mail-vb0-f44.google.com [209.85.212.44]) by ietfa.amsl.com (Postfix) with ESMTP id 2F8A021F864B for <pkix@ietf.org>; Thu, 12 Jul 2012 19:04:33 -0700 (PDT)
Received: by vbbez10 with SMTP id ez10so2097788vbb.31 for <pkix@ietf.org>; Thu, 12 Jul 2012 19:05:07 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=uXVwIHrLJnXw5Y3VKFJE55YmuUbEj3yozUe26UyRr8U=; b=XOrfN0bkUi58B78/pcAvCQqmOLIHhUusONrmd9OyiG+QWr4RTZOa5bb9iUHVpqAVem Itb52CD33IHcDnrlpeY94/GWvJJ1a5bLdE14/Gj3YUqxy6o6tOFCp2bjsUtNW6lnw1rE W327ceHSKMVFeOncOUAMTgngPRITcZNSeUpZal3+buTutjhyOXEG818iZfDFL8n+YmEH Y2EwiNdMB7SGYojS9N0R2NcYFcWAcJqw2lKJwaftP2QCbmLnlCNLGWI8gY5IjPUPa7N4 KNvN+IqWGxFRKQDV7fOjzhzXiwELpTrC+Z1GHMIk1Ank7U9vilegjt5HKZI5mprITURA P2CA==
MIME-Version: 1.0
Received: by 10.52.26.240 with SMTP id o16mr246126vdg.20.1342145107649; Thu, 12 Jul 2012 19:05:07 -0700 (PDT)
Received: by 10.58.161.139 with HTTP; Thu, 12 Jul 2012 19:05:07 -0700 (PDT)
In-Reply-To: <ABD45F3A-B781-44CC-855C-FA22D3F92A29@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com> <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com> <CAMm+Lwg+pQdGjGKG+hnA7suiQyxpKTGkzhetoYD5y5y9RFUZaQ@mail.gmail.com> <61E183CD-BAB9-43F4-B57F-1941CB0C076B@bbn.com> <20120713013042.GA11010@odin.ulthar.us> <ABD45F3A-B781-44CC-855C-FA22D3F92A29@bbn.com>
Date: Thu, 12 Jul 2012 22:05:07 -0400
Message-ID: <CAMm+LwgbtqMGaCp08MGh2ZeAMjqZaxQrhDHCttbWgb_PHf43UQ@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: pkix@ietf.org
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 02:04:34 -0000

The problems of using prefixed DNS labels are the reason that we
applied for the RR in the first place.


On Thu, Jul 12, 2012 at 9:45 PM, Richard L. Barnes <rbarnes@bbn.com> wrote:
>
> On Jul 12, 2012, at 9:30 PM, Scott Schmit wrote:
>
>> On Thu, Jul 12, 2012 at 09:20:49PM -0400, Richard L. Barnes wrote:
>>> That removes the complexity of the tree climbing and the ambiguity
>>> about delegation points. The only cost is if someone wants to register
>>> enough subdomains that provisioning CAAs is painful, but not enough
>>> for a wildcard CAA.
>>
>> Actually, that brings up an important question: how does a CA using CAA
>> know that it's allowed to issue a wildcard certificate?
>>
>> I was going to say using Richard's scheme, but I suppose it could apply
>> to PHB's too.
>
> Well, the simple answer is "don't issue wildcard certificates" :)
>
> A few possibilities:
>
> OPTION 0: CA randomly samples N names matching the wildcard.  But that's =
just silly.
>
> OPTION 1: CA checks for CAA at the label above the wildcard.
>
> In the RLB scheme, that would create the somewhat weird situation that a =
CAA at example.com would authorize an issuer to issue for *.example.com, bu=
t not for leaf.example.com specifically.  But in either case, the CA proces=
sing is deterministic; you just make one query.  In the PHB scheme, there's=
 not that wrinkle in the semantics, but you have to do tree climbing even i=
n the simple case.
>
> OPTION 2: CA looks for CAA under a special label _wildcard.example.com.
>
> This avoids the conflict with example.com, in the sense that you can auth=
orize a wildcard without authorizing the domain itself.  It also resolves t=
he weird situation in the RLB scheme.
>
> My vote would be for OPTION 2.  Labels are cheap.
>
> --Richard
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix



--=20
Website: http://hallambaker.com/

From rbarnes@bbn.com  Fri Jul 13 10:06:36 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F78411E8114 for <pkix@ietfa.amsl.com>; Fri, 13 Jul 2012 10:06:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.574
X-Spam-Level: 
X-Spam-Status: No, score=-106.574 tagged_above=-999 required=5 tests=[AWL=0.025, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0Hir7i3Z4dcs for <pkix@ietfa.amsl.com>; Fri, 13 Jul 2012 10:06:35 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id DC36811E808F for <pkix@ietf.org>; Fri, 13 Jul 2012 10:06:34 -0700 (PDT)
Received: from [128.89.253.210] (port=59453) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SpjKc-000DrO-Lw; Fri, 13 Jul 2012 13:07:06 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <CAMm+LwgbtqMGaCp08MGh2ZeAMjqZaxQrhDHCttbWgb_PHf43UQ@mail.gmail.com>
Date: Fri, 13 Jul 2012 13:07:06 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <46C8B897-E62A-4998-855F-617FEEDC5C51@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com> <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com> <CAMm+Lwg+pQdGjGKG+hnA7suiQyxpKTGkzhetoYD5y5y9RFUZaQ@mail.gmail.com> <61E183CD-BAB9-43F4-B57F-1941CB0C076B@bbn.com> <20120713013042.GA11010@odin.ulthar.us> <ABD45F3A-B781-44CC-855C-FA22D3F92A29@bbn.com> <CAMm+LwgbtqMGaCp08MGh2ZeAMjqZaxQrhDHCttbWgb_PHf43UQ@mail.gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
X-Mailer: Apple Mail (2.1278)
Cc: pkix@ietf.org
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 17:06:36 -0000

Could you elaborate?  OPTION 2 wouldn't use prefixes in general, just =
for the special case of wildcards.  It's effectively a label for the "*" =
in the wildcard.  We could use the prefix _star if you want :)

--Richard


On Jul 12, 2012, at 10:05 PM, Phillip Hallam-Baker wrote:

> The problems of using prefixed DNS labels are the reason that we
> applied for the RR in the first place.
>=20
>=20
> On Thu, Jul 12, 2012 at 9:45 PM, Richard L. Barnes <rbarnes@bbn.com> =
wrote:
>>=20
>> On Jul 12, 2012, at 9:30 PM, Scott Schmit wrote:
>>=20
>>> On Thu, Jul 12, 2012 at 09:20:49PM -0400, Richard L. Barnes wrote:
>>>> That removes the complexity of the tree climbing and the ambiguity
>>>> about delegation points. The only cost is if someone wants to =
register
>>>> enough subdomains that provisioning CAAs is painful, but not enough
>>>> for a wildcard CAA.
>>>=20
>>> Actually, that brings up an important question: how does a CA using =
CAA
>>> know that it's allowed to issue a wildcard certificate?
>>>=20
>>> I was going to say using Richard's scheme, but I suppose it could =
apply
>>> to PHB's too.
>>=20
>> Well, the simple answer is "don't issue wildcard certificates" :)
>>=20
>> A few possibilities:
>>=20
>> OPTION 0: CA randomly samples N names matching the wildcard.  But =
that's just silly.
>>=20
>> OPTION 1: CA checks for CAA at the label above the wildcard.
>>=20
>> In the RLB scheme, that would create the somewhat weird situation =
that a CAA at example.com would authorize an issuer to issue for =
*.example.com, but not for leaf.example.com specifically.  But in either =
case, the CA processing is deterministic; you just make one query.  In =
the PHB scheme, there's not that wrinkle in the semantics, but you have =
to do tree climbing even in the simple case.
>>=20
>> OPTION 2: CA looks for CAA under a special label =
_wildcard.example.com.
>>=20
>> This avoids the conflict with example.com, in the sense that you can =
authorize a wildcard without authorizing the domain itself.  It also =
resolves the weird situation in the RLB scheme.
>>=20
>> My vote would be for OPTION 2.  Labels are cheap.
>>=20
>> --Richard
>>=20
>>=20
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>=20
>=20
>=20
> --=20
> Website: http://hallambaker.com/


From hallam@gmail.com  Fri Jul 13 11:13:53 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8C08B21F8647 for <pkix@ietfa.amsl.com>; Fri, 13 Jul 2012 11:13:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.808
X-Spam-Level: 
X-Spam-Status: No, score=-4.808 tagged_above=-999 required=5 tests=[AWL=-1.209, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pNDe+UzafjDN for <pkix@ietfa.amsl.com>; Fri, 13 Jul 2012 11:13:52 -0700 (PDT)
Received: from mail-vc0-f172.google.com (mail-vc0-f172.google.com [209.85.220.172]) by ietfa.amsl.com (Postfix) with ESMTP id 2B8A021F8636 for <pkix@ietf.org>; Fri, 13 Jul 2012 11:13:52 -0700 (PDT)
Received: by vcbfo14 with SMTP id fo14so874073vcb.31 for <pkix@ietf.org>; Fri, 13 Jul 2012 11:14:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=XCZLk+3j8paBua2ZD/Bcas6wlYeBiZvoe6Crw3dLF8M=; b=uiml/EmzGLSamI2JkULVYvrdJwnpLjaANTWbOe9tHQoGEhZnYiPhJ7QSIC54N683tM ylV/QkyippGaVJUsDHCkvIdRIr/3ljPku0wENHaubmkm5N4p8QnN/aGPK/aCYgKEiyhi EGraTJvJCwkfb9lc4gYVF9O7nyr2a+iHB7tXiABRaPLNTASwP3ITQ+kyL4bA+5nFUVIV rMUf3qdbTPN67QjR3aXOqbHRhpUVIyd0oTrEqG+3Api4JnY2VOm27Lp1Ss7eKkTIUFVb 41kDyLi62MJ76i08hxMhwB2LLcWzD9r9T/lLqtKHHcR8cstIWiE/xR3EBRQhnkRL9ao8 YtUQ==
MIME-Version: 1.0
Received: by 10.52.64.146 with SMTP id o18mr917403vds.55.1342203268127; Fri, 13 Jul 2012 11:14:28 -0700 (PDT)
Received: by 10.58.161.139 with HTTP; Fri, 13 Jul 2012 11:14:28 -0700 (PDT)
In-Reply-To: <46C8B897-E62A-4998-855F-617FEEDC5C51@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com> <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com> <CAMm+Lwg+pQdGjGKG+hnA7suiQyxpKTGkzhetoYD5y5y9RFUZaQ@mail.gmail.com> <61E183CD-BAB9-43F4-B57F-1941CB0C076B@bbn.com> <20120713013042.GA11010@odin.ulthar.us> <ABD45F3A-B781-44CC-855C-FA22D3F92A29@bbn.com> <CAMm+LwgbtqMGaCp08MGh2ZeAMjqZaxQrhDHCttbWgb_PHf43UQ@mail.gmail.com> <46C8B897-E62A-4998-855F-617FEEDC5C51@bbn.com>
Date: Fri, 13 Jul 2012 14:14:28 -0400
Message-ID: <CAMm+LwiLkKoYjNy6W+j-GfcTmvgOMvHP9oB3VA5hVrxeaUAkNQ@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: pkix@ietf.org
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 18:13:53 -0000

I don't see any value in distinguishing between the cases.

As far as I am aware, all the CPs for public CAs mean that they
validate a request for a cert for www.paypal.com by verifying that the
applicant has the right to use paypal.com.

The substructure of the DNS is not a concern of public CAs. Never has
been. If an enterprise is large enough for the substructure to matter
then they are going to be large enough to demand special casing.


The only cases where this has ever been an issue are for weird cases
like Oxford colleges which have DNS names like wolfson.ox.ac.uk which
is a 4th level domain despite the fact that Wolfson has an independent
existence outside the University. It has a separate royal charter for
a start.

But from a CA point of view this is all moot. What I am interested in
if I get an application is that (1) the subject is the party they
purport to be and (2) they have the right to use the network names
they claim. So even though my college has an independent existence
outside of Oxford University, they can only get a certificate if the
holder of ox.ac.uk agrees that they have the right to use that name.

The specification as written allows that Wolfson can specify their own
certificate issue criteria for wolfson.ox.ac.uk if the OUCS allows
them to run their own DNS or insert the relevant records. And
otherwise OUCS can restrict their ability to obtain certs if they
happen to choose.


The specification as written has exactly the degree of flexibility
intended to meet the real world use cases. Your proposed alternative
does not. Nor is it possible to reliably obtain the desired semantics
from your method using wildcards.

And even if we could do it the way you propose, I cannot see any
benefit to doing so. The cost of making multiple checks is
insignificant in the context of a certificate issue process, even in
the case of a corner case very long DNS name. Now I might well want to
think twice about issuing certs for names like a.b.c.d.e.f. ...
example.com without some human review as well, anything weird deserves
a human pair of eyes.


On Fri, Jul 13, 2012 at 1:07 PM, Richard L. Barnes <rbarnes@bbn.com> wrote:
> Could you elaborate?  OPTION 2 wouldn't use prefixes in general, just for=
 the special case of wildcards.  It's effectively a label for the "*" in th=
e wildcard.  We could use the prefix _star if you want :)
>
> --Richard
>
>
> On Jul 12, 2012, at 10:05 PM, Phillip Hallam-Baker wrote:
>
>> The problems of using prefixed DNS labels are the reason that we
>> applied for the RR in the first place.
>>
>>
>> On Thu, Jul 12, 2012 at 9:45 PM, Richard L. Barnes <rbarnes@bbn.com> wro=
te:
>>>
>>> On Jul 12, 2012, at 9:30 PM, Scott Schmit wrote:
>>>
>>>> On Thu, Jul 12, 2012 at 09:20:49PM -0400, Richard L. Barnes wrote:
>>>>> That removes the complexity of the tree climbing and the ambiguity
>>>>> about delegation points. The only cost is if someone wants to registe=
r
>>>>> enough subdomains that provisioning CAAs is painful, but not enough
>>>>> for a wildcard CAA.
>>>>
>>>> Actually, that brings up an important question: how does a CA using CA=
A
>>>> know that it's allowed to issue a wildcard certificate?
>>>>
>>>> I was going to say using Richard's scheme, but I suppose it could appl=
y
>>>> to PHB's too.
>>>
>>> Well, the simple answer is "don't issue wildcard certificates" :)
>>>
>>> A few possibilities:
>>>
>>> OPTION 0: CA randomly samples N names matching the wildcard.  But that'=
s just silly.
>>>
>>> OPTION 1: CA checks for CAA at the label above the wildcard.
>>>
>>> In the RLB scheme, that would create the somewhat weird situation that =
a CAA at example.com would authorize an issuer to issue for *.example.com, =
but not for leaf.example.com specifically.  But in either case, the CA proc=
essing is deterministic; you just make one query.  In the PHB scheme, there=
's not that wrinkle in the semantics, but you have to do tree climbing even=
 in the simple case.
>>>
>>> OPTION 2: CA looks for CAA under a special label _wildcard.example.com.
>>>
>>> This avoids the conflict with example.com, in the sense that you can au=
thorize a wildcard without authorizing the domain itself.  It also resolves=
 the weird situation in the RLB scheme.
>>>
>>> My vote would be for OPTION 2.  Labels are cheap.
>>>
>>> --Richard
>>>
>>>
>>> _______________________________________________
>>> pkix mailing list
>>> pkix@ietf.org
>>> https://www.ietf.org/mailman/listinfo/pkix
>>
>>
>>
>> --
>> Website: http://hallambaker.com/
>



--=20
Website: http://hallambaker.com/

From rbarnes@bbn.com  Fri Jul 13 11:30:00 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 156BF11E8089 for <pkix@ietfa.amsl.com>; Fri, 13 Jul 2012 11:30:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.575
X-Spam-Level: 
X-Spam-Status: No, score=-106.575 tagged_above=-999 required=5 tests=[AWL=0.024, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0qPk9SwaO00W for <pkix@ietfa.amsl.com>; Fri, 13 Jul 2012 11:29:59 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id E397C11E8083 for <pkix@ietf.org>; Fri, 13 Jul 2012 11:29:58 -0700 (PDT)
Received: from [128.89.253.210] (port=60301) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SpkdO-000Epm-96; Fri, 13 Jul 2012 14:30:34 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <CAMm+LwiLkKoYjNy6W+j-GfcTmvgOMvHP9oB3VA5hVrxeaUAkNQ@mail.gmail.com>
Date: Fri, 13 Jul 2012 14:30:33 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <80A4DF55-2317-451A-BAED-23710C63EB54@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com> <CAMm+LwhQpNLu9ihvt9_-76MyA=poaKiqbFd2n+8Ni5dFFkb-+w@mail.gmail.com> <7681F7AF-E21A-4741-8D01-58A3CE1505A7@bbn.com> <CAMm+LwiAnqLXCOMP3bHy=Mx5-h-x89X7YoUz27SUvV=GwrxVgg@mail.gmail.com> <10DD7290-06CB-4D9B-9844-FDFB0AFCA605@bbn.com> <CAMm+LwhTMdp3W1pbVqnjRW7teWFNk9DvOYcERUhkX+5WUcrmJA@mail.gmail.com> <65AA0CF9-47E3-4930-9221-C39E789FE939@bbn.com> <CAMm+Lwg+pQdGjGKG+hnA7suiQyxpKTGkzhetoYD5y5y9RFUZaQ@mail.gmail.com> <61E183CD-BAB9-43F4-B57F-1941CB0C076B@bbn.com> <20120713013042.GA11010@odin.ulthar.us> <ABD45F3A-B781-44CC-855C-FA22D3F92A29@bbn.com> <CAMm+LwgbtqMGaCp08MGh2ZeAMjqZaxQrhDHCttbWgb_PHf43UQ@mail.gmail.com> <46C8B897-E62A-4998-855F-617FEEDC5C51@bbn.com> <CAMm+LwiLkKoYjNy6W+j-GfcTmvgOMvHP9oB3VA5hVrxeaUAkNQ@mail.gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
X-Mailer: Apple Mail (2.1278)
Cc: pkix@ietf.org
Subject: Re: [pkix] [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 18:30:00 -0000

If we were to build a system according to the policy you're specifying, =
then there wouldn't be any tree-climbing either -- you would just check =
for CAA at the public delegation point.  There would be no point to =
starting at the leaf.  I would still be a little queasy with that, given =
how ill-defined the notion of a public delegation point is, but at least =
it would be less complex than the current document.  And the semantic =
would be clearer: A CAA record would authorize an issuer to issue for =
any sub-domain.

I find all this discussion about the loose practices of CAs very =
interesting.  But I don't think we should design an authorization system =
around ill-defined concepts when a semantically cleaner version is =
available and just as easy to use.

--Richard


On Jul 13, 2012, at 2:14 PM, Phillip Hallam-Baker wrote:

> I don't see any value in distinguishing between the cases.
>=20
> As far as I am aware, all the CPs for public CAs mean that they
> validate a request for a cert for www.paypal.com by verifying that the
> applicant has the right to use paypal.com.
>=20
> The substructure of the DNS is not a concern of public CAs. Never has
> been. If an enterprise is large enough for the substructure to matter
> then they are going to be large enough to demand special casing.
>=20
>=20
> The only cases where this has ever been an issue are for weird cases
> like Oxford colleges which have DNS names like wolfson.ox.ac.uk which
> is a 4th level domain despite the fact that Wolfson has an independent
> existence outside the University. It has a separate royal charter for
> a start.
>=20
> But from a CA point of view this is all moot. What I am interested in
> if I get an application is that (1) the subject is the party they
> purport to be and (2) they have the right to use the network names
> they claim. So even though my college has an independent existence
> outside of Oxford University, they can only get a certificate if the
> holder of ox.ac.uk agrees that they have the right to use that name.
>=20
> The specification as written allows that Wolfson can specify their own
> certificate issue criteria for wolfson.ox.ac.uk if the OUCS allows
> them to run their own DNS or insert the relevant records. And
> otherwise OUCS can restrict their ability to obtain certs if they
> happen to choose.
>=20
>=20
> The specification as written has exactly the degree of flexibility
> intended to meet the real world use cases. Your proposed alternative
> does not. Nor is it possible to reliably obtain the desired semantics
> from your method using wildcards.
>=20
> And even if we could do it the way you propose, I cannot see any
> benefit to doing so. The cost of making multiple checks is
> insignificant in the context of a certificate issue process, even in
> the case of a corner case very long DNS name. Now I might well want to
> think twice about issuing certs for names like a.b.c.d.e.f. ...
> example.com without some human review as well, anything weird deserves
> a human pair of eyes.
>=20
>=20
> On Fri, Jul 13, 2012 at 1:07 PM, Richard L. Barnes <rbarnes@bbn.com> =
wrote:
>> Could you elaborate?  OPTION 2 wouldn't use prefixes in general, just =
for the special case of wildcards.  It's effectively a label for the "*" =
in the wildcard.  We could use the prefix _star if you want :)
>>=20
>> --Richard
>>=20
>>=20
>> On Jul 12, 2012, at 10:05 PM, Phillip Hallam-Baker wrote:
>>=20
>>> The problems of using prefixed DNS labels are the reason that we
>>> applied for the RR in the first place.
>>>=20
>>>=20
>>> On Thu, Jul 12, 2012 at 9:45 PM, Richard L. Barnes <rbarnes@bbn.com> =
wrote:
>>>>=20
>>>> On Jul 12, 2012, at 9:30 PM, Scott Schmit wrote:
>>>>=20
>>>>> On Thu, Jul 12, 2012 at 09:20:49PM -0400, Richard L. Barnes wrote:
>>>>>> That removes the complexity of the tree climbing and the =
ambiguity
>>>>>> about delegation points. The only cost is if someone wants to =
register
>>>>>> enough subdomains that provisioning CAAs is painful, but not =
enough
>>>>>> for a wildcard CAA.
>>>>>=20
>>>>> Actually, that brings up an important question: how does a CA =
using CAA
>>>>> know that it's allowed to issue a wildcard certificate?
>>>>>=20
>>>>> I was going to say using Richard's scheme, but I suppose it could =
apply
>>>>> to PHB's too.
>>>>=20
>>>> Well, the simple answer is "don't issue wildcard certificates" :)
>>>>=20
>>>> A few possibilities:
>>>>=20
>>>> OPTION 0: CA randomly samples N names matching the wildcard.  But =
that's just silly.
>>>>=20
>>>> OPTION 1: CA checks for CAA at the label above the wildcard.
>>>>=20
>>>> In the RLB scheme, that would create the somewhat weird situation =
that a CAA at example.com would authorize an issuer to issue for =
*.example.com, but not for leaf.example.com specifically.  But in either =
case, the CA processing is deterministic; you just make one query.  In =
the PHB scheme, there's not that wrinkle in the semantics, but you have =
to do tree climbing even in the simple case.
>>>>=20
>>>> OPTION 2: CA looks for CAA under a special label =
_wildcard.example.com.
>>>>=20
>>>> This avoids the conflict with example.com, in the sense that you =
can authorize a wildcard without authorizing the domain itself.  It also =
resolves the weird situation in the RLB scheme.
>>>>=20
>>>> My vote would be for OPTION 2.  Labels are cheap.
>>>>=20
>>>> --Richard
>>>>=20
>>>>=20
>>>> _______________________________________________
>>>> pkix mailing list
>>>> pkix@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/pkix
>>>=20
>>>=20
>>>=20
>>> --
>>> Website: http://hallambaker.com/
>>=20
>=20
>=20
>=20
> --=20
> Website: http://hallambaker.com/


From stephen.farrell@cs.tcd.ie  Fri Jul 13 14:47:00 2012
Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E3E1B11E80BF for <pkix@ietfa.amsl.com>; Fri, 13 Jul 2012 14:47:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.407
X-Spam-Level: 
X-Spam-Status: No, score=-102.407 tagged_above=-999 required=5 tests=[AWL=0.192, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Tc6LpoqAxzjs for <pkix@ietfa.amsl.com>; Fri, 13 Jul 2012 14:46:40 -0700 (PDT)
Received: from scss.tcd.ie (hermes.scss.tcd.ie [IPv6:2001:770:10:200:889f:cdff:fe8d:ccd2]) by ietfa.amsl.com (Postfix) with ESMTP id 0CCBA11E80AD for <pkix@ietf.org>; Fri, 13 Jul 2012 14:46:39 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by hermes.scss.tcd.ie (Postfix) with ESMTP id 7CDBD153C5E; Fri, 13 Jul 2012 22:47:16 +0100 (IST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; h= content-transfer-encoding:content-type:in-reply-to:references :subject:mime-version:user-agent:from:date:message-id:received :received:x-virus-scanned; s=cs; t=1342216035; bh=PnIAhWaJVbDcRv zgugtSHwRW0eXrdpG69Hfa52v1NaU=; b=GwELtZpj/hKQ9Zi5t7DYPtFFx4O1cN lgnUnAj84BZQT1QJa3iorWGEM+I86iKgXXjtmV6E54kp/uM5U9j2hzDcsxU4NRHX jc0NubTLsFKtKsTbHJyCEg5KkaacaMTn6syTY8P4PgpYo7lN519C1fMg71WgKpg+ m/+dXQ6EiWotLjObm0ZSKOni3WD7f3EgWGKZxfa7i7fzCY52wHxxzHOaZtu64ZWD GQ5jEAoStJbEy4fAsV4XV7vwrJcGT2F2yodl3+Miw2hAF7T+JwNszkvz2MnU4TVf zZNcbmND085AhxdWgsa3ZlKckS2io166gdSPITL5NgAkL8BVUMJiHK5g==
X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie
Received: from scss.tcd.ie ([127.0.0.1]) by localhost (scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10027) with ESMTP id PzQXoSQhcK90; Fri, 13 Jul 2012 22:47:15 +0100 (IST)
Received: from [10.87.48.11] (unknown [86.42.25.101]) by smtp.scss.tcd.ie (Postfix) with ESMTPSA id 8B7301714F0; Fri, 13 Jul 2012 22:47:12 +0100 (IST)
Message-ID: <50009760.1070708@cs.tcd.ie>
Date: Fri, 13 Jul 2012 22:47:12 +0100
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:13.0) Gecko/20120615 Thunderbird/13.0.1
MIME-Version: 1.0
To: "David A. Cooper" <david.cooper@nist.gov>
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com> <4FFF2AF5.4070007@nist.gov>
In-Reply-To: <4FFF2AF5.4070007@nist.gov>
X-Enigmail-Version: 1.4.3
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 13 Jul 2012 21:47:01 -0000

Folks,

FWIW, as a co-author of 5280, I think -05 of this would
be ok to move ahead.

Even though I do think that some of David's points might
be worth fixing, I'd say that shooting ahead and fixing
them during IETF LC or IESG evaluation would be fine in
this case, if its the case that only a couple of people
care.

Cheers,
S.

On 07/12/2012 08:52 PM, David A. Cooper wrote:
> On 06/30/2012 12:58 AM, Peter Yee wrote:
>> The updated draft has been posted.  Please let me know if further changes
>> are required.
> 
> Peter,
> 
> I disagree with the changes that you made for the new paragraph to
> appear at the end of Section 3.2.  The text that you included in the -05
> draft says:
> 
> |  In some cases, a self-signed certificate that does not contain a
> |  BasicConstraints extension (and thus is implicitly an EE certificate)
> |  is used to convey a public key. Such a certificate (i.e., a self-
> |  signed certificate not marked as a CA certificate) is not compatible
> |  with the path validation rules described in Section 6, or the
> |  definitions in the paragraph above. This document RECOMMENDS that
> |  self-signed certificates used to convey trust anchor data be marked
> |  (see Section 4.2.1.9) as CA certificates, but acknowledges that this
> |  convention is often not adopted in practice. Other uses of self-
> |  signed EE certificates are outside the scope of this specification.
> 
> The inclusion of this paragraph was prompted by a request from Sean
> Turner (http://www.ietf.org/mail-archive/web/pkix/current/msg29661.html)
> that was motivated by discussions in other working groups, such as
> DANE.  These discussions were about the use of self-signed certificates
> for purposes other than conveying trust anchor information, not about
> whether self-signed certificates used to convey trust anchor information
> should include a BasicConstraints extension.  Yet, the paragraph in the
> -05 draft, unlike in the -04 draft, is all about including
> BasicConstraints extensions in self-signed certificates used to convey
> trust anchor information. Section 4.2.1.9 of RFC 5280 already says that
> conforming CAs MUST include a BasicConstraints extension in self-signed
> certificates used to convey trust anchor information:
> 
>    Conforming CAs MUST include [the BasicConstraints]
>    extension in all CA certificates that contain public keys
>    used to validate digital signatures on certificates and
>    MUST mark the extension as critical in such certificates.
> 
> So, adding a sentence to Section 3.2 that RECOMMENDS including a
> BasicConstraints extension would be inconsistent.  So, why not remove
> all the text about whether a self-signed certificates used to convey
> trust anchor information should include a BasicConstraints extension and
> replace it with text (such as was in the -04 draft) that addresses the
> use of self-signed certificates for purposes other than conveying trust
> anchor information?
> 
> I also believe that the proposed text in the -05 draft is wrong for
> several other reasons.
> 
> The text states that a self-signed certificate that does not contain a
> BasicConstraints extension is implicitly an EE certificate.  Does this
> mean that all version 1 certificates are implicitly EE certificates? 
> Additionally, the text goes on to talk about the use of these
> certificates to convey trust anchor information.  However, according to
> X.509 an EE certificate is a certificate issued to an end entity, and an
> end entity is a certificate subject that uses its private key for
> purposes other than signing certificates.  So, if the subject of the
> self-signed certificate signs certificates (and if it didn't then why
> would anyone be using the its self-signed certificate as a trust anchor
> for path validation) then it is not an end entity and the self-signed
> certificate is not an EE certificate.
> 
> The proposed paragraph then goes on to incorrectly state that the use of
> a self-signed certificate that does not contain a BasicConstraints
> extension as the source of trust anchor information is not compatible
> with the path validation rules specified in Section 6 of RFC 5280. 
> However, Section 6 of RFC 5280 simply says that trust anchor information
> consists of a name and a public key, and that this information may be
> obtained from a self-signed certificate.  So, there is no basis for an
> assertion that it is incompatible with Section 6 of RFC 5280 to obtain
> trust anchor information from a self-signed certificate that does not
> include a BasicConstraints extension.
> 
> The next sentence in the proposed paragraph says that the document
> acknowledges that the convention of including a BasicConstraints
> extension in a self-signed certificate used to convey trust anchor
> information is often not adopted in practice.  What is the basis of this
> assertion?  Can you provide examples of self-signed certificates used to
> convey trust anchor information that do not include BasicConstraints
> extensions (and not just the names of software products that are capable
> of generating self-signed certificate without BasicConstraints extensions)?
> 
> I haven't even addressed the fact that a certificate could include a
> BasicConstraints extension, but set the cA flag to FALSE.
> 
> RFC 5280 already specifies what information conforming CAs need to
> include in certificates, including self-signed certificates, so there is
> no need to add this paragraph to address that.  So, why not revert to
> the text that was in the -04 draft, which addressed the issue that was
> supposed to be covered by this new text, the use of self-signed
> certificate for purposes other than conveying trust anchor information,
> rather than the text in this draft?
> 
> Dave
> 
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
> 
> 


From housley@vigilsec.com  Sat Jul 14 12:28:24 2012
Return-Path: <housley@vigilsec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B2DF21F853B for <pkix@ietfa.amsl.com>; Sat, 14 Jul 2012 12:28:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.463
X-Spam-Level: 
X-Spam-Status: No, score=-102.463 tagged_above=-999 required=5 tests=[AWL=0.136, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e6A2A8oRkoKF for <pkix@ietfa.amsl.com>; Sat, 14 Jul 2012 12:28:23 -0700 (PDT)
Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id 3F33821F8513 for <pkix@ietf.org>; Sat, 14 Jul 2012 12:28:23 -0700 (PDT)
Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id 94C1CF2403B for <pkix@ietf.org>; Sat, 14 Jul 2012 15:29:06 -0400 (EDT)
X-Virus-Scanned: amavisd-new at smetech.net
Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id Wu1pcW9V87pN for <pkix@ietf.org>; Sat, 14 Jul 2012 15:28:58 -0400 (EDT)
Received: from [192.168.2.100] (pool-96-255-37-162.washdc.fios.verizon.net [96.255.37.162]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id E83CAF2403A for <pkix@ietf.org>; Sat, 14 Jul 2012 15:29:01 -0400 (EDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1084)
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <4FFF2AF5.4070007@nist.gov>
Date: Sat, 14 Jul 2012 15:28:57 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <3FACEB65-2BEA-4CC3-8E46-E175FD41DC47@vigilsec.com>
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com> <4FFF2AF5.4070007@nist.gov>
To: IETF PKIX <pkix@ietf.org>
X-Mailer: Apple Mail (2.1084)
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 14 Jul 2012 19:28:24 -0000

The path validation algorithm in Section 6 of RFC 5280 starts with a =
trust anchor, and self-signed certificates are a convenient way to =
distribute such trust anchors.  However, RFC 5280 does not, and should =
not, impose any particular approach to trust anchor distribution.  This =
proposed clarification RECOMMENDS that the self-signed certificate =
include the basic constraints extension with the CA-bit set.  Nothing in =
Section 6 justifies this recommendation.

In fact, Section 6 is quite clear to say that it does not impose any =
requirements on self-signed certificates that are used to distribute a =
trust anchor:

   When the trust anchor is provided in the form of a self-signed
   certificate, this self-signed certificate is not included as part of
   the prospective certification path.  Information about trust anchors
   is provided as inputs to the certification path validation algorithm
   (Section 6.1.1).

Russ


On 07/12/2012 08:52 PM, David A. Cooper wrote:
> On 06/30/2012 12:58 AM, Peter Yee wrote:
>> The updated draft has been posted.  Please let me know if further =
changes
>> are required.
>=20
> Peter,
>=20
> I disagree with the changes that you made for the new paragraph to
> appear at the end of Section 3.2.  The text that you included in the =
-05
> draft says:
>=20
> |  In some cases, a self-signed certificate that does not contain a
> |  BasicConstraints extension (and thus is implicitly an EE =
certificate)
> |  is used to convey a public key. Such a certificate (i.e., a self-
> |  signed certificate not marked as a CA certificate) is not =
compatible
> |  with the path validation rules described in Section 6, or the
> |  definitions in the paragraph above. This document RECOMMENDS that
> |  self-signed certificates used to convey trust anchor data be marked
> |  (see Section 4.2.1.9) as CA certificates, but acknowledges that =
this
> |  convention is often not adopted in practice. Other uses of self-
> |  signed EE certificates are outside the scope of this specification.
>=20
> The inclusion of this paragraph was prompted by a request from Sean
> Turner =
(http://www.ietf.org/mail-archive/web/pkix/current/msg29661.html)
> that was motivated by discussions in other working groups, such as
> DANE.  These discussions were about the use of self-signed =
certificates
> for purposes other than conveying trust anchor information, not about
> whether self-signed certificates used to convey trust anchor =
information
> should include a BasicConstraints extension.  Yet, the paragraph in =
the
> -05 draft, unlike in the -04 draft, is all about including
> BasicConstraints extensions in self-signed certificates used to convey
> trust anchor information. Section 4.2.1.9 of RFC 5280 already says =
that
> conforming CAs MUST include a BasicConstraints extension in =
self-signed
> certificates used to convey trust anchor information:
>=20
>   Conforming CAs MUST include [the BasicConstraints]
>   extension in all CA certificates that contain public keys
>   used to validate digital signatures on certificates and
>   MUST mark the extension as critical in such certificates.
>=20
> So, adding a sentence to Section 3.2 that RECOMMENDS including a
> BasicConstraints extension would be inconsistent.  So, why not remove
> all the text about whether a self-signed certificates used to convey
> trust anchor information should include a BasicConstraints extension =
and
> replace it with text (such as was in the -04 draft) that addresses the
> use of self-signed certificates for purposes other than conveying =
trust
> anchor information?
>=20
> I also believe that the proposed text in the -05 draft is wrong for
> several other reasons.
>=20
> The text states that a self-signed certificate that does not contain a
> BasicConstraints extension is implicitly an EE certificate.  Does this
> mean that all version 1 certificates are implicitly EE certificates?=20=

> Additionally, the text goes on to talk about the use of these
> certificates to convey trust anchor information.  However, according =
to
> X.509 an EE certificate is a certificate issued to an end entity, and =
an
> end entity is a certificate subject that uses its private key for
> purposes other than signing certificates.  So, if the subject of the
> self-signed certificate signs certificates (and if it didn't then why
> would anyone be using the its self-signed certificate as a trust =
anchor
> for path validation) then it is not an end entity and the self-signed
> certificate is not an EE certificate.
>=20
> The proposed paragraph then goes on to incorrectly state that the use =
of
> a self-signed certificate that does not contain a BasicConstraints
> extension as the source of trust anchor information is not compatible
> with the path validation rules specified in Section 6 of RFC 5280.=20
> However, Section 6 of RFC 5280 simply says that trust anchor =
information
> consists of a name and a public key, and that this information may be
> obtained from a self-signed certificate.  So, there is no basis for an
> assertion that it is incompatible with Section 6 of RFC 5280 to obtain
> trust anchor information from a self-signed certificate that does not
> include a BasicConstraints extension.
>=20
> The next sentence in the proposed paragraph says that the document
> acknowledges that the convention of including a BasicConstraints
> extension in a self-signed certificate used to convey trust anchor
> information is often not adopted in practice.  What is the basis of =
this
> assertion?  Can you provide examples of self-signed certificates used =
to
> convey trust anchor information that do not include BasicConstraints
> extensions (and not just the names of software products that are =
capable
> of generating self-signed certificate without BasicConstraints =
extensions)?
>=20
> I haven't even addressed the fact that a certificate could include a
> BasicConstraints extension, but set the cA flag to FALSE.
>=20
> RFC 5280 already specifies what information conforming CAs need to
> include in certificates, including self-signed certificates, so there =
is
> no need to add this paragraph to address that.  So, why not revert to
> the text that was in the -04 draft, which addressed the issue that was
> supposed to be covered by this new text, the use of self-signed
> certificate for purposes other than conveying trust anchor =
information,
> rather than the text in this draft?
>=20
> Dave
>=20
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>=20
>=20

_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From DPKemp@missi.ncsc.mil  Mon Jul 16 05:28:16 2012
Return-Path: <DPKemp@missi.ncsc.mil>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E527321F8783 for <pkix@ietfa.amsl.com>; Mon, 16 Jul 2012 05:28:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BjquHQjC9kaZ for <pkix@ietfa.amsl.com>; Mon, 16 Jul 2012 05:28:15 -0700 (PDT)
Received: from stingray.missi.ncsc.mil (stingray.missi.ncsc.mil [144.51.50.20]) by ietfa.amsl.com (Postfix) with ESMTP id 35D9B21F85DB for <pkix@ietf.org>; Mon, 16 Jul 2012 05:28:12 -0700 (PDT)
Received: from clavin.missi.ncsc.mil (clavin.missi.ncsc.mil [144.51.60.17]) by stingray.missi.ncsc.mil with ESMTP id q6GCStoc062922 for <pkix@ietf.org>; Mon, 16 Jul 2012 08:28:55 -0400 (EDT)
Received: from odysseus.missi.ncsc.mil (144.51.60.172) by clavin.missi.ncsc.mil (144.51.60.17) with Microsoft SMTP Server (TLS) id 14.1.355.2; Mon, 16 Jul 2012 08:28:54 -0400
Received: from clavin.missi.ncsc.mil ([144.51.60.17]) by odysseus.missi.ncsc.mil ([144.51.60.172]) with mapi id 14.01.0355.002; Mon, 16 Jul 2012 08:28:54 -0400
From: "Kemp, David P." <DPKemp@missi.ncsc.mil>
To: IETF PKIX <pkix@ietf.org>
Thread-Topic: [pkix] new version of 5280 clarifications
Thread-Index: AQHNYfbp5oA/Vygi10un+/dKWC7KYpcr1ZEQ
Date: Mon, 16 Jul 2012 12:28:53 +0000
Message-ID: <5B1D7E570380A64989D4C069F7D14BC80F08A807@clavin.missi.ncsc.mil>
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com>	<4FFF2AF5.4070007@nist.gov> <3FACEB65-2BEA-4CC3-8E46-E175FD41DC47@vigilsec.com>
In-Reply-To: <3FACEB65-2BEA-4CC3-8E46-E175FD41DC47@vigilsec.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [144.51.54.46]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Jul 2012 12:28:17 -0000

The quoted paragraph from Section 6 clearly says that the self-signed certi=
ficate is not included in the path.  It does not prohibit a profile from im=
posing requirements on data structures used to distribute trust anchor info=
rmation in the name of consistency of understanding across CAs and applicat=
ions, in the case where such information is distributed in the form of cert=
ificates.  TAMP imposes such requirements on its data structures, 5280 may =
also do so.  In light of the confusion and resulting extended discussion, i=
t seems reasonable to mandate a distinction between certificates containing=
 trust anchors and those which applications should not accept as trust anch=
ors.

Dave


-----Original Message-----
From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of Rus=
s Housley
Sent: Saturday, July 14, 2012 3:29 PM
To: IETF PKIX
Subject: Re: [pkix] new version of 5280 clarifications

The path validation algorithm in Section 6 of RFC 5280 starts with a trust =
anchor, and self-signed certificates are a convenient way to distribute suc=
h trust anchors.  However, RFC 5280 does not, and should not, impose any pa=
rticular approach to trust anchor distribution.  This proposed clarificatio=
n RECOMMENDS that the self-signed certificate include the basic constraints=
 extension with the CA-bit set.  Nothing in Section 6 justifies this recomm=
endation.

In fact, Section 6 is quite clear to say that it does not impose any requir=
ements on self-signed certificates that are used to distribute a trust anch=
or:

   When the trust anchor is provided in the form of a self-signed
   certificate, this self-signed certificate is not included as part of
   the prospective certification path.  Information about trust anchors
   is provided as inputs to the certification path validation algorithm
   (Section 6.1.1).

Russ


On 07/12/2012 08:52 PM, David A. Cooper wrote:
> On 06/30/2012 12:58 AM, Peter Yee wrote:
>> The updated draft has been posted.  Please let me know if further=20
>> changes are required.
>=20
> Peter,
>=20
> I disagree with the changes that you made for the new paragraph to=20
> appear at the end of Section 3.2.  The text that you included in the=20
> -05 draft says:
>=20
> |  In some cases, a self-signed certificate that does not contain a =20
> | BasicConstraints extension (and thus is implicitly an EE=20
> | certificate)  is used to convey a public key. Such a certificate=20
> | (i.e., a self-  signed certificate not marked as a CA certificate)=20
> | is not compatible  with the path validation rules described in=20
> | Section 6, or the  definitions in the paragraph above. This document=20
> | RECOMMENDS that  self-signed certificates used to convey trust=20
> | anchor data be marked  (see Section 4.2.1.9) as CA certificates, but=20
> | acknowledges that this  convention is often not adopted in practice.=20
> | Other uses of self-  signed EE certificates are outside the scope of th=
is specification.
>=20
> The inclusion of this paragraph was prompted by a request from Sean=20
> Turner=20
> (http://www.ietf.org/mail-archive/web/pkix/current/msg29661.html)
> that was motivated by discussions in other working groups, such as=20
> DANE.  These discussions were about the use of self-signed=20
> certificates for purposes other than conveying trust anchor=20
> information, not about whether self-signed certificates used to convey=20
> trust anchor information should include a BasicConstraints extension. =20
> Yet, the paragraph in the
> -05 draft, unlike in the -04 draft, is all about including=20
> BasicConstraints extensions in self-signed certificates used to convey=20
> trust anchor information. Section 4.2.1.9 of RFC 5280 already says=20
> that conforming CAs MUST include a BasicConstraints extension in=20
> self-signed certificates used to convey trust anchor information:
>=20
>   Conforming CAs MUST include [the BasicConstraints]
>   extension in all CA certificates that contain public keys
>   used to validate digital signatures on certificates and
>   MUST mark the extension as critical in such certificates.
>=20
> So, adding a sentence to Section 3.2 that RECOMMENDS including a=20
> BasicConstraints extension would be inconsistent.  So, why not remove=20
> all the text about whether a self-signed certificates used to convey=20
> trust anchor information should include a BasicConstraints extension=20
> and replace it with text (such as was in the -04 draft) that addresses=20
> the use of self-signed certificates for purposes other than conveying=20
> trust anchor information?
>=20
> I also believe that the proposed text in the -05 draft is wrong for=20
> several other reasons.
>=20
> The text states that a self-signed certificate that does not contain a=20
> BasicConstraints extension is implicitly an EE certificate.  Does this=20
> mean that all version 1 certificates are implicitly EE certificates?
> Additionally, the text goes on to talk about the use of these=20
> certificates to convey trust anchor information.  However, according=20
> to
> X.509 an EE certificate is a certificate issued to an end entity, and=20
> an end entity is a certificate subject that uses its private key for=20
> purposes other than signing certificates.  So, if the subject of the=20
> self-signed certificate signs certificates (and if it didn't then why=20
> would anyone be using the its self-signed certificate as a trust=20
> anchor for path validation) then it is not an end entity and the=20
> self-signed certificate is not an EE certificate.
>=20
> The proposed paragraph then goes on to incorrectly state that the use=20
> of a self-signed certificate that does not contain a BasicConstraints=20
> extension as the source of trust anchor information is not compatible=20
> with the path validation rules specified in Section 6 of RFC 5280.
> However, Section 6 of RFC 5280 simply says that trust anchor=20
> information consists of a name and a public key, and that this=20
> information may be obtained from a self-signed certificate.  So, there=20
> is no basis for an assertion that it is incompatible with Section 6 of=20
> RFC 5280 to obtain trust anchor information from a self-signed=20
> certificate that does not include a BasicConstraints extension.
>=20
> The next sentence in the proposed paragraph says that the document=20
> acknowledges that the convention of including a BasicConstraints=20
> extension in a self-signed certificate used to convey trust anchor=20
> information is often not adopted in practice.  What is the basis of=20
> this assertion?  Can you provide examples of self-signed certificates=20
> used to convey trust anchor information that do not include=20
> BasicConstraints extensions (and not just the names of software=20
> products that are capable of generating self-signed certificate without B=
asicConstraints extensions)?
>=20
> I haven't even addressed the fact that a certificate could include a=20
> BasicConstraints extension, but set the cA flag to FALSE.
>=20
> RFC 5280 already specifies what information conforming CAs need to=20
> include in certificates, including self-signed certificates, so there=20
> is no need to add this paragraph to address that.  So, why not revert=20
> to the text that was in the -04 draft, which addressed the issue that=20
> was supposed to be covered by this new text, the use of self-signed=20
> certificate for purposes other than conveying trust anchor=20
> information, rather than the text in this draft?
>=20
> Dave
>=20
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>=20
>=20

_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix
_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From housley@vigilsec.com  Mon Jul 16 05:30:27 2012
Return-Path: <housley@vigilsec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB48321F87F2 for <pkix@ietfa.amsl.com>; Mon, 16 Jul 2012 05:30:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level: 
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jFz7u-87SJwx for <pkix@ietfa.amsl.com>; Mon, 16 Jul 2012 05:30:14 -0700 (PDT)
Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id CEC6E21F87F1 for <pkix@ietf.org>; Mon, 16 Jul 2012 05:30:13 -0700 (PDT)
Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id 50F14F2403B; Mon, 16 Jul 2012 08:31:04 -0400 (EDT)
X-Virus-Scanned: amavisd-new at smetech.net
Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id KAP1L6QnMZNi; Mon, 16 Jul 2012 08:30:56 -0400 (EDT)
Received: from [172.16.31.119] (wsip-70-164-41-66.dc.dc.cox.net [70.164.41.66]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id F2DB7F2403A; Mon, 16 Jul 2012 08:31:02 -0400 (EDT)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset=us-ascii
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <5B1D7E570380A64989D4C069F7D14BC80F08A807@clavin.missi.ncsc.mil>
Date: Mon, 16 Jul 2012 08:30:56 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <3FA58EF7-FF62-4F86-93A3-F823FA114337@vigilsec.com>
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com>	<4FFF2AF5.4070007@nist.gov> <3FACEB65-2BEA-4CC3-8E46-E175FD41DC47@vigilsec.com> <5B1D7E570380A64989D4C069F7D14BC80F08A807@clavin.missi.ncsc.mil>
To: "Kemp, David P." <DPKemp@missi.ncsc.mil>
X-Mailer: Apple Mail (2.1084)
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Jul 2012 12:30:28 -0000

Dave:

Correct, but the document we are discussing is about clarifications to =
RFC 5280.

Russ


On Jul 16, 2012, at 8:28 AM, Kemp, David P. wrote:

> The quoted paragraph from Section 6 clearly says that the self-signed =
certificate is not included in the path.  It does not prohibit a profile =
from imposing requirements on data structures used to distribute trust =
anchor information in the name of consistency of understanding across =
CAs and applications, in the case where such information is distributed =
in the form of certificates.  TAMP imposes such requirements on its data =
structures, 5280 may also do so.  In light of the confusion and =
resulting extended discussion, it seems reasonable to mandate a =
distinction between certificates containing trust anchors and those =
which applications should not accept as trust anchors.
>=20
> Dave
>=20
>=20
> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf =
Of Russ Housley
> Sent: Saturday, July 14, 2012 3:29 PM
> To: IETF PKIX
> Subject: Re: [pkix] new version of 5280 clarifications
>=20
> The path validation algorithm in Section 6 of RFC 5280 starts with a =
trust anchor, and self-signed certificates are a convenient way to =
distribute such trust anchors.  However, RFC 5280 does not, and should =
not, impose any particular approach to trust anchor distribution.  This =
proposed clarification RECOMMENDS that the self-signed certificate =
include the basic constraints extension with the CA-bit set.  Nothing in =
Section 6 justifies this recommendation.
>=20
> In fact, Section 6 is quite clear to say that it does not impose any =
requirements on self-signed certificates that are used to distribute a =
trust anchor:
>=20
>   When the trust anchor is provided in the form of a self-signed
>   certificate, this self-signed certificate is not included as part of
>   the prospective certification path.  Information about trust anchors
>   is provided as inputs to the certification path validation algorithm
>   (Section 6.1.1).
>=20
> Russ
>=20
>=20
> On 07/12/2012 08:52 PM, David A. Cooper wrote:
>> On 06/30/2012 12:58 AM, Peter Yee wrote:
>>> The updated draft has been posted.  Please let me know if further=20
>>> changes are required.
>>=20
>> Peter,
>>=20
>> I disagree with the changes that you made for the new paragraph to=20
>> appear at the end of Section 3.2.  The text that you included in the=20=

>> -05 draft says:
>>=20
>> |  In some cases, a self-signed certificate that does not contain a =20=

>> | BasicConstraints extension (and thus is implicitly an EE=20
>> | certificate)  is used to convey a public key. Such a certificate=20
>> | (i.e., a self-  signed certificate not marked as a CA certificate)=20=

>> | is not compatible  with the path validation rules described in=20
>> | Section 6, or the  definitions in the paragraph above. This =
document=20
>> | RECOMMENDS that  self-signed certificates used to convey trust=20
>> | anchor data be marked  (see Section 4.2.1.9) as CA certificates, =
but=20
>> | acknowledges that this  convention is often not adopted in =
practice.=20
>> | Other uses of self-  signed EE certificates are outside the scope =
of this specification.
>>=20
>> The inclusion of this paragraph was prompted by a request from Sean=20=

>> Turner=20
>> (http://www.ietf.org/mail-archive/web/pkix/current/msg29661.html)
>> that was motivated by discussions in other working groups, such as=20
>> DANE.  These discussions were about the use of self-signed=20
>> certificates for purposes other than conveying trust anchor=20
>> information, not about whether self-signed certificates used to =
convey=20
>> trust anchor information should include a BasicConstraints extension. =
=20
>> Yet, the paragraph in the
>> -05 draft, unlike in the -04 draft, is all about including=20
>> BasicConstraints extensions in self-signed certificates used to =
convey=20
>> trust anchor information. Section 4.2.1.9 of RFC 5280 already says=20
>> that conforming CAs MUST include a BasicConstraints extension in=20
>> self-signed certificates used to convey trust anchor information:
>>=20
>>  Conforming CAs MUST include [the BasicConstraints]
>>  extension in all CA certificates that contain public keys
>>  used to validate digital signatures on certificates and
>>  MUST mark the extension as critical in such certificates.
>>=20
>> So, adding a sentence to Section 3.2 that RECOMMENDS including a=20
>> BasicConstraints extension would be inconsistent.  So, why not remove=20=

>> all the text about whether a self-signed certificates used to convey=20=

>> trust anchor information should include a BasicConstraints extension=20=

>> and replace it with text (such as was in the -04 draft) that =
addresses=20
>> the use of self-signed certificates for purposes other than conveying=20=

>> trust anchor information?
>>=20
>> I also believe that the proposed text in the -05 draft is wrong for=20=

>> several other reasons.
>>=20
>> The text states that a self-signed certificate that does not contain =
a=20
>> BasicConstraints extension is implicitly an EE certificate.  Does =
this=20
>> mean that all version 1 certificates are implicitly EE certificates?
>> Additionally, the text goes on to talk about the use of these=20
>> certificates to convey trust anchor information.  However, according=20=

>> to
>> X.509 an EE certificate is a certificate issued to an end entity, and=20=

>> an end entity is a certificate subject that uses its private key for=20=

>> purposes other than signing certificates.  So, if the subject of the=20=

>> self-signed certificate signs certificates (and if it didn't then why=20=

>> would anyone be using the its self-signed certificate as a trust=20
>> anchor for path validation) then it is not an end entity and the=20
>> self-signed certificate is not an EE certificate.
>>=20
>> The proposed paragraph then goes on to incorrectly state that the use=20=

>> of a self-signed certificate that does not contain a BasicConstraints=20=

>> extension as the source of trust anchor information is not compatible=20=

>> with the path validation rules specified in Section 6 of RFC 5280.
>> However, Section 6 of RFC 5280 simply says that trust anchor=20
>> information consists of a name and a public key, and that this=20
>> information may be obtained from a self-signed certificate.  So, =
there=20
>> is no basis for an assertion that it is incompatible with Section 6 =
of=20
>> RFC 5280 to obtain trust anchor information from a self-signed=20
>> certificate that does not include a BasicConstraints extension.
>>=20
>> The next sentence in the proposed paragraph says that the document=20
>> acknowledges that the convention of including a BasicConstraints=20
>> extension in a self-signed certificate used to convey trust anchor=20
>> information is often not adopted in practice.  What is the basis of=20=

>> this assertion?  Can you provide examples of self-signed certificates=20=

>> used to convey trust anchor information that do not include=20
>> BasicConstraints extensions (and not just the names of software=20
>> products that are capable of generating self-signed certificate =
without BasicConstraints extensions)?
>>=20
>> I haven't even addressed the fact that a certificate could include a=20=

>> BasicConstraints extension, but set the cA flag to FALSE.
>>=20
>> RFC 5280 already specifies what information conforming CAs need to=20
>> include in certificates, including self-signed certificates, so there=20=

>> is no need to add this paragraph to address that.  So, why not revert=20=

>> to the text that was in the -04 draft, which addressed the issue that=20=

>> was supposed to be covered by this new text, the use of self-signed=20=

>> certificate for purposes other than conveying trust anchor=20
>> information, rather than the text in this draft?
>>=20
>> Dave
>>=20
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>>=20
>>=20
>=20
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix


From hallam@gmail.com  Mon Jul 16 10:47:16 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D7C4B11E826A for <pkix@ietfa.amsl.com>; Mon, 16 Jul 2012 10:47:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.088
X-Spam-Level: 
X-Spam-Status: No, score=-5.088 tagged_above=-999 required=5 tests=[AWL=-1.489, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9HsnD4UVFCMP for <pkix@ietfa.amsl.com>; Mon, 16 Jul 2012 10:47:16 -0700 (PDT)
Received: from mail-vb0-f44.google.com (mail-vb0-f44.google.com [209.85.212.44]) by ietfa.amsl.com (Postfix) with ESMTP id 146D911E8158 for <pkix@ietf.org>; Mon, 16 Jul 2012 10:47:15 -0700 (PDT)
Received: by vbbez10 with SMTP id ez10so4051885vbb.31 for <pkix@ietf.org>; Mon, 16 Jul 2012 10:48:00 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=/6VM4n2vFb9GC6+JZB7cp+CBqEmNNezelWPpPLBe62E=; b=Aerp9IhfjHsXxTL7f4E8I60t6CUtDkU82pc6BShw+cXyPZ/l/GM2ji8I/jecMW9huO KZEwNedi/3tnyXtdcFm8fB415e9GwdKKo2k6DGEg+Uh7EY1DLQ5nQ71PTa6N92SJ6+Xc 3vO/ZsRuSc2rrp4Yu2AsyiFXWrxUvg0wPvexSTkl3UHJvfuyb167sxpwr0OJcZXAl1gW DQeLMFV7x1MixHwob52Xbx6KgwkjO1bv2tip3ee0YtdRHmENp3SB2dVdIasWCbKZKuzB tI1IUnuGLrR6sBN2XYG2g+8uIxPdi/GhdhKmBlNXnMwPu+oBGXVlX+PbZ+m2MIh3NEfe c8uQ==
MIME-Version: 1.0
Received: by 10.221.10.73 with SMTP id oz9mr5699925vcb.33.1342460880832; Mon, 16 Jul 2012 10:48:00 -0700 (PDT)
Received: by 10.58.161.139 with HTTP; Mon, 16 Jul 2012 10:48:00 -0700 (PDT)
In-Reply-To: <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com>
References: <3E091F6B-E823-4E0F-B34C-EB381C4F1F0F@bbn.com> <568CC74F-F74C-4157-BDBD-5567A0555E56@bbn.com>
Date: Mon, 16 Jul 2012 13:48:00 -0400
Message-ID: <CAMm+LwgzW50LgGbeWfHpHUu-9muWEEmOpj0oUvqAeHQqvV2kHQ@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Cc: pkix@ietf.org
Subject: Re: [pkix] Fwd: [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Jul 2012 17:47:17 -0000

CAA-11 is pending. All the changes made are strictly
editorial/wordsmithing. There has been no change to the semantics.


I have not changed the tree climbing algorithm but I have responded to
most/all of the other points raised.


Here is the change list

Mention of Dane in the introduction:

        Like the TLSA record defined in DNS-Based Authentication of
Named Entities (DANE)
        [DANE], CAA records are used as a part of a mechanism for checking PKIX
        certificate data. The distinction between the two specifications is that
        CAA records specify a authorization control to be performed by
a certificate
        issuer before issue of a certificate and TLSA records specify
a verification
        control to be performed by a Relying Party after the
certificate is issued.

If DANE ends up in a blackhole for some reason then we can take this
statement out and DANE can mention CAA instead. But that does not look
likely to happen as DANE is in the editor queue already.

Since these are both going to be PROPOSED (or is it draft?) standards
this time round, I think that is the limit for what we need to do at
this stage. Lets see how both of these mechanisms work on their own
before we work out how they might interoperate in detail.


Section 5.4 criminal sanctions - I just removed the last sentence
entirely as superfluous and changed the wording slightly. I think it
is obvious enough that lying to your customers is a bad business model
for an Internet firm in the trust business.

        In practice, such an attack would be of minimal effect since
        any competent competitor that found itself unable to issue certificates
        due to lack of support for a property marked critical SHOULD
        investigate the cause and report the reason to the customer
        who will thus discover that they had been deceived.


Express written authority -> Explicit Authority

The issue property entry authorizes the holder of the
              domain name &lt;Issuer Domain Name&gt; or a party acting
under the
              explicit authority of the holder of that domain name to issue
              certificates for the domain in which the property is published.


Mention of DANE in the security considerations, I bumped the part
about non-observance by CAs out into an explicit subsection and
reworded the intro part thus:

.      <t>
        CAA Records assert a security policy that the holder of a domain name
        wishes to be observed by certificate issuers. The effectiveness of CAA
        records as an access control mechanism is thus dependent on
observance of CAA
        constraints by issuers.
      </t>
      <t>
        The objective of the CAA record properties described in this document is
        to reduce the risk of certificate mis-issue rather than avoid
reliance on
        a certificate that has ben mis-issued.
        DANE <xref target="DANE"/> describes a mechanism for avoiding reliance
        on mis-issued certificates.
      </t>

Certificate Policy Statement -> Certificate Policy

This was just a typo.

Mention of RID in section 2.1 - done


'observance by CAs' - removed almost everything and replaced with:

      <section title="Non-Compliance by Certification Authority">
        <t>
          CAA records offer CAs a cost-effective means of mitigating the risk
          of certificate mis-issue: The cost of implementing CAA checks is
          very small and the potential costs of a mis-issue event include the
          removal of an embedded trust anchor.
        </t>

I don't think any more than that is really needed.

From internet-drafts@ietf.org  Mon Jul 16 11:18:37 2012
Return-Path: <internet-drafts@ietf.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E32F11E819D; Mon, 16 Jul 2012 11:18:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.448
X-Spam-Level: 
X-Spam-Status: No, score=-102.448 tagged_above=-999 required=5 tests=[AWL=0.151, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pl7XSxRWmlzr; Mon, 16 Jul 2012 11:18:36 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 13C6011E8272; Mon, 16 Jul 2012 11:18:34 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.30p3
Message-ID: <20120716181834.3296.68078.idtracker@ietfa.amsl.com>
Date: Mon, 16 Jul 2012 11:18:34 -0700
Cc: pkix@ietf.org
Subject: [pkix] I-D Action: draft-ietf-pkix-caa-11.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Jul 2012 18:18:37 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Public-Key Infrastructure (X.509) Working=
 Group of the IETF.

	Title           : DNS Certification Authority Authorization (CAA) Resource=
 Record
	Author(s)       : Phillip Hallam-Baker
                          Rob Stradling
	Filename        : draft-ietf-pkix-caa-11.txt
	Pages           : 16
	Date            : 2012-07-16

Abstract:
   The Certification Authority Authorization (CAA) DNS Resource Record
   allows a DNS domain name holder to specify one or more Certification
   Authorities (CAs) authorized to issue certificates for that domain.
   CAA resource records allow a public Certification Authority to
   implement additional controls to reduce the risk of unintended
   certificate mis-issue.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-pkix-caa

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-pkix-caa-11

A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-pkix-caa-11


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From mrex@sap.com  Mon Jul 16 16:48:42 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00FA911E8295 for <pkix@ietfa.amsl.com>; Mon, 16 Jul 2012 16:48:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.249
X-Spam-Level: 
X-Spam-Status: No, score=-10.249 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Opfe27JSqhlJ for <pkix@ietfa.amsl.com>; Mon, 16 Jul 2012 16:48:41 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id E997511E808A for <pkix@ietf.org>; Mon, 16 Jul 2012 16:48:40 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id q6GNnHAk005875 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 17 Jul 2012 01:49:18 +0200 (MEST)
In-Reply-To: <CAMm+LwgzW50LgGbeWfHpHUu-9muWEEmOpj0oUvqAeHQqvV2kHQ@mail.gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
Date: Tue, 17 Jul 2012 01:49:17 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120716234917.A82641A0D4@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: pkix@ietf.org
Subject: Re: [pkix] Fwd: [Gen-art] Gen-ART review of draft-ietf-pkix-caa-10
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 16 Jul 2012 23:48:42 -0000

Phillip Hallam-Baker wrote:
> 
> Here is the change list
> 
> Mention of Dane in the introduction:
> 
>    Like the TLSA record defined in DNS-Based Authentication of
>    Named Entities (DANE) [DANE], CAA records are used as a part
>    of a mechanism for checking PKIX certificate data. The
>    distinction between the two specifications is that CAA records
>    specify a authorization control to be performed by a certificate
>    issuer before issue of a certificate and TLSA records specify
>    a verification control to be performed by a Relying Party after the
>    certificate is issued.

Personally, I believe that CAA should *not* be "liked" to DANE, because
it is very unlike DANE TLSA records.


           CAA                              DANE TLSA
   should be used by CAs               MUST NOT be used CAs.
   MUST NOT be used by RPs             SHOULD be used by RPs

   cert pre-issuance check only        is irrelevant for new cert issuance
   does not apply to existing certs    applies to existing certs only

CAA is information placed in the DNS addressed to certification
authorities, and can be used to limit acceptable certificate issuers
for issuing new/further certificates.  This information does not apply
to existing certificates.  DANE TLSA records is information placed in the
DNS and addressed to relying parties, meant to be used for verifying
certificates that presented by communication peers for authentication.


-Martin

From kent@bbn.com  Tue Jul 17 11:59:46 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 82BFF21F86E4 for <pkix@ietfa.amsl.com>; Tue, 17 Jul 2012 11:59:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.467
X-Spam-Level: 
X-Spam-Status: No, score=-106.467 tagged_above=-999 required=5 tests=[AWL=0.131, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YzZKxhJ9oxwY for <pkix@ietfa.amsl.com>; Tue, 17 Jul 2012 11:59:44 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id F166421F86EB for <pkix@ietf.org>; Tue, 17 Jul 2012 11:59:41 -0700 (PDT)
Received: from dhcp89-089-116.bbn.com ([128.89.89.116]:50344) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1SrD0G-000PGq-3r; Tue, 17 Jul 2012 15:00:12 -0400
Message-ID: <5005B63C.40100@bbn.com>
Date: Tue, 17 Jul 2012 15:00:12 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: "David A. Cooper" <david.cooper@nist.gov>, pkix <pkix@ietf.org>
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com> <4FFF2AF5.4070007@nist.gov>
In-Reply-To: <4FFF2AF5.4070007@nist.gov>
Content-Type: multipart/alternative; boundary="------------090305030405050807070007"
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Jul 2012 18:59:46 -0000

This is a multi-part message in MIME format.
--------------090305030405050807070007
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit


David,

The text in the -05 version of the clarification doc notes that, despite 
the 5280 mandate to include the Basic Constraints extension (with the CA 
flag = TRUE), this is often not the case.The recommendation is expressed 
in this context. This is what DANE and other folks have asked for, and 
what we are expressing.

Version 1 certificates are not in scope for 5280 (as per the abstract 
"This memo profiles the X.509 v3 certificate ...") so your question 
about the relationship between the clarification text and v1 
certificates is also out of scope.

The use of a self-signed certificate that is not marked as a CA 
certificate (as per 5280) is incompatible with the section 6 rules in 
several respects. For example, the initialization of the path validation 
algorithm (in 6.1.1) refers to several policy constraints extension 
values (policy-mapping-inhibit, explicit-policy, inhibit anyPolicy), and 
to the permitted and excluded subtrees in the name constraints 
extension. These extensions appear _only_ in CA certs. So, if these 
extensions were to appear in a self-signed cert used as a TA, and that 
cert were not marked as a CA cert, then these aspects of path validation 
initialization could not apply. Also, the text in 6.1.1 talks about "a 
CA that serves as a trust anchor ..." This text must be interpreted in 
the context of the extant 5280 definition of a CA, which calls for the 
CA flag to be set in the Basic Constraints. These observations motivate 
the statement that use of a
self-signed cert that is not marked as a CA cert is incompatible with 
path processing.

You ask for examples of certificates used to convey TAs as self-signed 
certificates, without the CA flag set. I suggest you talk with Paul 
Hoffman and other folks in the DANE WG who have made this observation, 
which motivated this text.


WGLC ended for this doc on Friday. There were no other comments on the 
text. We're done.


Steve



--------------090305030405050807070007
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=us-ascii"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    <meta name="Title" content="">
    <!--[if gte mso 9]><xml>
 <o:DocumentProperties>
  <o:Revision>0</o:Revision>
  <o:TotalTime>0</o:TotalTime>
  <o:Pages>1</o:Pages>
  <o:Words>248</o:Words>
  <o:Characters>1419</o:Characters>
  <o:Company>BBN Technologies</o:Company>
  <o:Lines>11</o:Lines>
  <o:Paragraphs>3</o:Paragraphs>
  <o:CharactersWithSpaces>1664</o:CharactersWithSpaces>
  <o:Version>14.0</o:Version>
 </o:DocumentProperties>
 <o:OfficeDocumentSettings>
  <o:AllowPNG/>
 </o:OfficeDocumentSettings>
</xml><![endif]-->
    <!--[if gte mso 9]><xml>
 <w:WordDocument>
  <w:View>Normal</w:View>
  <w:Zoom>0</w:Zoom>
  <w:TrackMoves/>
  <w:TrackFormatting/>
  <w:PunctuationKerning/>
  <w:ValidateAgainstSchemas/>
  <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
  <w:IgnoreMixedContent>false</w:IgnoreMixedContent>
  <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
  <w:DoNotPromoteQF/>
  <w:LidThemeOther>EN-US</w:LidThemeOther>
  <w:LidThemeAsian>JA</w:LidThemeAsian>
  <w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
  <w:Compatibility>
   <w:BreakWrappedTables/>
   <w:SnapToGridInCell/>
   <w:WrapTextWithPunct/>
   <w:UseAsianBreakRules/>
   <w:DontGrowAutofit/>
   <w:SplitPgBreakAndParaMark/>
   <w:EnableOpenTypeKerning/>
   <w:DontFlipMirrorIndents/>
   <w:OverrideTableStyleHps/>
   <w:UseFELayout/>
  </w:Compatibility>
  <m:mathPr>
   <m:mathFont m:val="Cambria Math"/>
   <m:brkBin m:val="before"/>
   <m:brkBinSub m:val="&#45;-"/>
   <m:smallFrac m:val="off"/>
   <m:dispDef/>
   <m:lMargin m:val="0"/>
   <m:rMargin m:val="0"/>
   <m:defJc m:val="centerGroup"/>
   <m:wrapIndent m:val="1440"/>
   <m:intLim m:val="subSup"/>
   <m:naryLim m:val="undOvr"/>
  </m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
  DefSemiHidden="true" DefQFormat="false" DefPriority="99"
  LatentStyleCount="276">
  <w:LsdException Locked="false" Priority="0" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
  <w:LsdException Locked="false" Priority="9" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 1"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 2"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 3"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 4"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 5"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 6"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 7"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 8"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 9"/>
  <w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
  <w:LsdException Locked="false" Priority="10" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Title"/>
  <w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
  <w:LsdException Locked="false" Priority="11" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
  <w:LsdException Locked="false" Priority="22" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
  <w:LsdException Locked="false" Priority="20" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
  <w:LsdException Locked="false" Priority="59" SemiHidden="false"
   UnhideWhenUsed="false" Name="Table Grid"/>
  <w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
  <w:LsdException Locked="false" Priority="1" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 1"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
  <w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
  <w:LsdException Locked="false" Priority="34" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
  <w:LsdException Locked="false" Priority="29" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
  <w:LsdException Locked="false" Priority="30" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 1"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 2"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 2"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 3"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 3"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 4"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 4"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 5"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 5"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 6"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 6"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
  <w:LsdException Locked="false" Priority="19" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
  <w:LsdException Locked="false" Priority="21" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
  <w:LsdException Locked="false" Priority="31" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
  <w:LsdException Locked="false" Priority="32" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
  <w:LsdException Locked="false" Priority="33" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
  <w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
  <w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
 </w:LatentStyles>
</xml><![endif]-->
    <!--[if gte mso 10]>
<style>
 /* Style Definitions */
table.MsoNormalTable
	{mso-style-name:"Table Normal";
	mso-tstyle-rowband-size:0;
	mso-tstyle-colband-size:0;
	mso-style-noshow:yes;
	mso-style-priority:99;
	mso-style-parent:"";
	mso-padding-alt:0in 5.4pt 0in 5.4pt;
	mso-para-margin:0in;
	mso-para-margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:10.0pt;
	font-family:Cambria;
	mso-ascii-font-family:Cambria;
	mso-ascii-theme-font:minor-latin;
	mso-hansi-font-family:Cambria;
	mso-hansi-theme-font:minor-latin;
	mso-fareast-language:JA;}
</style>
<![endif]-->
    <!--StartFragment--><font face="Monaco"><small><small><small><small><small><span
                  style="font-size:11.0pt;font-family:Monaco"></span></small></small></small></small></small></font>
    <meta name="Title" content="">
    <!--[if gte mso 9]><xml>
 <o:DocumentProperties>
  <o:Revision>0</o:Revision>
  <o:TotalTime>0</o:TotalTime>
  <o:Pages>1</o:Pages>
  <o:Words>248</o:Words>
  <o:Characters>1419</o:Characters>
  <o:Company>BBN Technologies</o:Company>
  <o:Lines>11</o:Lines>
  <o:Paragraphs>3</o:Paragraphs>
  <o:CharactersWithSpaces>1664</o:CharactersWithSpaces>
  <o:Version>14.0</o:Version>
 </o:DocumentProperties>
 <o:OfficeDocumentSettings>
  <o:AllowPNG/>
 </o:OfficeDocumentSettings>
</xml><![endif]-->
    <!--[if gte mso 9]><xml>
 <w:WordDocument>
  <w:View>Normal</w:View>
  <w:Zoom>0</w:Zoom>
  <w:TrackMoves/>
  <w:TrackFormatting/>
  <w:PunctuationKerning/>
  <w:ValidateAgainstSchemas/>
  <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
  <w:IgnoreMixedContent>false</w:IgnoreMixedContent>
  <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
  <w:DoNotPromoteQF/>
  <w:LidThemeOther>EN-US</w:LidThemeOther>
  <w:LidThemeAsian>JA</w:LidThemeAsian>
  <w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
  <w:Compatibility>
   <w:BreakWrappedTables/>
   <w:SnapToGridInCell/>
   <w:WrapTextWithPunct/>
   <w:UseAsianBreakRules/>
   <w:DontGrowAutofit/>
   <w:SplitPgBreakAndParaMark/>
   <w:EnableOpenTypeKerning/>
   <w:DontFlipMirrorIndents/>
   <w:OverrideTableStyleHps/>
   <w:UseFELayout/>
  </w:Compatibility>
  <m:mathPr>
   <m:mathFont m:val="Cambria Math"/>
   <m:brkBin m:val="before"/>
   <m:brkBinSub m:val="&#45;-"/>
   <m:smallFrac m:val="off"/>
   <m:dispDef/>
   <m:lMargin m:val="0"/>
   <m:rMargin m:val="0"/>
   <m:defJc m:val="centerGroup"/>
   <m:wrapIndent m:val="1440"/>
   <m:intLim m:val="subSup"/>
   <m:naryLim m:val="undOvr"/>
  </m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
  DefSemiHidden="true" DefQFormat="false" DefPriority="99"
  LatentStyleCount="276">
  <w:LsdException Locked="false" Priority="0" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
  <w:LsdException Locked="false" Priority="9" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 1"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 2"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 3"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 4"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 5"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 6"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 7"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 8"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 9"/>
  <w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
  <w:LsdException Locked="false" Priority="10" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Title"/>
  <w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
  <w:LsdException Locked="false" Priority="11" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
  <w:LsdException Locked="false" Priority="22" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
  <w:LsdException Locked="false" Priority="20" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
  <w:LsdException Locked="false" Priority="59" SemiHidden="false"
   UnhideWhenUsed="false" Name="Table Grid"/>
  <w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
  <w:LsdException Locked="false" Priority="1" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 1"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
  <w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
  <w:LsdException Locked="false" Priority="34" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
  <w:LsdException Locked="false" Priority="29" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
  <w:LsdException Locked="false" Priority="30" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 1"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 2"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 2"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 3"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 3"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 4"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 4"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 5"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 5"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 6"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 6"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
  <w:LsdException Locked="false" Priority="19" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
  <w:LsdException Locked="false" Priority="21" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
  <w:LsdException Locked="false" Priority="31" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
  <w:LsdException Locked="false" Priority="32" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
  <w:LsdException Locked="false" Priority="33" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
  <w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
  <w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
 </w:LatentStyles>
</xml><![endif]-->
    <!--[if gte mso 10]>
<style>
 /* Style Definitions */
table.MsoNormalTable
	{mso-style-name:"Table Normal";
	mso-tstyle-rowband-size:0;
	mso-tstyle-colband-size:0;
	mso-style-noshow:yes;
	mso-style-priority:99;
	mso-style-parent:"";
	mso-padding-alt:0in 5.4pt 0in 5.4pt;
	mso-para-margin:0in;
	mso-para-margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:10.0pt;
	font-family:Cambria;
	mso-ascii-font-family:Cambria;
	mso-ascii-theme-font:minor-latin;
	mso-hansi-font-family:Cambria;
	mso-hansi-theme-font:minor-latin;
	mso-fareast-language:JA;}
</style>
<![endif]-->
    <!--StartFragment--><span
      style="font-size:11.0pt;font-family:Monaco">David,<o:p></o:p></span>
    <p class="MsoNormal"><span
        style="font-size:11.0pt;font-family:Monaco"><o:p>&nbsp;</o:p></span></p>
    <p class="MsoNormal"><span
        style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-family:
        &quot;Times New Roman&quot;;mso-bidi-font-family:&quot;Times New
        Roman&quot;">The text in the -05
        version of the clarification doc notes that, despite the 5280
        mandate to
        include the Basic Constraints extension (with the CA flag =
        TRUE), this is
        often not the case.<span style="mso-spacerun:yes">&nbsp; </span>The
        recommendation
        is expressed in this context. This is what DANE and other folks
        have asked for,
        and what we are expressing.<o:p></o:p></span></p>
    <p class="MsoNormal"><span
        style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-family:
        &quot;Times New Roman&quot;;mso-bidi-font-family:&quot;Times New
        Roman&quot;"><o:p>&nbsp;</o:p></span></p>
    <p class="MsoNormal"><span
        style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-family:
        &quot;Times New Roman&quot;;mso-bidi-font-family:&quot;Times New
        Roman&quot;">Version 1
        certificates are not in scope for 5280 (as per the abstract &#8220;</span><span
        style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-
        family:&quot;&#65325;&#65331; &#26126;&#26397;&quot;">This
        memo profiles the X.509 v3 certificate &#8230;&#8221;</span><span
        style="font-size:11.0pt;
        font-family:Monaco;mso-fareast-font-family:&quot;Times New
        Roman&quot;;mso-bidi-font-family:
        &quot;Times New Roman&quot;">) so your question about the
        relationship between the
        clarification text and v1 certificates is also out of scope.<o:p></o:p></span></p>
    <p class="MsoNormal"><span
        style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-family:
        &quot;Times New Roman&quot;;mso-bidi-font-family:&quot;Times New
        Roman&quot;"><o:p>&nbsp;</o:p></span></p>
    <p class="MsoNormal"><span
        style="font-size:11.0pt;font-family:Monaco">The use of
        a self-signed certificate that is not marked as a CA certificate
        (as per 5280)
        is incompatible with the section 6 rules in several respects.
        For example, t</span><span
        style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-family:&quot;Times
        New Roman&quot;;
        mso-bidi-font-family:&quot;Times New Roman&quot;">he
        initialization of the path
        validation algorithm (in 6.1.1) refers to several policy
        constraints extension values
        (policy-mapping-inhibit, explicit-policy, inhibit anyPolicy),
        and to the
        permitted and excluded subtrees in the name constraints
        extension. These
        extensions appear <u>only</u> in CA certs. So, if these
        extensions were to appear in a
        self-signed cert used as a TA, and that cert were not marked as
        a CA cert, then
        these aspects of path validation initialization could not apply.
        Also, the text
        in 6.1.1 talks about &#8220;a CA that serves as a trust anchor &#8230;&#8221; This
        text must be
        interpreted in the context of the extant 5280 definition of a
        CA, which calls for
        the CA flag to be set in the Basic Constraints. These
        observations motivate the statement that use of a<br>
        self-signed cert that is not marked as a CA cert is incompatible
        with path processing.<br>
        <o:p></o:p></span></p>
    <p class="MsoNormal"><span
        style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-family:
        &quot;Times New Roman&quot;;mso-bidi-font-family:&quot;Times New
        Roman&quot;"><o:p>&nbsp;</o:p></span></p>
    <p class="MsoNormal"><span style="font-size: 11pt; font-family:
        Monaco;">You ask for examples
        of certificates used to convey TAs as self-signed certificates,
        without the CA flag
        set. I suggest you talk with Paul Hoffman and other folks in the
        DANE WG who
        have made this observation, which motivated this text.<br>
      </span></p>
    <p class="MsoNormal"><span style="font-size: 11pt; font-family:
        Monaco;"><br>
        WGLC ended for this doc on Friday.&nbsp; There were no other comments
        on the text. We're done.<br>
      </span></p>
    <p class="MsoNormal"><span style="font-size: 11pt; font-family:
        Monaco;"><br>
        Steve<br>
      </span></p>
    <p class="MsoNormal"><br>
      <span
        style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-family:
        &quot;Times New Roman&quot;;mso-bidi-font-family:&quot;Times New
        Roman&quot;"><o:p></o:p></span></p>
    <!--EndFragment-->
    <meta name="Keywords" content="">
    <meta http-equiv="Content-Type" content="text/html;
      charset=us-ascii">
    <meta name="ProgId" content="Word.Document">
    <meta name="Generator" content="Microsoft Word 14">
    <meta name="Originator" content="Microsoft Word 14">
    <link rel="File-List"
href="file://localhost/Users/stk/Library/Caches/TemporaryItems/msoclip/0/clip_filelist.xml">
    <link rel="themeData"
href="file://localhost/Users/stk/Library/Caches/TemporaryItems/msoclip/0/clip_themedata.xml">
    <style>
<!--
 /* Font Definitions */
@font-face
	{font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-font-charset:78;
	mso-generic-font-family:auto;
	mso-font-pitch:variable;
	mso-font-signature:-536870145 1791491579 18 0 131231 0;}
@font-face
	{font-family:"Cambria Math";
	panose-1:2 4 5 3 5 4 6 3 2 4;
	mso-font-charset:0;
	mso-generic-font-family:auto;
	mso-font-pitch:variable;
	mso-font-signature:-536870145 1107305727 0 0 415 0;}
@font-face
	{font-family:Cambria;
	panose-1:2 4 5 3 5 4 6 3 2 4;
	mso-font-charset:0;
	mso-generic-font-family:auto;
	mso-font-pitch:variable;
	mso-font-signature:-536870145 1073743103 0 0 415 0;}
@font-face
	{font-family:Monaco;
	panose-1:2 0 5 0 0 0 0 0 0 0;
	mso-font-charset:0;
	mso-generic-font-family:auto;
	mso-font-pitch:variable;
	mso-font-signature:3 0 0 0 1 0;}
 /* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{mso-style-unhide:no;
	mso-style-qformat:yes;
	mso-style-parent:"";
	margin:0in;
	margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:12.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Cambria;
	mso-ascii-font-family:Cambria;
	mso-ascii-theme-font:minor-latin;
	mso-fareast-font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-fareast-theme-font:minor-fareast;
	mso-hansi-font-family:Cambria;
	mso-hansi-theme-font:minor-latin;
	mso-bidi-font-family:"Times New Roman";
	mso-bidi-theme-font:minor-bidi;
	mso-fareast-language:JA;}
.MsoChpDefault
	{mso-style-type:export-only;
	mso-default-props:yes;
	font-size:10.0pt;
	mso-ansi-font-size:10.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Cambria;
	mso-ascii-font-family:Cambria;
	mso-ascii-theme-font:minor-latin;
	mso-fareast-font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-fareast-theme-font:minor-fareast;
	mso-hansi-font-family:Cambria;
	mso-hansi-theme-font:minor-latin;
	mso-bidi-font-family:"Times New Roman";
	mso-bidi-theme-font:minor-bidi;
	mso-fareast-language:JA;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.25in 1.0in 1.25in;
	mso-header-margin:.5in;
	mso-footer-margin:.5in;
	mso-paper-source:0;}
div.WordSection1
	{page:WordSection1;}
-->
</style>
  </body>
</html>

--------------090305030405050807070007--

From kent@bbn.com  Tue Jul 17 13:32:49 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91DCD21F85E1 for <pkix@ietfa.amsl.com>; Tue, 17 Jul 2012 13:32:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.473
X-Spam-Level: 
X-Spam-Status: No, score=-106.473 tagged_above=-999 required=5 tests=[AWL=0.126, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bgEG+Kr-JBpK for <pkix@ietfa.amsl.com>; Tue, 17 Jul 2012 13:32:48 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 85A3921F8532 for <pkix@ietf.org>; Tue, 17 Jul 2012 13:32:48 -0700 (PDT)
Received: from dhcp89-089-116.bbn.com ([128.89.89.116]:50622) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1SrESa-000Ftr-GW for pkix@ietf.org; Tue, 17 Jul 2012 16:33:32 -0400
Message-ID: <5005CC1C.7020205@bbn.com>
Date: Tue, 17 Jul 2012 16:33:32 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: pkix <pkix@ietf.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [pkix] 5280 clarifications, clarification
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Jul 2012 20:32:49 -0000

I should have noted that Carl Wallace provided feedback on 5280, and I 
endorse his suggested change to the text (in Carl's message of 7/12), in 
response to David's initial comment.

Peter, please make changes based on Carl's feedback and publish an update.

thanks,

Steve

From rbarnes@bbn.com  Wed Jul 18 06:36:08 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A23D221F867D for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 06:36:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.61
X-Spam-Level: 
X-Spam-Status: No, score=-106.61 tagged_above=-999 required=5 tests=[AWL=-0.011, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gRlcxQ70tSnt for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 06:36:08 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 0CEEC21F86FF for <pkix@ietf.org>; Wed, 18 Jul 2012 06:36:08 -0700 (PDT)
Received: from dhcp89-089-123.bbn.com ([128.89.89.123]:59434) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SrUQz-000KJi-1n for pkix@ietf.org; Wed, 18 Jul 2012 09:36:57 -0400
From: Richard L. Barnes <rbarnes@bbn.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Wed, 18 Jul 2012 09:36:56 -0400
Message-Id: <A66BAF28-F3C2-4484-9AC2-5C5EBCDEBF4F@bbn.com>
To: pkix@ietf.org
Mime-Version: 1.0 (Apple Message framework v1278)
X-Mailer: Apple Mail (2.1278)
Subject: [pkix] CAA "issue" critical?
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Jul 2012 13:36:08 -0000

Minor issue: It seems like the "issue" tag in CAA should be marked =
critical by default, since this document requires CAs to understand it. =20=

--Richard=20



From rbarnes@bbn.com  Wed Jul 18 06:36:41 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E34021F870E for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 06:36:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.61
X-Spam-Level: 
X-Spam-Status: No, score=-106.61 tagged_above=-999 required=5 tests=[AWL=-0.011, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XoJD5B1w+duH for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 06:36:40 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id AC77721F870B for <pkix@ietf.org>; Wed, 18 Jul 2012 06:36:40 -0700 (PDT)
Received: from dhcp89-089-123.bbn.com ([128.89.89.123]:59434) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SrURW-000KJi-UH for pkix@ietf.org; Wed, 18 Jul 2012 09:37:30 -0400
From: Richard L. Barnes <rbarnes@bbn.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Wed, 18 Jul 2012 09:37:30 -0400
Message-Id: <569F1CAD-86C9-4833-B604-B9BC10F402A5@bbn.com>
To: pkix@ietf.org
Mime-Version: 1.0 (Apple Message framework v1278)
X-Mailer: Apple Mail (2.1278)
Subject: [pkix] CAA "issue" should be critical
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Jul 2012 13:36:41 -0000

Minor issue: It seems like the "issue" tag in CAA should be marked =
critical by default, since this document requires CAs to understand it. =20=

--Richard=20



From rbarnes@bbn.com  Wed Jul 18 06:36:46 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 15E3921F871D for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 06:36:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.609
X-Spam-Level: 
X-Spam-Status: No, score=-106.609 tagged_above=-999 required=5 tests=[AWL=-0.010, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DBoN3yXuVn4b for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 06:36:45 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 4467A21F86FF for <pkix@ietf.org>; Wed, 18 Jul 2012 06:36:45 -0700 (PDT)
Received: from dhcp89-089-123.bbn.com ([128.89.89.123]:59434) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SrURb-000KJi-G8 for pkix@ietf.org; Wed, 18 Jul 2012 09:37:35 -0400
From: Richard L. Barnes <rbarnes@bbn.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Wed, 18 Jul 2012 09:37:34 -0400
Message-Id: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com>
To: pkix@ietf.org
Mime-Version: 1.0 (Apple Message framework v1278)
X-Mailer: Apple Mail (2.1278)
Subject: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Jul 2012 13:36:46 -0000

Dear PKIX,

PHB: Thanks for all the changes you made in draft-ietf-pkix-caa-11.  I =
think this version is close to ready.

The one issue that I didn't feel we really got resolution on was the =
question of where CAA records should be located.  I still think the =
tree-climbing algorithm is confusing and likely to lead to subtle =
errors.  And the document still doesn't address the wildcard case. =20

I have listed a complete set of proposed changes below.  The high-level =
outline is:=20
-- A issuer looks for CAA records only at the name to be included in the =
certificate. =20
-- If there are one or more CAA records present, then any issuance MUST =
comply with them. =20
-- If there is no CAA, then the CAA system provides no information; an =
issuer MAY issue, subject to its local policy. =20
-- If the name to be issued is a wildcard, then the issuer replaces the =
"*" with the label "_star" and uses the normal procedure.
-- Tree climbing is still allowed to find "iodef" records (with "MAY" =
strength).

This simplified procedure provides the same functionality as the current =
document with much simpler processing; the only cost is that CAA records =
have to be provisioned at individual domain names that are getting =
certificates.

I would like to get the WG's feedback on this proposal before we =
consider CAA finished.

Thanks,
--Richard




-----BEGIN Proposed Changes-----
Section 1.2:
OLD:
"
   Extended Issuer Authorization Set:  The most specific Issuer
      Authorization Set that is active for a domain.  This is either the
      Issuer Authorization Set for the domain itself, or if that is
      empty, the Issuer Authorization Set for the corresponding Public
      Delegation Point.
"
NEW:
""

Section 2.1:
OLD:
"
   Since the policy is published at the
   Public Delegation Point, the policy applies to all subordinate
   domains under example.com.
"
NEW:
""

Section 2.1:
OLD:
"
   If the domain name holder specifies one or more iodef properties, a
   certificate issuer MAY report invalid certificate requests to that
   address.
"
NEW:
"
   If the domain name holder specifies one or more iodef properties, a
   certificate issuer MAY report invalid certificate requests to that
   address.  Parties seeking to submit IODEF data MAY search for CAA
   records containing the "iodef" tag in superior nodes to the affected
   node in the DNS hierarchy, up to the closest Public Delegation Point.
"

Section 3:
OLD:
"
   The Issuer Authorization Set for a domain name consists of the set of
   all CAA Authorization Entries declared for the canonical form of the
   specified domain.
"
NEW: After "CAA Authorization Entries declared for the canonical form of =
the specified domain/"
"
   If the certificate to be issued is a wildcard certificate, then the=20=

   CA MUST replace the "*" character in the wildcard domain with the=20
   label "_wildcard" before searching for CAA records.  For example,=20
   before issuing a certificate for "*.example.com", the CA would check
   for CAA records under the canonical form of the name=20
   "_wildcard.example.com".
"

Section 3:
OLD:
"
   The Extended Issuer Authorization Set for a domain name is determined
   as follows:

   o  If the Issuer Authorization Set of the domain is not empty, the
      Extended Issuer Authorization Set is the Issuer Authorization Set
      of the domain.

   o  If the immediately superior node in the DNS hierarchy is a Public
      Delegation Point, the Extended Issuer Authorization Set is empty.

   o  Otherwise the Extended Issuer Authorization Set is that of the
      immediately superior node in the DNS hierarchy.

   For example, if the zone example.com has a CAA record defined for
   caa.example.com and no other domain in the zone, the Issuer
   Authorization Set is empty for all domains other than
   caa.example.com.  The Extended Issuer Authorization Set is empty for
   example.com (because .com is a Public Delegation Point) and for
   x.example.com.  The Extended Issuer set for x.caa.example.com,
   x.x.caa.example.com, etc. is the Issuer Authorization Set for
   caa.example.com.
"
NEW:
""

Section 3:
OLD:
"
   If the Extended Issuer Authorization Set for a domain name is not
   empty, a Certification Authority MUST NOT issue a certificate unless
   the certificate conforms to at least one authorization entry in the
   Extended Issuer Authorization Set.
"
NEW:
"
   If the Issuer Authorization Set for a domain name is not empty, a
   Certification Authority MUST NOT issue a certificate unless the
   certificate conforms to at least one authorization entry in the
   Issuer Authorization Set.

   If the Issuer Authorization Set for a domain name is empty, then=20
   CAA provides no information regarding certificate issuance.  In=20
   this case, CAs MAY rely on alternative procedures for verifying
   the domain holder's authorization to issue a certificate.
"

Section 3.1:
OLD: "corresponding extended issuer authorization set"
NEW: "corresponding Issuer Authorization Set"

-----END Proposed Changes-----=

From paul.hoffman@vpnc.org  Wed Jul 18 07:35:28 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B046121F87A7 for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 07:35:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.575
X-Spam-Level: 
X-Spam-Status: No, score=-102.575 tagged_above=-999 required=5 tests=[AWL=0.024, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0UyYPeDaxJJe for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 07:35:28 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id 05FCB21F879A for <pkix@ietf.org>; Wed, 18 Jul 2012 07:35:27 -0700 (PDT)
Received: from [10.20.30.102] (50-1-50-97.dsl.dynamic.fusionbroadband.com [50.1.50.97]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6IDj30W093848 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for <pkix@ietf.org>; Wed, 18 Jul 2012 06:45:04 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1278)
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com>
Date: Wed, 18 Jul 2012 07:36:17 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <7CDC585A-6544-4363-A28F-42B72FF636CB@vpnc.org>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com>
To: IETF PKIX <pkix@ietf.org>
X-Mailer: Apple Mail (2.1278)
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Jul 2012 14:35:28 -0000

On Jul 18, 2012, at 6:37 AM, Richard L. Barnes wrote:

> I would like to get the WG's feedback on this proposal before we =
consider CAA finished.

Richard's proposed changes all seem fine. However, the current document =
seems OK as well. I would be OK with deploying as it is currently =
written and, if Richard is correct, fixing the protocol later. If the WG =
wants to hone it now, though, I think Richard's proposal is less =
confusing than the current tree-walking wording.

--Paul Hoffman=

From James.H.Manger@team.telstra.com  Wed Jul 18 07:52:14 2012
Return-Path: <James.H.Manger@team.telstra.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22C1121F87A0 for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 07:52:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.875
X-Spam-Level: 
X-Spam-Status: No, score=-0.875 tagged_above=-999 required=5 tests=[AWL=-0.342, BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, RELAY_IS_203=0.994, URI_HEX=0.368]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ijFmQiFZqhlW for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 07:52:12 -0700 (PDT)
Received: from ipxbvo.tcif.telstra.com.au (ipxbvo.tcif.telstra.com.au [203.35.135.204]) by ietfa.amsl.com (Postfix) with ESMTP id 56D3321F879C for <pkix@ietf.org>; Wed, 18 Jul 2012 07:52:07 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,610,1336312800"; d="scan'208";a="82879173"
Received: from unknown (HELO ipcbvi.tcif.telstra.com.au) ([10.97.217.204]) by ipobvi.tcif.telstra.com.au with ESMTP; 19 Jul 2012 00:52:58 +1000
X-IronPort-AV: E=McAfee;i="5400,1158,6775"; a="75917283"
Received: from wsmsg3702.srv.dir.telstra.com ([172.49.40.170]) by ipcbvi.tcif.telstra.com.au with ESMTP; 19 Jul 2012 00:52:57 +1000
Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by WSMSG3702.srv.dir.telstra.com ([172.49.40.170]) with mapi; Thu, 19 Jul 2012 00:52:57 +1000
From: "Manger, James H" <James.H.Manger@team.telstra.com>
To: Richard L.Barnes <rbarnes@bbn.com>, "pkix@ietf.org" <pkix@ietf.org>
Date: Thu, 19 Jul 2012 00:52:55 +1000
Thread-Topic: [pkix] CAA record location / tree climbing
Thread-Index: Ac1k6oaHAjv+UDg9RtGcmg5sU6I+TAABfnrA
Message-ID: <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com>
In-Reply-To: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com>
Accept-Language: en-US, en-AU
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US, en-AU
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Jul 2012 14:52:14 -0000
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From dev+ietf@seantek.com  Wed Jul 18 12:52:34 2012
Return-Path: <dev+ietf@seantek.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67DFD21F87F8 for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 12:52:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PaVW8ZA-QOG6 for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 12:52:33 -0700 (PDT)
Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) by ietfa.amsl.com (Postfix) with ESMTP id A828221F87EE for <pkix@ietf.org>; Wed, 18 Jul 2012 12:52:33 -0700 (PDT)
Received: from [192.168.123.7] (unknown [76.173.239.154]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 2F93650A5D for <pkix@ietf.org>; Wed, 18 Jul 2012 15:53:18 -0400 (EDT)
Message-ID: <5007142A.5060302@seantek.com>
Date: Wed, 18 Jul 2012 12:53:14 -0700
From: Sean Leonard <dev+ietf@seantek.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120604 Thunderbird/13.0
MIME-Version: 1.0
To: pkix@ietf.org
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [pkix] Text Encodings of PKIX and CMS Structures (-01)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Jul 2012 19:52:34 -0000

Greetings PKIX:

Simon Josefsson and I have been working on the -01 revision to 
"pkix-textual", currently titled:
Text Encodings of PKIX and CMS Structures

We would like to propose this for adoption as a WG item.

In comparison to the original -00 draft, this revision has several 
changes, including:
- more history
- discussion of interoperability
- inclusion of CMS and PKCS #8/Asymmetric Key types
- ABNF
- addresses certain points made off-list

Some may have some questions, like "why 'X509 CRL' and not 'CRL'" and so 
forth. Hopefully the draft addresses those, but I am also working on a 
compatibility matrix that records what a lot of common implementations 
actually emit or accept (the tests have been done, but need to be put 
into a digestible spreadsheet). Most statements in the draft are based 
on interoperability tests and experience, for maximum compatibility.

Kind regards,

Sean Leonard

***************************************

A new version of I-D, draft-josefsson-pkix-textual-01.txt
has been successfully submitted by Sean Leonard and posted to the
IETF repository.

Filename:	 draft-josefsson-pkix-textual
Revision:	 01
Title:		 Text Encodings of PKIX and CMS Structures
Creation date:	 2012-07-17
WG ID:		 Individual Submission
Number of pages: 14
URL:             http://www.ietf.org/internet-drafts/draft-josefsson-pkix-textual-01.txt
Status:          http://datatracker.ietf.org/doc/draft-josefsson-pkix-textual
Htmlized:        http://tools.ietf.org/html/draft-josefsson-pkix-textual-01
Diff:            http://tools.ietf.org/rfcdiff?url2=draft-josefsson-pkix-textual-01

Abstract:
    This document describes and discuss the text encodings of Public-Key
    Infrastructure using X.509 (PKIX) Certificates, PKIX Certificate
    Revocation Lists (CRLs), PKCS #10 Certification Request Syntax, PKCS
    #7 structures, Cryptographic Message Syntax (CMS), PKCS #8 Private-
    Key Information Syntax, and Attribute Certificates.  The text
    encodings are well-known, are implemented by several applications and
    libraries, and are widely deployed.  This document is intended to
    articulate the de-facto rules that existing implementations operate
    by, and to give recommendations that will promote interoperability
    going forward.

                                                                                   


The IETF Secretariat





From hallam@gmail.com  Wed Jul 18 16:57:46 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7972A11E80DC for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 16:57:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.375
X-Spam-Level: 
X-Spam-Status: No, score=-5.375 tagged_above=-999 required=5 tests=[AWL=-2.144, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, URI_HEX=0.368]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Vv4Rdi4eIWBy for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 16:57:45 -0700 (PDT)
Received: from mail-vc0-f172.google.com (mail-vc0-f172.google.com [209.85.220.172]) by ietfa.amsl.com (Postfix) with ESMTP id AA44D11E80D0 for <pkix@ietf.org>; Wed, 18 Jul 2012 16:57:45 -0700 (PDT)
Received: by vcbfo14 with SMTP id fo14so1673205vcb.31 for <pkix@ietf.org>; Wed, 18 Jul 2012 16:58:37 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=s/rmrZjSpKwvwYZaYNDmFn5cZWqDsZN4sskYN0USdzQ=; b=LHpZ+ZNzyESZ0qUo/e0KAUGBjhSx+VRIwvDUIajX/eqJRXJBL5x+fLHBovAhmqMUF1 R0LE5QtoqxYHslCiXxcvy+eaYtV4TrDXPgDNj3hhQJB6XXdd0vtXjcqL2ZnOG9nUPaYy 8NRv6e8Az1LHCdVcENbztLP6yHmW+8ecxdXSmTJxAD31sIjuuVPc8XtvmU8gu2TBFfWZ YszJyL10kiLIVPQmnngll5l/0+V5o8SZ7s/iXdxIy8HlVPhXVTstqGPS5H4qfYwBfvNH twqsl0RtkOjKpZwW5Ui6zkGd71U2VzGFBQKd/M8pNh32+K7UcLSsMd2+052V+lfQVThC ggnQ==
MIME-Version: 1.0
Received: by 10.52.64.146 with SMTP id o18mr1699586vds.55.1342655916745; Wed, 18 Jul 2012 16:58:36 -0700 (PDT)
Received: by 10.58.161.139 with HTTP; Wed, 18 Jul 2012 16:58:36 -0700 (PDT)
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com>
Date: Wed, 18 Jul 2012 19:58:36 -0400
Message-ID: <CAMm+Lwhabr7hfoM2Ryng7LpCvFst+8FpSP+q9ojf8ficZLi=NQ@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Manger, James H" <James.H.Manger@team.telstra.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 18 Jul 2012 23:57:46 -0000

+1

I have not seen any argument for changing the spec other than that
someone thinks it would be 'simpler'.

The proposed change would weaken the specification and must be rejected.


On Wed, Jul 18, 2012 at 10:52 AM, Manger, James H
<James.H.Manger@team.telstra.com> wrote:
>> PHB: Thanks for all the changes you made in draft-ietf-pkix-caa-11.  I
>> think this version is close to ready.
>>
>> The one issue that I didn't feel we really got resolution on was the
>> question of where CAA records should be located.  I still think the
>> tree-climbing algorithm is confusing and likely to lead to subtle
>> errors.  And the document still doesn't address the wildcard case.
>>
>> I have listed a complete set of proposed changes below.  The high-level
>> outline is:
>> -- A issuer looks for CAA records only at the name to be included in
>> the certificate.
>> -- If there are one or more CAA records present, then any issuance MUST
>> comply with them.
>> -- If there is no CAA, then the CAA system provides no information; an
>> issuer MAY issue, subject to its local policy.
>> -- If the name to be issued is a wildcard, then the issuer replaces the
>> "*" with the label "_star" and uses the normal procedure.
>> -- Tree climbing is still allowed to find "iodef" records (with "MAY"
>> strength).
>>
>> This simplified procedure provides the same functionality as the
>> current document with much simpler processing; the only cost is that
>> CAA records have to be provisioned at individual domain names that are
>> getting certificates.
>>
>> I would like to get the WG's feedback on this proposal before we
>> consider CAA finished.
>>
>> Thanks,
>> --Richard
>
>
> These changes would still allow Example Org to prevent compliant CAs from=
 issuing certificates for, say, www.example.org and example.org (with 2 CAA=
 records (or 3)). However, it makes it very hard (or impossible with DNSSEC=
?) to prevent certificates being issued for (non-existent) sub-domains (eg =
a3323422.example.org). That is bad as browsers give sub-domains some author=
ity with respect to their parent domains. For instance, a sub-domain can of=
ten read cookies set by a parent domains (not sure if this is affected by a=
 cookie's "secure" flag). A sub-domain is often in the same "security zone"=
 for other browser security controls.
>
> So I believe these changes would weaken CAA, not provide the same functio=
nality.
>
> --
> James Manger
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix



--=20
Website: http://hallambaker.com/

From mrex@sap.com  Wed Jul 18 17:13:24 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E732121F8609 for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 17:13:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.249
X-Spam-Level: 
X-Spam-Status: No, score=-10.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0o-I-7g++Ny9 for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 17:13:24 -0700 (PDT)
Received: from smtpde01.sap-ag.de (smtpde01.sap-ag.de [155.56.68.170]) by ietfa.amsl.com (Postfix) with ESMTP id 2B6A721F8608 for <pkix@ietf.org>; Wed, 18 Jul 2012 17:13:24 -0700 (PDT)
Received: from mail.sap.corp by smtpde01.sap-ag.de (26) with ESMTP id q6J0ECpg003669 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 19 Jul 2012 02:14:13 +0200 (MEST)
In-Reply-To: <CAMm+Lwhabr7hfoM2Ryng7LpCvFst+8FpSP+q9ojf8ficZLi=NQ@mail.gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
Date: Thu, 19 Jul 2012 02:14:12 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120719001412.AB0381A0DF@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 00:13:25 -0000

Phillip Hallam-Baker wrote:
> 
> I have not seen any argument for changing the spec other than that
> someone thinks it would be 'simpler'.

The difference here is that I do understand Richards text immediately
on the first read, while I do have significant difficulties to read
the current Section 3 on processing of -11.
 
> 
> The proposed change would weaken the specification and must be rejected.

My confusion with the current text in the I-D is sufficiently severe,
that I'm unable to figure out its meaning (at 2am) and the exact
differences to the proposed replacement text.

What is obvious though, is that the -11 draft does not say anything
about "wildcard" certs, and that looks like a real  defect to me.


-Martin

From wwwrun@rfc-editor.org  Wed Jul 18 17:13:55 2012
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B104811E81D8; Wed, 18 Jul 2012 17:13:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.24
X-Spam-Level: 
X-Spam-Status: No, score=-102.24 tagged_above=-999 required=5 tests=[AWL=0.360, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0-ZRvfIez5je; Wed, 18 Jul 2012 17:13:55 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id 01D4211E819C; Wed, 18 Jul 2012 17:13:54 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id 35EF372E0DA; Wed, 18 Jul 2012 17:14:06 -0700 (PDT)
To: ietf-announce@ietf.org, rfc-dist@rfc-editor.org
From: rfc-editor@rfc-editor.org
Message-Id: <20120719001406.35EF372E0DA@rfc-editor.org>
Date: Wed, 18 Jul 2012 17:14:06 -0700 (PDT)
Cc: pkix@ietf.org, rfc-editor@rfc-editor.org
Subject: [pkix] RFC 6664 on S/MIME Capabilities for Public Key Definitions
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 00:13:55 -0000

A new Request for Comments is now available in online RFC libraries.

        
        RFC 6664

        Title:      S/MIME Capabilities for Public Key 
                    Definitions 
        Author:     J. Schaad
        Status:     Informational
        Stream:     IETF
        Date:       July 2012
        Mailbox:    ietf@augustcellars.com
        Pages:      19
        Characters: 37926
        Updates/Obsoletes/SeeAlso:   None

        I-D Tag:    draft-ietf-pkix-pubkey-caps-07.txt

        URL:        http://www.rfc-editor.org/rfc/rfc6664.txt

This document defines a set of Secure/Multipurpose Internet Mail
Extensions (S/MIME) Capability types for ASN.1 encoding for the
current set of public keys defined by the PKIX working group.  This
facilitates the ability for a requester to specify information on the
public keys and signature algorithms to be used in responses.
"Online Certificate Status Protocol Algorithm Agility" (RFC 6277)
details an example of where this is used.  This document is not an Internet 
Standards Track specification; it is published for informational purposes.

This document is a product of the Public-Key Infrastructure (X.509) Working Group of the IETF.


INFORMATIONAL: This memo provides information for the Internet community.
It does not specify an Internet standard of any kind. Distribution of
this memo is unlimited.

This announcement is sent to the IETF-Announce and rfc-dist lists.
To subscribe or unsubscribe, see
  http://www.ietf.org/mailman/listinfo/ietf-announce
  http://mailman.rfc-editor.org/mailman/listinfo/rfc-dist

For searching the RFC series, see http://www.rfc-editor.org/rfcsearch.html.
For downloading RFCs, see http://www.rfc-editor.org/rfc.html.

Requests for special distribution should be addressed to either the
author of the RFC in question, or to rfc-editor@rfc-editor.org.  Unless
specifically noted otherwise on the RFC itself, all RFCs are for
unlimited distribution.


The RFC Editor Team
Association Management Solutions, LLC



From tgindin@us.ibm.com  Wed Jul 18 17:42:14 2012
Return-Path: <tgindin@us.ibm.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31A0411E8119 for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 17:42:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level: 
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FqbhP4I3f1-o for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 17:42:13 -0700 (PDT)
Received: from e3.ny.us.ibm.com (e3.ny.us.ibm.com [32.97.182.143]) by ietfa.amsl.com (Postfix) with ESMTP id 0E04411E80E3 for <pkix@ietf.org>; Wed, 18 Jul 2012 17:42:12 -0700 (PDT)
Received: from /spool/local by e3.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <pkix@ietf.org> from <tgindin@us.ibm.com>; Wed, 18 Jul 2012 20:43:04 -0400
Received: from d01dlp03.pok.ibm.com (9.56.224.17) by e3.ny.us.ibm.com (192.168.1.103) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Wed, 18 Jul 2012 20:43:03 -0400
Received: from d01relay02.pok.ibm.com (d01relay02.pok.ibm.com [9.56.227.234]) by d01dlp03.pok.ibm.com (Postfix) with ESMTP id E1B88C9001D for <pkix@ietf.org>; Wed, 18 Jul 2012 20:43:02 -0400 (EDT)
Received: from d01av05.pok.ibm.com (d01av05.pok.ibm.com [9.56.224.195]) by d01relay02.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id q6J0h22L399792 for <pkix@ietf.org>; Wed, 18 Jul 2012 20:43:02 -0400
Received: from d01av05.pok.ibm.com (loopback [127.0.0.1]) by d01av05.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id q6J0h2kk018950 for <pkix@ietf.org>; Wed, 18 Jul 2012 20:43:02 -0400
Received: from d01ml062.pok.ibm.com (d01ml062.pok.ibm.com [9.63.10.95]) by d01av05.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id q6J0h2p4018947; Wed, 18 Jul 2012 20:43:02 -0400
In-Reply-To: <4FFF2AF5.4070007@nist.gov>
References: <p06240804cc064804b5f2@[128.89.89.227]>	<033201cd567c$ef626970$ce273c50$@akayla.com> <4FFF2AF5.4070007@nist.gov>
To: "David A. Cooper" <david.cooper@nist.gov>
MIME-Version: 1.0
X-KeepSent: E6D3640A:D4FCD6C5-85257A3E:00774EDD; type=4; name=$KeepSent
X-Mailer: Lotus Notes Build V853_CD5_06022011 June 02, 2011
From: Tom Gindin <tgindin@us.ibm.com>
Message-ID: <OFE6D3640A.D4FCD6C5-ON85257A3E.00774EDD-85257A40.0003F4F9@us.ibm.com>
Date: Wed, 18 Jul 2012 20:43:00 -0400
X-MIMETrack: Serialize by Router on D01ML062/01/M/IBM(Release 8.5.3 ZX853HP5|January 12, 2012) at 07/18/2012 20:43:01, Serialize complete at 07/18/2012 20:43:01
Content-Type: text/plain; charset="US-ASCII"
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 12071900-8974-0000-0000-00000B4C8570
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 00:42:14 -0000

        David:

        Several unexpired V1 certificates are distributed in the "Trusted 
Root" list of Windows XP.  GTE Cybertrust Global Root is a V1. Admittedly, 
it's a 1024-bit key using MD5.  FESTE, Public Notary Certs, is similar. 
Japan Certification Services' SecureSign RootCA certificates are 2048-bit 
with SHA-1 signatures, and don't expire until 2020.  They aren't RFC 5280 
certificates, but they certainly are self-signed X.509 certificates 
without BC used to convey trust anchor information. 

Tom Gindin





From:   "David A. Cooper" <david.cooper@nist.gov>
To:     Peter Yee <peter@akayla.com>, 
Cc:     "pkix@ietf.org" <pkix@ietf.org>
Date:   07/12/2012 03:52 PM
Subject:        Re: [pkix] new version of 5280 clarifications
Sent by:        pkix-bounces@ietf.org



On 06/30/2012 12:58 AM, Peter Yee wrote:
> The updated draft has been posted.  Please let me know if further 
changes
> are required.

Peter,

I disagree with the changes that you made for the new paragraph to 
appear at the end of Section 3.2.  The text that you included in the -05 
draft says:

|  In some cases, a self-signed certificate that does not contain a
|  BasicConstraints extension (and thus is implicitly an EE certificate)
|  is used to convey a public key. Such a certificate (i.e., a self-
|  signed certificate not marked as a CA certificate) is not compatible
|  with the path validation rules described in Section 6, or the
|  definitions in the paragraph above. This document RECOMMENDS that
|  self-signed certificates used to convey trust anchor data be marked
|  (see Section 4.2.1.9) as CA certificates, but acknowledges that this
|  convention is often not adopted in practice. Other uses of self-
|  signed EE certificates are outside the scope of this specification.

The inclusion of this paragraph was prompted by a request from Sean 
Turner (http://www.ietf.org/mail-archive/web/pkix/current/msg29661.html) 
that was motivated by discussions in other working groups, such as 
DANE.  These discussions were about the use of self-signed certificates 
for purposes other than conveying trust anchor information, not about 
whether self-signed certificates used to convey trust anchor information 
should include a BasicConstraints extension.  Yet, the paragraph in the 
-05 draft, unlike in the -04 draft, is all about including 
BasicConstraints extensions in self-signed certificates used to convey 
trust anchor information. Section 4.2.1.9 of RFC 5280 already says that 
conforming CAs MUST include a BasicConstraints extension in self-signed 
certificates used to convey trust anchor information:

    Conforming CAs MUST include [the BasicConstraints]
    extension in all CA certificates that contain public keys
    used to validate digital signatures on certificates and
    MUST mark the extension as critical in such certificates.

So, adding a sentence to Section 3.2 that RECOMMENDS including a 
BasicConstraints extension would be inconsistent.  So, why not remove 
all the text about whether a self-signed certificates used to convey 
trust anchor information should include a BasicConstraints extension and 
replace it with text (such as was in the -04 draft) that addresses the 
use of self-signed certificates for purposes other than conveying trust 
anchor information?

I also believe that the proposed text in the -05 draft is wrong for 
several other reasons.

The text states that a self-signed certificate that does not contain a 
BasicConstraints extension is implicitly an EE certificate.  Does this 
mean that all version 1 certificates are implicitly EE certificates? 
Additionally, the text goes on to talk about the use of these 
certificates to convey trust anchor information.  However, according to 
X.509 an EE certificate is a certificate issued to an end entity, and an 
end entity is a certificate subject that uses its private key for 
purposes other than signing certificates.  So, if the subject of the 
self-signed certificate signs certificates (and if it didn't then why 
would anyone be using the its self-signed certificate as a trust anchor 
for path validation) then it is not an end entity and the self-signed 
certificate is not an EE certificate.

The proposed paragraph then goes on to incorrectly state that the use of 
a self-signed certificate that does not contain a BasicConstraints 
extension as the source of trust anchor information is not compatible 
with the path validation rules specified in Section 6 of RFC 5280. 
However, Section 6 of RFC 5280 simply says that trust anchor information 
consists of a name and a public key, and that this information may be 
obtained from a self-signed certificate.  So, there is no basis for an 
assertion that it is incompatible with Section 6 of RFC 5280 to obtain 
trust anchor information from a self-signed certificate that does not 
include a BasicConstraints extension.

The next sentence in the proposed paragraph says that the document 
acknowledges that the convention of including a BasicConstraints 
extension in a self-signed certificate used to convey trust anchor 
information is often not adopted in practice.  What is the basis of this 
assertion?  Can you provide examples of self-signed certificates used to 
convey trust anchor information that do not include BasicConstraints 
extensions (and not just the names of software products that are capable 
of generating self-signed certificate without BasicConstraints 
extensions)?

I haven't even addressed the fact that a certificate could include a 
BasicConstraints extension, but set the cA flag to FALSE.

RFC 5280 already specifies what information conforming CAs need to 
include in certificates, including self-signed certificates, so there is 
no need to add this paragraph to address that.  So, why not revert to 
the text that was in the -04 draft, which addressed the issue that was 
supposed to be covered by this new text, the use of self-signed 
certificate for purposes other than conveying trust anchor information, 
rather than the text in this draft?

Dave

_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix




From James.H.Manger@team.telstra.com  Wed Jul 18 19:05:24 2012
Return-Path: <James.H.Manger@team.telstra.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 157C221F86A7 for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 19:05:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.152
X-Spam-Level: 
X-Spam-Status: No, score=-0.152 tagged_above=-999 required=5 tests=[AWL=-1.051, BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, J_CHICKENPOX_12=0.6, J_CHICKENPOX_15=0.6, J_CHICKENPOX_23=0.6, RELAY_IS_203=0.994]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WpweigMNcpYn for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 19:05:23 -0700 (PDT)
Received: from ipxcvo.tcif.telstra.com.au (ipxcvo.tcif.telstra.com.au [203.35.135.208]) by ietfa.amsl.com (Postfix) with ESMTP id 4478621F86A5 for <pkix@ietf.org>; Wed, 18 Jul 2012 19:05:22 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,613,1336312800"; d="scan'208";a="85022011"
Received: from unknown (HELO ipccvi.tcif.telstra.com.au) ([10.97.217.208]) by ipocvi.tcif.telstra.com.au with ESMTP; 19 Jul 2012 12:06:11 +1000
X-IronPort-AV: E=McAfee;i="5400,1158,6776"; a="76561875"
Received: from wsmsg3707.srv.dir.telstra.com ([172.49.40.81]) by ipccvi.tcif.telstra.com.au with ESMTP; 19 Jul 2012 12:06:11 +1000
Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by wsmsg3707.srv.dir.telstra.com ([172.49.40.81]) with mapi; Thu, 19 Jul 2012 12:06:10 +1000
From: "Manger, James H" <James.H.Manger@team.telstra.com>
To: Sean Leonard <dev+ietf@seantek.com>, "pkix@ietf.org" <pkix@ietf.org>, "simon@josefsson.org" <simon@josefsson.org>
Date: Thu, 19 Jul 2012 12:06:08 +1000
Thread-Topic: [pkix] Text Encodings of PKIX and CMS Structures (-01)
Thread-Index: Ac1lHwfMhL9GrMlFT5+63iN8XRGh8AAMOlvQ
Message-ID: <255B9BB34FB7D647A506DC292726F6E114F7D18578@WSMSG3153V.srv.dir.telstra.com>
References: <5007142A.5060302@seantek.com>
In-Reply-To: <5007142A.5060302@seantek.com>
Accept-Language: en-US, en-AU
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US, en-AU
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Subject: Re: [pkix] Text Encodings of PKIX and CMS Structures (-01)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 02:05:24 -0000

PiBkcmFmdC1qb3NlZnNzb24tcGtpeC10ZXh0dWFsLTAxLnR4dA0KDQpBIGN1cmlvdXMgc2FtcGxl
IGF0dHJpYnV0ZSBjZXJ0aWZpY2F0ZSBpcyBpbmNsdWRlZCBpbiB0aGlzIGRyYWZ0Lg0KSXQgaGFz
IGEgdmFsaWRpdHkgcGVyaW9kIG9mIDQgeWVhcnMsIGJ1dCBpdCBkb2Vzbid0IHN0YXJ0IHVudGls
IDM5MDcgLS0gaW4gMSw4OTUgeWVhcnMgdGltZS4NCkl0IGFsc28gaGFzIGEgbmFtZSB0aGF0IGVt
YmVkcyBhbiBlbWFpbCBhZGRyZXNzIGluc2lkZSBhIGNvbW1vbiBuYW1lOg0KQ049IlNjb3R0IFN0
YWxsZXIvZW1haWxBZGRyZXNzPXNzdGFsbGVyQGljLnN1bnlzYi5lZHUiLCBPPUNTRTU5MiwgTD1T
dG9ueSBCcm9vaywgU1Q9TmV3IFlvcmssIEM9VVMNCg0KLS0NCkphbWVzIE1hbmdlcg0K

From dev+ietf@seantek.com  Wed Jul 18 21:25:03 2012
Return-Path: <dev+ietf@seantek.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CCE2821F85B8 for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 21:25:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.699
X-Spam-Level: 
X-Spam-Status: No, score=-1.699 tagged_above=-999 required=5 tests=[AWL=-0.900, BAYES_00=-2.599, J_CHICKENPOX_12=0.6, J_CHICKENPOX_15=0.6, J_CHICKENPOX_23=0.6]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1x5hXXCGS-Ki for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 21:25:03 -0700 (PDT)
Received: from mxout-08.mxes.net (mxout-08.mxes.net [216.86.168.183]) by ietfa.amsl.com (Postfix) with ESMTP id 0EEA021F85FF for <pkix@ietf.org>; Wed, 18 Jul 2012 21:25:03 -0700 (PDT)
Received: from [192.168.123.7] (unknown [76.173.239.154]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by smtp.mxes.net (Postfix) with ESMTPSA id 0797F509EB for <pkix@ietf.org>; Thu, 19 Jul 2012 00:25:48 -0400 (EDT)
Message-ID: <50078C4A.2020708@seantek.com>
Date: Wed, 18 Jul 2012 21:25:46 -0700
From: Sean Leonard <dev+ietf@seantek.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:13.0) Gecko/20120604 Thunderbird/13.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <5007142A.5060302@seantek.com> <255B9BB34FB7D647A506DC292726F6E114F7D18578@WSMSG3153V.srv.dir.telstra.com>
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E114F7D18578@WSMSG3153V.srv.dir.telstra.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: quoted-printable
Subject: Re: [pkix] Text Encodings of PKIX and CMS Structures (-01)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 04:25:04 -0000

On 7/18/2012 7:06 PM, Manger, James H wrote:
>> draft-josefsson-pkix-textual-01.txt
> A curious sample attribute certificate is included in this draft.
> It has a validity period of 4 years, but it doesn't start until 3907 --=
 in 1,895 years time.
> It also has a name that embeds an email address inside a common name:
> CN=3D"Scott Staller/emailAddress=3Dsstaller@ic.sunysb.edu", O=3DCSE592,=
 L=3DStony Brook, ST=3DNew York, C=3DUS

Good eye.

That "attribute certificate" was in the -00 draft. I am not sure where=20
it came from; however, if you Google it, you will find some code that is =

probably the source of that data.

The data also has a strange attribute with with type =3D 2.5.24.72. This =

is probably a typo, as 2.5.24.72 is not assigned to any attribute.=20
2.5.4.72 is id-at-role (RoleSyntax) but what is in the data does not=20
actually conform to RoleSyntax.

If anyone has a bona-fide attribute certificate that they would like to=20
see in the draft (preferably a short-yet-compliant one), let me know.

Sean



From d.w.chadwick@kent.ac.uk  Thu Jul 19 00:14:17 2012
Return-Path: <d.w.chadwick@kent.ac.uk>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2A0EC11E8091 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 00:14:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.799
X-Spam-Level: 
X-Spam-Status: No, score=-4.799 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_12=0.6, J_CHICKENPOX_15=0.6, J_CHICKENPOX_23=0.6, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tKY4GiIhKuOs for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 00:14:16 -0700 (PDT)
Received: from mx1.kent.ac.uk (mx1.kent.ac.uk [129.12.21.39]) by ietfa.amsl.com (Postfix) with ESMTP id E62BB11E808A for <pkix@ietf.org>; Thu, 19 Jul 2012 00:14:15 -0700 (PDT)
Received: from mx4.kent.ac.uk ([129.12.21.35]) by mx1.kent.ac.uk with esmtps (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from <d.w.chadwick@kent.ac.uk>) id 1Srkwz-0002Eu-Rl; Thu, 19 Jul 2012 08:15:05 +0100
Received: from [146.90.118.80] (helo=[192.168.1.38]) by mx4.kent.ac.uk with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from <d.w.chadwick@kent.ac.uk>) id 1Srkwz-0007iG-I7; Thu, 19 Jul 2012 08:15:05 +0100
Message-ID: <5007B3F7.3040001@kent.ac.uk>
Date: Thu, 19 Jul 2012 08:15:03 +0100
From: David Chadwick <d.w.chadwick@kent.ac.uk>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: Sean Leonard <dev+ietf@seantek.com>
References: <5007142A.5060302@seantek.com> <255B9BB34FB7D647A506DC292726F6E114F7D18578@WSMSG3153V.srv.dir.telstra.com> <50078C4A.2020708@seantek.com>
In-Reply-To: <50078C4A.2020708@seantek.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: pkix@ietf.org
Subject: Re: [pkix] Text Encodings of PKIX and CMS Structures (-01)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 07:14:17 -0000

We have lots of X.509 attribute certificates, plus a tool for creating 
your own at

http://sec.cs.kent.ac.uk/permis/downloads/Level1/acm.shtml

regards

David

On 19/07/2012 05:25, Sean Leonard wrote:
> On 7/18/2012 7:06 PM, Manger, James H wrote:
>>> draft-josefsson-pkix-textual-01.txt
>> A curious sample attribute certificate is included in this draft.
>> It has a validity period of 4 years, but it doesn't start until 3907
>> -- in 1,895 years time.
>> It also has a name that embeds an email address inside a common name:
>> CN="Scott Staller/emailAddress=sstaller@ic.sunysb.edu", O=CSE592,
>> L=Stony Brook, ST=New York, C=US
>
> Good eye.
>
> That "attribute certificate" was in the -00 draft. I am not sure where
> it came from; however, if you Google it, you will find some code that is
> probably the source of that data.
>
> The data also has a strange attribute with with type = 2.5.24.72. This
> is probably a typo, as 2.5.24.72 is not assigned to any attribute.
> 2.5.4.72 is id-at-role (RoleSyntax) but what is in the data does not
> actually conform to RoleSyntax.
>
> If anyone has a bona-fide attribute certificate that they would like to
> see in the draft (preferably a short-yet-compliant one), let me know.
>
> Sean
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix

From mark.ennis@viewds.com  Wed Jul 18 17:27:57 2012
Return-Path: <mark.ennis@viewds.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFB7911E80E3 for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 17:27:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.231
X-Spam-Level: 
X-Spam-Status: No, score=-3.231 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, URI_HEX=0.368]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mXnQYBFyMsFe for <pkix@ietfa.amsl.com>; Wed, 18 Jul 2012 17:27:57 -0700 (PDT)
Received: from mail-yx0-f172.google.com (mail-yx0-f172.google.com [209.85.213.172]) by ietfa.amsl.com (Postfix) with ESMTP id E358A11E80CC for <pkix@ietf.org>; Wed, 18 Jul 2012 17:27:56 -0700 (PDT)
Received: by yenq13 with SMTP id q13so2451462yen.31 for <pkix@ietf.org>; Wed, 18 Jul 2012 17:28:48 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding :x-gm-message-state; bh=SwESNYV/dNoBcCotJHdK8QeRQ/SKBPh+xjlHeS3mqJs=; b=W1F4P0PDcY1hRnBm+svIoaEYLKVVF4akPrY9GjhKUze0f9tp7M8iHiQAEaiaOrkCwY uc3EX/bYNZr/cT9ElgPZ2EvIRQ0ixggoS8UlG9l+ex0NFj99+YW7XwGtuPgdN8/wv430 U52ISsQO3m4e41rCBcF/FVIX60Im7lvzwqhUWbHCmHap2NGIcn1+U8N70zQbnje6TIlR jtobvJs+lKhecylAb0Pknf6+dvWSdqB7JIqeq0wOU2QhD+9MJhr1v8mdeBjjvBSpEc+3 z0wKJVzUo1yAjRK2twJKWnLxAOPguaq7u+7Hk2g6Vg/5xtxJHxMjb2dtolO5yaTsr9Om t8gg==
Received: by 10.66.75.228 with SMTP id f4mr3570301paw.52.1342657727918; Wed, 18 Jul 2012 17:28:47 -0700 (PDT)
Received: from [192.168.1.148] (eth3065.vic.adsl.internode.on.net. [150.101.156.248]) by mx.google.com with ESMTPS id ms9sm578628pbb.43.2012.07.18.17.28.45 (version=SSLv3 cipher=OTHER); Wed, 18 Jul 2012 17:28:47 -0700 (PDT)
Message-ID: <500754BB.3080706@enitiatives.com.au>
Date: Thu, 19 Jul 2012 10:28:43 +1000
From: Mark Ennis <mark.ennis@viewds.com>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: "Richard L.Barnes" <rbarnes@bbn.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com>
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Gm-Message-State: ALoCoQn+YtHeMHJgxDTPNm+cOez9iJszQqBf7yKcAvtPDtKNFR54kWsrbY3s7EHwBnhqxqTB0b5W
X-Mailman-Approved-At: Thu, 19 Jul 2012 07:08:36 -0700
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 00:29:18 -0000

Richard,

I would recommend changing your proposal to require that a CA that uses 
CAA will not issue certificates for domains without an associated CAA 
record. Your third outline point suggests this is a local policy decision.

Without such a requirement, I agree with James Manger's argument that 
your proposal is weaker than that proposed in the original text.

- Mark.

On 19/07/2012 00:52, Manger, James H wrote:
>> PHB: Thanks for all the changes you made in draft-ietf-pkix-caa-11.  I
>> think this version is close to ready.
>>
>> The one issue that I didn't feel we really got resolution on was the
>> question of where CAA records should be located.  I still think the
>> tree-climbing algorithm is confusing and likely to lead to subtle
>> errors.  And the document still doesn't address the wildcard case.
>>
>> I have listed a complete set of proposed changes below.  The high-level
>> outline is:
>> -- A issuer looks for CAA records only at the name to be included in
>> the certificate.
>> -- If there are one or more CAA records present, then any issuance MUST
>> comply with them.
>> -- If there is no CAA, then the CAA system provides no information; an
>> issuer MAY issue, subject to its local policy.
>> -- If the name to be issued is a wildcard, then the issuer replaces the
>> "*" with the label "_star" and uses the normal procedure.
>> -- Tree climbing is still allowed to find "iodef" records (with "MAY"
>> strength).
>>
>> This simplified procedure provides the same functionality as the
>> current document with much simpler processing; the only cost is that
>> CAA records have to be provisioned at individual domain names that are
>> getting certificates.
>>
>> I would like to get the WG's feedback on this proposal before we
>> consider CAA finished.
>>
>> Thanks,
>> --Richard
>
>
> These changes would still allow Example Org to prevent compliant CAs from issuing certificates for, say, www.example.org and example.org (with 2 CAA records (or 3)). However, it makes it very hard (or impossible with DNSSEC?) to prevent certificates being issued for (non-existent) sub-domains (eg a3323422.example.org). That is bad as browsers give sub-domains some authority with respect to their parent domains. For instance, a sub-domain can often read cookies set by a parent domains (not sure if this is affected by a cookie's "secure" flag). A sub-domain is often in the same "security zone" for other browser security controls.
>
> So I believe these changes would weaken CAA, not provide the same functionality.
>
> --
> James Manger
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>

From david.cooper@nist.gov  Thu Jul 19 07:32:13 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFAAF21F8775 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 07:32:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3GU03qlDTEgQ for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 07:32:13 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id 7131221F8738 for <pkix@ietf.org>; Thu, 19 Jul 2012 07:32:11 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Thu, 19 Jul 2012 10:32:57 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Thu, 19 Jul 2012 10:32:53 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6JEX3BQ007652; Thu, 19 Jul 2012 10:33:04 -0400
Message-ID: <50081AA0.5060107@nist.gov>
Date: Thu, 19 Jul 2012 10:33:04 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:13.0) Gecko/20120609 Thunderbird/13.0
MIME-Version: 1.0
To: Tom Gindin <tgindin@us.ibm.com>
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com> <4FFF2AF5.4070007@nist.gov> <OFE6D3640A.D4FCD6C5-ON85257A3E.00774EDD-85257A40.0003F4F9@us.ibm.com>
In-Reply-To: <OFE6D3640A.D4FCD6C5-ON85257A3E.00774EDD-85257A40.0003F4F9@us.ibm.com>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 14:32:14 -0000

Tom,

Steve Kent claimed that "Version 1 certificates are not in scope for 
5280."   While he is incorrect about that, I believe the statement that 
"this convention is often not adopted in practice" was intended to refer 
to version 3 certificates that do not include a BasicConstraints 
extension [with cA=TRUE] and not to version 1 certificates.

Notice that I also inquired about version 1 certificates.  The proposed 
text says that a self-signed certificate that does not contain a 
BasicConstraints extension is implicitly an EE certificate.  In my 
comments on the draft (below) I asked "Does this mean that all version 1 
certificates are implicitly EE certificates?"

Dave

On 07/18/2012 08:43 PM, Tom Gindin wrote:
>          David:
>
>          Several unexpired V1 certificates are distributed in the "Trusted
> Root" list of Windows XP.  GTE Cybertrust Global Root is a V1. Admittedly,
> it's a 1024-bit key using MD5.  FESTE, Public Notary Certs, is similar.
> Japan Certification Services' SecureSign RootCA certificates are 2048-bit
> with SHA-1 signatures, and don't expire until 2020.  They aren't RFC 5280
> certificates, but they certainly are self-signed X.509 certificates
> without BC used to convey trust anchor information.
>
> Tom Gindin
>
>
>
>
>
> From:   "David A. Cooper" <david.cooper@nist.gov>
> To:     Peter Yee <peter@akayla.com>,
> Cc:     "pkix@ietf.org" <pkix@ietf.org>
> Date:   07/12/2012 03:52 PM
> Subject:        Re: [pkix] new version of 5280 clarifications
> Sent by:        pkix-bounces@ietf.org
>
>
>
> On 06/30/2012 12:58 AM, Peter Yee wrote:
>> The updated draft has been posted.  Please let me know if further
> changes
>> are required.
> Peter,
>
> I disagree with the changes that you made for the new paragraph to
> appear at the end of Section 3.2.  The text that you included in the -05
> draft says:
>
> |  In some cases, a self-signed certificate that does not contain a
> |  BasicConstraints extension (and thus is implicitly an EE certificate)
> |  is used to convey a public key. Such a certificate (i.e., a self-
> |  signed certificate not marked as a CA certificate) is not compatible
> |  with the path validation rules described in Section 6, or the
> |  definitions in the paragraph above. This document RECOMMENDS that
> |  self-signed certificates used to convey trust anchor data be marked
> |  (see Section 4.2.1.9) as CA certificates, but acknowledges that this
> |  convention is often not adopted in practice. Other uses of self-
> |  signed EE certificates are outside the scope of this specification.
>
> The inclusion of this paragraph was prompted by a request from Sean
> Turner (http://www.ietf.org/mail-archive/web/pkix/current/msg29661.html)
> that was motivated by discussions in other working groups, such as
> DANE.  These discussions were about the use of self-signed certificates
> for purposes other than conveying trust anchor information, not about
> whether self-signed certificates used to convey trust anchor information
> should include a BasicConstraints extension.  Yet, the paragraph in the
> -05 draft, unlike in the -04 draft, is all about including
> BasicConstraints extensions in self-signed certificates used to convey
> trust anchor information. Section 4.2.1.9 of RFC 5280 already says that
> conforming CAs MUST include a BasicConstraints extension in self-signed
> certificates used to convey trust anchor information:
>
>      Conforming CAs MUST include [the BasicConstraints]
>      extension in all CA certificates that contain public keys
>      used to validate digital signatures on certificates and
>      MUST mark the extension as critical in such certificates.
>
> So, adding a sentence to Section 3.2 that RECOMMENDS including a
> BasicConstraints extension would be inconsistent.  So, why not remove
> all the text about whether a self-signed certificates used to convey
> trust anchor information should include a BasicConstraints extension and
> replace it with text (such as was in the -04 draft) that addresses the
> use of self-signed certificates for purposes other than conveying trust
> anchor information?
>
> I also believe that the proposed text in the -05 draft is wrong for
> several other reasons.
>
> The text states that a self-signed certificate that does not contain a
> BasicConstraints extension is implicitly an EE certificate.  Does this
> mean that all version 1 certificates are implicitly EE certificates?
> Additionally, the text goes on to talk about the use of these
> certificates to convey trust anchor information.  However, according to
> X.509 an EE certificate is a certificate issued to an end entity, and an
> end entity is a certificate subject that uses its private key for
> purposes other than signing certificates.  So, if the subject of the
> self-signed certificate signs certificates (and if it didn't then why
> would anyone be using the its self-signed certificate as a trust anchor
> for path validation) then it is not an end entity and the self-signed
> certificate is not an EE certificate.
>
> The proposed paragraph then goes on to incorrectly state that the use of
> a self-signed certificate that does not contain a BasicConstraints
> extension as the source of trust anchor information is not compatible
> with the path validation rules specified in Section 6 of RFC 5280.
> However, Section 6 of RFC 5280 simply says that trust anchor information
> consists of a name and a public key, and that this information may be
> obtained from a self-signed certificate.  So, there is no basis for an
> assertion that it is incompatible with Section 6 of RFC 5280 to obtain
> trust anchor information from a self-signed certificate that does not
> include a BasicConstraints extension.
>
> The next sentence in the proposed paragraph says that the document
> acknowledges that the convention of including a BasicConstraints
> extension in a self-signed certificate used to convey trust anchor
> information is often not adopted in practice.  What is the basis of this
> assertion?  Can you provide examples of self-signed certificates used to
> convey trust anchor information that do not include BasicConstraints
> extensions (and not just the names of software products that are capable
> of generating self-signed certificate without BasicConstraints
> extensions)?
>
> I haven't even addressed the fact that a certificate could include a
> BasicConstraints extension, but set the cA flag to FALSE.
>
> RFC 5280 already specifies what information conforming CAs need to
> include in certificates, including self-signed certificates, so there is
> no need to add this paragraph to address that.  So, why not revert to
> the text that was in the -04 draft, which addressed the issue that was
> supposed to be covered by this new text, the use of self-signed
> certificate for purposes other than conveying trust anchor information,
> rather than the text in this draft?
>
> Dave
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>

From SChokhani@cygnacom.com  Thu Jul 19 07:51:52 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D533021F867F for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 07:51:52 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SQ7VuW-z7gJZ for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 07:51:51 -0700 (PDT)
Received: from ipedge1.cygnacom.com (ipedge1.cygnacom.com [216.191.252.12]) by ietfa.amsl.com (Postfix) with ESMTP id 5B29021F8683 for <pkix@ietf.org>; Thu, 19 Jul 2012 07:51:51 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,615,1336363200";  d="scan'208";a="5661033"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge1.cygnacom.com with ESMTP; 19 Jul 2012 10:52:42 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Thu, 19 Jul 2012 10:52:42 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: "David A. Cooper" <david.cooper@nist.gov>, Tom Gindin <tgindin@us.ibm.com>
Date: Thu, 19 Jul 2012 10:52:40 -0400
Thread-Topic: [pkix] new version of 5280 clarifications
Thread-Index: Ac1lu3cc0YI9WWa8Q66c5YQAURtweQAAlp+g
Message-ID: <B83745DA469B7847811819C5005244AF362992BD@scygexch7.cygnacom.com>
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com>	<4FFF2AF5.4070007@nist.gov> <OFE6D3640A.D4FCD6C5-ON85257A3E.00774EDD-85257A40.0003F4F9@us.ibm.com> <50081AA0.5060107@nist.gov>
In-Reply-To: <50081AA0.5060107@nist.gov>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 14:51:53 -0000

I would say that a self-signed certificate that does not contain any extens=
ion in it need NOT be an end entity certificate.  Per Section 6 of 5280, it=
 can be a trust anchor.

So, if I understand David Cooper, I agree with him and any final approved c=
hanges are incorrect.

My comment is independent of V1 or V2 issue.

-----Original Message-----
From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of Dav=
id A. Cooper
Sent: Thursday, July 19, 2012 10:33 AM
To: Tom Gindin
Cc: pkix@ietf.org
Subject: Re: [pkix] new version of 5280 clarifications

Tom,

Steve Kent claimed that "Version 1 certificates are not in scope for=20
5280."   While he is incorrect about that, I believe the statement that=20
"this convention is often not adopted in practice" was intended to refer to=
 version 3 certificates that do not include a BasicConstraints extension [w=
ith cA=3DTRUE] and not to version 1 certificates.

Notice that I also inquired about version 1 certificates.  The proposed tex=
t says that a self-signed certificate that does not contain a BasicConstrai=
nts extension is implicitly an EE certificate.  In my comments on the draft=
 (below) I asked "Does this mean that all version 1 certificates are implic=
itly EE certificates?"

Dave

On 07/18/2012 08:43 PM, Tom Gindin wrote:
>          David:
>
>          Several unexpired V1 certificates are distributed in the=20
> "Trusted Root" list of Windows XP.  GTE Cybertrust Global Root is a=20
> V1. Admittedly, it's a 1024-bit key using MD5.  FESTE, Public Notary Cert=
s, is similar.
> Japan Certification Services' SecureSign RootCA certificates are=20
> 2048-bit with SHA-1 signatures, and don't expire until 2020.  They=20
> aren't RFC 5280 certificates, but they certainly are self-signed X.509=20
> certificates without BC used to convey trust anchor information.
>
> Tom Gindin
>
>
>
>
>
> From:   "David A. Cooper" <david.cooper@nist.gov>
> To:     Peter Yee <peter@akayla.com>,
> Cc:     "pkix@ietf.org" <pkix@ietf.org>
> Date:   07/12/2012 03:52 PM
> Subject:        Re: [pkix] new version of 5280 clarifications
> Sent by:        pkix-bounces@ietf.org
>
>
>
> On 06/30/2012 12:58 AM, Peter Yee wrote:
>> The updated draft has been posted.  Please let me know if further
> changes
>> are required.
> Peter,
>
> I disagree with the changes that you made for the new paragraph to=20
> appear at the end of Section 3.2.  The text that you included in the=20
> -05 draft says:
>
> |  In some cases, a self-signed certificate that does not contain a =20
> | BasicConstraints extension (and thus is implicitly an EE=20
> | certificate)  is used to convey a public key. Such a certificate=20
> | (i.e., a self-  signed certificate not marked as a CA certificate)=20
> | is not compatible  with the path validation rules described in=20
> | Section 6, or the  definitions in the paragraph above. This document=20
> | RECOMMENDS that  self-signed certificates used to convey trust=20
> | anchor data be marked  (see Section 4.2.1.9) as CA certificates, but=20
> | acknowledges that this  convention is often not adopted in practice.=20
> | Other uses of self-  signed EE certificates are outside the scope of th=
is specification.
>
> The inclusion of this paragraph was prompted by a request from Sean=20
> Turner=20
> (http://www.ietf.org/mail-archive/web/pkix/current/msg29661.html)
> that was motivated by discussions in other working groups, such as=20
> DANE.  These discussions were about the use of self-signed=20
> certificates for purposes other than conveying trust anchor=20
> information, not about whether self-signed certificates used to convey=20
> trust anchor information should include a BasicConstraints extension. =20
> Yet, the paragraph in the
> -05 draft, unlike in the -04 draft, is all about including=20
> BasicConstraints extensions in self-signed certificates used to convey=20
> trust anchor information. Section 4.2.1.9 of RFC 5280 already says=20
> that conforming CAs MUST include a BasicConstraints extension in=20
> self-signed certificates used to convey trust anchor information:
>
>      Conforming CAs MUST include [the BasicConstraints]
>      extension in all CA certificates that contain public keys
>      used to validate digital signatures on certificates and
>      MUST mark the extension as critical in such certificates.
>
> So, adding a sentence to Section 3.2 that RECOMMENDS including a=20
> BasicConstraints extension would be inconsistent.  So, why not remove=20
> all the text about whether a self-signed certificates used to convey=20
> trust anchor information should include a BasicConstraints extension=20
> and replace it with text (such as was in the -04 draft) that addresses=20
> the use of self-signed certificates for purposes other than conveying=20
> trust anchor information?
>
> I also believe that the proposed text in the -05 draft is wrong for=20
> several other reasons.
>
> The text states that a self-signed certificate that does not contain a=20
> BasicConstraints extension is implicitly an EE certificate.  Does this=20
> mean that all version 1 certificates are implicitly EE certificates?
> Additionally, the text goes on to talk about the use of these=20
> certificates to convey trust anchor information.  However, according=20
> to
> X.509 an EE certificate is a certificate issued to an end entity, and=20
> an end entity is a certificate subject that uses its private key for=20
> purposes other than signing certificates.  So, if the subject of the=20
> self-signed certificate signs certificates (and if it didn't then why=20
> would anyone be using the its self-signed certificate as a trust=20
> anchor for path validation) then it is not an end entity and the=20
> self-signed certificate is not an EE certificate.
>
> The proposed paragraph then goes on to incorrectly state that the use=20
> of a self-signed certificate that does not contain a BasicConstraints=20
> extension as the source of trust anchor information is not compatible=20
> with the path validation rules specified in Section 6 of RFC 5280.
> However, Section 6 of RFC 5280 simply says that trust anchor=20
> information consists of a name and a public key, and that this=20
> information may be obtained from a self-signed certificate.  So, there=20
> is no basis for an assertion that it is incompatible with Section 6 of=20
> RFC 5280 to obtain trust anchor information from a self-signed=20
> certificate that does not include a BasicConstraints extension.
>
> The next sentence in the proposed paragraph says that the document=20
> acknowledges that the convention of including a BasicConstraints=20
> extension in a self-signed certificate used to convey trust anchor=20
> information is often not adopted in practice.  What is the basis of=20
> this assertion?  Can you provide examples of self-signed certificates=20
> used to convey trust anchor information that do not include=20
> BasicConstraints extensions (and not just the names of software=20
> products that are capable of generating self-signed certificate=20
> without BasicConstraints extensions)?
>
> I haven't even addressed the fact that a certificate could include a=20
> BasicConstraints extension, but set the cA flag to FALSE.
>
> RFC 5280 already specifies what information conforming CAs need to=20
> include in certificates, including self-signed certificates, so there=20
> is no need to add this paragraph to address that.  So, why not revert=20
> to the text that was in the -04 draft, which addressed the issue that=20
> was supposed to be covered by this new text, the use of self-signed=20
> certificate for purposes other than conveying trust anchor=20
> information, rather than the text in this draft?
>
> Dave
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>
_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From david.cooper@nist.gov  Thu Jul 19 08:12:56 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 02AFD21F862B for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 08:12:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.87
X-Spam-Level: 
X-Spam-Status: No, score=-5.87 tagged_above=-999 required=5 tests=[AWL=-0.729,  BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2lRmEMmSyhGr for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 08:12:54 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id 59F7D21F8707 for <pkix@ietf.org>; Thu, 19 Jul 2012 08:12:54 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Thu, 19 Jul 2012 11:13:35 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Thu, 19 Jul 2012 11:13:31 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6JFDe1M011825	for <pkix@ietf.org>; Thu, 19 Jul 2012 11:13:41 -0400
Message-ID: <50082424.1020004@nist.gov>
Date: Thu, 19 Jul 2012 11:13:40 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:13.0) Gecko/20120609 Thunderbird/13.0
MIME-Version: 1.0
To: pkix <pkix@ietf.org>
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com> <4FFF2AF5.4070007@nist.gov> <5005B63C.40100@bbn.com>
In-Reply-To: <5005B63C.40100@bbn.com>
Content-Type: text/html; charset="windows-1252"
Content-Transfer-Encoding: 8bit
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 15:12:56 -0000

<html>
  <head>
    <meta content="text/html; charset=windows-1252"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 07/17/2012 03:00 PM, Stephen Kent
      wrote:<br>
    </div>
    <blockquote cite="mid:5005B63C.40100@bbn.com" type="cite">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <p class="MsoNormal"><span
          style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-family:
          &quot;Times New Roman&quot;;mso-bidi-font-family:&quot;Times
          New Roman&quot;">Version 1 certificates are not in scope for
          5280 (as per the abstract “</span><span
          style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-
          family:&quot;&#65325;&#65331; &#26126;&#26397;&quot;">This memo profiles the X.509 v3
          certificate …”</span><span style="font-size:11.0pt;
          font-family:Monaco;mso-fareast-font-family:&quot;Times New
          Roman&quot;;mso-bidi-font-family: &quot;Times New Roman&quot;">)
          so your question about the relationship between the
          clarification text and v1 certificates is also out of scope.<o:p></o:p></span></p>
    </blockquote>
    <br>
    While conforming CAs cannot issue version 1 certificates, that
    doesn't mean that version 1 certificates are not in scope for 5280. 
    For example, Section 6 is very clear that the path validation
    algorithm in that section is not limited to accepting certificates
    issued in conformance with the PKIX profile.  In fact, Section 6.1.4
    includes the following step:<br>
    <br>
          (k)  If certificate i is a version 3 certificate, verify that
    the<br>
               basicConstraints extension is present and that cA is set
    to<br>
               TRUE.  (If certificate i is a version 1 or version 2<br>
               certificate, then the application MUST either verify that<br>
               certificate i is a CA certificate through out-of-band
    means<br>
               or reject the certificate.  Conforming implementations
    may<br>
               choose to reject all version 1 and version 2 intermediate<br>
               certificates.)<br>
    <br>
    The proposed text says that a self-signed certificate that does not
    contain a BasicConstraints extension "is not compatible with the
    path validation rules described in Section 6."  Certainly if the
    scope of the path validation algorithm in Section 6 includes version
    1 certificates as intermediate certificates in a certification path,
    it includes the use of self-signed version 1 certificates as the
    source of trust anchor information.<br>
    <br>
    Note also that the text in Section 6.1.4 says for a version 1
    intermediate certificate to "verify that certificate i is a CA
    certificate through out-of-band means," which indicates that a
    version 1 certificate [that does not contain a BasicConstraints
    extension] is not implicitly an EE certificate.<br>
    <br>
    <blockquote cite="mid:5005B63C.40100@bbn.com" type="cite">
      <p class="MsoNormal"><span
          style="font-size:11.0pt;font-family:Monaco">The use of a
          self-signed certificate that is not marked as a CA certificate
          (as per 5280) is incompatible with the section 6 rules in
          several respects. For example, t</span><span style="font-size:
          11pt; font-family: Monaco;">he initialization of the path
          validation algorithm (in 6.1.1) refers to several policy
          constraints extension values (policy-mapping-inhibit,
          explicit-policy, inhibit anyPolicy), and to the permitted and
          excluded subtrees in the name constraints extension.</span></p>
    </blockquote>
    <br>
    The initialization of the path validation algorithm in Section 6.1.1
    does not refer to any certificate extensions.  Section 6.1.1
    specifies inputs to the path validation algorithm.  The input
    initial-policy-mapping-inhibit is a boolean that may be assigned a
    value of either TRUE or FALSE by the relying party.  Notice that the
    value of initial-policy-mapping-inhibit is explicitly not considered
    to be trust anchor information.  This input is used by the relying
    party to affect the path validation process, not by the trust
    anchor.  While the value of initial-policy-mapping-inhibit may
    affect the same state variable as the inhibitPolicyMapping field of
    the policyConstraints extension, it is the relying party that
    ultimately decides the value of initial-policy-mapping-inhibit, even
    if the relying party uses a self-signed certificate as the source of
    trust anchor information and that self-signed certificate happens to
    include constraints extensions in it.<br>
    <br>
    CAs impose constraints by either not issuing certificates that
    violate those constraints or by including constraints extensions in
    the certificates that they issue (e.g., not including a
    policyMappings extension in any certificates that it issues and
    include a policyConstraints extension with inhibitPolicyMapping
    present with a SkipCerts value of 0).<br>
    <br>
    <blockquote cite="mid:5005B63C.40100@bbn.com" type="cite">
      <p class="MsoNormal"><span style="font-size: 11pt; font-family:
          Monaco;">These extensions appear <u>only</u> in CA certs. So,
          if these extensions were to appear in a self-signed cert used
          as a TA, and that cert were not marked as a CA cert, then
          these aspects of path validation initialization could not
          apply. Also, the text in 6.1.1 talks about “a CA that serves
          as a trust anchor …</span></p>
    </blockquote>
    <br>
    Again, these inputs to path validation are not listed as trust
    anchor information for a reason.  So, the contents of the
    self-signed certificate used as the source of trust anchor
    information is irrelevant.  As noted in Section 6.2, a relying party
    may choose use use information included in a self-signed certificate
    as the basis for selecting the values for the path validation
    inputs, but that is a relying party decision.<br>
    <br>
    <blockquote cite="mid:5005B63C.40100@bbn.com" type="cite">
      <p class="MsoNormal"><span
          style="font-size:11.0pt;font-family:Monaco;mso-fareast-font-family:&quot;Times

          New Roman&quot;; mso-bidi-font-family:&quot;Times New
          Roman&quot;">This text must be interpreted in the context of
          the extant 5280 definition of a CA, which calls for the CA
          flag to be set in the Basic Constraints. These observations
          motivate the statement that use of a<br>
          self-signed cert that is not marked as a CA cert is
          incompatible with path processing.<br>
          <o:p></o:p></span></p>
    </blockquote>
    <br>
    In what sense is it "incompatible with path processing"?  As Section
    6.1.1 notes:<br>
    <br>
       When the trust anchor is provided in the form of a self-signed<br>
       certificate, this self-signed certificate is not included as part
    of<br>
       the prospective certification path.<br>
    <br>
    Self-signed certificates may be used as the source of trust anchor
    information, but they are never used as part of path processing.<br>
    <br>
  </body>
</html>

From mrex@sap.com  Thu Jul 19 09:46:24 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F326621F8804 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 09:46:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.249
X-Spam-Level: 
X-Spam-Status: No, score=-10.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bNCt2mgl1asT for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 09:46:23 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id 23D0321F87B7 for <pkix@ietf.org>; Thu, 19 Jul 2012 09:46:22 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id q6JGl7tJ025927 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 19 Jul 2012 18:47:12 +0200 (MEST)
In-Reply-To: <B83745DA469B7847811819C5005244AF362992BD@scygexch7.cygnacom.com>
To: Santosh Chokhani <SChokhani@cygnacom.com>
Date: Thu, 19 Jul 2012 18:47:07 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120719164707.3E0B11A0E2@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 16:46:24 -0000

Santosh Chokhani wrote:
>
>
> I would say that a self-signed certificate that does not contain
> any extension in it need NOT be an end entity certificate.
> Per Section 6 of 5280, it can be a trust anchor.

Per Section 6.1.4 (k) of rfc5280, even a path CA cert can be X.509v1:

      (k)  If certificate i is a version 3 certificate, verify that the
           basicConstraints extension is present and that cA is set to
           TRUE.  (If certificate i is a version 1 or version 2
           certificate, then the application MUST either verify that
           certificate i is a CA certificate through out-of-band means
           or reject the certificate.  Conforming implementations may
           choose to reject all version 1 and version 2 intermediate
           certificates.)

David A. Cooper wrote:
> 
> Steve Kent claimed that "Version 1 certificates are not in scope for 
> 5280."   While he is incorrect about that, I believe the statement that 
> "this convention is often not adopted in practice" was intended to refer
> to version 3 certificates that do not include a BasicConstraints
> extension [with cA=TRUE] and not to version 1 certificates.

Steve's statement seems too broad and prone to misunderstanding.
The most that can be said, is, that rfc5280 does not profile X.509v1 certs.
The way I understood the purpose of PKIX was to leverage, rather than
kill, the installed base of X.509.  Since the underlying technology (X.509v3)
is quite complex and awkward, there is a lot of bad practice out there
in the installed base, which RPs have to deal with in one way or another.

Remaining completely silent (=chicken out) on potential or real interop
issues that have been identified does not seem appropriate for an
IETF standard with an awfully huge installed base.


> 
> Notice that I also inquired about version 1 certificates.  The proposed
> text says that a self-signed certificate that does not contain a
> BasicConstraints extension is implicitly an EE certificate.
> In my comments on the draft (below) I asked "Does this mean that all
> version 1 certificates are implicitly EE certificates?"

The current text in rfc 5280 6.1.4 (k) quoted above makes a clear
distinction between X.509v3 certs without Basic Constraints and
X.509v1 certs, and suggests that the latter (X.509v1 certs) MUST use
other means than cert attributes (out-of-band / meta-data)
to distinguish CA from EE certs.


-Martin

From rbarnes@bbn.com  Thu Jul 19 11:19:57 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E431E21F86C2 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 11:19:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.413
X-Spam-Level: 
X-Spam-Status: No, score=-106.413 tagged_above=-999 required=5 tests=[AWL=-0.182, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, URI_HEX=0.368, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1KLU2yoeXlXl for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 11:19:57 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 3623C21F86C1 for <pkix@ietf.org>; Thu, 19 Jul 2012 11:19:57 -0700 (PDT)
Received: from ros-dhcp192-1-51-20.bbn.com ([192.1.51.20]:61975) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SrvKp-0006mK-Qr; Thu, 19 Jul 2012 14:20:23 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=us-ascii
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com>
Date: Thu, 19 Jul 2012 14:20:23 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com>
To: "Manger, James H" <James.H.Manger@team.telstra.com>
X-Mailer: Apple Mail (2.1278)
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 18:19:58 -0000

On Jul 18, 2012, at 10:52 AM, Manger, James H wrote:

>> PHB: Thanks for all the changes you made in draft-ietf-pkix-caa-11.  =
I
>> think this version is close to ready.
>>=20
>> The one issue that I didn't feel we really got resolution on was the
>> question of where CAA records should be located.  I still think the
>> tree-climbing algorithm is confusing and likely to lead to subtle
>> errors.  And the document still doesn't address the wildcard case.
>>=20
>> I have listed a complete set of proposed changes below.  The =
high-level
>> outline is:
>> -- A issuer looks for CAA records only at the name to be included in
>> the certificate.
>> -- If there are one or more CAA records present, then any issuance =
MUST
>> comply with them.
>> -- If there is no CAA, then the CAA system provides no information; =
an
>> issuer MAY issue, subject to its local policy.
>> -- If the name to be issued is a wildcard, then the issuer replaces =
the
>> "*" with the label "_star" and uses the normal procedure.
>> -- Tree climbing is still allowed to find "iodef" records (with "MAY"
>> strength).
>>=20
>> This simplified procedure provides the same functionality as the
>> current document with much simpler processing; the only cost is that
>> CAA records have to be provisioned at individual domain names that =
are
>> getting certificates.
>>=20
>> I would like to get the WG's feedback on this proposal before we
>> consider CAA finished.
>>=20
>> Thanks,
>> --Richard
>=20
>=20
> These changes would still allow Example Org to prevent compliant CAs =
from issuing certificates for, say, www.example.org and example.org =
(with 2 CAA records (or 3)). However, it makes it very hard (or =
impossible with DNSSEC?) to prevent certificates being issued for =
(non-existent) sub-domains (eg a3323422.example.org). That is bad as =
browsers give sub-domains some authority with respect to their parent =
domains. For instance, a sub-domain can often read cookies set by a =
parent domains (not sure if this is affected by a cookie's "secure" =
flag). A sub-domain is often in the same "security zone" for other =
browser security controls.

First of all, if the policy is to look only at the leaf and require CAA, =
then a CA will never issue a cert for a non-existent domain because =
there won't be a CAA record there.

If you're worried about CAs that fall back to something else if CAA =
isn't present, couldn't the parent zone holder just set a wildcard that =
provides null CAA for any subordinate zone? =20

*.example.com CAA 0 issue ";"

--Richard



>=20
> So I believe these changes would weaken CAA, not provide the same =
functionality.
>=20
> --
> James Manger


From rbarnes@bbn.com  Thu Jul 19 11:23:19 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E14F21F85E6 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 11:23:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.41
X-Spam-Level: 
X-Spam-Status: No, score=-106.41 tagged_above=-999 required=5 tests=[AWL=-0.179, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, URI_HEX=0.368, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JMmcqe5-hAYI for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 11:23:18 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 88CFA21F85D5 for <pkix@ietf.org>; Thu, 19 Jul 2012 11:23:18 -0700 (PDT)
Received: from ros-dhcp192-1-51-20.bbn.com ([192.1.51.20]:61979) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SrvOF-0006p7-8K; Thu, 19 Jul 2012 14:23:55 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <500754BB.3080706@enitiatives.com.au>
Date: Thu, 19 Jul 2012 14:23:54 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <39AAAC75-B516-437E-911C-1E7156CE0400@bbn.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <500754BB.3080706@enitiatives.com.au>
To: Mark Ennis <mark.ennis@viewds.com>
X-Mailer: Apple Mail (2.1278)
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 18:23:19 -0000

The authorization decision is ultimately always the CAs.  A CA could =
even choose to ignore the "MUST NOT issue contradicting CAA", if =
something in its CP told it to.

However, I would be comfortable revising the third bullet to something =
like the following:
-- If there is no CAA, then the CAA system provides no information; an =
issuer SHOULD NOT issue unless its Certificate Policy allows an =
alternative mechanism for validating domain holders

Is that better?

--Richard





On Jul 18, 2012, at 8:28 PM, Mark Ennis wrote:

> Richard,
>=20
> I would recommend changing your proposal to require that a CA that =
uses CAA will not issue certificates for domains without an associated =
CAA record. Your third outline point suggests this is a local policy =
decision.
>=20
> Without such a requirement, I agree with James Manger's argument that =
your proposal is weaker than that proposed in the original text.
>=20
> - Mark.
>=20
> On 19/07/2012 00:52, Manger, James H wrote:
>>> PHB: Thanks for all the changes you made in draft-ietf-pkix-caa-11.  =
I
>>> think this version is close to ready.
>>>=20
>>> The one issue that I didn't feel we really got resolution on was the
>>> question of where CAA records should be located.  I still think the
>>> tree-climbing algorithm is confusing and likely to lead to subtle
>>> errors.  And the document still doesn't address the wildcard case.
>>>=20
>>> I have listed a complete set of proposed changes below.  The =
high-level
>>> outline is:
>>> -- A issuer looks for CAA records only at the name to be included in
>>> the certificate.
>>> -- If there are one or more CAA records present, then any issuance =
MUST
>>> comply with them.
>>> -- If there is no CAA, then the CAA system provides no information; =
an
>>> issuer MAY issue, subject to its local policy.
>>> -- If the name to be issued is a wildcard, then the issuer replaces =
the
>>> "*" with the label "_star" and uses the normal procedure.
>>> -- Tree climbing is still allowed to find "iodef" records (with =
"MAY"
>>> strength).
>>>=20
>>> This simplified procedure provides the same functionality as the
>>> current document with much simpler processing; the only cost is that
>>> CAA records have to be provisioned at individual domain names that =
are
>>> getting certificates.
>>>=20
>>> I would like to get the WG's feedback on this proposal before we
>>> consider CAA finished.
>>>=20
>>> Thanks,
>>> --Richard
>>=20
>>=20
>> These changes would still allow Example Org to prevent compliant CAs =
from issuing certificates for, say, www.example.org and example.org =
(with 2 CAA records (or 3)). However, it makes it very hard (or =
impossible with DNSSEC?) to prevent certificates being issued for =
(non-existent) sub-domains (eg a3323422.example.org). That is bad as =
browsers give sub-domains some authority with respect to their parent =
domains. For instance, a sub-domain can often read cookies set by a =
parent domains (not sure if this is affected by a cookie's "secure" =
flag). A sub-domain is often in the same "security zone" for other =
browser security controls.
>>=20
>> So I believe these changes would weaken CAA, not provide the same =
functionality.
>>=20
>> --
>> James Manger
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>>=20


From mrex@sap.com  Thu Jul 19 11:37:06 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9AACE21F8683 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 11:37:06 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.249
X-Spam-Level: 
X-Spam-Status: No, score=-10.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Mc5-OhjeYGjb for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 11:37:06 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id C8F9721F8678 for <pkix@ietf.org>; Thu, 19 Jul 2012 11:37:05 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id q6JIbm4I010341 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 19 Jul 2012 20:37:53 +0200 (MEST)
In-Reply-To: <39AAAC75-B516-437E-911C-1E7156CE0400@bbn.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Date: Thu, 19 Jul 2012 20:37:48 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120719183748.641061A0E2@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 18:37:06 -0000

Richard L. Barnes wrote:
> The authorization decision is ultimately always the CAs.
> A CA could even choose to ignore the "MUST NOT issue contradicting CAA",
> if something in its CP told it to.
> 
> However, I would be comfortable revising the third bullet to something
> like the following:
>
> -- If there is no CAA, then the CAA system provides no information;
>    an issuer SHOULD NOT issue unless its Certificate Policy allows
>    an alternative mechanism for validating domain holders
> 
> Is that better?

To me, that is backwards from what it should be.

The above implies that EVERY CA out there will have to update its CP
to say "we do not require CAA to be present as a prerequisite to issue
a cert for a domain", although such CAs are actually not changing their
CP at all.

Those who are changing their CPs are CAs that suddenly start looking at
or requiring CAA, and it is those CAs where the CPs should be augmented
to spell out that policy change.


  If there is no CAA, then a CA, which issued certs under a policy that
  requires CAA to be present, will not issue a certificate in absence of CAA.


CA's CPs and CABrowser Forum's "Baseline Requirements for the Issuance
and Management of Publicly Trusted Certificates" are the place for
defining/describing policy.  The CAA document should be limited to
describe technical function.


-Martin

From rbarnes@bbn.com  Thu Jul 19 11:45:33 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7286521F86F1 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 11:45:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.592
X-Spam-Level: 
X-Spam-Status: No, score=-106.592 tagged_above=-999 required=5 tests=[AWL=0.007, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uj1zOZ9Gev8e for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 11:45:33 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id D8DE221F85A3 for <pkix@ietf.org>; Thu, 19 Jul 2012 11:45:32 -0700 (PDT)
Received: from ros-dhcp192-1-51-20.bbn.com ([192.1.51.20]:62060) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1Srvjn-0009SD-QQ; Thu, 19 Jul 2012 14:46:11 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=us-ascii
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <20120719183748.641061A0E2@ld9781.wdf.sap.corp>
Date: Thu, 19 Jul 2012 14:46:10 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <DCEF0E33-265C-4B66-B2B3-87A70F4CB256@bbn.com>
References: <20120719183748.641061A0E2@ld9781.wdf.sap.corp>
To: mrex@sap.com
X-Mailer: Apple Mail (2.1278)
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 18:45:33 -0000

On Jul 19, 2012, at 2:37 PM, Martin Rex wrote:

> Richard L. Barnes wrote:
>> The authorization decision is ultimately always the CAs.
>> A CA could even choose to ignore the "MUST NOT issue contradicting =
CAA",
>> if something in its CP told it to.
>>=20
>> However, I would be comfortable revising the third bullet to =
something
>> like the following:
>>=20
>> -- If there is no CAA, then the CAA system provides no information;
>>   an issuer SHOULD NOT issue unless its Certificate Policy allows
>>   an alternative mechanism for validating domain holders
>>=20
>> Is that better?
>=20
> To me, that is backwards from what it should be.
>=20
> The above implies that EVERY CA out there will have to update its CP
> to say "we do not require CAA to be present as a prerequisite to issue
> a cert for a domain", although such CAs are actually not changing =
their
> CP at all.
>=20

I think you've got it backwards.  Right now, *every* CA's CP allows an =
alternative mechanism for validating domain name holders, since CAA =
doesn't exist.

The question is what happens when you update your CP to account for CAA. =
 I think the goal is to  that if you have a CP that says "We require =
CAA", then the above SHOULD NOT turns into a MUST NOT.  But it should =
also be consistent with the RFC to have a CP says, "If CAA is present we =
follow it, otherwise we use our old process".

> Those who are changing their CPs are CAs that suddenly start looking =
at
> or requiring CAA, and it is those CAs where the CPs should be =
augmented
> to spell out that policy change.
>=20
>=20
>  If there is no CAA, then a CA, which issued certs under a policy that
>  requires CAA to be present, will not issue a certificate in absence =
of CAA.

This seems like a tautology?


> CA's CPs and CABrowser Forum's "Baseline Requirements for the Issuance
> and Management of Publicly Trusted Certificates" are the place for
> defining/describing policy.  The CAA document should be limited to
> describe technical function.


Regardless of what the spec says, there will be CPs that can conflict =
with it.

An example of a CP that is not consistent with the spec would be =
something like "If CAA is present but doesn't list us, then we will =
issue if the applicant provides his driver's license."  That would count =
as non-compliance with the standard.

--Richard


From mrex@sap.com  Thu Jul 19 11:58:05 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E65621F86CB for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 11:58:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.249
X-Spam-Level: 
X-Spam-Status: No, score=-10.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mBUQYSACADoA for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 11:58:04 -0700 (PDT)
Received: from smtpde01.sap-ag.de (smtpde01.sap-ag.de [155.56.68.170]) by ietfa.amsl.com (Postfix) with ESMTP id 80F6C21F86D9 for <pkix@ietf.org>; Thu, 19 Jul 2012 11:58:04 -0700 (PDT)
Received: from mail.sap.corp by smtpde01.sap-ag.de (26) with ESMTP id q6JIwmNK022384 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 19 Jul 2012 20:58:50 +0200 (MEST)
In-Reply-To: <DCEF0E33-265C-4B66-B2B3-87A70F4CB256@bbn.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Date: Thu, 19 Jul 2012 20:58:48 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120719185848.85D991A0E2@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 18:58:05 -0000

Richard L. Barnes wrote:
> 
> Martin Rex wrote:
> 
>> Richard L. Barnes wrote:
>>> 
>>> However, I would be comfortable revising the third bullet to something
>>> like the following:
>>> 
>>> -- If there is no CAA, then the CAA system provides no information;
>>>   an issuer SHOULD NOT issue unless its Certificate Policy allows
>>>   an alternative mechanism for validating domain holders
>>> 
>> 
>> To me, that is backwards from what it should be.
>> 
>> The above implies that EVERY CA out there will have to update its CP
>> to say "we do not require CAA to be present as a prerequisite to issue
>> a cert for a domain", although such CAs are actually not changing their
>> CP at all.
>> 
> 
> I think you've got it backwards.  Right now, *every* CA's CP allows
> an alternative mechanism for validating domain name holders,
> since CAA doesn't exist.


Actually, we're currently both somewhat in the woods.  ;-)

CAA is definitely *NO* "mechanism to validate domain holders",
so even with CAA, every CA will have to use a "mechanism to validate
domain holders" that is not described in the CAA document.

CAA is a mechanism to "publish issuers considered acceptable by the domain
holder when processing CSRs".  In addition to that, it conveys information
through DNS, which is typically out-of-band from CSR submission, and could
be additionally protected by DNSSEC, about whether and whom to notify about
issuance of a certificate for a domain name.


-Martin

From ajs@anvilwalrusden.com  Thu Jul 19 13:02:24 2012
Return-Path: <ajs@anvilwalrusden.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4B5BC21F8799 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 13:02:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.328
X-Spam-Level: 
X-Spam-Status: No, score=-1.328 tagged_above=-999 required=5 tests=[AWL=-0.488, BAYES_00=-2.599, HELO_MISMATCH_INFO=1.448, HOST_MISMATCH_NET=0.311]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VjUKnxivax2R for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 13:02:23 -0700 (PDT)
Received: from mx1.yitter.info (ow5p.x.rootbsd.net [208.79.81.114]) by ietfa.amsl.com (Postfix) with ESMTP id A6F9321F8595 for <pkix@ietf.org>; Thu, 19 Jul 2012 13:02:22 -0700 (PDT)
Received: from mail.yitter.info (69-196-144-227.dsl.teksavvy.com [69.196.144.227]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.yitter.info (Postfix) with ESMTPSA id D115F8A031 for <pkix@ietf.org>; Thu, 19 Jul 2012 20:03:15 +0000 (UTC)
Date: Thu, 19 Jul 2012 16:03:14 -0400
From: Andrew Sullivan <ajs@anvilwalrusden.com>
To: pkix@ietf.org
Message-ID: <20120719200313.GE2939@mail.yitter.info>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 20:02:24 -0000

Dear colleagues,

Some time ago, I learned that CAA was coming over to PKIX for
continued work.  I thought to myself, "Gee, I oughta follow that," and
promptly forgot about it, which is why I haven't followed this.  My
apologies.

One of the ADs for the DNS directorate poked me the other day, and
asked whether I had read or commented on draft-ietf-pkix-caa.  I
hadn't, so I read it and commented on it, sending that review to the
AD in question as well as the authors.  For the sake of the record,
I'm including that entire review below, just so that people can see
it.  I didn't do it at the time because it seemed to me I was awful
late & didn't want to bother

Today, however, someone poked me about the tree-climbing issue, so I
thought I better say something.

The proposal that Richard Barnes made here on the list, to query the
name directly, seems to me to be the right one.  I do not see how
tree-climbing is going to help.  Moreover, it seems to me to cause a
result that is at least surprising in the face of alias chains
(particularly where DNAMEs are concerned).  

As for the wildcard issue: is there some reason not to put the CAA at
the wildcard in the DNS?  That seems to me to be right, and has the
additional benefit that it delivers the parent-side CAA record benefit
without needing to put a CAA record at any child name.

Best,

A


--- forwarded review

Review of draft-ietf-pkix-caa-11

I've been asleep at the switch.  I knew this draft went off to PKIX to
get worked on, but I failed to continue to follow it.  Here is my
review.  Sorry I'm late.

I.  Definitions

Some of these terms strike me as diverging a little from what I'd have
expected.

   Canonical Domain Name:  A Domain Name that is not an alias.  See
      [RFC1035] and future successors for definition of CNAME alias
      records.

Note that DNAMEs also produce aliases (this is noted later in the
document).  It'd probably be worth pointing that out.  2181 has some
helpful text, and if this and the next term is sorted out correctly I
suspect that this document has fallen into exactly what 2181 warns
about.

   Canonical Domain Name Value:  The value of a Canonical Domain Name.
      The value resulting from applying alias transformations to a
      Domain Name that is not canonical.

The first part of this definition is circular.  It seems that the
second part is talking about a canonical domain name.  In other words,
suppose you have a chain of CNAMEs.  At the end of the chain, if you
don't run out of time or processing patience and don't have a loop, is
a canonical domain name: the one true answer that itself can have A or
AAAA records and so on.  In 1034/5 and, more clearly, 2181, that's
called a "canonical domain name".  The "value" here isn't doing any
work, AFAICS.  Discussion later in the document seems not to rely on
these terms, so I'd be inclined to get rid of them.

   Domain:  The set of resources associated with a DNS Domain Name.

This is an interesting way to put it.  The difficulty I see is in that
term "resources".  Is this intended to mean "resource records"?  If
so, it must be false, because the domain also contains all the records
_not_ at that domain, but named by it.
(this.name.does.not.exist.in.crankycanuck.ca is in crankycanuck.ca,
but a query for it returns RCODE=3, Name Error).  This also seems not
to be the meaning of "domain" (different capitalization?) in section
4.2.  That definition is made up of labels, which are _not_ DNS labels
but instead a subset of DNS labels, constrained so as to meet the
traditional hostname, or LDH, syntax.

   Domain Name:  A DNS Domain name as specified in [RFC1035] and
      revisions.

I suspect the reference here is more appropriately to 1034, since it
has the concepts and so on and therefore expresses what a domain is.
Again, note that the document doesn't actually seem to apply to domain
names, but names conforming to the preferred syntax.

   Domain Name System (DNS):  The Internet naming system specified in
      [RFC1035] and revisions.

Should definitely include STD13, which is both 1034 and 1035.

   DNS Security (DNSSEC):  Extensions to the DNS that provide
      authentication services as specified in [RFC4033]. and revisions.

We decided about two years ago that DNSSEC is defined by 4033,
4034, 4035, and 5155.  The reasoning is only still in I-D form,
though, since that I-D is wending its way to publication, so it's not
surprising people don't have a way of knowing.

   Public Delegation Point:  The Domain Name suffix under which DNS
      names are delegated by a public DNS registry such as a Top Level
      Directory.

I understand why this needs to be defined, but we seem to have about
10 million different ways to refer to these things.  So you might
include, "Also known as public suffix, effective TLD, and even just
public domain," or something along those lines.  What does the term
"suffix" add?  It's a domain name.  COM is a domain name, not a
suffix.  Also, in my reading that definition is inconsistent with
section 2.1.  See below.

   Resource Record (RR):  A set of attributes bound to a Domain Name as
      defined in [RFC1035].

That's a very unusual gloss of RR.  Moreover, it ignores that RRs come
in sets.  See section 5 of 2181.  This definition isn't exactly wrong,
I think, but it's strained and I believe somewhat misleading.  Perhaps
better to say something like this: "A particular entry in the DNS
including the owner name, class, type, time to live, and data, as
defined in [RFC1035] and [RFC2181].  Resource records come in sets
identified by the owner name, class, and type.  The time to live on
all RRs is always the same.  The data may be different among RRs in an
RRset."  Or something like that.


II.  Issues in the text

In section 2.1, we have this:

   The following example informs CAs that certificates MUST NOT be
   issued except by the holder of the domain name 'ca.example.net' or an
   authorized agent thereof.  Since the policy is published at the
   Public Delegation Point, the policy applies to all subordinate
   domains under example.com.

   $ORIGIN example.com
   .       CAA 0 issue "ca.example.net"

First, "the policy" here is not, AFAICT, published at the Public
Delegation Point, but at a delegation beneath it.  The Definition of
PDP above means that com is the delegation point ("under which DNS
names are delegated": com does the delegation).  Second, this seems to
suggest that the policy flows top-down and constrains subordinate
names, but that's not what's in section 3.  Finally, that example
isn't actually for the example.com name, but for the root zone, at
least as it shows up when I look at it.  According to RFC1035, the
master file format uses <blank> there.  See RFC 1035 section 5.1 This
is true of other examples in the draft also.

Section 2.1 also includes this:

   $ORIGIN example.com
   .       CAA 0 issue "ca.example.net; account=230123"

Unless I overlooked it (and I might have), I can't find where the
document says that ";" is the parameter-separation character.  This
makes sense, because, "The syntax and semantics of such parameters is
left to site policy and is outside the scope of this document."  The
problem here, however, is that the document is supposed to be defining
the "issue" property tag, which is supposed to be somehow interpreted
by a reader of the document.  It's sort of hard for me to see how one
can define an output format of completely opaque blobs and call
it a "standard".  (This isn't particularly a DNS issue.  I just find
it a strange way to proceed.)

Section 3 depends on two different notions, the Issuer Authorization
Set and the Extended Issuer Authorization Set.  The ISA is just what
you'd think: the stuff you get back from a CAA query at that owner
name.  This is, of course, inconsistent with the bit from 2.1 (see
above), but I think it makes sense.  Then, however, we get the EISA,
which requires climbing the DNS tree to a Public Delegation Point.
How you get the Public Delegation Point is not defined, though I guess
the usual way to do it these days is to use the list at
publicsuffix.org and hope they are right.

I have two objections to this procedure.  The first is the usual
tree-climbing problem: this isn't something the DNS is well-suited to,
and it directs a bunch of queries into the DNS for no good reason.  

The second is that it imposes a constraint on subordinate names when
they don't know it.  Suppose that I delegate myfriend.crankycanuck.ca
(a domain I control), and I happen to publish a CAA record at
crankycanuck.ca.  If I don't tell my friend to publish a CAA record,
then my friend is stuck using the CA I selected.  I understand why it
would be convenient to climb the tree, but I don't think it's
necessary and I'm not convinced it's a wise addition to the protocol.  

We also have

   The DNS defines the CNAME and DNAME mechanisms for specifying domain
   name aliases.  The canonical name of a DNS name is the name that
   results from performing all DNS alias operations.  An issuer MUST
   perform CNAME and DNAME processing as defined in the DNS
   specifications [RFC1035] to resolve CAA records.

In combination with the tree-climbing issue, this is going to be
problematic.  Suppose we have

    example.net DNAME example.com

and 

    example.net CAA [$x]

Now, suppose we also have

    foo.example.com CAA [$y]

If someone requests a cert for bar.foo.example.net, does the CAA at
example.net rule, or the CAA at foo.example.com?  I guess it's the one
at foo.example.com, because the alias resolution appears to be
performed before anything else, but I find this result a little
surprising.  (It would just go away if the EISA wasn't there.)

Section 4.2's ABNF constrains domains to the hostname/LDH syntax.
This might be fine, but the document should probably state that
explicitly somewhere, since as things stand it seems to suggest that
you can use CAA for "domain names" and not for "domain names made up
entirely of LDH-labels".

Does section 4.3 constrain iodef URLs to only the mailto and http[s]
schemes?

Section 5.3 suggests that complete failure to get an answer for CAA
queries for a name results in the issuer refusing to issue a
certificate.  This could be stated more directly.








  




-- 
Andrew Sullivan
ajs@anvilwalrusden.com

From rbarnes@bbn.com  Thu Jul 19 13:07:32 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D487B21F877B for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 13:07:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.592
X-Spam-Level: 
X-Spam-Status: No, score=-106.592 tagged_above=-999 required=5 tests=[AWL=0.007, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hGCsedoSLOT2 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 13:07:31 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id 3521111E8093 for <pkix@ietf.org>; Thu, 19 Jul 2012 13:07:30 -0700 (PDT)
Received: from ros-dhcp192-1-51-20.bbn.com ([192.1.51.20]:62411) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1Srx1M-000Aya-3u; Thu, 19 Jul 2012 16:08:24 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=us-ascii
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <20120719200313.GE2939@mail.yitter.info>
Date: Thu, 19 Jul 2012 16:08:23 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <F8973059-9B1F-4F07-B3C2-D18D17322300@bbn.com>
References: <20120719200313.GE2939@mail.yitter.info>
To: Andrew Sullivan <ajs@anvilwalrusden.com>
X-Mailer: Apple Mail (2.1278)
Cc: pkix@ietf.org
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 20:07:33 -0000

On Jul 19, 2012, at 4:03 PM, Andrew Sullivan wrote:

> Dear colleagues,
>=20
> Some time ago, I learned that CAA was coming over to PKIX for
> continued work.  I thought to myself, "Gee, I oughta follow that," and
> promptly forgot about it, which is why I haven't followed this.  My
> apologies.
>=20
> One of the ADs for the DNS directorate poked me the other day, and
> asked whether I had read or commented on draft-ietf-pkix-caa.  I
> hadn't, so I read it and commented on it, sending that review to the
> AD in question as well as the authors.  For the sake of the record,
> I'm including that entire review below, just so that people can see
> it.  I didn't do it at the time because it seemed to me I was awful
> late & didn't want to bother
>=20
> Today, however, someone poked me about the tree-climbing issue, so I
> thought I better say something.
>=20
> The proposal that Richard Barnes made here on the list, to query the
> name directly, seems to me to be the right one.  I do not see how
> tree-climbing is going to help.  Moreover, it seems to me to cause a
> result that is at least surprising in the face of alias chains
> (particularly where DNAMEs are concerned). =20
>=20
> As for the wildcard issue: is there some reason not to put the CAA at
> the wildcard in the DNS?  That seems to me to be right, and has the
> additional benefit that it delivers the parent-side CAA record benefit
> without needing to put a CAA record at any child name.

Can you clarify what you mean by "at the wildcard"?  ISTM that that =
would mean

*.example.com CAA etc...

How would a CA look that record up?  Is it possible to have a qname =
"*.example.com"? =20

Thanks,
--Richard




> Best,
>=20
> A
>=20
>=20
> --- forwarded review
>=20
> Review of draft-ietf-pkix-caa-11
>=20
> I've been asleep at the switch.  I knew this draft went off to PKIX to
> get worked on, but I failed to continue to follow it.  Here is my
> review.  Sorry I'm late.
>=20
> I.  Definitions
>=20
> Some of these terms strike me as diverging a little from what I'd have
> expected.
>=20
>   Canonical Domain Name:  A Domain Name that is not an alias.  See
>      [RFC1035] and future successors for definition of CNAME alias
>      records.
>=20
> Note that DNAMEs also produce aliases (this is noted later in the
> document).  It'd probably be worth pointing that out.  2181 has some
> helpful text, and if this and the next term is sorted out correctly I
> suspect that this document has fallen into exactly what 2181 warns
> about.
>=20
>   Canonical Domain Name Value:  The value of a Canonical Domain Name.
>      The value resulting from applying alias transformations to a
>      Domain Name that is not canonical.
>=20
> The first part of this definition is circular.  It seems that the
> second part is talking about a canonical domain name.  In other words,
> suppose you have a chain of CNAMEs.  At the end of the chain, if you
> don't run out of time or processing patience and don't have a loop, is
> a canonical domain name: the one true answer that itself can have A or
> AAAA records and so on.  In 1034/5 and, more clearly, 2181, that's
> called a "canonical domain name".  The "value" here isn't doing any
> work, AFAICS.  Discussion later in the document seems not to rely on
> these terms, so I'd be inclined to get rid of them.
>=20
>   Domain:  The set of resources associated with a DNS Domain Name.
>=20
> This is an interesting way to put it.  The difficulty I see is in that
> term "resources".  Is this intended to mean "resource records"?  If
> so, it must be false, because the domain also contains all the records
> _not_ at that domain, but named by it.
> (this.name.does.not.exist.in.crankycanuck.ca is in crankycanuck.ca,
> but a query for it returns RCODE=3D3, Name Error).  This also seems =
not
> to be the meaning of "domain" (different capitalization?) in section
> 4.2.  That definition is made up of labels, which are _not_ DNS labels
> but instead a subset of DNS labels, constrained so as to meet the
> traditional hostname, or LDH, syntax.
>=20
>   Domain Name:  A DNS Domain name as specified in [RFC1035] and
>      revisions.
>=20
> I suspect the reference here is more appropriately to 1034, since it
> has the concepts and so on and therefore expresses what a domain is.
> Again, note that the document doesn't actually seem to apply to domain
> names, but names conforming to the preferred syntax.
>=20
>   Domain Name System (DNS):  The Internet naming system specified in
>      [RFC1035] and revisions.
>=20
> Should definitely include STD13, which is both 1034 and 1035.
>=20
>   DNS Security (DNSSEC):  Extensions to the DNS that provide
>      authentication services as specified in [RFC4033]. and revisions.
>=20
> We decided about two years ago that DNSSEC is defined by 4033,
> 4034, 4035, and 5155.  The reasoning is only still in I-D form,
> though, since that I-D is wending its way to publication, so it's not
> surprising people don't have a way of knowing.
>=20
>   Public Delegation Point:  The Domain Name suffix under which DNS
>      names are delegated by a public DNS registry such as a Top Level
>      Directory.
>=20
> I understand why this needs to be defined, but we seem to have about
> 10 million different ways to refer to these things.  So you might
> include, "Also known as public suffix, effective TLD, and even just
> public domain," or something along those lines.  What does the term
> "suffix" add?  It's a domain name.  COM is a domain name, not a
> suffix.  Also, in my reading that definition is inconsistent with
> section 2.1.  See below.
>=20
>   Resource Record (RR):  A set of attributes bound to a Domain Name as
>      defined in [RFC1035].
>=20
> That's a very unusual gloss of RR.  Moreover, it ignores that RRs come
> in sets.  See section 5 of 2181.  This definition isn't exactly wrong,
> I think, but it's strained and I believe somewhat misleading.  Perhaps
> better to say something like this: "A particular entry in the DNS
> including the owner name, class, type, time to live, and data, as
> defined in [RFC1035] and [RFC2181].  Resource records come in sets
> identified by the owner name, class, and type.  The time to live on
> all RRs is always the same.  The data may be different among RRs in an
> RRset."  Or something like that.
>=20
>=20
> II.  Issues in the text
>=20
> In section 2.1, we have this:
>=20
>   The following example informs CAs that certificates MUST NOT be
>   issued except by the holder of the domain name 'ca.example.net' or =
an
>   authorized agent thereof.  Since the policy is published at the
>   Public Delegation Point, the policy applies to all subordinate
>   domains under example.com.
>=20
>   $ORIGIN example.com
>   .       CAA 0 issue "ca.example.net"
>=20
> First, "the policy" here is not, AFAICT, published at the Public
> Delegation Point, but at a delegation beneath it.  The Definition of
> PDP above means that com is the delegation point ("under which DNS
> names are delegated": com does the delegation).  Second, this seems to
> suggest that the policy flows top-down and constrains subordinate
> names, but that's not what's in section 3.  Finally, that example
> isn't actually for the example.com name, but for the root zone, at
> least as it shows up when I look at it.  According to RFC1035, the
> master file format uses <blank> there.  See RFC 1035 section 5.1 This
> is true of other examples in the draft also.
>=20
> Section 2.1 also includes this:
>=20
>   $ORIGIN example.com
>   .       CAA 0 issue "ca.example.net; account=3D230123"
>=20
> Unless I overlooked it (and I might have), I can't find where the
> document says that ";" is the parameter-separation character.  This
> makes sense, because, "The syntax and semantics of such parameters is
> left to site policy and is outside the scope of this document."  The
> problem here, however, is that the document is supposed to be defining
> the "issue" property tag, which is supposed to be somehow interpreted
> by a reader of the document.  It's sort of hard for me to see how one
> can define an output format of completely opaque blobs and call
> it a "standard".  (This isn't particularly a DNS issue.  I just find
> it a strange way to proceed.)
>=20
> Section 3 depends on two different notions, the Issuer Authorization
> Set and the Extended Issuer Authorization Set.  The ISA is just what
> you'd think: the stuff you get back from a CAA query at that owner
> name.  This is, of course, inconsistent with the bit from 2.1 (see
> above), but I think it makes sense.  Then, however, we get the EISA,
> which requires climbing the DNS tree to a Public Delegation Point.
> How you get the Public Delegation Point is not defined, though I guess
> the usual way to do it these days is to use the list at
> publicsuffix.org and hope they are right.
>=20
> I have two objections to this procedure.  The first is the usual
> tree-climbing problem: this isn't something the DNS is well-suited to,
> and it directs a bunch of queries into the DNS for no good reason. =20
>=20
> The second is that it imposes a constraint on subordinate names when
> they don't know it.  Suppose that I delegate myfriend.crankycanuck.ca
> (a domain I control), and I happen to publish a CAA record at
> crankycanuck.ca.  If I don't tell my friend to publish a CAA record,
> then my friend is stuck using the CA I selected.  I understand why it
> would be convenient to climb the tree, but I don't think it's
> necessary and I'm not convinced it's a wise addition to the protocol. =20=

>=20
> We also have
>=20
>   The DNS defines the CNAME and DNAME mechanisms for specifying domain
>   name aliases.  The canonical name of a DNS name is the name that
>   results from performing all DNS alias operations.  An issuer MUST
>   perform CNAME and DNAME processing as defined in the DNS
>   specifications [RFC1035] to resolve CAA records.
>=20
> In combination with the tree-climbing issue, this is going to be
> problematic.  Suppose we have
>=20
>    example.net DNAME example.com
>=20
> and=20
>=20
>    example.net CAA [$x]
>=20
> Now, suppose we also have
>=20
>    foo.example.com CAA [$y]
>=20
> If someone requests a cert for bar.foo.example.net, does the CAA at
> example.net rule, or the CAA at foo.example.com?  I guess it's the one
> at foo.example.com, because the alias resolution appears to be
> performed before anything else, but I find this result a little
> surprising.  (It would just go away if the EISA wasn't there.)
>=20
> Section 4.2's ABNF constrains domains to the hostname/LDH syntax.
> This might be fine, but the document should probably state that
> explicitly somewhere, since as things stand it seems to suggest that
> you can use CAA for "domain names" and not for "domain names made up
> entirely of LDH-labels".
>=20
> Does section 4.3 constrain iodef URLs to only the mailto and http[s]
> schemes?
>=20
> Section 5.3 suggests that complete failure to get an answer for CAA
> queries for a name results in the issuer refusing to issue a
> certificate.  This could be stated more directly.
>=20
>=20
>=20
>=20
>=20
>=20
>=20
>=20
>=20
>=20
>=20
>=20
>=20
> --=20
> Andrew Sullivan
> ajs@anvilwalrusden.com
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix


From SChokhani@cygnacom.com  Thu Jul 19 13:49:49 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E167721F8652 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 13:49:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QeADQuhhGQlf for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 13:49:49 -0700 (PDT)
Received: from ipedge2.cygnacom.com (ipedge2.cygnacom.com [216.191.252.27]) by ietfa.amsl.com (Postfix) with ESMTP id 171AB21F85B4 for <pkix@ietf.org>; Thu, 19 Jul 2012 13:49:48 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,617,1336363200";  d="scan'208";a="1431432"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge2.cygnacom.com with ESMTP; 19 Jul 2012 16:50:42 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Thu, 19 Jul 2012 16:50:42 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: "mrex@sap.com" <mrex@sap.com>
Date: Thu, 19 Jul 2012 16:50:41 -0400
Thread-Topic: [pkix] new version of 5280 clarifications
Thread-Index: Ac1lzibakEsrSC69QVO7by8D2923bAAIby4A
Message-ID: <B83745DA469B7847811819C5005244AF362992FD@scygexch7.cygnacom.com>
References: <B83745DA469B7847811819C5005244AF362992BD@scygexch7.cygnacom.com> <20120719164707.3E0B11A0E2@ld9781.wdf.sap.corp>
In-Reply-To: <20120719164707.3E0B11A0E2@ld9781.wdf.sap.corp>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 20:49:50 -0000

Martin,

Do you agree that V1, V2, or V3 self-signed certificate without any extensi=
ons or without basic constraint extension present in it can be a trust anch=
or for path validation?

I would even go as far as to say that even if cA =3D FALSE is present in ba=
sic constraints, per Section 6 one can use it as a trust anchor for path va=
lidation.

-----Original Message-----
From: Martin Rex [mailto:mrex@sap.com]=20
Sent: Thursday, July 19, 2012 12:47 PM
To: Santosh Chokhani
Cc: David A. Cooper; Tom Gindin; pkix@ietf.org
Subject: Re: [pkix] new version of 5280 clarifications

Santosh Chokhani wrote:
>
>
> I would say that a self-signed certificate that does not contain any=20
> extension in it need NOT be an end entity certificate.
> Per Section 6 of 5280, it can be a trust anchor.

Per Section 6.1.4 (k) of rfc5280, even a path CA cert can be X.509v1:

      (k)  If certificate i is a version 3 certificate, verify that the
           basicConstraints extension is present and that cA is set to
           TRUE.  (If certificate i is a version 1 or version 2
           certificate, then the application MUST either verify that
           certificate i is a CA certificate through out-of-band means
           or reject the certificate.  Conforming implementations may
           choose to reject all version 1 and version 2 intermediate
           certificates.)

David A. Cooper wrote:
>=20
> Steve Kent claimed that "Version 1 certificates are not in scope for=20
> 5280."   While he is incorrect about that, I believe the statement that=20
> "this convention is often not adopted in practice" was intended to=20
> refer to version 3 certificates that do not include a BasicConstraints=20
> extension [with cA=3DTRUE] and not to version 1 certificates.

Steve's statement seems too broad and prone to misunderstanding.
The most that can be said, is, that rfc5280 does not profile X.509v1 certs.
The way I understood the purpose of PKIX was to leverage, rather than kill,=
 the installed base of X.509.  Since the underlying technology (X.509v3) is=
 quite complex and awkward, there is a lot of bad practice out there in the=
 installed base, which RPs have to deal with in one way or another.

Remaining completely silent (=3Dchicken out) on potential or real interop i=
ssues that have been identified does not seem appropriate for an IETF stand=
ard with an awfully huge installed base.


>=20
> Notice that I also inquired about version 1 certificates.  The=20
> proposed text says that a self-signed certificate that does not=20
> contain a BasicConstraints extension is implicitly an EE certificate.
> In my comments on the draft (below) I asked "Does this mean that all=20
> version 1 certificates are implicitly EE certificates?"

The current text in rfc 5280 6.1.4 (k) quoted above makes a clear distincti=
on between X.509v3 certs without Basic Constraints and
X.509v1 certs, and suggests that the latter (X.509v1 certs) MUST use other =
means than cert attributes (out-of-band / meta-data) to distinguish CA from=
 EE certs.


-Martin

From ajs@anvilwalrusden.com  Thu Jul 19 14:31:36 2012
Return-Path: <ajs@anvilwalrusden.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2427D11E80C5 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 14:31:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.321
X-Spam-Level: 
X-Spam-Status: No, score=-1.321 tagged_above=-999 required=5 tests=[AWL=-0.481, BAYES_00=-2.599, HELO_MISMATCH_INFO=1.448, HOST_MISMATCH_NET=0.311]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PCQ7rfNf7-En for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 14:31:35 -0700 (PDT)
Received: from mx1.yitter.info (ow5p.x.rootbsd.net [208.79.81.114]) by ietfa.amsl.com (Postfix) with ESMTP id 77B6E11E80C4 for <pkix@ietf.org>; Thu, 19 Jul 2012 14:31:33 -0700 (PDT)
Received: from mail.yitter.info (69-196-144-227.dsl.teksavvy.com [69.196.144.227]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.yitter.info (Postfix) with ESMTPSA id 11B438A031 for <pkix@ietf.org>; Thu, 19 Jul 2012 21:32:26 +0000 (UTC)
Date: Thu, 19 Jul 2012 17:32:24 -0400
From: Andrew Sullivan <ajs@anvilwalrusden.com>
To: pkix@ietf.org
Message-ID: <20120719213224.GG2939@mail.yitter.info>
References: <20120719200313.GE2939@mail.yitter.info> <F8973059-9B1F-4F07-B3C2-D18D17322300@bbn.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <F8973059-9B1F-4F07-B3C2-D18D17322300@bbn.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 19 Jul 2012 21:31:36 -0000

On Thu, Jul 19, 2012 at 04:08:23PM -0400, Richard L. Barnes wrote:
> Can you clarify what you mean by "at the wildcard"?  ISTM that that would mean
> 
> *.example.com CAA etc...

Yes.

> How would a CA look that record up?  Is it possible to have a qname "*.example.com"?  

Yes.  RFC 1034 section 4.3.3 says this:

    A * label appearing in a query name has no special effect, but can be
    used to test for wildcards in an authoritative zone; such a query is the
    only way to get a response containing RRs with an owner name with * in
    it.  The result of such a query should not be cached.

This has always worked for me with dig.  I'm not entirely sure what
high-level libraries do with wildcards, though; I wouldn't be
surprised to learn that some of them do stupid things.  Still, you're
supposed to be able to ask for these.

Best,

A

-- 
Andrew Sullivan
ajs@anvilwalrusden.com

From tgindin@us.ibm.com  Thu Jul 19 17:03:53 2012
Return-Path: <tgindin@us.ibm.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 40B1511E80A6 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 17:03:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.599
X-Spam-Level: 
X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0r9wTPRn6B4N for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 17:03:52 -0700 (PDT)
Received: from e3.ny.us.ibm.com (e3.ny.us.ibm.com [32.97.182.143]) by ietfa.amsl.com (Postfix) with ESMTP id EC44D11E80A0 for <pkix@ietf.org>; Thu, 19 Jul 2012 17:03:51 -0700 (PDT)
Received: from /spool/local by e3.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <pkix@ietf.org> from <tgindin@us.ibm.com>; Thu, 19 Jul 2012 20:04:46 -0400
Received: from d01dlp03.pok.ibm.com (9.56.224.17) by e3.ny.us.ibm.com (192.168.1.103) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Thu, 19 Jul 2012 20:04:43 -0400
Received: from d01relay04.pok.ibm.com (d01relay04.pok.ibm.com [9.56.227.236]) by d01dlp03.pok.ibm.com (Postfix) with ESMTP id 38442C9001C for <pkix@ietf.org>; Thu, 19 Jul 2012 20:04:43 -0400 (EDT)
Received: from d01av01.pok.ibm.com (d01av01.pok.ibm.com [9.56.224.215]) by d01relay04.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id q6K04hfP401776 for <pkix@ietf.org>; Thu, 19 Jul 2012 20:04:43 -0400
Received: from d01av01.pok.ibm.com (loopback [127.0.0.1]) by d01av01.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id q6K5ZZQN029775 for <pkix@ietf.org>; Fri, 20 Jul 2012 01:35:35 -0400
Received: from d01ml062.pok.ibm.com (d01ml062.pok.ibm.com [9.63.10.95]) by d01av01.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id q6K5ZZX7029763; Fri, 20 Jul 2012 01:35:35 -0400
In-Reply-To: <50081AA0.5060107@nist.gov>
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com> <4FFF2AF5.4070007@nist.gov> <OFE6D3640A.D4FCD6C5-ON85257A3E.00774EDD-85257A40.0003F4F9@us.ibm.com> <50081AA0.5060107@nist.gov>
To: "David A. Cooper" <david.cooper@nist.gov>
MIME-Version: 1.0
X-KeepSent: 447F9ED9:566ED59A-85257A40:0051B1F2; type=4; name=$KeepSent
X-Mailer: Lotus Notes Build V853_CD5_06022011 June 02, 2011
From: Tom Gindin <tgindin@us.ibm.com>
Message-ID: <OF447F9ED9.566ED59A-ON85257A40.0051B1F2-85257A41.00007312@us.ibm.com>
Date: Thu, 19 Jul 2012 20:04:40 -0400
X-MIMETrack: Serialize by Router on D01ML062/01/M/IBM(Release 8.5.3 ZX853HP5|January 12, 2012) at 07/19/2012 20:04:42, Serialize complete at 07/19/2012 20:04:42
Content-Type: text/plain; charset="US-ASCII"
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 12072000-8974-0000-0000-00000B546F88
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 00:03:53 -0000

        A better wording for the idea in the draft would say "a 
self-signed version 3 certificate that does not contain a BasicConstraints 
extension is implicitly an EE certificate", since we've clearly settled 
that v1 (and presumably v2) self-signed certificates are still used as 
trust anchors.  Do you agree that this rule is appropriate, or not?
        I'm not arguing against you on this issue.  While an application 
CAN import anything containing the proper fields as a trust anchor, 
including a TLS server certificate, it SHOULD NOT do so when a certificate 
is clearly an EE.  Directly trusted EE certificates, although they have 
their place in many implementations of PKI-using applications, are out of 
scope for certificate validation and don't constitute trust anchors.

Tom Gindin

P.S.    The above opinions are mine, and not necessarily those of my 
employer.




From:   "David A. Cooper" <david.cooper@nist.gov>
To:     Tom Gindin/Watson/IBM@IBMUS, 
Cc:     "pkix@ietf.org" <pkix@ietf.org>
Date:   07/19/2012 10:33 AM
Subject:        Re: [pkix] new version of 5280 clarifications



Tom,

Steve Kent claimed that "Version 1 certificates are not in scope for 
5280."   While he is incorrect about that, I believe the statement that 
"this convention is often not adopted in practice" was intended to refer 
to version 3 certificates that do not include a BasicConstraints 
extension [with cA=TRUE] and not to version 1 certificates.

Notice that I also inquired about version 1 certificates.  The proposed 
text says that a self-signed certificate that does not contain a 
BasicConstraints extension is implicitly an EE certificate.  In my 
comments on the draft (below) I asked "Does this mean that all version 1 
certificates are implicitly EE certificates?"

Dave

On 07/18/2012 08:43 PM, Tom Gindin wrote:
>          David:
>
>          Several unexpired V1 certificates are distributed in the 
"Trusted
> Root" list of Windows XP.  GTE Cybertrust Global Root is a V1. 
Admittedly,
> it's a 1024-bit key using MD5.  FESTE, Public Notary Certs, is similar.
> Japan Certification Services' SecureSign RootCA certificates are 
2048-bit
> with SHA-1 signatures, and don't expire until 2020.  They aren't RFC 
5280
> certificates, but they certainly are self-signed X.509 certificates
> without BC used to convey trust anchor information.
>
> Tom Gindin
>
>
>
>
>
> From:   "David A. Cooper" <david.cooper@nist.gov>
> To:     Peter Yee <peter@akayla.com>,
> Cc:     "pkix@ietf.org" <pkix@ietf.org>
> Date:   07/12/2012 03:52 PM
> Subject:        Re: [pkix] new version of 5280 clarifications
> Sent by:        pkix-bounces@ietf.org
>
>
>
> On 06/30/2012 12:58 AM, Peter Yee wrote:
>> The updated draft has been posted.  Please let me know if further
> changes
>> are required.
> Peter,
>
> I disagree with the changes that you made for the new paragraph to
> appear at the end of Section 3.2.  The text that you included in the -05
> draft says:
>
> |  In some cases, a self-signed certificate that does not contain a
> |  BasicConstraints extension (and thus is implicitly an EE certificate)
> |  is used to convey a public key. Such a certificate (i.e., a self-
> |  signed certificate not marked as a CA certificate) is not compatible
> |  with the path validation rules described in Section 6, or the
> |  definitions in the paragraph above. This document RECOMMENDS that
> |  self-signed certificates used to convey trust anchor data be marked
> |  (see Section 4.2.1.9) as CA certificates, but acknowledges that this
> |  convention is often not adopted in practice. Other uses of self-
> |  signed EE certificates are outside the scope of this specification.
>
> The inclusion of this paragraph was prompted by a request from Sean
> Turner (http://www.ietf.org/mail-archive/web/pkix/current/msg29661.html)
> that was motivated by discussions in other working groups, such as
> DANE.  These discussions were about the use of self-signed certificates
> for purposes other than conveying trust anchor information, not about
> whether self-signed certificates used to convey trust anchor information
> should include a BasicConstraints extension.  Yet, the paragraph in the
> -05 draft, unlike in the -04 draft, is all about including
> BasicConstraints extensions in self-signed certificates used to convey
> trust anchor information. Section 4.2.1.9 of RFC 5280 already says that
> conforming CAs MUST include a BasicConstraints extension in self-signed
> certificates used to convey trust anchor information:
>
>      Conforming CAs MUST include [the BasicConstraints]
>      extension in all CA certificates that contain public keys
>      used to validate digital signatures on certificates and
>      MUST mark the extension as critical in such certificates.
>
> So, adding a sentence to Section 3.2 that RECOMMENDS including a
> BasicConstraints extension would be inconsistent.  So, why not remove
> all the text about whether a self-signed certificates used to convey
> trust anchor information should include a BasicConstraints extension and
> replace it with text (such as was in the -04 draft) that addresses the
> use of self-signed certificates for purposes other than conveying trust
> anchor information?
>
> I also believe that the proposed text in the -05 draft is wrong for
> several other reasons.
>
> The text states that a self-signed certificate that does not contain a
> BasicConstraints extension is implicitly an EE certificate.  Does this
> mean that all version 1 certificates are implicitly EE certificates?
> Additionally, the text goes on to talk about the use of these
> certificates to convey trust anchor information.  However, according to
> X.509 an EE certificate is a certificate issued to an end entity, and an
> end entity is a certificate subject that uses its private key for
> purposes other than signing certificates.  So, if the subject of the
> self-signed certificate signs certificates (and if it didn't then why
> would anyone be using the its self-signed certificate as a trust anchor
> for path validation) then it is not an end entity and the self-signed
> certificate is not an EE certificate.
>
> The proposed paragraph then goes on to incorrectly state that the use of
> a self-signed certificate that does not contain a BasicConstraints
> extension as the source of trust anchor information is not compatible
> with the path validation rules specified in Section 6 of RFC 5280.
> However, Section 6 of RFC 5280 simply says that trust anchor information
> consists of a name and a public key, and that this information may be
> obtained from a self-signed certificate.  So, there is no basis for an
> assertion that it is incompatible with Section 6 of RFC 5280 to obtain
> trust anchor information from a self-signed certificate that does not
> include a BasicConstraints extension.
>
> The next sentence in the proposed paragraph says that the document
> acknowledges that the convention of including a BasicConstraints
> extension in a self-signed certificate used to convey trust anchor
> information is often not adopted in practice.  What is the basis of this
> assertion?  Can you provide examples of self-signed certificates used to
> convey trust anchor information that do not include BasicConstraints
> extensions (and not just the names of software products that are capable
> of generating self-signed certificate without BasicConstraints
> extensions)?
>
> I haven't even addressed the fact that a certificate could include a
> BasicConstraints extension, but set the cA flag to FALSE.
>
> RFC 5280 already specifies what information conforming CAs need to
> include in certificates, including self-signed certificates, so there is
> no need to add this paragraph to address that.  So, why not revert to
> the text that was in the -04 draft, which addressed the issue that was
> supposed to be covered by this new text, the use of self-signed
> certificate for purposes other than conveying trust anchor information,
> rather than the text in this draft?
>
> Dave
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>




From danbryan80@gmail.com  Thu Jul 19 17:25:35 2012
Return-Path: <danbryan80@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0724F11E80BE for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 17:25:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level: 
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yVl5rIk0ZWwF for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 17:25:34 -0700 (PDT)
Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id 2B53411E80A6 for <pkix@ietf.org>; Thu, 19 Jul 2012 17:25:33 -0700 (PDT)
Received: by lbbgo11 with SMTP id go11so4721654lbb.31 for <pkix@ietf.org>; Thu, 19 Jul 2012 17:26:27 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=64NA+gZ83oLmSBbyzZcKd/03905SBX6da02IQHY2hIk=; b=KBOcljkS4XHadIQSflK8zwfBlQEfxLgG+wsN27jDBfH1+Xg3wP3d9AvpuoZQ6+Q+C/ cGjpQCSqZXnw7/1QLaEsuBIMNEUWTeNblCVbj7BJ+7SHrv9EKyrWHWKz1a5dyp0NO+Rx EQiHmG4i1mYSv0OqX/jh5vKizbMkI56rLPfnsiy8a/FJD9XBesmhip2kbYm64Z2B/KBh k2Niv4kbdFMlIC/NBlLRM91dc/46Zu/jHWluA9h8kXbA1bhV8ysFB4OpJC//2Q35TdLf eKNtCiDtMsfg5b0glF/TsNKaAPJYorA0xeP5OVwiUPoYfyl0wXJSk+VKk2EHyVIgtPu2 bNPg==
MIME-Version: 1.0
Received: by 10.152.144.168 with SMTP id sn8mr4178956lab.1.1342743987789; Thu, 19 Jul 2012 17:26:27 -0700 (PDT)
Received: by 10.114.37.73 with HTTP; Thu, 19 Jul 2012 17:26:27 -0700 (PDT)
Date: Thu, 19 Jul 2012 20:26:27 -0400
Message-ID: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com>
From: daniel bryan <danbryan80@gmail.com>
To: pkix@ietf.org
Content-Type: multipart/alternative; boundary=e89a8f2346876a9f7804c537f2d0
Subject: [pkix]  OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 00:25:35 -0000

--e89a8f2346876a9f7804c537f2d0
Content-Type: text/plain; charset=ISO-8859-1

I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd
party OCSP responder made by actividentity.  According to my CAPI2 log on
the IIS server, its sending a GET request to my OCSP responder, and getting
an error saying malformed ocsp request.  If I use a 3rd party CAPI plugin
on the IIS machine it sends POST request to the OCSP responder and recieves
no errors.

Is there a way I can tell windows to send OCSP request as a POST instead of
a GET?

--e89a8f2346876a9f7804c537f2d0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<font face=3D"comic sans ms, sans-serif">I am using windows 2k8r2 certifica=
te services, win2k8r2 IIS, and a 3rd party OCSP responder made by actividen=
tity. =A0According to my CAPI2 log on the IIS server, its sending a GET req=
uest to my OCSP responder, and getting an error saying malformed ocsp reque=
st. =A0If I use a 3rd party CAPI plugin on the IIS machine it sends POST re=
quest to the OCSP responder and recieves no errors.</font><div>
<font face=3D"comic sans ms, sans-serif"><br></font></div><div><font face=
=3D"comic sans ms, sans-serif">Is there a way I can tell windows to send OC=
SP request as a POST instead of a GET?</font></div>

--e89a8f2346876a9f7804c537f2d0--

From James.H.Manger@team.telstra.com  Thu Jul 19 19:10:10 2012
Return-Path: <James.H.Manger@team.telstra.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8953411E80C7 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 19:10:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.943
X-Spam-Level: 
X-Spam-Status: No, score=-0.943 tagged_above=-999 required=5 tests=[AWL=-0.410, BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, RELAY_IS_203=0.994, URI_HEX=0.368]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9KFUWF6iu-Uq for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 19:10:09 -0700 (PDT)
Received: from ipxano.tcif.telstra.com.au (ipxano.tcif.telstra.com.au [203.35.82.200]) by ietfa.amsl.com (Postfix) with ESMTP id 77E5511E80BE for <pkix@ietf.org>; Thu, 19 Jul 2012 19:10:09 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,619,1336312800"; d="scan'208";a="88072669"
Received: from unknown (HELO ipcdni.tcif.telstra.com.au) ([10.97.216.212]) by ipoani.tcif.telstra.com.au with ESMTP; 20 Jul 2012 12:11:03 +1000
X-IronPort-AV: E=McAfee;i="5400,1158,6777"; a="72161409"
Received: from wsmsg3753.srv.dir.telstra.com ([172.49.40.174]) by ipcdni.tcif.telstra.com.au with ESMTP; 20 Jul 2012 12:11:02 +1000
Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by WSMSG3753.srv.dir.telstra.com ([172.49.40.174]) with mapi; Fri, 20 Jul 2012 12:11:01 +1000
From: "Manger, James H" <James.H.Manger@team.telstra.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Date: Fri, 20 Jul 2012 12:11:00 +1000
Thread-Topic: [pkix] CAA record location / tree climbing
Thread-Index: Ac1l2z0JChJ+ICs1TMWB3ZIf2Tz2egAKzfBQ
Message-ID: <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com>
In-Reply-To: <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com>
Accept-Language: en-US, en-AU
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US, en-AU
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 02:10:10 -0000
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From carl@redhoundsoftware.com  Thu Jul 19 19:16:35 2012
Return-Path: <carl@redhoundsoftware.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ED26811E80D7 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 19:16:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level: 
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id e9aqbdKpXNl9 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 19:16:35 -0700 (PDT)
Received: from mail-qa0-f51.google.com (mail-qa0-f51.google.com [209.85.216.51]) by ietfa.amsl.com (Postfix) with ESMTP id 3C02511E80BE for <pkix@ietf.org>; Thu, 19 Jul 2012 19:16:35 -0700 (PDT)
Received: by qaea16 with SMTP id a16so2080030qae.10 for <pkix@ietf.org>; Thu, 19 Jul 2012 19:17:27 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :in-reply-to:mime-version:content-type:content-transfer-encoding :x-gm-message-state; bh=guVUJoWRNpPqoCv+T0T61CgAGv+AXGimS/Zwqw0JaBc=; b=l6hBT6obBB5QN2zO/Gts1iLa/uC+LAHf+cIrYOLueawjZyO7BEgv80dOJr2kz0uKyv qskLllWug+POkiIDc94kiphCj5BldaGmgN8haFhVZUZDxLdlwq2ln8KhnFHsZ5tnWNvm i4cnlimaHNJrmYvyHhqp+sVpEYihR13FFQT/DE9WzYRXD13rKqC9h/sdqohGiF0e41C5 2k+YAy6QRudhIJDXWJ6ImF/+mQXO2xK6l1ysx0gDaE/CCQ+hqLqUt6kAJxdGuUZGzEbJ YwlkEQJLGTnw+TbOHEhZccX/q280556SIRcdjZ84mBDeaBM1gSykBZjr+ky2a92/31X9 eU3g==
Received: by 10.224.111.144 with SMTP id s16mr7215268qap.75.1342750647782; Thu, 19 Jul 2012 19:17:27 -0700 (PDT)
Received: from [192.168.1.2] (pool-173-79-118-111.washdc.fios.verizon.net. [173.79.118.111]) by mx.google.com with ESMTPS id ea5sm4249335qab.2.2012.07.19.19.17.25 (version=SSLv3 cipher=OTHER); Thu, 19 Jul 2012 19:17:26 -0700 (PDT)
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Thu, 19 Jul 2012 22:17:21 -0400
From: Carl Wallace <carl@redhoundsoftware.com>
To: "Manger, James H" <James.H.Manger@team.telstra.com>
Message-ID: <CC2E36CB.1D62E%carl@redhoundsoftware.com>
Thread-Topic: [pkix] CAA record location / tree climbing
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
X-Gm-Message-State: ALoCoQlRb/dPFzkVD63Ts7FAXD5q4puNUF41IVxw6OvL2B3JxMjNc0uPvc6BbEwnzEBeu/U4bB6J
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 02:16:36 -0000

>
>But that is NOT going to be the policy.
>The policies will be (I hope):
>* Firefox/Chrome/Opera/Windows/Safari/Java/... say a CA MUST implement
>CAA to be in the default list of trusted roots for that browser/OS/app
>(by, say, 2013)
>* Relying parties curating their own trust list prefer to pick CAs that
>implement CAA

This will not happen until it becomes easy to change the trust posture of
a browser, i.e., to use a small TA set along the lines of what you suggest
for some actions and a broader set to access other sites for which the
user has less strict or no security requirements.



From mrex@sap.com  Thu Jul 19 19:21:37 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E8EB11E8072 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 19:21:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.249
X-Spam-Level: 
X-Spam-Status: No, score=-10.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zr0YmTh1bPNg for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 19:21:36 -0700 (PDT)
Received: from smtpde01.sap-ag.de (smtpde01.sap-ag.de [155.56.68.170]) by ietfa.amsl.com (Postfix) with ESMTP id 183E611E80BE for <pkix@ietf.org>; Thu, 19 Jul 2012 19:21:34 -0700 (PDT)
Received: from mail.sap.corp by smtpde01.sap-ag.de (26) with ESMTP id q6K2MM1m024311 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 20 Jul 2012 04:22:28 +0200 (MEST)
In-Reply-To: <OF447F9ED9.566ED59A-ON85257A40.0051B1F2-85257A41.00007312@us.ibm.com>
To: Tom Gindin <tgindin@us.ibm.com>
Date: Fri, 20 Jul 2012 04:22:22 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120720022222.CB7A21A0E2@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 02:21:37 -0000

Tom Gindin wrote:
>         I'm not arguing against you on this issue.  While an application 
> CAN import anything containing the proper fields as a trust anchor, 
> including a TLS server certificate, it SHOULD NOT do so when a certificate 
> is clearly an EE.

If the only means offered by PKI software, to mark a peer's certificate
as trusted, is to import it as a trust anchor, then importing certs
that are clearly EEs (and enforcing this as trust anchor constraint")
is actually a perfectly reasonable action.

Importing TLS server certs that are valid CA certs is the real problem,
because it may have very serious unintended consequences.


>
> Directly trusted EE certificates, although they have their place
> in many implementations of PKI-using applications, are out of 
> scope for certificate validation and don't constitute trust anchors.

Peer certificates that are directly trusted usually bypass all of PKI(X).

While they may not constitute "trust anchors" in the original sense as
input to the 6.1 certificate path validation, most PKI(X) software is
not particularly helpful in distinguishing "trusted communication peer
certificates" from "trust anchors", in terminology and documentation.

Have you ever clicked on a self-signed cert in a file "somecert.cer"
in a popular OS and observed where the certificate wizard will suggest
to place that cert?


-Martin

From ajs@anvilwalrusden.com  Thu Jul 19 19:37:04 2012
Return-Path: <ajs@anvilwalrusden.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B6CB21F851A for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 19:37:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.307
X-Spam-Level: 
X-Spam-Status: No, score=-1.307 tagged_above=-999 required=5 tests=[AWL=-0.467, BAYES_00=-2.599, HELO_MISMATCH_INFO=1.448, HOST_MISMATCH_NET=0.311]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XkA-hk+hxDCA for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 19:37:04 -0700 (PDT)
Received: from mx1.yitter.info (ow5p.x.rootbsd.net [208.79.81.114]) by ietfa.amsl.com (Postfix) with ESMTP id 17EC221F8518 for <pkix@ietf.org>; Thu, 19 Jul 2012 19:37:04 -0700 (PDT)
Received: from crankycanuck.ca (69-196-144-227.dsl.teksavvy.com [69.196.144.227]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.yitter.info (Postfix) with ESMTPSA id 4B4F98A031 for <pkix@ietf.org>; Fri, 20 Jul 2012 02:37:58 +0000 (UTC)
Date: Thu, 19 Jul 2012 22:37:57 -0400
From: Andrew Sullivan <ajs@anvilwalrusden.com>
To: pkix@ietf.org
Message-ID: <20120720023757.GG2952@crankycanuck.ca>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 02:37:04 -0000

Hi,

I know I'm late to the party, but I'm curious about something.

On Fri, Jul 20, 2012 at 12:11:00PM +1000, Manger, James H wrote:
> 
> To make a.b.example.com safer, I don't want any CA other than CA1 to issue a certificate that browsers will accept as having any special permissions with respect to a.b.example.com (eg masquerade as, read cookiesâ€¦).
> 
> Hence I want to publish CAA records so that CA2 will NOT issue a certificate for a.b.example.com, or *.b.example.com, or *.example.com, or nonexistent.a.b.example.com, or staging.a.b.example.com.
> 

What makes you sure that example.com ought to be the people you ask
about what a.b.example.com is doing?  Is this just because you think
com is the last "public" registration point?  (Note, I say
"registration", not "delegation".  There's no reason, AFAICT, that
delegation is the relevant question here, but I may well be missing
something.  I have a draft floating around about this problem.)  If
so, how do you know that?  What if you're wrong?
 
> In contrast, if CA2 walks up the DNS to example.com until it finds a
> CAA record, then I can publish 1 CAA record at example.com to
> achieve my aim.

Quite apart from the tree-climbing problem, you can only do that if
you also know where the administrative boundaries are, and I don't
think you do.

Best,

A

-- 
Andrew Sullivan
ajs@anvilwalrusden.com

From ajs@anvilwalrusden.com  Thu Jul 19 20:03:25 2012
Return-Path: <ajs@anvilwalrusden.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 372C911E80EA for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 20:03:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.3
X-Spam-Level: 
X-Spam-Status: No, score=-1.3 tagged_above=-999 required=5 tests=[AWL=-0.460,  BAYES_00=-2.599, HELO_MISMATCH_INFO=1.448, HOST_MISMATCH_NET=0.311]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3v6Rxfc0yjoR for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 20:03:24 -0700 (PDT)
Received: from mx1.yitter.info (ow5p.x.rootbsd.net [208.79.81.114]) by ietfa.amsl.com (Postfix) with ESMTP id ADD8E11E80E9 for <pkix@ietf.org>; Thu, 19 Jul 2012 20:03:24 -0700 (PDT)
Received: from crankycanuck.ca (69-196-144-227.dsl.teksavvy.com [69.196.144.227]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.yitter.info (Postfix) with ESMTPSA id 9FD148A031 for <pkix@ietf.org>; Fri, 20 Jul 2012 03:04:18 +0000 (UTC)
Date: Thu, 19 Jul 2012 23:04:17 -0400
From: Andrew Sullivan <ajs@anvilwalrusden.com>
To: pkix@ietf.org
Message-ID: <20120720030417.GI2952@crankycanuck.ca>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 03:03:25 -0000

On Fri, Jul 20, 2012 at 12:11:00PM +1000, Manger, James H wrote:
> 
> To make a.b.example.com safer, I don't want any CA other than CA1 to
> issue a certificate that browsers will accept as having any special
> permissions with respect to a.b.example.com (eg masquerade as, read
> cookiesâ€¦).
> 
> Hence I want to publish CAA records so that CA2 will NOT issue a
> certificate for a.b.example.com, or *.b.example.com, or
> *.example.com, or nonexistent.a.b.example.com, or
> staging.a.b.example.com.

Sorry for the second followup, but I have a sneaking suspicion that
I'm about to fall into the crack between what the DNS means by
wildcards, and what CAs appear to have meant.  Let me try to describe
issues I see, and you can tell me how I'm wrong.

a.b.example.com: this one's easy.  If it exists, put a CAA there.  If
it does not, NXDOMAIN, so no answer.

*.b.example.com: this is trickier.  I _think_ the problem you're
actually worried about is not that there is a zone entry for
*.b.example.com (which entails a.b.example.com gets an answer), but
rather that the CA might issue for *.b.example.com, and that would
cover the existing a.b.example.com, and you don't want that.  If I'm
right about this, then my earlier note about putting a CAA at the
wildcard entry indeed does not work: the semantics of "*" are not the
same between the DNS and the CA issuers, for better or worse, and
we're trying to give instructions to issuers.  Now I get this.

If that's the thing we're trying to talk about, then yes, you need
some special label to call this out.  I guess Richard's
underscore-convention answer (much as I hate those things) is as good
an answer as any other, then.

One other answer, of course, would be to make the issuance of wildcard
certs incompatible with CAA processing.  If you do CAA, you don't
issue wildcards, period, because they can't be tested properly in the
DNS.  I suspect this suggestion to fly like a lead balloon, but it
seems worth pointing out for completeness.

I note that nonexistent.a.b.example.com is an easy case in the face of
DNSSEC: you get a proof of non-existence, so you can know that there's
no such name and therefore you don't issue to it.  Right?

I still think, however, that tree-climbing is going to fall down
(sorry) because of the lack of information about where the
administrative boundaries actually are.

Best,

A

-- 
Andrew Sullivan
ajs@anvilwalrusden.com

From James.H.Manger@team.telstra.com  Thu Jul 19 20:12:20 2012
Return-Path: <James.H.Manger@team.telstra.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 62FC611E80E4 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 20:12:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.118
X-Spam-Level: 
X-Spam-Status: No, score=-1.118 tagged_above=-999 required=5 tests=[AWL=-0.217, BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, RELAY_IS_203=0.994]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id em8Onwyow9sB for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 20:12:19 -0700 (PDT)
Received: from ipxcvo.tcif.telstra.com.au (ipxcvo.tcif.telstra.com.au [203.35.135.208]) by ietfa.amsl.com (Postfix) with ESMTP id 7FD1321F84FD for <pkix@ietf.org>; Thu, 19 Jul 2012 20:12:19 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,620,1336312800"; d="scan'208";a="85204313"
Received: from unknown (HELO ipccvi.tcif.telstra.com.au) ([10.97.217.208]) by ipocvi.tcif.telstra.com.au with ESMTP; 20 Jul 2012 13:13:14 +1000
X-IronPort-AV: E=McAfee;i="5400,1158,6777"; a="76803967"
Received: from wsmsg3704.srv.dir.telstra.com ([172.49.40.197]) by ipccvi.tcif.telstra.com.au with ESMTP; 20 Jul 2012 13:13:13 +1000
Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by WSMSG3704.srv.dir.telstra.com ([172.49.40.197]) with mapi; Fri, 20 Jul 2012 13:13:12 +1000
From: "Manger, James H" <James.H.Manger@team.telstra.com>
To: Andrew Sullivan <ajs@anvilwalrusden.com>, "pkix@ietf.org" <pkix@ietf.org>
Date: Fri, 20 Jul 2012 13:13:11 +1000
Thread-Topic: [pkix] CAA record location / tree climbing
Thread-Index: Ac1mILYYgRhvvVoZRw2wp4uKDq3HDQAAUhng
Message-ID: <255B9BB34FB7D647A506DC292726F6E114F7D97FAD@WSMSG3153V.srv.dir.telstra.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com> <20120720023757.GG2952@crankycanuck.ca>
In-Reply-To: <20120720023757.GG2952@crankycanuck.ca>
Accept-Language: en-US, en-AU
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US, en-AU
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 03:12:20 -0000
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From James.H.Manger@team.telstra.com  Thu Jul 19 20:37:42 2012
Return-Path: <James.H.Manger@team.telstra.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7839E11E80D7 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 20:37:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.114
X-Spam-Level: 
X-Spam-Status: No, score=-1.114 tagged_above=-999 required=5 tests=[AWL=-0.213, BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, RELAY_IS_203=0.994]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EO8dTQ291lob for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 20:37:42 -0700 (PDT)
Received: from ipxano.tcif.telstra.com.au (ipxano.tcif.telstra.com.au [203.35.82.200]) by ietfa.amsl.com (Postfix) with ESMTP id 98B5311E8072 for <pkix@ietf.org>; Thu, 19 Jul 2012 20:37:41 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,620,1336312800"; d="scan'208";a="88086658"
Received: from unknown (HELO ipcdni.tcif.telstra.com.au) ([10.97.216.212]) by ipoani.tcif.telstra.com.au with ESMTP; 20 Jul 2012 13:38:35 +1000
X-IronPort-AV: E=McAfee;i="5400,1158,6777"; a="72176902"
Received: from wsmsg3704.srv.dir.telstra.com ([172.49.40.197]) by ipcdni.tcif.telstra.com.au with ESMTP; 20 Jul 2012 13:38:35 +1000
Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by WSMSG3704.srv.dir.telstra.com ([172.49.40.197]) with mapi; Fri, 20 Jul 2012 13:38:34 +1000
From: "Manger, James H" <James.H.Manger@team.telstra.com>
To: Andrew Sullivan <ajs@anvilwalrusden.com>, "pkix@ietf.org" <pkix@ietf.org>
Date: Fri, 20 Jul 2012 13:38:33 +1000
Thread-Topic: [pkix] CAA record location / tree climbing
Thread-Index: Ac1mJGBnskcFsCp5TgujexDLTu4cZgAATkEw
Message-ID: <255B9BB34FB7D647A506DC292726F6E114F7D9802B@WSMSG3153V.srv.dir.telstra.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com> <20120720030417.GI2952@crankycanuck.ca>
In-Reply-To: <20120720030417.GI2952@crankycanuck.ca>
Accept-Language: en-US, en-AU
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US, en-AU
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 03:37:42 -0000
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From mrex@sap.com  Thu Jul 19 21:00:14 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 96C9B11E8072 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 21:00:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.949
X-Spam-Level: 
X-Spam-Status: No, score=-9.949 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, HELO_EQ_DE=0.35, J_CHICKENPOX_25=0.6, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IdeDiVHC4MMa for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 21:00:14 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id BEB6D11E807F for <pkix@ietf.org>; Thu, 19 Jul 2012 21:00:13 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id q6K40rRi019593 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 20 Jul 2012 06:00:58 +0200 (MEST)
In-Reply-To: <B83745DA469B7847811819C5005244AF362992FD@scygexch7.cygnacom.com>
To: Santosh Chokhani <SChokhani@cygnacom.com>
Date: Fri, 20 Jul 2012 06:00:53 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120720040053.8EB031A0E2@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 04:00:14 -0000

Santosh Chokhani wrote:
> 
> Do you agree that V1, V2, or V3 self-signed certificate without any
> extensions or without basic constraint extension present in it can
> be a trust anchor for path validation?

That is what rfc5280 says (per 6.1.1 (d)).  The certificate path
validation function does might ignore any (certificate) attributes
that accompanied the "trust anchor" on "arrival".


> 
> I would even go as far as to say that even if cA = FALSE is present
> in basic constraints, per Section 6 one can use it as a trust anchor
> for path validation.

While it feels wrong somehow, this is explicitly permitted by rfc5280,
last sentence of last paragraph of section 6.2:

                              Implementations that use self-signed
   certificates to specify trust anchor information are free to make
   use of any additional information that is included in the
   certificates, or to ignore such information.


If I would implement this, I would probably _not_ ignore an CA=FALSE
BasicConstraint, but instead limit the "path validation" capability
of such a cert to an exact match of itself.


-Martin

From ajs@anvilwalrusden.com  Thu Jul 19 21:27:22 2012
Return-Path: <ajs@anvilwalrusden.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1ECDF11E80D7 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 21:27:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.294
X-Spam-Level: 
X-Spam-Status: No, score=-1.294 tagged_above=-999 required=5 tests=[AWL=-0.454, BAYES_00=-2.599, HELO_MISMATCH_INFO=1.448, HOST_MISMATCH_NET=0.311]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EpuXo1ZGyQ-G for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 21:27:21 -0700 (PDT)
Received: from mx1.yitter.info (ow5p.x.rootbsd.net [208.79.81.114]) by ietfa.amsl.com (Postfix) with ESMTP id 0865B11E80C7 for <pkix@ietf.org>; Thu, 19 Jul 2012 21:27:20 -0700 (PDT)
Received: from crankycanuck.ca (69-196-144-227.dsl.teksavvy.com [69.196.144.227]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.yitter.info (Postfix) with ESMTPSA id 5F00D8A031 for <pkix@ietf.org>; Fri, 20 Jul 2012 04:28:14 +0000 (UTC)
Date: Fri, 20 Jul 2012 00:28:12 -0400
From: Andrew Sullivan <ajs@anvilwalrusden.com>
To: pkix@ietf.org
Message-ID: <20120720042811.GJ2952@crankycanuck.ca>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com> <20120720023757.GG2952@crankycanuck.ca> <255B9BB34FB7D647A506DC292726F6E114F7D97FAD@WSMSG3153V.srv.dir.telstra.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E114F7D97FAD@WSMSG3153V.srv.dir.telstra.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 04:27:22 -0000

On Fri, Jul 20, 2012 at 01:13:11PM +1000, Manger, James H wrote:
> 
> When I browse to https://a.b.example.com/ my browser address bar
> shows "a.b." in grey and "example.com" in bold; javascript from that
> site can set document.domain to "example.com", but not to "com";
> etc. This tells me where the browser draws the security barrier,
> which is precisely where I want to restrict certificate issuance.

I see.  Why do you believe that?

That display is based on a heuristic.  They use the list from
publicsuffix.org, and decide that that's the place that counts.  It's
a pretty good rule of thumb, but it breaks in some corner cases.  My
experience in talking to browser manufacturers is that this is a good
enough approximation from their POV, even though they know it's
imperfect.

Importantly, if b.example.com delegates a.b.example.com to someone
else (which they are free to do), the thing you have described means
that the operator of a.b.example.com is now subject to the controls at
example.com (or wherever the CAA is) whenever they don't know about
that CAA record.  Maybe we don't care, but I think we better
understand this is a consequence.

I have a feeling that people believe they can get more security out of
the CAA RR than they in fact can.  CAA is quite good, I think, for
positive affirmations about what an operator requires.  It's hopeles
at constraining behaviour on names that do not yet exist and so on,
and I think there are gaps in the way it can apply down the tree that
make such an approach risky.

> If a browser gets it wrong, or 2 browsers are inconsistent

Just so we're clear: both of those are descriptions of the state of
affairs today.  I think browser developers are aware of this, and wish
they had something better, but the DNS does not work the way many
people seem to think it does.  Remember, it's just a namespace tree:
the administrative relationships among the levels are not in the DNS,
and they're not available reliably anywhere else, either.

Best,

A

-- 
Andrew Sullivan
ajs@anvilwalrusden.com


From ajs@anvilwalrusden.com  Thu Jul 19 21:37:05 2012
Return-Path: <ajs@anvilwalrusden.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03DE421F85D0 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 21:37:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.287
X-Spam-Level: 
X-Spam-Status: No, score=-1.287 tagged_above=-999 required=5 tests=[AWL=-0.447, BAYES_00=-2.599, HELO_MISMATCH_INFO=1.448, HOST_MISMATCH_NET=0.311]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dES7Q3ehcgsb for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 21:37:04 -0700 (PDT)
Received: from mx1.yitter.info (ow5p.x.rootbsd.net [208.79.81.114]) by ietfa.amsl.com (Postfix) with ESMTP id E390821F85C4 for <pkix@ietf.org>; Thu, 19 Jul 2012 21:37:03 -0700 (PDT)
Received: from crankycanuck.ca (69-196-144-227.dsl.teksavvy.com [69.196.144.227]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.yitter.info (Postfix) with ESMTPSA id C97828A031 for <pkix@ietf.org>; Fri, 20 Jul 2012 04:37:57 +0000 (UTC)
Date: Fri, 20 Jul 2012 00:37:56 -0400
From: Andrew Sullivan <ajs@anvilwalrusden.com>
To: pkix@ietf.org
Message-ID: <20120720043756.GK2952@crankycanuck.ca>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com> <20120720030417.GI2952@crankycanuck.ca> <255B9BB34FB7D647A506DC292726F6E114F7D9802B@WSMSG3153V.srv.dir.telstra.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <255B9BB34FB7D647A506DC292726F6E114F7D9802B@WSMSG3153V.srv.dir.telstra.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 04:37:05 -0000

On Fri, Jul 20, 2012 at 01:38:33PM +1000, Manger, James H wrote:
> 
> Or the CAA rule could be: a CA must not issue a wildcard cert for *.example.com unless it is allowed to issue a cert for example.com. Then you don't need any extra CAA records. Or define a ";wildcard=yes|no" parameter for the CAA record.
> 

This just ploughs right back into the tree-climbing problem, as soon
as you get to *.a.example.com.  And you again have to be sure that
example.com's policies legitimately apply to b.a.example.com, and I
don't see how you can know that.  It could be that b.a.example.com is
controlled by a different legal entity.  (Again, maybe we're willing
to make this trade-off, but if so it needs to be explicit.)

> 
> Wrong? It proves there is no CAA record to prevent cert issuance. It proves there is no name today, but perhaps you are waiting until you have the cert before launching. Perhaps some CAs require a DNS entry to exist as part of validating a cert request, but that is a separate issue from CAA.
> 

If a CA is issuing a cert for a name that is provably non-existent,
what are they certifying?  I don't understand this use case.  This
undoubtedly displays my gross ignorance.  But isn't the cert supposed
to be over a name, making a binding to an organization?  If the name
is provably non-existent at the time the CA issues such a cert, what
is it binding to?  (Feel free at this point to tell me I should shut
up until I have read $tome.  I appear to have a poor grasp of
something here.  A pointer to the correct $tome would be helpful.)

Best,

A
-- 
Andrew Sullivan
ajs@anvilwalrusden.com


From James.H.Manger@team.telstra.com  Thu Jul 19 22:09:12 2012
Return-Path: <James.H.Manger@team.telstra.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9C36C21F8659 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 22:09:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.11
X-Spam-Level: 
X-Spam-Status: No, score=-1.11 tagged_above=-999 required=5 tests=[AWL=-0.209,  BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, RELAY_IS_203=0.994]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i0eEgvr5fyF5 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 22:09:11 -0700 (PDT)
Received: from ipxano.tcif.telstra.com.au (ipxano.tcif.telstra.com.au [203.35.82.200]) by ietfa.amsl.com (Postfix) with ESMTP id 71BF121F859A for <pkix@ietf.org>; Thu, 19 Jul 2012 22:09:10 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,621,1336312800"; d="scan'208";a="88102701"
Received: from unknown (HELO ipcbni.tcif.telstra.com.au) ([10.97.216.204]) by ipoani.tcif.telstra.com.au with ESMTP; 20 Jul 2012 15:10:05 +1000
X-IronPort-AV: E=McAfee;i="5400,1158,6777"; a="77868289"
Received: from wsmsg3703.srv.dir.telstra.com ([172.49.40.171]) by ipcbni.tcif.telstra.com.au with ESMTP; 20 Jul 2012 15:10:04 +1000
Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by WSMSG3703.srv.dir.telstra.com ([172.49.40.171]) with mapi; Fri, 20 Jul 2012 15:10:04 +1000
From: "Manger, James H" <James.H.Manger@team.telstra.com>
To: Andrew Sullivan <ajs@anvilwalrusden.com>, "pkix@ietf.org" <pkix@ietf.org>
Date: Fri, 20 Jul 2012 15:10:03 +1000
Thread-Topic: [pkix] CAA record location / tree climbing
Thread-Index: Ac1mMYDwmJT4vtDFR2GgMWgJ44q9ugAABjEQ
Message-ID: <255B9BB34FB7D647A506DC292726F6E114F7E0F4CD@WSMSG3153V.srv.dir.telstra.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D97E70@WSMSG3153V.srv.dir.telstra.com> <20120720030417.GI2952@crankycanuck.ca> <255B9BB34FB7D647A506DC292726F6E114F7D9802B@WSMSG3153V.srv.dir.telstra.com> <20120720043756.GK2952@crankycanuck.ca>
In-Reply-To: <20120720043756.GK2952@crankycanuck.ca>
Accept-Language: en-US, en-AU
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US, en-AU
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 05:09:12 -0000

PiA+IE9yIHRoZSBDQUEgcnVsZSBjb3VsZCBiZTogYSBDQSBtdXN0IG5vdCBpc3N1ZSBhIHdpbGRj
YXJkIGNlcnQgZm9yDQo+ICouZXhhbXBsZS5jb20gdW5sZXNzIGl0IGlzIGFsbG93ZWQgdG8gaXNz
dWUgYSBjZXJ0IGZvciBleGFtcGxlLmNvbS4NCj4gVGhlbiB5b3UgZG9uJ3QgbmVlZCBhbnkgZXh0
cmEgQ0FBIHJlY29yZHMuIE9yIGRlZmluZSBhDQo+ICI7d2lsZGNhcmQ9eWVzfG5vIiBwYXJhbWV0
ZXIgZm9yIHRoZSBDQUEgcmVjb3JkLg0KPiA+DQo+IA0KPiBUaGlzIGp1c3QgcGxvdWdocyByaWdo
dCBiYWNrIGludG8gdGhlIHRyZWUtY2xpbWJpbmcgcHJvYmxlbSwgYXMgc29vbg0KPiBhcyB5b3Ug
Z2V0IHRvICouYS5leGFtcGxlLmNvbS4gIEFuZCB5b3UgYWdhaW4gaGF2ZSB0byBiZSBzdXJlIHRo
YXQNCj4gZXhhbXBsZS5jb20ncyBwb2xpY2llcyBsZWdpdGltYXRlbHkgYXBwbHkgdG8gYi5hLmV4
YW1wbGUuY29tLCBhbmQgSQ0KPiBkb24ndCBzZWUgaG93IHlvdSBjYW4ga25vdyB0aGF0LiAgSXQg
Y291bGQgYmUgdGhhdCBiLmEuZXhhbXBsZS5jb20gaXMNCj4gY29udHJvbGxlZCBieSBhIGRpZmZl
cmVudCBsZWdhbCBlbnRpdHkuICAoQWdhaW4sIG1heWJlIHdlJ3JlIHdpbGxpbmcNCj4gdG8gbWFr
ZSB0aGlzIHRyYWRlLW9mZiwgYnV0IGlmIHNvIGl0IG5lZWRzIHRvIGJlIGV4cGxpY2l0LikNCj4g
DQo+ID4NCj4gPiBXcm9uZz8gSXQgcHJvdmVzIHRoZXJlIGlzIG5vIENBQSByZWNvcmQgdG8gcHJl
dmVudCBjZXJ0IGlzc3VhbmNlLiBJdA0KPiBwcm92ZXMgdGhlcmUgaXMgbm8gbmFtZSB0b2RheSwg
YnV0IHBlcmhhcHMgeW91IGFyZSB3YWl0aW5nIHVudGlsIHlvdQ0KPiBoYXZlIHRoZSBjZXJ0IGJl
Zm9yZSBsYXVuY2hpbmcuIFBlcmhhcHMgc29tZSBDQXMgcmVxdWlyZSBhIEROUyBlbnRyeSB0bw0K
PiBleGlzdCBhcyBwYXJ0IG9mIHZhbGlkYXRpbmcgYSBjZXJ0IHJlcXVlc3QsIGJ1dCB0aGF0IGlz
IGEgc2VwYXJhdGUNCj4gaXNzdWUgZnJvbSBDQUEuDQo+ID4NCj4gDQo+IElmIGEgQ0EgaXMgaXNz
dWluZyBhIGNlcnQgZm9yIGEgbmFtZSB0aGF0IGlzIHByb3ZhYmx5IG5vbi1leGlzdGVudCwNCj4g
d2hhdCBhcmUgdGhleSBjZXJ0aWZ5aW5nPyBJIGRvbid0IHVuZGVyc3RhbmQgdGhpcyB1c2UgY2Fz
ZS4gIFRoaXMNCj4gdW5kb3VidGVkbHkgZGlzcGxheXMgbXkgZ3Jvc3MgaWdub3JhbmNlLiAgQnV0
IGlzbid0IHRoZSBjZXJ0IHN1cHBvc2VkDQo+IHRvIGJlIG92ZXIgYSBuYW1lLCBtYWtpbmcgYSBi
aW5kaW5nIHRvIGFuIG9yZ2FuaXphdGlvbj8gIElmIHRoZSBuYW1lDQo+IGlzIHByb3ZhYmx5IG5v
bi1leGlzdGVudCBhdCB0aGUgdGltZSB0aGUgQ0EgaXNzdWVzIHN1Y2ggYSBjZXJ0LCB3aGF0DQo+
IGlzIGl0IGJpbmRpbmcgdG8/ICAoRmVlbCBmcmVlIGF0IHRoaXMgcG9pbnQgdG8gdGVsbCBtZSBJ
IHNob3VsZCBzaHV0DQo+IHVwIHVudGlsIEkgaGF2ZSByZWFkICR0b21lLiAgSSBhcHBlYXIgdG8g
aGF2ZSBhIHBvb3IgZ3Jhc3Agb2YNCj4gc29tZXRoaW5nIGhlcmUuICBBIHBvaW50ZXIgdG8gdGhl
IGNvcnJlY3QgJHRvbWUgd291bGQgYmUgaGVscGZ1bC4pDQoNClRoZSBDQS9Ccm93c2VyIEZvcnVt
IEJhc2VsaW5lIFJlcXVpcmVtZW50cywgc2VjdGlvbiAxMS4xICJWZXJpZmljYXRpb24gUHJhY3Rp
Y2VzOiBBdXRob3JpemF0aW9uIGJ5IERvbWFpbiBOYW1lIFJlZ2lzdHJhbnQiIFtodHRwOi8vd3d3
LmNhYmZvcnVtLm9yZy9CYXNlbGluZV9SZXF1aXJlbWVudHNfVjEucGRmIMKnMTEuMV0uDQoNCkl0
IGdpdmVzIHZhcmlvdXMgd2F5cyB0byBjb25maXJtIGRvbWFpbiAib3duZXJzaGlwIiwgbW9zdCBv
ZiB3aGljaCBkb24ndCByZXF1aXJlIGEgRE5TIGxvb2t1cCBvZiB0aGUgZG9tYWluLg0KDQoNCiJQ
dWJsaWMgU3VmZml4ZXMiIGFyZSBoZXVyaXN0aWMsIGluY29uc2lzdGVudCwgcmlkZGxlZCB3aXRo
IGNvcm5lciBjYXNlcyBldGMuDQpCdXQgaW4gdGhlIHZhc3QgbWFqb3JpdHkgb2YgY2FzZXMgdGhl
eSB3aWxsIGJlIGNvbnNpc3RlbnQgYWNyb3NzIGJyb3dzZXJzIGFuZCBDQXMuDQpBbmQgc2l0ZSBv
d25lcnMgY2FuIHRlc3QgaG93IHRoZWlyIGRvbWFpbiBpcyBoYW5kbGVkIGluIGFsbCB0aGUgY29t
bW9uIGJyb3dzZXJzIGlmIHRoZXkgaGF2ZSBhbnkgZG91YnRzLg0KSWYgd2UgY2FuIG9ubHkgZWxp
bWluYXRlIGEgdmFyaWV0eSBvZiBjZXJ0aWZpY2F0ZSBtaXMtaXNzdWFuY2UgZnJvbSA5OSUgb2Yg
ZG9tYWlucyB0aGF0IHdpbGwgc3RpbGwgYmUgcHJvZ3Jlc3MuDQoNCi0tDQpKYW1lcyBNYW5nZXIN
Cg==

From peter.sylvester@edelweb.fr  Thu Jul 19 22:39:05 2012
Return-Path: <peter.sylvester@edelweb.fr>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AAA7421F8569 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 22:39:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8FT-Mg+RTJus for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 22:39:05 -0700 (PDT)
Received: from mx1.on-x.com (mx1.on-x.com [92.103.215.13]) by ietfa.amsl.com (Postfix) with ESMTP id D3DDB21F84EE for <pkix@ietf.org>; Thu, 19 Jul 2012 22:39:04 -0700 (PDT)
Received: from varuna.puteaux.on-x (varuna.puteaux.on-x [192.168.10.6]) by mx1.on-x.com (Postfix) with ESMTP id 8F0E15E100 for <pkix@ietf.org>; Fri, 20 Jul 2012 07:38:53 +0200 (CEST)
Received: from smtps.on-x.com (mintaka.puteaux.on-x [192.168.14.11]) by varuna.puteaux.on-x (Postfix) with ESMTP id 45F0983F393 for <pkix@ietf.org>; Fri, 20 Jul 2012 07:16:39 +0200 (CEST)
Received: from [192.168.0.27] (gut75-3-82-227-163-182.fbx.proxad.net [82.227.163.182]) by smtps.on-x.com (Postfix) with ESMTPSA id 0AF7F236333 for <pkix@ietf.org>; Fri, 20 Jul 2012 01:20:42 -0400 (EDT)
Message-ID: <5008EF2B.2020909@edelweb.fr>
Date: Fri, 20 Jul 2012 07:39:55 +0200
From: Peter Sylvester <peter.sylvester@edelweb.fr>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120714 Thunderbird/14.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <p06240804cc064804b5f2@[128.89.89.227]> <033201cd567c$ef626970$ce273c50$@akayla.com> <4FFF2AF5.4070007@nist.gov> <OFE6D3640A.D4FCD6C5-ON85257A3E.00774EDD-85257A40.0003F4F9@us.ibm.com> <50081AA0.5060107@nist.gov> <OF447F9ED9.566ED59A-ON85257A40.0051B1F2-85257A41.00007312@us.ibm.com>
In-Reply-To: <OF447F9ED9.566ED59A-ON85257A40.0051B1F2-85257A41.00007312@us.ibm.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 05:39:05 -0000

On 07/20/2012 02:04 AM, Tom Gindin wrote:
>          A better wording for the idea in the draft would say "a
> self-signed version 3 certificate that does not contain a BasicConstraints
> extension is implicitly an EE certificate", since we've clearly settled
> that v1 (and presumably v2) self-signed certificates are still used as
> trust anchors.  Do you agree that this rule is appropriate, or not?
>          I'm not arguing against you on this issue.  While an application
> CAN import anything containing the proper fields as a trust anchor,
> including a TLS server certificate, it SHOULD NOT do so when a certificate
> is clearly an EE.  Directly trusted EE certificates, although they have
> their place in many implementations of PKI-using applications, are out of
> scope for certificate validation and don't constitute trust anchors.
If an application can use *anything* that carries the necessary
information of a trust anchor, so be it.
Why would one want to restrict the form of the container?
Because it looks like something that can or cannot be use
in whatever other context?

It is not "using a self signed ee cert or ca cert of v4711 cert
as a trust anchor"  but IMO rather "If a structure that
syntactically looks like a certificate is used as a trust anchor,
then fields unusable for that purpose, e.g., version,
a basicconstraints  extension, issuer? ...   have no meaning
or not the meaning when used as certificate in the context
of pathvalidation"

>
> Tom Gindin
Peter

From eabalea@gmail.com  Thu Jul 19 23:29:40 2012
Return-Path: <eabalea@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C40021F8628 for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 23:29:40 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level: 
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rco8jSZNW-vM for <pkix@ietfa.amsl.com>; Thu, 19 Jul 2012 23:29:39 -0700 (PDT)
Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) by ietfa.amsl.com (Postfix) with ESMTP id 0215021F8623 for <pkix@ietf.org>; Thu, 19 Jul 2012 23:29:33 -0700 (PDT)
Received: by obbwc20 with SMTP id wc20so5174713obb.31 for <pkix@ietf.org>; Thu, 19 Jul 2012 23:30:29 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=kE2wH6s/zquPuVLZKAqXCKofDGzIfW3yjUPM0VwKU28=; b=inKAzxCfsQzJBNpOWwKx/ivLFnbvdqWjAf4TpDe/bYko0eWErTa5tiGj9m3z6bnetV bIVruzl4qyrlDMzZSiqz7px9Ychn2zEQkVaUtP0NUSI/XmZ8WX5v+exGJLcYGmYVMIKm YFuM+Ycbjul48HjDjpWMcrlX+Aaqu/u45qUmG1Lem66Lnz27NVmeIAveMFqf2Xo0eFol rXR12NrUBOVBj132b5YDZcsQg3E1RKMsWVKcOkHskiw13CM0/jozfJtO5JkiZNNAyafy rhneeRb5p8MmDePY8S2hxAvVHQVZaCGBPgmjG5EDfdJhAvqSZvT67ZZnWP22LxoNsZ3M NEOw==
MIME-Version: 1.0
Received: by 10.182.77.170 with SMTP id t10mr5597623obw.24.1342765829009; Thu, 19 Jul 2012 23:30:29 -0700 (PDT)
Received: by 10.182.55.227 with HTTP; Thu, 19 Jul 2012 23:30:28 -0700 (PDT)
Received: by 10.182.55.227 with HTTP; Thu, 19 Jul 2012 23:30:28 -0700 (PDT)
In-Reply-To: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com>
Date: Fri, 20 Jul 2012 08:30:28 +0200
Message-ID: <CA+i=0E7RarxU-1fUZQZC8vVhqPo8x_jBYgxVHCMzyW0YkqRAJA@mail.gmail.com>
From: Erwann Abalea <eabalea@gmail.com>
To: daniel bryan <danbryan80@gmail.com>
Content-Type: multipart/alternative; boundary=f46d044517c141326604c53d08b2
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 06:29:40 -0000

--f46d044517c141326604c53d08b2
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

You should ask ActivIdentity to correct the issue. It's probably something
stupidly simple.
If they can't or don't want to, then go on POST, but that's a regression,
IMHO.

--=20
Erwann.

Le 20 juil. 2012 02:26, "daniel bryan" <danbryan80@gmail.com> a =C3=A9crit =
:
>
> I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd
party OCSP responder made by actividentity.  According to my CAPI2 log on
the IIS server, its sending a GET request to my OCSP responder, and getting
an error saying malformed ocsp request.  If I use a 3rd party CAPI plugin
on the IIS machine it sends POST request to the OCSP responder and recieves
no errors.
>
> Is there a way I can tell windows to send OCSP request as a POST instead
of a GET?

--f46d044517c141326604c53d08b2
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<p>You should ask ActivIdentity to correct the issue. It&#39;s probably som=
ething stupidly simple.<br>
If they can&#39;t or don&#39;t want to, then go on POST, but that&#39;s a r=
egression, IMHO.</p>
<p>-- <br>
Erwann.</p>
<p>Le 20 juil. 2012 02:26, &quot;daniel bryan&quot; &lt;<a href=3D"mailto:d=
anbryan80@gmail.com">danbryan80@gmail.com</a>&gt; a =C3=A9crit=C2=A0:<br>
&gt;<br>
&gt; I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd=
 party OCSP responder made by actividentity. =C2=A0According to my CAPI2 lo=
g on the IIS server, its sending a GET request to my OCSP responder, and ge=
tting an error saying malformed ocsp request. =C2=A0If I use a 3rd party CA=
PI plugin on the IIS machine it sends POST request to the OCSP responder an=
d recieves no errors.<br>

&gt;<br>
&gt; Is there a way I can tell windows to send OCSP request as a POST inste=
ad of a GET?</p>

--f46d044517c141326604c53d08b2--

From hallam@gmail.com  Fri Jul 20 04:54:24 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A9F6421F85D5 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 04:54:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.57
X-Spam-Level: 
X-Spam-Status: No, score=-5.57 tagged_above=-999 required=5 tests=[AWL=-1.971,  BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sD7HV1s46+sv for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 04:54:23 -0700 (PDT)
Received: from mail-vb0-f44.google.com (mail-vb0-f44.google.com [209.85.212.44]) by ietfa.amsl.com (Postfix) with ESMTP id EF47C21F85D3 for <pkix@ietf.org>; Fri, 20 Jul 2012 04:54:22 -0700 (PDT)
Received: by vbbez10 with SMTP id ez10so3133969vbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 04:55:18 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=HbtxhF44asqIviUzgCALUpg96LGkqd/lUojzJxcEN2o=; b=nR/hDe4OCfKsKvnFWgWSkUQjsM5wxopqqDwL462CTHybc2cFdlowEnLLBN6xKuYoUr 2Y9SR9Kdg9+XWG2DYuiSm3aZk6c5tlQyoWdfY0TjVSeyEcMMhZ3GDLW5SC9NsuHTRqYe AxugjNbm7iJGLVa6Dz2ccTld8q1UOkvdMWswE2KcZwh4X/apli15vaUQ/Ah6dO+qi2Gt 7wysod4txzn11a8x+hcsbfrEnQNAuWUD00Cc5sA33eJGZRws9z6xLZ9CkpqJfZZCX3J+ YLTKEwH6XOKj42Y5Z/iZO4Fhe8Zq1Sv8b+UckJmmjz/tLFP3JkxqMrox/uLBLGfc5S02 kpfA==
MIME-Version: 1.0
Received: by 10.52.23.14 with SMTP id i14mr3648051vdf.47.1342785317905; Fri, 20 Jul 2012 04:55:17 -0700 (PDT)
Received: by 10.58.116.233 with HTTP; Fri, 20 Jul 2012 04:55:17 -0700 (PDT)
In-Reply-To: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com>
Date: Fri, 20 Jul 2012 07:55:17 -0400
Message-ID: <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: daniel bryan <danbryan80@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 11:54:24 -0000

http://www.ietf.org/rfc/rfc2560.txt

A.1.1 Request

   HTTP based OCSP requests can use either the GET or the POST method to
   submit their requests. To enable HTTP caching, small requests (that
   after encoding are less than 255 bytes), MAY be submitted using GET.
   If HTTP caching is not important, or the request is greater than 255
   bytes, the request SHOULD be submitted using POST.


ActivIdentity is not compliant with the spec here. The original choice
to support use of GET was deliberate as the requests are cacheable.



On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan <danbryan80@gmail.com> wrote:
> I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd party
> OCSP responder made by actividentity.  According to my CAPI2 log on the IIS
> server, its sending a GET request to my OCSP responder, and getting an error
> saying malformed ocsp request.  If I use a 3rd party CAPI plugin on the IIS
> machine it sends POST request to the OCSP responder and recieves no errors.
>
> Is there a way I can tell windows to send OCSP request as a POST instead of
> a GET?
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>



-- 
Website: http://hallambaker.com/

From turners@ieca.com  Fri Jul 20 05:23:43 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9A49521F85A8 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 05:23:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.265
X-Spam-Level: 
X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CDrkmT70yRqX for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 05:23:43 -0700 (PDT)
Received: from gateway02.websitewelcome.com (gateway02.websitewelcome.com [69.41.242.20]) by ietfa.amsl.com (Postfix) with ESMTP id 221A721F8593 for <pkix@ietf.org>; Fri, 20 Jul 2012 05:23:43 -0700 (PDT)
Received: by gateway02.websitewelcome.com (Postfix, from userid 5007) id 63EAFBD47AFB6; Fri, 20 Jul 2012 07:24:39 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway02.websitewelcome.com (Postfix) with ESMTP id 59981BD47AF95 for <pkix@ietf.org>; Fri, 20 Jul 2012 07:24:39 -0500 (CDT)
Received: from [71.191.15.186] (port=46244 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1SsCG6-0004mM-F7 for pkix@ietf.org; Fri, 20 Jul 2012 07:24:38 -0500
Message-ID: <50094E05.6000500@ieca.com>
Date: Fri, 20 Jul 2012 08:24:37 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <p06240804cc064804b5f2@[128.89.89.227]>
In-Reply-To: <p06240804cc064804b5f2@[128.89.89.227]>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (thunderfish.local) [71.191.15.186]:46244
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 1
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Subject: [pkix] My proposal was: Re:  new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 12:23:43 -0000

Having watched this issue play out based on a request in my AD review 
back in 2011-08-02 (yep that's about a year ago), here's my proposal:

   Remove the proposed updates for s3.2 to RFC 5280 (i.e.,
   delete s2 entirely from the draft).

AD's don't get everything they want ;)  I think it's time to get the 
text that has consensus published.

spt

On 6/19/12 11:17 AM, Stephen Kent wrote:
> A new version of 5280 clarifications will be published shortly.
>
> Peter Yee has taken over from David Copper as the document editor.
>
> There are very few changes since the last published version. The only
> major change is a new paragraph on our favorite topic of self-signed EE
> certs.
> Hopefully this text will be acceptable.
>
> Steve
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>

From tgindin@us.ibm.com  Fri Jul 20 06:11:45 2012
Return-Path: <tgindin@us.ibm.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DFBBC21F8598 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 06:11:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.299
X-Spam-Level: 
X-Spam-Status: No, score=-10.299 tagged_above=-999 required=5 tests=[AWL=-0.300, BAYES_00=-2.599, J_CHICKENPOX_25=0.6, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HKr2T7I4umeb for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 06:11:45 -0700 (PDT)
Received: from e3.ny.us.ibm.com (e3.ny.us.ibm.com [32.97.182.143]) by ietfa.amsl.com (Postfix) with ESMTP id 03FCE21F8577 for <pkix@ietf.org>; Fri, 20 Jul 2012 06:11:44 -0700 (PDT)
Received: from /spool/local by e3.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <pkix@ietf.org> from <tgindin@us.ibm.com>; Fri, 20 Jul 2012 09:12:40 -0400
Received: from d01dlp03.pok.ibm.com (9.56.224.17) by e3.ny.us.ibm.com (192.168.1.103) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Fri, 20 Jul 2012 09:12:38 -0400
Received: from d01relay05.pok.ibm.com (d01relay05.pok.ibm.com [9.56.227.237]) by d01dlp03.pok.ibm.com (Postfix) with ESMTP id 8B572C90020 for <pkix@ietf.org>; Fri, 20 Jul 2012 09:12:37 -0400 (EDT)
Received: from d01av01.pok.ibm.com (d01av01.pok.ibm.com [9.56.224.215]) by d01relay05.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id q6KDCbmZ380914 for <pkix@ietf.org>; Fri, 20 Jul 2012 09:12:37 -0400
Received: from d01av01.pok.ibm.com (loopback [127.0.0.1]) by d01av01.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id q6KIhTGi025045 for <pkix@ietf.org>; Fri, 20 Jul 2012 14:43:29 -0400
Received: from d01ml062.pok.ibm.com (d01ml062.pok.ibm.com [9.63.10.95]) by d01av01.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id q6KIhShf025011; Fri, 20 Jul 2012 14:43:28 -0400
In-Reply-To: <20120720040053.8EB031A0E2@ld9781.wdf.sap.corp>
References: <B83745DA469B7847811819C5005244AF362992FD@scygexch7.cygnacom.com> <20120720040053.8EB031A0E2@ld9781.wdf.sap.corp>
To: mrex@sap.com
MIME-Version: 1.0
X-KeepSent: 9B58F691:C870C01F-85257A41:00479E00; type=4; name=$KeepSent
X-Mailer: Lotus Notes Build V853_CD5_06022011 June 02, 2011
From: Tom Gindin <tgindin@us.ibm.com>
Message-ID: <OF9B58F691.C870C01F-ON85257A41.00479E00-85257A41.004895AA@us.ibm.com>
Date: Fri, 20 Jul 2012 09:12:34 -0400
X-MIMETrack: Serialize by Router on D01ML062/01/M/IBM(Release 8.5.3 ZX853HP5|January 12, 2012) at 07/20/2012 09:12:35, Serialize complete at 07/20/2012 09:12:35
Content-Type: text/plain; charset="US-ASCII"
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 12072013-8974-0000-0000-00000B572114
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 13:11:46 -0000

        Martin:

        I don't see much difference between treating such a certificate as 
a directly trusted EE and limiting the "path validation" capability of 
such a cert to an exact match of itself.  Thus, I think we agree how to 
treat this in practice.  However, there's no obvious way to store such an 
agreement in RFC 5914's format although you could probably fudge something 
using Name Constraints.


Tom Gindin




From:   mrex@sap.com (Martin Rex)
To:     Santosh Chokhani <SChokhani@cygnacom.com>, 
Cc:     "mrex@sap.com" <mrex@sap.com>, "David A. Cooper" 
<david.cooper@nist.gov>, Tom Gindin/Watson/IBM@IBMUS, "pkix@ietf.org" 
<pkix@ietf.org>
Date:   07/20/2012 12:02 AM
Subject:        Re: [pkix] new version of 5280 clarifications



Santosh Chokhani wrote:
> 
> Do you agree that V1, V2, or V3 self-signed certificate without any
> extensions or without basic constraint extension present in it can
> be a trust anchor for path validation?

That is what rfc5280 says (per 6.1.1 (d)).  The certificate path
validation function does might ignore any (certificate) attributes
that accompanied the "trust anchor" on "arrival".


> 
> I would even go as far as to say that even if cA = FALSE is present
> in basic constraints, per Section 6 one can use it as a trust anchor
> for path validation.

While it feels wrong somehow, this is explicitly permitted by rfc5280,
last sentence of last paragraph of section 6.2:

                              Implementations that use self-signed
   certificates to specify trust anchor information are free to make
   use of any additional information that is included in the
   certificates, or to ignore such information.


If I would implement this, I would probably _not_ ignore an CA=FALSE
BasicConstraint, but instead limit the "path validation" capability
of such a cert to an exact match of itself.


-Martin




From tgindin@us.ibm.com  Fri Jul 20 06:19:02 2012
Return-Path: <tgindin@us.ibm.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5FAE021F8658 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 06:19:02 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.499
X-Spam-Level: 
X-Spam-Status: No, score=-10.499 tagged_above=-999 required=5 tests=[AWL=0.100, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 66gY+YbMc6EX for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 06:19:01 -0700 (PDT)
Received: from e4.ny.us.ibm.com (e4.ny.us.ibm.com [32.97.182.144]) by ietfa.amsl.com (Postfix) with ESMTP id 70D7221F8648 for <pkix@ietf.org>; Fri, 20 Jul 2012 06:19:01 -0700 (PDT)
Received: from /spool/local by e4.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <pkix@ietf.org> from <tgindin@us.ibm.com>; Fri, 20 Jul 2012 09:19:57 -0400
Received: from d01dlp01.pok.ibm.com (9.56.224.56) by e4.ny.us.ibm.com (192.168.1.104) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Fri, 20 Jul 2012 09:19:54 -0400
Received: from d01relay04.pok.ibm.com (d01relay04.pok.ibm.com [9.56.227.236]) by d01dlp01.pok.ibm.com (Postfix) with ESMTP id CB05A38C8042 for <pkix@ietf.org>; Fri, 20 Jul 2012 09:19:53 -0400 (EDT)
Received: from d01av03.pok.ibm.com (d01av03.pok.ibm.com [9.56.224.217]) by d01relay04.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id q6KDJp8l414760 for <pkix@ietf.org>; Fri, 20 Jul 2012 09:19:52 -0400
Received: from d01av03.pok.ibm.com (loopback [127.0.0.1]) by d01av03.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id q6KDIl2A021290 for <pkix@ietf.org>; Fri, 20 Jul 2012 10:18:48 -0300
Received: from d01ml062.pok.ibm.com (d01ml062.pok.ibm.com [9.63.10.95]) by d01av03.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id q6KDIlYH021271; Fri, 20 Jul 2012 10:18:47 -0300
In-Reply-To: <5008EF2B.2020909@edelweb.fr>
References: <p06240804cc064804b5f2@[128.89.89.227]>	<033201cd567c$ef626970$ce273c50$@akayla.com> <4FFF2AF5.4070007@nist.gov>	<OFE6D3640A.D4FCD6C5-ON85257A3E.00774EDD-85257A40.0003F4F9@us.ibm.com> <50081AA0.5060107@nist.gov>	<OF447F9ED9.566ED59A-ON85257A40.0051B1F2-85257A41.00007312@us.ibm.com> <5008EF2B.2020909@edelweb.fr>
To: Peter Sylvester <peter.sylvester@edelweb.fr>
MIME-Version: 1.0
X-KeepSent: 0C759671:4F90B3E2-85257A41:0048ABEC; type=4; name=$KeepSent
X-Mailer: Lotus Notes Build V853_CD5_06022011 June 02, 2011
From: Tom Gindin <tgindin@us.ibm.com>
Message-ID: <OF0C759671.4F90B3E2-ON85257A41.0048ABEC-85257A41.004926B8@us.ibm.com>
Date: Fri, 20 Jul 2012 09:18:45 -0400
X-MIMETrack: Serialize by Router on D01ML062/01/M/IBM(Release 8.5.3 ZX853HP5|January 12, 2012) at 07/20/2012 09:18:46, Serialize complete at 07/20/2012 09:18:46
Content-Type: text/plain; charset="US-ASCII"
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 12072013-3534-0000-0000-00000A9B8D6D
Cc: pkix@ietf.org
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 13:19:02 -0000

        Peter:

        Admittedly, my word choice was inconsistent.  I should have said "
still used as sources for trust anchors", to match the later reference to 
"importing".  However, the issuer of a v3 non-CA certificate, whether the 
subject or not, does not intend that anyone use that key and name to 
validate other certificates.  Therefore, code which creates trust anchors 
by importing certificates should not do so with a v3 non-CA certificate, 
although it may deem these certificates to be directly trusted EE's if it 
so chooses.

Tom Gindin





From:   Peter Sylvester <peter.sylvester@edelweb.fr>
To:     pkix@ietf.org, 
Date:   07/20/2012 01:40 AM
Subject:        Re: [pkix] new version of 5280 clarifications
Sent by:        pkix-bounces@ietf.org



On 07/20/2012 02:04 AM, Tom Gindin wrote:
>          A better wording for the idea in the draft would say "a
> self-signed version 3 certificate that does not contain a 
BasicConstraints
> extension is implicitly an EE certificate", since we've clearly settled
> that v1 (and presumably v2) self-signed certificates are still used as
> trust anchors.  Do you agree that this rule is appropriate, or not?
>          I'm not arguing against you on this issue.  While an 
application
> CAN import anything containing the proper fields as a trust anchor,
> including a TLS server certificate, it SHOULD NOT do so when a 
certificate
> is clearly an EE.  Directly trusted EE certificates, although they have
> their place in many implementations of PKI-using applications, are out 
of
> scope for certificate validation and don't constitute trust anchors.
If an application can use *anything* that carries the necessary
information of a trust anchor, so be it.
Why would one want to restrict the form of the container?
Because it looks like something that can or cannot be use
in whatever other context?

It is not "using a self signed ee cert or ca cert of v4711 cert
as a trust anchor"  but IMO rather "If a structure that
syntactically looks like a certificate is used as a trust anchor,
then fields unusable for that purpose, e.g., version,
a basicconstraints  extension, issuer? ...   have no meaning
or not the meaning when used as certificate in the context
of pathvalidation"

>
> Tom Gindin
Peter
_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix




From carl@redhoundsoftware.com  Fri Jul 20 06:22:19 2012
Return-Path: <carl@redhoundsoftware.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E15221F866D for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 06:22:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.599
X-Spam-Level: 
X-Spam-Status: No, score=-3.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vEjGaLZWDPTf for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 06:22:18 -0700 (PDT)
Received: from mail-qa0-f44.google.com (mail-qa0-f44.google.com [209.85.216.44]) by ietfa.amsl.com (Postfix) with ESMTP id CCB2E21F866B for <pkix@ietf.org>; Fri, 20 Jul 2012 06:22:17 -0700 (PDT)
Received: by qadz3 with SMTP id z3so178308qad.10 for <pkix@ietf.org>; Fri, 20 Jul 2012 06:23:13 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20120113; h=user-agent:date:subject:from:to:cc:message-id:thread-topic :in-reply-to:mime-version:content-type:content-transfer-encoding :x-gm-message-state; bh=zyYdlzFWg78B1CSozK8IBdh+37IFMO3EzPWjKS6vXtM=; b=LHjcwwegTH/GvZAm8Eom+yudHwgM7KWI1EW8+WUjs1fw1dZC3Xjwx8uccfgXDAiMNt 3I5wgkMJeig69hamI9xxIZoUHGTacS23aVzJCt0zO3LO0l2Zao+jAaPyLvYxq7/ubHaB Utqp6kNRrn8XT+x/pKAO5zK2XoDnor1rh6RcdzTF385ZGshn9XHVc0DFXnqQRChaDm0+ zTBPHcPARLhWkLFDnlF6ZlyN7SnWzufv2Yyc+ZwQY9Ui6ozezQuEdL8YN4lXblBGXQHi NXROnxV7XNQYP8NOA3zdnWzvGbH4WUOaD8OwmPhpH4PsYy0thSfQtSHfYBKyCIS6yU8C coYg==
Received: by 10.224.45.8 with SMTP id c8mr10023562qaf.29.1342790593361; Fri, 20 Jul 2012 06:23:13 -0700 (PDT)
Received: from [192.168.1.4] (pool-173-79-118-111.washdc.fios.verizon.net. [173.79.118.111]) by mx.google.com with ESMTPS id ea5sm5029008qab.2.2012.07.20.06.23.10 (version=SSLv3 cipher=OTHER); Fri, 20 Jul 2012 06:23:12 -0700 (PDT)
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Fri, 20 Jul 2012 09:23:04 -0400
From: Carl Wallace <carl@redhoundsoftware.com>
To: Tom Gindin <tgindin@us.ibm.com>
Message-ID: <CC2ED210.1D6E6%carl@redhoundsoftware.com>
Thread-Topic: [pkix] new version of 5280 clarifications
In-Reply-To: <OF9B58F691.C870C01F-ON85257A41.00479E00-85257A41.004895AA@us.ibm.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
X-Gm-Message-State: ALoCoQlta2h9VHkbFc1TKq/6Z8zGEHCVmZ69q7hV+hI08caoIi+o/uMel2rWOSdbHP4EnQTdOkpO
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 13:22:19 -0000

On 7/20/12 9:12 AM, "Tom Gindin" <tgindin@us.ibm.com> wrote:

>        Martin:
>
>        I don't see much difference between treating such a certificate
>as 
>a directly trusted EE and limiting the "path validation" capability of
>such a cert to an exact match of itself.  Thus, I think we agree how to
>treat this in practice.  However, there's no obvious way to store such an
>agreement in RFC 5914's format although you could probably fudge
>something 
>using Name Constraints.

In RFC 5914, you can create a TA that cannot be used path processing by
using the TrustAnchorInfo structure and omitting the CertPathControls
field.  This is noted in section 2.5.  However, there's not a
straightforward way to use a certificate and mark it as not suitable for
path processing (since certificates are stored in CertPathControls).  As
you note, constraints could be used to fudge something where using a
certificate is desired.  



From hallam@gmail.com  Fri Jul 20 07:03:12 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A003421F8608 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:03:11 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.363
X-Spam-Level: 
X-Spam-Status: No, score=-5.363 tagged_above=-999 required=5 tests=[AWL=-2.132, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, URI_HEX=0.368]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 09qjazNbrWsB for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:03:07 -0700 (PDT)
Received: from mail-vb0-f44.google.com (mail-vb0-f44.google.com [209.85.212.44]) by ietfa.amsl.com (Postfix) with ESMTP id 5018821F8592 for <pkix@ietf.org>; Fri, 20 Jul 2012 07:03:07 -0700 (PDT)
Received: by vbbez10 with SMTP id ez10so3257486vbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 07:04:03 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=vx+9AT0anehl21g0yNv0kmpjSh/+e9kvDwzJKg/jKvk=; b=UdzHmGngN4YwdMmitmurZJwqChObYhDlRq0lDlueltl8DKVPra5XjsVkjK5BbB0r2A AEp2qTDhrwdzlyViD0bsEGFBZ5jRlPDIuR0q+3zUWFBMr20MiwHPqKNNjs0lEbwyyKAb 2/agfdF8oJ9mtvqOYWnGq30kGrZa8gVIDIQSfpJnqDgY8oeh1vhHh5YfWu0X20PYzYs5 LifONVCQhdxRqFQzPnaM8TLr7nahaL8YXjs2ytAElqmc2ZbqvnAvOtdcrld+tg1A+ONq xE5Z3DDfrddiJu60BUtKCMnL0nFLOetdKAAY32w10Q8OWk0PkptUdMOQcc/kLIcMtSTa Wfrw==
MIME-Version: 1.0
Received: by 10.220.221.65 with SMTP id ib1mr2052289vcb.41.1342793042431; Fri, 20 Jul 2012 07:04:02 -0700 (PDT)
Received: by 10.58.116.233 with HTTP; Fri, 20 Jul 2012 07:04:02 -0700 (PDT)
In-Reply-To: <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com>
Date: Fri, 20 Jul 2012 10:04:02 -0400
Message-ID: <CAMm+LwirCGhvMRLSQGWfBkznAuK6VAss905PYAKkTcKEJt+8xw@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 14:03:12 -0000

Split DNS is a real-world fact that any proposal has to work with.

MOST corporate sites are only visible to the corporate network. This
is not only acceptable practice it is best security practice.

We could go back to my original proposal:

1) look at the leaf node and use the CAA record there if it exists.
2) If no node is found there, look at the public delegation point that
the CA will use for validation.




On Thu, Jul 19, 2012 at 2:20 PM, Richard L. Barnes <rbarnes@bbn.com> wrote:
>
> On Jul 18, 2012, at 10:52 AM, Manger, James H wrote:
>
>>> PHB: Thanks for all the changes you made in draft-ietf-pkix-caa-11.  I
>>> think this version is close to ready.
>>>
>>> The one issue that I didn't feel we really got resolution on was the
>>> question of where CAA records should be located.  I still think the
>>> tree-climbing algorithm is confusing and likely to lead to subtle
>>> errors.  And the document still doesn't address the wildcard case.
>>>
>>> I have listed a complete set of proposed changes below.  The high-level
>>> outline is:
>>> -- A issuer looks for CAA records only at the name to be included in
>>> the certificate.
>>> -- If there are one or more CAA records present, then any issuance MUST
>>> comply with them.
>>> -- If there is no CAA, then the CAA system provides no information; an
>>> issuer MAY issue, subject to its local policy.
>>> -- If the name to be issued is a wildcard, then the issuer replaces the
>>> "*" with the label "_star" and uses the normal procedure.
>>> -- Tree climbing is still allowed to find "iodef" records (with "MAY"
>>> strength).
>>>
>>> This simplified procedure provides the same functionality as the
>>> current document with much simpler processing; the only cost is that
>>> CAA records have to be provisioned at individual domain names that are
>>> getting certificates.
>>>
>>> I would like to get the WG's feedback on this proposal before we
>>> consider CAA finished.
>>>
>>> Thanks,
>>> --Richard
>>
>>
>> These changes would still allow Example Org to prevent compliant CAs fro=
m issuing certificates for, say, www.example.org and example.org (with 2 CA=
A records (or 3)). However, it makes it very hard (or impossible with DNSSE=
C?) to prevent certificates being issued for (non-existent) sub-domains (eg=
 a3323422.example.org). That is bad as browsers give sub-domains some autho=
rity with respect to their parent domains. For instance, a sub-domain can o=
ften read cookies set by a parent domains (not sure if this is affected by =
a cookie's "secure" flag). A sub-domain is often in the same "security zone=
" for other browser security controls.
>
> First of all, if the policy is to look only at the leaf and require CAA, =
then a CA will never issue a cert for a non-existent domain because there w=
on't be a CAA record there.
>
> If you're worried about CAs that fall back to something else if CAA isn't=
 present, couldn't the parent zone holder just set a wildcard that provides=
 null CAA for any subordinate zone?
>
> *.example.com CAA 0 issue ";"
>
> --Richard
>
>
>
>>
>> So I believe these changes would weaken CAA, not provide the same functi=
onality.
>>
>> --
>> James Manger
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix



--=20
Website: http://hallambaker.com/

From rbarnes@bbn.com  Fri Jul 20 07:11:15 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2C9B521F864B for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:11:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.408
X-Spam-Level: 
X-Spam-Status: No, score=-106.408 tagged_above=-999 required=5 tests=[AWL=-0.177, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, URI_HEX=0.368, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XY7+CtAWc25x for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:11:14 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id F2C0421F862B for <pkix@ietf.org>; Fri, 20 Jul 2012 07:11:13 -0700 (PDT)
Received: from ros-dhcp192-1-51-20.bbn.com ([192.1.51.20]:65435) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SsDvu-000JuW-RM; Fri, 20 Jul 2012 10:11:54 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <CAMm+LwirCGhvMRLSQGWfBkznAuK6VAss905PYAKkTcKEJt+8xw@mail.gmail.com>
Date: Fri, 20 Jul 2012 10:11:52 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <B08028BD-D01E-46E4-8099-E39D0F1B4C4C@bbn.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <CAMm+LwirCGhvMRLSQGWfBkznAuK6VAss905PYAKkTcKEJt+8xw@mail.gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
X-Mailer: Apple Mail (2.1278)
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 14:11:15 -0000

I'm assuming that your concern with split DNS is that if foo.example.com =
might is only visible internally, then the CA won't be able to see a CAA =
record for it?

Can't example.com just provision a CAA record for foo.example.com on the =
outside?  You can still have the rest of foo.example.com be internal.

Honestly, at this point it really seems like we're over-thinking things =
here in order to come up with excuses not to do the simple thing. =20




On Jul 20, 2012, at 10:04 AM, Phillip Hallam-Baker wrote:

> Split DNS is a real-world fact that any proposal has to work with.
>=20
> MOST corporate sites are only visible to the corporate network. This
> is not only acceptable practice it is best security practice.
>=20
> We could go back to my original proposal:
>=20
> 1) look at the leaf node and use the CAA record there if it exists.
> 2) If no node is found there, look at the public delegation point that
> the CA will use for validation.
>=20
>=20
>=20
>=20
> On Thu, Jul 19, 2012 at 2:20 PM, Richard L. Barnes <rbarnes@bbn.com> =
wrote:
>>=20
>> On Jul 18, 2012, at 10:52 AM, Manger, James H wrote:
>>=20
>>>> PHB: Thanks for all the changes you made in draft-ietf-pkix-caa-11. =
 I
>>>> think this version is close to ready.
>>>>=20
>>>> The one issue that I didn't feel we really got resolution on was =
the
>>>> question of where CAA records should be located.  I still think the
>>>> tree-climbing algorithm is confusing and likely to lead to subtle
>>>> errors.  And the document still doesn't address the wildcard case.
>>>>=20
>>>> I have listed a complete set of proposed changes below.  The =
high-level
>>>> outline is:
>>>> -- A issuer looks for CAA records only at the name to be included =
in
>>>> the certificate.
>>>> -- If there are one or more CAA records present, then any issuance =
MUST
>>>> comply with them.
>>>> -- If there is no CAA, then the CAA system provides no information; =
an
>>>> issuer MAY issue, subject to its local policy.
>>>> -- If the name to be issued is a wildcard, then the issuer replaces =
the
>>>> "*" with the label "_star" and uses the normal procedure.
>>>> -- Tree climbing is still allowed to find "iodef" records (with =
"MAY"
>>>> strength).
>>>>=20
>>>> This simplified procedure provides the same functionality as the
>>>> current document with much simpler processing; the only cost is =
that
>>>> CAA records have to be provisioned at individual domain names that =
are
>>>> getting certificates.
>>>>=20
>>>> I would like to get the WG's feedback on this proposal before we
>>>> consider CAA finished.
>>>>=20
>>>> Thanks,
>>>> --Richard
>>>=20
>>>=20
>>> These changes would still allow Example Org to prevent compliant CAs =
from issuing certificates for, say, www.example.org and example.org =
(with 2 CAA records (or 3)). However, it makes it very hard (or =
impossible with DNSSEC?) to prevent certificates being issued for =
(non-existent) sub-domains (eg a3323422.example.org). That is bad as =
browsers give sub-domains some authority with respect to their parent =
domains. For instance, a sub-domain can often read cookies set by a =
parent domains (not sure if this is affected by a cookie's "secure" =
flag). A sub-domain is often in the same "security zone" for other =
browser security controls.
>>=20
>> First of all, if the policy is to look only at the leaf and require =
CAA, then a CA will never issue a cert for a non-existent domain because =
there won't be a CAA record there.
>>=20
>> If you're worried about CAs that fall back to something else if CAA =
isn't present, couldn't the parent zone holder just set a wildcard that =
provides null CAA for any subordinate zone?
>>=20
>> *.example.com CAA 0 issue ";"
>>=20
>> --Richard
>>=20
>>=20
>>=20
>>>=20
>>> So I believe these changes would weaken CAA, not provide the same =
functionality.
>>>=20
>>> --
>>> James Manger
>>=20
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>=20
>=20
>=20
> --=20
> Website: http://hallambaker.com/


From hallam@gmail.com  Fri Jul 20 07:34:01 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 84BEC21F8599 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:34:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.338
X-Spam-Level: 
X-Spam-Status: No, score=-5.338 tagged_above=-999 required=5 tests=[AWL=-2.107, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, URI_HEX=0.368]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KjARRkXTQZdZ for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:34:00 -0700 (PDT)
Received: from mail-vb0-f44.google.com (mail-vb0-f44.google.com [209.85.212.44]) by ietfa.amsl.com (Postfix) with ESMTP id 7A43A21F849C for <pkix@ietf.org>; Fri, 20 Jul 2012 07:34:00 -0700 (PDT)
Received: by vbbez10 with SMTP id ez10so3291675vbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 07:34:56 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=MB8PXsq/fJvqENW49J0NJJR8BUhz+EzUJJ9p33LNtuM=; b=HWaslkgP3AkUQZZ2w5WTGsJHB1cKFNeN2hxHnH6rzGYbES+dnElFowIOpfEH6kSRF0 tMPb+6QMoTIQmjXYUBjinpoOpaCkGAtmLTHsnlx07Uby+UuRYU7wqwXJscuvhzPg+yF0 SDOXExE7FY7rHq1mMU+T09oWwY41VFxIwuTcbOG0HEJ/ZNkRhIaF8N8nZllgE+h/k7Mf jGGAQCAF71thN7Nra7MEgzIREOV3XsF2E+uQ0WNM7/k7/oZa7spLI7QWVBdCxnsmN9Fe xIg4pjtw4iqGzhIldQjzvn9etBg40RBXooTCdKqpJQuNK6yUwTyKXCT53V2cCuoL8P+Z wjYg==
MIME-Version: 1.0
Received: by 10.52.17.207 with SMTP id q15mr4069101vdd.49.1342794896230; Fri, 20 Jul 2012 07:34:56 -0700 (PDT)
Received: by 10.58.116.233 with HTTP; Fri, 20 Jul 2012 07:34:56 -0700 (PDT)
In-Reply-To: <B08028BD-D01E-46E4-8099-E39D0F1B4C4C@bbn.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <CAMm+LwirCGhvMRLSQGWfBkznAuK6VAss905PYAKkTcKEJt+8xw@mail.gmail.com> <B08028BD-D01E-46E4-8099-E39D0F1B4C4C@bbn.com>
Date: Fri, 20 Jul 2012 10:34:56 -0400
Message-ID: <CAMm+Lwit4srYSgdBjbOygBV85A5U66T16tB7sQ1RYacCm3RWrw@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 14:34:01 -0000

No, if the site in question is topsecret.bbn.com you are not going to
find the military happy that you have revealed the existence of the
service.

I think you are coming up with excuses not to do the thing that has
been thought through be people who are actually in this business and
understand the complexity.


On Fri, Jul 20, 2012 at 10:11 AM, Richard L. Barnes <rbarnes@bbn.com> wrote=
:
> I'm assuming that your concern with split DNS is that if foo.example.com =
might is only visible internally, then the CA won't be able to see a CAA re=
cord for it?
>
> Can't example.com just provision a CAA record for foo.example.com on the =
outside?  You can still have the rest of foo.example.com be internal.
>
> Honestly, at this point it really seems like we're over-thinking things h=
ere in order to come up with excuses not to do the simple thing.
>
>
>
>
> On Jul 20, 2012, at 10:04 AM, Phillip Hallam-Baker wrote:
>
>> Split DNS is a real-world fact that any proposal has to work with.
>>
>> MOST corporate sites are only visible to the corporate network. This
>> is not only acceptable practice it is best security practice.
>>
>> We could go back to my original proposal:
>>
>> 1) look at the leaf node and use the CAA record there if it exists.
>> 2) If no node is found there, look at the public delegation point that
>> the CA will use for validation.
>>
>>
>>
>>
>> On Thu, Jul 19, 2012 at 2:20 PM, Richard L. Barnes <rbarnes@bbn.com> wro=
te:
>>>
>>> On Jul 18, 2012, at 10:52 AM, Manger, James H wrote:
>>>
>>>>> PHB: Thanks for all the changes you made in draft-ietf-pkix-caa-11.  =
I
>>>>> think this version is close to ready.
>>>>>
>>>>> The one issue that I didn't feel we really got resolution on was the
>>>>> question of where CAA records should be located.  I still think the
>>>>> tree-climbing algorithm is confusing and likely to lead to subtle
>>>>> errors.  And the document still doesn't address the wildcard case.
>>>>>
>>>>> I have listed a complete set of proposed changes below.  The high-lev=
el
>>>>> outline is:
>>>>> -- A issuer looks for CAA records only at the name to be included in
>>>>> the certificate.
>>>>> -- If there are one or more CAA records present, then any issuance MU=
ST
>>>>> comply with them.
>>>>> -- If there is no CAA, then the CAA system provides no information; a=
n
>>>>> issuer MAY issue, subject to its local policy.
>>>>> -- If the name to be issued is a wildcard, then the issuer replaces t=
he
>>>>> "*" with the label "_star" and uses the normal procedure.
>>>>> -- Tree climbing is still allowed to find "iodef" records (with "MAY"
>>>>> strength).
>>>>>
>>>>> This simplified procedure provides the same functionality as the
>>>>> current document with much simpler processing; the only cost is that
>>>>> CAA records have to be provisioned at individual domain names that ar=
e
>>>>> getting certificates.
>>>>>
>>>>> I would like to get the WG's feedback on this proposal before we
>>>>> consider CAA finished.
>>>>>
>>>>> Thanks,
>>>>> --Richard
>>>>
>>>>
>>>> These changes would still allow Example Org to prevent compliant CAs f=
rom issuing certificates for, say, www.example.org and example.org (with 2 =
CAA records (or 3)). However, it makes it very hard (or impossible with DNS=
SEC?) to prevent certificates being issued for (non-existent) sub-domains (=
eg a3323422.example.org). That is bad as browsers give sub-domains some aut=
hority with respect to their parent domains. For instance, a sub-domain can=
 often read cookies set by a parent domains (not sure if this is affected b=
y a cookie's "secure" flag). A sub-domain is often in the same "security zo=
ne" for other browser security controls.
>>>
>>> First of all, if the policy is to look only at the leaf and require CAA=
, then a CA will never issue a cert for a non-existent domain because there=
 won't be a CAA record there.
>>>
>>> If you're worried about CAs that fall back to something else if CAA isn=
't present, couldn't the parent zone holder just set a wildcard that provid=
es null CAA for any subordinate zone?
>>>
>>> *.example.com CAA 0 issue ";"
>>>
>>> --Richard
>>>
>>>
>>>
>>>>
>>>> So I believe these changes would weaken CAA, not provide the same func=
tionality.
>>>>
>>>> --
>>>> James Manger
>>>
>>> _______________________________________________
>>> pkix mailing list
>>> pkix@ietf.org
>>> https://www.ietf.org/mailman/listinfo/pkix
>>
>>
>>
>> --
>> Website: http://hallambaker.com/
>



--=20
Website: http://hallambaker.com/

From ajs@anvilwalrusden.com  Fri Jul 20 07:42:21 2012
Return-Path: <ajs@anvilwalrusden.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5A54221F85AD for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:42:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.275
X-Spam-Level: 
X-Spam-Status: No, score=-1.275 tagged_above=-999 required=5 tests=[AWL=-0.435, BAYES_00=-2.599, HELO_MISMATCH_INFO=1.448, HOST_MISMATCH_NET=0.311]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JLL8Y76Oktk2 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:42:20 -0700 (PDT)
Received: from mx1.yitter.info (ow5p.x.rootbsd.net [208.79.81.114]) by ietfa.amsl.com (Postfix) with ESMTP id A7E2521F857D for <pkix@ietf.org>; Fri, 20 Jul 2012 07:42:20 -0700 (PDT)
Received: from mail.yitter.info (69-196-144-227.dsl.teksavvy.com [69.196.144.227]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.yitter.info (Postfix) with ESMTPSA id 09B588A031 for <pkix@ietf.org>; Fri, 20 Jul 2012 14:43:15 +0000 (UTC)
Date: Fri, 20 Jul 2012 10:43:14 -0400
From: Andrew Sullivan <ajs@anvilwalrusden.com>
To: pkix@ietf.org
Message-ID: <20120720144314.GI3594@mail.yitter.info>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <CAMm+LwirCGhvMRLSQGWfBkznAuK6VAss905PYAKkTcKEJt+8xw@mail.gmail.com> <B08028BD-D01E-46E4-8099-E39D0F1B4C4C@bbn.com> <CAMm+Lwit4srYSgdBjbOygBV85A5U66T16tB7sQ1RYacCm3RWrw@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAMm+Lwit4srYSgdBjbOygBV85A5U66T16tB7sQ1RYacCm3RWrw@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 14:42:21 -0000

On Fri, Jul 20, 2012 at 10:34:56AM -0400, Phillip Hallam-Baker wrote:
> No, if the site in question is topsecret.bbn.com you are not going to
> find the military happy that you have revealed the existence of the
> service.

Those people are dreaming in Technicolor.  Split-brain DNS names leak,
and there is no way to prevent that.  In this particular case, they
leak because, in order to get the CA to issue the cert, you're going
to give them the name.  You've already revealed it to someone. 

I don't understand what value CAA offers in such cases anyway.
Someone who is actually concerned about not leaking such a name would
presumably get themselves set up in such a way that they had a
certificate with which they could issue another certificate for
topsecret.example.com.  If they're in that situation, nobody needs to
do the CAA lookup on that name except themselves, and they can
presumably contact the relevant server.

Best,

A


-- 
Andrew Sullivan
ajs@anvilwalrusden.com

From rbarnes@bbn.com  Fri Jul 20 07:46:48 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D740C21F8687 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:46:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.406
X-Spam-Level: 
X-Spam-Status: No, score=-106.406 tagged_above=-999 required=5 tests=[AWL=-0.175, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, URI_HEX=0.368, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wynBHExMQmc4 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:46:47 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id 9D5E021F8690 for <pkix@ietf.org>; Fri, 20 Jul 2012 07:46:47 -0700 (PDT)
Received: from ros-dhcp192-1-51-20.bbn.com ([192.1.51.20]:49202) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1SsEUW-000KaW-AY; Fri, 20 Jul 2012 10:47:40 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <CAMm+Lwit4srYSgdBjbOygBV85A5U66T16tB7sQ1RYacCm3RWrw@mail.gmail.com>
Date: Fri, 20 Jul 2012 10:47:38 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <57FB028F-CD05-48A5-B785-A159A17AE611@bbn.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <CAMm+LwirCGhvMRLSQGWfBkznAuK6VAss905PYAKkTcKEJt+8xw@mail.gmail.com> <B08028BD-D01E-46E4-8099-E39D0F1B4C4C@bbn.com> <CAMm+Lwit4srYSgdBjbOygBV85A5U66T16tB7sQ1RYacCm3RWrw@mail.gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
X-Mailer: Apple Mail (2.1278)
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 14:46:49 -0000

Phil, I told you not to mention topsecret.bbn.com!  Shhhh!

It seems like a questionable practice for a CA to be issuing certs for =
things he can't get any real information about.

The problem with your original proposal is that there's not a good way =
for a CA to detect whether there's no zone there or whether there's just =
no CAA.  So by allowing parents to be used for non-public domains, =
you're allowing parents to be used for a domain that simply doesn't use =
CAA, which was the problem with tree climbing in the first place.   =20




On Jul 20, 2012, at 10:34 AM, Phillip Hallam-Baker wrote:

> No, if the site in question is topsecret.bbn.com you are not going to
> find the military happy that you have revealed the existence of the
> service.
>=20
> I think you are coming up with excuses not to do the thing that has
> been thought through be people who are actually in this business and
> understand the complexity.
>=20
>=20
> On Fri, Jul 20, 2012 at 10:11 AM, Richard L. Barnes <rbarnes@bbn.com> =
wrote:
>> I'm assuming that your concern with split DNS is that if =
foo.example.com might is only visible internally, then the CA won't be =
able to see a CAA record for it?
>>=20
>> Can't example.com just provision a CAA record for foo.example.com on =
the outside?  You can still have the rest of foo.example.com be =
internal.
>>=20
>> Honestly, at this point it really seems like we're over-thinking =
things here in order to come up with excuses not to do the simple thing.
>>=20
>>=20
>>=20
>>=20
>> On Jul 20, 2012, at 10:04 AM, Phillip Hallam-Baker wrote:
>>=20
>>> Split DNS is a real-world fact that any proposal has to work with.
>>>=20
>>> MOST corporate sites are only visible to the corporate network. This
>>> is not only acceptable practice it is best security practice.
>>>=20
>>> We could go back to my original proposal:
>>>=20
>>> 1) look at the leaf node and use the CAA record there if it exists.
>>> 2) If no node is found there, look at the public delegation point =
that
>>> the CA will use for validation.
>>>=20
>>>=20
>>>=20
>>>=20
>>> On Thu, Jul 19, 2012 at 2:20 PM, Richard L. Barnes <rbarnes@bbn.com> =
wrote:
>>>>=20
>>>> On Jul 18, 2012, at 10:52 AM, Manger, James H wrote:
>>>>=20
>>>>>> PHB: Thanks for all the changes you made in =
draft-ietf-pkix-caa-11.  I
>>>>>> think this version is close to ready.
>>>>>>=20
>>>>>> The one issue that I didn't feel we really got resolution on was =
the
>>>>>> question of where CAA records should be located.  I still think =
the
>>>>>> tree-climbing algorithm is confusing and likely to lead to subtle
>>>>>> errors.  And the document still doesn't address the wildcard =
case.
>>>>>>=20
>>>>>> I have listed a complete set of proposed changes below.  The =
high-level
>>>>>> outline is:
>>>>>> -- A issuer looks for CAA records only at the name to be included =
in
>>>>>> the certificate.
>>>>>> -- If there are one or more CAA records present, then any =
issuance MUST
>>>>>> comply with them.
>>>>>> -- If there is no CAA, then the CAA system provides no =
information; an
>>>>>> issuer MAY issue, subject to its local policy.
>>>>>> -- If the name to be issued is a wildcard, then the issuer =
replaces the
>>>>>> "*" with the label "_star" and uses the normal procedure.
>>>>>> -- Tree climbing is still allowed to find "iodef" records (with =
"MAY"
>>>>>> strength).
>>>>>>=20
>>>>>> This simplified procedure provides the same functionality as the
>>>>>> current document with much simpler processing; the only cost is =
that
>>>>>> CAA records have to be provisioned at individual domain names =
that are
>>>>>> getting certificates.
>>>>>>=20
>>>>>> I would like to get the WG's feedback on this proposal before we
>>>>>> consider CAA finished.
>>>>>>=20
>>>>>> Thanks,
>>>>>> --Richard
>>>>>=20
>>>>>=20
>>>>> These changes would still allow Example Org to prevent compliant =
CAs from issuing certificates for, say, www.example.org and example.org =
(with 2 CAA records (or 3)). However, it makes it very hard (or =
impossible with DNSSEC?) to prevent certificates being issued for =
(non-existent) sub-domains (eg a3323422.example.org). That is bad as =
browsers give sub-domains some authority with respect to their parent =
domains. For instance, a sub-domain can often read cookies set by a =
parent domains (not sure if this is affected by a cookie's "secure" =
flag). A sub-domain is often in the same "security zone" for other =
browser security controls.
>>>>=20
>>>> First of all, if the policy is to look only at the leaf and require =
CAA, then a CA will never issue a cert for a non-existent domain because =
there won't be a CAA record there.
>>>>=20
>>>> If you're worried about CAs that fall back to something else if CAA =
isn't present, couldn't the parent zone holder just set a wildcard that =
provides null CAA for any subordinate zone?
>>>>=20
>>>> *.example.com CAA 0 issue ";"
>>>>=20
>>>> --Richard
>>>>=20
>>>>=20
>>>>=20
>>>>>=20
>>>>> So I believe these changes would weaken CAA, not provide the same =
functionality.
>>>>>=20
>>>>> --
>>>>> James Manger
>>>>=20
>>>> _______________________________________________
>>>> pkix mailing list
>>>> pkix@ietf.org
>>>> https://www.ietf.org/mailman/listinfo/pkix
>>>=20
>>>=20
>>>=20
>>> --
>>> Website: http://hallambaker.com/
>>=20
>=20
>=20
>=20
> --=20
> Website: http://hallambaker.com/


From hallam@gmail.com  Fri Jul 20 07:49:21 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 12F1B21F8672 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:49:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.331
X-Spam-Level: 
X-Spam-Status: No, score=-5.331 tagged_above=-999 required=5 tests=[AWL=-2.100, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, URI_HEX=0.368]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u7VgAPGmYB1d for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 07:49:18 -0700 (PDT)
Received: from mail-vb0-f44.google.com (mail-vb0-f44.google.com [209.85.212.44]) by ietfa.amsl.com (Postfix) with ESMTP id 9D78621F8495 for <pkix@ietf.org>; Fri, 20 Jul 2012 07:49:18 -0700 (PDT)
Received: by vbbez10 with SMTP id ez10so3308264vbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 07:50:14 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; bh=M1B7S+yUpq17mNks9gH6jOC5LvyozY9hsKLyxPMy8Xc=; b=S3qI3glg6qH0PvK/G65/drm7KKpzZ8QmDA2LgUhrlGR0GzWtZ1So6lEYCuzQ0mQueN xNnmJ4VQZnRQMb84VAyCFuv+cUuDKhDNVNBm5tUUd1myyaeF+N5kHRQQIj0H9UFAOcfl NVEphSJsNIfYDt1c1ur0Sbhehqo4zqrGeafYwc78FyZt27Wfa/2mtQqWYaqRj07t2q8K EQ0Vsab42KeUT6NljXgNkqTRARwp66xSkLwSUWFeSi3etIRZonC10iLl/t7sCx7MIa0F BH1IMIm8V3FneC8DiGtTtvUaLMvDvkWZLftE8MygUV+qnMXfuegLq5mLBB8A6y6FdZB0 aL9w==
MIME-Version: 1.0
Received: by 10.52.35.233 with SMTP id l9mr4111959vdj.7.1342795814446; Fri, 20 Jul 2012 07:50:14 -0700 (PDT)
Received: by 10.58.116.233 with HTTP; Fri, 20 Jul 2012 07:50:14 -0700 (PDT)
In-Reply-To: <57FB028F-CD05-48A5-B785-A159A17AE611@bbn.com>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <CAMm+LwirCGhvMRLSQGWfBkznAuK6VAss905PYAKkTcKEJt+8xw@mail.gmail.com> <B08028BD-D01E-46E4-8099-E39D0F1B4C4C@bbn.com> <CAMm+Lwit4srYSgdBjbOygBV85A5U66T16tB7sQ1RYacCm3RWrw@mail.gmail.com> <57FB028F-CD05-48A5-B785-A159A17AE611@bbn.com>
Date: Fri, 20 Jul 2012 10:50:14 -0400
Message-ID: <CAMm+LwhXS38Tskp1fFRqCDv57PbKste8SJrYuwDQZv=Tpmin9Q@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: "Richard L. Barnes" <rbarnes@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 14:49:21 -0000

It isn't a problem at all.

Your view is based on the belief that DNS hierarchy has administrative
significance and in the real world that is almost never the case.




On Fri, Jul 20, 2012 at 10:47 AM, Richard L. Barnes <rbarnes@bbn.com> wrote=
:
> Phil, I told you not to mention topsecret.bbn.com!  Shhhh!
>
> It seems like a questionable practice for a CA to be issuing certs for th=
ings he can't get any real information about.
>
> The problem with your original proposal is that there's not a good way fo=
r a CA to detect whether there's no zone there or whether there's just no C=
AA.  So by allowing parents to be used for non-public domains, you're allow=
ing parents to be used for a domain that simply doesn't use CAA, which was =
the problem with tree climbing in the first place.
>
>
>
>
> On Jul 20, 2012, at 10:34 AM, Phillip Hallam-Baker wrote:
>
>> No, if the site in question is topsecret.bbn.com you are not going to
>> find the military happy that you have revealed the existence of the
>> service.
>>
>> I think you are coming up with excuses not to do the thing that has
>> been thought through be people who are actually in this business and
>> understand the complexity.
>>
>>
>> On Fri, Jul 20, 2012 at 10:11 AM, Richard L. Barnes <rbarnes@bbn.com> wr=
ote:
>>> I'm assuming that your concern with split DNS is that if foo.example.co=
m might is only visible internally, then the CA won't be able to see a CAA =
record for it?
>>>
>>> Can't example.com just provision a CAA record for foo.example.com on th=
e outside?  You can still have the rest of foo.example.com be internal.
>>>
>>> Honestly, at this point it really seems like we're over-thinking things=
 here in order to come up with excuses not to do the simple thing.
>>>
>>>
>>>
>>>
>>> On Jul 20, 2012, at 10:04 AM, Phillip Hallam-Baker wrote:
>>>
>>>> Split DNS is a real-world fact that any proposal has to work with.
>>>>
>>>> MOST corporate sites are only visible to the corporate network. This
>>>> is not only acceptable practice it is best security practice.
>>>>
>>>> We could go back to my original proposal:
>>>>
>>>> 1) look at the leaf node and use the CAA record there if it exists.
>>>> 2) If no node is found there, look at the public delegation point that
>>>> the CA will use for validation.
>>>>
>>>>
>>>>
>>>>
>>>> On Thu, Jul 19, 2012 at 2:20 PM, Richard L. Barnes <rbarnes@bbn.com> w=
rote:
>>>>>
>>>>> On Jul 18, 2012, at 10:52 AM, Manger, James H wrote:
>>>>>
>>>>>>> PHB: Thanks for all the changes you made in draft-ietf-pkix-caa-11.=
  I
>>>>>>> think this version is close to ready.
>>>>>>>
>>>>>>> The one issue that I didn't feel we really got resolution on was th=
e
>>>>>>> question of where CAA records should be located.  I still think the
>>>>>>> tree-climbing algorithm is confusing and likely to lead to subtle
>>>>>>> errors.  And the document still doesn't address the wildcard case.
>>>>>>>
>>>>>>> I have listed a complete set of proposed changes below.  The high-l=
evel
>>>>>>> outline is:
>>>>>>> -- A issuer looks for CAA records only at the name to be included i=
n
>>>>>>> the certificate.
>>>>>>> -- If there are one or more CAA records present, then any issuance =
MUST
>>>>>>> comply with them.
>>>>>>> -- If there is no CAA, then the CAA system provides no information;=
 an
>>>>>>> issuer MAY issue, subject to its local policy.
>>>>>>> -- If the name to be issued is a wildcard, then the issuer replaces=
 the
>>>>>>> "*" with the label "_star" and uses the normal procedure.
>>>>>>> -- Tree climbing is still allowed to find "iodef" records (with "MA=
Y"
>>>>>>> strength).
>>>>>>>
>>>>>>> This simplified procedure provides the same functionality as the
>>>>>>> current document with much simpler processing; the only cost is tha=
t
>>>>>>> CAA records have to be provisioned at individual domain names that =
are
>>>>>>> getting certificates.
>>>>>>>
>>>>>>> I would like to get the WG's feedback on this proposal before we
>>>>>>> consider CAA finished.
>>>>>>>
>>>>>>> Thanks,
>>>>>>> --Richard
>>>>>>
>>>>>>
>>>>>> These changes would still allow Example Org to prevent compliant CAs=
 from issuing certificates for, say, www.example.org and example.org (with =
2 CAA records (or 3)). However, it makes it very hard (or impossible with D=
NSSEC?) to prevent certificates being issued for (non-existent) sub-domains=
 (eg a3323422.example.org). That is bad as browsers give sub-domains some a=
uthority with respect to their parent domains. For instance, a sub-domain c=
an often read cookies set by a parent domains (not sure if this is affected=
 by a cookie's "secure" flag). A sub-domain is often in the same "security =
zone" for other browser security controls.
>>>>>
>>>>> First of all, if the policy is to look only at the leaf and require C=
AA, then a CA will never issue a cert for a non-existent domain because the=
re won't be a CAA record there.
>>>>>
>>>>> If you're worried about CAs that fall back to something else if CAA i=
sn't present, couldn't the parent zone holder just set a wildcard that prov=
ides null CAA for any subordinate zone?
>>>>>
>>>>> *.example.com CAA 0 issue ";"
>>>>>
>>>>> --Richard
>>>>>
>>>>>
>>>>>
>>>>>>
>>>>>> So I believe these changes would weaken CAA, not provide the same fu=
nctionality.
>>>>>>
>>>>>> --
>>>>>> James Manger
>>>>>
>>>>> _______________________________________________
>>>>> pkix mailing list
>>>>> pkix@ietf.org
>>>>> https://www.ietf.org/mailman/listinfo/pkix
>>>>
>>>>
>>>>
>>>> --
>>>> Website: http://hallambaker.com/
>>>
>>
>>
>>
>> --
>> Website: http://hallambaker.com/
>



--=20
Website: http://hallambaker.com/

From ajs@anvilwalrusden.com  Fri Jul 20 08:22:42 2012
Return-Path: <ajs@anvilwalrusden.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 657EB21F8637 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 08:22:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.269
X-Spam-Level: 
X-Spam-Status: No, score=-1.269 tagged_above=-999 required=5 tests=[AWL=-0.429, BAYES_00=-2.599, HELO_MISMATCH_INFO=1.448, HOST_MISMATCH_NET=0.311]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xmoyDJrCJyYO for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 08:22:41 -0700 (PDT)
Received: from mx1.yitter.info (ow5p.x.rootbsd.net [208.79.81.114]) by ietfa.amsl.com (Postfix) with ESMTP id 4C1DE21F85E3 for <pkix@ietf.org>; Fri, 20 Jul 2012 08:22:41 -0700 (PDT)
Received: from mail.yitter.info (69-196-144-227.dsl.teksavvy.com [69.196.144.227]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by mx1.yitter.info (Postfix) with ESMTPSA id 5FD658A031 for <pkix@ietf.org>; Fri, 20 Jul 2012 15:23:33 +0000 (UTC)
Date: Fri, 20 Jul 2012 11:23:31 -0400
From: Andrew Sullivan <ajs@anvilwalrusden.com>
To: pkix@ietf.org
Message-ID: <20120720152331.GK3594@mail.yitter.info>
References: <87048B87-DC4C-4287-99E3-C8AC14D5017B@bbn.com> <255B9BB34FB7D647A506DC292726F6E114F7D17EE1@WSMSG3153V.srv.dir.telstra.com> <8D6A627B-D9F4-40AE-8D6B-C893CC1869F6@bbn.com> <CAMm+LwirCGhvMRLSQGWfBkznAuK6VAss905PYAKkTcKEJt+8xw@mail.gmail.com> <B08028BD-D01E-46E4-8099-E39D0F1B4C4C@bbn.com> <CAMm+Lwit4srYSgdBjbOygBV85A5U66T16tB7sQ1RYacCm3RWrw@mail.gmail.com> <57FB028F-CD05-48A5-B785-A159A17AE611@bbn.com> <CAMm+LwhXS38Tskp1fFRqCDv57PbKste8SJrYuwDQZv=Tpmin9Q@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAMm+LwhXS38Tskp1fFRqCDv57PbKste8SJrYuwDQZv=Tpmin9Q@mail.gmail.com>
User-Agent: Mutt/1.5.21 (2010-09-15)
Subject: Re: [pkix] CAA record location / tree climbing
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 15:22:42 -0000

On Fri, Jul 20, 2012 at 10:50:14AM -0400, Phillip Hallam-Baker wrote:
> Your view is based on the belief that DNS hierarchy has administrative
> significance and in the real world that is almost never the case.

I fully agree with the claim that the DNS hierarchy has no
administrative significance, and that one can't read the
administrative facts off the tree.

But that's actually a premise _against_ using a parent name's CAA
record to apply to child names.  The very problem of reading
administrative boundaries off the DNS is how we got crude hacks like
publicsuffix.org.

If you really think that the DNS hierarchy has no administrative
significance, then there is exactly one way to handle this, and that's
to test for CAAs _at that name_, and nowhere else.  Apparently,
however, there are some names that do have administrative significance
(the public delegation points).  If you want to inherit data down the
tree from such points, I get the argument; but I think such a decision
needs an explicit defence in the draft, because it creates new issues
on its own.  From my POV, once you start climbing the tree I'd just as
soon you do it in one step, to wherever you think public delegation
points are -- as long as you admit that such a move introduces
possible problems on its own.

Best,

A


-- 
Andrew Sullivan
ajs@anvilwalrusden.com

From peter.sylvester@edelweb.fr  Fri Jul 20 08:28:55 2012
Return-Path: <peter.sylvester@edelweb.fr>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86B4821F8541 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 08:28:55 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZdAea1sMdV9b for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 08:28:54 -0700 (PDT)
Received: from mx1.on-x.com (mx1.on-x.com [92.103.215.13]) by ietfa.amsl.com (Postfix) with ESMTP id 3728421F852B for <pkix@ietf.org>; Fri, 20 Jul 2012 08:28:54 -0700 (PDT)
Received: from varuna.puteaux.on-x (varuna.puteaux.on-x [192.168.10.6]) by mx1.on-x.com (Postfix) with ESMTP id 484485E0FE; Fri, 20 Jul 2012 17:28:42 +0200 (CEST)
Received: from smtps.on-x.com (mintaka.puteaux.on-x [192.168.14.11]) by varuna.puteaux.on-x (Postfix) with ESMTP id 95D3D83F79F; Fri, 20 Jul 2012 17:06:26 +0200 (CEST)
Received: from [192.168.18.180] (unknown [192.168.18.180]) by smtps.on-x.com (Postfix) with ESMTPSA id A60A4236333; Fri, 20 Jul 2012 11:10:30 -0400 (EDT)
Message-ID: <50097988.9050400@edelweb.fr>
Date: Fri, 20 Jul 2012 17:30:16 +0200
From: Peter Sylvester <peter.sylvester@edelweb.fr>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:13.0) Gecko/20120615 Thunderbird/13.0.1
MIME-Version: 1.0
To: Tom Gindin <tgindin@us.ibm.com>
References: <p06240804cc064804b5f2@[128.89.89.227]>	<033201cd567c$ef626970$ce273c50$@akayla.com> <4FFF2AF5.4070007@nist.gov>	<OFE6D3640A.D4FCD6C5-ON85257A3E.00774EDD-85257A40.0003F4F9@us.ibm.com> <50081AA0.5060107@nist.gov>	<OF447F9ED9.566ED59A-ON85257A40.0051B1F2-85257A41.00007312@us.ibm.com> <5008EF2B.2020909@edelweb.fr> <OF0C759671.4F90B3E2-ON85257A41.0048ABEC-85257A41.004926B8@us.ibm.com>
In-Reply-To: <OF0C759671.4F90B3E2-ON85257A41.0048ABEC-85257A41.004926B8@us.ibm.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: pkix@ietf.org
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 15:28:55 -0000

On 07/20/2012 03:18 PM, Tom Gindin wrote:
>          Peter:
>
>          Admittedly, my word choice was inconsistent.  I should have said "
> still used as sources for trust anchors", to match the later reference to
> "importing".  However, the issuer of a v3 non-CA certificate, whether the
> subject or not, does not intend that anyone use that key and name to
> validate other certificates.  Therefore, code which creates trust anchors
> by importing certificates should not do so with a v3 non-CA certificate,
> although it may deem these certificates to be directly trusted EE's if it
> so chooses.
>
> Tom Gindin
>
>
Trust and distrust are not transitive.
Code which creates trust anchors are importing trust anchor
information containers, if they happen to look like something
else, it doesn't matter.

Anyway, if I have a certficate, I can create my self signed and
add whather I want. Does trust anchor establishing code
look at the issuer of a cert?

From danbryan80@gmail.com  Fri Jul 20 09:36:38 2012
Return-Path: <danbryan80@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 870B321F85D2 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 09:36:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level: 
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DNBqbqYzB+E9 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 09:36:37 -0700 (PDT)
Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id 1A30821F84D6 for <pkix@ietf.org>; Fri, 20 Jul 2012 09:36:36 -0700 (PDT)
Received: by lbbgo11 with SMTP id go11so5770200lbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 09:37:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=Qsy1JEos0XIRXHT+6VwdacFJ9TMnu+UQBWm+fQmNJHA=; b=yiUN017Ousl9M4wQeRJwHz19OJHzZom2PxOdl3Pem9CUZrwNHauGantW3SQ0VQ1S/u wDPkGNrjwrVaiL2Hm+Npac1vtlJ5a62XrUcEeR0lcFK8FAJEKJ7etxGCzJd1PzxhdReA JWzyN5KBtU2kn3jv7HrnmDEuX3/dH1f7aYVkJkjI9Hzh6oms3po50Z2edLovagdQ0Skl HFgdf7XrQF7MOKIv+fkCYt9P90+3iQmphIamGoNQdKLg2bZZ+xN2p0a3mqIJX+8B+g8b 2cYeB4jfWs4lQf3eKnvKxTPD6YRKcUTl1zDV7+HNC2Jqebf25KOyTaHqZ44yZZg/wIqe XUDA==
MIME-Version: 1.0
Received: by 10.112.54.100 with SMTP id i4mr3308101lbp.97.1342802252511; Fri, 20 Jul 2012 09:37:32 -0700 (PDT)
Received: by 10.114.37.73 with HTTP; Fri, 20 Jul 2012 09:37:32 -0700 (PDT)
In-Reply-To: <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com> <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com>
Date: Fri, 20 Jul 2012 12:37:32 -0400
Message-ID: <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com>
From: daniel bryan <danbryan80@gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
Content-Type: multipart/alternative; boundary=bcaec55400ee43ba3504c54583e8
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 16:36:38 -0000

--bcaec55400ee43ba3504c54583e8
Content-Type: text/plain; charset=ISO-8859-1

So talking with the actividentity engineer it seems that the responder is
giving an HTTP 200 code to the get Request.

192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] "GET
//MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D
HTTP/1.1" 200 5

yet, IIS recieved a malformed OCSP response.  Is there a way to see the
response that IIS rfecieved and determine why its malformed?


On Fri, Jul 20, 2012 at 7:55 AM, Phillip Hallam-Baker <hallam@gmail.com>wrote:

> http://www.ietf.org/rfc/rfc2560.txt
>
> A.1.1 Request
>
>    HTTP based OCSP requests can use either the GET or the POST method to
>    submit their requests. To enable HTTP caching, small requests (that
>    after encoding are less than 255 bytes), MAY be submitted using GET.
>    If HTTP caching is not important, or the request is greater than 255
>    bytes, the request SHOULD be submitted using POST.
>
>
> ActivIdentity is not compliant with the spec here. The original choice
> to support use of GET was deliberate as the requests are cacheable.
>
>
>
> On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan <danbryan80@gmail.com>
> wrote:
> > I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd
> party
> > OCSP responder made by actividentity.  According to my CAPI2 log on the
> IIS
> > server, its sending a GET request to my OCSP responder, and getting an
> error
> > saying malformed ocsp request.  If I use a 3rd party CAPI plugin on the
> IIS
> > machine it sends POST request to the OCSP responder and recieves no
> errors.
> >
> > Is there a way I can tell windows to send OCSP request as a POST instead
> of
> > a GET?
> >
> > _______________________________________________
> > pkix mailing list
> > pkix@ietf.org
> > https://www.ietf.org/mailman/listinfo/pkix
> >
>
>
>
> --
> Website: http://hallambaker.com/
>



-- 
Dan Bryan
danbryan80@gmail.com
443 333 1147

--bcaec55400ee43ba3504c54583e8
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">So ta=
lking with the actividentity engineer it seems that the responder is giving=
 an HTTP 200 code to the get Request.</font></font></font><div><font color=
=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br>
</font></font></font></div><div><font color=3D"#000000"><font><font face=3D=
"comic sans ms,sans-serif">192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] &qu=
ot;GET //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgF=
FmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D HTTP/1.1&quot; 200 5</font></f=
ont></font></div>
<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">yet, IIS recieved a malformed OCSP response.=
 =A0Is there a way to see the response that IIS rfecieved and determine why=
 its malformed?</font></font></font></div>
<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font><br><div class=3D"gmail_quote">On Fri, Jul 20, 201=
2 at 7:55 AM, Phillip Hallam-Baker <span dir=3D"ltr">&lt;<a href=3D"mailto:=
hallam@gmail.com" target=3D"_blank">hallam@gmail.com</a>&gt;</span> wrote:<=
br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><a href=3D"http://www.ietf.org/rfc/rfc2560.t=
xt" target=3D"_blank">http://www.ietf.org/rfc/rfc2560.txt</a><br>
<br>
A.1.1 Request<br>
<br>
=A0 =A0HTTP based OCSP requests can use either the GET or the POST method t=
o<br>
=A0 =A0submit their requests. To enable HTTP caching, small requests (that<=
br>
=A0 =A0after encoding are less than 255 bytes), MAY be submitted using GET.=
<br>
=A0 =A0If HTTP caching is not important, or the request is greater than 255=
<br>
=A0 =A0bytes, the request SHOULD be submitted using POST.<br>
<br>
<br>
ActivIdentity is not compliant with the spec here. The original choice<br>
to support use of GET was deliberate as the requests are cacheable.<br>
<div><div class=3D"h5"><br>
<br>
<br>
On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan &lt;<a href=3D"mailto:danbrya=
n80@gmail.com">danbryan80@gmail.com</a>&gt; wrote:<br>
&gt; I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd=
 party<br>
&gt; OCSP responder made by actividentity. =A0According to my CAPI2 log on =
the IIS<br>
&gt; server, its sending a GET request to my OCSP responder, and getting an=
 error<br>
&gt; saying malformed ocsp request. =A0If I use a 3rd party CAPI plugin on =
the IIS<br>
&gt; machine it sends POST request to the OCSP responder and recieves no er=
rors.<br>
&gt;<br>
&gt; Is there a way I can tell windows to send OCSP request as a POST inste=
ad of<br>
&gt; a GET?<br>
&gt;<br>
</div></div><div class=3D"im">&gt; ________________________________________=
_______<br>
&gt; pkix mailing list<br>
&gt; <a href=3D"mailto:pkix@ietf.org">pkix@ietf.org</a><br>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blan=
k">https://www.ietf.org/mailman/listinfo/pkix</a><br>
&gt;<br>
<br>
<br>
<br>
--<br>
</div>Website: <a href=3D"http://hallambaker.com/" target=3D"_blank">http:/=
/hallambaker.com/</a><br>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><font face=
=3D"georgia, serif" color=3D"#000099" size=3D"4">Dan Bryan</font><div><font=
 color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"mailto:dan=
bryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a></font></div>
<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4">443 333 114=
7</font></div><br>
</div>

--bcaec55400ee43ba3504c54583e8--

From stefan@aaa-sec.com  Fri Jul 20 10:06:27 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5D4AB21F85E4 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 10:06:27 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.852
X-Spam-Level: 
X-Spam-Status: No, score=-101.852 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_SE=0.35, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lrR8y50QWK1G for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 10:06:26 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 1F70C21F85E3 for <pkix@ietf.org>; Fri, 20 Jul 2012 10:06:25 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 56C67216F764 for <pkix@ietf.org>; Fri, 20 Jul 2012 19:07:20 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id JzbCmR4oEHRb for <pkix@ietf.org>; Fri, 20 Jul 2012 19:07:19 +0200 (CEST)
Received: from s326.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id DD4D2216F761 for <pkix@ietf.org>; Fri, 20 Jul 2012 19:07:19 +0200 (CEST)
Received: (qmail 66141 invoked from network); 20 Jul 2012 17:07:19 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.2]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s326.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <pkix@ietf.org>; 20 Jul 2012 17:07:19 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Fri, 20 Jul 2012 19:07:16 +0200
From: Stefan Santesson <stefan@aaa-sec.com>
To: <pkix@ietf.org>
Message-ID: <CC2F5A7A.47F79%stefan@aaa-sec.com>
Thread-Topic: RFC2560bis update
In-Reply-To: <CA+i=0E7RarxU-1fUZQZC8vVhqPo8x_jBYgxVHCMzyW0YkqRAJA@mail.gmail.com>
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3425656039_11582442"
Subject: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 17:06:27 -0000

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3425656039_11582442
Content-type: text/plain;
	charset="US-ASCII"
Content-transfer-encoding: 7bit

All,

I finally got to tackle the update of RFC2560bis document.

At the last ITEF/PKIX meeting we concluded that this effort needs a restart.
The changes in the 04 draft compared to the original document are so
extensive that it is hard to make sure that the update is actually
compatible with the existing standard.

I have therefore made a new draft almost from scratch, trying to change as
little as possible compared to RFC 2560.

The new draft is available here:
http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_02.txt

A diff compared to RFC 2560 is available here:
http://tinyurl.com/rfc2560bis05diff

The list of changes (this list is included in the draft) is:

This document differs from RFC 2560 in only a few areas:

   o  Section 4.1.1 specifies the ASN.1 syntax for the nonce
      extension, which was missing in RFC 2560.

   o  Section 4.4.7 specifies a new extension that may be included in
      a request message to specify signature algorithms the client
      would prefer the server use to sign the response as specified
      in [RFC6277].

   o  Section 2.3 extends the use of the "unauthorized" error
      response, as specified in [RFC5019].

   o  Section 4.2.1 and 4.2.2.3 states that a response may include
      revocation status information for certificates that were not
      included in the request, as permitted in [RFC5019].

   o  Section 4.3 changes set of cryptographic algorithms that
      clients must support and the set of cryptographic algorithms
      that clients should support as specified in [RFC6277].

   o Section 4.2.2.2 has been updated to clarify when a responder is
      considered an Authorized Responder.


Section headings and numbering are as much as possible kept intact from RFC
2560.
The ASN-1 modules are imported form rfc2560bis draft 04.

What important updates did I miss to cover in this draft?

If this is considered a good starting point for a restarted draft effort,
then I will publish this as draft 05 as soon as the draft submission is
re-opened.

/Stefan









--B_3425656039_11582442
Content-type: text/html;
	charset="US-ASCII"
Content-transfer-encoding: quoted-printable

<html><head></head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: s=
pace; -webkit-line-break: after-white-space; "><div style=3D"color: rgb(0, 0, =
0); font-family: Calibri, sans-serif; font-size: 14px; ">All,</div><div styl=
e=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; "=
><br></div><div style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif=
; font-size: 14px; ">I finally got to tackle the update of RFC2560bis docume=
nt.</div><div style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; =
font-size: 14px; "><br></div><div style=3D"color: rgb(0, 0, 0); font-family: C=
alibri, sans-serif; font-size: 14px; ">At the last ITEF/PKIX meeting we conc=
luded that this effort needs a restart.</div><div style=3D"color: rgb(0, 0, 0)=
; font-family: Calibri, sans-serif; font-size: 14px; ">The changes in the 04=
 draft compared to the original document are so extensive that it is hard to=
 make sure that the update is actually compatible with the existing standard=
.</div><div style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; fo=
nt-size: 14px; "><br></div><div style=3D"color: rgb(0, 0, 0); font-family: Cal=
ibri, sans-serif; font-size: 14px; ">I have therefore made a new draft almos=
t from scratch, trying to change as little as possible compared to RFC 2560.=
</div><div style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; fon=
t-size: 14px; "><br></div><div style=3D"color: rgb(0, 0, 0); font-family: Cali=
bri, sans-serif; font-size: 14px; ">The new draft is available here:</div><d=
iv style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: =
14px; "><a href=3D"http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560b=
is-05_02.txt">http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-=
05_02.txt</a></div><div style=3D"color: rgb(0, 0, 0); font-family: Calibri, sa=
ns-serif; font-size: 14px; "><br></div><div style=3D"color: rgb(0, 0, 0); font=
-family: Calibri, sans-serif; font-size: 14px; ">A diff compared to RFC 2560=
 is available here:</div><div><font class=3D"Apple-style-span" face=3D"Calibri,s=
ans-serif"><a href=3D"http://tinyurl.com/rfc2560bis05diff">http://tinyurl.com/=
rfc2560bis05diff</a></font></div><div><font class=3D"Apple-style-span" face=3D"C=
alibri,sans-serif"><br></font></div><div style=3D"color: rgb(0, 0, 0); font-fa=
mily: Calibri, sans-serif; font-size: 14px; ">The list of changes (this list=
 is included in the draft) is:</div><div style=3D"color: rgb(0, 0, 0); font-fa=
mily: Calibri, sans-serif; font-size: 14px; "><br></div><div style=3D"color: r=
gb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; "><span clas=
s=3D"Apple-style-span" style=3D"font-family: Times; font-size: medium; "><pre st=
yle=3D"word-wrap: break-word; white-space: pre-wrap; ">This document differs f=
rom RFC 2560 in only a few areas:

   o  Section 4.1.1 specifies the ASN.1 syntax for the nonce
      extension, which was missing in RFC 2560.

   o  Section 4.4.7 specifies a new extension that may be included in
      a request message to specify signature algorithms the client
      would prefer the server use to sign the response as specified
      in [RFC6277].

   o  Section 2.3 extends the use of the "unauthorized" error
      response, as specified in [RFC5019].

   o  Section 4.2.1 and 4.2.2.3 states that a response may include
      revocation status information for certificates that were not
      included in the request, as permitted in [RFC5019].

   o  Section 4.3 changes set of cryptographic algorithms that
      clients must support and the set of cryptographic algorithms
      that clients should support as specified in [RFC6277].

   o Section 4.2.2.2 has been updated to clarify when a responder is
      considered an Authorized Responder.
</pre><div><br></div></span></div><div style=3D"color: rgb(0, 0, 0); font-fam=
ily: Calibri, sans-serif; font-size: 14px; "><br></div><div style=3D"color: rg=
b(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; ">Section hea=
dings and numbering are as much as possible kept intact from RFC 2560.</div>=
<div style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size=
: 14px; ">The ASN-1 modules are imported form rfc2560bis draft 04.</div><div=
 style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14=
px; "><br></div><div style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-=
serif; font-size: 14px; ">What important updates did I miss to cover in this=
 draft?</div><div style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-ser=
if; font-size: 14px; "><br></div><div style=3D"color: rgb(0, 0, 0); font-famil=
y: Calibri, sans-serif; font-size: 14px; ">If this is considered a good star=
ting point for a restarted draft effort, then I will publish this as draft 0=
5 as soon as the draft submission is re-opened.</div><div style=3D"color: rgb(=
0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; "><br></div><di=
v style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 1=
4px; ">/Stefan</div><div style=3D"color: rgb(0, 0, 0); font-family: Calibri, s=
ans-serif; font-size: 14px; "><br></div><div style=3D"color: rgb(0, 0, 0); fon=
t-family: Calibri, sans-serif; font-size: 14px; "><br></div><div style=3D"colo=
r: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px; "><br></=
div><div style=3D"color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-=
size: 14px; "><br></div><div style=3D"color: rgb(0, 0, 0); font-family: Calibr=
i, sans-serif; font-size: 14px; "><br></div><div style=3D"color: rgb(0, 0, 0);=
 font-family: Calibri, sans-serif; font-size: 14px; "><br></div></body></htm=
l>

--B_3425656039_11582442--



From danbryan80@gmail.com  Fri Jul 20 10:07:01 2012
Return-Path: <danbryan80@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE04821F85E4 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 10:07:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level: 
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bLha2pD5CW75 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 10:06:56 -0700 (PDT)
Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id 4B5BD21F8616 for <pkix@ietf.org>; Fri, 20 Jul 2012 10:06:55 -0700 (PDT)
Received: by lbbgo11 with SMTP id go11so5803190lbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 10:07:51 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=5o4y00N0Hx62OmnWsxf9gcu9XJUGXWNHO46OdA/s5jg=; b=Uqg79BJJ9kcnB82TbwtwpRH7E1aIdni297yU5+YdviAsn4MLDSEpU3KcrOxTHO/Wrp VjJ851qdrotzvKxUC0tEfv67AbI3jK88pQwN+wPSASmKKUgtvywi1CnG/MW/fjhD+BWF /KAhxeO2v3OGGlvNaC+13WCfVVGpwi15J2IqBtP+QdqjMmIJ+JXwgM57wbkZqAmHi5s6 x63HtjjTFxhsZirUy4j/hg6d8iXfjOkPjYkOInd+o90ncMINcag205GF6KZV8XVQCSQx BCHfKX3F/D9SDgSCALKhiTV1oVln+4mLZpiYffkcrGqlJsVK4nVUykXiRqQSnASeDac1 arNA==
MIME-Version: 1.0
Received: by 10.112.54.100 with SMTP id i4mr3345048lbp.97.1342804070765; Fri, 20 Jul 2012 10:07:50 -0700 (PDT)
Received: by 10.114.37.73 with HTTP; Fri, 20 Jul 2012 10:07:50 -0700 (PDT)
In-Reply-To: <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com> <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com> <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com>
Date: Fri, 20 Jul 2012 13:07:50 -0400
Message-ID: <CAJKvcBRY=j8PaMSX1ezFTQcRMxNqa7Qf-GkQK9Lo4QSgfUWyhA@mail.gmail.com>
From: daniel bryan <danbryan80@gmail.com>
To: Phillip Hallam-Baker <hallam@gmail.com>
Content-Type: multipart/mixed; boundary=bcaec55400eea4147404c545ef15
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 17:07:02 -0000

--bcaec55400eea4147404c545ef15
Content-Type: multipart/alternative; boundary=bcaec55400eea4146e04c545ef13

--bcaec55400eea4146e04c545ef13
Content-Type: text/plain; charset=ISO-8859-1

here is a capture of the packets

On Fri, Jul 20, 2012 at 12:37 PM, daniel bryan <danbryan80@gmail.com> wrote:

> So talking with the actividentity engineer it seems that the responder is
> giving an HTTP 200 code to the get Request.
>
> 192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] "GET
> //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D
> HTTP/1.1" 200 5
>
> yet, IIS recieved a malformed OCSP response.  Is there a way to see the
> response that IIS rfecieved and determine why its malformed?
>
>
> On Fri, Jul 20, 2012 at 7:55 AM, Phillip Hallam-Baker <hallam@gmail.com>wrote:
>
>> http://www.ietf.org/rfc/rfc2560.txt
>>
>> A.1.1 Request
>>
>>    HTTP based OCSP requests can use either the GET or the POST method to
>>    submit their requests. To enable HTTP caching, small requests (that
>>    after encoding are less than 255 bytes), MAY be submitted using GET.
>>    If HTTP caching is not important, or the request is greater than 255
>>    bytes, the request SHOULD be submitted using POST.
>>
>>
>> ActivIdentity is not compliant with the spec here. The original choice
>> to support use of GET was deliberate as the requests are cacheable.
>>
>>
>>
>> On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan <danbryan80@gmail.com>
>> wrote:
>> > I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd
>> party
>> > OCSP responder made by actividentity.  According to my CAPI2 log on the
>> IIS
>> > server, its sending a GET request to my OCSP responder, and getting an
>> error
>> > saying malformed ocsp request.  If I use a 3rd party CAPI plugin on the
>> IIS
>> > machine it sends POST request to the OCSP responder and recieves no
>> errors.
>> >
>> > Is there a way I can tell windows to send OCSP request as a POST
>> instead of
>> > a GET?
>> >
>> > _______________________________________________
>> > pkix mailing list
>> > pkix@ietf.org
>> > https://www.ietf.org/mailman/listinfo/pkix
>> >
>>
>>
>>
>> --
>> Website: http://hallambaker.com/
>>
>
>
>
> --
> Dan Bryan
> danbryan80@gmail.com
> 443 333 1147
>
>


-- 
Dan Bryan
danbryan80@gmail.com
443 333 1147

--bcaec55400eea4146e04c545ef13
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">here =
is a capture of the packets<br></font></font></font><br><div class=3D"gmail=
_quote">On Fri, Jul 20, 2012 at 12:37 PM, daniel bryan <span dir=3D"ltr">&l=
t;<a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80@gmai=
l.com</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><font color=3D"#000000"><font><font face=3D"=
comic sans ms,sans-serif">So talking with the actividentity engineer it see=
ms that the responder is giving an HTTP 200 code to the get Request.</font>=
</font></font><div>
<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br>
</font></font></font></div><div><font color=3D"#000000"><font><font face=3D=
"comic sans ms,sans-serif">192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] &qu=
ot;GET //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgF=
FmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D HTTP/1.1&quot; 200 5</font></f=
ont></font></div>

<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">yet, IIS recieved a malformed OCSP response.=
 =A0Is there a way to see the response that IIS rfecieved and determine why=
 its malformed?</font></font></font></div>

<div><div><div class=3D"h5"><font color=3D"#000000"><font><font face=3D"com=
ic sans ms,sans-serif"><br></font></font></font><br><div class=3D"gmail_quo=
te">On Fri, Jul 20, 2012 at 7:55 AM, Phillip Hallam-Baker <span dir=3D"ltr"=
>&lt;<a href=3D"mailto:hallam@gmail.com" target=3D"_blank">hallam@gmail.com=
</a>&gt;</span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><a href=3D"http://www.ietf.org/rfc/rfc2560.t=
xt" target=3D"_blank">http://www.ietf.org/rfc/rfc2560.txt</a><br>
<br>
A.1.1 Request<br>
<br>
=A0 =A0HTTP based OCSP requests can use either the GET or the POST method t=
o<br>
=A0 =A0submit their requests. To enable HTTP caching, small requests (that<=
br>
=A0 =A0after encoding are less than 255 bytes), MAY be submitted using GET.=
<br>
=A0 =A0If HTTP caching is not important, or the request is greater than 255=
<br>
=A0 =A0bytes, the request SHOULD be submitted using POST.<br>
<br>
<br>
ActivIdentity is not compliant with the spec here. The original choice<br>
to support use of GET was deliberate as the requests are cacheable.<br>
<div><div><br>
<br>
<br>
On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan &lt;<a href=3D"mailto:danbrya=
n80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a>&gt; wrote:<br>
&gt; I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd=
 party<br>
&gt; OCSP responder made by actividentity. =A0According to my CAPI2 log on =
the IIS<br>
&gt; server, its sending a GET request to my OCSP responder, and getting an=
 error<br>
&gt; saying malformed ocsp request. =A0If I use a 3rd party CAPI plugin on =
the IIS<br>
&gt; machine it sends POST request to the OCSP responder and recieves no er=
rors.<br>
&gt;<br>
&gt; Is there a way I can tell windows to send OCSP request as a POST inste=
ad of<br>
&gt; a GET?<br>
&gt;<br>
</div></div><div>&gt; _______________________________________________<br>
&gt; pkix mailing list<br>
&gt; <a href=3D"mailto:pkix@ietf.org" target=3D"_blank">pkix@ietf.org</a><b=
r>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blan=
k">https://www.ietf.org/mailman/listinfo/pkix</a><br>
&gt;<br>
<br>
<br>
<br>
--<br>
</div>Website: <a href=3D"http://hallambaker.com/" target=3D"_blank">http:/=
/hallambaker.com/</a><br>
</blockquote></div><br><br clear=3D"all"><div><br></div></div></div><div cl=
ass=3D"im">-- <br><font face=3D"georgia, serif" color=3D"#000099" size=3D"4=
">Dan Bryan</font><div><font color=3D"#000099" face=3D"georgia, serif" size=
=3D"4"><a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80=
@gmail.com</a></font></div>

<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"=
tel:443%20333%201147" value=3D"+14433331147" target=3D"_blank">443 333 1147=
</a></font></div><br>
</div></div>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><font face=
=3D"georgia, serif" color=3D"#000099" size=3D"4">Dan Bryan</font><div><font=
 color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"mailto:dan=
bryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a></font></div>
<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4">443 333 114=
7</font></div><br>

--bcaec55400eea4146e04c545ef13--
--bcaec55400eea4147404c545ef15
Content-Type: application/octet-stream; name="ocsp.pcap"
Content-Disposition: attachment; filename="ocsp.pcap"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_h4viuw1c0
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=
--bcaec55400eea4147404c545ef15--

From eabalea@gmail.com  Fri Jul 20 10:15:17 2012
Return-Path: <eabalea@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D577411E8097 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 10:15:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level: 
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mVGfAApkcmLv for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 10:15:16 -0700 (PDT)
Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) by ietfa.amsl.com (Postfix) with ESMTP id B2BF011E8072 for <pkix@ietf.org>; Fri, 20 Jul 2012 10:15:16 -0700 (PDT)
Received: by obbwc20 with SMTP id wc20so6017503obb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 10:16:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=OMsIptjvFArDthIUh7ludG5EKNLjVraXa3It31bdBn4=; b=BYjy3r3GCG0z3wNngeSZnzKCT1TXRRyEy5fo5lrxPQssK7wDy36zmvMhdMTT3o0d7W VO8/3efTh/O7NbWAIYVraREyNdwUMZTCjnCm18VhFy5AtwOUDO//sfjHua6ViV+cFQub Ij67X9rFv+WFst+aiLh9chSCRrgGd7l358tF6mycWeKc+GFdUxPomuFF7xQ4aMB0fxIW 6LRVdy1go9LqddUeLph0nEp4Zal/JxMrHwFJRmipLOgklTFKdbindwje6uGBlKU5PWbY kW/XEG87YcciVv5Zl/mT1N5NCJW5YGSV7LFarH1x2hJHFIE6UdxWyOBe/EJ9HRV6DAb7 s7qg==
MIME-Version: 1.0
Received: by 10.182.117.71 with SMTP id kc7mr8005462obb.62.1342804572982; Fri, 20 Jul 2012 10:16:12 -0700 (PDT)
Received: by 10.182.55.227 with HTTP; Fri, 20 Jul 2012 10:16:12 -0700 (PDT)
In-Reply-To: <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com> <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com> <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com>
Date: Fri, 20 Jul 2012 19:16:12 +0200
Message-ID: <CA+i=0E4hJzoyPqZva_CJ=+wCF9hwwLJ2KomCAqbFhv1CKrcV_Q@mail.gmail.com>
From: Erwann Abalea <eabalea@gmail.com>
To: daniel bryan <danbryan80@gmail.com>
Content-Type: multipart/alternative; boundary=f46d04446a4d934deb04c5460d4f
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 17:15:18 -0000

--f46d04446a4d934deb04c5460d4f
Content-Type: text/plain; charset=UTF-8

The "malformedRequest" response is the 5 bytes response it received (the 5
at the end is the body size of the response).

There's an extra leading '/' in the request. It may come from an extra
trailing '/' at the OCSP URL. Check your certificates, read the
authorityInfoAccess extension.

RFC2560 states this:

[...]
GET {url}/{url-encoding of base-64 encoding of the DER encoding of
   the OCSPRequest}
[...]

If your OCSP URL contains a trailing '/', the client will add one, and
you'll come up with 2, that's what you get here.

Ignoring the heading '/' gives a valid request, for an issuerKeyHash equal
to a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:ef:58:bd:c9:28:99 and a serial
number equal to 61BBD2FB000000000006 (in hex).

2012/7/20 daniel bryan <danbryan80@gmail.com>

> So talking with the actividentity engineer it seems that the responder is
> giving an HTTP 200 code to the get Request.
>
> 192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] "GET
> //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D
> HTTP/1.1" 200 5
>
> yet, IIS recieved a malformed OCSP response.  Is there a way to see the
> response that IIS rfecieved and determine why its malformed?
>
>
> On Fri, Jul 20, 2012 at 7:55 AM, Phillip Hallam-Baker <hallam@gmail.com>wrote:
>
>> http://www.ietf.org/rfc/rfc2560.txt
>>
>> A.1.1 Request
>>
>>    HTTP based OCSP requests can use either the GET or the POST method to
>>    submit their requests. To enable HTTP caching, small requests (that
>>    after encoding are less than 255 bytes), MAY be submitted using GET.
>>    If HTTP caching is not important, or the request is greater than 255
>>    bytes, the request SHOULD be submitted using POST.
>>
>>
>> ActivIdentity is not compliant with the spec here. The original choice
>> to support use of GET was deliberate as the requests are cacheable.
>>
>>
>>
>> On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan <danbryan80@gmail.com>
>> wrote:
>> > I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd
>> party
>> > OCSP responder made by actividentity.  According to my CAPI2 log on the
>> IIS
>> > server, its sending a GET request to my OCSP responder, and getting an
>> error
>> > saying malformed ocsp request.  If I use a 3rd party CAPI plugin on the
>> IIS
>> > machine it sends POST request to the OCSP responder and recieves no
>> errors.
>> >
>> > Is there a way I can tell windows to send OCSP request as a POST
>> instead of
>> > a GET?
>> >
>> > _______________________________________________
>> > pkix mailing list
>> > pkix@ietf.org
>> > https://www.ietf.org/mailman/listinfo/pkix
>> >
>>
>>
>>
>> --
>> Website: http://hallambaker.com/
>>
>
>
>
> --
> Dan Bryan
> danbryan80@gmail.com
> 443 333 1147
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>
>


-- 
Erwann.

--f46d04446a4d934deb04c5460d4f
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div>The &quot;malformedRequest&quot; response is the 5 bytes response it r=
eceived (the 5 at the end is the body size of the response).</div><div><br>=
</div><div>There&#39;s an extra leading &#39;/&#39; in the request. It may =
come from an extra trailing &#39;/&#39; at the OCSP URL. Check your certifi=
cates, read the authorityInfoAccess extension.</div>
<div><br></div><div>RFC2560 states this:</div><div><br></div><div>[...]</di=
v><div><div>GET {url}/{url-encoding of base-64 encoding of the DER encoding=
 of</div><div>=C2=A0 =C2=A0the OCSPRequest}</div></div>[...]<div><br></div>=
<div>If your OCSP URL contains a trailing &#39;/&#39;, the client will add =
one, and you&#39;ll come up with 2, that&#39;s what you get here.</div>
<div><br></div><div>Ignoring the heading &#39;/&#39; gives a valid request,=
 for an issuerKeyHash equal to=C2=A0a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:=
ea:ef:58:bd:c9:28:99 and a serial number equal to 61BBD2FB000000000006 (in =
hex).</div>
<div><br><div class=3D"gmail_quote">2012/7/20 daniel bryan <span dir=3D"ltr=
">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80@=
gmail.com</a>&gt;</span><br><blockquote class=3D"gmail_quote" style=3D"marg=
in:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">So ta=
lking with the actividentity engineer it seems that the responder is giving=
 an HTTP 200 code to the get Request.</font></font></font><div><font color=
=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br>

</font></font></font></div><div><font color=3D"#000000"><font><font face=3D=
"comic sans ms,sans-serif">192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] &qu=
ot;GET //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgF=
FmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D HTTP/1.1&quot; 200 5</font></f=
ont></font></div>

<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">yet, IIS recieved a malformed OCSP response.=
 =C2=A0Is there a way to see the response that IIS rfecieved and determine =
why its malformed?</font></font></font></div>

<div><div><div class=3D"h5"><font color=3D"#000000"><font><font face=3D"com=
ic sans ms,sans-serif"><br></font></font></font><br><div class=3D"gmail_quo=
te">On Fri, Jul 20, 2012 at 7:55 AM, Phillip Hallam-Baker <span dir=3D"ltr"=
>&lt;<a href=3D"mailto:hallam@gmail.com" target=3D"_blank">hallam@gmail.com=
</a>&gt;</span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><a href=3D"http://www.ietf.org/rfc/rfc2560.t=
xt" target=3D"_blank">http://www.ietf.org/rfc/rfc2560.txt</a><br>
<br>
A.1.1 Request<br>
<br>
=C2=A0 =C2=A0HTTP based OCSP requests can use either the GET or the POST me=
thod to<br>
=C2=A0 =C2=A0submit their requests. To enable HTTP caching, small requests =
(that<br>
=C2=A0 =C2=A0after encoding are less than 255 bytes), MAY be submitted usin=
g GET.<br>
=C2=A0 =C2=A0If HTTP caching is not important, or the request is greater th=
an 255<br>
=C2=A0 =C2=A0bytes, the request SHOULD be submitted using POST.<br>
<br>
<br>
ActivIdentity is not compliant with the spec here. The original choice<br>
to support use of GET was deliberate as the requests are cacheable.<br>
<div><div><br>
<br>
<br>
On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan &lt;<a href=3D"mailto:danbrya=
n80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a>&gt; wrote:<br>
&gt; I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd=
 party<br>
&gt; OCSP responder made by actividentity. =C2=A0According to my CAPI2 log =
on the IIS<br>
&gt; server, its sending a GET request to my OCSP responder, and getting an=
 error<br>
&gt; saying malformed ocsp request. =C2=A0If I use a 3rd party CAPI plugin =
on the IIS<br>
&gt; machine it sends POST request to the OCSP responder and recieves no er=
rors.<br>
&gt;<br>
&gt; Is there a way I can tell windows to send OCSP request as a POST inste=
ad of<br>
&gt; a GET?<br>
&gt;<br>
</div></div><div>&gt; _______________________________________________<br>
&gt; pkix mailing list<br>
&gt; <a href=3D"mailto:pkix@ietf.org" target=3D"_blank">pkix@ietf.org</a><b=
r>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blan=
k">https://www.ietf.org/mailman/listinfo/pkix</a><br>
&gt;<br>
<br>
<br>
<br>
--<br>
</div>Website: <a href=3D"http://hallambaker.com/" target=3D"_blank">http:/=
/hallambaker.com/</a><br>
</blockquote></div><br><br clear=3D"all"><div><br></div></div></div><span c=
lass=3D"HOEnZb"><font color=3D"#888888">-- <br><font face=3D"georgia, serif=
" color=3D"#000099" size=3D"4">Dan Bryan</font><div><font color=3D"#000099"=
 face=3D"georgia, serif" size=3D"4"><a href=3D"mailto:danbryan80@gmail.com"=
 target=3D"_blank">danbryan80@gmail.com</a></font></div>

<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"=
tel:443%20333%201147" value=3D"+14433331147" target=3D"_blank">443 333 1147=
</a></font></div><br>
</font></span></div>
<br>_______________________________________________<br>
pkix mailing list<br>
<a href=3D"mailto:pkix@ietf.org">pkix@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/pkix</a><br>
<br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>Erwann.<=
br>
</div>

--f46d04446a4d934deb04c5460d4f--

From danbryan80@gmail.com  Fri Jul 20 10:30:10 2012
Return-Path: <danbryan80@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C856E21F8587 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 10:30:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.598
X-Spam-Level: 
X-Spam-Status: No, score=-3.598 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lby0k8Coup7p for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 10:30:09 -0700 (PDT)
Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id 9BB3021F8564 for <pkix@ietf.org>; Fri, 20 Jul 2012 10:30:08 -0700 (PDT)
Received: by lbbgo11 with SMTP id go11so5827997lbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 10:31:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=vWWs6tzZ7Ln8WLi8KO5NaPXLv//sDPSRb4NjqGs5nF4=; b=BA1ErXKctyLSbrh+nKgAvkdlyIcNYlXXT9G+ln3myYrP5h6L164HidomJAsitybi6q b5oASUFCCiEXgrfhkEbN72AHgJxmTTvlv7uPsE1bMuka2vSaY4WEL322KDppj+hRE6LV hthvgwz2d6Xf1IE1CxcR18y9vKs+PclGiRtoIA93uI0vEoLxOUHud3+we28m60u5CJ2t +ya3c6n82aa+SUuTYhrhC6QqM8XPlwzEx/u6pXs7UoSv+qknt8SBWx4GZHY1vq443kVA 23SG/Uq1OQmfOq4HtjPG4vhzKDJ4GH2Kg9AEk1xFwlDkUlon16tpF2QT2H0NGNBctpIk D/1w==
MIME-Version: 1.0
Received: by 10.112.54.37 with SMTP id g5mr3351525lbp.104.1342805464165; Fri, 20 Jul 2012 10:31:04 -0700 (PDT)
Received: by 10.114.37.73 with HTTP; Fri, 20 Jul 2012 10:31:03 -0700 (PDT)
In-Reply-To: <CA+i=0E4hJzoyPqZva_CJ=+wCF9hwwLJ2KomCAqbFhv1CKrcV_Q@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com> <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com> <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com> <CA+i=0E4hJzoyPqZva_CJ=+wCF9hwwLJ2KomCAqbFhv1CKrcV_Q@mail.gmail.com>
Date: Fri, 20 Jul 2012 13:31:03 -0400
Message-ID: <CAJKvcBQBky22rC-B44ra2f6=wZ7gYKX5fFZws3e4LJ2SgMsR0g@mail.gmail.com>
From: daniel bryan <danbryan80@gmail.com>
To: Erwann Abalea <eabalea@gmail.com>
Content-Type: multipart/mixed; boundary=bcaec55401c6b1af9a04c546425e
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 17:30:10 -0000

--bcaec55401c6b1af9a04c546425e
Content-Type: multipart/alternative; boundary=bcaec55401c6b1af9304c546425c

--bcaec55401c6b1af9304c546425c
Content-Type: text/plain; charset=ISO-8859-1

Thanks,

I noticed my AIA does not have a / on the CA , but it does on the cert the
CA issued.  See screen shots.  Any thoughts?



On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <eabalea@gmail.com> wrote:

> The "malformedRequest" response is the 5 bytes response it received (the 5
> at the end is the body size of the response).
>
> There's an extra leading '/' in the request. It may come from an extra
> trailing '/' at the OCSP URL. Check your certificates, read the
> authorityInfoAccess extension.
>
> RFC2560 states this:
>
> [...]
> GET {url}/{url-encoding of base-64 encoding of the DER encoding of
>    the OCSPRequest}
> [...]
>
> If your OCSP URL contains a trailing '/', the client will add one, and
> you'll come up with 2, that's what you get here.
>
> Ignoring the heading '/' gives a valid request, for an issuerKeyHash equal
> to a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:ef:58:bd:c9:28:99 and a serial
> number equal to 61BBD2FB000000000006 (in hex).
>
> 2012/7/20 daniel bryan <danbryan80@gmail.com>
>
>> So talking with the actividentity engineer it seems that the responder is
>> giving an HTTP 200 code to the get Request.
>>
>> 192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] "GET
>> //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D
>> HTTP/1.1" 200 5
>>
>> yet, IIS recieved a malformed OCSP response.  Is there a way to see the
>> response that IIS rfecieved and determine why its malformed?
>>
>>
>> On Fri, Jul 20, 2012 at 7:55 AM, Phillip Hallam-Baker <hallam@gmail.com>wrote:
>>
>>> http://www.ietf.org/rfc/rfc2560.txt
>>>
>>> A.1.1 Request
>>>
>>>    HTTP based OCSP requests can use either the GET or the POST method to
>>>    submit their requests. To enable HTTP caching, small requests (that
>>>    after encoding are less than 255 bytes), MAY be submitted using GET.
>>>    If HTTP caching is not important, or the request is greater than 255
>>>    bytes, the request SHOULD be submitted using POST.
>>>
>>>
>>> ActivIdentity is not compliant with the spec here. The original choice
>>> to support use of GET was deliberate as the requests are cacheable.
>>>
>>>
>>>
>>> On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan <danbryan80@gmail.com>
>>> wrote:
>>> > I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd
>>> party
>>> > OCSP responder made by actividentity.  According to my CAPI2 log on
>>> the IIS
>>> > server, its sending a GET request to my OCSP responder, and getting an
>>> error
>>> > saying malformed ocsp request.  If I use a 3rd party CAPI plugin on
>>> the IIS
>>> > machine it sends POST request to the OCSP responder and recieves no
>>> errors.
>>> >
>>> > Is there a way I can tell windows to send OCSP request as a POST
>>> instead of
>>> > a GET?
>>> >
>>> > _______________________________________________
>>> > pkix mailing list
>>> > pkix@ietf.org
>>> > https://www.ietf.org/mailman/listinfo/pkix
>>> >
>>>
>>>
>>>
>>> --
>>> Website: http://hallambaker.com/
>>>
>>
>>
>>
>> --
>> Dan Bryan
>> danbryan80@gmail.com
>> 443 333 1147
>>
>>
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>>
>>
>
>
> --
> Erwann.
>



-- 
Dan Bryan
danbryan80@gmail.com
443 333 1147

--bcaec55401c6b1af9304c546425c
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">Thank=
s,</font></font></font><div><font color=3D"#000000"><font><font face=3D"com=
ic sans ms,sans-serif"><br></font></font></font></div><div><font color=3D"#=
000000"><font><font face=3D"comic sans ms,sans-serif">I noticed my AIA does=
 not have a / on the CA , but it does on the cert the CA issued. =A0See scr=
een shots. =A0Any thoughts?</font></font></font></div>
<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif"><br></font></font></font><br><div class=3D"g=
mail_quote">
On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <span dir=3D"ltr">&lt;<a hre=
f=3D"mailto:eabalea@gmail.com" target=3D"_blank">eabalea@gmail.com</a>&gt;<=
/span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8=
ex;border-left:1px #ccc solid;padding-left:1ex">
<div>The &quot;malformedRequest&quot; response is the 5 bytes response it r=
eceived (the 5 at the end is the body size of the response).</div><div><br>=
</div><div>There&#39;s an extra leading &#39;/&#39; in the request. It may =
come from an extra trailing &#39;/&#39; at the OCSP URL. Check your certifi=
cates, read the authorityInfoAccess extension.</div>

<div><br></div><div>RFC2560 states this:</div><div><br></div><div>[...]</di=
v><div><div>GET {url}/{url-encoding of base-64 encoding of the DER encoding=
 of</div><div>=A0 =A0the OCSPRequest}</div></div>[...]<div><br></div><div>
If your OCSP URL contains a trailing &#39;/&#39;, the client will add one, =
and you&#39;ll come up with 2, that&#39;s what you get here.</div>
<div><br></div><div>Ignoring the heading &#39;/&#39; gives a valid request,=
 for an issuerKeyHash equal to=A0a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:=
ef:58:bd:c9:28:99 and a serial number equal to 61BBD2FB000000000006 (in hex=
).</div>

<div><div><div class=3D"h5"><br><div class=3D"gmail_quote">2012/7/20 daniel=
 bryan <span dir=3D"ltr">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=
=3D"_blank">danbryan80@gmail.com</a>&gt;</span><br><blockquote class=3D"gma=
il_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-lef=
t:1ex">

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">So ta=
lking with the actividentity engineer it seems that the responder is giving=
 an HTTP 200 code to the get Request.</font></font></font><div><font color=
=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br>


</font></font></font></div><div><font color=3D"#000000"><font><font face=3D=
"comic sans ms,sans-serif">192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] &qu=
ot;GET //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgF=
FmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D HTTP/1.1&quot; 200 5</font></f=
ont></font></div>


<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">yet, IIS recieved a malformed OCSP response.=
 =A0Is there a way to see the response that IIS rfecieved and determine why=
 its malformed?</font></font></font></div>


<div><div><div><font color=3D"#000000"><font><font face=3D"comic sans ms,sa=
ns-serif"><br></font></font></font><br><div class=3D"gmail_quote">On Fri, J=
ul 20, 2012 at 7:55 AM, Phillip Hallam-Baker <span dir=3D"ltr">&lt;<a href=
=3D"mailto:hallam@gmail.com" target=3D"_blank">hallam@gmail.com</a>&gt;</sp=
an> wrote:<br>


<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><a href=3D"http://www.ietf.org/rfc/rfc2560.t=
xt" target=3D"_blank">http://www.ietf.org/rfc/rfc2560.txt</a><br>
<br>
A.1.1 Request<br>
<br>
=A0 =A0HTTP based OCSP requests can use either the GET or the POST method t=
o<br>
=A0 =A0submit their requests. To enable HTTP caching, small requests (that<=
br>
=A0 =A0after encoding are less than 255 bytes), MAY be submitted using GET.=
<br>
=A0 =A0If HTTP caching is not important, or the request is greater than 255=
<br>
=A0 =A0bytes, the request SHOULD be submitted using POST.<br>
<br>
<br>
ActivIdentity is not compliant with the spec here. The original choice<br>
to support use of GET was deliberate as the requests are cacheable.<br>
<div><div><br>
<br>
<br>
On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan &lt;<a href=3D"mailto:danbrya=
n80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a>&gt; wrote:<br>
&gt; I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd=
 party<br>
&gt; OCSP responder made by actividentity. =A0According to my CAPI2 log on =
the IIS<br>
&gt; server, its sending a GET request to my OCSP responder, and getting an=
 error<br>
&gt; saying malformed ocsp request. =A0If I use a 3rd party CAPI plugin on =
the IIS<br>
&gt; machine it sends POST request to the OCSP responder and recieves no er=
rors.<br>
&gt;<br>
&gt; Is there a way I can tell windows to send OCSP request as a POST inste=
ad of<br>
&gt; a GET?<br>
&gt;<br>
</div></div><div>&gt; _______________________________________________<br>
&gt; pkix mailing list<br>
&gt; <a href=3D"mailto:pkix@ietf.org" target=3D"_blank">pkix@ietf.org</a><b=
r>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blan=
k">https://www.ietf.org/mailman/listinfo/pkix</a><br>
&gt;<br>
<br>
<br>
<br>
--<br>
</div>Website: <a href=3D"http://hallambaker.com/" target=3D"_blank">http:/=
/hallambaker.com/</a><br>
</blockquote></div><br><br clear=3D"all"><div><br></div></div></div><span><=
font color=3D"#888888">-- <br><font face=3D"georgia, serif" color=3D"#00009=
9" size=3D"4">Dan Bryan</font><div><font color=3D"#000099" face=3D"georgia,=
 serif" size=3D"4"><a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank=
">danbryan80@gmail.com</a></font></div>


<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"=
tel:443%20333%201147" value=3D"+14433331147" target=3D"_blank">443 333 1147=
</a></font></div><br>
</font></span></div>
<br>_______________________________________________<br>
pkix mailing list<br>
<a href=3D"mailto:pkix@ietf.org" target=3D"_blank">pkix@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/pkix</a><br>
<br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br></div></=
div><span class=3D"HOEnZb"><font color=3D"#888888">Erwann.<br>
</font></span></div>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><font face=
=3D"georgia, serif" color=3D"#000099" size=3D"4">Dan Bryan</font><div><font=
 color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"mailto:dan=
bryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a></font></div>
<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4">443 333 114=
7</font></div><br>
</div>

--bcaec55401c6b1af9304c546425c--
--bcaec55401c6b1af9a04c546425e
Content-Type: image/png; name="aia.png"
Content-Disposition: attachment; filename="aia.png"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_h4vjp0w40
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==
--bcaec55401c6b1af9a04c546425e
Content-Type: application/octet-stream; name="dano.cer"
Content-Disposition: attachment; filename="dano.cer"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_h4vjp0wl1
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--bcaec55401c6b1af9a04c546425e--

From danbryan80@gmail.com  Fri Jul 20 10:36:07 2012
Return-Path: <danbryan80@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E58C21F85CE for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 10:36:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.597
X-Spam-Level: 
X-Spam-Status: No, score=-3.597 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, RCVD_IN_DNSWL_LOW=-1, WEIRD_PORT=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LSVgog653z1d for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 10:36:05 -0700 (PDT)
Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id 06B6721F858D for <pkix@ietf.org>; Fri, 20 Jul 2012 10:36:04 -0700 (PDT)
Received: by lbbgo11 with SMTP id go11so5833924lbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 10:36:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=M63+dJT0EdV7A0qDco1Z6W4vv76v0IcfeeSe6ywGv6M=; b=URUtbKfGEBkKWPnaW3o9hqCoHlCVRmAOc4NCEVxjLbr1/3b72OiBk+LUQ1cVsSLi+D npfxGnxystXnD2k+l4ckPKDoG4Iv4bYerSkIhdrtjvvXrgdyBQKHRmUSPUhrNHD4w03a CU4GSeR4PYkToid+qzBleZZJ/Bt1LshfRwjITUHIbcpYSP56EJaCCuGGFHpB83+fPfo2 ZIhG/NISAIDUwK2qUwAhCOtGWKNTDjvozaJHL1x3TKd7UPTr6PMa5M8Gsu/psur21OvW Mosa5GGVN6Pks+Fw5C0T3whTW3ongkqtHymN+ZJ0C+nFjs/3vQ82+iMN7jTnG0exDcCW 5gLw==
MIME-Version: 1.0
Received: by 10.112.54.100 with SMTP id i4mr3377961lbp.97.1342805817828; Fri, 20 Jul 2012 10:36:57 -0700 (PDT)
Received: by 10.114.37.73 with HTTP; Fri, 20 Jul 2012 10:36:57 -0700 (PDT)
In-Reply-To: <CA+i=0E4hJzoyPqZva_CJ=+wCF9hwwLJ2KomCAqbFhv1CKrcV_Q@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com> <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com> <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com> <CA+i=0E4hJzoyPqZva_CJ=+wCF9hwwLJ2KomCAqbFhv1CKrcV_Q@mail.gmail.com>
Date: Fri, 20 Jul 2012 13:36:57 -0400
Message-ID: <CAJKvcBSTFg9qYME5oNVoWrRuHTe2RZOqve825M1OTsuqk29vTg@mail.gmail.com>
From: daniel bryan <danbryan80@gmail.com>
To: Erwann Abalea <eabalea@gmail.com>
Content-Type: multipart/alternative; boundary=bcaec55400eec6260004c546573b
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 17:36:07 -0000

--bcaec55400eec6260004c546573b
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

GET
/MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZnD28j=
%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D
HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: 192.168.0.22:3502



HTTP/1.1 200 OK

Server: Apache-Coyote/1.1

Content-Type: application/ocsp-response

Content-Length: 2417

Date: Fri, 20 Jul 2012 17:34:27 GMT



0..m
.....f0..b..+.....0.....S0..O0..........uLAz]_Fby@
....\U...20120720162919Z0...0k0C0...+..........v]....v......X..(...w>..Qffp=
..?.Q........
.+.......
....20120719220759Z....20120727102759Z0k0C0...+..........v]....v......X..(.=
..w>..Qffp..?.Q........
...t..........20120719220759Z....20120727102759Z0..0C0...+..........v]....v=
......X..(...w>..Qffp..?.Q........
a.............20120719221700Z..
....20120719220759Z....20120727102759Z0k0C0...+..........v]....v......X..(.=
..w>..Qffp..?.Q........
a.............20120719220759Z....20120727102759Z0k0C0...+..........v]....v.=
.....X..(...w>..Qffp..?.Q........
a..h..........20120719220759Z....20120727102759Z0|0C0...+..........v]....v.=
.....X..(...w>..Qffp..?.Q........
a.............20120719210300Z..20120719220759Z....20120727102759Z0|0C0...+.=
.........v]....v......X..(...w>..Qffp..?.Q........
a.j...........20120719210300Z..20120719220759Z....20120727102759Z0q0I0...+.=
.........v]....v......X..(...w>..Qffp..?.Q.........rC.m....A.t..v.{....2012=
0719220759Z....20120727102759Z0
..*.H..
.........M..R'..u.g9.U}....F.5#jc.|.W/.....f....?..'3F~.....P....F[......-n=
.#{r...zG|.+...0.=3D...Qg>~.....Uk.V.<...........h............=3D.....0...0=
...0.........
...u......0
..*.H..
.....0J1.0..
..&...,d....net1.0..
..&...,d....securesub1.0...U....securesub-DC-CA0..
120720161756Z.
140720161756Z0F1.0..
..&...,d....net1.0..
..&...,d....Securesub1.0...U....ocspsigning0..0
..*.H..
.........0........[>.......w..]D2..W.u.K......p.[.y.s..VTz...<*..5.M.^
.d.k....$h.C....s.W;..x....H.9.$*.[..........3|x..(.J....-{13A....{........=
......F0..B0...U.%..0
..+.......0...U.........uLAz]_Fby@
....\U.0...U.#..0...w>..Qffp..?.Q.......0....U.....0..0...........ldap:///C=
N=3Dsecuresub-DC-CA,CN=3DDC,CN=3DCDP,CN=3DPublic%20Key%20Services,CN=3DServ=
ices,CN=3DConfiguration,DC=3Dsecuresub,DC=3Dnet?certificateRevocationList?b=
ase?objectClass=3DcRLDistributionPoint0....+..........0..0....+.....0....ld=
ap:///CN=3Dsecuresub-DC-CA,CN=3DAIA,CN=3DPublic%20Key%20Services,CN=3DServi=
ces,CN=3DConfiguration,DC=3Dsecuresub,DC=3Dnet?cACertificate?base?objectCla=
ss=3DcertificationAuthority0%..+.....0...
http://192.168.0.22:3502/0!..+.....7.......W.e.b.S.e.r.v.e.r0...U..........=
.0
..*.H..
...........QD.=3D..
.^.9_........x........H.@
)#..nn.2,.+.3.q......s.....X.#.!...T.\.....qx..s.....gO...........&l/b...%.=
$[...0.K3.*..C[.....(..W0T.H..B.k...5
....P.\
b.........x..t%.M......({n4M............w.....``..|..`.....!.....Y.....e..0=
.!.t{.."..I.V......`I.h$M.Z

On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <eabalea@gmail.com> wrote:

> The "malformedRequest" response is the 5 bytes response it received (the =
5
> at the end is the body size of the response).
>
> There's an extra leading '/' in the request. It may come from an extra
> trailing '/' at the OCSP URL. Check your certificates, read the
> authorityInfoAccess extension.
>
> RFC2560 states this:
>
> [...]
> GET {url}/{url-encoding of base-64 encoding of the DER encoding of
>    the OCSPRequest}
> [...]
>
> If your OCSP URL contains a trailing '/', the client will add one, and
> you'll come up with 2, that's what you get here.
>
> Ignoring the heading '/' gives a valid request, for an issuerKeyHash equa=
l
> to a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:ef:58:bd:c9:28:99 and a seri=
al
> number equal to 61BBD2FB000000000006 (in hex).
>
> 2012/7/20 daniel bryan <danbryan80@gmail.com>
>
>> So talking with the actividentity engineer it seems that the responder i=
s
>> giving an HTTP 200 code to the get Request.
>>
>> 192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] "GET
>> //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZn=
D28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D
>> HTTP/1.1" 200 5
>>
>> yet, IIS recieved a malformed OCSP response.  Is there a way to see the
>> response that IIS rfecieved and determine why its malformed?
>>
>>
>> On Fri, Jul 20, 2012 at 7:55 AM, Phillip Hallam-Baker <hallam@gmail.com>=
wrote:
>>
>>> http://www.ietf.org/rfc/rfc2560.txt
>>>
>>> A.1.1 Request
>>>
>>>    HTTP based OCSP requests can use either the GET or the POST method t=
o
>>>    submit their requests. To enable HTTP caching, small requests (that
>>>    after encoding are less than 255 bytes), MAY be submitted using GET.
>>>    If HTTP caching is not important, or the request is greater than 255
>>>    bytes, the request SHOULD be submitted using POST.
>>>
>>>
>>> ActivIdentity is not compliant with the spec here. The original choice
>>> to support use of GET was deliberate as the requests are cacheable.
>>>
>>>
>>>
>>> On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan <danbryan80@gmail.com>
>>> wrote:
>>> > I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3r=
d
>>> party
>>> > OCSP responder made by actividentity.  According to my CAPI2 log on
>>> the IIS
>>> > server, its sending a GET request to my OCSP responder, and getting a=
n
>>> error
>>> > saying malformed ocsp request.  If I use a 3rd party CAPI plugin on
>>> the IIS
>>> > machine it sends POST request to the OCSP responder and recieves no
>>> errors.
>>> >
>>> > Is there a way I can tell windows to send OCSP request as a POST
>>> instead of
>>> > a GET?
>>> >
>>> > _______________________________________________
>>> > pkix mailing list
>>> > pkix@ietf.org
>>> > https://www.ietf.org/mailman/listinfo/pkix
>>> >
>>>
>>>
>>>
>>> --
>>> Website: http://hallambaker.com/
>>>
>>
>>
>>
>> --
>> Dan Bryan
>> danbryan80@gmail.com
>> 443 333 1147
>>
>>
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>>
>>
>
>
> --
> Erwann.
>



--=20
Dan Bryan
danbryan80@gmail.com
443 333 1147

--bcaec55400eec6260004c546573b
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><div>=
GET /MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZn=
D28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D HTTP/1.1</div><div><br></div><div>=
Connection: Keep-Alive</div>
<div><br></div><div>Accept: */*</div><div><br></div><div>User-Agent: Micros=
oft-CryptoAPI/6.1</div><div><br></div><div>Host: <a href=3D"http://192.168.=
0.22:3502">192.168.0.22:3502</a></div><div><br></div><div><br></div><div>
<br></div><div>HTTP/1.1 200 OK</div><div><br></div><div>Server: Apache-Coyo=
te/1.1</div><div><br></div><div>Content-Type: application/ocsp-response</di=
v><div><br></div><div>Content-Length: 2417</div><div><br></div><div>Date: F=
ri, 20 Jul 2012 17:34:27 GMT</div>
<div><br></div><div><br></div><div><br></div><div>0..m</div><div>.....f0..b=
..+.....0.....S0..O0..........uLAz]_Fby@....\U...20120720162919Z0...0k0C0..=
.+..........v]....v......X..(...w&gt;..Qffp..?.Q........</div><div>.+......=
.</div>
<div>....20120719220759Z....20120727102759Z0k0C0...+..........v]....v......=
X..(...w&gt;..Qffp..?.Q........</div><div>...t..........20120719220759Z....=
20120727102759Z0..0C0...+..........v]....v......X..(...w&gt;..Qffp..?.Q....=
....</div>
<div>a.............20120719221700Z..</div><div>....20120719220759Z....20120=
727102759Z0k0C0...+..........v]....v......X..(...w&gt;..Qffp..?.Q........</=
div><div>a.............20120719220759Z....20120727102759Z0k0C0...+.........=
.v]....v......X..(...w&gt;..Qffp..?.Q........</div>
<div>a..h..........20120719220759Z....20120727102759Z0|0C0...+..........v].=
...v......X..(...w&gt;..Qffp..?.Q........</div><div>a.............201207192=
10300Z..20120719220759Z....20120727102759Z0|0C0...+..........v]....v......X=
..(...w&gt;..Qffp..?.Q........</div>
<div>a.j...........20120719210300Z..20120719220759Z....20120727102759Z0q0I0=
...+..........v]....v......X..(...w&gt;..Qffp..?.Q.........rC.m....A.t..v.{=
....20120719220759Z....20120727102759Z0</div><div>..*.H..</div><div>.......=
..M..R&#39;..u.g9.U}....F.5#jc.|.W/.....f....?..&#39;3F~.....P....F[......-=
n.#{r...zG|.+...0.=3D...Qg&gt;~.....Uk.V.&lt;...........h............=3D...=
..0...0...0.........</div>
<div>...u......0</div><div>..*.H..</div><div>.....0J1.0..</div><div>..&amp;=
...,d....net1.0..</div><div>..&amp;...,d....securesub1.0...U....securesub-D=
C-CA0..</div><div>120720161756Z.</div><div>140720161756Z0F1.0..</div><div>
..&amp;...,d....net1.0..</div><div>..&amp;...,d....Securesub1.0...U....ocsp=
signing0..0</div><div>..*.H..</div><div>.........0........[&gt;.......w..]D=
2..W.u.K......p.[.y.s..VTz...&lt;*..5.M.^ .d.k....$h.C....s.W;..x....H.9.$*=
.[..........3|x..(.J....-{13A....{..............F0..B0...U.%..0</div>
<div>..+.......0...U.........uLAz]_Fby@....\U.0...U.#..0...w&gt;..Qffp..?.Q=
.......0....U.....0..0...........ldap:///CN=3Dsecuresub-DC-CA,CN=3DDC,CN=3D=
CDP,CN=3DPublic%20Key%20Services,CN=3DServices,CN=3DConfiguration,DC=3Dsecu=
resub,DC=3Dnet?certificateRevocationList?base?objectClass=3DcRLDistribution=
Point0....+..........0..0....+.....0....ldap:///CN=3Dsecuresub-DC-CA,CN=3DA=
IA,CN=3DPublic%20Key%20Services,CN=3DServices,CN=3DConfiguration,DC=3Dsecur=
esub,DC=3Dnet?cACertificate?base?objectClass=3DcertificationAuthority0%..+.=
....0...<a href=3D"http://192.168.0.22:3502/0!..+.....7.......W.e.b.S.e.r.v=
.e.r0...U...........0">http://192.168.0.22:3502/0!..+.....7.......W.e.b.S.e=
.r.v.e.r0...U...........0</a></div>
<div>..*.H..</div><div>...........QD.=3D..</div><div>.^.9_........x........=
H.@)#..nn.2,.+.3.q......s.....X.#.!...T.\.....qx..s.....gO...........&amp;l=
/b...%.$[...0.K3.*..C[.....(..W0T.H..B.k...5</div><div>....P.\</div><div>
b.........x..t%.M......({n4M............w.....``..|..`.....!.....Y.....e..0=
.!.t{..&quot;..I.V......`I.h$M.Z</div></font></font></font><br><div class=
=3D"gmail_quote">On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <span dir=
=3D"ltr">&lt;<a href=3D"mailto:eabalea@gmail.com" target=3D"_blank">eabalea=
@gmail.com</a>&gt;</span> wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><div>The &quot;malformedRequest&quot; respon=
se is the 5 bytes response it received (the 5 at the end is the body size o=
f the response).</div>
<div><br></div><div>There&#39;s an extra leading &#39;/&#39; in the request=
. It may come from an extra trailing &#39;/&#39; at the OCSP URL. Check you=
r certificates, read the authorityInfoAccess extension.</div>
<div><br></div><div>RFC2560 states this:</div><div><br></div><div>[...]</di=
v><div><div>GET {url}/{url-encoding of base-64 encoding of the DER encoding=
 of</div><div>=A0 =A0the OCSPRequest}</div></div>[...]<div><br></div><div>
If your OCSP URL contains a trailing &#39;/&#39;, the client will add one, =
and you&#39;ll come up with 2, that&#39;s what you get here.</div>
<div><br></div><div>Ignoring the heading &#39;/&#39; gives a valid request,=
 for an issuerKeyHash equal to=A0a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:=
ef:58:bd:c9:28:99 and a serial number equal to 61BBD2FB000000000006 (in hex=
).</div>

<div><div><div class=3D"h5"><br><div class=3D"gmail_quote">2012/7/20 daniel=
 bryan <span dir=3D"ltr">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=
=3D"_blank">danbryan80@gmail.com</a>&gt;</span><br><blockquote class=3D"gma=
il_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-lef=
t:1ex">

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">So ta=
lking with the actividentity engineer it seems that the responder is giving=
 an HTTP 200 code to the get Request.</font></font></font><div><font color=
=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br>


</font></font></font></div><div><font color=3D"#000000"><font><font face=3D=
"comic sans ms,sans-serif">192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] &qu=
ot;GET //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgF=
FmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D HTTP/1.1&quot; 200 5</font></f=
ont></font></div>


<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">yet, IIS recieved a malformed OCSP response.=
 =A0Is there a way to see the response that IIS rfecieved and determine why=
 its malformed?</font></font></font></div>


<div><div><div><font color=3D"#000000"><font><font face=3D"comic sans ms,sa=
ns-serif"><br></font></font></font><br><div class=3D"gmail_quote">On Fri, J=
ul 20, 2012 at 7:55 AM, Phillip Hallam-Baker <span dir=3D"ltr">&lt;<a href=
=3D"mailto:hallam@gmail.com" target=3D"_blank">hallam@gmail.com</a>&gt;</sp=
an> wrote:<br>


<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex"><a href=3D"http://www.ietf.org/rfc/rfc2560.t=
xt" target=3D"_blank">http://www.ietf.org/rfc/rfc2560.txt</a><br>
<br>
A.1.1 Request<br>
<br>
=A0 =A0HTTP based OCSP requests can use either the GET or the POST method t=
o<br>
=A0 =A0submit their requests. To enable HTTP caching, small requests (that<=
br>
=A0 =A0after encoding are less than 255 bytes), MAY be submitted using GET.=
<br>
=A0 =A0If HTTP caching is not important, or the request is greater than 255=
<br>
=A0 =A0bytes, the request SHOULD be submitted using POST.<br>
<br>
<br>
ActivIdentity is not compliant with the spec here. The original choice<br>
to support use of GET was deliberate as the requests are cacheable.<br>
<div><div><br>
<br>
<br>
On Thu, Jul 19, 2012 at 8:26 PM, daniel bryan &lt;<a href=3D"mailto:danbrya=
n80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a>&gt; wrote:<br>
&gt; I am using windows 2k8r2 certificate services, win2k8r2 IIS, and a 3rd=
 party<br>
&gt; OCSP responder made by actividentity. =A0According to my CAPI2 log on =
the IIS<br>
&gt; server, its sending a GET request to my OCSP responder, and getting an=
 error<br>
&gt; saying malformed ocsp request. =A0If I use a 3rd party CAPI plugin on =
the IIS<br>
&gt; machine it sends POST request to the OCSP responder and recieves no er=
rors.<br>
&gt;<br>
&gt; Is there a way I can tell windows to send OCSP request as a POST inste=
ad of<br>
&gt; a GET?<br>
&gt;<br>
</div></div><div>&gt; _______________________________________________<br>
&gt; pkix mailing list<br>
&gt; <a href=3D"mailto:pkix@ietf.org" target=3D"_blank">pkix@ietf.org</a><b=
r>
&gt; <a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blan=
k">https://www.ietf.org/mailman/listinfo/pkix</a><br>
&gt;<br>
<br>
<br>
<br>
--<br>
</div>Website: <a href=3D"http://hallambaker.com/" target=3D"_blank">http:/=
/hallambaker.com/</a><br>
</blockquote></div><br><br clear=3D"all"><div><br></div></div></div><span><=
font color=3D"#888888">-- <br><font face=3D"georgia, serif" color=3D"#00009=
9" size=3D"4">Dan Bryan</font><div><font color=3D"#000099" face=3D"georgia,=
 serif" size=3D"4"><a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank=
">danbryan80@gmail.com</a></font></div>


<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"=
tel:443%20333%201147" value=3D"+14433331147" target=3D"_blank">443 333 1147=
</a></font></div><br>
</font></span></div>
<br>_______________________________________________<br>
pkix mailing list<br>
<a href=3D"mailto:pkix@ietf.org" target=3D"_blank">pkix@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/pkix</a><br>
<br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br></div></=
div><span class=3D"HOEnZb"><font color=3D"#888888">Erwann.<br>
</font></span></div>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><font face=
=3D"georgia, serif" color=3D"#000099" size=3D"4">Dan Bryan</font><div><font=
 color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"mailto:dan=
bryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a></font></div>
<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4">443 333 114=
7</font></div><br>

--bcaec55400eec6260004c546573b--

From eabalea@gmail.com  Fri Jul 20 11:13:46 2012
Return-Path: <eabalea@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F2BC11E8093 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 11:13:46 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.597
X-Spam-Level: 
X-Spam-Status: No, score=-3.597 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, RCVD_IN_DNSWL_LOW=-1, WEIRD_PORT=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rFVWroG+FZym for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 11:13:45 -0700 (PDT)
Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) by ietfa.amsl.com (Postfix) with ESMTP id AE49D11E8088 for <pkix@ietf.org>; Fri, 20 Jul 2012 11:13:45 -0700 (PDT)
Received: by obbwc20 with SMTP id wc20so6086762obb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 11:14:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=n6po/GfnWkFNXkVqUMgyJdxPYeQW/dtwVG+dXU0X/jo=; b=QEe7XgWwKkbdpCHNhy2vH4d29QchegU5eNFJvDWagNrf6qnP+tmaCN9+uFkJ2+L3ko Fcwyc+S9ds4C5+vXs+nk8GjZf7qyLj5tSQT2yqDkXC65ApCiHpV399249E6uow2YlvXu kYHaBTX7bnOf45G6LyzRlXVZ4fMig7nIKQSrBDLzVP3gcyBu236/o3u6wIULJiYscSSD +HTT1MZPKgVb+Qke3EmdEhuGo/SVju5wZ9TOj0Pb1URLm81vwhMlklP2AkEyAGMj0pBF pap4+WS+zx+AtRF0lyiY5ujFUVlLsAsyCbb/mKtXiG7Zv0mok+3UWQF9fy4bEPUmhTbP EB4g==
MIME-Version: 1.0
Received: by 10.182.117.71 with SMTP id kc7mr8228256obb.62.1342808082054; Fri, 20 Jul 2012 11:14:42 -0700 (PDT)
Received: by 10.182.55.227 with HTTP; Fri, 20 Jul 2012 11:14:42 -0700 (PDT)
In-Reply-To: <CAJKvcBQBky22rC-B44ra2f6=wZ7gYKX5fFZws3e4LJ2SgMsR0g@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com> <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com> <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com> <CA+i=0E4hJzoyPqZva_CJ=+wCF9hwwLJ2KomCAqbFhv1CKrcV_Q@mail.gmail.com> <CAJKvcBQBky22rC-B44ra2f6=wZ7gYKX5fFZws3e4LJ2SgMsR0g@mail.gmail.com>
Date: Fri, 20 Jul 2012 20:14:42 +0200
Message-ID: <CA+i=0E5UakXNMu9FtTU+U8N=WpwvqV0zhU4c2=scDihUowWjfg@mail.gmail.com>
From: Erwann Abalea <eabalea@gmail.com>
To: daniel bryan <danbryan80@gmail.com>
Content-Type: multipart/alternative; boundary=f46d04446a4dbb7d9a04c546defa
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 18:13:46 -0000

--f46d04446a4dbb7d9a04c546defa
Content-Type: text/plain; charset=UTF-8

The screenshot doesn't show enough information.

The attached certificate has this OCSP URL: http://192.168.0.22:3502/
A trailing '/'. Remove it, get a new certificate, and try it.

2012/7/20 daniel bryan <danbryan80@gmail.com>

> Thanks,
>
> I noticed my AIA does not have a / on the CA , but it does on the cert the
> CA issued.  See screen shots.  Any thoughts?
>
> On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <eabalea@gmail.com> wrote:
>
>> The "malformedRequest" response is the 5 bytes response it received (the
>> 5 at the end is the body size of the response).
>>
>> There's an extra leading '/' in the request. It may come from an extra
>> trailing '/' at the OCSP URL. Check your certificates, read the
>> authorityInfoAccess extension.
>>
>> RFC2560 states this:
>>
>> [...]
>> GET {url}/{url-encoding of base-64 encoding of the DER encoding of
>>    the OCSPRequest}
>> [...]
>>
>> If your OCSP URL contains a trailing '/', the client will add one, and
>> you'll come up with 2, that's what you get here.
>>
>> Ignoring the heading '/' gives a valid request, for an issuerKeyHash
>> equal to a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:ef:58:bd:c9:28:99 and a
>> serial number equal to 61BBD2FB000000000006 (in hex).
>>
>> 2012/7/20 daniel bryan <danbryan80@gmail.com>
>>
>>> So talking with the actividentity engineer it seems that the responder
>>> is giving an HTTP 200 code to the get Request.
>>>
>>> 192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] "GET
>>> //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D
>>> HTTP/1.1" 200 5
>>>
>>> yet, IIS recieved a malformed OCSP response.  Is there a way to see the
>>> response that IIS rfecieved and determine why its malformed?
>>>
>>
-- 
Erwann.

--f46d04446a4dbb7d9a04c546defa
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

The screenshot doesn&#39;t show enough information.<div><br></div><div>The =
attached certificate has this OCSP URL: <a href=3D"http://192.168.0.22:3502=
/">http://192.168.0.22:3502/</a></div><div>A trailing &#39;/&#39;.=C2=A0Rem=
ove it, get a new certificate, and try it.</div>
<div><div><br><div class=3D"gmail_quote">2012/7/20 daniel bryan <span dir=
=3D"ltr">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danb=
ryan80@gmail.com</a>&gt;</span><br><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">Thank=
s,</font></font></font><div><font color=3D"#000000"><font><font face=3D"com=
ic sans ms,sans-serif"><br></font></font></font></div><div><font color=3D"#=
000000"><font><font face=3D"comic sans ms,sans-serif">I noticed my AIA does=
 not have a / on the CA , but it does on the cert the CA issued. =C2=A0See =
screen shots. =C2=A0Any thoughts?</font></font></font></div>
<div class=3D"HOEnZb"><div class=3D"h5"><div><br><div class=3D"gmail_quote"=
>
On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <span dir=3D"ltr">&lt;<a hre=
f=3D"mailto:eabalea@gmail.com" target=3D"_blank">eabalea@gmail.com</a>&gt;<=
/span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8=
ex;border-left:1px #ccc solid;padding-left:1ex">

<div>The &quot;malformedRequest&quot; response is the 5 bytes response it r=
eceived (the 5 at the end is the body size of the response).</div><div><br>=
</div><div>There&#39;s an extra leading &#39;/&#39; in the request. It may =
come from an extra trailing &#39;/&#39; at the OCSP URL. Check your certifi=
cates, read the authorityInfoAccess extension.</div>


<div><br></div><div>RFC2560 states this:</div><div><br></div><div>[...]</di=
v><div><div>GET {url}/{url-encoding of base-64 encoding of the DER encoding=
 of</div><div>=C2=A0 =C2=A0the OCSPRequest}</div></div>[...]<div><br></div>=
<div>

If your OCSP URL contains a trailing &#39;/&#39;, the client will add one, =
and you&#39;ll come up with 2, that&#39;s what you get here.</div>
<div><br></div><div>Ignoring the heading &#39;/&#39; gives a valid request,=
 for an issuerKeyHash equal to=C2=A0a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:=
ea:ef:58:bd:c9:28:99 and a serial number equal to 61BBD2FB000000000006 (in =
hex).</div>


<div><br><div class=3D"gmail_quote">2012/7/20 daniel bryan <span dir=3D"ltr=
">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80@=
gmail.com</a>&gt;</span><br><blockquote class=3D"gmail_quote" style=3D"marg=
in:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">


<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">So ta=
lking with the actividentity engineer it seems that the responder is giving=
 an HTTP 200 code to the get Request.</font></font></font><div><font color=
=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br>



</font></font></font></div><div><font color=3D"#000000"><font><font face=3D=
"comic sans ms,sans-serif">192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] &qu=
ot;GET //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgF=
FmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D HTTP/1.1&quot; 200 5</font></f=
ont></font></div>



<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">yet, IIS recieved a malformed OCSP response.=
 =C2=A0Is there a way to see the response that IIS rfecieved and determine =
why its malformed?</font></font></font></div>
</blockquote></div></div></blockquote></div></div></div></div></blockquote>=
</div><div><br></div>-- <br>Erwann.<br>
</div></div>

--f46d04446a4dbb7d9a04c546defa--

From danbryan80@gmail.com  Fri Jul 20 11:43:56 2012
Return-Path: <danbryan80@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2607C11E8097 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 11:43:56 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.597
X-Spam-Level: 
X-Spam-Status: No, score=-3.597 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, RCVD_IN_DNSWL_LOW=-1, WEIRD_PORT=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B6D6cA6HXR8S for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 11:43:55 -0700 (PDT)
Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id E15F211E807F for <pkix@ietf.org>; Fri, 20 Jul 2012 11:43:54 -0700 (PDT)
Received: by lbbgo11 with SMTP id go11so5911852lbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 11:44:50 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=3xPo8zI00QuWoMXN2LtJ07c7hjgRZ4hzcUdQYdCH+C4=; b=JSwGyp9xoOg2xaGPgKnNg4f803U5swjfG/NWLrEmj4qgLzMJYAdU9Yqf3+t7EPI1rl AM2iypJFOPDDuw1gjU+n4NET6lt16jBXEa0vMMNToyA0PUXrt8y8PhtzDKLTf6FtnPwH R19KWGkztIi4ZIWjunCLXcySAAwiH5q36Q9tXWQj4KS9xCK8RL8/V1KGvKQ4+neLNfw8 gcyT0FDGWCIJ17eSCCSyWO3jMs8baiG7VDAaPvEZrBi3luL9l6I+P55WQme2rNdIO1YU VvbL7piBJVVDwikhG35pne8hkNY6b73CFvZgwK7cpjCA7hQ6FTwwMGqxzVV49fdY0WwE 3yFw==
MIME-Version: 1.0
Received: by 10.112.54.100 with SMTP id i4mr3452263lbp.97.1342809890380; Fri, 20 Jul 2012 11:44:50 -0700 (PDT)
Received: by 10.114.37.73 with HTTP; Fri, 20 Jul 2012 11:44:50 -0700 (PDT)
In-Reply-To: <CA+i=0E5UakXNMu9FtTU+U8N=WpwvqV0zhU4c2=scDihUowWjfg@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com> <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com> <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com> <CA+i=0E4hJzoyPqZva_CJ=+wCF9hwwLJ2KomCAqbFhv1CKrcV_Q@mail.gmail.com> <CAJKvcBQBky22rC-B44ra2f6=wZ7gYKX5fFZws3e4LJ2SgMsR0g@mail.gmail.com> <CA+i=0E5UakXNMu9FtTU+U8N=WpwvqV0zhU4c2=scDihUowWjfg@mail.gmail.com>
Date: Fri, 20 Jul 2012 14:44:50 -0400
Message-ID: <CAJKvcBS=VZtJ32RmTtp8iM8cABUhJtnvm1bLoVpHa4QmqFz5Jg@mail.gmail.com>
From: daniel bryan <danbryan80@gmail.com>
To: Erwann Abalea <eabalea@gmail.com>
Content-Type: multipart/alternative; boundary=bcaec55400ee845c2904c5474a50
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 18:43:56 -0000

--bcaec55400ee845c2904c5474a50
Content-Type: text/plain; charset=ISO-8859-1

Thanks for all the responses.  So the certificate does in deed have "
http://192.168.0.22:3502/ " , but the screen shot of the CA shows the AIA
to be " http://192.168.0.22:3502"

I am unsure on how to remove the / from the issued certificate.



On Fri, Jul 20, 2012 at 2:14 PM, Erwann Abalea <eabalea@gmail.com> wrote:

> The screenshot doesn't show enough information.
>
> The attached certificate has this OCSP URL: http://192.168.0.22:3502/
> A trailing '/'. Remove it, get a new certificate, and try it.
>
> 2012/7/20 daniel bryan <danbryan80@gmail.com>
>
>> Thanks,
>>
>> I noticed my AIA does not have a / on the CA , but it does on the cert
>> the CA issued.  See screen shots.  Any thoughts?
>>
>> On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <eabalea@gmail.com> wrote:
>>
>>> The "malformedRequest" response is the 5 bytes response it received (the
>>> 5 at the end is the body size of the response).
>>>
>>> There's an extra leading '/' in the request. It may come from an extra
>>> trailing '/' at the OCSP URL. Check your certificates, read the
>>> authorityInfoAccess extension.
>>>
>>> RFC2560 states this:
>>>
>>> [...]
>>> GET {url}/{url-encoding of base-64 encoding of the DER encoding of
>>>    the OCSPRequest}
>>> [...]
>>>
>>> If your OCSP URL contains a trailing '/', the client will add one, and
>>> you'll come up with 2, that's what you get here.
>>>
>>> Ignoring the heading '/' gives a valid request, for an issuerKeyHash
>>> equal to a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:ef:58:bd:c9:28:99 and a
>>> serial number equal to 61BBD2FB000000000006 (in hex).
>>>
>>> 2012/7/20 daniel bryan <danbryan80@gmail.com>
>>>
>>>> So talking with the actividentity engineer it seems that the responder
>>>> is giving an HTTP 200 code to the get Request.
>>>>
>>>> 192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] "GET
>>>> //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D
>>>> HTTP/1.1" 200 5
>>>>
>>>> yet, IIS recieved a malformed OCSP response.  Is there a way to see the
>>>> response that IIS rfecieved and determine why its malformed?
>>>>
>>>
> --
> Erwann.
>



-- 
Dan Bryan
danbryan80@gmail.com
443 333 1147

--bcaec55400ee845c2904c5474a50
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">Thank=
s for all the responses. =A0So the certificate does in deed have &quot;</fo=
nt></font></font>
<a href=3D"http://192.168.0.22:3502/" target=3D"_blank">http://192.168.0.22=
:3502/</a>=A0&quot; , but the screen shot of the CA shows the AIA to be &qu=
ot;
<a href=3D"http://192.168.0.22:3502/" target=3D"_blank">http://192.168.0.22=
:3502</a>&quot;<div><font color=3D"#000000"><font><br></font></font></div><=
div><font color=3D"#000000"><font>I am unsure on how to remove the / from t=
he issued certificate.</font></font></div>
<div><font color=3D"#000000"><font><br></font></font></div><div><font color=
=3D"#000000"><font><br></font></font><br><div class=3D"gmail_quote">On Fri,=
 Jul 20, 2012 at 2:14 PM, Erwann Abalea <span dir=3D"ltr">&lt;<a href=3D"ma=
ilto:eabalea@gmail.com" target=3D"_blank">eabalea@gmail.com</a>&gt;</span> =
wrote:<br>
<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">The screenshot doesn&#39;t show enough infor=
mation.<div><br></div><div>The attached certificate has this OCSP URL: <a h=
ref=3D"http://192.168.0.22:3502/" target=3D"_blank">http://192.168.0.22:350=
2/</a></div>
<div>A trailing &#39;/&#39;.=A0Remove it, get a new certificate, and try it=
.</div>
<div><div><div class=3D"im"><br><div class=3D"gmail_quote">2012/7/20 daniel=
 bryan <span dir=3D"ltr">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=
=3D"_blank">danbryan80@gmail.com</a>&gt;</span><br><blockquote class=3D"gma=
il_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-lef=
t:1ex">

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">Thank=
s,</font></font></font><div><font color=3D"#000000"><font><font face=3D"com=
ic sans ms,sans-serif"><br></font></font></font></div><div><font color=3D"#=
000000"><font><font face=3D"comic sans ms,sans-serif">I noticed my AIA does=
 not have a / on the CA , but it does on the cert the CA issued. =A0See scr=
een shots. =A0Any thoughts?</font></font></font></div>

<div><div><div><br><div class=3D"gmail_quote">
On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <span dir=3D"ltr">&lt;<a hre=
f=3D"mailto:eabalea@gmail.com" target=3D"_blank">eabalea@gmail.com</a>&gt;<=
/span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8=
ex;border-left:1px #ccc solid;padding-left:1ex">


<div>The &quot;malformedRequest&quot; response is the 5 bytes response it r=
eceived (the 5 at the end is the body size of the response).</div><div><br>=
</div><div>There&#39;s an extra leading &#39;/&#39; in the request. It may =
come from an extra trailing &#39;/&#39; at the OCSP URL. Check your certifi=
cates, read the authorityInfoAccess extension.</div>



<div><br></div><div>RFC2560 states this:</div><div><br></div><div>[...]</di=
v><div><div>GET {url}/{url-encoding of base-64 encoding of the DER encoding=
 of</div><div>=A0 =A0the OCSPRequest}</div></div>[...]<div><br></div><div>


If your OCSP URL contains a trailing &#39;/&#39;, the client will add one, =
and you&#39;ll come up with 2, that&#39;s what you get here.</div>
<div><br></div><div>Ignoring the heading &#39;/&#39; gives a valid request,=
 for an issuerKeyHash equal to=A0a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:=
ef:58:bd:c9:28:99 and a serial number equal to 61BBD2FB000000000006 (in hex=
).</div>



<div><br><div class=3D"gmail_quote">2012/7/20 daniel bryan <span dir=3D"ltr=
">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80@=
gmail.com</a>&gt;</span><br><blockquote class=3D"gmail_quote" style=3D"marg=
in:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">



<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">So ta=
lking with the actividentity engineer it seems that the responder is giving=
 an HTTP 200 code to the get Request.</font></font></font><div><font color=
=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br>




</font></font></font></div><div><font color=3D"#000000"><font><font face=3D=
"comic sans ms,sans-serif">192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] &qu=
ot;GET //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgF=
FmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D HTTP/1.1&quot; 200 5</font></f=
ont></font></div>




<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">yet, IIS recieved a malformed OCSP response.=
 =A0Is there a way to see the response that IIS rfecieved and determine why=
 its malformed?</font></font></font></div>

</blockquote></div></div></blockquote></div></div></div></div></blockquote>=
</div><div><br></div></div><span class=3D"HOEnZb"><font color=3D"#888888">-=
- <br>Erwann.<br>
</font></span></div></div>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><font face=
=3D"georgia, serif" color=3D"#000099" size=3D"4">Dan Bryan</font><div><font=
 color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"mailto:dan=
bryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a></font></div>
<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4">443 333 114=
7</font></div><br>
</div>

--bcaec55400ee845c2904c5474a50--

From danbryan80@gmail.com  Fri Jul 20 12:59:54 2012
Return-Path: <danbryan80@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3705511E807F for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 12:59:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level: 
X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XYZHvk0uuwjP for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 12:59:53 -0700 (PDT)
Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id 0813811E8072 for <pkix@ietf.org>; Fri, 20 Jul 2012 12:59:47 -0700 (PDT)
Received: by lbbgo11 with SMTP id go11so5998264lbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 13:00:44 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=GAmKUDf/DoUZqWBZzJskN+P1u3Pdl/2D0VRoLwKAKJU=; b=cHXgQfOa7h37gnhRSfSxijYSZWI+hRUiQ68+hUL0Elgo/gQBOpEOndaObE7KGprQrZ WtrvdrXD+21ZG+mnC52zSKQR7XoivzgzZb+Q31qElbOWeDDOuofanAZlKA4HjkKveOMq vFrjA+aA52vFqxil/tKu2eUGF+OG26Ql6hrrfVTaQjNSVz56mKpaZrYTdBpCkq+oA2ox uZfTfSN/rHfzmUhYVJA7ZhA9O1yJjrfUTAcUb2r7Rl43R66mjSfopGK6y0J4yjPBd/aF 5kST3d6aCgIUV5BljQsR4BwxQPgpTblAMLZACBjczRKboWiw+Ow/NH1gLh95ygG5aj7D lttA==
MIME-Version: 1.0
Received: by 10.152.146.163 with SMTP id td3mr7690855lab.26.1342814443665; Fri, 20 Jul 2012 13:00:43 -0700 (PDT)
Received: by 10.114.37.73 with HTTP; Fri, 20 Jul 2012 13:00:43 -0700 (PDT)
In-Reply-To: <CAJKvcBS=VZtJ32RmTtp8iM8cABUhJtnvm1bLoVpHa4QmqFz5Jg@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com> <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com> <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com> <CA+i=0E4hJzoyPqZva_CJ=+wCF9hwwLJ2KomCAqbFhv1CKrcV_Q@mail.gmail.com> <CAJKvcBQBky22rC-B44ra2f6=wZ7gYKX5fFZws3e4LJ2SgMsR0g@mail.gmail.com> <CA+i=0E5UakXNMu9FtTU+U8N=WpwvqV0zhU4c2=scDihUowWjfg@mail.gmail.com> <CAJKvcBS=VZtJ32RmTtp8iM8cABUhJtnvm1bLoVpHa4QmqFz5Jg@mail.gmail.com>
Date: Fri, 20 Jul 2012 16:00:43 -0400
Message-ID: <CAJKvcBTsBj+Opj257npOpWo7o75rHaM6bUU_jK1wOVuSb6Loow@mail.gmail.com>
From: daniel bryan <danbryan80@gmail.com>
To: Erwann Abalea <eabalea@gmail.com>
Content-Type: multipart/mixed; boundary=e89a8f234567e9f89804c54859bc
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 19:59:54 -0000

--e89a8f234567e9f89804c54859bc
Content-Type: multipart/alternative; boundary=e89a8f234567e9f89504c54859ba

--e89a8f234567e9f89504c54859ba
Content-Type: text/plain; charset=ISO-8859-1

So I managed to get rid of the OCSP_MALFORMED_REQUEST_RESPONSE error in the
logs by reissuing all certs with the only entry in AIA being "
http://192.168.0.22" I deleted the ldap:///CN= entry that was included in
the AIA extension.

I think I have almost got rid of all the errors by doing that. currently
there is only one error...


Current status:

using native windows I am able to use a revoked certificate to access a
website due to the fact that it says the revocation server is offline" and
it seems to "fail open" allowing me access when I shouldnt be allowed.

Yet, using the actividentity plugin, it is able to intercept
and communicate with the OCSP server and identifies the certificate as
revoked and denys the users from accessing the website.

Would someone kindly look at my 2 attached event logs and help me determine
why windows believes the revocation server is offline? Basically a revoked
user called dano, is attempting to authenticate to
mail.securesub.net(which is a SLL cert required website/). I expect
him to be denied in both
conditions.



On Fri, Jul 20, 2012 at 2:44 PM, daniel bryan <danbryan80@gmail.com> wrote:

> Thanks for all the responses.  So the certificate does in deed have "
> http://192.168.0.22:3502/ " , but the screen shot of the CA shows the AIA
> to be " http://192.168.0.22:3502"
>
> I am unsure on how to remove the / from the issued certificate.
>
>
>
> On Fri, Jul 20, 2012 at 2:14 PM, Erwann Abalea <eabalea@gmail.com> wrote:
>
>> The screenshot doesn't show enough information.
>>
>> The attached certificate has this OCSP URL: http://192.168.0.22:3502/
>> A trailing '/'. Remove it, get a new certificate, and try it.
>>
>> 2012/7/20 daniel bryan <danbryan80@gmail.com>
>>
>>> Thanks,
>>>
>>> I noticed my AIA does not have a / on the CA , but it does on the cert
>>> the CA issued.  See screen shots.  Any thoughts?
>>>
>>> On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <eabalea@gmail.com>wrote:
>>>
>>>> The "malformedRequest" response is the 5 bytes response it received
>>>> (the 5 at the end is the body size of the response).
>>>>
>>>> There's an extra leading '/' in the request. It may come from an extra
>>>> trailing '/' at the OCSP URL. Check your certificates, read the
>>>> authorityInfoAccess extension.
>>>>
>>>> RFC2560 states this:
>>>>
>>>> [...]
>>>> GET {url}/{url-encoding of base-64 encoding of the DER encoding of
>>>>    the OCSPRequest}
>>>> [...]
>>>>
>>>> If your OCSP URL contains a trailing '/', the client will add one, and
>>>> you'll come up with 2, that's what you get here.
>>>>
>>>> Ignoring the heading '/' gives a valid request, for an issuerKeyHash
>>>> equal to a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:ef:58:bd:c9:28:99 and a
>>>> serial number equal to 61BBD2FB000000000006 (in hex).
>>>>
>>>> 2012/7/20 daniel bryan <danbryan80@gmail.com>
>>>>
>>>>> So talking with the actividentity engineer it seems that the responder
>>>>> is giving an HTTP 200 code to the get Request.
>>>>>
>>>>> 192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] "GET
>>>>> //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D
>>>>> HTTP/1.1" 200 5
>>>>>
>>>>> yet, IIS recieved a malformed OCSP response.  Is there a way to see
>>>>> the response that IIS rfecieved and determine why its malformed?
>>>>>
>>>>
>> --
>> Erwann.
>>
>
>
>
> --
> Dan Bryan
> danbryan80@gmail.com
> 443 333 1147
>
>


-- 
Dan Bryan
danbryan80@gmail.com
443 333 1147

--e89a8f234567e9f89504c54859ba
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">So I =
managed to get rid of the OCSP_MALFORMED_REQUEST_RESPONSE error in the logs=
 by reissuing all certs with the only entry in AIA being &quot;<a href=3D"h=
ttp://192.168.0.22">http://192.168.0.22</a>&quot; I deleted the ldap:///CN=
=3D entry that was included in the AIA extension.</font></font></font><div>
<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br><=
/font></font></font></div><div><font color=3D"#000000"><font><font face=3D"=
comic sans ms,sans-serif">I think I have almost got rid of all the errors b=
y doing that. currently there is only one error...</font></font></font></di=
v>
<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif"><br></font></font></font></div><div><font co=
lor=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">Current statu=
s:</font></font></font></div>
<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">using native windows I am able to use a revo=
ked certificate to access a website due to the fact that it says the revoca=
tion server is offline&quot; and it seems to &quot;fail open&quot; allowing=
 me access when I shouldnt be allowed.</font></font></font></div>
<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">Yet, using the actividentity plugin, it is a=
ble to intercept and=A0communicate=A0with the OCSP server and identifies th=
e certificate as revoked and denys the users from accessing the website.</f=
ont></font></font></div>
<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">Would someone kindly look at my 2 attached e=
vent logs and help me determine why windows believes the revocation server =
is offline?=A0Basically=A0a revoked user called dano, is attempting to auth=
enticate to <a href=3D"http://mail.securesub.net">mail.securesub.net</a> (w=
hich is a SLL cert required website/). I expect him to be denied in both co=
nditions.</font></font></font></div>
<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif"><br></font></font></font><br><div class=3D"g=
mail_quote">
On Fri, Jul 20, 2012 at 2:44 PM, daniel bryan <span dir=3D"ltr">&lt;<a href=
=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a>=
&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0=
 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">Thank=
s for all the responses. =A0So the certificate does in deed have &quot;</fo=
nt></font></font>
<a href=3D"http://192.168.0.22:3502/" target=3D"_blank">http://192.168.0.22=
:3502/</a>=A0&quot; , but the screen shot of the CA shows the AIA to be &qu=
ot;
<a href=3D"http://192.168.0.22:3502/" target=3D"_blank">http://192.168.0.22=
:3502</a>&quot;<div><font color=3D"#000000"><font><br></font></font></div><=
div><font color=3D"#000000"><font>I am unsure on how to remove the / from t=
he issued certificate.</font></font></div>

<div><font color=3D"#000000"><font><br></font></font></div><div><div><div c=
lass=3D"h5"><font color=3D"#000000"><font><br></font></font><br><div class=
=3D"gmail_quote">On Fri, Jul 20, 2012 at 2:14 PM, Erwann Abalea <span dir=
=3D"ltr">&lt;<a href=3D"mailto:eabalea@gmail.com" target=3D"_blank">eabalea=
@gmail.com</a>&gt;</span> wrote:<br>

<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">The screenshot doesn&#39;t show enough infor=
mation.<div><br></div><div>The attached certificate has this OCSP URL: <a h=
ref=3D"http://192.168.0.22:3502/" target=3D"_blank">http://192.168.0.22:350=
2/</a></div>

<div>A trailing &#39;/&#39;.=A0Remove it, get a new certificate, and try it=
.</div>
<div><div><div><br><div class=3D"gmail_quote">2012/7/20 daniel bryan <span =
dir=3D"ltr">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">d=
anbryan80@gmail.com</a>&gt;</span><br><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">


<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">Thank=
s,</font></font></font><div><font color=3D"#000000"><font><font face=3D"com=
ic sans ms,sans-serif"><br></font></font></font></div><div><font color=3D"#=
000000"><font><font face=3D"comic sans ms,sans-serif">I noticed my AIA does=
 not have a / on the CA , but it does on the cert the CA issued. =A0See scr=
een shots. =A0Any thoughts?</font></font></font></div>


<div><div><div><br><div class=3D"gmail_quote">
On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <span dir=3D"ltr">&lt;<a hre=
f=3D"mailto:eabalea@gmail.com" target=3D"_blank">eabalea@gmail.com</a>&gt;<=
/span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8=
ex;border-left:1px #ccc solid;padding-left:1ex">



<div>The &quot;malformedRequest&quot; response is the 5 bytes response it r=
eceived (the 5 at the end is the body size of the response).</div><div><br>=
</div><div>There&#39;s an extra leading &#39;/&#39; in the request. It may =
come from an extra trailing &#39;/&#39; at the OCSP URL. Check your certifi=
cates, read the authorityInfoAccess extension.</div>




<div><br></div><div>RFC2560 states this:</div><div><br></div><div>[...]</di=
v><div><div>GET {url}/{url-encoding of base-64 encoding of the DER encoding=
 of</div><div>=A0 =A0the OCSPRequest}</div></div>[...]<div><br></div><div>



If your OCSP URL contains a trailing &#39;/&#39;, the client will add one, =
and you&#39;ll come up with 2, that&#39;s what you get here.</div>
<div><br></div><div>Ignoring the heading &#39;/&#39; gives a valid request,=
 for an issuerKeyHash equal to=A0a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:=
ef:58:bd:c9:28:99 and a serial number equal to 61BBD2FB000000000006 (in hex=
).</div>




<div><br><div class=3D"gmail_quote">2012/7/20 daniel bryan <span dir=3D"ltr=
">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80@=
gmail.com</a>&gt;</span><br><blockquote class=3D"gmail_quote" style=3D"marg=
in:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">




<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">So ta=
lking with the actividentity engineer it seems that the responder is giving=
 an HTTP 200 code to the get Request.</font></font></font><div><font color=
=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br>





</font></font></font></div><div><font color=3D"#000000"><font><font face=3D=
"comic sans ms,sans-serif">192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] &qu=
ot;GET //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgF=
FmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D HTTP/1.1&quot; 200 5</font></f=
ont></font></div>





<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">yet, IIS recieved a malformed OCSP response.=
 =A0Is there a way to see the response that IIS rfecieved and determine why=
 its malformed?</font></font></font></div>


</blockquote></div></div></blockquote></div></div></div></div></blockquote>=
</div><div><br></div></div><span><font color=3D"#888888">-- <br>Erwann.<br>
</font></span></div></div>
</blockquote></div><br><br clear=3D"all"><div><br></div></div></div><div cl=
ass=3D"im">-- <br><font face=3D"georgia, serif" color=3D"#000099" size=3D"4=
">Dan Bryan</font><div><font color=3D"#000099" face=3D"georgia, serif" size=
=3D"4"><a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80=
@gmail.com</a></font></div>

<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"=
tel:443%20333%201147" value=3D"+14433331147" target=3D"_blank">443 333 1147=
</a></font></div><br>
</div></div>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><font face=
=3D"georgia, serif" color=3D"#000099" size=3D"4">Dan Bryan</font><div><font=
 color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"mailto:dan=
bryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a></font></div>
<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4">443 333 114=
7</font></div><br>
</div>

--e89a8f234567e9f89504c54859ba--
--e89a8f234567e9f89804c54859bc
Content-Type: application/octet-stream; 
	name="revoked_via_actividentity.evtx"
Content-Disposition: attachment; filename="revoked_via_actividentity.evtx"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_h4voxl7l0

RWxmRmlsZQAAAAAAAAAAAAAAAAAAAAAAFgAAAAAAAACAAAAAAQADAAAQAQAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAADDBBYcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEVsZkNobmsA
AQAAAAAAAAAVAAAAAAAAAAEAAAAAAAAAFQAAAAAAAACAAAAAQHYAACiAAABXkHZ+AAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA
AADJ8qQiAAAAAFEXAAAAAAAAlwYAAMo6AABuNQAAPSAAABc5AADddwAAhi4AAO46AACZOgAAFisA
ACA6AAC4KwAAnjQAABwJAADONwAAcjoAAPtyAABbGwAASmYAAAAAAABxHQAASAQAADweAABwdAAA
3CAAAOlzAADZEwAAvHMAALUvAAC6IgAABB4AAP8uAACeNwAAmhgAAO85AABmEQAAAAAAAFYwAAAV
BAAAbhcAAAJ5AADgdAAALDUAALI7AAD4AgAA9zsAAGkoAAAzLgAAQHMAANcuAABzOwAAlCgAABQP
AABaLwAAPi0AADw8AACpHAAAFSMAAMItAACtdAAAcysAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKioAAOgHAAAB
AAAAAAAAAI6XI0WwZs0BDwEBAAwBZo+vqyYCAAAAAAAAZo+vq35Uc11NFFtjek8cq4MFAAAPAQEA
Qf//dwUAAE0CAAAAAAAAugwFAEUAdgBlAG4AdAAAAIcAAAAGagIAAAAAAAC8DwUAeABtAGwAbgBz
AAAABQE1AGgAdAB0AHAAOgAvAC8AcwBjAGgAZQBtAGEAcwAuAG0AaQBjAHIAbwBzAG8AZgB0AC4A
YwBvAG0ALwB3AGkAbgAvADIAMAAwADQALwAwADgALwBlAHYAZQBuAHQAcwAvAGUAdgBlAG4AdAAC
Af//oAQAAPgCAAAAAAAAb1QGAFMAeQBzAHQAZQBtAAAAAkH//9MAAAAaAwAAAAAAAPF7CABQAHIA
bwB2AGkAZABlAHIAAACwAAAARj0DAAAAAAAAS5UEAE4AYQBtAGUAAAAFARcATQBpAGMAcgBvAHMA
bwBmAHQALQBXAGkAbgBkAG8AdwBzAC0AQwBBAFAASQAyAAaGAwAAAAAAACkVBABHAHUAaQBkAAAA
BQEmAHsANQBiAGIAYwBhADQAYQA4AC0AYgAyADAAOQAtADQAOABkAGMALQBhADgAYwA3AC0AYgAy
ADMAZAAzAGUANQAyADEANgBmAGIAfQADQQMATQAAAPQDAAAAAAAA9WEHAEUAdgBlAG4AdABJAEQA
AAAnAAAABhUEAACGAwAAKdoKAFEAdQBhAGwAaQBmAGkAZQByAHMAAAAOBAAGAg4DAAYEAQsAIgAA
AEgEAAAAAAAAGAkHAFYAZQByAHMAaQBvAG4AAAACDgsABAQBAAAeAAAAcQQAAAAAAABkzgUATABl
AHYAZQBsAAAAAg4AAAQEAQIAHAAAAJYEAAAAAAAARXsEAFQAYQBzAGsAAAACDgIABgQBAQAgAAAA
uQQAAAAAAACuHgYATwBwAGMAbwBkAGUAAAACDgEABAQBBQAkAAAA4AQAAAAAAABqzwgASwBlAHkA
dwBvAHIAZABzAAAAAg4FABUEQf//UAAAAAsFAAAAAAAAO44LAFQAaQBtAGUAQwByAGUAYQB0AGUA
ZAAAACcAAAAGNAUAAGoCAAA8ewoAUwB5AHMAdABlAG0AVABpAG0AZQAAAA4GABEDAQoALgAAAGIF
AAAAAAAARgMNAEUAdgBlAG4AdABSAGUAYwBvAHIAZABJAEQAAAACDgoACgRB//+FAAAAlwUAAAAA
AACi8gsAQwBvAHIAcgBlAGwAYQB0AGkAbwBuAAAAXAAAAEbABQAAAAAAAArxCgBBAGMAdABpAHYA
aQB0AHkASQBEAAAADgcADwbnBQAA9AMAADXFEQBSAGUAbABhAHQAZQBkAEEAYwB0AGkAdgBpAHQA
eQBJAEQAAAAOEgAPA0H//20AAAAjBgAAAAAAALi1CQBFAHgAZQBjAHUAdABpAG8AbgAAAEgAAABG
SAYAAMAFAAAK1wkAUAByAG8AYwBlAHMAcwBJAEQAAAAOCAAIBm0GAACWBAAAhTkIAFQAaAByAGUA
YQBkAEkARAAAAA4JAAgDAf//aAAAAJcGAAAAAAAAg2EHAEMAaABhAG4AbgBlAGwAAAACBQEjAE0A
aQBjAHIAbwBzAG8AZgB0AC0AVwBpAG4AZABvAHcAcwAtAEMAQQBQAEkAMgAvAE8AcABlAHIAYQB0
AGkAbwBuAGEAbAAEAf//SAAAAAYHAAALBQAAO24IAEMAbwBtAHAAdQB0AGUAcgAAAAIFARIAbQBh
AGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQABEH//0IAAABVBwAAAAAAAKAuCABTAGUA
YwB1AHIAaQB0AHkAAAAfAAAABngHAAAAAAAAZkwGAFUAcwBlAHIASQBEAAAADgwAEwMEARMAJAAA
AJ8HAADnBQAANUQIAFUAcwBlAHIARABhAHQAYQAAAAIOEwAhBAQAFAAAAAEABAABAAQAAgAGAAIA
BgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAB7ASEABAFQAFAAQAAAAAAAAECOlyNFsGbNAQwAzAA4jUIA+A2YIdpoEQX4DQAAUB8AAPE+
CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABdQEAAHEIAAAAAAAA3zsTAFcAaQBu
AFYAZQByAGkAZgB5AFQAcgB1AHMAdABTAHQAYQByAHQAAAACQWwAAACrCAAAIwYAADjrDABFAHYA
ZQBuAHQAQQB1AHgASQBuAGYAbwAAAEEAAAAG1ggAAAAAAACa4gsAUAByAG8AYwBlAHMAcwBOAGEA
bQBlAAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANByQAAABwJAAAAAAAAUNsSAEMAbwBy
AHIAZQBsAGEAdABpAG8AbgBBAHUAeABJAG4AZgBvAAAAkgAAAEZTCQAAVQcAACA7BgBUAGEAcwBr
AEkAZAAAAAUBJgB7AEUAMAA2AEEANAAzAEMANwAtAEIANAA1AEYALQA0ADUARQAwAC0AQQBCADQA
MwAtADMANwA4AEQAQgAzADgARQA4ADUARgA4AH0ABr4JAAAAAAAASPgJAFMAZQBxAE4AdQBtAGIA
ZQByAAAABQEBADEAAwQAAOgHAAAqKgAAwAEAAAIAAAAAAAAAjpcjRbBmzQEPAQEADAFmj6+rJgIA
ABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEAEAAPAAQACAAEAAgACAAKAAEABAAcABMA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6wAhAAQBCwAKAAMAAAAAAABAjpcjRbBmzQEMAMwAOI1C
APgNmCHaaBEF+A0AAFAfAADyPgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAeUA
AAC+CgAAYgUAAIZnHABDAGUAcgB0AEcAZQB0AEMAZQByAHQAaQBmAGkAYwBhAHQAZQBDAGgAYQBp
AG4AUwB0AGEAcgB0AAAAAkEqAAAAqwgAACEAAAAG1ggAAAUBDABpAGUAeABwAGwAbwByAGUALgBl
AHgAZQADQWkAAAAcCQAAYAAAAEZTCQAABQEmAHsARQAwADYAQQA0ADMAQwA3AC0AQgA0ADUARgAt
ADQANQBFADAALQBBAEIANAAzAC0AMwA3ADgARABCADMAOABFADgANQBGADgAfQAGvgkAAAUBAQAy
AAMEAAB0AGnAAQAAKioAALgBAAADAAAAAAAAAI6XI0WwZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAE
AAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAOUAIQAEASkAKAAFAAAAAAAAQI6XI0WwZs0BDADMADiNQgD4DZgh2mgR
BfgNAABQHwAA8z4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAHfAAAAfgwAAAAA
AACH+xkAQwBlAHIAdABWAGUAcgBpAGYAeQBSAGUAdgBvAGMAYQB0AGkAbwBuAFMAdABhAHIAdAAA
AAJBKgAAAKsIAAAhAAAABtYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAAHAkA
AGAAAABGUwkAAAUBJgB7AEUAMAA2AEEANAAzAEMANwAtAEIANAA1AEYALQA0ADUARQAwAC0AQQBC
ADQAMwAtADMANwA4AEQAQgAzADgARQA4ADUARgA4AH0ABr4JAAAFAQEAMwADBAAAALgBAAAqKgAA
qAYAAAQAAAAAAAAAsOUjRbBmzQEPAQEADAFmj6+rJgIAABQAAAABAAQAAQAEAAIABgACAAYAAAAA
AAgAFQAIABEAEAAPAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
1AUhAAQCKQApAAUAAAAAAABAjpcjRbBmzQEMAMwAOI1CAPgNmCHaaBEF+A0AAFAfAAD0PgoAAAAA
AAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAc4FAAA2DgAABgcAAHueFABDAGUAcgB0AFYA
ZQByAGkAZgB5AFIAZQB2AG8AYwBhAHQAaQBvAG4AAAACQe8AAAByDgAAAAAAALfSCwBDAGUAcgB0
AGkAZgBpAGMAYQB0AGUAAADGAAAARpsOAAAAAAAAl2oHAGYAaQBsAGUAUgBlAGYAAAAFASwAMQA2
ADgAOAA5ADUAMQBDADQARABDADMARgA3AEMAMwBCAEQANwAzADEAQgBEAEUAMABFAEQANgAzADUA
NwAzAEYAOQA5ADMARAA0ADEAOAAuAGMAZQByAAYUDwAAcg4AADfDCwBzAHUAYgBqAGUAYwB0AE4A
YQBtAGUAAAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQAA0G9AAAAZg8A
AAAAAAD+kREASQBzAHMAdQBlAHIAQwBlAHIAdABpAGYAaQBjAGEAdABlAAAAiAAAAEabDgAABQEs
ADEANwA2ADEARgAyADYARQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBCADYAMgBGAEQA
OAAzADEAOQBGADMARABFADIAMAAxADgALgBjAGUAcgAGFA8AAAUBDwBzAGUAYwB1AHIAZQBzAHUA
YgAtAEQAQwAtAEMAQQADQakAAAAoEAAAfgwAAIcEBQBGAGwAYQBnAHMAAACMAAAARkUQAAAaAwAA
cYoFAHYAYQBsAHUAZQAAAAUBAQA0AAZkEAAAAAAAAC1gKQBDAEUAUgBUAF8AVgBFAFIASQBGAFkA
XwBSAEUAVgBfAEEAQwBDAFUATQBVAEwAQQBUAEkAVgBFAF8AVABJAE0ARQBPAFUAVABfAEYATABB
AEcAAAAFAQQAdAByAHUAZQADQSwBAADWEAAAAAAAABGzFABBAGQAZABpAHQAaQBvAG4AYQBsAFAA
YQByAGEAbQBlAHQAZQByAHMAAADxAAAARhERAAAAAAAAP9wJAHQAaQBtAGUAVABvAFUAcwBlAAAA
BQEYADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgA0ADUAOgA1ADIALgAyADAAMgBaAEZmEQAA
eAcAAGbnCwBjAHUAcgByAGUAbgB0AFQAaQBtAGUAAAAFARgAMgAwADEAMgAtADAANwAtADIAMABU
ADEAOQA6ADQANQA6ADUAMgAuADIAMgA1AFoABr8RAAAAAAAA3I0TAHUAcgBsAFIAZQB0AHIAaQBl
AHYAYQBsAFQAaQBtAGUAbwB1AHQAAAAFAQUAUABUADIAMABTAANBMAEAAAcSAAAAAAAAcOIQAFIA
ZQB2AG8AYwBhAHQAaQBvAG4AUwB0AGEAdAB1AHMAAAD9AAAARjoSAAAAAAAAMtEFAGkAbgBkAGUA
eAAAAAUBAQAwAEZZEgAAAAAAAKhzBQBlAHIAcgBvAHIAAAAFAQEAMABGeBIAAAAAAACE9AYAcgBl
AGEAcwBvAG4AAAAFAQEAMABGmRIAAHEEAADk6xMAYQBjAHQAdQBhAGwARgByAGUAcwBoAG4AZQBz
AHMAVABpAG0AZQAAAAUBCABQAFQAMQA1AE0ANAAyAFMABuISAAAAAAAADckWAHQAaABpAHIAZABQ
AGEAcgB0AHkAUAByAG8AdgBpAGQAZQByAFUAcwBlAGQAAAAFAQsAYwBzAHYAYQBsAGkAZAAuAGQA
bABsAANBKgAAAKsIAAAhAAAABtYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAA
HAkAAGAAAABGUwkAAAUBJgB7AEUAMAA2AEEANAAzAEMANwAtAEIANAA1AEYALQA0ADUARQAwAC0A
QQBCADQAMwAtADMANwA4AEQAQgAzADgARQA4ADUARgA4AH0ABr4JAAAFAQEANAADQSoAAADZEwAA
AAAAAF2YBgBSAGUAcwB1AGwAdAAAAAsAAAAGRRAAAAUBAQAwAAMEAAAKEKgGAAAqKgAAeBAAAAUA
AAAAAAAAsOUjRbBmzQEPAQEADAFmj6+rJgIAABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAI
ABEAEAAPAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAow8hAAQC
CwALAAMAAAAAAABAsOUjRbBmzQEMAMwAOI1CAPgNmCHaaBEF+A0AAFAfAAD1PgoAAAAAAAABBQAA
AAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAZ0PAADeFAAANAUAALwjFwBDAGUAcgB0AEcAZQB0AEMA
ZQByAHQAaQBmAGkAYwBhAHQAZQBDAGgAYQBpAG4AAAACQZcAAAByDgAAjgAAAEabDgAABQEsADEA
NgA4ADgAOQA1ADEAQwA0AEQAQwAzAEYANwBDADMAQgBEADcAMwAxAEIARABFADAARQBEADYAMwA1
ADcAMwBGADkAOQAzAEQANAAxADgALgBjAGUAcgAGFA8AAAUBEgBtAGEAaQBsAC4AcwBlAGMAdQBy
AGUAcwB1AGIALgBuAGUAdAADAWAAAAC8FQAAvgoAAAY2DgBWAGEAbABpAGQAYQB0AGkAbwBuAFQA
aQBtAGUAAAACBQEYADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgA0ADUAOgA1ADIALgAyADAA
MgBaAAQBygAAACEWAADWCAAAmkEPAEEAZABkAGkAdABpAG8AbgBhAGwAUwB0AG8AcgBlAAAAAkGX
AAAAcg4AAI4AAABGmw4AAAUBLAAxADYAOAA4ADkANQAxAEMANABEAEMAMwBGADcAQwAzAEIARAA3
ADMAMQBCAEQARQAwAEUARAA2ADMANQA3ADMARgA5ADkAMwBEADQAMQA4AC4AYwBlAHIABhQPAAAF
ARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQAAwRBgwEAAPAWAAA2DgAA+xUQ
AEUAeAB0AGUAbgBkAGUAZABLAGUAeQBVAHMAYQBnAGUAAAApAAAABiMXAACXBQAA4oIHAG8AcgBN
AGEAdABjAGgAAAAFAQQAdAByAHUAZQACQZ0AAABRFwAAAAAAAMFKBQBVAHMAYQBnAGUAAACAAAAA
Rm4XAADgBAAAKtMDAG8AaQBkAAAABQERADEALgAzAC4ANgAuADEALgA1AC4ANQAuADcALgAzAC4A
MQAGqRcAAAAAAAArrQQAbgBhAG0AZQAAAAUBFQBTAGUAcgB2AGUAcgAgAEEAdQB0AGgAZQBuAHQA
aQBjAGEAdABpAG8AbgADQT4AAABRFwAANQAAAAZuFwAABQEWADEALgAzAC4ANgAuADEALgA0AC4A
MQAuADMAMQAxAC4AMQAwAC4AMwAuADMAA0E8AAAAURcAADMAAAAGbhcAAAUBFQAyAC4AMQA2AC4A
OAA0ADAALgAxAC4AMQAxADMANwAzADAALgA0AC4AMQADBEEIAQAAKBAAAP8AAABGRRAAAAUBCAA0
ADgAMAAwADAAMAAwADAARpoYAACZEgAAZNAuAEMARQBSAFQAXwBDAEgAQQBJAE4AXwBSAEUAVgBP
AEMAQQBUAEkATwBOAF8AQwBIAEUAQwBLAF8AQwBIAEEASQBOAF8ARQBYAEMATABVAEQARQBfAFIA
TwBPAFQAAAAFAQQAdAByAHUAZQAGERkAABERAAA/KCoAQwBFAFIAVABfAEMASABBAEkATgBfAFIA
RQBWAE8AQwBBAFQASQBPAE4AXwBBAEMAQwBVAE0AVQBMAEEAVABJAFYARQBfAFQASQBNAEUATwBV
AFQAAAAFAQQAdAByAHUAZQADQVoAAACFGQAA1hAAAJHWDwBDAGgAYQBpAG4ARQBuAGcAaQBuAGUA
SQBuAGYAbwAAACkAAAAGthkAAAAAAAAPCwcAYwBvAG4AdABlAHgAdAAAAAUBBAB1AHMAZQByAAMB
0AAAAOQZAAAAAAAA1ZoOAEEAZABkAGkAdABpAG8AbgBhAGwASQBuAGYAbwAAAAJBnwAAABQaAACb
DgAA12UZAE4AZQB0AHcAbwByAGsAQwBvAG4AbgBlAGMAdABpAHYAaQB0AHkAUwB0AGEAdAB1AHMA
AABaAAAARkUQAAAFAQEAMQAGZBoAAAAAAADbUBoAXwBTAEUATgBTAEEAUABJAF8ATgBFAFQAVwBP
AFIASwBfAEEATABJAFYARQBfAEwAQQBOAAAABQEEAHQAcgB1AGUAAwRBCwkAALkaAABIBgAACtcQ
AEMAZQByAHQAaQBmAGkAYwBhAHQAZQBDAGgAYQBpAG4AAADAAAAARuwaAAA6EgAAMjQIAGMAaABh
AGkAbgBSAGUAZgAAAAUBJgB7ADIAMAA5AEEAOQA0AEUAMQAtADkAMQA3AEYALQA0ADMAMgA4AC0A
OAA4ADIANAAtADMAOAA4AEQAOABEADgAMAAxAEQAMgBGAH0ABlsbAAAAAAAAlNMXAHIAZQB2AG8A
YwBhAHQAaQBvAG4ARgByAGUAcwBoAG4AZQBzAHMAVABpAG0AZQAAAAUBCABQAFQAMQA1AE0ANAAy
AFMAAgHzAAAAsRsAALkaAAAKgAsAVAByAHUAcwB0AFMAdABhAHQAdQBzAAAAAkE0AAAA2xsAAE0C
AAB6lwsARQByAHIAbwByAFMAdABhAHQAdQBzAAAACwAAAAZFEAAABQEBADAAA0GPAAAAFBwAAFMJ
AABgFAoASQBuAGYAbwBTAHQAYQB0AHUAcwAAAGgAAABGRRAAAAUBAwAxADAAMAAGShwAAAAAAACe
4x8AQwBFAFIAVABfAFQAUgBVAFMAVABfAEgAQQBTAF8AUABSAEUARgBFAFIAUgBFAEQAXwBJAFMA
UwBVAEUAUgAAAAUBBAB0AHIAdQBlAAMEAXMEAACpHAAA8BYAADuyDABDAGgAYQBpAG4ARQBsAGUA
bQBlAG4AdAAAAAJBlwAAAHIOAACOAAAARpsOAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABDADMA
RgA3AEMAMwBCAEQANwAzADEAQgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEAOAAu
AGMAZQByAAYUDwAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AANBxgAA
AHEdAAAUGgAAV40SAFMAaQBnAG4AYQB0AHUAcgBlAEEAbABnAG8AcgBpAHQAaABtAAAAjwAAAEZu
FwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBG2R0AAAAAAAB5
cQgAaABhAHMAaABOAGEAbQBlAAAABQEEAFMASABBADEABgQeAAAAAAAAYcUNAHAAdQBiAGwAaQBj
AEsAZQB5AE4AYQBtAGUAAAAFAQMAUgBTAEEAA0GwAAAAPB4AAAAAAADZCxIAUAB1AGIAbABpAGMA
SwBlAHkAQQBsAGcAbwByAGkAdABoAG0AAAB5AAAARm4XAAAFARQAMQAuADIALgA4ADQAMAAuADEA
MQAzADUANAA5AC4AMQAuADEALgAxAEYEHgAABQEDAFIAUwBBAAazHgAAvxEAABzrDwBwAHUAYgBs
AGkAYwBLAGUAeQBMAGUAbgBnAHQAaAAAAAUBBAAyADAANAA4AAMBpgAAALEbAAACQRQAAADbGwAA
CwAAAAZFEAAABQEBADAAA0GCAAAAFBwAAHkAAABGRRAAAAUBAwAxADAAMgBGLB8AANsbAAA6NB8A
QwBFAFIAVABfAFQAUgBVAFMAVABfAEgAQQBTAF8ASwBFAFkAXwBNAEEAVABDAEgAXwBJAFMAUwBV
AEUAUgAAAAUBBAB0AHIAdQBlAAZKHAAABQEEAHQAcgB1AGUAAwQBnAAAAJwfAACFGQAAkUQQAEEA
cABwAGwAaQBjAGEAdABpAG8AbgBVAHMAYQBnAGUAAAACQWcAAABRFwAAXgAAAEZuFwAABQERADEA
LgAzAC4ANgAuADEALgA1AC4ANQAuADcALgAzAC4AMQAGqRcAAAUBFQBTAGUAcgB2AGUAcgAgAEEA
dQB0AGgAZQBuAHQAaQBjAGEAdABpAG8AbgADBAEpAAAAPSAAALwVAADGiw0ASQBzAHMAdQBhAG4A
YwBlAFUAcwBhAGcAZQAAAANBsAAAAGsgAAAAAAAA7DoOAFIAZQB2AG8AYwBhAHQAaQBvAG4ASQBu
AGYAbwAAAD0AAAAGmiAAAAAAAACSOQ0AZgByAGUAcwBoAG4AZQBzAHMAVABpAG0AZQAAAAUBCABQ
AFQAMQA1AE0ANAAyAFMAAkE+AAAA3CAAAGQaAADbqhAAUgBlAHYAbwBjAGEAdABpAG8AbgBSAGUA
cwB1AGwAdAAAAAsAAAAGRRAAAAUBAQAwAAMEBAGiAgAAqRwAAAJBkQAAAHIOAACIAAAARpsOAAAF
ASwAMQA3ADYAMQBGADIANgBFAEIAMAA4ADIANAA3ADAARgA0ADQAQgAyADcAOABFAEIANgAyAEYA
RAA4ADMAMQA5AEYAMwBEAEUAMgAwADEAOAAuAGMAZQByAAYUDwAABQEPAHMAZQBjAHUAcgBlAHMA
dQBiAC0ARABDAC0AQwBBAANBWgAAAHEdAABRAAAARm4XAAAFARQAMQAuADIALgA4ADQAMAAuADEA
MQAzADUANAA5AC4AMQAuADEALgA1AEbZHQAABQEEAFMASABBADEABgQeAAAFAQMAUgBTAEEAA0Fa
AAAAPB4AAFEAAABGbhcAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAu
ADEARgQeAAAFAQMAUgBTAEEABrMeAAAFAQQAMgAwADQAOAADAfUAAACxGwAAAkEUAAAA2xsAAAsA
AAAGRRAAAAUBAQAwAANB0QAAABQcAADIAAAARkUQAAAFAQMAMQAwAEMARroiAAAUHAAAoL0gAEMA
RQBSAFQAXwBUAFIAVQBTAFQAXwBIAEEAUwBfAE4AQQBNAEUAXwBNAEEAVABDAEgAXwBJAFMAUwBV
AEUAUgAAAAUBBAB0AHIAdQBlAEYVIwAA3hQAAHyXGQBDAEUAUgBUAF8AVABSAFUAUwBUAF8ASQBT
AF8AUwBFAEwARgBfAFMASQBHAE4ARQBEAAAABQEEAHQAcgB1AGUABkocAAAFAQQAdAByAHUAZQAD
BEEqAAAAnB8AACEAAAAGgiMAAGsgAABs+wMAYQBuAHkAAAAFAQQAdAByAHUAZQADQRoAAAA9IAAA
EQAAAAaCIwAABQEEAHQAcgB1AGUAAwQEQSoAAACrCAAAIQAAAAbWCAAABQEMAGkAZQB4AHAAbABv
AHIAZQAuAGUAeABlAANBaQAAABwJAABgAAAARlMJAAAFASYAewBFADAANgBBADQAMwBDADcALQBC
ADQANQBGAC0ANAA1AEUAMAAtAEEAQgA0ADMALQAzADcAOABEAEIAMwA4AEUAOAA1AEYAOAB9AAa+
CQAABQEBADUAA0EUAAAA2RMAAAsAAAAGRRAAAAUBAQAwAAMEAAAAcwB4EAAAKioAAAAFAAAGAAAA
AAAAAMEMJEWwZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAAR
ABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoEIQAEAB4A
HgABAAAAAAAAQLDlI0WwZs0BDADMADiNQgD4DZgh2mgRBfgNAABQHwAA9j4KAAAAAAAAAQUAAAAA
AAUVAAAAoiLe61T0+YS58oy8fAQAAAEkBAAAViUAANkdAAB52iAAQwBlAHIAdABWAGUAcgBpAGYA
eQBDAGUAcgB0AGkAZgBpAGMAYQB0AGUAQwBoAGEAaQBuAFAAbwBsAGkAYwB5AAAAAkGJAAAAqiUA
AOwaAAByGgYAUABvAGwAaQBjAHkAAABqAAAARsklAAAsHwAAegYEAHQAeQBwAGUAAAAFARUAQwBF
AFIAVABfAEMASABBAEkATgBfAFAATwBMAEkAQwBZAF8AUwBTAEwABg4mAAB4EgAARC8IAGMAbwBu
AHMAdABhAG4AdAAAAAUBAQA0AANBlwAAAHIOAACOAAAARpsOAAAFASwAMQA2ADgAOAA5ADUAMQBD
ADQARABDADMARgA3AEMAMwBCAEQANwAzADEAQgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMA
RAA0ADEAOAAuAGMAZQByAAYUDwAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4A
ZQB0AANBXgAAALkaAABVAAAABuwaAAAFASYAewAyADAAOQBBADkANABFADEALQA5ADEANwBGAC0A
NAAzADIAOAAtADgAOAAyADQALQAzADgAOABEADgARAA4ADAAMQBEADIARgB9AANBFAAAACgQAAAL
AAAABkUQAAAFAQEAMAADQfUAAABQJwAAAAAAAFNYFwBTAFMATABBAGQAZABpAHQAaQBvAG4AYQBs
AFAAbwBsAGkAYwB5AEkAbgBmAG8AAAB6AAAARpEnAAAjFwAA4vEIAGEAdQB0AGgAVAB5AHAAZQAA
AAUBBgBzAGUAcgB2AGUAcgAGwCcAAAAAAADOkAoAcwBlAHIAdgBlAHIATgBhAG0AZQAAAAUBEgBt
AGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAACQTQAAAAQKAAAnwcAADUPCwBJAGcA
bgBvAHIAZQBGAGwAYQBnAHMAAAALAAAABkUQAAAFAQEAMAADBEF5AAAASigAAKolAADyzwYAUwB0
AGEAdAB1AHMAAABaAAAARmkoAABFEAAAMTUKAGMAaABhAGkAbgBJAG4AZABlAHgAAAAFAQIALQAx
AAaUKAAAAAAAAHa+DABlAGwAZQBtAGUAbgB0AEkAbgBkAGUAeAAAAAUBAgAtADEAA0EqAAAAqwgA
ACEAAAAG1ggAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgAZQADQWkAAAAcCQAAYAAAAEZTCQAA
BQEmAHsARQAwADYAQQA0ADMAQwA3AC0AQgA0ADUARgAtADQANQBFADAALQBBAEIANAAzAC0AMwA3
ADgARABCADMAOABFADgANQBGADgAfQAGvgkAAAUBAQA2AANBFAAAANkTAAALAAAABkUQAAAFAQEA
MAADBAAAAAAABQAFAAAqKgAASA0AAAcAAAAAAAAAwQwkRbBmzQEPAQEADAFmj6+rJgIAABQAAAAB
AAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEAEAAPAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAdQwhAAQAWgBaAAACAAAAAABAwQwkRbBmzQEMAMwAOI1CAPgNmCHa
aBEF+A0AAFAfAAD3PgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAW8MAABWKgAA
uQQAAK6wCwBYADUAMAA5AE8AYgBqAGUAYwB0AHMAAAACQTsGAAByDgAAiAAAAEabDgAABQEsADEA
NwA2ADEARgAyADYARQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBCADYAMgBGAEQAOAAz
ADEAOQBGADMARABFADIAMAAxADgALgBjAGUAcgAGFA8AAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAt
AEQAQwAtAEMAQQACAZ0AAAAWKwAAAAAAAMzJBwBTAHUAYgBqAGUAYwB0AAAAAgE2AAAAOCsAAD0D
AADLEAIAQwBOAAAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEASoAAABzKwAA
ERkAAP8QAgBEAEMAAAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAHMrAAACBQEDAG4AZQB0
AAQEQcMAAAC4KwAAwCcAAA6MDABTAHUAYgBqAGUAYwB0AEsAZQB5AEkARAAAAJgAAABG4ysAAOIS
AAANpggAYwBvAG0AcAB1AHQAZQBkAAAABQEFAGYAYQBsAHMAZQAGECwAAFYqAAAuygQAaABhAHMA
aAAAAAUBKAA3ADcAMwBFAEQANgA4ADAANQAxADYANgA2ADYANwAwAEYANgBGADIAMwBGAEIAMgA1
ADEAOQBGAEMAMQBCAEEAQwAyADEAOABDADQAQwBCAANBWgAAAHEdAABRAAAARm4XAAAFARQAMQAu
ADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEbZHQAABQEEAFMASABBADEABgQe
AAAFAQMAUgBTAEEAA0FaAAAAPB4AAFEAAABGbhcAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMA
NQA0ADkALgAxAC4AMQAuADEARgQeAAAFAQMAUgBTAEEABrMeAAAFAQQAMgAwADQAOAADAX8AAAA+
LQAAViUAAHldBgBJAHMAcwB1AGUAcgAAAAIBKAAAADgrAAACBQEPAHMAZQBjAHUAcgBlAHMAdQBi
AC0ARABDAC0AQwBBAAQBHAAAAHMrAAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAHMrAAAC
BQEDAG4AZQB0AAQEAWwAAADCLQAAAAAAAL0EDABTAGUAcgBpAGEAbABOAHUAbQBiAGUAcgAAAAIF
ASAANwAyADQAMwBEADYANgBEAEIARgBGAEEAOQBCADkAMgA0ADEAQQBEADcANABFADkAOABDADcA
NgBCAEQANwBCAAQBTgAAADMuAABKKAAAspcJAE4AbwB0AEIAZQBmAG8AcgBlAAAAAgUBFAAyADAA
MQAyAC0AMAA3AC0AMQA5AFQAMQA2ADoANQA1ADoAMwA3AFoABAFMAAAAhi4AAAAAAADJDQgATgBv
AHQAQQBmAHQAZQByAAAAAgUBFAAyADAAMQA3AC0AMAA3AC0AMQA5AFQAMQA3ADoAMAA1ADoAMwA1
AFoABAHjAQAA1y4AAAAAAAA0+AoARQB4AHQAZQBuAHMAaQBvAG4AcwAAAAJBUgEAAP8uAACRJwAA
Ym0IAEsAZQB5AFUAcwBhAGcAZQAAAC8BAABGIi8AAHEIAAAflwgAYwByAGkAdABpAGMAYQBsAAAA
BQEEAHQAcgB1AGUARkUQAAAFAQIAOAA2AEZaLwAAqwgAALhwIABDAEUAUgBUAF8ARABJAEcASQBU
AEEATABfAFMASQBHAE4AQQBUAFUAUgBFAF8ASwBFAFkAXwBVAFMAQQBHAEUAAAAFAQQAdAByAHUA
ZQBGtS8AACIvAADflxwAQwBFAFIAVABfAEsARQBZAF8AQwBFAFIAVABfAFMASQBHAE4AXwBLAEUA
WQBfAFUAUwBBAEcARQAAAAUBBAB0AHIAdQBlAAYIMAAAsx4AABwAFwBDAEUAUgBUAF8AQwBSAEwA
XwBTAEkARwBOAF8ASwBFAFkAXwBVAFMAQQBHAEUAAAAFAQQAdAByAHUAZQADQWMAAABWMAAAWRIA
AKjyEABCAGEAcwBpAGMAQwBvAG4AcwB0AHIAYQBpAG4AdABzAAAAMAAAAEYiLwAABQEEAHQAcgB1
AGUABpowAABKHAAAnhgCAGMAQQAAAAUBBAB0AHIAdQBlAAMEBEFnBQAAcg4AAI4AAABGmw4AAAUB
LAAxADYAOAA4ADkANQAxAEMANABEAEMAMwBGADcAQwAzAEIARAA3ADMAMQBCAEQARQAwAEUARAA2
ADMANQA3ADMARgA5ADkAMwBEADQAMQA4AC4AYwBlAHIABhQPAAAFARIAbQBhAGkAbAAuAHMAZQBj
AHUAcgBlAHMAdQBiAC4AbgBlAHQAAgE5AAAAFisAAAIBLgAAADgrAAACBQESAG0AYQBpAGwALgBz
AGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AAQEQXUAAAC4KwAAbAAAAEbjKwAABQEFAGYAYQBsAHMA
ZQAGECwAAAUBKAA1ADEAQQA2ADAAOAA1AEIAQQA3ADAANQBBAEEAMgA3ADMARAA5ADEARgAwADgA
MQBDAEQAQgA0AEMAOABCADEANQAzADEAQgBGADQAQgAzAANBWgAAAHEdAABRAAAARm4XAAAFARQA
MQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEbZHQAABQEEAFMASABBADEA
BgQeAAAFAQMAUgBTAEEAA0FaAAAAPB4AAFEAAABGbhcAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAx
ADMANQA0ADkALgAxAC4AMQAuADEARgQeAAAFAQMAUgBTAEEABrMeAAAFAQQAMgAwADQAOAADAWkA
AAA+LQAAAgEoAAAAOCsAAAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAA
cysAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAAcysAAAIFAQMAbgBlAHQABAQBMgAAAMIt
AAACBQEUADEANQBBADEAMAA2AEUAMAAwADAAMAAwADAAMAAwADAAMAAwADEARAAEATIAAAAzLgAA
AgUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA4ADoANQA5ADoANAA1AFoABAEyAAAAhi4AAAIF
ARQAMgAwADEANAAtADAANwAtADIAMABUADEAOAA6ADUAOQA6ADQANQBaAAQBQQIAANcuAAACAXIA
AADwFgAAAkFnAAAAURcAAF4AAABGbhcAAAUBEQAxAC4AMwAuADYALgAxAC4ANQAuADUALgA3AC4A
MwAuADEABqkXAAAFARUAUwBlAHIAdgBlAHIAIABBAHUAdABoAGUAbgB0AGkAYwBhAHQAaQBvAG4A
AwRBkQAAAP8uAACIAAAARiIvAAAFAQQAdAByAHUAZQBGRRAAAAUBAgBBADAARlovAAAFAQQAdABy
AHUAZQAGnjQAALYZAABPbx8AQwBFAFIAVABfAEsARQBZAF8ARQBOAEMASQBQAEgARQBSAE0ARQBO
AFQAXwBLAEUAWQBfAFUAUwBBAEcARQAAAAUBBAB0AHIAdQBlAAMBbQAAAPw0AAC+CQAASNIOAFMA
dQBiAGoAZQBjAHQAQQBsAHQATgBhAG0AZQAAAAIBPAAAACw1AABkEAAAbZEJAEkAUABBAGQAZABy
AGUAcwBzAAAAAgUBCwAxADkAMgAuADEANgA4AC4AMAAuADQABAQBtwAAAG41AABtBgAAxaMWAEEA
dQB0AGgAbwByAGkAdAB5AEsAZQB5AEkAZABlAG4AdABpAGYAaQBlAHIAAAACQXYAAACuNQAAIRYA
ANqWBQBLAGUAeQBJAEQAAABZAAAABhAsAAAFASgANwA3ADMARQBEADYAOAAwADUAMQA2ADYANgA2
ADcAMABGADYARgAyADMARgBCADIANQAxADkARgBDADEAQgBBAEMAMgAxADgAQwA0AEMAQgADBAQE
QSoAAACrCAAAIQAAAAbWCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAABwJAABg
AAAARlMJAAAFASYAewBFADAANgBBADQAMwBDADcALQBCADQANQBGAC0ANAA1AEUAMAAtAEEAQgA0
ADMALQAzADcAOABEAEIAMwA4AEUAOAA1AEYAOAB9AAa+CQAABQEBADcAAwQAAABIDQAAKioAAOAG
AAAIAAAAAAAAACf3JEWwZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAI
ABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsG
IQAEAlAAUQBAAAAAAAAAQMEMJEWwZs0BDADMADiNQgD4DZgh2mgRBfgNAABQHwAA+D4KAAAAAAAA
AQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAEFBgAAnjcAAAAAAAAjcA4AVwBpAG4AVgBlAHIA
aQBmAHkAVAByAHUAcwB0AAAAAgFwAAAAzjcAAJwfAADRowgAQQBjAHQAaQBvAG4ASQBEAAAAAgUB
JgB7ADUANwAzAEUAMwAxAEYAOAAtAEEAQQBCAEEALQAxADEARAAwAC0AOABDAEMAQgAtADAAMABD
ADAANABGAEMAMgA5ADUARQBFAH0ABEFJAAAAQzgAAOQZAACVCggAVQBJAEMAaABvAGkAYwBlAAAA
CwAAAAZFEAAABQEBADIAAgUBCwBXAFQARABfAFUASQBfAE4ATwBOAEUABEGBAAAAkTgAALEbAACK
Tw8AUgBlAHYAbwBjAGEAdABpAG8AbgBDAGgAZQBjAGsAAABQAAAARkUQAAAFAQEAMQAGzTgAADgr
AADLUhUAVwBUAEQAXwBSAEUAVgBPAEsARQBfAFcASABPAEwARQBDAEgAQQBJAE4AAAAFAQQAdABy
AHUAZQADQWUAAAAXOQAAKBAAAMfDCwBTAHQAYQB0AGUAQQBjAHQAaQBvAG4AAAALAAAABkUQAAAF
AQEAMQACBQEWAFcAVABEAF8AUwBUAEEAVABFAEEAQwBUAEkATwBOAF8AVgBFAFIASQBGAFkABEFp
AAAAKBAAAGAAAABGRRAAAAUBCAA4ADAAMAAwADAAMAAwADAABqM5AACuNQAAWv0WAEMAUABEAF8A
VQBTAEUAXwBOAFQANQBfAEMASABBAEkATgBfAEYATABBAEcAAAAFAQQAdAByAHUAZQADQX4AAADv
OQAAAAAAACUFDwBDAGUAcgB0AGkAZgBpAGMAYQB0AGUASQBuAGYAbwAAAE0AAAAGIDoAAOMrAABN
BAsAZABpAHMAcABsAGEAeQBOAGEAbQBlAAAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUA
YgAuAG4AZQB0AANBdwAAAHI6AACaIAAAEikKAEQAaQBnAGUAcwB0AEkAbgBmAG8AAABQAAAARpk6
AADNOAAAyyUPAGQAaQBnAGUAcwB0AEEAbABnAG8AcgBpAHQAaABtAAAABQEAAAbKOgAADiYAAIQr
BgBkAGkAZwBlAHMAdAAAAAUBAAADQZsBAADuOgAAkTgAAIqpEABSAGUAZwBQAG8AbABpAGMAeQBT
AGUAdAB0AGkAbgBnAAAAaAEAAEZFEAAABQEFADIAMwBDADAAMABGNDsAAAAAAACzaRIAVwBUAFAA
RgBfAE8ARgBGAEwASQBOAEUATwBLAF8ASQBOAEQAAAAFAQQAdAByAHUAZQBGczsAABAoAAD1DBIA
VwBUAFAARgBfAE8ARgBGAEwASQBOAEUATwBLAF8AQwBPAE0AAAAFAQQAdAByAHUAZQBGsjsAABAs
AACu6RUAVwBUAFAARgBfAE8ARgBGAEwASQBOAEUATwBLAE4AQgBVAF8ASQBOAEQAAAAFAQQAdABy
AHUAZQBG9zsAAAcSAADwjBUAVwBUAFAARgBfAE8ARgBGAEwASQBOAEUATwBLAE4AQgBVAF8AQwBP
AE0AAAAFAQQAdAByAHUAZQAGPDwAAMklAAA6/RkAVwBUAFAARgBfAEkARwBOAE8AUgBFAFIARQBW
AE8AQwBBAFQASQBPAE4ATwBOAFQAUwAAAAUBBAB0AHIAdQBlAANBXgAAALkaAABVAAAABuwaAAAF
ASYAewAyADAAOQBBADkANABFADEALQA5ADEANwBGAC0ANAAzADIAOAAtADgAOAAyADQALQAzADgA
OABEADgARAA4ADAAMQBEADIARgB9AANBKgAAAKsIAAAhAAAABtYIAAAFAQwAaQBlAHgAcABsAG8A
cgBlAC4AZQB4AGUAA0FpAAAAHAkAAGAAAABGUwkAAAUBJgB7AEUAMAA2AEEANAAzAEMANwAtAEIA
NAA1AEYALQA0ADUARQAwAC0AQQBCADQAMwAtADMANwA4AEQAQgAzADgARQA4ADUARgA4AH0ABr4J
AAAFAQEAOAADQRQAAADZEwAACwAAAAZFEAAABQEBADAAAwQAAA4AVuAGAAAqKgAAcAEAAAkAAAAA
AAAAJ/ckRbBmzQEPAQEADAFmj6+rJgIAABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEA
AAAAAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqQAhAAQBUABQ
AEAAAAAAAABAJ/ckRbBmzQH4DQAAlB0AAPk+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKM
vHwEAAABowAAAHEIAAACQSoAAACrCAAAIQAAAAbWCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUA
eABlAANBaQAAABwJAABgAAAARlMJAAAFASYAewA0ADYANAAyADcAMQA3ADUALQBEADUARgBFAC0A
NABBAEUAMgAtAEEAOAAxAEIALQAwADYANgA5ADkANwA1ADEAMQA3AEMAMQB9AAa+CQAABQEBADEA
AwQAAFMASABBcAEAACoqAABwAQAACgAAAAAAAAAn9yRFsGbNAQ8BAQAMAWaPr6smAgAAFAAAAAEA
BAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAAAAAABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAACpACEABAELAAoAAwAAAAAAAEAn9yRFsGbNAfgNAACUHQAA+j4KAAAA
AAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAGjAAAAvgoAAAJBKgAAAKsIAAAhAAAABtYI
AAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAAHAkAAGAAAABGUwkAAAUBJgB7ADQA
NgA0ADIANwAxADcANQAtAEQANQBGAEUALQA0AEEARQAyAC0AQQA4ADEAQgAtADAANgA2ADkAOQA3
ADUAMQAxADcAQwAxAH0ABr4JAAAFAQEAMgADBAAAAG0AaQBwAQAAKioAAHABAAALAAAAAAAAACf3
JEWwZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARAAAAAAAE
AAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKkAIQAEASkAKAAFAAAA
AAAAQCf3JEWwZs0B+A0AAJQdAAD7PgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAA
AaMAAAB+DAAAAkEqAAAAqwgAACEAAAAG1ggAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgAZQAD
QWkAAAAcCQAAYAAAAEZTCQAABQEmAHsANAA2ADQAMgA3ADEANwA1AC0ARAA1AEYARQAtADQAQQBF
ADIALQBBADgAMQBCAC0AMAA2ADYAOQA5ADcANQAxADEANwBDADEAfQAGvgkAAAUBAQAzAAMEAAAA
GgAAAHABAAAqKgAA4AMAAAwAAAAAAAAAJ/ckRbBmzQEPAQEADAFmj6+rJgIAABQAAAABAAQAAQAE
AAIABgACAAYAAAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAGAMhAAQCKQApAAUAAAAAAABAJ/ckRbBmzQH4DQAAlB0AAPw+CgAAAAAAAAEF
AAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABEgMAADYOAAACQZcAAAByDgAAjgAAAEabDgAABQEs
ADEANgA4ADgAOQA1ADEAQwA0AEQAQwAzAEYANwBDADMAQgBEADcAMwAxAEIARABFADAARQBEADYA
MwA1ADcAMwBGADkAOQAzAEQANAAxADgALgBjAGUAcgAGFA8AAAUBEgBtAGEAaQBsAC4AcwBlAGMA
dQByAGUAcwB1AGIALgBuAGUAdAADQZEAAABmDwAAiAAAAEabDgAABQEsADEANwA2ADEARgAyADYA
RQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBCADYAMgBGAEQAOAAzADEAOQBGADMARABF
ADIAMAAxADgALgBjAGUAcgAGFA8AAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAD
QSUAAAAoEAAAHAAAAEZFEAAABQEBADQABmQQAAAFAQQAdAByAHUAZQADQY4AAADWEAAAhQAAAEYR
EQAABQEYADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgA0ADUAOgA1ADIALgAyADAAMgBaAEZm
EQAABQEYADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgA0ADUAOgA1ADIALgAyADEAOABaAAa/
EQAABQEFAFAAVAAyADAAUwADQWIAAAAHEgAAWQAAAEY6EgAABQEBADAARlkSAAAFAQEAMABGeBIA
AAUBAQAwAEaZEgAABQEIAFAAVAAxADUATQA0ADIAUwAG4hIAAAUBCwBjAHMAdgBhAGwAaQBkAC4A
ZABsAGwAA0EqAAAAqwgAACEAAAAG1ggAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgAZQADQWkA
AAAcCQAAYAAAAEZTCQAABQEmAHsANAA2ADQAMgA3ADEANwA1AC0ARAA1AEYARQAtADQAQQBFADIA
LQBBADgAMQBCAC0AMAA2ADYAOQA5ADcANQAxADEANwBDADEAfQAGvgkAAAUBAQA0AANBFAAAANkT
AAALAAAABkUQAAAFAQEAMAADBAAAAGkAYwBh4AMAACoqAADoCQAADQAAAAAAAAAn9yRFsGbNAQ8B
AQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAAAAAABAAIAAQACAAI
AAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmCSEABAILAAsAAwAAAAAAAEAn9yRF
sGbNAfgNAACUHQAA/T4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAEgCQAA3hQA
AAJBlwAAAHIOAACOAAAARpsOAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABDADMARgA3AEMAMwBC
AEQANwAzADEAQgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEAOAAuAGMAZQByAAYU
DwAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AAMBOgAAALwVAAACBQEY
ADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgA0ADUAOgA1ADIALgAyADAAMgBaAAQBogAAACEW
AAACQZcAAAByDgAAjgAAAEabDgAABQEsADEANgA4ADgAOQA1ADEAQwA0AEQAQwAzAEYANwBDADMA
QgBEADcAMwAxAEIARABFADAARQBEADYAMwA1ADcAMwBGADkAOQAzAEQANAAxADgALgBjAGUAcgAG
FA8AAAUBEgBtAGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAADBEELAQAA8BYAABEA
AAAGIxcAAAUBBAB0AHIAdQBlAAJBZwAAAFEXAABeAAAARm4XAAAFAREAMQAuADMALgA2AC4AMQAu
ADUALgA1AC4ANwAuADMALgAxAAapFwAABQEVAFMAZQByAHYAZQByACAAQQB1AHQAaABlAG4AdABp
AGMAYQB0AGkAbwBuAANBPgAAAFEXAAA1AAAABm4XAAAFARYAMQAuADMALgA2AC4AMQAuADQALgAx
AC4AMwAxADEALgAxADAALgAzAC4AMwADQTwAAABRFwAAMwAAAAZuFwAABQEVADIALgAxADYALgA4
ADQAMAAuADEALgAxADEAMwA3ADMAMAAuADQALgAxAAMEQUQAAAAoEAAAOwAAAEZFEAAABQEIADQA
OAAwADAAMAAwADAAMABGmhgAAAUBBAB0AHIAdQBlAAYRGQAABQEEAHQAcgB1AGUAA0EaAAAAhRkA
ABEAAAAGthkAAAUBBAB1AHMAZQByAANBZQUAALkaAABuAAAARuwaAAAFASYAewAyADYARgAyADQA
RQBEADUALQAyADkAMAA1AC0ANAAzADYARQAtADgAMwBEAEYALQBDAEIAMQA3ADkANgAxADMAMQBD
ADIAMAB9AAZbGwAABQEIAFAAVAAxADUATQA0ADIAUwACAU0AAACxGwAAAkEUAAAA2xsAAAsAAAAG
RRAAAAUBAQAwAANBKQAAABQcAAAgAAAARkUQAAAFAQMAMQAwADAABkocAAAFAQQAdAByAHUAZQAD
BAGFAgAAqRwAAAJBlwAAAHIOAACOAAAARpsOAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABDADMA
RgA3AEMAMwBCAEQANwAzADEAQgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEAOAAu
AGMAZQByAAYUDwAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AANBWgAA
AHEdAABRAAAARm4XAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1
AEbZHQAABQEEAFMASABBADEABgQeAAAFAQMAUgBTAEEAA0FaAAAAPB4AAFEAAABGbhcAAAUBFAAx
AC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARgQeAAAFAQMAUgBTAEEABrMe
AAAFAQQAMgAwADQAOAADAV4AAACxGwAAAkEUAAAA2xsAAAsAAAAGRRAAAAUBAQAwAANBOgAAABQc
AAAxAAAARkUQAAAFAQMAMQAwADIARiwfAAAFAQQAdAByAHUAZQAGShwAAAUBBAB0AHIAdQBlAAME
AXIAAACcHwAAAkFnAAAAURcAAF4AAABGbhcAAAUBEQAxAC4AMwAuADYALgAxAC4ANQAuADUALgA3
AC4AMwAuADEABqkXAAAFARUAUwBlAHIAdgBlAHIAIABBAHUAdABoAGUAbgB0AGkAYwBhAHQAaQBv
AG4AAwQBBQAAAD0gAAADQTwAAABrIAAAGQAAAAaaIAAABQEIAFAAVAAxADUATQA0ADIAUwACQRQA
AADcIAAACwAAAAZFEAAABQEBADAAAwQEAQwCAACpHAAAAkGRAAAAcg4AAIgAAABGmw4AAAUBLAAx
ADcANgAxAEYAMgA2AEUAQgAwADgAMgA0ADcAMABGADQANABCADIANwA4AEUAQgA2ADIARgBEADgA
MwAxADkARgAzAEQARQAyADAAMQA4AC4AYwBlAHIABhQPAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIA
LQBEAEMALQBDAEEAA0FaAAAAcR0AAFEAAABGbhcAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMA
NQA0ADkALgAxAC4AMQAuADUARtkdAAAFAQQAUwBIAEEAMQAGBB4AAAUBAwBSAFMAQQADQVoAAAA8
HgAAUQAAAEZuFwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4AMQBG
BB4AAAUBAwBSAFMAQQAGsx4AAAUBBAAyADAANAA4AAMBbwAAALEbAAACQRQAAADbGwAACwAAAAZF
EAAABQEBADAAA0FLAAAAFBwAAEIAAABGRRAAAAUBAwAxADAAQwBGuiIAAAUBBAB0AHIAdQBlAEYV
IwAABQEEAHQAcgB1AGUABkocAAAFAQQAdAByAHUAZQADBEEaAAAAnB8AABEAAAAGgiMAAAUBBAB0
AHIAdQBlAANBGgAAAD0gAAARAAAABoIjAAAFAQQAdAByAHUAZQADBARBKgAAAKsIAAAhAAAABtYI
AAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAAHAkAAGAAAABGUwkAAAUBJgB7ADQA
NgA0ADIANwAxADcANQAtAEQANQBGAEUALQA0AEEARQAyAC0AQQA4ADEAQgAtADAANgA2ADkAOQA3
ADUAMQAxADcAQwAxAH0ABr4JAAAFAQEANQADQRQAAADZEwAACwAAAAZFEAAABQEBADAAAwQAAOgJ
AAAqKgAAgAMAAA4AAAAAAAAAOB4lRbBmzQEPAQEADAFmj6+rJgIAABQAAAABAAQAAQAEAAIABgAC
AAYAAAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAuAIhAAQAHgAeAAEAAAAAAABAJ/ckRbBmzQH4DQAAlB0AAP4+CgAAAAAAAAEFAAAAAAAF
FQAAAKIi3utU9PmEufKMvHwEAAABsgIAAFYlAAACQUcAAACqJQAAPgAAAEbJJQAABQEVAEMARQBS
AFQAXwBDAEgAQQBJAE4AXwBQAE8ATABJAEMAWQBfAFMAUwBMAAYOJgAABQEBADQAA0GXAAAAcg4A
AI4AAABGmw4AAAUBLAAxADYAOAA4ADkANQAxAEMANABEAEMAMwBGADcAQwAzAEIARAA3ADMAMQBC
AEQARQAwAEUARAA2ADMANQA3ADMARgA5ADkAMwBEADQAMQA4AC4AYwBlAHIABhQPAAAFARIAbQBh
AGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQAA0FeAAAAuRoAAFUAAAAG7BoAAAUBJgB7
ADIANgBGADIANABFAEQANQAtADIAOQAwADUALQA0ADMANgBFAC0AOAAzAEQARgAtAEMAQgAxADcA
OQA2ADEAMwAxAEMAMgAwAH0AA0EUAAAAKBAAAAsAAAAGRRAAAAUBAQAwAANBZQAAAFAnAABCAAAA
RpEnAAAFAQYAcwBlAHIAdgBlAHIABsAnAAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBi
AC4AbgBlAHQAAkEUAAAAECgAAAsAAAAGRRAAAAUBAQAwAAMEQSMAAABKKAAAGgAAAEZpKAAABQEC
AC0AMQAGlCgAAAUBAgAtADEAA0EqAAAAqwgAACEAAAAG1ggAAAUBDABpAGUAeABwAGwAbwByAGUA
LgBlAHgAZQADQWkAAAAcCQAAYAAAAEZTCQAABQEmAHsANAA2ADQAMgA3ADEANwA1AC0ARAA1AEYA
RQAtADQAQQBFADIALQBBADgAMQBCAC0AMAA2ADYAOQA5ADcANQAxADEANwBDADEAfQAGvgkAAAUB
AQA2AANBFAAAANkTAAALAAAABkUQAAAFAQEAMAADBAAATABlAG4AgAMAACoqAAAICgAADwAAAAAA
AAA4HiVFsGbNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAA
AAAABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDCSEABABaAFoA
AAIAAAAAAEA4HiVFsGbNAfgNAACUHQAA/z4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8
fAQAAAE9CQAAVioAAAJB/QMAAHIOAACIAAAARpsOAAAFASwAMQA3ADYAMQBGADIANgBFAEIAMAA4
ADIANAA3ADAARgA0ADQAQgAyADcAOABFAEIANgAyAEYARAA4ADMAMQA5AEYAMwBEAEUAMgAwADEA
OAAuAGMAZQByAAYUDwAABQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAIBaQAAABYr
AAACASgAAAA4KwAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAABzKwAA
AgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAABzKwAAAgUBAwBuAGUAdAAEBEF1AAAAuCsAAGwA
AABG4ysAAAUBBQBmAGEAbABzAGUABhAsAAAFASgANwA3ADMARQBEADYAOAAwADUAMQA2ADYANgA2
ADcAMABGADYARgAyADMARgBCADIANQAxADkARgBDADEAQgBBAEMAMgAxADgAQwA0AEMAQgADQVoA
AABxHQAAUQAAAEZuFwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4A
NQBG2R0AAAUBBABTAEgAQQAxAAYEHgAABQEDAFIAUwBBAANBWgAAADweAABRAAAARm4XAAAFARQA
MQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEYEHgAABQEDAFIAUwBBAAaz
HgAABQEEADIAMAA0ADgAAwFpAAAAPi0AAAIBKAAAADgrAAACBQEPAHMAZQBjAHUAcgBlAHMAdQBi
AC0ARABDAC0AQwBBAAQBHAAAAHMrAAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAHMrAAAC
BQEDAG4AZQB0AAQEAUoAAADCLQAAAgUBIAA3ADIANAAzAEQANgA2AEQAQgBGAEYAQQA5AEIAOQAy
ADQAMQBBAEQANwA0AEUAOQA4AEMANwA2AEIARAA3AEIABAEyAAAAMy4AAAIFARQAMgAwADEAMgAt
ADAANwAtADEAOQBUADEANgA6ADUANQA6ADMANwBaAAQBMgAAAIYuAAACBQEUADIAMAAxADcALQAw
ADcALQAxADkAVAAxADcAOgAwADUAOgAzADUAWgAEAZUAAADXLgAAAkFaAAAA/y4AAFEAAABGIi8A
AAUBBAB0AHIAdQBlAEZFEAAABQECADgANgBGWi8AAAUBBAB0AHIAdQBlAEa1LwAABQEEAHQAcgB1
AGUABggwAAAFAQQAdAByAHUAZQADQSsAAABWMAAAIgAAAEYiLwAABQEEAHQAcgB1AGUABpowAAAF
AQQAdAByAHUAZQADBARBkwQAAHIOAACOAAAARpsOAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABD
ADMARgA3AEMAMwBCAEQANwAzADEAQgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEA
OAAuAGMAZQByAAYUDwAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AAIB
OQAAABYrAAACAS4AAAA4KwAAAgUBEgBtAGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUA
dAAEBEF1AAAAuCsAAGwAAABG4ysAAAUBBQBmAGEAbABzAGUABhAsAAAFASgANQAxAEEANgAwADgA
NQBCAEEANwAwADUAQQBBADIANwAzAEQAOQAxAEYAMAA4ADEAQwBEAEIANABDADgAQgAxADUAMwAx
AEIARgA0AEIAMwADQVoAAABxHQAAUQAAAEZuFwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1
ADQAOQAuADEALgAxAC4ANQBG2R0AAAUBBABTAEgAQQAxAAYEHgAABQEDAFIAUwBBAANBWgAAADwe
AABRAAAARm4XAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEYE
HgAABQEDAFIAUwBBAAazHgAABQEEADIAMAA0ADgAAwFpAAAAPi0AAAIBKAAAADgrAAACBQEPAHMA
ZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAQBHAAAAHMrAAACBQEJAHMAZQBjAHUAcgBlAHMA
dQBiAAQBEAAAAHMrAAACBQEDAG4AZQB0AAQEATIAAADCLQAAAgUBFAAxADUAQQAxADAANgBFADAA
MAAwADAAMAAwADAAMAAwADAAMAAxAEQABAEyAAAAMy4AAAIFARQAMgAwADEAMgAtADAANwAtADIA
MABUADEAOAA6ADUAOQA6ADQANQBaAAQBMgAAAIYuAAACBQEUADIAMAAxADQALQAwADcALQAyADAA
VAAxADgAOgA1ADkAOgA0ADUAWgAEAW0BAADXLgAAAgFyAAAA8BYAAAJBZwAAAFEXAABeAAAARm4X
AAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgAxAAapFwAABQEVAFMAZQByAHYA
ZQByACAAQQB1AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuAAMEQUkAAAD/LgAAQAAAAEYiLwAABQEE
AHQAcgB1AGUARkUQAAAFAQIAQQAwAEZaLwAABQEEAHQAcgB1AGUABp40AAAFAQQAdAByAHUAZQAD
ASsAAAD8NAAAAgEgAAAALDUAAAIFAQsAMQA5ADIALgAxADYAOAAuADAALgA0AAQEAW0AAABuNQAA
AkFiAAAArjUAAFkAAAAGECwAAAUBKAA3ADcAMwBFAEQANgA4ADAANQAxADYANgA2ADYANwAwAEYA
NgBGADIAMwBGAEIAMgA1ADEAOQBGAEMAMQBCAEEAQwAyADEAOABDADQAQwBCAAMEBARBKgAAAKsI
AAAhAAAABtYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAAHAkAAGAAAABGUwkA
AAUBJgB7ADQANgA0ADIANwAxADcANQAtAEQANQBGAEUALQA0AEEARQAyAC0AQQA4ADEAQgAtADAA
NgA2ADkAOQA3ADUAMQAxADcAQwAxAH0ABr4JAAAFAQEANwADBAAAAEYACAoAACoqAAD4AwAAEAAA
AAAAAAAliylFsGbNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgA
EQAAAAAABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxAyEABAJQ
AFEAQAAAAAAAAEA4HiVFsGbNAfgNAACUHQAAAD8KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS5
8oy8fAQAAAErAwAAnjcAAAIBVgAAAM43AAACBQEmAHsANQA3ADMARQAzADEARgA4AC0AQQBBAEIA
QQAtADEAMQBEADAALQA4AEMAQwBCAC0AMAAwAEMAMAA0AEYAQwAyADkANQBFAEUAfQAEQS8AAABD
OAAACwAAAAZFEAAABQEBADIAAgUBCwBXAFQARABfAFUASQBfAE4ATwBOAEUABEElAAAAkTgAABwA
AABGRRAAAAUBAQAxAAbNOAAABQEEAHQAcgB1AGUAA0FFAAAAFzkAAAsAAAAGRRAAAAUBAQAxAAIF
ARYAVwBUAEQAXwBTAFQAQQBUAEUAQQBDAFQASQBPAE4AXwBWAEUAUgBJAEYAWQAEQTMAAAAoEAAA
KgAAAEZFEAAABQEIADgAMAAwADAAMAAwADAAMAAGozkAAAUBBAB0AHIAdQBlAANBNgAAAO85AAAt
AAAABiA6AAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQAA0EbAAAAcjoA
ABIAAABGmToAAAUBAAAGyjoAAAUBAAADQXEAAADuOgAAaAAAAEZFEAAABQEFADIAMwBDADAAMABG
NDsAAAUBBAB0AHIAdQBlAEZzOwAABQEEAHQAcgB1AGUARrI7AAAFAQQAdAByAHUAZQBG9zsAAAUB
BAB0AHIAdQBlAAY8PAAABQEEAHQAcgB1AGUAA0FeAAAAuRoAAFUAAAAG7BoAAAUBJgB7ADIANgBG
ADIANABFAEQANQAtADIAOQAwADUALQA0ADMANgBFAC0AOAAzAEQARgAtAEMAQgAxADcAOQA2ADEA
MwAxAEMAMgAwAH0AA0EqAAAAqwgAACEAAAAG1ggAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgA
ZQADQWkAAAAcCQAAYAAAAEZTCQAABQEmAHsANAA2ADQAMgA3ADEANwA1AC0ARAA1AEYARQAtADQA
QQBFADIALQBBADgAMQBCAC0AMAA2ADYAOQA5ADcANQAxADEANwBDADEAfQAGvgkAAAUBAQA4AANB
FAAAANkTAAALAAAABkUQAAAFAQEAMAADBAAAAEEARAD4AwAAKioAAIABAAARAAAAAAAAACWLKUWw
Zs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgA
BAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKkAIQAEAQsACgADAAAAAAAA
QCWLKUWwZs0BDADMADiNQgD4DZgh2mgRBfgNAABQHwAAAT8KAAAAAAAAAQUAAAAAAAUVAAAAoiLe
61T0+YS58oy8fAQAAAGjAAAAvgoAAAJBKgAAAKsIAAAhAAAABtYIAAAFAQwAaQBlAHgAcABsAG8A
cgBlAC4AZQB4AGUAA0FpAAAAHAkAAGAAAABGUwkAAAUBJgB7ADQANAAwADYANQA3AEIAMQAtAEQA
RgA4ADIALQA0ADUAQwA2AC0AQQBFAEUAMgAtADcAMQBFAEYAMQBCAEMAMQAzAEIANQBFAH0ABr4J
AAAFAQEAMQADBAAARt+XHACAAQAAKioAAIABAAASAAAAAAAAACWLKUWwZs0BDwEBAAwBZo+vqyYC
AAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAAT
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKkAIQAEASkAKAAFAAAAAAAAQCWLKUWwZs0BDADMADiN
QgD4DZgh2mgRBfgNAABQHwAAAj8KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAGj
AAAAfgwAAAJBKgAAAKsIAAAhAAAABtYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0Fp
AAAAHAkAAGAAAABGUwkAAAUBJgB7ADQANAAwADYANQA3AEIAMQAtAEQARgA4ADIALQA0ADUAQwA2
AC0AQQBFAEUAMgAtADcAMQBFAEYAMQBCAEMAMQAzAEIANQBFAH0ABr4JAAAFAQEAMgADBAAAADYA
QwCAAQAAKioAAIAEAAATAAAAAAAAADayKUWwZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAAC
AAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAKsDIQACAikAKQAFAAAAAAAAQCWLKUWwZs0BDADMADiNQgD4DZgh2mgRBfgNAABQ
HwAAAz8KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAGlAwAANg4AAAJBewAAAHIO
AAByAAAARpsOAAAFASwAQgA5AEMAMgA2ADMAQgBDADkARAA5ADYAOQA5ADAANgAzAEYAQQAzAEMA
RgAzAEMARQAzAEEARgBGAEQAOQAwAEYANAA0ADgAMAA2AEMAOAAuAGMAZQByAAYUDwAABQEEAGQA
YQBuAG8AA0GRAAAAZg8AAIgAAABGmw4AAAUBLAAxADcANgAxAEYAMgA2AEUAQgAwADgAMgA0ADcA
MABGADQANABCADIANwA4AEUAQgA2ADIARgBEADgAMwAxADkARgAzAEQARQAyADAAMQA4AC4AYwBl
AHIABhQPAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEAA0F9AAAAKBAAAHQAAABG
RRAAAAUBAQAyAAZKZgAAQzgAABXAJwBDAEUAUgBUAF8AVgBFAFIASQBGAFkAXwBDAEEAQwBIAEUA
XwBPAE4ATABZAF8AQgBBAFMARQBEAF8AUgBFAFYATwBDAEEAVABJAE8ATgAAAAUBBAB0AHIAdQBl
AANBjgAAANYQAACFAAAARhERAAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQANQA6
ADUAMgAuADMAOQAwAFoARmYRAAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQANQA6
ADUAMgAuADMAOQAwAFoABr8RAAAFAQUAUABUADEANQBTAANBcAAAAAcSAABnAAAARjoSAAAFAQEA
MABGWRIAAAUBCAA4ADAAMAA5ADIAMAAxADAARngSAAAFAQEAMABGmRIAAAUBCABQAFQAMQA1AE0A
NAAyAFMABuISAAAFAQsAYwBzAHYAYQBsAGkAZAAuAGQAbABsAANBKgAAAKsIAAAhAAAABtYIAAAF
AQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAAHAkAAGAAAABGUwkAAAUBJgB7ADQANAAw
ADYANQA3AEIAMQAtAEQARgA4ADIALQA0ADUAQwA2AC0AQQBFAEUAMgAtADcAMQBFAEYAMQBCAEMA
MQAzAEIANQBFAH0ABr4JAAAFAQEAMwADQV0AAADZEwAAGQAAAAZFEAAABQEIADgAMAAwADkAMgAw
ADEAMAACBQEbAFQAaABlACAAYwBlAHIAdABpAGYAaQBjAGEAdABlACAAaQBzACAAcgBlAHYAbwBr
AGUAZAAuAAQEAABFAHiABAAAKioAAIANAAAUAAAAAAAAADayKUWwZs0BDwEBAAwBZo+vqyYCAAAU
AAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAKcMIQAEAFoAWgAAAgAAAAAAQDayKUWwZs0BDADMADiNQgD4
DZgh2mgRBfgNAABQHwAABD8KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAGhDAAA
VioAAAJB/QMAAHIOAACIAAAARpsOAAAFASwAMQA3ADYAMQBGADIANgBFAEIAMAA4ADIANAA3ADAA
RgA0ADQAQgAyADcAOABFAEIANgAyAEYARAA4ADMAMQA5AEYAMwBEAEUAMgAwADEAOAAuAGMAZQBy
AAYUDwAABQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAIBaQAAABYrAAACASgAAAA4
KwAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAABzKwAAAgUBCQBzAGUA
YwB1AHIAZQBzAHUAYgAEARAAAABzKwAAAgUBAwBuAGUAdAAEBEF1AAAAuCsAAGwAAABG4ysAAAUB
BQBmAGEAbABzAGUABhAsAAAFASgANwA3ADMARQBEADYAOAAwADUAMQA2ADYANgA2ADcAMABGADYA
RgAyADMARgBCADIANQAxADkARgBDADEAQgBBAEMAMgAxADgAQwA0AEMAQgADQVoAAABxHQAAUQAA
AEZuFwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBG2R0AAAUB
BABTAEgAQQAxAAYEHgAABQEDAFIAUwBBAANBWgAAADweAABRAAAARm4XAAAFARQAMQAuADIALgA4
ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEYEHgAABQEDAFIAUwBBAAazHgAABQEEADIA
MAA0ADgAAwFpAAAAPi0AAAIBKAAAADgrAAACBQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0A
QwBBAAQBHAAAAHMrAAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAHMrAAACBQEDAG4AZQB0
AAQEAUoAAADCLQAAAgUBIAA3ADIANAAzAEQANgA2AEQAQgBGAEYAQQA5AEIAOQAyADQAMQBBAEQA
NwA0AEUAOQA4AEMANwA2AEIARAA3AEIABAEyAAAAMy4AAAIFARQAMgAwADEAMgAtADAANwAtADEA
OQBUADEANgA6ADUANQA6ADMANwBaAAQBMgAAAIYuAAACBQEUADIAMAAxADcALQAwADcALQAxADkA
VAAxADcAOgAwADUAOgAzADUAWgAEAZUAAADXLgAAAkFaAAAA/y4AAFEAAABGIi8AAAUBBAB0AHIA
dQBlAEZFEAAABQECADgANgBGWi8AAAUBBAB0AHIAdQBlAEa1LwAABQEEAHQAcgB1AGUABggwAAAF
AQQAdAByAHUAZQADQSsAAABWMAAAIgAAAEYiLwAABQEEAHQAcgB1AGUABpowAAAFAQQAdAByAHUA
ZQADBARB9wcAAHIOAAByAAAARpsOAAAFASwAQgA5AEMAMgA2ADMAQgBDADkARAA5ADYAOQA5ADAA
NgAzAEYAQQAzAEMARgAzAEMARQAzAEEARgBGAEQAOQAwAEYANAA0ADgAMAA2AEMAOAAuAGMAZQBy
AAYUDwAABQEEAGQAYQBuAG8AAgFsAAAAFisAAAIBEgAAADgrAAACBQEEAGQAYQBuAG8ABAEUAAAA
OCsAAAIFAQUAVQBzAGUAcgBzAAQBHAAAAHMrAAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAA
AHMrAAACBQEDAG4AZQB0AAQEQXUAAAC4KwAAbAAAAEbjKwAABQEFAGYAYQBsAHMAZQAGECwAAAUB
KAA0AEMAMwBGADYAMAAwADcAMQAxADQARQAyADEAMwA1ADEARQBGADcARgAzADIANgA1AEIAQwBE
ADEAMwBBAEUAOABCADQANAA5AEMARABBAANBWgAAAHEdAABRAAAARm4XAAAFARQAMQAuADIALgA4
ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEbZHQAABQEEAFMASABBADEABgQeAAAFAQMA
UgBTAEEAA0FaAAAAPB4AAFEAAABGbhcAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkA
LgAxAC4AMQAuADEARgQeAAAFAQMAUgBTAEEABrMeAAAFAQQAMgAwADQAOAADAWkAAAA+LQAAAgEo
AAAAOCsAAAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAAcysAAAIFAQkA
cwBlAGMAdQByAGUAcwB1AGIABAEQAAAAcysAAAIFAQMAbgBlAHQABAQBMgAAAMItAAACBQEUADEA
NQBBADIAQwBGAEQAOQAwADAAMAAwADAAMAAwADAAMAAwADEARQAEATIAAAAzLgAAAgUBFAAyADAA
MQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMAAxADoANAAyAFoABAEyAAAAhi4AAAIFARQAMgAwADEA
MwAtADAANwAtADIAMABUADEAOQA6ADAAMQA6ADQAMgBaAAQBXQIAANcuAAACAUQBAADwFgAAAkFz
AAAAURcAAGoAAABGbhcAAAUBFgAxAC4AMwAuADYALgAxAC4ANAAuADEALgAzADEAMQAuADEAMAAu
ADMALgA0AAapFwAABQEWAEUAbgBjAHIAeQBwAHQAaQBuAGcAIABGAGkAbABlACAAUwB5AHMAdABl
AG0AA0FVAAAAURcAAEwAAABGbhcAAAUBEQAxAC4AMwAuADYALgAxAC4ANQAuADUALgA3AC4AMwAu
ADQABqkXAAAFAQwAUwBlAGMAdQByAGUAIABFAG0AYQBpAGwAA0FnAAAAURcAAF4AAABGbhcAAAUB
EQAxAC4AMwAuADYALgAxAC4ANQAuADUALgA3AC4AMwAuADIABqkXAAAFARUAQwBsAGkAZQBuAHQA
IABBAHUAdABoAGUAbgB0AGkAYwBhAHQAaQBvAG4AAwRBSQAAAP8uAABAAAAARiIvAAAFAQQAdABy
AHUAZQBGRRAAAAUBAgBBADAARlovAAAFAQQAdAByAHUAZQAGnjQAAAUBBAB0AHIAdQBlAAMBbQAA
AG41AAACQWIAAACuNQAAWQAAAAYQLAAABQEoADcANwAzAEUARAA2ADgAMAA1ADEANgA2ADYANgA3
ADAARgA2AEYAMgAzAEYAQgAyADUAMQA5AEYAQwAxAEIAQQBDADIAMQA4AEMANABDAEIAAwQBSQAA
APw0AAACAT4AAAD7cgAAUCcAANM5AwBVAFAATgAAAAIFARIAZABhAG4AbwBAAHMAZQBjAHUAcgBl
AHMAdQBiAC4AbgBlAHQABAQEAVgCAABAcwAANDsAAHNyCgBQAHIAbwBwAGUAcgB0AGkAZQBzAAAA
AkEvAgAAaHMAAGYPAAB+Ww8ASwBlAHkAUAByAG8AdgBpAGQAZQByAEkAbgBmAG8AAAD+AQAARskl
AAAFAQ0AUABSAE8AVgBfAFIAUwBBAF8ARgBVAEwATABGvHMAAJowAADeiQwAdAB5AHAAZQBDAG8A
bgBzAHQAYQBuAHQAAAAFAQEAMQBG6XMAAAgwAAAc2AwAcAByAG8AdgBpAGQAZQByAE4AYQBtAGUA
AAAFAS4ATQBpAGMAcgBvAHMAbwBmAHQAIABFAG4AaABhAG4AYwBlAGQAIABDAHIAeQBwAHQAbwBn
AHIAYQBwAGgAaQBjACAAUAByAG8AdgBpAGQAZQByACAAdgAxAC4AMABGcHQAAKM5AADahAcAawBl
AHkAUwBwAGUAYwAAAAUBDgBBAFQAXwBLAEUAWQBFAFgAQwBIAEEATgBHAEUARq10AABocwAAPkgP
AGsAZQB5AFMAcABlAGMAQwBvAG4AcwB0AGEAbgB0AAAABQEBADEABuB0AACCIwAA7MwNAGMAbwBu
AHQAYQBpAG4AZQByAE4AYQBtAGUAAAAFAUUAZABlADQANgAxAGIANwA0AGYAOQAxAGEAMAA2ADcA
ZgAzADcAYQBhAGMAOAAxADIAYQAzADgAOAA5AGIAMgBmAF8AMAAzADAAOQAzADIANgBjAC0AMQBi
ADYAOAAtADQAOAA1AGEALQBiAGMAOQBjAC0AYgAzAGUANABjAGMANQBjADkAYwAzADQAAwQEQSoA
AACrCAAAIQAAAAbWCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAABwJAABgAAAA
RlMJAAAFASYAewA0ADQAMAA2ADUANwBCADEALQBEAEYAOAAyAC0ANAA1AEMANgAtAEEARQBFADIA
LQA3ADEARQBGADEAQgBDADEAMwBCADUARQB9AAa+CQAABQEBADQAAwQAAAAzAEMARgCADQAAKioA
AOgJAAAVAAAAAAAAAAAAAAAAAAAADwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAA
AAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
ABIJIQACAgsACwADAAAAAAAAQDayKUWwZs0BDADMADiNQgD4DZgh2mgRBfgNAABQHwAABT8KAAAA
AAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAEMCQAA3hQAAAJBewAAAHIOAAByAAAARpsO
AAAFASwAQgA5AEMAMgA2ADMAQgBDADkARAA5ADYAOQA5ADAANgAzAEYAQQAzAEMARgAzAEMARQAz
AEEARgBGAEQAOQAwAEYANAA0ADgAMAA2AEMAOAAuAGMAZQByAAYUDwAABQEEAGQAYQBuAG8AAwEF
AAAA8BYAAANBmgAAACgQAACRAAAARkUQAAAFAQgAQwAwADAAMAAwADAAMAAwAEaaGAAABQEEAHQA
cgB1AGUABt13AAD8NAAACBkmAEMARQBSAFQAXwBDAEgAQQBJAE4AXwBSAEUAVgBPAEMAQQBUAEkA
TwBOAF8AQwBIAEUAQwBLAF8AQwBBAEMASABFAF8ATwBOAEwAWQAAAAUBBAB0AHIAdQBlAANBGgAA
AIUZAAARAAAABrYZAAAFAQQAdQBzAGUAcgADQboGAAC5GgAAbgAAAEbsGgAABQEmAHsANQBBAEQA
RABEAEMAOQA2AC0ARgBBAEEAMgAtADQAMQAyADEALQBCADcANwBEAC0AMQBDAEYAQgBDAEMANABB
AEEAQgBFAEQAfQAGWxsAAAUBCABQAFQAMQA1AE0ANAAyAFMAAgGSAAAAsRsAAAJBWQAAANsbAABQ
AAAARkUQAAAFAQEANAAGAnkAAKkXAACrghUAQwBFAFIAVABfAFQAUgBVAFMAVABfAEkAUwBfAFIA
RQBWAE8ASwBFAEQAAAAFAQQAdAByAHUAZQADQSkAAAAUHAAAIAAAAEZFEAAABQEDADEAMAAwAAZK
HAAABQEEAHQAcgB1AGUAAwQBlQMAAKkcAAACQXsAAAByDgAAcgAAAEabDgAABQEsAEIAOQBDADIA
NgAzAEIAQwA5AEQAOQA2ADkAOQAwADYAMwBGAEEAMwBDAEYAMwBDAEUAMwBBAEYARgBEADkAMABG
ADQANAA4ADAANgBDADgALgBjAGUAcgAGFA8AAAUBBABkAGEAbgBvAANBWgAAAHEdAABRAAAARm4X
AAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEbZHQAABQEEAFMA
SABBADEABgQeAAAFAQMAUgBTAEEAA0FaAAAAPB4AAFEAAABGbhcAAAUBFAAxAC4AMgAuADgANAAw
AC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARgQeAAAFAQMAUgBTAEEABrMeAAAFAQQAMgAwADQA
OAADAW8AAACxGwAAAkElAAAA2xsAABwAAABGRRAAAAUBAQA0AAYCeQAABQEEAHQAcgB1AGUAA0E6
AAAAFBwAADEAAABGRRAAAAUBAwAxADAAMgBGLB8AAAUBBAB0AHIAdQBlAAZKHAAABQEEAHQAcgB1
AGUAAwQBRAEAAJwfAAACQXMAAABRFwAAagAAAEZuFwAABQEWADEALgAzAC4ANgAuADEALgA0AC4A
MQAuADMAMQAxAC4AMQAwAC4AMwAuADQABqkXAAAFARYARQBuAGMAcgB5AHAAdABpAG4AZwAgAEYA
aQBsAGUAIABTAHkAcwB0AGUAbQADQVUAAABRFwAATAAAAEZuFwAABQERADEALgAzAC4ANgAuADEA
LgA1AC4ANQAuADcALgAzAC4ANAAGqRcAAAUBDABTAGUAYwB1AHIAZQAgAEUAbQBhAGkAbAADQWcA
AABRFwAAXgAAAEZuFwAABQERADEALgAzAC4ANgAuADEALgA1AC4ANQAuADcALgAzAC4AMgAGqRcA
AAUBFQBDAGwAaQBlAG4AdAAgAEEAdQB0AGgAZQBuAHQAaQBjAGEAdABpAG8AbgADBAEFAAAAPSAA
AANBhQAAAGsgAAAZAAAABpogAAAFAQgAUABUADEANQBNADQAMgBTAAJBXQAAANwgAAAZAAAABkUQ
AAAFAQgAOAAwADAAOQAyADAAMQAwAAIFARsAVABoAGUAIABjAGUAcgB0AGkAZgBpAGMAYQB0AGUA
IABpAHMAIAByAGUAdgBvAGsAZQBkAC4ABAQEAQwCAACpHAAAAkGRAAAAcg4AAIgAAABGmw4AAAUB
LAAxADcANgAxAEYAMgA2AEUAQgAwADgAMgA0ADcAMABGADQANABCADIANwA4AEUAQgA2ADIARgBE
ADgAMwAxADkARgAzAEQARQAyADAAMQA4AC4AYwBlAHIABhQPAAAFAQ8AcwBlAGMAdQByAGUAcwB1
AGIALQBEAEMALQBDAEEAA0FaAAAAcR0AAFEAAABGbhcAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAx
ADMANQA0ADkALgAxAC4AMQAuADUARtkdAAAFAQQAUwBIAEEAMQAGBB4AAAUBAwBSAFMAQQADQVoA
AAA8HgAAUQAAAEZuFwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4A
MQBGBB4AAAUBAwBSAFMAQQAGsx4AAAUBBAAyADAANAA4AAMBbwAAALEbAAACQRQAAADbGwAACwAA
AAZFEAAABQEBADAAA0FLAAAAFBwAAEIAAABGRRAAAAUBAwAxADAAQwBGuiIAAAUBBAB0AHIAdQBl
AEYVIwAABQEEAHQAcgB1AGUABkocAAAFAQQAdAByAHUAZQADBEEaAAAAnB8AABEAAAAGgiMAAAUB
BAB0AHIAdQBlAANBGgAAAD0gAAARAAAABoIjAAAFAQQAdAByAHUAZQADBARBKgAAAKsIAAAhAAAA
BtYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAAHAkAAGAAAABGUwkAAAUBJgB7
ADQANAAwADYANQA3AEIAMQAtAEQARgA4ADIALQA0ADUAQwA2AC0AQQBFAEUAMgAtADcAMQBFAEYA
MQBCAEMAMQAzAEIANQBFAH0ABr4JAAAFAQEANQADQV0AAADZEwAAGQAAAAZFEAAABQEIADgAMAAw
ADkAMgAwADEAMAACBQEbAFQAaABlACAAYwBlAHIAdABpAGYAaQBjAGEAdABlACAAaQBzACAAcgBl
AHYAbwBrAGUAZAAuAAQEAAAIAEMA6AkAAHAAdQB0AGUAcgAAAAIFARIAbQBhAGkAbAAuAHMAZQBj
AHUAcgBlAHMAdQBiAC4AbgBlAHQABEH//zIAAACgLggAUwBlAGMAdQByAGkAdAB5AAAAFwAAAAZm
TAYAVQBzAGUAcgBJAEQAAAAODAATAwQBEwAcAAAANUQIAFUAcwBlAHIARABhAHQAYQAAAAIOEwAh
BAQAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwA
EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABXASEABAEpACgABQAAAAAAAEBfU7U8sGbNAQwAzABI
JmsAVCH0CxAmEQVUIQAAwCEAAO0+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAAB
UQEAAIf7GQBDAGUAcgB0AFYAZQByAGkAZgB5AFIAZQB2AG8AYwBhAHQAaQBvAG4AUwB0AGEAcgB0
AAAAAkFcAAAAOOsMAEUAdgBlAG4AdABBAHUAeABJAG4AZgBvAAAAOQAAAAaa4gsAUAByAG8AYwBl
AHMAcwBOAGEAbQBlAAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBsQAAAFDbEgBDAG8A
cgByAGUAbABhAHQAaQBvAG4AQQB1AHgASQBuAGYAbwAAAIIAAABGIDsGAFQAYQBzAGsASQBkAAAA
BQEmAHsAMgA2ADcANQBFAEYAQQBFAC0AMgA0AEUAQwAtADQAOQAwAEMALQBBADIAMABGAC0ARgA5
ADgARQA4AEUANgBCADgAQQBEADMAfQAGSPgJAFMAZQBxAE4AdQBtAGIAZQByAAAABQEBADIAAwQA
AAAAAAAgAAAAGAAAAAEAAAAAAAAAAQAAABgAAADtPgoAAAAAAAIHAAAQAAAAEAAAAOIGAADKBgAA
DwEBAAwAZo+vq35Uc11NFFtjek8cq6sEAAAPAQEAQf//nwQAALoMBQBFAHYAZQBuAHQAAAB/AAAA
BrwPBQB4AG0AbABuAHMAAAAFATUAaAB0AHQAcAA6AC8ALwBzAGMAaABlAG0AYQBzAC4AbQBpAGMA
cgBvAHMAbwBmAHQALgBjAG8AbQAvAHcAaQBuAC8AMgAwADAANAAvADAAOAAvAGUAdgBlAG4AdABz
AC8AZQB2AGUAbgB0AAIB///gAwAAb1QGAFMAeQBzAHQAZQBtAAAAAkH//7sAAADxewgAUAByAG8A
dgBpAGQAZQByAAAAoAAAAEZLlQQATgBhAG0AZQAAAAUBFwBNAGkAYwByAG8AcwBvAGYAdAAtAFcA
aQBuAGQAbwB3AHMALQBDAEEAUABJADIABikVBABHAHUAaQBkAAAABQEmAHsANQBiAGIAYwBhADQA
YQA4AC0AYgAyADAAOQAtADQAOABkAGMALQBhADgAYwA3AC0AYgAyADMAZAAzAGUANQAyADEANgBm
AGIAfQADQQMAPQAAAPVhBwBFAHYAZQBuAHQASQBEAAAAHwAAAAYp2goAUQB1AGEAbABpAGYAaQBl
AHIAcwAAAA4EAAYCDgMABgQBCwAaAAAAGAkHAFYAZQByAHMAaQBvAG4AAAACDgsABAQBAAAWAAAA
ZM4FAEwAZQB2AGUAbAAAAAIOAAAEBAECABQAAABFewQAVABhAHMAawAAAAIOAgAGBAEBABgAAACu
HgYATwBwAGMAbwBkAGUAAAACDgEABAQBBQAcAAAAas8IAEsAZQB5AHcAbwByAGQAcwAAAAIOBQAV
BEH//0AAAAA7jgsAVABpAG0AZQBDAHIAZQBhAHQAZQBkAAAAHwAAAAY8ewoAUwB5AHMAdABlAG0A
VABpAG0AZQAAAA4GABEDAQoAJgAAAEYDDQBFAHYAZQBuAHQAUgBlAGMAbwByAGQASQBEAAAAAg4K
AAoEQf//bQAAAKLyCwBDAG8AcgByAGUAbABhAHQAaQBvAG4AAABMAAAARgrxCgBBAGMAdABpAHYA
aQB0AHkASQBEAAAADgcADwY1xREAUgBlAGwAYQB0AGUAZABBAGMAdABpAHYAaQB0AHkASQBEAAAA
DhIADwNB//9VAAAAuLUJAEUAeABlAGMAdQB0AGkAbwBuAAAAOAAAAEYK1wkAUAByAG8AYwBlAHMA
cwBJAEQAAAAOCAAIBoU5CABUAGgAcgBlAGEAZABJAEQAAAAOCQAIAwH//2AAAACDYQcAQwBoAGEA
bgBuAGUAbAAAAAIFASMATQBpAGMAcgBvAHMAbwBmAHQALQBXAGkAbgBkAG8AdwBzAC0AQwBBAFAA
SQAyAC8ATwBwAGUAcgBhAHQAaQBvAG4AYQBsAAQB//9AAAAAO24IAEMAbwBtAHAAdQB0AGUAcgAA
AAIFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQABEH//zIAAACgLggAUwBl
AGMAdQByAGkAdAB5AAAAFwAAAAZmTAYAVQBzAGUAcgBJAEQAAAAODAATAwQBEwAcAAAANUQIAFUA
cwBlAHIARABhAHQAYQAAAAIOEwAhBAQAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQ
AA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdASEABAELAAoA
AwAAAAAAAEBfU7U8sGbNAQwAzABIJmsAVCH0CxAmEQVUIQAAwCEAAOw+CgAAAAAAAAEFAAAAAAAF
FQAAAKIi3utU9PmEufKMvHwEAAABVwEAAIZnHABDAGUAcgB0AEcAZQB0AEMAZQByAHQAaQBmAGkA
YwBhAHQAZQBDAGgAYQBpAG4AUwB0AGEAcgB0AAAAAkFcAAAAOOsMAEUAdgBlAG4AdABBAHUAeABJ
AG4AZgBvAAAAOQAAAAaa4gsAUAByAG8AYwBlAHMAcwBOAGEAbQBlAAAABQEMAGkAZQB4AHAAbABv
AHIAZQAuAGUAeABlAANBsQAAAFDbEgBDAG8AcgByAGUAbABhAHQAaQBvAG4AQQB1AHgASQBuAGYA
bwAAAIIAAABGIDsGAFQAYQBzAGsASQBkAAAABQEmAHsAMgA2ADcANQBFAEYAQQBFAC0AMgA0AEUA
QwAtADQAOQAwAEMALQBBADIAMABGAC0ARgA5ADgARQA4AEUANgBCADgAQQBEADMAfQAGSPgJAFMA
ZQBxAE4AdQBtAGIAZQByAAAABQEBADEAAwQAAAAAAAAgAAAAGAAAAAEAAAAAAAAAAQAAABgAAADs
PgoAAAAAADAMAAAQAAAAEAAAABAMAAD4CwAADwEBAAwAZo+vq35Uc11NFFtjek8cq6sEAAAPAQEA
Qf//nwQAALoMBQBFAHYAZQBuAHQAAAB/AAAABrwPBQB4AG0AbABuAHMAAAAFATUAaAB0AHQAcAA6
AC8ALwBzAGMAaABlAG0AYQBzAC4AbQBpAGMAcgBvAHMAbwBmAHQALgBjAG8AbQAvAHcAaQBuAC8A
MgAwADAANAAvADAAOAAvAGUAdgBlAG4AdABzAC8AZQB2AGUAbgB0AAIB///gAwAAb1QGAFMAeQBz
AHQAZQBtAAAAAkH//7sAAADxewgAUAByAG8AdgBpAGQAZQByAAAAoAAAAEZLlQQATgBhAG0AZQAA
AAUBFwBNAGkAYwByAG8AcwBvAGYAdAAtAFcAaQBuAGQAbwB3AHMALQBDAEEAUABJADIABikVBABH
AHUAaQBkAAAABQEmAHsANQBiAGIAYwBhADQAYQA4AC0AYgAyADAAOQAtADQAOABkAGMALQBhADgA
YwA3AC0AYgAyADMAZAAzAGUANQAyADEANgBmAGIAfQADQQMAPQAAAPVhBwBFAHYAZQBuAHQASQBE
AAAAHwAAAAYp2goAUQB1AGEAbABpAGYAaQBlAHIAcwAAAA4EAAYCDgMABgQBCwAaAAAAGAkHAFYA
ZQByAHMAaQBvAG4AAAACDgsABAQBAAAWAAAAZM4FAEwAZQB2AGUAbAAAAAIOAAAEBAECABQAAABF
ewQAVABhAHMAawAAAAIOAgAGBAEBABgAAACuHgYATwBwAGMAbwBkAGUAAAACDgEABAQBBQAcAAAA
as8IAEsAZQB5AHcAbwByAGQAcwAAAAIOBQAVBEH//0AAAAA7jgsAVABpAG0AZQBDAHIAZQBhAHQA
ZQBkAAAAHwAAAAY8ewoAUwB5AHMAdABlAG0AVABpAG0AZQAAAA4GABEDAQoAJgAAAEYDDQBFAHYA
ZQBuAHQAUgBlAGMAbwByAGQASQBEAAAAAg4KAAoEQf//bQAAAKLyCwBDAG8AcgByAGUAbABhAHQA
aQBvAG4AAABMAAAARgrxCgBBAGMAdABpAHYAaQB0AHkASQBEAAAADgcADwY1xREAUgBlAGwAYQB0
AGUAZABBAGMAdABpAHYAaQB0AHkASQBEAAAADhIADwNB//9VAAAAuLUJAEUAeABlAGMAdQB0AGkA
bwBuAAAAOAAAAEYK1wkAUAByAG8AYwBlAHMAcwBJAEQAAAAOCAAIBoU5CABUAGgAcgBlAGEAZABJ
AEQAAAAOCQAIAwH//2AAAACDYQcAQwBoAGEAbgBuAGUAbAAAAAIFASMATQBpAGMAcgBvAHMAbwBm
AHQALQBXAGkAbgBkAG8AdwBzAC0AQwBBAFAASQAyAC8ATwBwAGUAcgBhAHQAaQBvAG4AYQBsAAQB
//9AAAAAO24IAEMAbwBtAHAAdQB0AGUAcgAAAAIFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMA
dQBiAC4AbgBlAHQABEH//zIAAACgLggAUwBlAGMAdQByAGkAdAB5AAAAFwAAAAZmTAYAVQBzAGUA
cgBJAEQAAAAODAATAwQBEwAcAAAANUQIAFUAcwBlAHIARABhAHQAYQAAAAIOEwAhBAQAFAAAAAEA
BAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAACLBiEABAJQAFEAQAAAAAAAAEDY0LE8sGbNAQwAzABIJmsAVCH0CxAm
EQVUIQAAwCEAAOs+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABhQYAACNwDgBX
AGkAbgBWAGUAcgBpAGYAeQBUAHIAdQBzAHQAAAACAWgAAADRowgAQQBjAHQAaQBvAG4ASQBEAAAA
AgUBJgB7ADUANwAzAEUAMwAxAEYAOAAtAEEAQQBCAEEALQAxADEARAAwAC0AOABDAEMAQgAtADAA
MABDADAANABGAEMAMgA5ADUARQBFAH0ABEFNAAAAlQoIAFUASQBDAGgAbwBpAGMAZQAAABcAAAAG
cYoFAHYAYQBsAHUAZQAAAAUBAQAyAAIFAQsAVwBUAEQAXwBVAEkAXwBOAE8ATgBFAARBfQAAAIpP
DwBSAGUAdgBvAGMAYQB0AGkAbwBuAEMAaABlAGMAawAAAFQAAABGcYoFAHYAYQBsAHUAZQAAAAUB
AQAxAAbLUhUAVwBUAEQAXwBSAEUAVgBPAEsARQBfAFcASABPAEwARQBDAEgAQQBJAE4AAAAFAQQA
dAByAHUAZQADQWkAAADHwwsAUwB0AGEAdABlAEEAYwB0AGkAbwBuAAAAFwAAAAZxigUAdgBhAGwA
dQBlAAAABQEBADEAAgUBFgBXAFQARABfAFMAVABBAFQARQBBAEMAVABJAE8ATgBfAFYARQBSAEkA
RgBZAARBeQAAAIcEBQBGAGwAYQBnAHMAAABkAAAARnGKBQB2AGEAbAB1AGUAAAAFAQgAOAAwADAA
MAAwADAAMAAwAAZa/RYAQwBQAEQAXwBVAFMARQBfAE4AVAA1AF8AQwBIAEEASQBOAF8ARgBMAEEA
RwAAAAUBBAB0AHIAdQBlAANBbgAAACUFDwBDAGUAcgB0AGkAZgBpAGMAYQB0AGUASQBuAGYAbwAA
AEUAAAAGTQQLAGQAaQBzAHAAbABhAHkATgBhAG0AZQAAAAUBEgBtAGEAaQBsAC4AcwBlAGMAdQBy
AGUAcwB1AGIALgBuAGUAdAADQV8AAAASKQoARABpAGcAZQBzAHQASQBuAGYAbwAAAEAAAABGyyUP
AGQAaQBnAGUAcwB0AEEAbABnAG8AcgBpAHQAaABtAAAABQEAAAaEKwYAZABpAGcAZQBzAHQAAAAF
AQAAA0F3AQAAiqkQAFIAZQBnAFAAbwBsAGkAYwB5AFMAZQB0AHQAaQBuAGcAAABMAQAARnGKBQB2
AGEAbAB1AGUAAAAFAQUAMgAzAEMAMAAwAEazaRIAVwBUAFAARgBfAE8ARgBGAEwASQBOAEUATwBL
AF8ASQBOAEQAAAAFAQQAdAByAHUAZQBG9QwSAFcAVABQAEYAXwBPAEYARgBMAEkATgBFAE8ASwBf
AEMATwBNAAAABQEEAHQAcgB1AGUARq7pFQBXAFQAUABGAF8ATwBGAEYATABJAE4ARQBPAEsATgBC
AFUAXwBJAE4ARAAAAAUBBAB0AHIAdQBlAEbwjBUAVwBUAFAARgBfAE8ARgBGAEwASQBOAEUATwBL
AE4AQgBVAF8AQwBPAE0AAAAFAQQAdAByAHUAZQAGOv0ZAFcAVABQAEYAXwBJAEcATgBPAFIARQBS
AEUAVgBPAEMAQQBUAEkATwBOAE8ATgBUAFMAAAAFAQQAdAByAHUAZQADQZIAAAAK1xAAQwBlAHIA
dABpAGYAaQBjAGEAdABlAEMAaABhAGkAbgAAAGcAAAAGMjQIAGMAaABhAGkAbgBSAGUAZgAAAAUB
JgB7ADgARgBGADAARABGADEAMQAtADAANQBFADgALQA0ADQANABDAC0AOAAxADcAMAAtADcAOAA2
AEMARgAzADUAOQBDAEYANABEAH0AA0FcAAAAOOsMAEUAdgBlAG4AdABBAHUAeABJAG4AZgBvAAAA
OQAAAAaa4gsAUAByAG8AYwBlAHMAcwBOAGEAbQBlAAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUA
eABlAANBsQAAAFDbEgBDAG8AcgByAGUAbABhAHQAaQBvAG4AQQB1AHgASQBuAGYAbwAAAIIAAABG
IDsGAFQAYQBzAGsASQBkAAAABQEmAHsAQwAyAEYANABCADQAMAAxAC0AOQA4ADgARAAtADQANgA4
AEUALQA5ADUAMQAzAC0ANABBAEUARABFADQANwBGADAAQQA5ADYAfQAGSPgJAFMAZQBxAE4AdQBt
AGIAZQByAAAABQEBADgAA0EuAAAAXZgGAFIAZQBzAHUAbAB0AAAAFwAAAAZxigUAdgBhAGwAdQBl
AAAABQEBADAAAwQAAAAAAAAgAAAAGAAAAAEAAAAAAAAAAQAAABgAAADrPgoAAAAAAJQVAAAQAAAA
EAAAAHQVAABcFQAADwEBAAwAZo+vq35Uc11NFFtjek8cq6sEAAAPAQEAQf//nwQAALoMBQBFAHYA
ZQBuAHQAAAB/AAAABrwPBQB4AG0AbABuAHMAAAAFATUAaAB0AHQAcAA6AC8ALwBzAGMAaABlAG0A
YQBzAC4AbQBpAGMAcgBvAHMAbwBmAHQALgBjAG8AbQAvAHcAaQBuAC8AMgAwADAANAAvADAAOAAv
AGUAdgBlAG4AdABzAC8AZQB2AGUAbgB0AAIB///gAwAAb1QGAFMAeQBzAHQAZQBtAAAAAkH//7sA
AADxewgAUAByAG8AdgBpAGQAZQByAAAAoAAAAEZLlQQATgBhAG0AZQAAAAUBFwBNAGkAYwByAG8A
cwBvAGYAdAAtAFcAaQBuAGQAbwB3AHMALQBDAEEAUABJADIABikVBABHAHUAaQBkAAAABQEmAHsA
NQBiAGIAYwBhADQAYQA4AC0AYgAyADAAOQAtADQAOABkAGMALQBhADgAYwA3AC0AYgAyADMAZAAz
AGUANQAyADEANgBmAGIAfQADQQMAPQAAAPVhBwBFAHYAZQBuAHQASQBEAAAAHwAAAAYp2goAUQB1
AGEAbABpAGYAaQBlAHIAcwAAAA4EAAYCDgMABgQBCwAaAAAAGAkHAFYAZQByAHMAaQBvAG4AAAAC
DgsABAQBAAAWAAAAZM4FAEwAZQB2AGUAbAAAAAIOAAAEBAECABQAAABFewQAVABhAHMAawAAAAIO
AgAGBAEBABgAAACuHgYATwBwAGMAbwBkAGUAAAACDgEABAQBBQAcAAAAas8IAEsAZQB5AHcAbwBy
AGQAcwAAAAIOBQAVBEH//0AAAAA7jgsAVABpAG0AZQBDAHIAZQBhAHQAZQBkAAAAHwAAAAY8ewoA
UwB5AHMAdABlAG0AVABpAG0AZQAAAA4GABEDAQoAJgAAAEYDDQBFAHYAZQBuAHQAUgBlAGMAbwBy
AGQASQBEAAAAAg4KAAoEQf//bQAAAKLyCwBDAG8AcgByAGUAbABhAHQAaQBvAG4AAABMAAAARgrx
CgBBAGMAdABpAHYAaQB0AHkASQBEAAAADgcADwY1xREAUgBlAGwAYQB0AGUAZABBAGMAdABpAHYA
aQB0AHkASQBEAAAADhIADwNB//9VAAAAuLUJAEUAeABlAGMAdQB0AGkAbwBuAAAAOAAAAEYK1wkA
UAByAG8AYwBlAHMAcwBJAEQAAAAOCAAIBoU5CABUAGgAcgBlAGEAZABJAEQAAAAOCQAIAwH//2AA
AACDYQcAQwBoAGEAbgBuAGUAbAAAAAIFASMATQBpAGMAcgBvAHMAbwBmAHQALQBXAGkAbgBkAG8A
dwBzAC0AQwBBAFAASQAyAC8ATwBwAGUAcgBhAHQAaQBvAG4AYQBsAAQB//9AAAAAO24IAEMAbwBt
AHAAdQB0AGUAcgAAAAIFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQABEH/
/zIAAACgLggAUwBlAGMAdQByAGkAdAB5AAAAFwAAAAZmTAYAVQBzAGUAcgBJAEQAAAAODAATAwQB
EwAcAAAANUQIAFUAcwBlAHIARABhAHQAYQAAAAIOEwAhBAQAFAAAAAEABAABAAQAAgAGAAIABgAA
AAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AADvDyEABABaAFoAAAIAAAAAAEDY0LE8sGbNAQwAzABIJmsAVCH0CxAmEQVUIQAAwCEAAOo+CgAA
AAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAAB6Q8AAK6wCwBYADUAMAA5AE8AYgBqAGUA
YwB0AHMAAAACQecGAAC30gsAQwBlAHIAdABpAGYAaQBjAGEAdABlAAAAsAAAAEaXagcAZgBpAGwA
ZQBSAGUAZgAAAAUBLAAxADcANgAxAEYAMgA2AEUAQgAwADgAMgA0ADcAMABGADQANABCADIANwA4
AEUAQgA2ADIARgBEADgAMwAxADkARgAzAEQARQAyADAAMQA4AC4AYwBlAHIABjfDCwBzAHUAYgBq
AGUAYwB0AE4AYQBtAGUAAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEAAgGLAAAA
zMkHAFMAdQBiAGoAZQBjAHQAAAACAS4AAADLEAIAQwBOAAAAAgUBDwBzAGUAYwB1AHIAZQBzAHUA
YgAtAEQAQwAtAEMAQQAEASIAAAD/EAIARABDAAAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARYA
AAD/EAIARABDAAAAAgUBAwBuAGUAdAAEBEGrAAAADowMAFMAdQBiAGoAZQBjAHQASwBlAHkASQBE
AAAAiAAAAEYNpggAYwBvAG0AcAB1AHQAZQBkAAAABQEFAGYAYQBsAHMAZQAGLsoEAGgAYQBzAGgA
AAAFASgANwA3ADMARQBEADYAOAAwADUAMQA2ADYANgA2ADcAMABGADYARgAyADMARgBCADIANQAx
ADkARgBDADEAQgBBAEMAMgAxADgAQwA0AEMAQgADQbYAAABXjRIAUwBpAGcAbgBhAHQAdQByAGUA
QQBsAGcAbwByAGkAdABoAG0AAACHAAAARirTAwBvAGkAZAAAAAUBFAAxAC4AMgAuADgANAAwAC4A
MQAxADMANQA0ADkALgAxAC4AMQAuADUARnlxCABoAGEAcwBoAE4AYQBtAGUAAAAFAQQAUwBIAEEA
MQAGYcUNAHAAdQBiAGwAaQBjAEsAZQB5AE4AYQBtAGUAAAAFAQMAUgBTAEEAA0HEAAAA2QsSAFAA
dQBiAGwAaQBjAEsAZQB5AEEAbABnAG8AcgBpAHQAaABtAAAAlQAAAEYq0wMAbwBpAGQAAAAFARQA
MQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEZhxQ0AcAB1AGIAbABpAGMA
SwBlAHkATgBhAG0AZQAAAAUBAwBSAFMAQQAGHOsPAHAAdQBiAGwAaQBjAEsAZQB5AEwAZQBuAGcA
dABoAAAABQEEADIAMAA0ADgAAwGJAAAAeV0GAEkAcwBzAHUAZQByAAAAAgEuAAAAyxACAEMATgAA
AAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEiAAAA/xACAEQAQwAAAAIFAQkA
cwBlAGMAdQByAGUAcwB1AGIABAEWAAAA/xACAEQAQwAAAAIFAQMAbgBlAHQABAQBZAAAAL0EDABT
AGUAcgBpAGEAbABOAHUAbQBiAGUAcgAAAAIFASAANwAyADQAMwBEADYANgBEAEIARgBGAEEAOQBC
ADkAMgA0ADEAQQBEADcANABFADkAOABDADcANgBCAEQANwBCAAQBRgAAALKXCQBOAG8AdABCAGUA
ZgBvAHIAZQAAAAIFARQAMgAwADEAMgAtADAANwAtADEAOQBUADEANgA6ADUANQA6ADMANwBaAAQB
RAAAAMkNCABOAG8AdABBAGYAdABlAHIAAAACBQEUADIAMAAxADcALQAwADcALQAxADkAVAAxADcA
OgAwADUAOgAzADUAWgAEAcEBAAA0+AoARQB4AHQAZQBuAHMAaQBvAG4AcwAAAAJBNgEAAGJtCABL
AGUAeQBVAHMAYQBnAGUAAAAbAQAARh+XCABjAHIAaQB0AGkAYwBhAGwAAAAFAQQAdAByAHUAZQBG
cYoFAHYAYQBsAHUAZQAAAAUBAgA4ADYARrhwIABDAEUAUgBUAF8ARABJAEcASQBUAEEATABfAFMA
SQBHAE4AQQBUAFUAUgBFAF8ASwBFAFkAXwBVAFMAQQBHAEUAAAAFAQQAdAByAHUAZQBG35ccAEMA
RQBSAFQAXwBLAEUAWQBfAEMARQBSAFQAXwBTAEkARwBOAF8ASwBFAFkAXwBVAFMAQQBHAEUAAAAF
AQQAdAByAHUAZQAGHAAXAEMARQBSAFQAXwBDAFIATABfAFMASQBHAE4AXwBLAEUAWQBfAFUAUwBB
AEcARQAAAAUBBAB0AHIAdQBlAANBZQAAAKjyEABCAGEAcwBpAGMAQwBvAG4AcwB0AHIAYQBpAG4A
dABzAAAAOgAAAEYflwgAYwByAGkAdABpAGMAYQBsAAAABQEEAHQAcgB1AGUABp4YAgBjAEEAAAAF
AQQAdAByAHUAZQADBARBwwcAALfSCwBDAGUAcgB0AGkAZgBpAGMAYQB0AGUAAAC2AAAARpdqBwBm
AGkAbABlAFIAZQBmAAAABQEsADEANgA4ADgAOQA1ADEAQwA0AEQAQwAzAEYANwBDADMAQgBEADcA
MwAxAEIARABFADAARQBEADYAMwA1ADcAMwBGADkAOQAzAEQANAAxADgALgBjAGUAcgAGN8MLAHMA
dQBiAGoAZQBjAHQATgBhAG0AZQAAAAUBEgBtAGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBu
AGUAdAACAU8AAADMyQcAUwB1AGIAagBlAGMAdAAAAAIBNAAAAMsQAgBDAE4AAAACBQESAG0AYQBp
AGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AAQEQasAAAAOjAwAUwB1AGIAagBlAGMAdABL
AGUAeQBJAEQAAACIAAAARg2mCABjAG8AbQBwAHUAdABlAGQAAAAFAQUAZgBhAGwAcwBlAAYuygQA
aABhAHMAaAAAAAUBKAA1ADEAQQA2ADAAOAA1AEIAQQA3ADAANQBBAEEAMgA3ADMARAA5ADEARgAw
ADgAMQBDAEQAQgA0AEMAOABCADEANQAzADEAQgBGADQAQgAzAANBtgAAAFeNEgBTAGkAZwBuAGEA
dAB1AHIAZQBBAGwAZwBvAHIAaQB0AGgAbQAAAIcAAABGKtMDAG8AaQBkAAAABQEUADEALgAyAC4A
OAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBGeXEIAGgAYQBzAGgATgBhAG0AZQAAAAUB
BABTAEgAQQAxAAZhxQ0AcAB1AGIAbABpAGMASwBlAHkATgBhAG0AZQAAAAUBAwBSAFMAQQADQcQA
AADZCxIAUAB1AGIAbABpAGMASwBlAHkAQQBsAGcAbwByAGkAdABoAG0AAACVAAAARirTAwBvAGkA
ZAAAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARmHFDQBwAHUA
YgBsAGkAYwBLAGUAeQBOAGEAbQBlAAAABQEDAFIAUwBBAAYc6w8AcAB1AGIAbABpAGMASwBlAHkA
TABlAG4AZwB0AGgAAAAFAQQAMgAwADQAOAADAYkAAAB5XQYASQBzAHMAdQBlAHIAAAACAS4AAADL
EAIAQwBOAAAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEASIAAAD/EAIARABD
AAAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARYAAAD/EAIARABDAAAAAgUBAwBuAGUAdAAEBAFM
AAAAvQQMAFMAZQByAGkAYQBsAE4AdQBtAGIAZQByAAAAAgUBFAAxADUAQQAxADAANgBFADAAMAAw
ADAAMAAwADAAMAAwADAAMAAxAEQABAFGAAAAspcJAE4AbwB0AEIAZQBmAG8AcgBlAAAAAgUBFAAy
ADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA4ADoANQA5ADoANAA1AFoABAFEAAAAyQ0IAE4AbwB0AEEA
ZgB0AGUAcgAAAAIFARQAMgAwADEANAAtADAANwAtADIAMABUADEAOAA6ADUAOQA6ADQANQBaAAQB
6wIAADT4CgBFAHgAdABlAG4AcwBpAG8AbgBzAAAAAgGyAAAA+xUQAEUAeAB0AGUAbgBkAGUAZABL
AGUAeQBVAHMAYQBnAGUAAAACQYUAAADBSgUAVQBzAGEAZwBlAAAAcAAAAEYq0wMAbwBpAGQAAAAF
AREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgAxAAYrrQQAbgBhAG0AZQAAAAUBFQBT
AGUAcgB2AGUAcgAgAEEAdQB0AGgAZQBuAHQAaQBjAGEAdABpAG8AbgADBEH7AAAAYm0IAEsAZQB5
AFUAcwBhAGcAZQAAAOAAAABGH5cIAGMAcgBpAHQAaQBjAGEAbAAAAAUBBAB0AHIAdQBlAEZxigUA
dgBhAGwAdQBlAAAABQECAEEAMABGuHAgAEMARQBSAFQAXwBEAEkARwBJAFQAQQBMAF8AUwBJAEcA
TgBBAFQAVQBSAEUAXwBLAEUAWQBfAFUAUwBBAEcARQAAAAUBBAB0AHIAdQBlAAZPbx8AQwBFAFIA
VABfAEsARQBZAF8ARQBOAEMASQBQAEgARQBSAE0ARQBOAFQAXwBLAEUAWQBfAFUAUwBBAEcARQAA
AAUBBAB0AHIAdQBlAAMBXQAAAEjSDgBTAHUAYgBqAGUAYwB0AEEAbAB0AE4AYQBtAGUAAAACATQA
AABtkQkASQBQAEEAZABkAHIAZQBzAHMAAAACBQELADEAOQAyAC4AMQA2ADgALgAwAC4ANAAEBAGx
AAAAxaMWAEEAdQB0AGgAbwByAGkAdAB5AEsAZQB5AEkAZABlAG4AdABpAGYAaQBlAHIAAAACQXgA
AADalgUASwBlAHkASQBEAAAAYwAAAAYuygQAaABhAHMAaAAAAAUBKAA3ADcAMwBFAEQANgA4ADAA
NQAxADYANgA2ADYANwAwAEYANgBGADIAMwBGAEIAMgA1ADEAOQBGAEMAMQBCAEEAQwAyADEAOABD
ADQAQwBCAAMEBARBXAAAADjrDABFAHYAZQBuAHQAQQB1AHgASQBuAGYAbwAAADkAAAAGmuILAFAA
cgBvAGMAZQBzAHMATgBhAG0AZQAAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgAZQADQbEAAABQ
2xIAQwBvAHIAcgBlAGwAYQB0AGkAbwBuAEEAdQB4AEkAbgBmAG8AAACCAAAARiA7BgBUAGEAcwBr
AEkAZAAAAAUBJgB7AEMAMgBGADQAQgA0ADAAMQAtADkAOAA4AEQALQA0ADYAOABFAC0AOQA1ADEA
MwAtADQAQQBFAEQARQA0ADcARgAwAEEAOQA2AH0ABkj4CQBTAGUAcQBOAHUAbQBiAGUAcgAAAAUB
AQA3AAMEAAAAAAAAIAAAABgAAAABAAAAAAAAAAEAAAAYAAAA6j4KAAAAAACjCgAAEAAAABAAAACD
CgAAawoAAA8BAQAMAGaPr6t+VHNdTRRbY3pPHKurBAAADwEBAEH//58EAAC6DAUARQB2AGUAbgB0
AAAAfwAAAAa8DwUAeABtAGwAbgBzAAAABQE1AGgAdAB0AHAAOgAvAC8AcwBjAGgAZQBtAGEAcwAu
AG0AaQBjAHIAbwBzAG8AZgB0AC4AYwBvAG0ALwB3AGkAbgAvADIAMAAwADQALwAwADgALwBlAHYA
ZQBuAHQAcwAvAGUAdgBlAG4AdAACAf//4AMAAG9UBgBTAHkAcwB0AGUAbQAAAAJB//+7AAAA8XsI
AFAAcgBvAHYAaQBkAGUAcgAAAKAAAABGS5UEAE4AYQBtAGUAAAAFARcATQBpAGMAcgBvAHMAbwBm
AHQALQBXAGkAbgBkAG8AdwBzAC0AQwBBAFAASQAyAAYpFQQARwB1AGkAZAAAAAUBJgB7ADUAYgBi
AGMAYQA0AGEAOAAtAGIAMgAwADkALQA0ADgAZABjAC0AYQA4AGMANwAtAGIAMgAzAGQAMwBlADUA
MgAxADYAZgBiAH0AA0EDAD0AAAD1YQcARQB2AGUAbgB0AEkARAAAAB8AAAAGKdoKAFEAdQBhAGwA
aQBmAGkAZQByAHMAAAAOBAAGAg4DAAYEAQsAGgAAABgJBwBWAGUAcgBzAGkAbwBuAAAAAg4LAAQE
AQAAFgAAAGTOBQBMAGUAdgBlAGwAAAACDgAABAQBAgAUAAAARXsEAFQAYQBzAGsAAAACDgIABgQB
AQAYAAAArh4GAE8AcABjAG8AZABlAAAAAg4BAAQEAQUAHAAAAGrPCABLAGUAeQB3AG8AcgBkAHMA
AAACDgUAFQRB//9AAAAAO44LAFQAaQBtAGUAQwByAGUAYQB0AGUAZAAAAB8AAAAGPHsKAFMAeQBz
AHQAZQBtAFQAaQBtAGUAAAAOBgARAwEKACYAAABGAw0ARQB2AGUAbgB0AFIAZQBjAG8AcgBkAEkA
RAAAAAIOCgAKBEH//20AAACi8gsAQwBvAHIAcgBlAGwAYQB0AGkAbwBuAAAATAAAAEYK8QoAQQBj
AHQAaQB2AGkAdAB5AEkARAAAAA4HAA8GNcURAFIAZQBsAGEAdABlAGQAQQBjAHQAaQB2AGkAdAB5
AEkARAAAAA4SAA8DQf//VQAAALi1CQBFAHgAZQBjAHUAdABpAG8AbgAAADgAAABGCtcJAFAAcgBv
AGMAZQBzAHMASQBEAAAADggACAaFOQgAVABoAHIAZQBhAGQASQBEAAAADgkACAMB//9gAAAAg2EH
AEMAaABhAG4AbgBlAGwAAAACBQEjAE0AaQBjAHIAbwBzAG8AZgB0AC0AVwBpAG4AZABvAHcAcwAt
AEMAQQBQAEkAMgAvAE8AcABlAHIAYQB0AGkAbwBuAGEAbAAEAf//QAAAADtuCABDAG8AbQBwAHUA
dABlAHIAAAACBQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AARB//8yAAAA
oC4IAFMAZQBjAHUAcgBpAHQAeQAAABcAAAAGZkwGAFUAcwBlAHIASQBEAAAADgwAEwMEARMAHAAA
ADVECABVAHMAZQByAEQAYQB0AGEAAAACDhMAIQQEABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgA
FQAIABEAEAAPAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/gQh
AAQAHgAeAAEAAAAAAABAx6mxPLBmzQEMAMwASCZrAFQh9AsQJhEFVCEAAMAhAADpPgoAAAAAAAAB
BQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAfgEAAB52iAAQwBlAHIAdABWAGUAcgBpAGYAeQBD
AGUAcgB0AGkAZgBpAGMAYQB0AGUAQwBoAGEAaQBuAFAAbwBsAGkAYwB5AAAAAkFxAAAAchoGAFAA
bwBsAGkAYwB5AAAAWgAAAEZ6BgQAdAB5AHAAZQAAAAUBFQBDAEUAUgBUAF8AQwBIAEEASQBOAF8A
UABPAEwASQBDAFkAXwBTAFMATAAGRC8IAGMAbwBuAHMAdABhAG4AdAAAAAUBAQA0AANB1wAAALfS
CwBDAGUAcgB0AGkAZgBpAGMAYQB0AGUAAAC2AAAARpdqBwBmAGkAbABlAFIAZQBmAAAABQEsADEA
NgA4ADgAOQA1ADEAQwA0AEQAQwAzAEYANwBDADMAQgBEADcAMwAxAEIARABFADAARQBEADYAMwA1
ADcAMwBGADkAOQAzAEQANAAxADgALgBjAGUAcgAGN8MLAHMAdQBiAGoAZQBjAHQATgBhAG0AZQAA
AAUBEgBtAGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAADQZIAAAAK1xAAQwBlAHIA
dABpAGYAaQBjAGEAdABlAEMAaABhAGkAbgAAAGcAAAAGMjQIAGMAaABhAGkAbgBSAGUAZgAAAAUB
JgB7ADgARgBGADAARABGADEAMQAtADAANQBFADgALQA0ADQANABDAC0AOAAxADcAMAAtADcAOAA2
AEMARgAzADUAOQBDAEYANABEAH0AA0EsAAAAhwQFAEYAbABhAGcAcwAAABcAAAAGcYoFAHYAYQBs
AHUAZQAAAAUBAQAwAANB4QAAAFNYFwBTAFMATABBAGQAZABpAHQAaQBvAG4AYQBsAFAAbwBsAGkA
YwB5AEkAbgBmAG8AAABqAAAARuLxCABhAHUAdABoAFQAeQBwAGUAAAAFAQYAcwBlAHIAdgBlAHIA
Bs6QCgBzAGUAcgB2AGUAcgBOAGEAbQBlAAAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUA
YgAuAG4AZQB0AAJBOAAAADUPCwBJAGcAbgBvAHIAZQBGAGwAYQBnAHMAAAAXAAAABnGKBQB2AGEA
bAB1AGUAAAAFAQEAMAADBEFhAAAA8s8GAFMAdABhAHQAdQBzAAAASgAAAEYxNQoAYwBoAGEAaQBu
AEkAbgBkAGUAeAAAAAUBAgAtADEABna+DABlAGwAZQBtAGUAbgB0AEkAbgBkAGUAeAAAAAUBAgAt
ADEAA0FcAAAAOOsMAEUAdgBlAG4AdABBAHUAeABJAG4AZgBvAAAAOQAAAAaa4gsAUAByAG8AYwBl
AHMAcwBOAGEAbQBlAAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBsQAAAFDbEgBDAG8A
cgByAGUAbABhAHQAaQBvAG4AQQB1AHgASQBuAGYAbwAAAIIAAABGIDsGAFQAYQBzAGsASQBkAAAA
BQEmAHsAQwAyAEYANABCADQAMAAxAC0AOQA4ADgARAAtADQANgA4AEUALQA5ADUAMQAzAC0ANABB
AEUARABFADQANwBGADAAQQA5ADYAfQAGSPgJAFMAZQBxAE4AdQBtAGIAZQByAAAABQEBADYAA0Eu
AAAAXZgGAFIAZQBzAHUAbAB0AAAAFwAAAAZxigUAdgBhAGwAdQBlAAAABQEBADAAAwQAAAAAAAAg
AAAAGAAAAAEAAAAAAAAAAQAAABgAAADpPgoAAAAAAAAHGAAAEAAAABAAAADnFwAAzxcAAA8BAQAM
AGaPr6t+VHNdTRRbY3pPHKurBAAADwEBAEH//58EAAC6DAUARQB2AGUAbgB0AAAAfwAAAAa8DwUA
eABtAGwAbgBzAAAABQE1AGgAdAB0AHAAOgAvAC8AcwBjAGgAZQBtAGEAcwAuAG0AaQBjAHIAbwBz
AG8AZgB0AC4AYwBvAG0ALwB3AGkAbgAvADIAMAAwADQALwAwADgALwBlAHYAZQBuAHQAcwAvAGUA
dgBlAG4AdAACAf//4AMAAG9UBgBTAHkAcwB0AGUAbQAAAAJB//+7AAAA8XsIAFAAcgBvAHYAaQBk
AGUAcgAAAKAAAABGS5UEAE4AYQBtAGUAAAAFARcATQBpAGMAcgBvAHMAbwBmAHQALQBXAGkAbgBk
AG8AdwBzAC0AQwBBAFAASQAyAAYpFQQARwB1AGkAZAAAAAUBJgB7ADUAYgBiAGMAYQA0AGEAOAAt
AGIAMgAwADkALQA0ADgAZABjAC0AYQA4AGMANwAtAGIAMgAzAGQAMwBlADUAMgAxADYAZgBiAH0A
A0EDAD0AAAD1YQcARQB2AGUAbgB0AEkARAAAAB8AAAAGKdoKAFEAdQBhAGwAaQBmAGkAZQByAHMA
AAAOBAAGAg4DAAYEAQsAGgAAABgJBwBWAGUAcgBzAGkAbwBuAAAAAg4LAAQEAQAAFgAAAGTOBQBM
AGUAdgBlAGwAAAACDgAABAQBAgAUAAAARXsEAFQAYQBzAGsAAAACDgIABgQBAQAYAAAArh4GAE8A
cABjAG8AZABlAAAAAg4BAAQEAQUAHAAAAGrPCABLAGUAeQB3AG8AcgBkAHMAAAACDgUAFQRB//9A
AAAAO44LAFQAaQBtAGUAQwByAGUAYQB0AGUAZAAAAB8AAAAGPHsKAFMAeQBzAHQAZQBtAFQAaQBt
AGUAAAAOBgARAwEKACYAAABGAw0ARQB2AGUAbgB0AFIAZQBjAG8AcgBkAEkARAAAAAIOCgAKBEH/
/20AAACi8gsAQwBvAHIAcgBlAGwAYQB0AGkAbwBuAAAATAAAAEYK8QoAQQBjAHQAaQB2AGkAdAB5
AEkARAAAAA4HAA8GNcURAFIAZQBsAGEAdABlAGQAQQBjAHQAaQB2AGkAdAB5AEkARAAAAA4SAA8D
Qf//VQAAALi1CQBFAHgAZQBjAHUAdABpAG8AbgAAADgAAABGCtcJAFAAcgBvAGMAZQBzAHMASQBE
AAAADggACAaFOQgAVABoAHIAZQBhAGQASQBEAAAADgkACAMB//9gAAAAg2EHAEMAaABhAG4AbgBl
AGwAAAACBQEjAE0AaQBjAHIAbwBzAG8AZgB0AC0AVwBpAG4AZABvAHcAcwAtAEMAQQBQAEkAMgAv
AE8AcABlAHIAYQB0AGkAbwBuAGEAbAAEAf//QAAAADtuCABDAG8AbQBwAHUAdABlAHIAAAACBQES
AG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AARB//8yAAAAoC4IAFMAZQBjAHUA
cgBpAHQAeQAAABcAAAAGZkwGAFUAcwBlAHIASQBEAAAADgwAEwMEARMAHAAAADVECABVAHMAZQBy
AEQAYQB0AGEAAAACDhMAIQQEABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEAEAAPAAQA
CAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYhIhAAQCCwALAAMAAAAA
AABAx6mxPLBmzQEMAMwASCZrAFQh9AsQJhEFVCEAAMAhAADoPgoAAAAAAAABBQAAAAAABRUAAACi
It7rVPT5hLnyjLx8BAAAAVwSAAC8IxcAQwBlAHIAdABHAGUAdABDAGUAcgB0AGkAZgBpAGMAYQB0
AGUAQwBoAGEAaQBuAAAAAkHXAAAAt9ILAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAAALYAAABGl2oH
AGYAaQBsAGUAUgBlAGYAAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABDADMARgA3AEMAMwBCAEQA
NwAzADEAQgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEAOAAuAGMAZQByAAY3wwsA
cwB1AGIAagBlAGMAdABOAGEAbQBlAAAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAu
AG4AZQB0AAMBWAAAAAY2DgBWAGEAbABpAGQAYQB0AGkAbwBuAFQAaQBtAGUAAAACBQEYADIAMAAx
ADIALQAwADcALQAyADAAVAAxADkAOgA0ADUAOgAzADUALgAxADAAMgBaAAQBAgEAAJpBDwBBAGQA
ZABpAHQAaQBvAG4AYQBsAFMAdABvAHIAZQAAAAJB1wAAALfSCwBDAGUAcgB0AGkAZgBpAGMAYQB0
AGUAAAC2AAAARpdqBwBmAGkAbABlAFIAZQBmAAAABQEsADEANgA4ADgAOQA1ADEAQwA0AEQAQwAz
AEYANwBDADMAQgBEADcAMwAxAEIARABFADAARQBEADYAMwA1ADcAMwBGADkAOQAzAEQANAAxADgA
LgBjAGUAcgAGN8MLAHMAdQBiAGoAZQBjAHQATgBhAG0AZQAAAAUBEgBtAGEAaQBsAC4AcwBlAGMA
dQByAGUAcwB1AGIALgBuAGUAdAADBEGDAQAA+xUQAEUAeAB0AGUAbgBkAGUAZABLAGUAeQBVAHMA
YQBnAGUAAAAhAAAABuKCBwBvAHIATQBhAHQAYwBoAAAABQEEAHQAcgB1AGUAAkGFAAAAwUoFAFUA
cwBhAGcAZQAAAHAAAABGKtMDAG8AaQBkAAAABQERADEALgAzAC4ANgAuADEALgA1AC4ANQAuADcA
LgAzAC4AMQAGK60EAG4AYQBtAGUAAAAFARUAUwBlAHIAdgBlAHIAIABBAHUAdABoAGUAbgB0AGkA
YwBhAHQAaQBvAG4AA0FSAAAAwUoFAFUAcwBhAGcAZQAAAD0AAAAGKtMDAG8AaQBkAAAABQEWADEA
LgAzAC4ANgAuADEALgA0AC4AMQAuADMAMQAxAC4AMQAwAC4AMwAuADMAA0FQAAAAwUoFAFUAcwBh
AGcAZQAAADsAAAAGKtMDAG8AaQBkAAAABQEVADIALgAxADYALgA4ADQAMAAuADEALgAxADEAMwA3
ADMAMAAuADQALgAxAAMEQRABAACHBAUARgBsAGEAZwBzAAAA+wAAAEZxigUAdgBhAGwAdQBlAAAA
BQEIADQAOAAwADAAMAAwADAAMABGZNAuAEMARQBSAFQAXwBDAEgAQQBJAE4AXwBSAEUAVgBPAEMA
QQBUAEkATwBOAF8AQwBIAEUAQwBLAF8AQwBIAEEASQBOAF8ARQBYAEMATABVAEQARQBfAFIATwBP
AFQAAAAFAQQAdAByAHUAZQAGPygqAEMARQBSAFQAXwBDAEgAQQBJAE4AXwBSAEUAVgBPAEMAQQBU
AEkATwBOAF8AQQBDAEMAVQBNAFUATABBAFQASQBWAEUAXwBUAEkATQBFAE8AVQBUAAAABQEEAHQA
cgB1AGUAA0FKAAAAkdYPAEMAaABhAGkAbgBFAG4AZwBpAG4AZQBJAG4AZgBvAAAAIQAAAAYPCwcA
YwBvAG4AdABlAHgAdAAAAAUBBAB1AHMAZQByAANBqwsAAArXEABDAGUAcgB0AGkAZgBpAGMAYQB0
AGUAQwBoAGEAaQBuAAAAsAAAAEYyNAgAYwBoAGEAaQBuAFIAZQBmAAAABQEmAHsAOABGAEYAMABE
AEYAMQAxAC0AMAA1AEUAOAAtADQANAA0AEMALQA4ADEANwAwAC0ANwA4ADYAQwBGADMANQA5AEMA
RgA0AEQAfQAGlNMXAHIAZQB2AG8AYwBhAHQAaQBvAG4ARgByAGUAcwBoAG4AZQBzAHMAVABpAG0A
ZQAAAAUBCABQAFQAMQA1AE0AMgA4AFMAAgHrAAAACoALAFQAcgB1AHMAdABTAHQAYQB0AHUAcwAA
AAJBOAAAAHqXCwBFAHIAcgBvAHIAUwB0AGEAdAB1AHMAAAAXAAAABnGKBQB2AGEAbAB1AGUAAAAF
AQEAMAADQYsAAABgFAoASQBuAGYAbwBTAHQAYQB0AHUAcwAAAGwAAABGcYoFAHYAYQBsAHUAZQAA
AAUBAwAxADAAMAAGnuMfAEMARQBSAFQAXwBUAFIAVQBTAFQAXwBIAEEAUwBfAFAAUgBFAEYARQBS
AFIARQBEAF8ASQBTAFMAVQBFAFIAAAAFAQQAdAByAHUAZQADBAFHBQAAO7IMAEMAaABhAGkAbgBF
AGwAZQBtAGUAbgB0AAAAAkHXAAAAt9ILAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAAALYAAABGl2oH
AGYAaQBsAGUAUgBlAGYAAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABDADMARgA3AEMAMwBCAEQA
NwAzADEAQgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEAOAAuAGMAZQByAAY3wwsA
cwB1AGIAagBlAGMAdABOAGEAbQBlAAAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAu
AG4AZQB0AANBtgAAAFeNEgBTAGkAZwBuAGEAdAB1AHIAZQBBAGwAZwBvAHIAaQB0AGgAbQAAAIcA
AABGKtMDAG8AaQBkAAAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4A
NQBGeXEIAGgAYQBzAGgATgBhAG0AZQAAAAUBBABTAEgAQQAxAAZhxQ0AcAB1AGIAbABpAGMASwBl
AHkATgBhAG0AZQAAAAUBAwBSAFMAQQADQcQAAADZCxIAUAB1AGIAbABpAGMASwBlAHkAQQBsAGcA
bwByAGkAdABoAG0AAACVAAAARirTAwBvAGkAZAAAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMA
NQA0ADkALgAxAC4AMQAuADEARmHFDQBwAHUAYgBsAGkAYwBLAGUAeQBOAGEAbQBlAAAABQEDAFIA
UwBBAAYc6w8AcAB1AGIAbABpAGMASwBlAHkATABlAG4AZwB0AGgAAAAFAQQAMgAwADQAOAADATwB
AAAKgAsAVAByAHUAcwB0AFMAdABhAHQAdQBzAAAAAkE4AAAAepcLAEUAcgByAG8AcgBTAHQAYQB0
AHUAcwAAABcAAAAGcYoFAHYAYQBsAHUAZQAAAAUBAQAwAANB3AAAAGAUCgBJAG4AZgBvAFMAdABh
AHQAdQBzAAAAvQAAAEZxigUAdgBhAGwAdQBlAAAABQEDADEAMAAyAEY6NB8AQwBFAFIAVABfAFQA
UgBVAFMAVABfAEgAQQBTAF8ASwBFAFkAXwBNAEEAVABDAEgAXwBJAFMAUwBVAEUAUgAAAAUBBAB0
AHIAdQBlAAae4x8AQwBFAFIAVABfAFQAUgBVAFMAVABfAEgAQQBTAF8AUABSAEUARgBFAFIAUgBF
AEQAXwBJAFMAUwBVAEUAUgAAAAUBBAB0AHIAdQBlAAMEAbIAAACRRBAAQQBwAHAAbABpAGMAYQB0
AGkAbwBuAFUAcwBhAGcAZQAAAAJBhQAAAMFKBQBVAHMAYQBnAGUAAABwAAAARirTAwBvAGkAZAAA
AAUBEQAxAC4AMwAuADYALgAxAC4ANQAuADUALgA3AC4AMwAuADEABiutBABuAGEAbQBlAAAABQEV
AFMAZQByAHYAZQByACAAQQB1AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuAAMEASEAAADGiw0ASQBz
AHMAdQBhAG4AYwBlAFUAcwBhAGcAZQAAAANBpAAAAOw6DgBSAGUAdgBvAGMAYQB0AGkAbwBuAEkA
bgBmAG8AAAA1AAAABpI5DQBmAHIAZQBzAGgAbgBlAHMAcwBUAGkAbQBlAAAABQEIAFAAVAAxADUA
TQAyADgAUwACQUIAAADbqhAAUgBlAHYAbwBjAGEAdABpAG8AbgBSAGUAcwB1AGwAdAAAABcAAAAG
cYoFAHYAYQBsAHUAZQAAAAUBAQAwAAMEBAGOBAAAO7IMAEMAaABhAGkAbgBFAGwAZQBtAGUAbgB0
AAAAAkHRAAAAt9ILAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAAALAAAABGl2oHAGYAaQBsAGUAUgBl
AGYAAAAFASwAMQA3ADYAMQBGADIANgBFAEIAMAA4ADIANAA3ADAARgA0ADQAQgAyADcAOABFAEIA
NgAyAEYARAA4ADMAMQA5AEYAMwBEAEUAMgAwADEAOAAuAGMAZQByAAY3wwsAcwB1AGIAagBlAGMA
dABOAGEAbQBlAAAABQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAANBtgAAAFeNEgBT
AGkAZwBuAGEAdAB1AHIAZQBBAGwAZwBvAHIAaQB0AGgAbQAAAIcAAABGKtMDAG8AaQBkAAAABQEU
ADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBGeXEIAGgAYQBzAGgATgBh
AG0AZQAAAAUBBABTAEgAQQAxAAZhxQ0AcAB1AGIAbABpAGMASwBlAHkATgBhAG0AZQAAAAUBAwBS
AFMAQQADQcQAAADZCxIAUAB1AGIAbABpAGMASwBlAHkAQQBsAGcAbwByAGkAdABoAG0AAACVAAAA
RirTAwBvAGkAZAAAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEA
RmHFDQBwAHUAYgBsAGkAYwBLAGUAeQBOAGEAbQBlAAAABQEDAFIAUwBBAAYc6w8AcAB1AGIAbABp
AGMASwBlAHkATABlAG4AZwB0AGgAAAAFAQQAMgAwADQAOAADAYMBAAAKgAsAVAByAHUAcwB0AFMA
dABhAHQAdQBzAAAAAkE4AAAAepcLAEUAcgByAG8AcgBTAHQAYQB0AHUAcwAAABcAAAAGcYoFAHYA
YQBsAHUAZQAAAAUBAQAwAANBIwEAAGAUCgBJAG4AZgBvAFMAdABhAHQAdQBzAAAABAEAAEZxigUA
dgBhAGwAdQBlAAAABQEDADEAMABDAEagvSAAQwBFAFIAVABfAFQAUgBVAFMAVABfAEgAQQBTAF8A
TgBBAE0ARQBfAE0AQQBUAEMASABfAEkAUwBTAFUARQBSAAAABQEEAHQAcgB1AGUARnyXGQBDAEUA
UgBUAF8AVABSAFUAUwBUAF8ASQBTAF8AUwBFAEwARgBfAFMASQBHAE4ARQBEAAAABQEEAHQAcgB1
AGUABp7jHwBDAEUAUgBUAF8AVABSAFUAUwBUAF8ASABBAFMAXwBQAFIARQBGAEUAUgBSAEUARABf
AEkAUwBTAFUARQBSAAAABQEEAHQAcgB1AGUAAwRBRAAAAJFEEABBAHAAcABsAGkAYwBhAHQAaQBv
AG4AVQBzAGEAZwBlAAAAGQAAAAZs+wMAYQBuAHkAAAAFAQQAdAByAHUAZQADQT4AAADGiw0ASQBz
AHMAdQBhAG4AYwBlAFUAcwBhAGcAZQAAABkAAAAGbPsDAGEAbgB5AAAABQEEAHQAcgB1AGUAAwQE
QVwAAAA46wwARQB2AGUAbgB0AEEAdQB4AEkAbgBmAG8AAAA5AAAABpriCwBQAHIAbwBjAGUAcwBz
AE4AYQBtAGUAAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0GxAAAAUNsSAEMAbwByAHIA
ZQBsAGEAdABpAG8AbgBBAHUAeABJAG4AZgBvAAAAggAAAEYgOwYAVABhAHMAawBJAGQAAAAFASYA
ewBDADIARgA0AEIANAAwADEALQA5ADgAOABEAC0ANAA2ADgARQAtADkANQAxADMALQA0AEEARQBE
AEUANAA3AEYAMABBADkANgB9AAZI+AkAUwBlAHEATgB1AG0AYgBlAHIAAAAFAQEANQADQS4AAABd
mAYAUgBlAHMAdQBsAHQAAAAXAAAABnGKBQB2AGEAbAB1AGUAAAAFAQEAMAADBAAAAAAAACAAAAAY
AAAAAQAAAAAAAAABAAAAGAAAAOg+CgAAAAAABo8LAAAQAAAAEAAAAG8LAABXCwAADwEBAAwAZo+v
q35Uc11NFFtjek8cq6sEAAAPAQEAQf//nwQAALoMBQBFAHYAZQBuAHQAAAB/AAAABrwPBQB4AG0A
bABuAHMAAAAFATUAaAB0AHQAcAA6AC8ALwBzAGMAaABlAG0AYQBzAC4AbQBpAGMAcgBvAHMAbwBm
AHQALgBjAG8AbQAvAHcAaQBuAC8AMgAwADAANAAvADAAOAAvAGUAdgBlAG4AdABzAC8AZQB2AGUA
bgB0AAIB///gAwAAb1QGAFMAeQBzAHQAZQBtAAAAAkH//7sAAADxewgAUAByAG8AdgBpAGQAZQBy
AAAAoAAAAEZLlQQATgBhAG0AZQAAAAUBFwBNAGkAYwByAG8AcwBvAGYAdAAtAFcAaQBuAGQAbwB3
AHMALQBDAEEAUABJADIABikVBABHAHUAaQBkAAAABQEmAHsANQBiAGIAYwBhADQAYQA4AC0AYgAy
ADAAOQAtADQAOABkAGMALQBhADgAYwA3AC0AYgAyADMAZAAzAGUANQAyADEANgBmAGIAfQADQQMA
PQAAAPVhBwBFAHYAZQBuAHQASQBEAAAAHwAAAAYp2goAUQB1AGEAbABpAGYAaQBlAHIAcwAAAA4E
AAYCDgMABgQBCwAaAAAAGAkHAFYAZQByAHMAaQBvAG4AAAACDgsABAQBAAAWAAAAZM4FAEwAZQB2
AGUAbAAAAAIOAAAEBAECABQAAABFewQAVABhAHMAawAAAAIOAgAGBAEBABgAAACuHgYATwBwAGMA
bwBkAGUAAAACDgEABAQBBQAcAAAAas8IAEsAZQB5AHcAbwByAGQAcwAAAAIOBQAVBEH//0AAAAA7
jgsAVABpAG0AZQBDAHIAZQBhAHQAZQBkAAAAHwAAAAY8ewoAUwB5AHMAdABlAG0AVABpAG0AZQAA
AA4GABEDAQoAJgAAAEYDDQBFAHYAZQBuAHQAUgBlAGMAbwByAGQASQBEAAAAAg4KAAoEQf//bQAA
AKLyCwBDAG8AcgByAGUAbABhAHQAaQBvAG4AAABMAAAARgrxCgBBAGMAdABpAHYAaQB0AHkASQBE
AAAADgcADwY1xREAUgBlAGwAYQB0AGUAZABBAGMAdABpAHYAaQB0AHkASQBEAAAADhIADwNB//9V
AAAAuLUJAEUAeABlAGMAdQB0AGkAbwBuAAAAOAAAAEYK1wkAUAByAG8AYwBlAHMAcwBJAEQAAAAO
CAAIBoU5CABUAGgAcgBlAGEAZABJAEQAAAAOCQAIAwH//2AAAACDYQcAQwBoAGEAbgBuAGUAbAAA
AAIFASMATQBpAGMAcgBvAHMAbwBmAHQALQBXAGkAbgBkAG8AdwBzAC0AQwBBAFAASQAyAC8ATwBw
AGUAcgBhAHQAaQBvAG4AYQBsAAQB//9AAAAAO24IAEMAbwBtAHAAdQB0AGUAcgAAAAIFARIAbQBh
AGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQABEH//zIAAACgLggAUwBlAGMAdQByAGkA
dAB5AAAAFwAAAAZmTAYAVQBzAGUAcgBJAEQAAAAODAATAwQBEwAcAAAANUQIAFUAcwBlAHIARABh
AHQAYQAAAAIOEwAhBAQAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQA
CAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqBSEABAIpACkABQAAAAAAAEDH
qbE8sGbNAQwAzABIJmsAVCH0CxAmEQVUIQAAwCEAAOc+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU
9PmEufKMvHwEAAAB5AUAAHueFABDAGUAcgB0AFYAZQByAGkAZgB5AFIAZQB2AG8AYwBhAHQAaQBv
AG4AAAACQdcAAAC30gsAQwBlAHIAdABpAGYAaQBjAGEAdABlAAAAtgAAAEaXagcAZgBpAGwAZQBS
AGUAZgAAAAUBLAAxADYAOAA4ADkANQAxAEMANABEAEMAMwBGADcAQwAzAEIARAA3ADMAMQBCAEQA
RQAwAEUARAA2ADMANQA3ADMARgA5ADkAMwBEADQAMQA4AC4AYwBlAHIABjfDCwBzAHUAYgBqAGUA
YwB0AE4AYQBtAGUAAAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQAA0Hd
AAAA/pERAEkAcwBzAHUAZQByAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAAALAAAABGl2oHAGYAaQBs
AGUAUgBlAGYAAAAFASwAMQA3ADYAMQBGADIANgBFAEIAMAA4ADIANAA3ADAARgA0ADQAQgAyADcA
OABFAEIANgAyAEYARAA4ADMAMQA5AEYAMwBEAEUAMgAwADEAOAAuAGMAZQByAAY3wwsAcwB1AGIA
agBlAGMAdABOAGEAbQBlAAAABQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAANBkQAA
AIcEBQBGAGwAYQBnAHMAAAB8AAAARnGKBQB2AGEAbAB1AGUAAAAFAQEANAAGLWApAEMARQBSAFQA
XwBWAEUAUgBJAEYAWQBfAFIARQBWAF8AQQBDAEMAVQBNAFUATABBAFQASQBWAEUAXwBUAEkATQBF
AE8AVQBUAF8ARgBMAEEARwAAAAUBBAB0AHIAdQBlAANBDAEAABGzFABBAGQAZABpAHQAaQBvAG4A
YQBsAFAAYQByAGEAbQBlAHQAZQByAHMAAADZAAAARj/cCQB0AGkAbQBlAFQAbwBVAHMAZQAAAAUB
GAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoANAA1ADoAMwA1AC4AMQAwADIAWgBGZucLAGMA
dQByAHIAZQBuAHQAVABpAG0AZQAAAAUBGAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoANAA1
ADoAMwA1AC4AMQAxADgAWgAG3I0TAHUAcgBsAFIAZQB0AHIAaQBlAHYAYQBsAFQAaQBtAGUAbwB1
AHQAAAAFAQUAUABUADIAMABTAANBAAEAAHDiEABSAGUAdgBvAGMAYQB0AGkAbwBuAFMAdABhAHQA
dQBzAAAA1QAAAEYy0QUAaQBuAGQAZQB4AAAABQEBADAARqhzBQBlAHIAcgBvAHIAAAAFAQEAMABG
hPQGAHIAZQBhAHMAbwBuAAAABQEBADAARuTrEwBhAGMAdAB1AGEAbABGAHIAZQBzAGgAbgBlAHMA
cwBUAGkAbQBlAAAABQEIAFAAVAAxADUATQAyADgAUwAGDckWAHQAaABpAHIAZABQAGEAcgB0AHkA
UAByAG8AdgBpAGQAZQByAFUAcwBlAGQAAAAFAQsAYwBzAHYAYQBsAGkAZAAuAGQAbABsAANBXAAA
ADjrDABFAHYAZQBuAHQAQQB1AHgASQBuAGYAbwAAADkAAAAGmuILAFAAcgBvAGMAZQBzAHMATgBh
AG0AZQAAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgAZQADQbEAAABQ2xIAQwBvAHIAcgBlAGwA
YQB0AGkAbwBuAEEAdQB4AEkAbgBmAG8AAACCAAAARiA7BgBUAGEAcwBrAEkAZAAAAAUBJgB7AEMA
MgBGADQAQgA0ADAAMQAtADkAOAA4AEQALQA0ADYAOABFAC0AOQA1ADEAMwAtADQAQQBFAEQARQA0
ADcARgAwAEEAOQA2AH0ABkj4CQBTAGUAcQBOAHUAbQBiAGUAcgAAAAUBAQA0AANBLgAAAF2YBgBS
AGUAcwB1AGwAdAAAABcAAAAGcYoFAHYAYQBsAHUAZQAAAAUBAQAwAAMEAAAAAAAAIAAAABgAAAAB
AAAAAAAAAAEAAAAYAAAA5z4KAAAAAAAE/AYAABAAAAAQAAAA3AYAAMQGAAAPAQEADABmj6+rflRz
XU0UW2N6TxyrqwQAAA8BAQBB//+fBAAAugwFAEUAdgBlAG4AdAAAAH8AAAAGvA8FAHgAbQBsAG4A
cwAAAAUBNQBoAHQAdABwADoALwAvAHMAYwBoAGUAbQBhAHMALgBtAGkAYwByAG8AcwBvAGYAdAAu
AGMAbwBtAC8AdwBpAG4ALwAyADAAMAA0AC8AMAA4AC8AZQB2AGUAbgB0AHMALwBlAHYAZQBuAHQA
AgH//+ADAABvVAYAUwB5AHMAdABlAG0AAAACQf//uwAAAPF7CABQAHIAbwB2AGkAZABlAHIAAACg
AAAARkuVBABOAGEAbQBlAAAABQEXAE0AaQBjAHIAbwBzAG8AZgB0AC0AVwBpAG4AZABvAHcAcwAt
AEMAQQBQAEkAMgAGKRUEAEcAdQBpAGQAAAAFASYAewA1AGIAYgBjAGEANABhADgALQBiADIAMAA5
AC0ANAA4AGQAYwAtAGEAOABjADcALQBiADIAMwBkADMAZQA1ADIAMQA2AGYAYgB9AANBAwA9AAAA
9WEHAEUAdgBlAG4AdABJAEQAAAAfAAAABinaCgBRAHUAYQBsAGkAZgBpAGUAcgBzAAAADgQABgIO
AwAGBAELABoAAAAYCQcAVgBlAHIAcwBpAG8AbgAAAAIOCwAEBAEAABYAAABkzgUATABlAHYAZQBs
AAAAAg4AAAQEAQIAFAAAAEV7BABUAGEAcwBrAAAAAg4CAAYEAQEAGAAAAK4eBgBPAHAAYwBvAGQA
ZQAAAAIOAQAEBAEFABwAAABqzwgASwBlAHkAdwBvAHIAZABzAAAAAg4FABUEQf//QAAAADuOCwBU
AGkAbQBlAEMAcgBlAGEAdABlAGQAAAAfAAAABjx7CgBTAHkAcwB0AGUAbQBUAGkAbQBlAAAADgYA
EQMBCgAmAAAARgMNAEUAdgBlAG4AdABSAGUAYwBvAHIAZABJAEQAAAACDgoACgRB//9tAAAAovIL
AEMAbwByAHIAZQBsAGEAdABpAG8AbgAAAEwAAABGCvEKAEEAYwB0AGkAdgBpAHQAeQBJAEQAAAAO
BwAPBjXFEQBSAGUAbABhAHQAZQBkAEEAYwB0AGkAdgBpAHQAeQBJAEQAAAAOEgAPA0H//1UAAAC4
tQkARQB4AGUAYwB1AHQAaQBvAG4AAAA4AAAARgrXCQBQAHIAbwBjAGUAcwBzAEkARAAAAA4IAAgG
hTkIAFQAaAByAGUAYQBkAEkARAAAAA4JAAgDAf//YAAAAINhBwBDAGgAYQBuAG4AZQBsAAAAAgUB
IwBNAGkAYwByAG8AcwBvAGYAdAAtAFcAaQBuAGQAbwB3AHMALQBDAEEAUABJADIALwBPAHAAZQBy
AGEAdABpAG8AbgBhAGwABAH//0AAAAA7bggAQwBvAG0AcAB1AHQAZQByAAAAAgUBEgBtAGEAaQBs
AC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAAEQf//MgAAAKAuCABTAGUAYwB1AHIAaQB0AHkA
AAAXAAAABmZMBgBVAHMAZQByAEkARAAAAA4MABMDBAETABwAAAA1RAgAVQBzAGUAcgBEAGEAdABh
AAAAAg4TACEEBAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgA
CgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFcBIQAEASkAKAAFAAAAAAAAQMepsTyw
Zs0BDADMAEgmawBUIfQLECYRBVQhAADAIQAA5j4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS5
8oy8fAQAAAFRAQAAh/sZAEMAZQByAHQAVgBlAHIAaQBmAHkAUgBlAHYAbwBjAGEAdABpAG8AbgBT
AHQAYQByAHQAAAACQVwAAAA46wwARQB2AGUAbgB0AEEAdQB4AEkAbgBmAG8AAAA5AAAABpriCwBQ
AHIAbwBjAGUAcwBzAE4AYQBtAGUAAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0GxAAAA
UNsSAEMAbwByAHIAZQBsAGEAdABpAG8AbgBBAHUAeABJAG4AZgBvAAAAggAAAEYgOwYAVABhAHMA
awBJAGQAAAAFASYAewBDADIARgA0AEIANAAwADEALQA5ADgAOABEAC0ANAA2ADgARQAtADkANQAx
ADMALQA0AEEARQBEAEUANAA3AEYAMABBADkANgB9AAZI+AkAUwBlAHEATgB1AG0AYgBlAHIAAAAF
AQEAMwADBAAAAAAAACAAAAAYAAAAAQAAAAAAAAABAAAAGAAAAOY+CgAAAAAAAgcAABAAAAAQAAAA
4gYAAMoGAAAPAQEADABmj6+rflRzXU0UW2N6TxyrqwQAAA8BAQBB//+fBAAAugwFAEUAdgBlAG4A
dAAAAH8AAAAGvA8FAHgAbQBsAG4AcwAAAAUBNQBoAHQAdABwADoALwAvAHMAYwBoAGUAbQBhAHMA
LgBtAGkAYwByAG8AcwBvAGYAdAAuAGMAbwBtAC8AdwBpAG4ALwAyADAAMAA0AC8AMAA4AC8AZQB2
AGUAbgB0AHMALwBlAHYAZQBuAHQAAgH//+ADAABvVAYAUwB5AHMAdABlAG0AAAACQf//uwAAAPF7
CABQAHIAbwB2AGkAZABlAHIAAACgAAAARkuVBABOAGEAbQBlAAAABQEXAE0AaQBjAHIAbwBzAG8A
ZgB0AC0AVwBpAG4AZABvAHcAcwAtAEMAQQBQAEkAMgAGKRUEAEcAdQBpAGQAAAAFASYAewA1AGIA
YgBjAGEANABhADgALQBiADIAMAA5AC0ANAA4AGQAYwAtAGEAOABjADcALQBiADIAMwBkADMAZQA1
ADIAMQA2AGYAYgB9AANBAwA9AAAA9WEHAEUAdgBlAG4AdABJAEQAAAAfAAAABinaCgBRAHUAYQBs
AGkAZgBpAGUAcgBzAAAADgQABgIOAwAGBAELABoAAAAYCQcAVgBlAHIAcwBpAG8AbgAAAAIOCwAE
BAEAABYAAABkzgUATABlAHYAZQBsAAAAAg4AAAQEAQIAFAAAAEV7BABUAGEAcwBrAAAAAg4CAAYE
AQEAGAAAAK4eBgBPAHAAYwBvAGQAZQAAAAIOAQAEBAEFABwAAABqzwgASwBlAHkAdwBvAHIAZABz
AAAAAg4FABUEQf//QAAAADuOCwBUAGkAbQBlAEMAcgBlAGEAdABlAGQAAAAfAAAABjx7CgBTAHkA
cwB0AGUAbQBUAGkAbQBlAAAADgYAEQMBCgAmAAAARgMNAEUAdgBlAG4AdABSAGUAYwBvAHIAZABJ
AEQAAAACDgoACgRB//9tAAAAovILAEMAbwByAHIAZQBsAGEAdABpAG8AbgAAAEwAAABGCvEKAEEA
YwB0AGkAdgBpAHQAeQBJAEQAAAAOBwAPBjXFEQBSAGUAbABhAHQAZQBkAEEAYwB0AGkAdgBpAHQA
eQBJAEQAAAAOEgAPA0H//1UAAAC4tQkARQB4AGUAYwB1AHQAaQBvAG4AAAA4AAAARgrXCQBQAHIA
bwBjAGUAcwBzAEkARAAAAA4IAAgGhTkIAFQAaAByAGUAYQBkAEkARAAAAA4JAAgDAf//YAAAAINh
BwBDAGgAYQBuAG4AZQBsAAAAAgUBIwBNAGkAYwByAG8AcwBvAGYAdAAtAFcAaQBuAGQAbwB3AHMA
LQBDAEEAUABJADIALwBPAHAAZQByAGEAdABpAG8AbgBhAGwABAH//0AAAAA7bggAQwBvAG0AcAB1
AHQAZQByAAAAAgUBEgBtAGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAAEQf//MgAA
AKAuCABTAGUAYwB1AHIAaQB0AHkAAAAXAAAABmZMBgBVAHMAZQByAEkARAAAAA4MABMDBAETABwA
AAA1RAgAVQBzAGUAcgBEAGEAdABhAAAAAg4TACEEBAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAI
ABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF0B
IQAEAQsACgADAAAAAAAAQMepsTywZs0BDADMAEgmawBUIfQLECYRBVQhAADAIQAA5T4KAAAAAAAA
AQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAFXAQAAhmccAEMAZQByAHQARwBlAHQAQwBlAHIA
dABpAGYAaQBjAGEAdABlAEMAaABhAGkAbgBTAHQAYQByAHQAAAACQVwAAAA46wwARQB2AGUAbgB0
AEEAdQB4AEkAbgBmAG8AAAA5AAAABpriCwBQAHIAbwBjAGUAcwBzAE4AYQBtAGUAAAAFAQwAaQBl
AHgAcABsAG8AcgBlAC4AZQB4AGUAA0GxAAAAUNsSAEMAbwByAHIAZQBsAGEAdABpAG8AbgBBAHUA
eABJAG4AZgBvAAAAggAAAEYgOwYAVABhAHMAawBJAGQAAAAFASYAewBDADIARgA0AEIANAAwADEA
LQA5ADgAOABEAC0ANAA2ADgARQAtADkANQAxADMALQA0AEEARQBEAEUANAA3AEYAMABBADkANgB9
AAZI+AkAUwBlAHEATgB1AG0AYgBlAHIAAAAFAQEAMgADBAAAAAAAACAAAAAYAAAAAQAAAAAAAAAB
AAAAGAAAAOU+CgAAAAAA8AYAABAAAAAQAAAA0AYAALgGAAAPAQEADABmj6+rflRzXU0UW2N6Txyr
qwQAAA8BAQBB//+fBAAAugwFAEUAdgBlAG4AdAAAAH8AAAAGvA8FAHgAbQBsAG4AcwAAAAUBNQBo
AHQAdABwADoALwAvAHMAYwBoAGUAbQBhAHMALgBtAGkAYwByAG8AcwBvAGYAdAAuAGMAbwBtAC8A
dwBpAG4ALwAyADAAMAA0AC8AMAA4AC8AZQB2AGUAbgB0AHMALwBlAHYAZQBuAHQAAgH//+ADAABv
VAYAUwB5AHMAdABlAG0AAAACQf//uwAAAPF7CABQAHIAbwB2AGkAZABlAHIAAACgAAAARkuVBABO
AGEAbQBlAAAABQEXAE0AaQBjAHIAbwBzAG8AZgB0AC0AVwBpAG4AZABvAHcAcwAtAEMAQQBQAEkA
MgAGKRUEAEcAdQBpAGQAAAAFASYAewA1AGIAYgBjAGEANABhADgALQBiADIAMAA5AC0ANAA4AGQA
YwAtAGEAOABjADcALQBiADIAMwBkADMAZQA1ADIAMQA2AGYAYgB9AANBAwA9AAAA9WEHAEUAdgBl
AG4AdABJAEQAAAAfAAAABinaCgBRAHUAYQBsAGkAZgBpAGUAcgBzAAAADgQABgIOAwAGBAELABoA
AAAYCQcAVgBlAHIAcwBpAG8AbgAAAAIOCwAEBAEAABYAAABkzgUATABlAHYAZQBsAAAAAg4AAAQE
AQIAFAAAAEV7BABUAGEAcwBrAAAAAg4CAAYEAQEAGAAAAK4eBgBPAHAAYwBvAGQAZQAAAAIOAQAE
BAEFABwAAABqzwgASwBlAHkAdwBvAHIAZABzAAAAAg4FABUEQf//QAAAADuOCwBUAGkAbQBlAEMA
cgBlAGEAdABlAGQAAAAfAAAABjx7CgBTAHkAcwB0AGUAbQBUAGkAbQBlAAAADgYAEQMBCgAmAAAA
RgMNAEUAdgBlAG4AdABSAGUAYwBvAHIAZABJAEQAAAACDgoACgRB//9tAAAAovILAEMAbwByAHIA
ZQBsAGEAdABpAG8AbgAAAEwAAABGCvEKAEEAYwB0AGkAdgBpAHQAeQBJAEQAAAAOBwAPBjXFEQBS
AGUAbABhAHQAZQBkAEEAYwB0AGkAdgBpAHQAeQBJAEQAAAAOEgAPA0H//1UAAAC4tQkARQB4AGUA
YwB1AHQAaQBvAG4AAAA4AAAARgrXCQBQAHIAbwBjAGUAcwBzAEkARAAAAA4IAAgGhTkIAFQAaABy
AGUAYQBkAEkARAAAAA4JAAgDAf//YAAAAINhBwBDAGgAYQBuAG4AZQBsAAAAAgUBIwBNAGkAYwBy
AG8AcwBvAGYAdAAtAFcAaQBuAGQAbwB3AHMALQBDAEEAUABJADIALwBPAHAAZQByAGEAdABpAG8A
bgBhAGwABAH//0AAAAA7bggAQwBvAG0AcAB1AHQAZQByAAAAAgUBEgBtAGEAaQBsAC4AcwBlAGMA
dQByAGUAcwB1AGIALgBuAGUAdAAEQf//MgAAAKAuCABTAGUAYwB1AHIAaQB0AHkAAAAXAAAABmZM
BgBVAHMAZQByAEkARAAAAA4MABMDBAETABwAAAA1RAgAVQBzAGUAcgBEAGEAdABhAAAAAg4TACEE
BAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAAT
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEsBIQAEAVAAUABAAAAAAAAAQMepsTywZs0BDADMAEgm
awBUIfQLECYRBVQhAADAIQAA5D4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAFF
AQAA3zsTAFcAaQBuAFYAZQByAGkAZgB5AFQAcgB1AHMAdABTAHQAYQByAHQAAAACQVwAAAA46wwA
RQB2AGUAbgB0AEEAdQB4AEkAbgBmAG8AAAA5AAAABpriCwBQAHIAbwBjAGUAcwBzAE4AYQBtAGUA
AAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0GxAAAAUNsSAEMAbwByAHIAZQBsAGEAdABp
AG8AbgBBAHUAeABJAG4AZgBvAAAAggAAAEYgOwYAVABhAHMAawBJAGQAAAAFASYAewBDADIARgA0
AEIANAAwADEALQA5ADgAOABEAC0ANAA2ADgARQAtADkANQAxADMALQA0AEEARQBEAEUANAA3AEYA
MABBADkANgB9AAZI+AkAUwBlAHEATgB1AG0AYgBlAHIAAAAFAQEAMQADBAAAAAAAACAAAAAYAAAA
AQAAAAAAAAABAAAAGAAAAOQ+CgAAAAAAIAwAABAAAAAQAAAAAAwAAOgLAAAPAQEADABmj6+rflRz
XU0UW2N6TxyrqwQAAA8BAQBB//+fBAAAugwFAEUAdgBlAG4AdAAAAH8AAAAGvA8FAHgAbQBsAG4A
cwAAAAUBNQBoAHQAdABwADoALwAvAHMAYwBoAGUAbQBhAHMALgBtAGkAYwByAG8AcwBvAGYAdAAu
AGMAbwBtAC8AdwBpAG4ALwAyADAAMAA0AC8AMAA4AC8AZQB2AGUAbgB0AHMALwBlAHYAZQBuAHQA
AgH//+ADAABvVAYAUwB5AHMAdABlAG0AAAACQf//uwAAAPF7CABQAHIAbwB2AGkAZABlAHIAAACg
AAAARkuVBABOAGEAbQBlAAAABQEXAE0AaQBjAHIAbwBzAG8AZgB0AC0AVwBpAG4AZABvAHcAcwAt
AEMAQQBQAEkAMgAGKRUEAEcAdQBpAGQAAAAFASYAewA1AGIAYgBjAGEANABhADgALQBiADIAMAA5
AC0ANAA4AGQAYwAtAGEAOABjADcALQBiADIAMwBkADMAZQA1ADIAMQA2AGYAYgB9AANBAwA9AAAA
9WEHAEUAdgBlAG4AdABJAEQAAAAfAAAABinaCgBRAHUAYQBsAGkAZgBpAGUAcgBzAAAADgQABgIO
AwAGBAELABoAAAAYCQcAVgBlAHIAcwBpAG8AbgAAAAIOCwAEBAEAABYAAABkzgUATABlAHYAZQBs
AAAAAg4AAAQEAQIAFAAAAEV7BABUAGEAcwBrAAAAAg4CAAYEAQEAGAAAAK4eBgBPAHAAYwBvAGQA
ZQAAAAIOAQAEBAEFABwAAABqzwgASwBlAHkAdwBvAHIAZABzAAAAAg4FABUEQf//QAAAADuOCwBU
AGkAbQBlAEMAcgBlAGEAdABlAGQAAAAfAAAABjx7CgBTAHkAcwB0AGUAbQBUAGkAbQBlAAAADgYA
EQMBCgAmAAAARgMNAEUAdgBlAG4AdABSAGUAYwBvAHIAZABJAEQAAAACDgoACgRB//9tAAAAovIL
AEMAbwByAHIAZQBsAGEAdABpAG8AbgAAAEwAAABGCvEKAEEAYwB0AGkAdgBpAHQAeQBJAEQAAAAO
BwAPBjXFEQBSAGUAbABhAHQAZQBkAEEAYwB0AGkAdgBpAHQAeQBJAEQAAAAOEgAPA0H//1UAAAC4
tQkARQB4AGUAYwB1AHQAaQBvAG4AAAA4AAAARgrXCQBQAHIAbwBjAGUAcwBzAEkARAAAAA4IAAgG
hTkIAFQAaAByAGUAYQBkAEkARAAAAA4JAAgDAf//YAAAAINhBwBDAGgAYQBuAG4AZQBsAAAAAgUB
IwBNAGkAYwByAG8AcwBvAGYAdAAtAFcAaQBuAGQAbwB3AHMALQBDAEEAUABJADIALwBPAHAAZQBy
AGEAdABpAG8AbgBhAGwABAH//0AAAAA7bggAQwBvAG0AcAB1AHQAZQByAAAAAgUBEgBtAGEAaQBs
AC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAAEQf//MgAAAKAuCABTAGUAYwB1AHIAaQB0AHkA
AAAXAAAABmZMBgBVAHMAZQByAEkARAAAAA4MABMDBAETABwAAAA1RAgAVQBzAGUAcgBEAGEAdABh
AAAAAg4TACEEBAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARAAAAAAAEAAgABAAIAAgA
CgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIsGIQAEAlAAUQBAAAAAAAAAQCtc4jqw
Zs0BVCEAADwTAADjPgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAYUGAAAjcA4A
VwBpAG4AVgBlAHIAaQBmAHkAVAByAHUAcwB0AAAAAgFoAAAA0aMIAEEAYwB0AGkAbwBuAEkARAAA
AAIFASYAewA1ADcAMwBFADMAMQBGADgALQBBAEEAQgBBAC0AMQAxAEQAMAAtADgAQwBDAEIALQAw
ADAAQwAwADQARgBDADIAOQA1AEUARQB9AARBTQAAAJUKCABVAEkAQwBoAG8AaQBjAGUAAAAXAAAA
BnGKBQB2AGEAbAB1AGUAAAAFAQEAMgACBQELAFcAVABEAF8AVQBJAF8ATgBPAE4ARQAEQX0AAACK
Tw8AUgBlAHYAbwBjAGEAdABpAG8AbgBDAGgAZQBjAGsAAABUAAAARnGKBQB2AGEAbAB1AGUAAAAF
AQEAMQAGy1IVAFcAVABEAF8AUgBFAFYATwBLAEUAXwBXAEgATwBMAEUAQwBIAEEASQBOAAAABQEE
AHQAcgB1AGUAA0FpAAAAx8MLAFMAdABhAHQAZQBBAGMAdABpAG8AbgAAABcAAAAGcYoFAHYAYQBs
AHUAZQAAAAUBAQAxAAIFARYAVwBUAEQAXwBTAFQAQQBUAEUAQQBDAFQASQBPAE4AXwBWAEUAUgBJ
AEYAWQAEQXkAAACHBAUARgBsAGEAZwBzAAAAZAAAAEZxigUAdgBhAGwAdQBlAAAABQEIADgAMAAw
ADAAMAAwADAAMAAGWv0WAEMAUABEAF8AVQBTAEUAXwBOAFQANQBfAEMASABBAEkATgBfAEYATABB
AEcAAAAFAQQAdAByAHUAZQADQW4AAAAlBQ8AQwBlAHIAdABpAGYAaQBjAGEAdABlAEkAbgBmAG8A
AABFAAAABk0ECwBkAGkAcwBwAGwAYQB5AE4AYQBtAGUAAAAFARIAbQBhAGkAbAAuAHMAZQBjAHUA
cgBlAHMAdQBiAC4AbgBlAHQAA0FfAAAAEikKAEQAaQBnAGUAcwB0AEkAbgBmAG8AAABAAAAARssl
DwBkAGkAZwBlAHMAdABBAGwAZwBvAHIAaQB0AGgAbQAAAAUBAAAGhCsGAGQAaQBnAGUAcwB0AAAA
BQEAAANBdwEAAIqpEABSAGUAZwBQAG8AbABpAGMAeQBTAGUAdAB0AGkAbgBnAAAATAEAAEZxigUA
dgBhAGwAdQBlAAAABQEFADIAMwBDADAAMABGs2kSAFcAVABQAEYAXwBPAEYARgBMAEkATgBFAE8A
SwBfAEkATgBEAAAABQEEAHQAcgB1AGUARvUMEgBXAFQAUABGAF8ATwBGAEYATABJAE4ARQBPAEsA
XwBDAE8ATQAAAAUBBAB0AHIAdQBlAEau6RUAVwBUAFAARgBfAE8ARgBGAEwASQBOAEUATwBLAE4A
QgBVAF8ASQBOAEQAAAAFAQQAdAByAHUAZQBG8IwVAFcAVABQAEYAXwBPAEYARgBMAEkATgBFAE8A
SwBOAEIAVQBfAEMATwBNAAAABQEEAHQAcgB1AGUABjr9GQBXAFQAUABGAF8ASQBHAE4ATwBSAEUA
UgBFAFYATwBDAEEAVABJAE8ATgBPAE4AVABTAAAABQEEAHQAcgB1AGUAA0GSAAAACtcQAEMAZQBy
AHQAaQBmAGkAYwBhAHQAZQBDAGgAYQBpAG4AAABnAAAABjI0CABjAGgAYQBpAG4AUgBlAGYAAAAF
ASYAewA4ADEANgBEADUANwA3AEMALQA4ADYAQQA2AC0ANAAzADgANAAtADkANgBCAEYALQBBAEUA
NABFADEAOABGADYARABCADcANQB9AANBXAAAADjrDABFAHYAZQBuAHQAQQB1AHgASQBuAGYAbwAA
ADkAAAAGmuILAFAAcgBvAGMAZQBzAHMATgBhAG0AZQAAAAUBDABpAGUAeABwAGwAbwByAGUALgBl
AHgAZQADQbEAAABQ2xIAQwBvAHIAcgBlAGwAYQB0AGkAbwBuAEEAdQB4AEkAbgBmAG8AAACCAAAA
RiA7BgBUAGEAcwBrAEkAZAAAAAUBJgB7ADcANwA4ADYAQwAyADYARgAtAEUAQQBCAEIALQA0ADgA
RQBFAC0AOQBDADkARAAtADkANAA0AEUAQwBDADAAQwA1ADkAMAA0AH0ABkj4CQBTAGUAcQBOAHUA
bQBiAGUAcgAAAAUBAQA4AANBLgAAAF2YBgBSAGUAcwB1AGwAdAAAABcAAAAGcYoFAHYAYQBsAHUA
ZQAAAAUBAQAwAAMEAAAAAAAAIAAAABgAAAABAAAAAAAAAAEAAAAYAAAA4z4KAAAAAACEFQAAEAAA
ABAAAABkFQAATBUAAA8BAQAMAGaPr6t+VHNdTRRbY3pPHKurBAAADwEBAEH//58EAAC6DAUARQB2
AGUAbgB0AAAAfwAAAAa8DwUAeABtAGwAbgBzAAAABQE1AGgAdAB0AHAAOgAvAC8AcwBjAGgAZQBt
AGEAcwAuAG0AaQBjAHIAbwBzAG8AZgB0AC4AYwBvAG0ALwB3AGkAbgAvADIAMAAwADQALwAwADgA
LwBlAHYAZQBuAHQAcwAvAGUAdgBlAG4AdAACAf//4AMAAG9UBgBTAHkAcwB0AGUAbQAAAAJB//+7
AAAA8XsIAFAAcgBvAHYAaQBkAGUAcgAAAKAAAABGS5UEAE4AYQBtAGUAAAAFARcATQBpAGMAcgBv
AHMAbwBmAHQALQBXAGkAbgBkAG8AdwBzAC0AQwBBAFAASQAyAAYpFQQARwB1AGkAZAAAAAUBJgB7
ADUAYgBiAGMAYQA0AGEAOAAtAGIAMgAwADkALQA0ADgAZABjAC0AYQA4AGMANwAtAGIAMgAzAGQA
MwBlADUAMgAxADYAZgBiAH0AA0EDAD0AAAD1YQcARQB2AGUAbgB0AEkARAAAAB8AAAAGKdoKAFEA
dQBhAGwAaQBmAGkAZQByAHMAAAAOBAAGAg4DAAYEAQsAGgAAABgJBwBWAGUAcgBzAGkAbwBuAAAA
Ag4LAAQEAQAAFgAAAGTOBQBMAGUAdgBlAGwAAAACDgAABAQBAgAUAAAARXsEAFQAYQBzAGsAAAAC
DgIABgQBAQAYAAAArh4GAE8AcABjAG8AZABlAAAAAg4BAAQEAQUAHAAAAGrPCABLAGUAeQB3AG8A
cgBkAHMAAAACDgUAFQRB//9AAAAAO44LAFQAaQBtAGUAQwByAGUAYQB0AGUAZAAAAB8AAAAGPHsK
AFMAeQBzAHQAZQBtAFQAaQBtAGUAAAAOBgARAwEKACYAAABGAw0ARQB2AGUAbgB0AFIAZQBjAG8A
cgBkAEkARAAAAAIOCgAKBEH//20AAACi8gsAQwBvAHIAcgBlAGwAYQB0AGkAbwBuAAAATAAAAEYK
8QoAQQBjAHQAaQB2AGkAdAB5AEkARAAAAA4HAA8GNcURAFIAZQBsAGEAdABlAGQAQQBjAHQAaQB2
AGkAdAB5AEkARAAAAA4SAA8DQf//VQAAALi1CQBFAHgAZQBjAHUAdABpAG8AbgAAADgAAABGCtcJ
AFAAcgBvAGMAZQBzAHMASQBEAAAADggACAaFOQgAVABoAHIAZQBhAGQASQBEAAAADgkACAMB//9g
AAAAg2EHAEMAaABhAG4AbgBlAGwAAAACBQEjAE0AaQBjAHIAbwBzAG8AZgB0AC0AVwBpAG4AZABv
AHcAcwAtAEMAQQBQAEkAMgAvAE8AcABlAHIAYQB0AGkAbwBuAGEAbAAEAf//QAAAADtuCABDAG8A
bQBwAHUAdABlAHIAAAACBQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AARB
//8yAAAAoC4IAFMAZQBjAHUAcgBpAHQAeQAAABcAAAAGZkwGAFUAcwBlAHIASQBEAAAADgwAEwME
ARMAHAAAADVECABVAHMAZQByAEQAYQB0AGEAAAACDhMAIQQEABQAAAABAAQAAQAEAAIABgACAAYA
AAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAKAAEABAAcABM=
--e89a8f234567e9f89804c54859bc
Content-Type: application/octet-stream; name="revoked_via_windows.evtx"
Content-Disposition: attachment; filename="revoked_via_windows.evtx"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_h4voxl7y1

RWxmRmlsZQAAAAAAAAAAAAEAAAAAAAAAMwAAAAAAAACAAAAAAQADAAAQAgAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAK5IpaIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEVsZkNobmsA
AQAAAAAAAAAgAAAAAAAAAAEAAAAAAAAAIAAAAAAAAACAAAAACOsAACDzAABKBQhTAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA
AABhR3g59OIAALFFAAAAAAAAlwYAAEpiAAC+QgAAFSwAAJdgAADdwwAAI0UAAG5iAAAZYgAAhEYA
AKBhAAAIOQAA7kEAAAwJAABOXwAA8mEAANjtAAAzJwAA8rEAAAxGAABj5gAAXhQAABQqAABwwAAA
tCwAAPXEAADbFwAAvL8AAAU9AABYMAAA3CkAAE88AAAeXwAACUcAADvwAAC+GwAAcEcAAKY9AAAV
BAAARiMAAIEjAADgwAAAWMUAADJjAABnHQAAd2MAAM01AACDOwAAQL8AACc8AADzYgAAvOYAAGBE
AACqPAAAjjoAALxjAACBKAAAszAAABI7AACtwAAAwzgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKioAANgHAAAB
AAAAAAAAAFpp4f2vZs0BDwEBAAwBZo+vqyYCAAAAAAAAZo+vq35Uc11NFFtjek8cq4MFAAAPAQEA
Qf//dwUAAE0CAAAAAAAAugwFAEUAdgBlAG4AdAAAAIcAAAAGagIAAAAAAAC8DwUAeABtAGwAbgBz
AAAABQE1AGgAdAB0AHAAOgAvAC8AcwBjAGgAZQBtAGEAcwAuAG0AaQBjAHIAbwBzAG8AZgB0AC4A
YwBvAG0ALwB3AGkAbgAvADIAMAAwADQALwAwADgALwBlAHYAZQBuAHQAcwAvAGUAdgBlAG4AdAAC
Af//oAQAAPgCAAAAAAAAb1QGAFMAeQBzAHQAZQBtAAAAAkH//9MAAAAaAwAAAAAAAPF7CABQAHIA
bwB2AGkAZABlAHIAAACwAAAARj0DAAAAAAAAS5UEAE4AYQBtAGUAAAAFARcATQBpAGMAcgBvAHMA
bwBmAHQALQBXAGkAbgBkAG8AdwBzAC0AQwBBAFAASQAyAAaGAwAAAAAAACkVBABHAHUAaQBkAAAA
BQEmAHsANQBiAGIAYwBhADQAYQA4AC0AYgAyADAAOQAtADQAOABkAGMALQBhADgAYwA3AC0AYgAy
ADMAZAAzAGUANQAyADEANgBmAGIAfQADQQMATQAAAPQDAAAAAAAA9WEHAEUAdgBlAG4AdABJAEQA
AAAnAAAABhUEAACGAwAAKdoKAFEAdQBhAGwAaQBmAGkAZQByAHMAAAAOBAAGAg4DAAYEAQsAIgAA
AEgEAAAAAAAAGAkHAFYAZQByAHMAaQBvAG4AAAACDgsABAQBAAAeAAAAcQQAAAAAAABkzgUATABl
AHYAZQBsAAAAAg4AAAQEAQIAHAAAAJYEAAAAAAAARXsEAFQAYQBzAGsAAAACDgIABgQBAQAgAAAA
uQQAAAAAAACuHgYATwBwAGMAbwBkAGUAAAACDgEABAQBBQAkAAAA4AQAAAAAAABqzwgASwBlAHkA
dwBvAHIAZABzAAAAAg4FABUEQf//UAAAAAsFAAAAAAAAO44LAFQAaQBtAGUAQwByAGUAYQB0AGUA
ZAAAACcAAAAGNAUAAGoCAAA8ewoAUwB5AHMAdABlAG0AVABpAG0AZQAAAA4GABEDAQoALgAAAGIF
AAAAAAAARgMNAEUAdgBlAG4AdABSAGUAYwBvAHIAZABJAEQAAAACDgoACgRB//+FAAAAlwUAAAAA
AACi8gsAQwBvAHIAcgBlAGwAYQB0AGkAbwBuAAAAXAAAAEbABQAAAAAAAArxCgBBAGMAdABpAHYA
aQB0AHkASQBEAAAADgcADwbnBQAA9AMAADXFEQBSAGUAbABhAHQAZQBkAEEAYwB0AGkAdgBpAHQA
eQBJAEQAAAAOEgAPA0H//20AAAAjBgAAAAAAALi1CQBFAHgAZQBjAHUAdABpAG8AbgAAAEgAAABG
SAYAAMAFAAAK1wkAUAByAG8AYwBlAHMAcwBJAEQAAAAOCAAIBm0GAACWBAAAhTkIAFQAaAByAGUA
YQBkAEkARAAAAA4JAAgDAf//aAAAAJcGAAAAAAAAg2EHAEMAaABhAG4AbgBlAGwAAAACBQEjAE0A
aQBjAHIAbwBzAG8AZgB0AC0AVwBpAG4AZABvAHcAcwAtAEMAQQBQAEkAMgAvAE8AcABlAHIAYQB0
AGkAbwBuAGEAbAAEAf//SAAAAAYHAAALBQAAO24IAEMAbwBtAHAAdQB0AGUAcgAAAAIFARIAbQBh
AGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQABEH//0IAAABVBwAAAAAAAKAuCABTAGUA
YwB1AHIAaQB0AHkAAAAfAAAABngHAAAAAAAAZkwGAFUAcwBlAHIASQBEAAAADgwAEwMEARMAJAAA
AJ8HAADnBQAANUQIAFUAcwBlAHIARABhAHQAYQAAAAIOEwAhBAQAFAAAAAEABAABAAQAAgAGAAIA
BgAAAAAACAAVAAgAEQAAAAAABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAB7ASEABAFQAFAAQAAAAAAAAEBaaeH9r2bNAUQlAACkFgAAmT4KAAAAAAAAAQUAAAAAAAUV
AAAAoiLe61T0+YS58oy8fAQAAAF1AQAAYQgAAAAAAADfOxMAVwBpAG4AVgBlAHIAaQBmAHkAVABy
AHUAcwB0AFMAdABhAHIAdAAAAAJBbAAAAJsIAAAjBgAAOOsMAEUAdgBlAG4AdABBAHUAeABJAG4A
ZgBvAAAAQQAAAAbGCAAAAAAAAJriCwBQAHIAbwBjAGUAcwBzAE4AYQBtAGUAAAAFAQwAaQBlAHgA
cABsAG8AcgBlAC4AZQB4AGUAA0HJAAAADAkAAAAAAABQ2xIAQwBvAHIAcgBlAGwAYQB0AGkAbwBu
AEEAdQB4AEkAbgBmAG8AAACSAAAARkMJAABVBwAAIDsGAFQAYQBzAGsASQBkAAAABQEmAHsAQQAy
AEMANAAwADYAMgA2AC0AOQA2ADQAMQAtADQAMgBBADQALQA5AEQARAA3AC0ARQA5ADUARQA5AEYA
MgAyADYANQAxAEQAfQAGrgkAAAAAAABI+AkAUwBlAHEATgB1AG0AYgBlAHIAAAAFAQEAMQADBAAA
2AcAACoqAACwAQAAAgAAAAAAAABaaeH9r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAG
AAIABgAAAAAACAAVAAgAEQAAAAAABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAADrACEABAELAAoAAwAAAAAAAEBaaeH9r2bNAUQlAACkFgAAmj4KAAAAAAAAAQUAAAAA
AAUVAAAAoiLe61T0+YS58oy8fAQAAAHlAAAAngoAAGIFAACGZxwAQwBlAHIAdABHAGUAdABDAGUA
cgB0AGkAZgBpAGMAYQB0AGUAQwBoAGEAaQBuAFMAdABhAHIAdAAAAAJBKgAAAJsIAAAhAAAABsYI
AAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAADAkAAGAAAABGQwkAAAUBJgB7AEEA
MgBDADQAMAA2ADIANgAtADkANgA0ADEALQA0ADIAQQA0AC0AOQBEAEQANwAtAEUAOQA1AEUAOQBG
ADIAMgA2ADUAMQBEAH0ABq4JAAAFAQEAMgADBAAA//9IsAEAACoqAACoAQAAAwAAAAAAAABaaeH9
r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAAAAAABAAI
AAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlACEABAEpACgABQAAAAAA
AEBaaeH9r2bNAUQlAACkFgAAmz4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAHf
AAAATgwAAAAAAACH+xkAQwBlAHIAdABWAGUAcgBpAGYAeQBSAGUAdgBvAGMAYQB0AGkAbwBuAFMA
dABhAHIAdAAAAAJBKgAAAJsIAAAhAAAABsYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUA
A0FpAAAADAkAAGAAAABGQwkAAAUBJgB7AEEAMgBDADQAMAA2ADIANgAtADkANgA0ADEALQA0ADIA
QQA0AC0AOQBEAEQANwAtAEUAOQA1AEUAOQBGADIAMgA2ADUAMQBEAH0ABq4JAAAFAQEAMwADBAAA
AKgBAAAqKgAAwAEAAAQAAAAAAAAAa5Dh/a9mzQEPAQEADAFmj6+rJgIAABQAAAABAAQAAQAEAAIA
BgACAAYAAAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAA9wAhAAQBMwAyAC4AAAAAAABAWmnh/a9mzQFEJQAApBYAAJw+CgAAAAAAAAEFAAAA
AAAFFQAAAKIi3utU9PmEufKMvHwEAAAB8QAAAPYNAAD4AgAAL64iAEMAcgB5AHAAdABSAGUAdABy
AGkAZQB2AGUATwBiAGoAZQBjAHQAQgB5AFUAcgBsAEMAYQBjAGgAZQBTAHQAYQByAHQAAAACQSoA
AACbCAAAIQAAAAbGCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAA
RkMJAAAFASYAewBBADIAQwA0ADAANgAyADYALQA5ADYANAAxAC0ANAAyAEEANAAtADkARABEADcA
LQBFADkANQBFADkARgAyADIANgA1ADEARAB9AAauCQAABQEBADQAAwQAAABSAEkAVADAAQAAKioA
ABgJAAAFAAAAAAAAAGuQ4f2vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAA
AAAIABUACAARAAAAAAAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AFYIIQAEAjMAMwAuAAAAAAAAQGuQ4f2vZs0BRCUAAKQWAACdPgoAAAAAAAABBQAAAAAABRUAAACi
It7rVPT5hLnyjLx8BAAAAVAIAAC2DwAAAAAAANMZHQBDAHIAeQBwAHQAUgBlAHQAcgBpAGUAdgBl
AE8AYgBqAGUAYwB0AEIAeQBVAHIAbABDAGEAYwBoAGUAAAACQVMBAAAEEAAAAAAAAE86AwBVAFIA
TAAAACcAAAAGHRAAAAAAAABlcwYAcwBjAGgAZQBtAGUAAAAFAQQAaAB0AHQAcAACBQGHAGgAdAB0
AHAAOgAvAC8AMQA5ADIALgAxADYAOAAuADAALgAyADIAOgAzADUAMAAyAC8ATQBFAHMAdwBTAFQA
QgBIAE0ARQBVAHcAUQB6AEEASgBCAGcAVQByAEQAZwBNAEMARwBnAFUAQQBCAEIAUwBpADIAbgBa
AGQAMAA0ADIAYgBwAEgAYgBBADcANABUAHgANgB1ADkAWQB2AGMAawBvAG0AUQBRAFUAZAB6ADcA
VwBnAEYARgBtAFoAbgBEADIAOABqACUAMgBCAHkAVQBaACUAMgBGAEIAdQBzAEkAWQB4AE0AcwBD
AEMAaABXAGgAQgB1AEEAQQBBAEEAQQBBAEEAQgAwACUAMwBEAARBiQAAAFwRAABhCAAAnwYGAE8A
YgBqAGUAYwB0AAAAagAAAEZ7EQAATQIAAHoGBAB0AHkAcABlAAAABQEVAEMATwBOAFQARQBYAFQA
XwBPAEkARABfAE8AQwBTAFAAXwBSAEUAUwBQAAbAEQAAAAAAAEQvCABjAG8AbgBzAHQAYQBuAHQA
AAAFAQEANgADQfQAAADqEQAATgwAAIcEBQBGAGwAYQBnAHMAAADXAAAARgcSAAAaAwAAcYoFAHYA
YQBsAHUAZQAAAAUBBAAyADAAMAAyAEYsEgAABBAAAM9VGgBDAFIAWQBQAFQAXwBDAEEAQwBIAEUA
XwBPAE4ATABZAF8AUgBFAFQAUgBJAEUAVgBBAEwAAAAFAQQAdAByAHUAZQAGexIAAAAAAAB9WiQA
QwBSAFkAUABUAF8ATABEAEEAUABfAFMAQwBPAFAARQBfAEIAQQBTAEUAXwBPAE4ATABZAF8AUgBF
AFQAUgBJAEUAVgBBAEwAAAAFAQQAdAByAHUAZQADQfEAAADjEgAAAAAAAHLSBwBBAHUAeABJAG4A
ZgBvAAAA0AAAAEYEEwAAAAAAAD7qGABtAGEAeABVAHIAbABSAGUAdAByAGkAZQB2AGEAbABCAHkA
dABlAEMAbwB1AG4AdAAAAAUBCQAxADAANAA4ADUANwA2ADAAMAAGWRMAAAYHAAC75hMAYwBhAGMA
aABlAEYAaQBsAGUATgBhAG0AZQBQAHIAZQBmAGkAeAAAAAUBIQBFADgAMQA5ADIAQgBCADIAMgAw
AEMARgBBADQAQQAzAEMAOABEADkAOQA1ADkAQgAwADUANAAwAEMAQwBDAEUAXwADQYICAADZEwAA
AAAAAPCVCQBDAGEAYwBoAGUASQBuAGYAbwAAAFsAAAAG/hMAAAAAAABe+QwAbABhAHMAdABTAHkA
bgBjAFQAaQBtAGUAAAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMgA6ADUANgAu
ADQANgAxAFoAAkFzAQAAXhQAAEgEAABYRBQAVQBSAEwAQwBhAGMAaABlAFAAcgBlAGYAZQB0AGMA
aABJAG4AZgBvAAAAOAEAAEaZFAAAAAAAABk+CgBvAGIAagBlAGMAdABUAHkAcABlAAAABQEhAEMA
UgBZAFAAVABOAEUAVABfAFUAUgBMAF8AQwBBAEMASABFAF8AUABSAEUAXwBGAEUAVABDAEgAXwBP
AEMAUwBQAEYCFQAAAAAAAKhzBQBlAHIAcgBvAHIAAAAFAQIAMwAyAEYjFQAAAAAAANQwDgB0AGgA
aQBzAFUAcABkAGEAdABlAFQAaQBtAGUAAAAFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6
ADMAMAA6ADEAMABaAAZ6FQAAAAAAAAltDgBuAGUAeAB0AFUAcABkAGEAdABlAFQAaQBtAGUAAAAF
ARQAMgAwADEAMgAtADAANwAtADIAOABUADAANwA6ADUAMAA6ADEAMABaAANBhAAAANYVAAAAAAAA
vw4RAFUAUgBMAEMAYQBjAGgAZQBGAGwAdQBzAGgASQBuAGYAbwAAAE8AAAAGCxYAAAAAAAAMCQoA
ZQB4AHAAaQByAGUAVABpAG0AZQAAAAUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3ADoANQAw
ADoAMQAwAFoAAwQB2QAAAGAWAAAAAAAA7NgQAFIAZQB0AHIAaQBlAHYAZQBkAE8AYgBqAGUAYwB0
AHMAAAACQaQAAACUFgAA4xIAADL9DABPAEMAUwBQAFIAZQBzAHAAbwBuAHMAZQAAAHkAAAAGvxYA
AAAAAACXagcAZgBpAGwAZQBSAGUAZgAAAAUBLABBADkARABBADQANwAyADkARQA4ADkAMgBDAEEA
QwAwADkAMABBADMAOABGADUAMgBFADQARgBEADUANgBDADMANgA0AEQARABEADcANAAxAC4AYgBp
AG4AAwRBKgAAAJsIAAAhAAAABsYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAA
DAkAAGAAAABGQwkAAAUBJgB7AEEAMgBDADQAMAA2ADIANgAtADkANgA0ADEALQA0ADIAQQA0AC0A
OQBEAEQANwAtAEUAOQA1AEUAOQBGADIAMgA2ADUAMQBEAH0ABq4JAAAFAQEANQADQSoAAADbFwAA
AAAAAF2YBgBSAGUAcwB1AGwAdAAAAAsAAAAGBxIAAAUBAQAwAAMEAAAYCQAAKioAAOgHAAAGAAAA
AAAAAI3e4f2vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAAR
AAAAAAAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMHIQAEAikA
KQAFAAAAAAAAQGuQ4f2vZs0BRCUAAKQWAACePgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLny
jLx8BAAAAR0HAADOGAAAWRMAAHueFABDAGUAcgB0AFYAZQByAGkAZgB5AFIAZQB2AG8AYwBhAHQA
aQBvAG4AAAACQdcAAAAKGQAAAAAAALfSCwBDAGUAcgB0AGkAZgBpAGMAYQB0AGUAAACuAAAARr8W
AAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABDADMARgA3AEMAMwBCAEQANwAzADEAQgBEAEUAMABF
AEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEAOAAuAGMAZQByAAaUGQAAChkAADfDCwBzAHUAYgBq
AGUAYwB0AE4AYQBtAGUAAAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQA
A0G9AAAA5hkAAAQTAAD+kREASQBzAHMAdQBlAHIAQwBlAHIAdABpAGYAaQBjAGEAdABlAAAAiAAA
AEa/FgAABQEsADEANwA2ADEARgAyADYARQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBC
ADYAMgBGAEQAOAAzADEAOQBGADMARABFADIAMAAxADgALgBjAGUAcgAGlBkAAAUBDwBzAGUAYwB1
AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQADQYEAAADqEQAAeAAAAEYHEgAABQEBADQABrwaAAAAAAAA
LWApAEMARQBSAFQAXwBWAEUAUgBJAEYAWQBfAFIARQBWAF8AQQBDAEMAVQBNAFUATABBAFQASQBW
AEUAXwBUAEkATQBFAE8AVQBUAF8ARgBMAEEARwAAAAUBBAB0AHIAdQBlAANBLAEAAC4bAAAAAAAA
EbMUAEEAZABkAGkAdABpAG8AbgBhAGwAUABhAHIAYQBtAGUAdABlAHIAcwAAAPEAAABGaRsAANYV
AAA/3AkAdABpAG0AZQBUAG8AVQBzAGUAAAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6
ADQAMwA6ADUAMgAuADgAMQA1AFoARr4bAAB4BwAAZucLAGMAdQByAHIAZQBuAHQAVABpAG0AZQAA
AAUBGAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoANAAzADoANQAyAC4AOAAzADEAWgAGFxwA
AAAAAADcjRMAdQByAGwAUgBlAHQAcgBpAGUAdgBhAGwAVABpAG0AZQBvAHUAdAAAAAUBBQBQAFQA
MgAwAFMAA0HHAAAAXxwAANkTAABw4hAAUgBlAHYAbwBjAGEAdABpAG8AbgBTAHQAYQB0AHUAcwAA
AJQAAABGkhwAAJQWAAAy0QUAaQBuAGQAZQB4AAAABQEBADAARgIVAAAFAQEAMABGvBwAAMARAACE
9AYAcgBlAGEAcwBvAG4AAAAFAQEAMAAG3RwAAHEEAADk6xMAYQBjAHQAdQBhAGwARgByAGUAcwBo
AG4AZQBzAHMAVABpAG0AZQAAAAUBCABQAFQAMQAzAE0ANAAyAFMAA0EJAgAAlBYAAAACAABGNB0A
AJ8HAAB1DwgAbABvAGMAYQB0AGkAbwBuAAAABQEIAFUAcgBsAEMAYQBjAGgAZQBGZx0AAPYNAABv
MgMAdQByAGwAAAAFAYcAaAB0AHQAcAA6AC8ALwAxADkAMgAuADEANgA4AC4AMAAuADIAMgA6ADMA
NQAwADIALwBNAEUAcwB3AFMAVABCAEgATQBFAFUAdwBRAHoAQQBKAEIAZwBVAHIARABnAE0AQwBH
AGcAVQBBAEIAQgBTAGkAMgBuAFoAZAAwADQAMgBiAHAASABiAEEANwA0AFQAeAA2AHUAOQBZAHYA
YwBrAG8AbQBRAFEAVQBkAHoANwBXAGcARgBGAG0AWgBuAEQAMgA4AGoAJQAyAEIAeQBVAFoAJQAy
AEYAQgB1AHMASQBZAHgATQBzAEMAQwBoAFcAaABCAHUAQQBBAEEAQQBBAEEAQQBCADAAJQAzAEQA
Rr8WAAAFASwAQQA5AEQAQQA0ADcAMgA5AEUAOAA5ADIAQwBBAEMAMAA5ADAAQQAzADgARgA1ADIA
RQA0AEYARAA1ADYAQwAzADYANABEAEQARAA3ADQAMQAuAGIAaQBuAAbvHgAA3RwAAKQhCgBpAHMA
cwB1AGUAcgBOAGEAbQBlAAAABQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAANBKgAA
AJsIAAAhAAAABsYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAADAkAAGAAAABG
QwkAAAUBJgB7AEEAMgBDADQAMAA2ADIANgAtADkANgA0ADEALQA0ADIAQQA0AC0AOQBEAEQANwAt
AEUAOQA1AEUAOQBGADIAMgA2ADUAMQBEAH0ABq4JAAAFAQEANgADQRQAAADbFwAACwAAAAYHEgAA
BQEBADAAAwQAAB8AAOgHAAAqKgAAMBIAAAcAAAAAAAAAjd7h/a9mzQEPAQEADAFmj6+rJgIAABQA
AAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAKAAEABAAcABMAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAaREhAAQCCwALAAMAAAAAAABAjd7h/a9mzQFEJQAApBYAAJ8+
CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABYxEAALYgAAA0BQAAvCMXAEMAZQBy
AHQARwBlAHQAQwBlAHIAdABpAGYAaQBjAGEAdABlAEMAaABhAGkAbgAAAAJBlwAAAAoZAACOAAAA
Rr8WAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABDADMARgA3AEMAMwBCAEQANwAzADEAQgBEAEUA
MABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEAOAAuAGMAZQByAAaUGQAABQESAG0AYQBpAGwA
LgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AAMBYAAAAJQhAACeCgAABjYOAFYAYQBsAGkAZABh
AHQAaQBvAG4AVABpAG0AZQAAAAIFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMwA6
ADUAMgAuADgAMQA1AFoABAHKAAAA+SEAAMYIAACaQQ8AQQBkAGQAaQB0AGkAbwBuAGEAbABTAHQA
bwByAGUAAAACQZcAAAAKGQAAjgAAAEa/FgAABQEsADEANgA4ADgAOQA1ADEAQwA0AEQAQwAzAEYA
NwBDADMAQgBEADcAMwAxAEIARABFADAARQBEADYAMwA1ADcAMwBGADkAOQAzAEQANAAxADgALgBj
AGUAcgAGlBkAAAUBEgBtAGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAADBEGDAQAA
yCIAAM4YAAD7FRAARQB4AHQAZQBuAGQAZQBkAEsAZQB5AFUAcwBhAGcAZQAAACkAAAAG+yIAAJcF
AADiggcAbwByAE0AYQB0AGMAaAAAAAUBBAB0AHIAdQBlAAJBnQAAACkjAAAAAAAAwUoFAFUAcwBh
AGcAZQAAAIAAAABGRiMAAOAEAAAq0wMAbwBpAGQAAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1
AC4ANwAuADMALgAxAAaBIwAAAAAAACutBABuAGEAbQBlAAAABQEVAFMAZQByAHYAZQByACAAQQB1
AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuAANBPgAAACkjAAA1AAAABkYjAAAFARYAMQAuADMALgA2
AC4AMQAuADQALgAxAC4AMwAxADEALgAxADAALgAzAC4AMwADQTwAAAApIwAAMwAAAAZGIwAABQEV
ADIALgAxADYALgA4ADQAMAAuADEALgAxADEAMwA3ADMAMAAuADQALgAxAAMEQQgBAADqEQAA/wAA
AEYHEgAABQEIADQAOAAwADAAMAAwADAAMABGciQAAO8eAABk0C4AQwBFAFIAVABfAEMASABBAEkA
TgBfAFIARQBWAE8AQwBBAFQASQBPAE4AXwBDAEgARQBDAEsAXwBDAEgAQQBJAE4AXwBFAFgAQwBM
AFUARABFAF8AUgBPAE8AVAAAAAUBBAB0AHIAdQBlAAbpJAAAaRsAAD8oKgBDAEUAUgBUAF8AQwBI
AEEASQBOAF8AUgBFAFYATwBDAEEAVABJAE8ATgBfAEEAQwBDAFUATQBVAEwAQQBUAEkAVgBFAF8A
VABJAE0ARQBPAFUAVAAAAAUBBAB0AHIAdQBlAANBWgAAAF0lAAAuGwAAkdYPAEMAaABhAGkAbgBF
AG4AZwBpAG4AZQBJAG4AZgBvAAAAKQAAAAaOJQAALBIAAA8LBwBjAG8AbgB0AGUAeAB0AAAABQEE
AHUAcwBlAHIAAwHQAAAAvCUAAAAAAADVmg4AQQBkAGQAaQB0AGkAbwBuAGEAbABJAG4AZgBvAAAA
AkGfAAAA7CUAAL8WAADXZRkATgBlAHQAdwBvAHIAawBDAG8AbgBuAGUAYwB0AGkAdgBpAHQAeQBT
AHQAYQB0AHUAcwAAAFoAAABGBxIAAAUBAQAxAAY8JgAAAAAAANtQGgBfAFMARQBOAFMAQQBQAEkA
XwBOAEUAVABXAE8AUgBLAF8AQQBMAEkAVgBFAF8ATABBAE4AAAAFAQQAdAByAHUAZQADBEHRCgAA
kSYAAEgGAAAK1xAAQwBlAHIAdABpAGYAaQBjAGEAdABlAEMAaABhAGkAbgAAAMAAAABGxCYAAJIc
AAAyNAgAYwBoAGEAaQBuAFIAZQBmAAAABQEmAHsAQQAzADgAMwA0ADcAMAA1AC0ARgBDAEUAMQAt
ADQAMwAwAEUALQA4ADcARgBCAC0ARQAzADMANQA0ADkARAAwADcANgA2ADAAfQAGMycAACMVAACU
0xcAcgBlAHYAbwBjAGEAdABpAG8AbgBGAHIAZQBzAGgAbgBlAHMAcwBUAGkAbQBlAAAABQEIAFAA
VAAxADMATQA0ADIAUwACAfMAAACJJwAAkSYAAAqACwBUAHIAdQBzAHQAUwB0AGEAdAB1AHMAAAAC
QTQAAACzJwAAexEAAHqXCwBFAHIAcgBvAHIAUwB0AGEAdAB1AHMAAAALAAAABgcSAAAFAQEAMAAD
QY8AAADsJwAAQwkAAGAUCgBJAG4AZgBvAFMAdABhAHQAdQBzAAAAaAAAAEYHEgAABQEDADEAMAAw
AAYiKAAA/hMAAJ7jHwBDAEUAUgBUAF8AVABSAFUAUwBUAF8ASABBAFMAXwBQAFIARQBGAEUAUgBS
AEUARABfAEkAUwBTAFUARQBSAAAABQEEAHQAcgB1AGUAAwQBOQYAAIEoAADIIgAAO7IMAEMAaABh
AGkAbgBFAGwAZQBtAGUAbgB0AAAAAkGXAAAAChkAAI4AAABGvxYAAAUBLAAxADYAOAA4ADkANQAx
AEMANABEAEMAMwBGADcAQwAzAEIARAA3ADMAMQBCAEQARQAwAEUARAA2ADMANQA3ADMARgA5ADkA
MwBEADQAMQA4AC4AYwBlAHIABpQZAAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4A
bgBlAHQAA0HGAAAASSkAAOwlAABXjRIAUwBpAGcAbgBhAHQAdQByAGUAQQBsAGcAbwByAGkAdABo
AG0AAACPAAAARkYjAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1
AEaxKQAAAAAAAHlxCABoAGEAcwBoAE4AYQBtAGUAAAAFAQQAUwBIAEEAMQAG3CkAAAAAAABhxQ0A
cAB1AGIAbABpAGMASwBlAHkATgBhAG0AZQAAAAUBAwBSAFMAQQADQbAAAAAUKgAAmRQAANkLEgBQ
AHUAYgBsAGkAYwBLAGUAeQBBAGwAZwBvAHIAaQB0AGgAbQAAAHkAAABGRiMAAAUBFAAxAC4AMgAu
ADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARtwpAAAFAQMAUgBTAEEABosqAAAXHAAA
HOsPAHAAdQBiAGwAaQBjAEsAZQB5AEwAZQBuAGcAdABoAAAABQEEADIAMAA0ADgAAwGmAAAAiScA
AAJBFAAAALMnAAALAAAABgcSAAAFAQEAMAADQYIAAADsJwAAeQAAAEYHEgAABQEDADEAMAAyAEYE
KwAAsycAADo0HwBDAEUAUgBUAF8AVABSAFUAUwBUAF8ASABBAFMAXwBLAEUAWQBfAE0AQQBUAEMA
SABfAEkAUwBTAFUARQBSAAAABQEEAHQAcgB1AGUABiIoAAAFAQQAdAByAHUAZQADBAGcAAAAdCsA
AF0lAACRRBAAQQBwAHAAbABpAGMAYQB0AGkAbwBuAFUAcwBhAGcAZQAAAAJBZwAAACkjAABeAAAA
RkYjAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgAxAAaBIwAABQEVAFMAZQBy
AHYAZQByACAAQQB1AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuAAMEASkAAAAVLAAAlCEAAMaLDQBJ
AHMAcwB1AGEAbgBjAGUAVQBzAGEAZwBlAAAAA0F2AgAAQywAAGAWAADsOg4AUgBlAHYAbwBjAGEA
dABpAG8AbgBJAG4AZgBvAAAAPQAAAAZyLAAAAAAAAJI5DQBmAHIAZQBzAGgAbgBlAHMAcwBUAGkA
bQBlAAAABQEIAFAAVAAxADMATQA0ADIAUwACQT4AAAC0LAAAPCYAANuqEABSAGUAdgBvAGMAYQB0
AGkAbwBuAFIAZQBzAHUAbAB0AAAACwAAAAYHEgAABQEBADAAA0HBAQAAlBYAALgBAABGNB0AAAUB
CABVAHIAbABDAGEAYwBoAGUARmcdAAAFAYcAaAB0AHQAcAA6AC8ALwAxADkAMgAuADEANgA4AC4A
MAAuADIAMgA6ADMANQAwADIALwBNAEUAcwB3AFMAVABCAEgATQBFAFUAdwBRAHoAQQBKAEIAZwBV
AHIARABnAE0AQwBHAGcAVQBBAEIAQgBTAGkAMgBuAFoAZAAwADQAMgBiAHAASABiAEEANwA0AFQA
eAA2AHUAOQBZAHYAYwBrAG8AbQBRAFEAVQBkAHoANwBXAGcARgBGAG0AWgBuAEQAMgA4AGoAJQAy
AEIAeQBVAFoAJQAyAEYAQgB1AHMASQBZAHgATQBzAEMAQwBoAFcAaABCAHUAQQBBAEEAQQBBAEEA
QQBCADAAJQAzAEQARr8WAAAFASwAQQA5AEQAQQA0ADcAMgA5AEUAOAA5ADIAQwBBAEMAMAA5ADAA
QQAzADgARgA1ADIARQA0AEYARAA1ADYAQwAzADYANABEAEQARAA3ADQAMQAuAGIAaQBuAAbvHgAA
BQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAMEBAGiAgAAgSgAAAJBkQAAAAoZAACI
AAAARr8WAAAFASwAMQA3ADYAMQBGADIANgBFAEIAMAA4ADIANAA3ADAARgA0ADQAQgAyADcAOABF
AEIANgAyAEYARAA4ADMAMQA5AEYAMwBEAEUAMgAwADEAOAAuAGMAZQByAAaUGQAABQEPAHMAZQBj
AHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAANBWgAAAEkpAABRAAAARkYjAAAFARQAMQAuADIALgA4
ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEaxKQAABQEEAFMASABBADEABtwpAAAFAQMA
UgBTAEEAA0FaAAAAFCoAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkA
LgAxAC4AMQAuADEARtwpAAAFAQMAUgBTAEEABosqAAAFAQQAMgAwADQAOAADAfUAAACJJwAAAkEU
AAAAsycAAAsAAAAGBxIAAAUBAQAwAANB0QAAAOwnAADIAAAARgcSAAAFAQMAMQAwAEMARlgwAADs
JwAAoL0gAEMARQBSAFQAXwBUAFIAVQBTAFQAXwBIAEEAUwBfAE4AQQBNAEUAXwBNAEEAVABDAEgA
XwBJAFMAUwBVAEUAUgAAAAUBBAB0AHIAdQBlAEazMAAAtiAAAHyXGQBDAEUAUgBUAF8AVABSAFUA
UwBUAF8ASQBTAF8AUwBFAEwARgBfAFMASQBHAE4ARQBEAAAABQEEAHQAcgB1AGUABiIoAAAFAQQA
dAByAHUAZQADBEEqAAAAdCsAACEAAAAGIDEAAEMsAABs+wMAYQBuAHkAAAAFAQQAdAByAHUAZQAD
QRoAAAAVLAAAEQAAAAYgMQAABQEEAHQAcgB1AGUAAwQEQSoAAACbCAAAIQAAAAbGCAAABQEMAGkA
ZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewBBADIAQwA0ADAA
NgAyADYALQA5ADYANAAxAC0ANAAyAEEANAAtADkARABEADcALQBFADkANQBFADkARgAyADIANgA1
ADEARAB9AAauCQAABQEBADcAA0EUAAAA2xcAAAsAAAAGBxIAAAUBAQAwAAMEAAAEQf//NzASAAAq
KgAAwAQAAAgAAAAAAAAAngXi/a9mzQEPAQEADAFmj6+rJgIAABQAAAABAAQAAQAEAAIABgACAAYA
AAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAA/gMhAAQAHgAeAAEAAAAAAABAjd7h/a9mzQFEJQAApBYAAKA+CgAAAAAAAAEFAAAAAAAFFQAA
AKIi3utU9PmEufKMvHwEAAAB+AMAAOYyAACxKQAAedogAEMAZQByAHQAVgBlAHIAaQBmAHkAQwBl
AHIAdABpAGYAaQBjAGEAdABlAEMAaABhAGkAbgBQAG8AbABpAGMAeQAAAAJBXQAAADozAADEJgAA
choGAFAAbwBsAGkAYwB5AAAAPgAAAEZ7EQAABQEVAEMARQBSAFQAXwBDAEgAQQBJAE4AXwBQAE8A
TABJAEMAWQBfAFMAUwBMAAbAEQAABQEBADQAA0GXAAAAChkAAI4AAABGvxYAAAUBLAAxADYAOAA4
ADkANQAxAEMANABEAEMAMwBGADcAQwAzAEIARAA3ADMAMQBCAEQARQAwAEUARAA2ADMANQA3ADMA
RgA5ADkAMwBEADQAMQA4AC4AYwBlAHIABpQZAAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMA
dQBiAC4AbgBlAHQAA0FeAAAAkSYAAFUAAAAGxCYAAAUBJgB7AEEAMwA4ADMANAA3ADAANQAtAEYA
QwBFADEALQA0ADMAMABFAC0AOAA3AEYAQgAtAEUAMwAzADUANAA5AEQAMAA3ADYANgAwAH0AA0EU
AAAA6hEAAAsAAAAGBxIAAAUBAQAwAANB9QAAALQ0AAC2DwAAU1gXAFMAUwBMAEEAZABkAGkAdABp
AG8AbgBhAGwAUABvAGwAaQBjAHkASQBuAGYAbwAAAHoAAABG9TQAAPsiAADi8QgAYQB1AHQAaABU
AHkAcABlAAAABQEGAHMAZQByAHYAZQByAAYkNQAAAAAAAM6QCgBzAGUAcgB2AGUAcgBOAGEAbQBl
AAAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AAJBNAAAAHQ1AAA0HQAA
NQ8LAEkAZwBuAG8AcgBlAEYAbABhAGcAcwAAAAsAAAAGBxIAAAUBAQAwAAMEQXkAAACuNQAAOjMA
APLPBgBTAHQAYQB0AHUAcwAAAFoAAABGzTUAAAcSAAAxNQoAYwBoAGEAaQBuAEkAbgBkAGUAeAAA
AAUBAgAtADEABvg1AAAAAAAAdr4MAGUAbABlAG0AZQBuAHQASQBuAGQAZQB4AAAABQECAC0AMQAD
QSoAAACbCAAAIQAAAAbGCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABg
AAAARkMJAAAFASYAewBBADIAQwA0ADAANgAyADYALQA5ADYANAAxAC0ANAAyAEEANAAtADkARABE
ADcALQBFADkANQBFADkARgAyADIANgA1ADEARAB9AAauCQAABQEBADgAA0EUAAAA2xcAAAsAAAAG
BxIAAAUBAQAwAAMEAADABAAAKioAAHgnAAAJAAAAAAAAAJ4F4v2vZs0BDwEBAAwBZo+vqyYCAAAU
AAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARAAAAAAAEAAgABAAIAAgACgABAAQAHAATAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAK8mIQAEAFoAWgAAAgAAAAAAQJ4F4v2vZs0BRCUAAKQWAACh
PgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAakmAACmNwAAuQQAAK6wCwBYADUA
MAA5AE8AYgBqAGUAYwB0AHMAAAACQTsGAAAKGQAAiAAAAEa/FgAABQEsADEANwA2ADEARgAyADYA
RQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBCADYAMgBGAEQAOAAzADEAOQBGADMARABF
ADIAMAAxADgALgBjAGUAcgAGlBkAAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAC
AZ0AAABmOAAACxYAAMzJBwBTAHUAYgBqAGUAYwB0AAAAAgE2AAAAiDgAAD0DAADLEAIAQwBOAAAA
AgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEASoAAADDOAAA6SQAAP8QAgBEAEMA
AAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAMM4AAACBQEDAG4AZQB0AAQEQcMAAAAIOQAA
JDUAAA6MDABTAHUAYgBqAGUAYwB0AEsAZQB5AEkARAAAAJgAAABGMzkAAAAAAAANpggAYwBvAG0A
cAB1AHQAZQBkAAAABQEFAGYAYQBsAHMAZQAGYDkAAKY3AAAuygQAaABhAHMAaAAAAAUBKAA3ADcA
MwBFAEQANgA4ADAANQAxADYANgA2ADYANwAwAEYANgBGADIAMwBGAEIAMgA1ADEAOQBGAEMAMQBC
AEEAQwAyADEAOABDADQAQwBCAANBWgAAAEkpAABRAAAARkYjAAAFARQAMQAuADIALgA4ADQAMAAu
ADEAMQAzADUANAA5AC4AMQAuADEALgA1AEaxKQAABQEEAFMASABBADEABtwpAAAFAQMAUgBTAEEA
A0FaAAAAFCoAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4A
MQAuADEARtwpAAAFAQMAUgBTAEEABosqAAAFAQQAMgAwADQAOAADAX8AAACOOgAA5jIAAHldBgBJ
AHMAcwB1AGUAcgAAAAIBKAAAAIg4AAACBQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBB
AAQBHAAAAMM4AAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAMM4AAACBQEDAG4AZQB0AAQE
AWwAAAASOwAAexIAAL0EDABTAGUAcgBpAGEAbABOAHUAbQBiAGUAcgAAAAIFASAANwAyADQAMwBE
ADYANgBEAEIARgBGAEEAOQBCADkAMgA0ADEAQQBEADcANABFADkAOABDADcANgBCAEQANwBCAAQB
TgAAAIM7AACuNQAAspcJAE4AbwB0AEIAZQBmAG8AcgBlAAAAAgUBFAAyADAAMQAyAC0AMAA3AC0A
MQA5AFQAMQA2ADoANQA1ADoAMwA3AFoABAFMAAAA1jsAAHoVAADJDQgATgBvAHQAQQBmAHQAZQBy
AAAAAgUBFAAyADAAMQA3AC0AMAA3AC0AMQA5AFQAMQA3ADoAMAA1ADoAMwA1AFoABAHjAQAAJzwA
AAAAAAA0+AoARQB4AHQAZQBuAHMAaQBvAG4AcwAAAAJBUgEAAE88AAD1NAAAYm0IAEsAZQB5AFUA
cwBhAGcAZQAAAC8BAABGcjwAAFwRAAAflwgAYwByAGkAdABpAGMAYQBsAAAABQEEAHQAcgB1AGUA
RgcSAAAFAQIAOAA2AEaqPAAAmwgAALhwIABDAEUAUgBUAF8ARABJAEcASQBUAEEATABfAFMASQBH
AE4AQQBUAFUAUgBFAF8ASwBFAFkAXwBVAFMAQQBHAEUAAAAFAQQAdAByAHUAZQBGBT0AAHI8AADf
lxwAQwBFAFIAVABfAEsARQBZAF8AQwBFAFIAVABfAFMASQBHAE4AXwBLAEUAWQBfAFUAUwBBAEcA
RQAAAAUBBAB0AHIAdQBlAAZYPQAAiyoAABwAFwBDAEUAUgBUAF8AQwBSAEwAXwBTAEkARwBOAF8A
SwBFAFkAXwBVAFMAQQBHAEUAAAAFAQQAdAByAHUAZQADQWMAAACmPQAAAhUAAKjyEABCAGEAcwBp
AGMAQwBvAG4AcwB0AHIAYQBpAG4AdABzAAAAMAAAAEZyPAAABQEEAHQAcgB1AGUABuo9AAAiKAAA
nhgCAGMAQQAAAAUBBAB0AHIAdQBlAAMEBEFnBQAAChkAAI4AAABGvxYAAAUBLAAxADYAOAA4ADkA
NQAxAEMANABEAEMAMwBGADcAQwAzAEIARAA3ADMAMQBCAEQARQAwAEUARAA2ADMANQA3ADMARgA5
ADkAMwBEADQAMQA4AC4AYwBlAHIABpQZAAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBi
AC4AbgBlAHQAAgE5AAAAZjgAAAIBLgAAAIg4AAACBQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBz
AHUAYgAuAG4AZQB0AAQEQXUAAAAIOQAAbAAAAEYzOQAABQEFAGYAYQBsAHMAZQAGYDkAAAUBKAA1
ADEAQQA2ADAAOAA1AEIAQQA3ADAANQBBAEEAMgA3ADMARAA5ADEARgAwADgAMQBDAEQAQgA0AEMA
OABCADEANQAzADEAQgBGADQAQgAzAANBWgAAAEkpAABRAAAARkYjAAAFARQAMQAuADIALgA4ADQA
MAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEaxKQAABQEEAFMASABBADEABtwpAAAFAQMAUgBT
AEEAA0FaAAAAFCoAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAx
AC4AMQAuADEARtwpAAAFAQMAUgBTAEEABosqAAAFAQQAMgAwADQAOAADAWkAAACOOgAAAgEoAAAA
iDgAAAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAAwzgAAAIFAQkAcwBl
AGMAdQByAGUAcwB1AGIABAEQAAAAwzgAAAIFAQMAbgBlAHQABAQBMgAAABI7AAACBQEUADEANQBB
ADEAMAA2AEUAMAAwADAAMAAwADAAMAAwADAAMAAwADEARAAEATIAAACDOwAAAgUBFAAyADAAMQAy
AC0AMAA3AC0AMgAwAFQAMQA4ADoANQA5ADoANAA1AFoABAEyAAAA1jsAAAIFARQAMgAwADEANAAt
ADAANwAtADIAMABUADEAOAA6ADUAOQA6ADQANQBaAAQBQQIAACc8AAACAXIAAADIIgAAAkFnAAAA
KSMAAF4AAABGRiMAAAUBEQAxAC4AMwAuADYALgAxAC4ANQAuADUALgA3AC4AMwAuADEABoEjAAAF
ARUAUwBlAHIAdgBlAHIAIABBAHUAdABoAGUAbgB0AGkAYwBhAHQAaQBvAG4AAwRBkQAAAE88AACI
AAAARnI8AAAFAQQAdAByAHUAZQBGBxIAAAUBAgBBADAARqo8AAAFAQQAdAByAHUAZQAG7kEAAI4l
AABPbx8AQwBFAFIAVABfAEsARQBZAF8ARQBOAEMASQBQAEgARQBSAE0ARQBOAFQAXwBLAEUAWQBf
AFUAUwBBAEcARQAAAAUBBAB0AHIAdQBlAAMBbQAAAExCAACuCQAASNIOAFMAdQBiAGoAZQBjAHQA
QQBsAHQATgBhAG0AZQAAAAIBPAAAAHxCAAC8GgAAbZEJAEkAUABBAGQAZAByAGUAcwBzAAAAAgUB
CwAxADkAMgAuADEANgA4AC4AMAAuADQABAQBtwAAAL5CAABtBgAAxaMWAEEAdQB0AGgAbwByAGkA
dAB5AEsAZQB5AEkAZABlAG4AdABpAGYAaQBlAHIAAAACQXYAAAD+QgAA+SEAANqWBQBLAGUAeQBJ
AEQAAABZAAAABmA5AAAFASgANwA3ADMARQBEADYAOAAwADUAMQA2ADYANgA2ADcAMABGADYARgAy
ADMARgBCADIANQAxADkARgBDADEAQgBBAEMAMgAxADgAQwA0AEMAQgADBAQEQTUaAACUFgAAiAAA
AEa/FgAABQEsAEEAOQBEAEEANAA3ADIAOQBFADgAOQAyAEMAQQBDADAAOQAwAEEAMwA4AEYANQAy
AEUANABGAEQANQA2AEMAMwA2ADQARABEAEQANwA0ADEALgBiAGkAbgAG7x4AAAUBDwBzAGUAYwB1
AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQACQUkAAACuNQAACwAAAAYHEgAABQEBADAAAgUBGABPAEMA
UwBQAF8AUwBVAEMAQwBFAFMAUwBGAFUATABfAFIARQBTAFAATwBOAFMARQAEAVAAAABgRAAAlBkA
ALc1CgBQAHIAbwBkAHUAYwBlAGQAQQB0AAAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5
ADoANAAwADoAMwAwAFoABAFpAAAAjjoAAAIBKAAAAIg4AAACBQEPAHMAZQBjAHUAcgBlAHMAdQBi
AC0ARABDAC0AQwBBAAQBHAAAAMM4AAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAMM4AAAC
BQEDAG4AZQB0AAQEAYkAAAAjRQAA1jsAAEnGDwBEAGUAbABlAGcAYQB0AGUAZABTAGkAZwBuAGUA
cgAAAAIBIAAAAIg4AAACBQELAG8AYwBzAHAAcwBpAGcAbgBpAG4AZwAEARwAAADDOAAAAgUBCQBT
AGUAYwB1AHIAZQBzAHUAYgAEARAAAADDOAAAAgUBAwBuAGUAdAAEBAFlAgAAsUUAACkjAADBkAgA
UgBlAHMAcABvAG4AcwBlAAAAAgEyAAAAEjsAAAIFARQAMQAxADIAQgBGADQAQQAwADAAMAAwADAA
MAAwADAAMAAwADAAMABBAARBcwAAAAxGAAAAAAAAVtYKAEMAZQByAHQAUwB0AGEAdAB1AHMAAAAL
AAAABgcSAAAFAQEAMQACBQEeAE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBSAEUAVgBPAEsARQBEAF8A
QwBFAFIAVABfAFMAVABBAFQAVQBTAARB5wAAAIRGAABmOAAADJALAFIAZQB2AG8AawBlAGQASQBu
AGYAbwAAAFcAAAAGrUYAACAxAADsyA4AcgBlAHYAbwBjAGEAdABpAG8AbgBEAGEAdABlAAAABQEU
ADIAMAAxADIALQAwADcALQAyADAAVAAxADcAOgA1ADAAOgAwADAAWgACQWEAAAAJRwAAciQAAKTM
BgBSAGUAYQBzAG8AbgAAAAsAAAAGBxIAAAUBAQAxAAIFARkAQwBSAEwAXwBSAEUAQQBTAE8ATgBf
AEsARQBZAF8AQwBPAE0AUABSAE8ATQBJAFMARQAEBAFQAAAAcEcAAAAAAAAnWgoAVABoAGkAcwBV
AHAAZABhAHQAZQAAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABa
AAQBUAAAAMVHAABYPQAAXOsKAE4AZQB4AHQAVQBwAGQAYQB0AGUAAAACBQEUADIAMAAxADIALQAw
ADcALQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgAEBAGPAQAAsUUAAAIBMgAAABI7AAACBQEUADEA
MQA0ADMANABCADYANwAwADAAMAAwADAAMAAwADAAMAAwADAAQgAEQVUAAAAMRgAACwAAAAYHEgAA
BQEBADEAAgUBHgBPAEMAUwBQAF8AQgBBAFMASQBDAF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQA
XwBTAFQAQQBUAFUAUwAEQYUAAACERgAAMQAAAAatRgAABQEUADIAMAAxADIALQAwADcALQAxADkA
VAAyADIAOgA0ADkAOgAwADAAWgACQUUAAAAJRwAACwAAAAYHEgAABQEBADAAAgUBFgBDAFIATABf
AFIARQBBAFMATwBOAF8AVQBOAFMAUABFAEMASQBGAEkARQBEAAQEATIAAABwRwAAAgUBFAAyADAA
MQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMwAwADoAMQAwAFoABAEyAAAAxUcAAAIFARQAMgAwADEA
MgAtADAANwAtADIAOABUADAANwA6ADUAMAA6ADEAMABaAAQEAY8BAACxRQAAAgEyAAAAEjsAAAIF
ARQAMQAxADQANAA4AEYARQA2ADAAMAAwADAAMAAwADAAMAAwADAAMABDAARBVQAAAAxGAAALAAAA
BgcSAAAFAQEAMQACBQEeAE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBSAEUAVgBPAEsARQBEAF8AQwBF
AFIAVABfAFMAVABBAFQAVQBTAARBhQAAAIRGAAAxAAAABq1GAAAFARQAMgAwADEAMgAtADAANwAt
ADEAOQBUADIAMgA6ADUAMwA6ADAAMABaAAJBRQAAAAlHAAALAAAABgcSAAAFAQEAMAACBQEWAEMA
UgBMAF8AUgBFAEEAUwBPAE4AXwBVAE4AUwBQAEUAQwBJAEYASQBFAEQABAQBMgAAAHBHAAACBQEU
ADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAzADAAOgAxADAAWgAEATIAAADFRwAAAgUBFAAy
ADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3ADoANQAwADoAMQAwAFoABAQBjwEAALFFAAACATIAAAAS
OwAAAgUBFAAxADEANgBCAEYAOQAxADQAMAAwADAAMAAwADAAMAAwADAAMAAxADAABEFVAAAADEYA
AAsAAAAGBxIAAAUBAQAxAAIFAR4ATwBDAFMAUABfAEIAQQBTAEkAQwBfAFIARQBWAE8ASwBFAEQA
XwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABEGFAAAAhEYAADEAAAAGrUYAAAUBFAAyADAAMQAyAC0A
MAA3AC0AMQA5AFQAMgAzADoAMwA2ADoAMAAwAFoAAkFFAAAACUcAAAsAAAAGBxIAAAUBAQAwAAIF
ARYAQwBSAEwAXwBSAEUAQQBTAE8ATgBfAFUATgBTAFAARQBDAEkARgBJAEUARAAEBAEyAAAAcEcA
AAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABaAAQBMgAAAMVHAAAC
BQEUADIAMAAxADIALQAwADcALQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgAEBAH/AAAAsUUAAAIB
MgAAABI7AAACBQEUADEAMQBCADgAMQBCADcANAAwADAAMAAwADAAMAAwADAAMAAwADEAMgAEQU8A
AAAMRgAACwAAAAYHEgAABQEBADAAAgUBGwBPAEMAUwBQAF8AQgBBAFMASQBDAF8ARwBPAE8ARABf
AEMARQBSAFQAXwBTAFQAQQBUAFUAUwAEATIAAABwRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAw
AFQAMQA5ADoAMwAwADoAMQAwAFoABAEyAAAAxUcAAAIFARQAMgAwADEAMgAtADAANwAtADIAOABU
ADAANwA6ADUAMAA6ADEAMABaAAQEAY8BAACxRQAAAgEyAAAAEjsAAAIFARQAMQA1ADAAQgA0ADIA
MgA4ADAAMAAwADAAMAAwADAAMAAwADAAMQAzAARBVQAAAAxGAAALAAAABgcSAAAFAQEAMQACBQEe
AE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBSAEUAVgBPAEsARQBEAF8AQwBFAFIAVABfAFMAVABBAFQA
VQBTAARBhQAAAIRGAAAxAAAABq1GAAAFARQAMgAwADEAMgAtADAANwAtADIAMABUADEANgA6ADIA
NwA6ADAAMABaAAJBRQAAAAlHAAALAAAABgcSAAAFAQEAMAACBQEWAEMAUgBMAF8AUgBFAEEAUwBP
AE4AXwBVAE4AUwBQAEUAQwBJAEYASQBFAEQABAQBMgAAAHBHAAACBQEUADIAMAAxADIALQAwADcA
LQAyADAAVAAxADkAOgAzADAAOgAxADAAWgAEATIAAADFRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0A
MgA4AFQAMAA3ADoANQAwADoAMQAwAFoABAQBjwEAALFFAAACATIAAAASOwAAAgUBFAAxADUAMABD
AEUAMwA3ADUAMAAwADAAMAAwADAAMAAwADAAMAAxADQABEFVAAAADEYAAAsAAAAGBxIAAAUBAQAx
AAIFAR4ATwBDAFMAUABfAEIAQQBTAEkAQwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBU
AEEAVABVAFMABEGFAAAAhEYAADEAAAAGrUYAAAUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5
ADoAMQAxADoAMAAwAFoAAkFFAAAACUcAAAsAAAAGBxIAAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUA
QQBTAE8ATgBfAFUATgBTAFAARQBDAEkARgBJAEUARAAEBAEyAAAAcEcAAAIFARQAMgAwADEAMgAt
ADAANwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABaAAQBMgAAAMVHAAACBQEUADIAMAAxADIALQAw
ADcALQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgAEBAGPAQAAsUUAAAIBMgAAABI7AAACBQEUADEA
NQA2ADkANAA0AEYANwAwADAAMAAwADAAMAAwADAAMAAwADEANQAEQVUAAAAMRgAACwAAAAYHEgAA
BQEBADEAAgUBHgBPAEMAUwBQAF8AQgBBAFMASQBDAF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQA
XwBTAFQAQQBUAFUAUwAEQYUAAACERgAAMQAAAAatRgAABQEUADIAMAAxADIALQAwADcALQAyADAA
VAAxADkAOgAxADEAOgAwADAAWgACQUUAAAAJRwAACwAAAAYHEgAABQEBADAAAgUBFgBDAFIATABf
AFIARQBBAFMATwBOAF8AVQBOAFMAUABFAEMASQBGAEkARQBEAAQEATIAAABwRwAAAgUBFAAyADAA
MQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMwAwADoAMQAwAFoABAEyAAAAxUcAAAIFARQAMgAwADEA
MgAtADAANwAtADIAOABUADAANwA6ADUAMAA6ADEAMABaAAQEAf8AAACxRQAAAgEyAAAAEjsAAAIF
ARQAMQA1AEEAMQAwADYARQAwADAAMAAwADAAMAAwADAAMAAwADAAMQBEAARBTwAAAAxGAAALAAAA
BgcSAAAFAQEAMAACBQEbAE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBHAE8ATwBEAF8AQwBFAFIAVABf
AFMAVABBAFQAVQBTAAQBMgAAAHBHAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAz
ADAAOgAxADAAWgAEATIAAADFRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3ADoANQAw
ADoAMQAwAFoABAQBjwEAALFFAAACATIAAAASOwAAAgUBFAAxADUAQQAyAEMARgBEADkAMAAwADAA
MAAwADAAMAAwADAAMAAxAEUABEFVAAAADEYAAAsAAAAGBxIAAAUBAQAxAAIFAR4ATwBDAFMAUABf
AEIAQQBTAEkAQwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABEGFAAAA
hEYAADEAAAAGrUYAAAUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoANAAwADoAMAAwAFoA
AkFFAAAACUcAAAsAAAAGBxIAAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUAQQBTAE8ATgBfAFUATgBT
AFAARQBDAEkARgBJAEUARAAEBAEyAAAAcEcAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEA
OQA6ADMAMAA6ADEAMABaAAQBMgAAAMVHAAACBQEUADIAMAAxADIALQAwADcALQAyADgAVAAwADcA
OgA1ADAAOgAxADAAWgAEBAGlAQAAsUUAAAIBMgAAABI7AAACBQEUADYAMQAxADEARgA4AEYARQAw
ADAAMAAwADAAMAAwADAAMAAwADAAMwAEQVUAAAAMRgAACwAAAAYHEgAABQEBADEAAgUBHgBPAEMA
UwBQAF8AQgBBAFMASQBDAF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAE
QZsAAACERgAAMQAAAAatRgAABQEUADIAMAAxADIALQAwADcALQAxADkAVAAyADIAOgAxADcAOgAw
ADAAWgACQVsAAAAJRwAACwAAAAYHEgAABQEBADUAAgUBIQBDAFIATABfAFIARQBBAFMATwBOAF8A
QwBFAFMAUwBBAFQASQBPAE4AXwBPAEYAXwBPAFAARQBSAEEAVABJAE8ATgAEBAEyAAAAcEcAAAIF
ARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABaAAQBMgAAAMVHAAACBQEU
ADIAMAAxADIALQAwADcALQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgAEBAGPAQAAsUUAAAIBMgAA
ABI7AAACBQEUADYAMQBCAEIARAAyAEYAQgAwADAAMAAwADAAMAAwADAAMAAwADAANgAEQVUAAAAM
RgAACwAAAAYHEgAABQEBADEAAgUBHgBPAEMAUwBQAF8AQgBBAFMASQBDAF8AUgBFAFYATwBLAEUA
RABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAEQYUAAACERgAAMQAAAAatRgAABQEUADIAMAAxADIA
LQAwADcALQAyADAAVAAxADkAOgAyADkAOgAxADQAWgACQUUAAAAJRwAACwAAAAYHEgAABQEBADAA
AgUBFgBDAFIATABfAFIARQBBAFMATwBOAF8AVQBOAFMAUABFAEMASQBGAEkARQBEAAQEATIAAABw
RwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMwAwADoAMQAwAFoABAEyAAAAxUcA
AAIFARQAMgAwADEAMgAtADAANwAtADIAOABUADAANwA6ADUAMAA6ADEAMABaAAQEAf8AAACxRQAA
AgEyAAAAEjsAAAIFARQANgAxAEMAMQBFADkANgA4ADAAMAAwADAAMAAwADAAMAAwADAAMAA3AARB
TwAAAAxGAAALAAAABgcSAAAFAQEAMAACBQEbAE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBHAE8ATwBE
AF8AQwBFAFIAVABfAFMAVABBAFQAVQBTAAQBMgAAAHBHAAACBQEUADIAMAAxADIALQAwADcALQAy
ADAAVAAxADkAOgAzADAAOgAxADAAWgAEATIAAADFRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4
AFQAMAA3ADoANQAwADoAMQAwAFoABAQBjwEAALFFAAACATIAAAASOwAAAgUBFAA2ADEAQwA1AEUA
NwA4ADQAMAAwADAAMAAwADAAMAAwADAAMAAwADgABEFVAAAADEYAAAsAAAAGBxIAAAUBAQAxAAIF
AR4ATwBDAFMAUABfAEIAQQBTAEkAQwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEA
VABVAFMABEGFAAAAhEYAADEAAAAGrUYAAAUBFAAyADAAMQAyAC0AMAA3AC0AMQA5AFQAMgAxADoA
MAAzADoAMAAwAFoAAkFFAAAACUcAAAsAAAAGBxIAAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUAQQBT
AE8ATgBfAFUATgBTAFAARQBDAEkARgBJAEUARAAEBAEyAAAAcEcAAAIFARQAMgAwADEAMgAtADAA
NwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABaAAQBMgAAAMVHAAACBQEUADIAMAAxADIALQAwADcA
LQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgAEBAGPAQAAsUUAAAIBMgAAABI7AAACBQEUADYAMQBE
AEQANgBBAEUANgAwADAAMAAwADAAMAAwADAAMAAwADAAOQAEQVUAAAAMRgAACwAAAAYHEgAABQEB
ADEAAgUBHgBPAEMAUwBQAF8AQgBBAFMASQBDAF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQAXwBT
AFQAQQBUAFUAUwAEQYUAAACERgAAMQAAAAatRgAABQEUADIAMAAxADIALQAwADcALQAxADkAVAAy
ADEAOgAwADMAOgAwADAAWgACQUUAAAAJRwAACwAAAAYHEgAABQEBADAAAgUBFgBDAFIATABfAFIA
RQBBAFMATwBOAF8AVQBOAFMAUABFAEMASQBGAEkARQBEAAQEATIAAABwRwAAAgUBFAAyADAAMQAy
AC0AMAA3AC0AMgAwAFQAMQA5ADoAMwAwADoAMQAwAFoABAEyAAAAxUcAAAIFARQAMgAwADEAMgAt
ADAANwAtADIAOABUADAANwA6ADUAMAA6ADEAMABaAAQEARcBAACxRQAAAgFKAAAAEjsAAAIFASAA
NwAyADQAMwBEADYANgBEAEIARgBGAEEAOQBCADkAMgA0ADEAQQBEADcANABFADkAOABDADcANgBC
AEQANwBCAARBTwAAAAxGAAALAAAABgcSAAAFAQEAMAACBQEbAE8AQwBTAFAAXwBCAEEAUwBJAEMA
XwBHAE8ATwBEAF8AQwBFAFIAVABfAFMAVABBAFQAVQBTAAQBMgAAAHBHAAACBQEUADIAMAAxADIA
LQAwADcALQAyADAAVAAxADkAOgAzADAAOgAxADAAWgAEATIAAADFRwAAAgUBFAAyADAAMQAyAC0A
MAA3AC0AMgA4AFQAMAA3ADoANQAwADoAMQAwAFoABAQEQSoAAACbCAAAIQAAAAbGCAAABQEMAGkA
ZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewBBADIAQwA0ADAA
NgAyADYALQA5ADYANAAxAC0ANAAyAEEANAAtADkARABEADcALQBFADkANQBFADkARgAyADIANgA1
ADEARAB9AAauCQAABQEBADkAAwQAAAIOCwAEBAF4JwAAKioAANAGAAAKAAAAAAAAAMBT4v2vZs0B
DwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARAAAAAAAEAAgABAAI
AAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GIQAEAlAAUQBAAAAAAAAAQJ4F
4v2vZs0BRCUAAKQWAACiPgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAQcGAAAe
XwAAAAAAACNwDgBXAGkAbgBWAGUAcgBpAGYAeQBUAHIAdQBzAHQAAAACAXAAAABOXwAAdCsAANGj
CABBAGMAdABpAG8AbgBJAEQAAAACBQEmAHsANQA3ADMARQAzADEARgA4AC0AQQBBAEIAQQAtADEA
MQBEADAALQA4AEMAQwBCAC0AMAAwAEMAMAA0AEYAQwAyADkANQBFAEUAfQAEQUkAAADDXwAAvCUA
AJUKCABVAEkAQwBoAG8AaQBjAGUAAAALAAAABgcSAAAFAQEAMgACBQELAFcAVABEAF8AVQBJAF8A
TgBPAE4ARQAEQYEAAAARYAAAiScAAIpPDwBSAGUAdgBvAGMAYQB0AGkAbwBuAEMAaABlAGMAawAA
AFAAAABGBxIAAAUBAQAxAAZNYAAAiDgAAMtSFQBXAFQARABfAFIARQBWAE8ASwBFAF8AVwBIAE8A
TABFAEMASABBAEkATgAAAAUBBAB0AHIAdQBlAANBZQAAAJdgAADqEQAAx8MLAFMAdABhAHQAZQBB
AGMAdABpAG8AbgAAAAsAAAAGBxIAAAUBAQAxAAIFARYAVwBUAEQAXwBTAFQAQQBUAEUAQQBDAFQA
SQBPAE4AXwBWAEUAUgBJAEYAWQAEQWkAAADqEQAAYAAAAEYHEgAABQEIADgAMAAwADAAMAAwADAA
MAAGI2EAAP5CAABa/RYAQwBQAEQAXwBVAFMARQBfAE4AVAA1AF8AQwBIAEEASQBOAF8ARgBMAEEA
RwAAAAUBBAB0AHIAdQBlAANBfgAAAG9hAAAdEAAAJQUPAEMAZQByAHQAaQBmAGkAYwBhAHQAZQBJ
AG4AZgBvAAAATQAAAAagYQAAMzkAAE0ECwBkAGkAcwBwAGwAYQB5AE4AYQBtAGUAAAAFARIAbQBh
AGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQAA0F3AAAA8mEAAHIsAAASKQoARABpAGcA
ZQBzAHQASQBuAGYAbwAAAFAAAABGGWIAAE1gAADLJQ8AZABpAGcAZQBzAHQAQQBsAGcAbwByAGkA
dABoAG0AAAAFAQAABkpiAAC8HAAAhCsGAGQAaQBnAGUAcwB0AAAABQEAAANBmwEAAG5iAAARYAAA
iqkQAFIAZQBnAFAAbwBsAGkAYwB5AFMAZQB0AHQAaQBuAGcAAABoAQAARgcSAAAFAQUAMgAzAEMA
MAAwAEa0YgAAAAAAALNpEgBXAFQAUABGAF8ATwBGAEYATABJAE4ARQBPAEsAXwBJAE4ARAAAAAUB
BAB0AHIAdQBlAEbzYgAAdDUAAPUMEgBXAFQAUABGAF8ATwBGAEYATABJAE4ARQBPAEsAXwBDAE8A
TQAAAAUBBAB0AHIAdQBlAEYyYwAAYDkAAK7pFQBXAFQAUABGAF8ATwBGAEYATABJAE4ARQBPAEsA
TgBCAFUAXwBJAE4ARAAAAAUBBAB0AHIAdQBlAEZ3YwAAXxwAAPCMFQBXAFQAUABGAF8ATwBGAEYA
TABJAE4ARQBPAEsATgBCAFUAXwBDAE8ATQAAAAUBBAB0AHIAdQBlAAa8YwAABCsAADr9GQBXAFQA
UABGAF8ASQBHAE4ATwBSAEUAUgBFAFYATwBDAEEAVABJAE8ATgBPAE4AVABTAAAABQEEAHQAcgB1
AGUAA0FeAAAAkSYAAFUAAAAGxCYAAAUBJgB7AEEAMwA4ADMANAA3ADAANQAtAEYAQwBFADEALQA0
ADMAMABFAC0AOAA3AEYAQgAtAEUAMwAzADUANAA5AEQAMAA3ADYANgAwAH0AA0EqAAAAmwgAACEA
AAAGxggAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgAZQADQWsAAAAMCQAAYgAAAEZDCQAABQEm
AHsAQQAyAEMANAAwADYAMgA2AC0AOQA2ADQAMQAtADQAMgBBADQALQA5AEQARAA3AC0ARQA5ADUA
RQA5AEYAMgAyADYANQAxAEQAfQAGrgkAAAUBAgAxADAAA0EUAAAA2xcAAAsAAAAGBxIAAAUBAQAw
AAMEAAAA0AYAACoqAACAAQAACwAAAAAAAADAU+L9r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAAB
AAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAACpACEABAFQAFAAQAAAAAAAAEDAU+L9r2bNAQwAzAD4224ARCVIJH6WDwVE
JQAA1AoAAKM+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABowAAAGEIAAACQSoA
AACbCAAAIQAAAAbGCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAA
RkMJAAAFASYAewAwAEEARABDADgAQwA5ADcALQA2AEYARQAzAC0ANAAzADYARgAtAEEANgAyADkA
LQA0ADQAQwA0AEQANAA2AEQAMAAzAEMAMwB9AAauCQAABQEBADEAAwQAAHIAaQBigAEAACoqAACA
AQAADAAAAAAAAADAU+L9r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAA
CAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACp
ACEABAELAAoAAwAAAAAAAEDAU+L9r2bNAQwAzAD4224ARCVIJH6WDwVEJQAA1AoAAKQ+CgAAAAAA
AAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABowAAAJ4KAAACQSoAAACbCAAAIQAAAAbGCAAA
BQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewAwAEEA
RABDADgAQwA5ADcALQA2AEYARQAzAC0ANAAzADYARgAtAEEANgAyADkALQA0ADQAQwA0AEQANAA2
AEQAMAAzAEMAMwB9AAauCQAABQEBADIAAwQAAAUAFQRBgAEAACoqAACAAQAADQAAAAAAAADAU+L9
r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAI
AAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACpACEABAEpACgABQAAAAAA
AEDAU+L9r2bNAQwAzAD4224ARCVIJH6WDwVEJQAA1AoAAKU+CgAAAAAAAAEFAAAAAAAFFQAAAKIi
3utU9PmEufKMvHwEAAABowAAAE4MAAACQSoAAACbCAAAIQAAAAbGCAAABQEMAGkAZQB4AHAAbABv
AHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewAwAEEARABDADgAQwA5ADcALQA2
AEYARQAzAC0ANAAzADYARgAtAEEANgAyADkALQA0ADQAQwA0AEQANAA2AEQAMAAzAEMAMwB9AAau
CQAABQEBADMAAwQAAEMAbwBtgAEAACoqAACAAQAADgAAAAAAAADAU+L9r2bNAQ8BAQAMAWaPr6sm
AgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwA
EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACpACEABAEzADIALgAAAAAAAEDAU+L9r2bNAQwAzAD4
224ARCVIJH6WDwVEJQAA1AoAAKY+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAAB
owAAAPYNAAACQSoAAACbCAAAIQAAAAbGCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANB
aQAAAAwJAABgAAAARkMJAAAFASYAewAwAEEARABDADgAQwA5ADcALQA2AEYARQAzAC0ANAAzADYA
RgAtAEEANgAyADkALQA0ADQAQwA0AEQANAA2AEQAMAAzAEMAMwB9AAauCQAABQEBADQAAwQAAARB
//83gAEAACoqAACQBQAADwAAAAAAAADReuL9r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQA
AgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAC+BCEABAIzADMALgAAAAAAAEDAU+L9r2bNAQwAzAD4224ARCVIJH6WDwVEJQAA
1AoAAKc+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABuAQAALYPAAACQS0BAAAE
EAAAEQAAAAYdEAAABQEEAGgAdAB0AHAAAgUBhwBoAHQAdABwADoALwAvADEAOQAyAC4AMQA2ADgA
LgAwAC4AMgAyADoAMwA1ADAAMgAvAE0ARQBzAHcAUwBUAEIASABNAEUAVQB3AFEAegBBAEoAQgBn
AFUAcgBEAGcATQBDAEcAZwBVAEEAQgBCAFMAaQAyAG4AWgBkADAANAAyAGIAcABIAGIAQQA3ADQA
VAB4ADYAdQA5AFkAdgBjAGsAbwBtAFEAUQBVAGQAegA3AFcAZwBGAEYAbQBaAG4ARAAyADgAagAl
ADIAQgB5AFUAWgAlADIARgBCAHUAcwBJAFkAeABNAHMAQwBDAGgAVwBoAEIAdQBBAEEAQQBBAEEA
QQBBAEIAMAAlADMARAAEQUcAAABcEQAAPgAAAEZ7EQAABQEVAEMATwBOAFQARQBYAFQAXwBPAEkA
RABfAE8AQwBTAFAAXwBSAEUAUwBQAAbAEQAABQEBADYAA0E8AAAA6hEAADMAAABGBxIAAAUBBAAy
ADAAMAAyAEYsEgAABQEEAHQAcgB1AGUABnsSAAAFAQQAdAByAHUAZQADQW8AAADjEgAAZgAAAEYE
EwAABQEJADEAMAA0ADgANQA3ADYAMAAwAAZZEwAABQEhAEUAOAAxADkAMgBCAEIAMgAyADAAQwBG
AEEANABBADMAQwA4AEQAOQA5ADUAOQBCADAANQA0ADAAQwBDAEMARQBfAANBSgEAANkTAAA5AAAA
Bv4TAAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMgA6ADUANgAuADQANgAxAFoA
AkHDAAAAXhQAALoAAABGmRQAAAUBIQBDAFIAWQBQAFQATgBFAFQAXwBVAFIATABfAEMAQQBDAEgA
RQBfAFAAUgBFAF8ARgBFAFQAQwBIAF8ATwBDAFMAUABGAhUAAAUBAgAzADIARiMVAAAFARQAMgAw
ADEAMgAtADAANwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABaAAZ6FQAABQEUADIAMAAxADIALQAw
ADcALQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgADQToAAADWFQAAMQAAAAYLFgAABQEUADIAMAAx
ADIALQAwADcALQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgADBAF1AAAAYBYAAAJBagAAAJQWAABh
AAAABr8WAAAFASwAQQA5AEQAQQA0ADcAMgA5AEUAOAA5ADIAQwBBAEMAMAA5ADAAQQAzADgARgA1
ADIARQA0AEYARAA1ADYAQwAzADYANABEAEQARAA3ADQAMQAuAGIAaQBuAAMEQSoAAACbCAAAIQAA
AAbGCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYA
ewAwAEEARABDADgAQwA5ADcALQA2AEYARQAzAC0ANAAzADYARgAtAEEANgAyADkALQA0ADQAQwA0
AEQANAA2AEQAMAAzAEMAMwB9AAauCQAABQEBADUAA0EUAAAA2xcAAAsAAAAGBxIAAAUBAQAwAAME
AACQBQAAKioAAJgFAAAQAAAAAAAAAOKh4v2vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAAC
AAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAL8EIQAEAikAKQAFAAAAAAAAQNF64v2vZs0BDADMAPjbbgBEJUgkfpYPBUQlAADU
CgAAqD4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAG5BAAAzhgAAAJBlwAAAAoZ
AACOAAAARr8WAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABDADMARgA3AEMAMwBCAEQANwAzADEA
QgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEAOAAuAGMAZQByAAaUGQAABQESAG0A
YQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AANBkQAAAOYZAACIAAAARr8WAAAFASwA
MQA3ADYAMQBGADIANgBFAEIAMAA4ADIANAA3ADAARgA0ADQAQgAyADcAOABFAEIANgAyAEYARAA4
ADMAMQA5AEYAMwBEAEUAMgAwADEAOAAuAGMAZQByAAaUGQAABQEPAHMAZQBjAHUAcgBlAHMAdQBi
AC0ARABDAC0AQwBBAANBJQAAAOoRAAAcAAAARgcSAAAFAQEANAAGvBoAAAUBBAB0AHIAdQBlAANB
jgAAAC4bAACFAAAARmkbAAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMwA6ADUA
MgAuADgAMQA1AFoARr4bAAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMwA6ADUA
MgAuADgAMwAzAFoABhccAAAFAQUAUABUADIAMABTAANBQwAAAF8cAAA6AAAARpIcAAAFAQEAMABG
AhUAAAUBAQAwAEa8HAAABQEBADAABt0cAAAFAQgAUABUADEAMwBNADQAMgBTAANBwQEAAJQWAAC4
AQAARjQdAAAFAQgAVQByAGwAQwBhAGMAaABlAEZnHQAABQGHAGgAdAB0AHAAOgAvAC8AMQA5ADIA
LgAxADYAOAAuADAALgAyADIAOgAzADUAMAAyAC8ATQBFAHMAdwBTAFQAQgBIAE0ARQBVAHcAUQB6
AEEASgBCAGcAVQByAEQAZwBNAEMARwBnAFUAQQBCAEIAUwBpADIAbgBaAGQAMAA0ADIAYgBwAEgA
YgBBADcANABUAHgANgB1ADkAWQB2AGMAawBvAG0AUQBRAFUAZAB6ADcAVwBnAEYARgBtAFoAbgBE
ADIAOABqACUAMgBCAHkAVQBaACUAMgBGAEIAdQBzAEkAWQB4AE0AcwBDAEMAaABXAGgAQgB1AEEA
QQBBAEEAQQBBAEEAQgAwACUAMwBEAEa/FgAABQEsAEEAOQBEAEEANAA3ADIAOQBFADgAOQAyAEMA
QQBDADAAOQAwAEEAMwA4AEYANQAyAEUANABGAEQANQA2AEMAMwA2ADQARABEAEQANwA0ADEALgBi
AGkAbgAG7x4AAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQADQSoAAACbCAAAIQAA
AAbGCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYA
ewAwAEEARABDADgAQwA5ADcALQA2AEYARQAzAC0ANAAzADYARgAtAEEANgAyADkALQA0ADQAQwA0
AEQANAA2AEQAMAAzAEMAMwB9AAauCQAABQEBADYAA0EUAAAA2xcAAAsAAAAGBxIAAAUBAQAwAAME
AAAATgBhAG0AmAUAACoqAADACwAAEQAAAAAAAADioeL9r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEA
BAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAADsCiEABAILAAsAAwAAAAAAAEDioeL9r2bNAQwAzAD4224ARCVIJH6W
DwVEJQAA1AoAAKk+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAAB5goAALYgAAAC
QZcAAAAKGQAAjgAAAEa/FgAABQEsADEANgA4ADgAOQA1ADEAQwA0AEQAQwAzAEYANwBDADMAQgBE
ADcAMwAxAEIARABFADAARQBEADYAMwA1ADcAMwBGADkAOQAzAEQANAAxADgALgBjAGUAcgAGlBkA
AAUBEgBtAGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAADAToAAACUIQAAAgUBGAAy
ADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoANAAzADoANQAyAC4AOAAxADUAWgAEAaIAAAD5IQAA
AkGXAAAAChkAAI4AAABGvxYAAAUBLAAxADYAOAA4ADkANQAxAEMANABEAEMAMwBGADcAQwAzAEIA
RAA3ADMAMQBCAEQARQAwAEUARAA2ADMANQA3ADMARgA5ADkAMwBEADQAMQA4AC4AYwBlAHIABpQZ
AAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQAAwRBCwEAAMgiAAARAAAA
BvsiAAAFAQQAdAByAHUAZQACQWcAAAApIwAAXgAAAEZGIwAABQERADEALgAzAC4ANgAuADEALgA1
AC4ANQAuADcALgAzAC4AMQAGgSMAAAUBFQBTAGUAcgB2AGUAcgAgAEEAdQB0AGgAZQBuAHQAaQBj
AGEAdABpAG8AbgADQT4AAAApIwAANQAAAAZGIwAABQEWADEALgAzAC4ANgAuADEALgA0AC4AMQAu
ADMAMQAxAC4AMQAwAC4AMwAuADMAA0E8AAAAKSMAADMAAAAGRiMAAAUBFQAyAC4AMQA2AC4AOAA0
ADAALgAxAC4AMQAxADMANwAzADAALgA0AC4AMQADBEFEAAAA6hEAADsAAABGBxIAAAUBCAA0ADgA
MAAwADAAMAAwADAARnIkAAAFAQQAdAByAHUAZQAG6SQAAAUBBAB0AHIAdQBlAANBGgAAAF0lAAAR
AAAABo4lAAAFAQQAdQBzAGUAcgADQSsHAACRJgAAbgAAAEbEJgAABQEmAHsAOQA1ADkAQwA3AEIA
MgAyAC0AQwBEADIAQwAtADQAQwBCADgALQA4AEUAMQA4AC0ARQBCAEQARgBFAEYAQQBBAEYANgA1
AEYAfQAGMycAAAUBCABQAFQAMQAzAE0ANAAyAFMAAgFNAAAAiScAAAJBFAAAALMnAAALAAAABgcS
AAAFAQEAMAADQSkAAADsJwAAIAAAAEYHEgAABQEDADEAMAAwAAYiKAAABQEEAHQAcgB1AGUAAwQB
SwQAAIEoAAACQZcAAAAKGQAAjgAAAEa/FgAABQEsADEANgA4ADgAOQA1ADEAQwA0AEQAQwAzAEYA
NwBDADMAQgBEADcAMwAxAEIARABFADAARQBEADYAMwA1ADcAMwBGADkAOQAzAEQANAAxADgALgBj
AGUAcgAGlBkAAAUBEgBtAGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAADQVoAAABJ
KQAAUQAAAEZGIwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBG
sSkAAAUBBABTAEgAQQAxAAbcKQAABQEDAFIAUwBBAANBWgAAABQqAABRAAAARkYjAAAFARQAMQAu
ADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEbcKQAABQEDAFIAUwBBAAaLKgAA
BQEEADIAMAA0ADgAAwFeAAAAiScAAAJBFAAAALMnAAALAAAABgcSAAAFAQEAMAADQToAAADsJwAA
MQAAAEYHEgAABQEDADEAMAAyAEYEKwAABQEEAHQAcgB1AGUABiIoAAAFAQQAdAByAHUAZQADBAFy
AAAAdCsAAAJBZwAAACkjAABeAAAARkYjAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAu
ADMALgAxAAaBIwAABQEVAFMAZQByAHYAZQByACAAQQB1AHQAaABlAG4AdABpAGMAYQB0AGkAbwBu
AAMEAQUAAAAVLAAAA0ECAgAAQywAABkAAAAGciwAAAUBCABQAFQAMQAzAE0ANAAyAFMAAkEUAAAA
tCwAAAsAAAAGBxIAAAUBAQAwAANBwQEAAJQWAAC4AQAARjQdAAAFAQgAVQByAGwAQwBhAGMAaABl
AEZnHQAABQGHAGgAdAB0AHAAOgAvAC8AMQA5ADIALgAxADYAOAAuADAALgAyADIAOgAzADUAMAAy
AC8ATQBFAHMAdwBTAFQAQgBIAE0ARQBVAHcAUQB6AEEASgBCAGcAVQByAEQAZwBNAEMARwBnAFUA
QQBCAEIAUwBpADIAbgBaAGQAMAA0ADIAYgBwAEgAYgBBADcANABUAHgANgB1ADkAWQB2AGMAawBv
AG0AUQBRAFUAZAB6ADcAVwBnAEYARgBtAFoAbgBEADIAOABqACUAMgBCAHkAVQBaACUAMgBGAEIA
dQBzAEkAWQB4AE0AcwBDAEMAaABXAGgAQgB1AEEAQQBBAEEAQQBBAEEAQgAwACUAMwBEAEa/FgAA
BQEsAEEAOQBEAEEANAA3ADIAOQBFADgAOQAyAEMAQQBDADAAOQAwAEEAMwA4AEYANQAyAEUANABG
AEQANQA2AEMAMwA2ADQARABEAEQANwA0ADEALgBiAGkAbgAG7x4AAAUBDwBzAGUAYwB1AHIAZQBz
AHUAYgAtAEQAQwAtAEMAQQADBAQBDAIAAIEoAAACQZEAAAAKGQAAiAAAAEa/FgAABQEsADEANwA2
ADEARgAyADYARQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBCADYAMgBGAEQAOAAzADEA
OQBGADMARABFADIAMAAxADgALgBjAGUAcgAGlBkAAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQA
QwAtAEMAQQADQVoAAABJKQAAUQAAAEZGIwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQA
OQAuADEALgAxAC4ANQBGsSkAAAUBBABTAEgAQQAxAAbcKQAABQEDAFIAUwBBAANBWgAAABQqAABR
AAAARkYjAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEbcKQAA
BQEDAFIAUwBBAAaLKgAABQEEADIAMAA0ADgAAwFvAAAAiScAAAJBFAAAALMnAAALAAAABgcSAAAF
AQEAMAADQUsAAADsJwAAQgAAAEYHEgAABQEDADEAMABDAEZYMAAABQEEAHQAcgB1AGUARrMwAAAF
AQQAdAByAHUAZQAGIigAAAUBBAB0AHIAdQBlAAMEQRoAAAB0KwAAEQAAAAYgMQAABQEEAHQAcgB1
AGUAA0EaAAAAFSwAABEAAAAGIDEAAAUBBAB0AHIAdQBlAAMEBEEqAAAAmwgAACEAAAAGxggAAAUB
DABpAGUAeABwAGwAbwByAGUALgBlAHgAZQADQWkAAAAMCQAAYAAAAEZDCQAABQEmAHsAMABBAEQA
QwA4AEMAOQA3AC0ANgBGAEUAMwAtADQAMwA2AEYALQBBADYAMgA5AC0ANAA0AEMANABEADQANgBE
ADAAMwBDADMAfQAGrgkAAAUBAQA3AANBFAAAANsXAAALAAAABgcSAAAFAQEAMAADBAAAOADACwAA
KioAAJADAAASAAAAAAAAAOKh4v2vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAG
AAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAALgCIQAEAB4AHgABAAAAAAAAQOKh4v2vZs0BDADMAPjbbgBEJUgkfpYPBUQlAADUCgAAqj4K
AAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAGyAgAA5jIAAAJBRwAAADozAAA+AAAA
RnsRAAAFARUAQwBFAFIAVABfAEMASABBAEkATgBfAFAATwBMAEkAQwBZAF8AUwBTAEwABsARAAAF
AQEANAADQZcAAAAKGQAAjgAAAEa/FgAABQEsADEANgA4ADgAOQA1ADEAQwA0AEQAQwAzAEYANwBD
ADMAQgBEADcAMwAxAEIARABFADAARQBEADYAMwA1ADcAMwBGADkAOQAzAEQANAAxADgALgBjAGUA
cgAGlBkAAAUBEgBtAGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAADQV4AAACRJgAA
VQAAAAbEJgAABQEmAHsAOQA1ADkAQwA3AEIAMgAyAC0AQwBEADIAQwAtADQAQwBCADgALQA4AEUA
MQA4AC0ARQBCAEQARgBFAEYAQQBBAEYANgA1AEYAfQADQRQAAADqEQAACwAAAAYHEgAABQEBADAA
A0FlAAAAtDQAAEIAAABG9TQAAAUBBgBzAGUAcgB2AGUAcgAGJDUAAAUBEgBtAGEAaQBsAC4AcwBl
AGMAdQByAGUAcwB1AGIALgBuAGUAdAACQRQAAAB0NQAACwAAAAYHEgAABQEBADAAAwRBIwAAAK41
AAAaAAAARs01AAAFAQIALQAxAAb4NQAABQECAC0AMQADQSoAAACbCAAAIQAAAAbGCAAABQEMAGkA
ZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewAwAEEARABDADgA
QwA5ADcALQA2AEYARQAzAC0ANAAzADYARgAtAEEANgAyADkALQA0ADQAQwA0AEQANAA2AEQAMAAz
AEMAMwB9AAauCQAABQEBADgAA0EUAAAA2xcAAAsAAAAGBxIAAAUBAQAwAAMEAAAB//9AAACQAwAA
KioAAEAjAAATAAAAAAAAAOKh4v2vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAG
AAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAGciIQAEAFoAWgAAAgAAAAAAQOKh4v2vZs0BDADMAPjbbgBEJUgkfpYPBUQlAADUCgAAqz4K
AAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAFhIgAApjcAAAJB/QMAAAoZAACIAAAA
Rr8WAAAFASwAMQA3ADYAMQBGADIANgBFAEIAMAA4ADIANAA3ADAARgA0ADQAQgAyADcAOABFAEIA
NgAyAEYARAA4ADMAMQA5AEYAMwBEAEUAMgAwADEAOAAuAGMAZQByAAaUGQAABQEPAHMAZQBjAHUA
cgBlAHMAdQBiAC0ARABDAC0AQwBBAAIBaQAAAGY4AAACASgAAACIOAAAAgUBDwBzAGUAYwB1AHIA
ZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAADDOAAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAA
AADDOAAAAgUBAwBuAGUAdAAEBEF1AAAACDkAAGwAAABGMzkAAAUBBQBmAGEAbABzAGUABmA5AAAF
ASgANwA3ADMARQBEADYAOAAwADUAMQA2ADYANgA2ADcAMABGADYARgAyADMARgBCADIANQAxADkA
RgBDADEAQgBBAEMAMgAxADgAQwA0AEMAQgADQVoAAABJKQAAUQAAAEZGIwAABQEUADEALgAyAC4A
OAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBGsSkAAAUBBABTAEgAQQAxAAbcKQAABQED
AFIAUwBBAANBWgAAABQqAABRAAAARkYjAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5
AC4AMQAuADEALgAxAEbcKQAABQEDAFIAUwBBAAaLKgAABQEEADIAMAA0ADgAAwFpAAAAjjoAAAIB
KAAAAIg4AAACBQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAQBHAAAAMM4AAACBQEJ
AHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAMM4AAACBQEDAG4AZQB0AAQEAUoAAAASOwAAAgUBIAA3
ADIANAAzAEQANgA2AEQAQgBGAEYAQQA5AEIAOQAyADQAMQBBAEQANwA0AEUAOQA4AEMANwA2AEIA
RAA3AEIABAEyAAAAgzsAAAIFARQAMgAwADEAMgAtADAANwAtADEAOQBUADEANgA6ADUANQA6ADMA
NwBaAAQBMgAAANY7AAACBQEUADIAMAAxADcALQAwADcALQAxADkAVAAxADcAOgAwADUAOgAzADUA
WgAEAZUAAAAnPAAAAkFaAAAATzwAAFEAAABGcjwAAAUBBAB0AHIAdQBlAEYHEgAABQECADgANgBG
qjwAAAUBBAB0AHIAdQBlAEYFPQAABQEEAHQAcgB1AGUABlg9AAAFAQQAdAByAHUAZQADQSsAAACm
PQAAIgAAAEZyPAAABQEEAHQAcgB1AGUABuo9AAAFAQQAdAByAHUAZQADBARBkwQAAAoZAACOAAAA
Rr8WAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABDADMARgA3AEMAMwBCAEQANwAzADEAQgBEAEUA
MABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEAOAAuAGMAZQByAAaUGQAABQESAG0AYQBpAGwA
LgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AAIBOQAAAGY4AAACAS4AAACIOAAAAgUBEgBtAGEA
aQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAAEBEF1AAAACDkAAGwAAABGMzkAAAUBBQBm
AGEAbABzAGUABmA5AAAFASgANQAxAEEANgAwADgANQBCAEEANwAwADUAQQBBADIANwAzAEQAOQAx
AEYAMAA4ADEAQwBEAEIANABDADgAQgAxADUAMwAxAEIARgA0AEIAMwADQVoAAABJKQAAUQAAAEZG
IwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBGsSkAAAUBBABT
AEgAQQAxAAbcKQAABQEDAFIAUwBBAANBWgAAABQqAABRAAAARkYjAAAFARQAMQAuADIALgA4ADQA
MAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEbcKQAABQEDAFIAUwBBAAaLKgAABQEEADIAMAA0
ADgAAwFpAAAAjjoAAAIBKAAAAIg4AAACBQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBB
AAQBHAAAAMM4AAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAMM4AAACBQEDAG4AZQB0AAQE
ATIAAAASOwAAAgUBFAAxADUAQQAxADAANgBFADAAMAAwADAAMAAwADAAMAAwADAAMAAxAEQABAEy
AAAAgzsAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOAA6ADUAOQA6ADQANQBaAAQBMgAA
ANY7AAACBQEUADIAMAAxADQALQAwADcALQAyADAAVAAxADgAOgA1ADkAOgA0ADUAWgAEAW0BAAAn
PAAAAgFyAAAAyCIAAAJBZwAAACkjAABeAAAARkYjAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1
AC4ANwAuADMALgAxAAaBIwAABQEVAFMAZQByAHYAZQByACAAQQB1AHQAaABlAG4AdABpAGMAYQB0
AGkAbwBuAAMEQUkAAABPPAAAQAAAAEZyPAAABQEEAHQAcgB1AGUARgcSAAAFAQIAQQAwAEaqPAAA
BQEEAHQAcgB1AGUABu5BAAAFAQQAdAByAHUAZQADASsAAABMQgAAAgEgAAAAfEIAAAIFAQsAMQA5
ADIALgAxADYAOAAuADAALgA0AAQEAW0AAAC+QgAAAkFiAAAA/kIAAFkAAAAGYDkAAAUBKAA3ADcA
MwBFAEQANgA4ADAANQAxADYANgA2ADYANwAwAEYANgBGADIAMwBGAEIAMgA1ADEAOQBGAEMAMQBC
AEEAQwAyADEAOABDADQAQwBCAAMEBARBHxkAAJQWAACIAAAARr8WAAAFASwAQQA5AEQAQQA0ADcA
MgA5AEUAOAA5ADIAQwBBAEMAMAA5ADAAQQAzADgARgA1ADIARQA0AEYARAA1ADYAQwAzADYANABE
AEQARAA3ADQAMQAuAGIAaQBuAAbvHgAABQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBB
AAJBSQAAAK41AAALAAAABgcSAAAFAQEAMAACBQEYAE8AQwBTAFAAXwBTAFUAQwBDAEUAUwBTAEYA
VQBMAF8AUgBFAFMAUABPAE4AUwBFAAQBMgAAAGBEAAACBQEUADIAMAAxADIALQAwADcALQAyADAA
VAAxADkAOgA0ADAAOgAzADAAWgAEAWkAAACOOgAAAgEoAAAAiDgAAAIFAQ8AcwBlAGMAdQByAGUA
cwB1AGIALQBEAEMALQBDAEEABAEcAAAAwzgAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAA
wzgAAAIFAQMAbgBlAHQABAQBYQAAACNFAAACASAAAACIOAAAAgUBCwBvAGMAcwBwAHMAaQBnAG4A
aQBuAGcABAEcAAAAwzgAAAIFAQkAUwBlAGMAdQByAGUAcwB1AGIABAEQAAAAwzgAAAIFAQMAbgBl
AHQABAQBlQEAALFFAAACATIAAAASOwAAAgUBFAAxADEAMgBCAEYANABBADAAMAAwADAAMAAwADAA
MAAwADAAMAAwAEEABEFVAAAADEYAAAsAAAAGBxIAAAUBAQAxAAIFAR4ATwBDAFMAUABfAEIAQQBT
AEkAQwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABEGLAAAAhEYAADEA
AAAGrUYAAAUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA3ADoANQAwADoAMAAwAFoAAkFLAAAA
CUcAAAsAAAAGBxIAAAUBAQAxAAIFARkAQwBSAEwAXwBSAEUAQQBTAE8ATgBfAEsARQBZAF8AQwBP
AE0AUABSAE8ATQBJAFMARQAEBAEyAAAAcEcAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEA
OQA6ADMAMAA6ADEAMABaAAQBMgAAAMVHAAACBQEUADIAMAAxADIALQAwADcALQAyADgAVAAwADcA
OgA1ADAAOgAxADAAWgAEBAGPAQAAsUUAAAIBMgAAABI7AAACBQEUADEAMQA0ADMANABCADYANwAw
ADAAMAAwADAAMAAwADAAMAAwADAAQgAEQVUAAAAMRgAACwAAAAYHEgAABQEBADEAAgUBHgBPAEMA
UwBQAF8AQgBBAFMASQBDAF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAE
QYUAAACERgAAMQAAAAatRgAABQEUADIAMAAxADIALQAwADcALQAxADkAVAAyADIAOgA0ADkAOgAw
ADAAWgACQUUAAAAJRwAACwAAAAYHEgAABQEBADAAAgUBFgBDAFIATABfAFIARQBBAFMATwBOAF8A
VQBOAFMAUABFAEMASQBGAEkARQBEAAQEATIAAABwRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAw
AFQAMQA5ADoAMwAwADoAMQAwAFoABAEyAAAAxUcAAAIFARQAMgAwADEAMgAtADAANwAtADIAOABU
ADAANwA6ADUAMAA6ADEAMABaAAQEAY8BAACxRQAAAgEyAAAAEjsAAAIFARQAMQAxADQANAA4AEYA
RQA2ADAAMAAwADAAMAAwADAAMAAwADAAMABDAARBVQAAAAxGAAALAAAABgcSAAAFAQEAMQACBQEe
AE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBSAEUAVgBPAEsARQBEAF8AQwBFAFIAVABfAFMAVABBAFQA
VQBTAARBhQAAAIRGAAAxAAAABq1GAAAFARQAMgAwADEAMgAtADAANwAtADEAOQBUADIAMgA6ADUA
MwA6ADAAMABaAAJBRQAAAAlHAAALAAAABgcSAAAFAQEAMAACBQEWAEMAUgBMAF8AUgBFAEEAUwBP
AE4AXwBVAE4AUwBQAEUAQwBJAEYASQBFAEQABAQBMgAAAHBHAAACBQEUADIAMAAxADIALQAwADcA
LQAyADAAVAAxADkAOgAzADAAOgAxADAAWgAEATIAAADFRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0A
MgA4AFQAMAA3ADoANQAwADoAMQAwAFoABAQBjwEAALFFAAACATIAAAASOwAAAgUBFAAxADEANgBC
AEYAOQAxADQAMAAwADAAMAAwADAAMAAwADAAMAAxADAABEFVAAAADEYAAAsAAAAGBxIAAAUBAQAx
AAIFAR4ATwBDAFMAUABfAEIAQQBTAEkAQwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBU
AEEAVABVAFMABEGFAAAAhEYAADEAAAAGrUYAAAUBFAAyADAAMQAyAC0AMAA3AC0AMQA5AFQAMgAz
ADoAMwA2ADoAMAAwAFoAAkFFAAAACUcAAAsAAAAGBxIAAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUA
QQBTAE8ATgBfAFUATgBTAFAARQBDAEkARgBJAEUARAAEBAEyAAAAcEcAAAIFARQAMgAwADEAMgAt
ADAANwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABaAAQBMgAAAMVHAAACBQEUADIAMAAxADIALQAw
ADcALQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgAEBAH/AAAAsUUAAAIBMgAAABI7AAACBQEUADEA
MQBCADgAMQBCADcANAAwADAAMAAwADAAMAAwADAAMAAwADEAMgAEQU8AAAAMRgAACwAAAAYHEgAA
BQEBADAAAgUBGwBPAEMAUwBQAF8AQgBBAFMASQBDAF8ARwBPAE8ARABfAEMARQBSAFQAXwBTAFQA
QQBUAFUAUwAEATIAAABwRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMwAwADoA
MQAwAFoABAEyAAAAxUcAAAIFARQAMgAwADEAMgAtADAANwAtADIAOABUADAANwA6ADUAMAA6ADEA
MABaAAQEAY8BAACxRQAAAgEyAAAAEjsAAAIFARQAMQA1ADAAQgA0ADIAMgA4ADAAMAAwADAAMAAw
ADAAMAAwADAAMQAzAARBVQAAAAxGAAALAAAABgcSAAAFAQEAMQACBQEeAE8AQwBTAFAAXwBCAEEA
UwBJAEMAXwBSAEUAVgBPAEsARQBEAF8AQwBFAFIAVABfAFMAVABBAFQAVQBTAARBhQAAAIRGAAAx
AAAABq1GAAAFARQAMgAwADEAMgAtADAANwAtADIAMABUADEANgA6ADIANwA6ADAAMABaAAJBRQAA
AAlHAAALAAAABgcSAAAFAQEAMAACBQEWAEMAUgBMAF8AUgBFAEEAUwBPAE4AXwBVAE4AUwBQAEUA
QwBJAEYASQBFAEQABAQBMgAAAHBHAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAz
ADAAOgAxADAAWgAEATIAAADFRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3ADoANQAw
ADoAMQAwAFoABAQBjwEAALFFAAACATIAAAASOwAAAgUBFAAxADUAMABDAEUAMwA3ADUAMAAwADAA
MAAwADAAMAAwADAAMAAxADQABEFVAAAADEYAAAsAAAAGBxIAAAUBAQAxAAIFAR4ATwBDAFMAUABf
AEIAQQBTAEkAQwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABEGFAAAA
hEYAADEAAAAGrUYAAAUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMQAxADoAMAAwAFoA
AkFFAAAACUcAAAsAAAAGBxIAAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUAQQBTAE8ATgBfAFUATgBT
AFAARQBDAEkARgBJAEUARAAEBAEyAAAAcEcAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEA
OQA6ADMAMAA6ADEAMABaAAQBMgAAAMVHAAACBQEUADIAMAAxADIALQAwADcALQAyADgAVAAwADcA
OgA1ADAAOgAxADAAWgAEBAGPAQAAsUUAAAIBMgAAABI7AAACBQEUADEANQA2ADkANAA0AEYANwAw
ADAAMAAwADAAMAAwADAAMAAwADEANQAEQVUAAAAMRgAACwAAAAYHEgAABQEBADEAAgUBHgBPAEMA
UwBQAF8AQgBBAFMASQBDAF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAE
QYUAAACERgAAMQAAAAatRgAABQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAxADEAOgAw
ADAAWgACQUUAAAAJRwAACwAAAAYHEgAABQEBADAAAgUBFgBDAFIATABfAFIARQBBAFMATwBOAF8A
VQBOAFMAUABFAEMASQBGAEkARQBEAAQEATIAAABwRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAw
AFQAMQA5ADoAMwAwADoAMQAwAFoABAEyAAAAxUcAAAIFARQAMgAwADEAMgAtADAANwAtADIAOABU
ADAANwA6ADUAMAA6ADEAMABaAAQEAf8AAACxRQAAAgEyAAAAEjsAAAIFARQAMQA1AEEAMQAwADYA
RQAwADAAMAAwADAAMAAwADAAMAAwADAAMQBEAARBTwAAAAxGAAALAAAABgcSAAAFAQEAMAACBQEb
AE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBHAE8ATwBEAF8AQwBFAFIAVABfAFMAVABBAFQAVQBTAAQB
MgAAAHBHAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAzADAAOgAxADAAWgAEATIA
AADFRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3ADoANQAwADoAMQAwAFoABAQBjwEA
ALFFAAACATIAAAASOwAAAgUBFAAxADUAQQAyAEMARgBEADkAMAAwADAAMAAwADAAMAAwADAAMAAx
AEUABEFVAAAADEYAAAsAAAAGBxIAAAUBAQAxAAIFAR4ATwBDAFMAUABfAEIAQQBTAEkAQwBfAFIA
RQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABEGFAAAAhEYAADEAAAAGrUYAAAUB
FAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoANAAwADoAMAAwAFoAAkFFAAAACUcAAAsAAAAG
BxIAAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUAQQBTAE8ATgBfAFUATgBTAFAARQBDAEkARgBJAEUA
RAAEBAEyAAAAcEcAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABa
AAQBMgAAAMVHAAACBQEUADIAMAAxADIALQAwADcALQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgAE
BAGlAQAAsUUAAAIBMgAAABI7AAACBQEUADYAMQAxADEARgA4AEYARQAwADAAMAAwADAAMAAwADAA
MAAwADAAMwAEQVUAAAAMRgAACwAAAAYHEgAABQEBADEAAgUBHgBPAEMAUwBQAF8AQgBBAFMASQBD
AF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAEQZsAAACERgAAMQAAAAat
RgAABQEUADIAMAAxADIALQAwADcALQAxADkAVAAyADIAOgAxADcAOgAwADAAWgACQVsAAAAJRwAA
CwAAAAYHEgAABQEBADUAAgUBIQBDAFIATABfAFIARQBBAFMATwBOAF8AQwBFAFMAUwBBAFQASQBP
AE4AXwBPAEYAXwBPAFAARQBSAEEAVABJAE8ATgAEBAEyAAAAcEcAAAIFARQAMgAwADEAMgAtADAA
NwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABaAAQBMgAAAMVHAAACBQEUADIAMAAxADIALQAwADcA
LQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgAEBAGPAQAAsUUAAAIBMgAAABI7AAACBQEUADYAMQBC
AEIARAAyAEYAQgAwADAAMAAwADAAMAAwADAAMAAwADAANgAEQVUAAAAMRgAACwAAAAYHEgAABQEB
ADEAAgUBHgBPAEMAUwBQAF8AQgBBAFMASQBDAF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQAXwBT
AFQAQQBUAFUAUwAEQYUAAACERgAAMQAAAAatRgAABQEUADIAMAAxADIALQAwADcALQAyADAAVAAx
ADkAOgAyADkAOgAxADQAWgACQUUAAAAJRwAACwAAAAYHEgAABQEBADAAAgUBFgBDAFIATABfAFIA
RQBBAFMATwBOAF8AVQBOAFMAUABFAEMASQBGAEkARQBEAAQEATIAAABwRwAAAgUBFAAyADAAMQAy
AC0AMAA3AC0AMgAwAFQAMQA5ADoAMwAwADoAMQAwAFoABAEyAAAAxUcAAAIFARQAMgAwADEAMgAt
ADAANwAtADIAOABUADAANwA6ADUAMAA6ADEAMABaAAQEAf8AAACxRQAAAgEyAAAAEjsAAAIFARQA
NgAxAEMAMQBFADkANgA4ADAAMAAwADAAMAAwADAAMAAwADAAMAA3AARBTwAAAAxGAAALAAAABgcS
AAAFAQEAMAACBQEbAE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBHAE8ATwBEAF8AQwBFAFIAVABfAFMA
VABBAFQAVQBTAAQBMgAAAHBHAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAzADAA
OgAxADAAWgAEATIAAADFRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3ADoANQAwADoA
MQAwAFoABAQBjwEAALFFAAACATIAAAASOwAAAgUBFAA2ADEAQwA1AEUANwA4ADQAMAAwADAAMAAw
ADAAMAAwADAAMAAwADgABEFVAAAADEYAAAsAAAAGBxIAAAUBAQAxAAIFAR4ATwBDAFMAUABfAEIA
QQBTAEkAQwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABEGFAAAAhEYA
ADEAAAAGrUYAAAUBFAAyADAAMQAyAC0AMAA3AC0AMQA5AFQAMgAxADoAMAAzADoAMAAwAFoAAkFF
AAAACUcAAAsAAAAGBxIAAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUAQQBTAE8ATgBfAFUATgBTAFAA
RQBDAEkARgBJAEUARAAEBAEyAAAAcEcAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6
ADMAMAA6ADEAMABaAAQBMgAAAMVHAAACBQEUADIAMAAxADIALQAwADcALQAyADgAVAAwADcAOgA1
ADAAOgAxADAAWgAEBAGPAQAAsUUAAAIBMgAAABI7AAACBQEUADYAMQBEAEQANgBBAEUANgAwADAA
MAAwADAAMAAwADAAMAAwADAAOQAEQVUAAAAMRgAACwAAAAYHEgAABQEBADEAAgUBHgBPAEMAUwBQ
AF8AQgBBAFMASQBDAF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAEQYUA
AACERgAAMQAAAAatRgAABQEUADIAMAAxADIALQAwADcALQAxADkAVAAyADEAOgAwADMAOgAwADAA
WgACQUUAAAAJRwAACwAAAAYHEgAABQEBADAAAgUBFgBDAFIATABfAFIARQBBAFMATwBOAF8AVQBO
AFMAUABFAEMASQBGAEkARQBEAAQEATIAAABwRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQA
MQA5ADoAMwAwADoAMQAwAFoABAEyAAAAxUcAAAIFARQAMgAwADEAMgAtADAANwAtADIAOABUADAA
NwA6ADUAMAA6ADEAMABaAAQEARcBAACxRQAAAgFKAAAAEjsAAAIFASAANwAyADQAMwBEADYANgBE
AEIARgBGAEEAOQBCADkAMgA0ADEAQQBEADcANABFADkAOABDADcANgBCAEQANwBCAARBTwAAAAxG
AAALAAAABgcSAAAFAQEAMAACBQEbAE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBHAE8ATwBEAF8AQwBF
AFIAVABfAFMAVABBAFQAVQBTAAQBMgAAAHBHAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAx
ADkAOgAzADAAOgAxADAAWgAEATIAAADFRwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3
ADoANQAwADoAMQAwAFoABAQEQSoAAACbCAAAIQAAAAbGCAAABQEMAGkAZQB4AHAAbABvAHIAZQAu
AGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewAwAEEARABDADgAQwA5ADcALQA2AEYARQAz
AC0ANAAzADYARgAtAEEANgAyADkALQA0ADQAQwA0AEQANAA2AEQAMAAzAEMAMwB9AAauCQAABQEB
ADkAAwQAAABRAHUAYQBAIwAAKioAAAgEAAAUAAAAAAAAADdl4/2vZs0BDwEBAAwBZo+vqyYCAAAU
AAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAADMDIQAEAlAAUQBAAAAAAAAAQOKh4v2vZs0BDADMAPjbbgBE
JUgkfpYPBUQlAADUCgAArD4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAEtAwAA
Hl8AAAIBVgAAAE5fAAACBQEmAHsANQA3ADMARQAzADEARgA4AC0AQQBBAEIAQQAtADEAMQBEADAA
LQA4AEMAQwBCAC0AMAAwAEMAMAA0AEYAQwAyADkANQBFAEUAfQAEQS8AAADDXwAACwAAAAYHEgAA
BQEBADIAAgUBCwBXAFQARABfAFUASQBfAE4ATwBOAEUABEElAAAAEWAAABwAAABGBxIAAAUBAQAx
AAZNYAAABQEEAHQAcgB1AGUAA0FFAAAAl2AAAAsAAAAGBxIAAAUBAQAxAAIFARYAVwBUAEQAXwBT
AFQAQQBUAEUAQQBDAFQASQBPAE4AXwBWAEUAUgBJAEYAWQAEQTMAAADqEQAAKgAAAEYHEgAABQEI
ADgAMAAwADAAMAAwADAAMAAGI2EAAAUBBAB0AHIAdQBlAANBNgAAAG9hAAAtAAAABqBhAAAFARIA
bQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQAA0EbAAAA8mEAABIAAABGGWIAAAUB
AAAGSmIAAAUBAAADQXEAAABuYgAAaAAAAEYHEgAABQEFADIAMwBDADAAMABGtGIAAAUBBAB0AHIA
dQBlAEbzYgAABQEEAHQAcgB1AGUARjJjAAAFAQQAdAByAHUAZQBGd2MAAAUBBAB0AHIAdQBlAAa8
YwAABQEEAHQAcgB1AGUAA0FeAAAAkSYAAFUAAAAGxCYAAAUBJgB7ADkANQA5AEMANwBCADIAMgAt
AEMARAAyAEMALQA0AEMAQgA4AC0AOABFADEAOAAtAEUAQgBEAEYARQBGAEEAQQBGADYANQBGAH0A
A0EqAAAAmwgAACEAAAAGxggAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgAZQADQWsAAAAMCQAA
YgAAAEZDCQAABQEmAHsAMABBAEQAQwA4AEMAOQA3AC0ANgBGAEUAMwAtADQAMwA2AEYALQBBADYA
MgA5AC0ANAA0AEMANABEADQANgBEADAAMwBDADMAfQAGrgkAAAUBAgAxADAAA0EUAAAA2xcAAAsA
AAAGBxIAAAUBAQAwAAMEAAAfAAAIBAAAKioAAIABAAAVAAAAAAAAADdl4/2vZs0BDwEBAAwBZo+v
qyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQA
HAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKkAIQAEAQsACgADAAAAAAAAQDdl4/2vZs0BDADM
APjbbgBEJUgkfpYPBUQlAADUCgAArT4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQA
AAGjAAAAngoAAAJBKgAAAJsIAAAhAAAABsYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUA
A0FpAAAADAkAAGAAAABGQwkAAAUBJgB7ADgAQgA5AEQARAA3AEEANwAtAEYANQAyADgALQA0AEUA
QwA1AC0AQQA2AEIAMAAtADQAMAAzAEIAQgBFAEEAQgAwAEMAMgAzAH0ABq4JAAAFAQEAMQADBAAA
AGEAbQCAAQAAKioAAIABAAAWAAAAAAAAADdl4/2vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEA
BAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAKkAIQAEASkAKAAFAAAAAAAAQDdl4/2vZs0BDADMAPjbbgBEJUgkfpYPBUQl
AADUCgAArj4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAGjAAAATgwAAAJBKgAA
AJsIAAAhAAAABsYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAADAkAAGAAAABG
QwkAAAUBJgB7ADgAQgA5AEQARAA3AEEANwAtAEYANQAyADgALQA0AEUAQwA1AC0AQQA2AEIAMAAt
ADQAMAAzAEIAQgBFAEEAQgAwAEMAMgAzAH0ABq4JAAAFAQEAMgADBAAAACgAVQCAAQAAKioAANgE
AAAXAAAAAAAAAEiM4/2vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAI
ABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8D
IQACAikAKQAFAAAAAAAAQDdl4/2vZs0BDADMAPjbbgBEJUgkfpYPBUQlAADUCgAArz4KAAAAAAAA
AQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAH5AwAAzhgAAAJBewAAAAoZAAByAAAARr8WAAAF
ASwAQgA5AEMAMgA2ADMAQgBDADkARAA5ADYAOQA5ADAANgAzAEYAQQAzAEMARgAzAEMARQAzAEEA
RgBGAEQAOQAwAEYANAA0ADgAMAA2AEMAOAAuAGMAZQByAAaUGQAABQEEAGQAYQBuAG8AA0GRAAAA
5hkAAIgAAABGvxYAAAUBLAAxADcANgAxAEYAMgA2AEUAQgAwADgAMgA0ADcAMABGADQANABCADIA
NwA4AEUAQgA2ADIARgBEADgAMwAxADkARgAzAEQARQAyADAAMQA4AC4AYwBlAHIABpQZAAAFAQ8A
cwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEAA0F9AAAA6hEAAHQAAABGBxIAAAUBAQAyAAby
sQAAw18AABXAJwBDAEUAUgBUAF8AVgBFAFIASQBGAFkAXwBDAEEAQwBIAEUAXwBPAE4ATABZAF8A
QgBBAFMARQBEAF8AUgBFAFYATwBDAEEAVABJAE8ATgAAAAUBBAB0AHIAdQBlAANBjgAAAC4bAACF
AAAARmkbAAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMwA6ADUAMgAuADgANAAz
AFoARr4bAAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMwA6ADUAMgAuADgANAAz
AFoABhccAAAFAQUAUABUADEANQBTAANBOAAAAF8cAAAvAAAARpIcAAAFAQEAMABGAhUAAAUBCAA4
ADAAMAA5ADIAMAAxADMABrwcAAAFAQEAMAADQSoAAACbCAAAIQAAAAbGCAAABQEMAGkAZQB4AHAA
bABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewA4AEIAOQBEAEQANwBBADcA
LQBGADUAMgA4AC0ANABFAEMANQAtAEEANgBCADAALQA0ADAAMwBCAEIARQBBAEIAMABDADIAMwB9
AAauCQAABQEBADMAA0HpAAAA2xcAABkAAAAGBxIAAAUBCAA4ADAAMAA5ADIAMAAxADMAAgUBYQBU
AGgAZQAgAHIAZQB2AG8AYwBhAHQAaQBvAG4AIABmAHUAbgBjAHQAaQBvAG4AIAB3AGEAcwAgAHUA
bgBhAGIAbABlACAAdABvACAAYwBoAGUAYwBrACAAcgBlAHYAbwBjAGEAdABpAG8AbgAgAGIAZQBj
AGEAdQBzAGUAIAB0AGgAZQAgAHIAZQB2AG8AYwBhAHQAaQBvAG4AIABzAGUAcgB2AGUAcgAgAHcA
YQBzACAAbwBmAGYAbABpAG4AZQAuAAQEAAAAZQBjAHUA2AQAACoqAACADQAAGAAAAAAAAABIjOP9
r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAI
AAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnDCEABABaAFoAAAIAAAAA
AEBIjOP9r2bNAQwAzAD4224ARCVIJH6WDwVEJQAA1AoAALA+CgAAAAAAAAEFAAAAAAAFFQAAAKIi
3utU9PmEufKMvHwEAAABoQwAAKY3AAACQf0DAAAKGQAAiAAAAEa/FgAABQEsADEANwA2ADEARgAy
ADYARQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBCADYAMgBGAEQAOAAzADEAOQBGADMA
RABFADIAMAAxADgALgBjAGUAcgAGlBkAAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMA
QQACAWkAAABmOAAAAgEoAAAAiDgAAAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEA
BAEcAAAAwzgAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAAwzgAAAIFAQMAbgBlAHQABARB
dQAAAAg5AABsAAAARjM5AAAFAQUAZgBhAGwAcwBlAAZgOQAABQEoADcANwAzAEUARAA2ADgAMAA1
ADEANgA2ADYANgA3ADAARgA2AEYAMgAzAEYAQgAyADUAMQA5AEYAQwAxAEIAQQBDADIAMQA4AEMA
NABDAEIAA0FaAAAASSkAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkA
LgAxAC4AMQAuADUARrEpAAAFAQQAUwBIAEEAMQAG3CkAAAUBAwBSAFMAQQADQVoAAAAUKgAAUQAA
AEZGIwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4AMQBG3CkAAAUB
AwBSAFMAQQAGiyoAAAUBBAAyADAANAA4AAMBaQAAAI46AAACASgAAACIOAAAAgUBDwBzAGUAYwB1
AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAADDOAAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAE
ARAAAADDOAAAAgUBAwBuAGUAdAAEBAFKAAAAEjsAAAIFASAANwAyADQAMwBEADYANgBEAEIARgBG
AEEAOQBCADkAMgA0ADEAQQBEADcANABFADkAOABDADcANgBCAEQANwBCAAQBMgAAAIM7AAACBQEU
ADIAMAAxADIALQAwADcALQAxADkAVAAxADYAOgA1ADUAOgAzADcAWgAEATIAAADWOwAAAgUBFAAy
ADAAMQA3AC0AMAA3AC0AMQA5AFQAMQA3ADoAMAA1ADoAMwA1AFoABAGVAAAAJzwAAAJBWgAAAE88
AABRAAAARnI8AAAFAQQAdAByAHUAZQBGBxIAAAUBAgA4ADYARqo8AAAFAQQAdAByAHUAZQBGBT0A
AAUBBAB0AHIAdQBlAAZYPQAABQEEAHQAcgB1AGUAA0ErAAAApj0AACIAAABGcjwAAAUBBAB0AHIA
dQBlAAbqPQAABQEEAHQAcgB1AGUAAwQEQfcHAAAKGQAAcgAAAEa/FgAABQEsAEIAOQBDADIANgAz
AEIAQwA5AEQAOQA2ADkAOQAwADYAMwBGAEEAMwBDAEYAMwBDAEUAMwBBAEYARgBEADkAMABGADQA
NAA4ADAANgBDADgALgBjAGUAcgAGlBkAAAUBBABkAGEAbgBvAAIBbAAAAGY4AAACARIAAACIOAAA
AgUBBABkAGEAbgBvAAQBFAAAAIg4AAACBQEFAFUAcwBlAHIAcwAEARwAAADDOAAAAgUBCQBzAGUA
YwB1AHIAZQBzAHUAYgAEARAAAADDOAAAAgUBAwBuAGUAdAAEBEF1AAAACDkAAGwAAABGMzkAAAUB
BQBmAGEAbABzAGUABmA5AAAFASgANABDADMARgA2ADAAMAA3ADEAMQA0AEUAMgAxADMANQAxAEUA
RgA3AEYAMwAyADYANQBCAEMARAAxADMAQQBFADgAQgA0ADQAOQBDAEQAQQADQVoAAABJKQAAUQAA
AEZGIwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBGsSkAAAUB
BABTAEgAQQAxAAbcKQAABQEDAFIAUwBBAANBWgAAABQqAABRAAAARkYjAAAFARQAMQAuADIALgA4
ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEbcKQAABQEDAFIAUwBBAAaLKgAABQEEADIA
MAA0ADgAAwFpAAAAjjoAAAIBKAAAAIg4AAACBQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0A
QwBBAAQBHAAAAMM4AAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAMM4AAACBQEDAG4AZQB0
AAQEATIAAAASOwAAAgUBFAAxADUAQQAyAEMARgBEADkAMAAwADAAMAAwADAAMAAwADAAMAAxAEUA
BAEyAAAAgzsAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADAAMQA6ADQAMgBaAAQB
MgAAANY7AAACBQEUADIAMAAxADMALQAwADcALQAyADAAVAAxADkAOgAwADEAOgA0ADIAWgAEAV0C
AAAnPAAAAgFEAQAAyCIAAAJBcwAAACkjAABqAAAARkYjAAAFARYAMQAuADMALgA2AC4AMQAuADQA
LgAxAC4AMwAxADEALgAxADAALgAzAC4ANAAGgSMAAAUBFgBFAG4AYwByAHkAcAB0AGkAbgBnACAA
RgBpAGwAZQAgAFMAeQBzAHQAZQBtAANBVQAAACkjAABMAAAARkYjAAAFAREAMQAuADMALgA2AC4A
MQAuADUALgA1AC4ANwAuADMALgA0AAaBIwAABQEMAFMAZQBjAHUAcgBlACAARQBtAGEAaQBsAANB
ZwAAACkjAABeAAAARkYjAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgAyAAaB
IwAABQEVAEMAbABpAGUAbgB0ACAAQQB1AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuAAMEQUkAAABP
PAAAQAAAAEZyPAAABQEEAHQAcgB1AGUARgcSAAAFAQIAQQAwAEaqPAAABQEEAHQAcgB1AGUABu5B
AAAFAQQAdAByAHUAZQADAW0AAAC+QgAAAkFiAAAA/kIAAFkAAAAGYDkAAAUBKAA3ADcAMwBFAEQA
NgA4ADAANQAxADYANgA2ADYANwAwAEYANgBGADIAMwBGAEIAMgA1ADEAOQBGAEMAMQBCAEEAQwAy
ADEAOABDADQAQwBCAAMEAUkAAABMQgAAAgE+AAAA+74AALQ0AADTOQMAVQBQAE4AAAACBQESAGQA
YQBuAG8AQABzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AAQEBAFYAgAAQL8AALRiAABzcgoAUABy
AG8AcABlAHIAdABpAGUAcwAAAAJBLwIAAGi/AADmGQAAflsPAEsAZQB5AFAAcgBvAHYAaQBkAGUA
cgBJAG4AZgBvAAAA/gEAAEZ7EQAABQENAFAAUgBPAFYAXwBSAFMAQQBfAEYAVQBMAEwARry/AADq
PQAA3okMAHQAeQBwAGUAQwBvAG4AcwB0AGEAbgB0AAAABQEBADEARum/AADFRwAAHNgMAHAAcgBv
AHYAaQBkAGUAcgBOAGEAbQBlAAAABQEuAE0AaQBjAHIAbwBzAG8AZgB0ACAARQBuAGgAYQBuAGMA
ZQBkACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwAgAFAAcgBvAHYAaQBkAGUAcgAgAHYAMQAu
ADAARnDAAAAjYQAA2oQHAGsAZQB5AFMAcABlAGMAAAAFAQ4AQQBUAF8ASwBFAFkARQBYAEMASABB
AE4ARwBFAEatwAAAaL8AAD5IDwBrAGUAeQBTAHAAZQBjAEMAbwBuAHMAdABhAG4AdAAAAAUBAQAx
AAbgwAAArUYAAOzMDQBjAG8AbgB0AGEAaQBuAGUAcgBOAGEAbQBlAAAABQFFAGQAZQA0ADYAMQBi
ADcANABmADkAMQBhADAANgA3AGYAMwA3AGEAYQBjADgAMQAyAGEAMwA4ADgAOQBiADIAZgBfADAA
MwAwADkAMwAyADYAYwAtADEAYgA2ADgALQA0ADgANQBhAC0AYgBjADkAYwAtAGIAMwBlADQAYwBj
ADUAYwA5AGMAMwA0AAMEBEEqAAAAmwgAACEAAAAGxggAAAUBDABpAGUAeABwAGwAbwByAGUALgBl
AHgAZQADQWkAAAAMCQAAYAAAAEZDCQAABQEmAHsAOABCADkARABEADcAQQA3AC0ARgA1ADIAOAAt
ADQARQBDADUALQBBADYAQgAwAC0ANAAwADMAQgBCAEUAQQBCADAAQwAyADMAfQAGrgkAAAUBAQA0
AAMEAAAARgBEADkAgA0AACoqAABoCwAAGQAAAAAAAAC5nY7+r2bNAQ8BAQAMAWaPr6smAgAAFAAA
AAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAACWCiEAAgILAAsAAwAAAAAAAEBIjOP9r2bNAQwAzAD4224ARCVI
JH6WDwVEJQAA1AoAALE+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABkAoAALYg
AAACQXsAAAAKGQAAcgAAAEa/FgAABQEsAEIAOQBDADIANgAzAEIAQwA5AEQAOQA2ADkAOQAwADYA
MwBGAEEAMwBDAEYAMwBDAEUAMwBBAEYARgBEADkAMABGADQANAA4ADAANgBDADgALgBjAGUAcgAG
lBkAAAUBBABkAGEAbgBvAAMBBQAAAMgiAAADQZoAAADqEQAAkQAAAEYHEgAABQEIAEMAMAAwADAA
MAAwADAAMABGciQAAAUBBAB0AHIAdQBlAAbdwwAATEIAAAgZJgBDAEUAUgBUAF8AQwBIAEEASQBO
AF8AUgBFAFYATwBDAEEAVABJAE8ATgBfAEMASABFAEMASwBfAEMAQQBDAEgARQBfAE8ATgBMAFkA
AAAFAQQAdAByAHUAZQADQRoAAABdJQAAEQAAAAaOJQAABQEEAHUAcwBlAHIAA0GyBwAAkSYAAFUA
AAAGxCYAAAUBJgB7AEIANgBBAEYARAAwADcAOAAtADUAQQBEAEIALQA0ADIANAAyAC0AOQA1ADYA
RAAtAEQARQA5ADAAMQA0ADEARQAyADMARgA5AH0AAgEXAQAAiScAAAJB3gAAALMnAADVAAAARgcS
AAAFAQcAMQAwADAAMAAwADQAMABG9cQAAOm/AABcNCQAQwBFAFIAVABfAFQAUgBVAFMAVABfAFIA
RQBWAE8AQwBBAFQASQBPAE4AXwBTAFQAQQBUAFUAUwBfAFUATgBLAE4ATwBXAE4AAAAFAQQAdABy
AHUAZQAGWMUAAHxCAADtlCAAQwBFAFIAVABfAFQAUgBVAFMAVABfAEkAUwBfAE8ARgBGAEwASQBO
AEUAXwBSAEUAVgBPAEMAQQBUAEkATwBOAAAABQEEAHQAcgB1AGUAA0EpAAAA7CcAACAAAABGBxIA
AAUBAwAxADAAMAAGIigAAAUBBAB0AHIAdQBlAAMEASEEAACBKAAAAkF7AAAAChkAAHIAAABGvxYA
AAUBLABCADkAQwAyADYAMwBCAEMAOQBEADkANgA5ADkAMAA2ADMARgBBADMAQwBGADMAQwBFADMA
QQBGAEYARAA5ADAARgA0ADQAOAAwADYAQwA4AC4AYwBlAHIABpQZAAAFAQQAZABhAG4AbwADQVoA
AABJKQAAUQAAAEZGIwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4A
NQBGsSkAAAUBBABTAEgAQQAxAAbcKQAABQEDAFIAUwBBAANBWgAAABQqAABRAAAARkYjAAAFARQA
MQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEbcKQAABQEDAFIAUwBBAAaL
KgAABQEEADIAMAA0ADgAAwGMAAAAiScAAAJBQgAAALMnAAA5AAAARgcSAAAFAQcAMQAwADAAMAAw
ADQAMABG9cQAAAUBBAB0AHIAdQBlAAZYxQAABQEEAHQAcgB1AGUAA0E6AAAA7CcAADEAAABGBxIA
AAUBAwAxADAAMgBGBCsAAAUBBAB0AHIAdQBlAAYiKAAABQEEAHQAcgB1AGUAAwQBRAEAAHQrAAAC
QXMAAAApIwAAagAAAEZGIwAABQEWADEALgAzAC4ANgAuADEALgA0AC4AMQAuADMAMQAxAC4AMQAw
AC4AMwAuADQABoEjAAAFARYARQBuAGMAcgB5AHAAdABpAG4AZwAgAEYAaQBsAGUAIABTAHkAcwB0
AGUAbQADQVUAAAApIwAATAAAAEZGIwAABQERADEALgAzAC4ANgAuADEALgA1AC4ANQAuADcALgAz
AC4ANAAGgSMAAAUBDABTAGUAYwB1AHIAZQAgAEUAbQBhAGkAbAADQWcAAAApIwAAXgAAAEZGIwAA
BQERADEALgAzAC4ANgAuADEALgA1AC4ANQAuADcALgAzAC4AMgAGgSMAAAUBFQBDAGwAaQBlAG4A
dAAgAEEAdQB0AGgAZQBuAHQAaQBjAGEAdABpAG8AbgADBAEFAAAAFSwAAAMB9AAAAEMsAAACQekA
AAC0LAAAGQAAAAYHEgAABQEIADgAMAAwADkAMgAwADEAMwACBQFhAFQAaABlACAAcgBlAHYAbwBj
AGEAdABpAG8AbgAgAGYAdQBuAGMAdABpAG8AbgAgAHcAYQBzACAAdQBuAGEAYgBsAGUAIAB0AG8A
IABjAGgAZQBjAGsAIAByAGUAdgBvAGMAYQB0AGkAbwBuACAAYgBlAGMAYQB1AHMAZQAgAHQAaABl
ACAAcgBlAHYAbwBjAGEAdABpAG8AbgAgAHMAZQByAHYAZQByACAAdwBhAHMAIABvAGYAZgBsAGkA
bgBlAC4ABAQEAQwCAACBKAAAAkGRAAAAChkAAIgAAABGvxYAAAUBLAAxADcANgAxAEYAMgA2AEUA
QgAwADgAMgA0ADcAMABGADQANABCADIANwA4AEUAQgA2ADIARgBEADgAMwAxADkARgAzAEQARQAy
ADAAMQA4AC4AYwBlAHIABpQZAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEAA0Fa
AAAASSkAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAu
ADUARrEpAAAFAQQAUwBIAEEAMQAG3CkAAAUBAwBSAFMAQQADQVoAAAAUKgAAUQAAAEZGIwAABQEU
ADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4AMQBG3CkAAAUBAwBSAFMAQQAG
iyoAAAUBBAAyADAANAA4AAMBbwAAAIknAAACQRQAAACzJwAACwAAAAYHEgAABQEBADAAA0FLAAAA
7CcAAEIAAABGBxIAAAUBAwAxADAAQwBGWDAAAAUBBAB0AHIAdQBlAEazMAAABQEEAHQAcgB1AGUA
BiIoAAAFAQQAdAByAHUAZQADBEEaAAAAdCsAABEAAAAGIDEAAAUBBAB0AHIAdQBlAANBGgAAABUs
AAARAAAABiAxAAAFAQQAdAByAHUAZQADBARBKgAAAJsIAAAhAAAABsYIAAAFAQwAaQBlAHgAcABs
AG8AcgBlAC4AZQB4AGUAA0FpAAAADAkAAGAAAABGQwkAAAUBJgB7ADgAQgA5AEQARAA3AEEANwAt
AEYANQAyADgALQA0AEUAQwA1AC0AQQA2AEIAMAAtADQAMAAzAEIAQgBFAEEAQgAwAEMAMgAzAH0A
Bq4JAAAFAQEANQADQekAAADbFwAAGQAAAAYHEgAABQEIADgAMAAwADkAMgAwADEAMwACBQFhAFQA
aABlACAAcgBlAHYAbwBjAGEAdABpAG8AbgAgAGYAdQBuAGMAdABpAG8AbgAgAHcAYQBzACAAdQBu
AGEAYgBsAGUAIAB0AG8AIABjAGgAZQBjAGsAIAByAGUAdgBvAGMAYQB0AGkAbwBuACAAYgBlAGMA
YQB1AHMAZQAgAHQAaABlACAAcgBlAHYAbwBjAGEAdABpAG8AbgAgAHMAZQByAHYAZQByACAAdwBh
AHMAIABvAGYAZgBsAGkAbgBlAC4ABAQAAGgLAAAqKgAAaAEAABoAAAAAAAAAuZ2O/q9mzQEPAQEA
DAFmj6+rJgIAABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAK
AAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAowAhAAQBCwAKAAMAAAAAAABAuZ2O/q9m
zQHsAQAAOBwAALI+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABnQAAAJ4KAAAC
QSQAAACbCAAAGwAAAAbGCAAABQEJAGwAcwBhAHMAcwAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJ
AAAFASYAewA5AEUAMAA3ADEANwBEADYALQA1ADQAMgAyAC0ANAAyADYAQwAtAEIANwBDAEYALQA4
AEUANQA0ADUAOQBBAEQAOQBDAEIANwB9AAauCQAABQEBADEAAwQAAAAAAmgBAAAqKgAAaAwAABsA
AAAAAAAAuZ2O/q9mzQEPAQEADAFmj6+rJgIAABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAI
ABEAAAAAAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAowshAAQA
WgBaAAACAAAAAABAuZ2O/q9mzQHsAQAAOBwAALM+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmE
ufKMvHwEAAABnQsAAKY3AAACQf0DAAAKGQAAiAAAAEa/FgAABQEsADEANwA2ADEARgAyADYARQBC
ADAAOAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBCADYAMgBGAEQAOAAzADEAOQBGADMARABFADIA
MAAxADgALgBjAGUAcgAGlBkAAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQACAWkA
AABmOAAAAgEoAAAAiDgAAAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAA
wzgAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAAwzgAAAIFAQMAbgBlAHQABARBdQAAAAg5
AABsAAAARjM5AAAFAQUAZgBhAGwAcwBlAAZgOQAABQEoADcANwAzAEUARAA2ADgAMAA1ADEANgA2
ADYANgA3ADAARgA2AEYAMgAzAEYAQgAyADUAMQA5AEYAQwAxAEIAQQBDADIAMQA4AEMANABDAEIA
A0FaAAAASSkAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4A
MQAuADUARrEpAAAFAQQAUwBIAEEAMQAG3CkAAAUBAwBSAFMAQQADQVoAAAAUKgAAUQAAAEZGIwAA
BQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4AMQBG3CkAAAUBAwBSAFMA
QQAGiyoAAAUBBAAyADAANAA4AAMBaQAAAI46AAACASgAAACIOAAAAgUBDwBzAGUAYwB1AHIAZQBz
AHUAYgAtAEQAQwAtAEMAQQAEARwAAADDOAAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAADD
OAAAAgUBAwBuAGUAdAAEBAFKAAAAEjsAAAIFASAANwAyADQAMwBEADYANgBEAEIARgBGAEEAOQBC
ADkAMgA0ADEAQQBEADcANABFADkAOABDADcANgBCAEQANwBCAAQBMgAAAIM7AAACBQEUADIAMAAx
ADIALQAwADcALQAxADkAVAAxADYAOgA1ADUAOgAzADcAWgAEATIAAADWOwAAAgUBFAAyADAAMQA3
AC0AMAA3AC0AMQA5AFQAMQA3ADoAMAA1ADoAMwA1AFoABAGVAAAAJzwAAAJBWgAAAE88AABRAAAA
RnI8AAAFAQQAdAByAHUAZQBGBxIAAAUBAgA4ADYARqo8AAAFAQQAdAByAHUAZQBGBT0AAAUBBAB0
AHIAdQBlAAZYPQAABQEEAHQAcgB1AGUAA0ErAAAApj0AACIAAABGcjwAAAUBBAB0AHIAdQBlAAbq
PQAABQEEAHQAcgB1AGUAAwQEQfkGAAAKGQAAcgAAAEa/FgAABQEsAEIAOQBDADIANgAzAEIAQwA5
AEQAOQA2ADkAOQAwADYAMwBGAEEAMwBDAEYAMwBDAEUAMwBBAEYARgBEADkAMABGADQANAA4ADAA
NgBDADgALgBjAGUAcgAGlBkAAAUBBABkAGEAbgBvAAIBbAAAAGY4AAACARIAAACIOAAAAgUBBABk
AGEAbgBvAAQBFAAAAIg4AAACBQEFAFUAcwBlAHIAcwAEARwAAADDOAAAAgUBCQBzAGUAYwB1AHIA
ZQBzAHUAYgAEARAAAADDOAAAAgUBAwBuAGUAdAAEBEF1AAAACDkAAGwAAABGMzkAAAUBBQBmAGEA
bABzAGUABmA5AAAFASgANABDADMARgA2ADAAMAA3ADEAMQA0AEUAMgAxADMANQAxAEUARgA3AEYA
MwAyADYANQBCAEMARAAxADMAQQBFADgAQgA0ADQAOQBDAEQAQQADQVoAAABJKQAAUQAAAEZGIwAA
BQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBGsSkAAAUBBABTAEgA
QQAxAAbcKQAABQEDAFIAUwBBAANBWgAAABQqAABRAAAARkYjAAAFARQAMQAuADIALgA4ADQAMAAu
ADEAMQAzADUANAA5AC4AMQAuADEALgAxAEbcKQAABQEDAFIAUwBBAAaLKgAABQEEADIAMAA0ADgA
AwFpAAAAjjoAAAIBKAAAAIg4AAACBQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAQB
HAAAAMM4AAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAMM4AAACBQEDAG4AZQB0AAQEATIA
AAASOwAAAgUBFAAxADUAQQAyAEMARgBEADkAMAAwADAAMAAwADAAMAAwADAAMAAxAEUABAEyAAAA
gzsAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADAAMQA6ADQAMgBaAAQBMgAAANY7
AAACBQEUADIAMAAxADMALQAwADcALQAyADAAVAAxADkAOgAwADEAOgA0ADIAWgAEAU0CAAAnPAAA
AgFEAQAAyCIAAAJBcwAAACkjAABqAAAARkYjAAAFARYAMQAuADMALgA2AC4AMQAuADQALgAxAC4A
MwAxADEALgAxADAALgAzAC4ANAAGgSMAAAUBFgBFAG4AYwByAHkAcAB0AGkAbgBnACAARgBpAGwA
ZQAgAFMAeQBzAHQAZQBtAANBVQAAACkjAABMAAAARkYjAAAFAREAMQAuADMALgA2AC4AMQAuADUA
LgA1AC4ANwAuADMALgA0AAaBIwAABQEMAFMAZQBjAHUAcgBlACAARQBtAGEAaQBsAANBZwAAACkj
AABeAAAARkYjAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgAyAAaBIwAABQEV
AEMAbABpAGUAbgB0ACAAQQB1AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuAAMEQUkAAABPPAAAQAAA
AEZyPAAABQEEAHQAcgB1AGUARgcSAAAFAQIAQQAwAEaqPAAABQEEAHQAcgB1AGUABu5BAAAFAQQA
dAByAHUAZQADAW0AAAC+QgAAAkFiAAAA/kIAAFkAAAAGYDkAAAUBKAA3ADcAMwBFAEQANgA4ADAA
NQAxADYANgA2ADYANwAwAEYANgBGADIAMwBGAEIAMgA1ADEAOQBGAEMAMQBCAEEAQwAyADEAOABD
ADQAQwBCAAMEATkAAABMQgAAAgEuAAAA+74AAAIFARIAZABhAG4AbwBAAHMAZQBjAHUAcgBlAHMA
dQBiAC4AbgBlAHQABAQEAWoBAABAvwAAAkFfAQAAaL8AAFYBAABGexEAAAUBDQBQAFIATwBWAF8A
UgBTAEEAXwBGAFUATABMAEa8vwAABQEBADEARum/AAAFAS4ATQBpAGMAcgBvAHMAbwBmAHQAIABF
AG4AaABhAG4AYwBlAGQAIABDAHIAeQBwAHQAbwBnAHIAYQBwAGgAaQBjACAAUAByAG8AdgBpAGQA
ZQByACAAdgAxAC4AMABGcMAAAAUBDgBBAFQAXwBLAEUAWQBFAFgAQwBIAEEATgBHAEUARq3AAAAF
AQEAMQAG4MAAAAUBRQBkAGUANAA2ADEAYgA3ADQAZgA5ADEAYQAwADYANwBmADMANwBhAGEAYwA4
ADEAMgBhADMAOAA4ADkAYgAyAGYAXwAwADMAMAA5ADMAMgA2AGMALQAxAGIANgA4AC0ANAA4ADUA
YQAtAGIAYwA5AGMALQBiADMAZQA0AGMAYwA1AGMAOQBjADMANAADBARBJAAAAJsIAAAbAAAABsYI
AAAFAQkAbABzAGEAcwBzAC4AZQB4AGUAA0FpAAAADAkAAGAAAABGQwkAAAUBJgB7ADkARQAwADcA
MQA3AEQANgAtADUANAAyADIALQA0ADIANgBDAC0AQgA3AEMARgAtADgARQA1ADQANQA5AEEARAA5
AEMAQgA3AH0ABq4JAAAFAQEAMgADBAAANwAAaAwAACoqAACYCAAAHAAAAAAAAADKxI7+r2bNAQ8B
AQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAAAAAABAAIAAQACAAI
AAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADTByEABAILAAsAAwAAAAAAAEC5nY7+
r2bNAewBAAA4HAAAtD4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAHNBwAAtiAA
AAJBewAAAAoZAAByAAAARr8WAAAFASwAQgA5AEMAMgA2ADMAQgBDADkARAA5ADYAOQA5ADAANgAz
AEYAQQAzAEMARgAzAEMARQAzAEEARgBGAEQAOQAwAEYANAA0ADgAMAA2AEMAOAAuAGMAZQByAAaU
GQAABQEEAGQAYQBuAG8AAwEFAAAAyCIAAANBFAAAAOoRAAALAAAABgcSAAAFAQEAMAADQRoAAABd
JQAAEQAAAAaOJQAABQEEAHUAcwBlAHIAA0HBBQAAkSYAAFUAAAAGxCYAAAUBJgB7ADEAMwA0AEYA
OQAzADgARAAtADIAMQBFADIALQA0ADUAQQA4AC0AOQA2ADAAOQAtAEMAMgAwADIAMQA2ADIANwAx
AEIARQBGAH0AAgFNAAAAiScAAAJBFAAAALMnAAALAAAABgcSAAAFAQEAMAADQSkAAADsJwAAIAAA
AEYHEgAABQEDADEAMAAwAAYiKAAABQEEAHQAcgB1AGUAAwQB+gIAAIEoAAACQXsAAAAKGQAAcgAA
AEa/FgAABQEsAEIAOQBDADIANgAzAEIAQwA5AEQAOQA2ADkAOQAwADYAMwBGAEEAMwBDAEYAMwBD
AEUAMwBBAEYARgBEADkAMABGADQANAA4ADAANgBDADgALgBjAGUAcgAGlBkAAAUBBABkAGEAbgBv
AANBWgAAAEkpAABRAAAARkYjAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAu
ADEALgA1AEaxKQAABQEEAFMASABBADEABtwpAAAFAQMAUgBTAEEAA0FaAAAAFCoAAFEAAABGRiMA
AAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARtwpAAAFAQMAUgBT
AEEABosqAAAFAQQAMgAwADQAOAADAV4AAACJJwAAAkEUAAAAsycAAAsAAAAGBxIAAAUBAQAwAANB
OgAAAOwnAAAxAAAARgcSAAAFAQMAMQAwADIARgQrAAAFAQQAdAByAHUAZQAGIigAAAUBBAB0AHIA
dQBlAAMEAUQBAAB0KwAAAkFzAAAAKSMAAGoAAABGRiMAAAUBFgAxAC4AMwAuADYALgAxAC4ANAAu
ADEALgAzADEAMQAuADEAMAAuADMALgA0AAaBIwAABQEWAEUAbgBjAHIAeQBwAHQAaQBuAGcAIABG
AGkAbABlACAAUwB5AHMAdABlAG0AA0FVAAAAKSMAAEwAAABGRiMAAAUBEQAxAC4AMwAuADYALgAx
AC4ANQAuADUALgA3AC4AMwAuADQABoEjAAAFAQwAUwBlAGMAdQByAGUAIABFAG0AYQBpAGwAA0Fn
AAAAKSMAAF4AAABGRiMAAAUBEQAxAC4AMwAuADYALgAxAC4ANQAuADUALgA3AC4AMwAuADIABoEj
AAAFARUAQwBsAGkAZQBuAHQAIABBAHUAdABoAGUAbgB0AGkAYwBhAHQAaQBvAG4AAwQBBQAAABUs
AAADBAEMAgAAgSgAAAJBkQAAAAoZAACIAAAARr8WAAAFASwAMQA3ADYAMQBGADIANgBFAEIAMAA4
ADIANAA3ADAARgA0ADQAQgAyADcAOABFAEIANgAyAEYARAA4ADMAMQA5AEYAMwBEAEUAMgAwADEA
OAAuAGMAZQByAAaUGQAABQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAANBWgAAAEkp
AABRAAAARkYjAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEax
KQAABQEEAFMASABBADEABtwpAAAFAQMAUgBTAEEAA0FaAAAAFCoAAFEAAABGRiMAAAUBFAAxAC4A
MgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARtwpAAAFAQMAUgBTAEEABosqAAAF
AQQAMgAwADQAOAADAW8AAACJJwAAAkEUAAAAsycAAAsAAAAGBxIAAAUBAQAwAANBSwAAAOwnAABC
AAAARgcSAAAFAQMAMQAwAEMARlgwAAAFAQQAdAByAHUAZQBGszAAAAUBBAB0AHIAdQBlAAYiKAAA
BQEEAHQAcgB1AGUAAwRBGgAAAHQrAAARAAAABiAxAAAFAQQAdAByAHUAZQADQRoAAAAVLAAAEQAA
AAYgMQAABQEEAHQAcgB1AGUAAwQEQbMAAACbCAAAqgAAAEbGCAAABQEJAGwAcwBhAHMAcwAuAGUA
eABlAAb04gAAAAAAAABeEABpAG0AcABlAHIAcwBvAG4AYQB0AGUAVABvAGsAZQBuAAAABQEuAFMA
LQAxAC0ANQAtADIAMQAtADMAOQA1ADcAMgAwADMANgAxADgALQAyADIAMwAwADkANwAzADUAMgA0
AC0AMwAxADYAMwAzADUAMwA3ADgANQAtADEAMQA0ADgAA0FpAAAADAkAAGAAAABGQwkAAAUBJgB7
ADkARQAwADcAMQA3AEQANgAtADUANAAyADIALQA0ADIANgBDAC0AQgA3AEMARgAtADgARQA1ADQA
NQA5AEEARAA5AEMAQgA3AH0ABq4JAAAFAQEAMwADQRQAAADbFwAACwAAAAYHEgAABQEBADAAAwQA
AAAAAJgIAAAqKgAASAQAAB0AAAAAAAAAlpmQ/q9mzQEPAQEADAFmj6+rJgIAABQAAAABAAQAAQAE
AAIABgACAAYAAAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAhgMhAAQAHgAeAAEAAAAAAABAysSO/q9mzQHsAQAAOBwAALU+CgAAAAAAAAEF
AAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABgAMAAOYyAAACQUcAAAA6MwAAPgAAAEZ7EQAABQEV
AEMARQBSAFQAXwBDAEgAQQBJAE4AXwBQAE8ATABJAEMAWQBfAFMAUwBMAAbAEQAABQEBADQAA0F7
AAAAChkAAHIAAABGvxYAAAUBLABCADkAQwAyADYAMwBCAEMAOQBEADkANgA5ADkAMAA2ADMARgBB
ADMAQwBGADMAQwBFADMAQQBGAEYARAA5ADAARgA0ADQAOAAwADYAQwA4AC4AYwBlAHIABpQZAAAF
AQQAZABhAG4AbwADQV4AAACRJgAAVQAAAAbEJgAABQEmAHsAMQAzADQARgA5ADMAOABEAC0AMgAx
AEUAMgAtADQANQBBADgALQA5ADYAMAA5AC0AQwAyADAAMgAxADYAMgA3ADEAQgBFAEYAfQADQRQA
AADqEQAACwAAAAYHEgAABQEBADAAA0HwAAAAtDQAABUAAAAG9TQAAAUBBgBzAGUAcgB2AGUAcgAC
QcwAAAB0NQAAwwAAAEYHEgAABQEDADIAOAAwAEZj5gAASSkAAJfrHwBTAEUAQwBVAFIASQBUAFkA
XwBGAEwAQQBHAF8ASQBHAE4ATwBSAEUAXwBSAEUAVgBPAEMAQQBUAEkATwBOAAAABQEEAHQAcgB1
AGUABrzmAAD4NQAAdsIgAFMARQBDAFUAUgBJAFQAWQBfAEYATABBAEcAXwBJAEcATgBPAFIARQBf
AFcAUgBPAE4ARwBfAFUAUwBBAEcARQAAAAUBBAB0AHIAdQBlAAMEQSMAAACuNQAAGgAAAEbNNQAA
BQECAC0AMQAG+DUAAAUBAgAtADEAA0GJAAAAmwgAAIAAAABGxggAAAUBCQBsAHMAYQBzAHMALgBl
AHgAZQAG9OIAAAUBLgBTAC0AMQAtADUALQAyADEALQAzADkANQA3ADIAMAAzADYAMQA4AC0AMgAy
ADMAMAA5ADcAMwA1ADIANAAtADMAMQA2ADMAMwA1ADMANwA4ADUALQAxADEANAA4AANBaQAAAAwJ
AABgAAAARkMJAAAFASYAewA2ADYAQwBDAEUANgA5AEIALQA4ADcANQBCAC0ANABBADEAQwAtAEIA
QgBCADUALQA5AEEANgAwADIAMQAzADUAQwAyADgANQB9AAauCQAABQEBADEAA0EUAAAA2xcAAAsA
AAAGBxIAAAUBAQAwAAMEAABIBAAAKioAAFgBAAAeAAAAAAAAAJaZkP6vZs0BDwEBAAwBZo+vqyYC
AAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARAAAAAAAEAAgABAAIAAgACgABAAQADAAT
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKMAIQAEAQsACgADAAAAAAAAQJaZkP6vZs0B7AEAADgc
AAC2PgoAAAAAAAABAQAAAAAABRIAAAABnQAAAJ4KAAACQSQAAACbCAAAGwAAAAbGCAAABQEJAGwA
cwBhAHMAcwAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewBBADIANAA2ADkAOAA5AEYA
LQA3ADcANQAzAC0ANAA2ADkANgAtAEIANwA2ADkALQBFAEIANgA0ADYAOAA0ADIAOAA2AEMAMwB9
AAauCQAABQEBADEAAwQAAHMAdFgBAAAqKgAAWAEAAB8AAAAAAAAAlpmQ/q9mzQEPAQEADAFmj6+r
JgIAABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAKAAEABAAM
ABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAowAhAAQBKQAoAAUAAAAAAABAlpmQ/q9mzQHsAQAA
OBwAALc+CgAAAAAAAAEBAAAAAAAFEgAAAAGdAAAATgwAAAJBJAAAAJsIAAAbAAAABsYIAAAFAQkA
bABzAGEAcwBzAC4AZQB4AGUAA0FpAAAADAkAAGAAAABGQwkAAAUBJgB7AEEAMgA0ADYAOQA4ADkA
RgAtADcANwA1ADMALQA0ADYAOQA2AC0AQgA3ADYAOQAtAEUAQgA2ADQANgA4ADQAMgA4ADYAQwAz
AH0ABq4JAAAFAQEAMgADBAAAAGQAWAEAACoqAAAYCAAAIAAAAAAAAACnwJD+r2bNAQ8BAQAMAWaP
r6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAAAAAABAAIAAQACAAIAAoAAQAE
AAwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjByEABAIpACkABQAAAAAAAECWmZD+r2bNAewB
AAA4HAAAuD4KAAAAAAAAAQEAAAAAAAUSAAAAAV0HAADOGAAAAkF7AAAAChkAAHIAAABGvxYAAAUB
LABCADkAQwAyADYAMwBCAEMAOQBEADkANgA5ADkAMAA2ADMARgBBADMAQwBGADMAQwBFADMAQQBG
AEYARAA5ADAARgA0ADQAOAAwADYAQwA4AC4AYwBlAHIABpQZAAAFAQQAZABhAG4AbwADQZEAAADm
GQAAiAAAAEa/FgAABQEsADEANwA2ADEARgAyADYARQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3
ADgARQBCADYAMgBGAEQAOAAzADEAOQBGADMARABFADIAMAAxADgALgBjAGUAcgAGlBkAAAUBDwBz
AGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQADQRQAAADqEQAACwAAAAYHEgAABQEBADAAA0GO
AAAALhsAAIUAAABGaRsAAAUBGAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoANAAzADoANQAz
AC4AOQA4ADEAWgBGvhsAAAUBGAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoANAAzADoANQAz
AC4AOQA4ADEAWgAGFxwAAAUBBQBQAFQAMQA1AFMAA0FJAAAAXxwAAEAAAABGkhwAAAUBAQAwAEYC
FQAABQEBADAARrwcAAAFAQEAMAAG3RwAAAUBCwBQADEARABUADIASAA0ADgATQA5AFMAA0FVAgAA
2O0AAPu+AAAThRkAQwBlAHIAdABpAGYAaQBjAGEAdABlAFIAZQB2AG8AYwBhAHQAaQBvAG4ATABp
AHMAdAAAABACAABGNB0AAAUBCABUAHYAbwBDAGEAYwBoAGUARmcdAAAFAbMAbABkAGEAcAA6AC8A
LwAvAEMATgA9AHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBACwAQwBOAD0ARABDACwAQwBO
AD0AQwBEAFAALABDAE4APQBQAHUAYgBsAGkAYwAlADIAMABLAGUAeQAlADIAMABTAGUAcgB2AGkA
YwBlAHMALABDAE4APQBTAGUAcgB2AGkAYwBlAHMALABDAE4APQBDAG8AbgBmAGkAZwB1AHIAYQB0
AGkAbwBuACwARABDAD0AcwBlAGMAdQByAGUAcwB1AGIALABEAEMAPQBuAGUAdAA/AGMAZQByAHQA
aQBmAGkAYwBhAHQAZQBSAGUAdgBvAGMAYQB0AGkAbwBuAEwAaQBzAHQAPwBiAGEAcwBlAD8AbwBi
AGoAZQBjAHQAQwBsAGEAcwBzAD0AYwBSAEwARABpAHMAdAByAGkAYgB1AHQAaQBvAG4AUABvAGkA
bgB0AEa/FgAABQEsAEYAOAAzADYANABGAEQAQgA2ADAARgA3ADUAMQBGADcAMwBDADYAQgA0ADEA
NwBDAEEAMQBDADYARgA4ADUAOABBADAAMAAyADUAMgAzADMALgBjAHIAbAAG7x4AAAUBDwBzAGUA
YwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQADQTgCAADY7QAALwIAAEY78AAAb2EAACXWCABkAGUA
bAB0AGEAQwBSAEwAAAAFAQQAdAByAHUAZQBGNB0AAAUBCABUAHYAbwBDAGEAYwBoAGUARmcdAAAF
Aa0AbABkAGEAcAA6AC8ALwAvAEMATgA9AHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBACwA
QwBOAD0ARABDACwAQwBOAD0AQwBEAFAALABDAE4APQBQAHUAYgBsAGkAYwAlADIAMABLAGUAeQAl
ADIAMABTAGUAcgB2AGkAYwBlAHMALABDAE4APQBTAGUAcgB2AGkAYwBlAHMALABDAE4APQBDAG8A
bgBmAGkAZwB1AHIAYQB0AGkAbwBuACwARABDAD0AcwBlAGMAdQByAGUAcwB1AGIALABEAEMAPQBu
AGUAdAA/AGQAZQBsAHQAYQBSAGUAdgBvAGMAYQB0AGkAbwBuAEwAaQBzAHQAPwBiAGEAcwBlAD8A
bwBiAGoAZQBjAHQAQwBsAGEAcwBzAD0AYwBSAEwARABpAHMAdAByAGkAYgB1AHQAaQBvAG4AUABv
AGkAbgB0AEa/FgAABQEsADUAMAA2AEUANABGAEUANwBGAEIARgAxADYAQQBEAEUANgA1AEEAQgBE
ADAAOABCADUAMgA4ADcAMQBFADUAOQA4ADgARAAzADYAQQA5ADgALgBjAHIAbAAG7x4AAAUBDwBz
AGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQADQSQAAACbCAAAGwAAAAbGCAAABQEJAGwAcwBh
AHMAcwAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewBBADIANAA2ADkAOAA5AEYALQA3
ADcANQAzAC0ANAA2ADkANgAtAEIANwA2ADkALQBFAEIANgA0ADYAOAA0ADIAOAA2AEMAMwB9AAau
CQAABQEBADMAA0EUAAAA2xcAAAsAAAAGBxIAAAUBAQAwAAMEAABkAEMYCAAAAEYpFQQARwB1AGkA
ZAAAAAUBJgB7ADEADwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAAR
AAAAAAAEAAgABAAIAAgACgABAAQADAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABjAGUEAFoA
WgAAAgAAAAAAQKfAkP6vZs0B7AEAADgcAAC5PgoAAAAAAAABAQAAAAAABRIAAAABAAAABqY3AAAC
Qf0DAAAKGQAAiAAAAEa/FgAABQEsADEANwA2ADEARgAyADYARQBCADAAOAAyADQANwAwAEYANAA0
AEIAMgA3ADgARQBCADYAMgBGAEQAOAAzADEAOQBGADMARABFADIAMAAxADgALgBjAGUAcgAGlBkA
AAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQACAWkAAABmOAAAAgEoAAAAiDgAAAIF
AQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAAwzgAAAIFAQkAcwBlAGMAdQBy
AGUAcwB1AGIABAEQAAAAwzgAAAIFAQMAbgBlAHQABARBdQAAAAg5AABsAAAARjM5AAAFAQUAZgBh
AGwAcwBlAAZgOQAABQEoADcANwAzAEUARAA2ADgAMAA1ADEANgA2ADYANgA3ADAARgA2AEYAMgAz
AEYAQgAyADUAMQA5AEYAQwAxAEIAQQBDADIAMQA4AEMANABDAEIAA0FaAAAASSkAAFEAAABGRiMA
AAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADUARrEpAAAFAQQAUwBI
AEEAMQAG3CkAAAUBAwBSAFMAQQADQVoAAAAUKgAAUQAAAEZGIwAABQEUADEALgAyAC4AOAA0ADAA
LgAxADEAMwA1ADQAOQAuADEALgAxAC4AMQBG3CkAAAUBAwBSAFMAQQAGiyoAAAUBBAAyADAANAA4
AAMBaQAAAI46AAACASgAAACIOAAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAE
ARwAAADDOAAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAADDOAAAAgUBAwBuAGUAdAAEBAFK
AAAAEjsAAAIFASAANwAyADQAMwBEADYANgBEAEIARgBGAEEAOQBCADkAMgA0ADEAQQBEADcANABF
ADkAOABDADcANgBCAEQANwBCAAQBMgAAAIM7AAACBQEUADIAMAAxADIALQAwADcALQAxADkAVAAx
ADYAOgA1ADUAOgAzADcAWgAEATIAAADWOwAAAgUBFAAyADAAMQA3AC0AMAA3AC0AMQA5AFQAMQA3
ADoAMAA1ADoAMwA1AFoABAGVAAAAJzwAAAJBWgAAAE88AABRAAAARnI8AAAFAQQAdAByAHUAZQBG
BxIAAAUBAgA4ADYARqo8AAAFAQQAdAByAHUAZQBGBT0AAAUBBAB0AHIAdQBlAAZYPQAABQEEAHQA
cgB1AGUAA0ErAAAApj0AACIAAABGcjwAAAUBBAB0AHIAdQBlAAbqPQAABQEEAHQAcgB1AGUAAwQE
Qd4CAADY7QAAmQAAAEY78AAABQEEAHQAcgB1AGUARr8WAAAFASwANQAwADYARQA0AEYARQA3AEYA
QgBGADEANgBBAEQARQA2ADUAQQBCAEQAMAA4AEIANQAyADgANwAxAEUANQA5ADgAOABEADMANgBB
ADkAOAAuAGMAcgBsAAbvHgAABQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAIBaQAA
AI46AAACASgAAACIOAAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAADD
OAAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAADDOAAAAgUBAwBuAGUAdAAEBAEyAAAAcEcA
AAIFARQAMgAwADEAMgAtADAANwAtADEAOQBUADEANgA6ADUANQA6ADQANABaAAQBMgAAAMVHAAAC
BQEUADIAMAAxADIALQAwADcALQAyADEAVAAwADUAOgAxADUAOgA0ADQAWgAEAVoBAAAnPAAAAgFt
AAAAvkIAAAJBYgAAAP5CAABZAAAABmA5AAAFASgANwA3ADMARQBEADYAOAAwADUAMQA2ADYANgA2
ADcAMABGADYARgAyADMARgBCADIANQAxADkARgBDADEAQgBBAEMAMgAxADgAQwA0AEMAQgADBAEq
AAAA4fkAAL4bAABmbgkAQwBSAEwATgB1AG0AYgBlAHIAAAACBQECADAAMQAEAVoAAAAQ+gAAFQQA
AKlWDwBOAGUAeAB0AFAAdQBiAGwAaQBzAGgAVABpAG0AZQAAAAIFARQAMgAwADEAMgAtADAANwAt
ADIAMABUADEANwA6ADAANQA6ADQANABaAARBTwAAAG/6AABuYgAAitARAEQAZQBsAHQAYQBDAFIA
TABJAG4AZABpAGMAYQB0AG8AcgAAABEAAAAGcjwAAAUBBAB0AHIAdQBlAAIFAQIAMAAxAAQEBEE1
AgAA2O0AAIgAAABGvxYAAAUBLABGADgAMwA2ADQARgBEAEIANgAwAEYANwA1ADEARgA3ADMAQwA2
AEIANAAxADcAQwBBADEAQwA2AEYAOAA1ADgAQQAwADAAMgA1ADIAMwAzAC4AYwByAGwABu8eAAAF
AQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEAAgFpAAAAjjoAAAIBKAAAAIg4AAACBQEP
AHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAQBHAAAAMM4AAACBQEJAHMAZQBjAHUAcgBl
AHMAdQBiAAQBEAAAAMM4AAACBQEDAG4AZQB0AAQEATIAAABwRwAAAgUBFAAyADAAMQAyAC0AMAA3
AC0AMQA5AFQAMQA2ADoANQA1ADoANAA0AFoABAEyAAAAxUcAAAIFARQAMgAwADEAMgAtADAANwAt
ADIANwBUADAANQA6ADEANQA6ADQANABaAAQBwgAAACc8AAACAW0AAAC+QgAAAkFiAAAA/kIAAFkA
AAAGYDkAAAUBKAA3ADcAMwBFAEQANgA4ADAANQAxADYANgA2ADYANwAwAEYANgBGADIAMwBGAEIA
MgA1ADEAOQBGAEMAMQBCAEEAQwAyADEAOABDADQAQwBCAAMEAQ4AAADh+QAAAgUBAgAwADEABAEy
AAAAEPoAAAIFARQAMgAwADEAMgAtADAANwAtADIANgBUADEANwA6ADAANQA6ADQANABaAAQEBEFj
AGUAChkAAHIAAABGvxYAAAUBLABCADkAQwAyADYAMwBCAEMAOQBEADkANgA5ADkAMAA2ADMARgBB
ADMAQwBGADMAQwBFADMAQQBGAEYARAA5ADAARgA0ADQAOAAwADYAQwA4AC4AYwBlAHIABpQZAAAF
AQQAZABhAG4AbwACAWwAAABmOAAAAgESAAAAiDgAAAIFAQQAZABhAG4AbwAEARQAAACIOAAAAgUB
BQBVAHMAZQByAHMABAEcAAAAwzgAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAAwzgAAAIF
AQMAbgBlAHQABARBdQAAAAg5AABsAAAARjM5AAAFAQUAZgBhAGwAcwBlAAZgOQAABQEoADQAQwAz
AEYANgAwADAANwAxADEANABFADIAMQAzADUAMQBFAEYANwBGADMAMgA2ADUAQgBDAEQAMQAzAEEA
RQA4AEIANAA0ADkAQwBEAEEAA0FaAAAASSkAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgANAAwAC4A
MQAxADMANQA0ADkALgAxAC4AMQAuADUARrEpAAAFAQQAUwBIAEEAMQAG3CkAAAUBAwBSAFMAQQAD
QVoAAAAUKgAAUQAAAEZGIwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAx
AC4AMQBG3CkAAAUBAwBSAFMAQQAGiyoAAAUBBAAyADAANAA4AAMBaQAAAI46AAACASgAAACIOAAA
AgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAADDOAAAAgUBCQBzAGUAYwB1
AHIAZQBzAHUAYgAEARAAAADDOAAAAgUBAwBuAGUAdAAEBAEyAAAAEjsAAAIFARQAMQA1AEEAMgBD
AEYARAA5ADAAMAAwADAAMAAwADAAMAAwADAAMQBFAAQBMgAAAIM7AAACBQEUADIAMAAxADIALQAw
ADcALQAyADAAVAAxADkAOgAwADEAOgA0ADIAWgAEAQACAAZFbGZDaG5rACEAAAAAAAAAMgAAAAAA
AAAhAAAAAAAAADIAAAAAAAAAgAAAALicAAAgqAAARCAQtwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAPNnftAAAAAAraAAA
AAAAAJcGAACShAAANhIAAARNAADfggAAVZ4AAJ1nAAC2hAAAYYQAAP5oAADogwAAGlsAAGg+AADY
HAAAloEAADqEAABGPAAAX0EAAHqMAACGaAAALlAAAJpAAADVQAAA6JoAAH5QAABtnwAA1C8AADSa
AADsPQAALi4AAHYLAAAZTgAAZoEAAINpAAC3gwAAnkcAAIAgAAA+QQAAIRMAAAoLAADcGQAAWJsA
ANCfAAB6hQAAdjoAAL+FAABqMwAAckgAALiZAAD8DQAAO4UAAJUzAADaZgAAbRwAAL4wAAAEhgAA
7kQAAIkuAAC3PgAAJZsAAGtPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAACYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoqAACoGwAAIQAAAAAAAACnwJD+r2bN
AQ8BAQAMAWaPr6smAgAAAAAAAGaPr6t+VHNdTRRbY3pPHKuDBQAADwEBAEH//3cFAABNAgAAAAAA
ALoMBQBFAHYAZQBuAHQAAACHAAAABmoCAAAAAAAAvA8FAHgAbQBsAG4AcwAAAAUBNQBoAHQAdABw
ADoALwAvAHMAYwBoAGUAbQBhAHMALgBtAGkAYwByAG8AcwBvAGYAdAAuAGMAbwBtAC8AdwBpAG4A
LwAyADAAMAA0AC8AMAA4AC8AZQB2AGUAbgB0AHMALwBlAHYAZQBuAHQAAgH//6AEAAD4AgAAAAAA
AG9UBgBTAHkAcwB0AGUAbQAAAAJB///TAAAAGgMAAAAAAADxewgAUAByAG8AdgBpAGQAZQByAAAA
sAAAAEY9AwAAAAAAAEuVBABOAGEAbQBlAAAABQEXAE0AaQBjAHIAbwBzAG8AZgB0AC0AVwBpAG4A
ZABvAHcAcwAtAEMAQQBQAEkAMgAGhgMAAAAAAAApFQQARwB1AGkAZAAAAAUBJgB7ADUAYgBiAGMA
YQA0AGEAOAAtAGIAMgAwADkALQA0ADgAZABjAC0AYQA4AGMANwAtAGIAMgAzAGQAMwBlADUAMgAx
ADYAZgBiAH0AA0EDAE0AAAD0AwAAAAAAAPVhBwBFAHYAZQBuAHQASQBEAAAAJwAAAAYVBAAAhgMA
ACnaCgBRAHUAYQBsAGkAZgBpAGUAcgBzAAAADgQABgIOAwAGBAELACIAAABIBAAAAAAAABgJBwBW
AGUAcgBzAGkAbwBuAAAAAg4LAAQEAQAAHgAAAHEEAAAAAAAAZM4FAEwAZQB2AGUAbAAAAAIOAAAE
BAECABwAAACWBAAAAAAAAEV7BABUAGEAcwBrAAAAAg4CAAYEAQEAIAAAALkEAAAAAAAArh4GAE8A
cABjAG8AZABlAAAAAg4BAAQEAQUAJAAAAOAEAAAAAAAAas8IAEsAZQB5AHcAbwByAGQAcwAAAAIO
BQAVBEH//1AAAAALBQAAAAAAADuOCwBUAGkAbQBlAEMAcgBlAGEAdABlAGQAAAAnAAAABjQFAABq
AgAAPHsKAFMAeQBzAHQAZQBtAFQAaQBtAGUAAAAOBgARAwEKAC4AAABiBQAAAAAAAEYDDQBFAHYA
ZQBuAHQAUgBlAGMAbwByAGQASQBEAAAAAg4KAAoEQf//hQAAAJcFAAAAAAAAovILAEMAbwByAHIA
ZQBsAGEAdABpAG8AbgAAAFwAAABGwAUAAAAAAAAK8QoAQQBjAHQAaQB2AGkAdAB5AEkARAAAAA4H
AA8G5wUAAPQDAAA1xREAUgBlAGwAYQB0AGUAZABBAGMAdABpAHYAaQB0AHkASQBEAAAADhIADwNB
//9tAAAAIwYAAAAAAAC4tQkARQB4AGUAYwB1AHQAaQBvAG4AAABIAAAARkgGAADABQAACtcJAFAA
cgBvAGMAZQBzAHMASQBEAAAADggACAZtBgAAlgQAAIU5CABUAGgAcgBlAGEAZABJAEQAAAAOCQAI
AwH//2gAAACXBgAAAAAAAINhBwBDAGgAYQBuAG4AZQBsAAAAAgUBIwBNAGkAYwByAG8AcwBvAGYA
dAAtAFcAaQBuAGQAbwB3AHMALQBDAEEAUABJADIALwBPAHAAZQByAGEAdABpAG8AbgBhAGwABAH/
/0gAAAAGBwAACwUAADtuCABDAG8AbQBwAHUAdABlAHIAAAACBQESAG0AYQBpAGwALgBzAGUAYwB1
AHIAZQBzAHUAYgAuAG4AZQB0AARB//9CAAAAVQcAAAAAAACgLggAUwBlAGMAdQByAGkAdAB5AAAA
HwAAAAZ4BwAAAAAAAGZMBgBVAHMAZQByAEkARAAAAA4MABMDBAETACQAAACfBwAA5wUAADVECABV
AHMAZQByAEQAYQB0AGEAAAACDhMAIQQEABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEA
AAAAAAQACAAEAAgACAAKAAEABAAMABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVxUhAAQAWgBa
AAACAAAAAABAp8CQ/q9mzQHsAQAAOBwAALk+CgAAAAAAAAEBAAAAAAAFEgAAAAFRFQAAUQgAALkE
AACusAsAWAA1ADAAOQBPAGIAagBlAGMAdABzAAAAAkF5BwAAewgAAAAAAAC30gsAQwBlAHIAdABp
AGYAaQBjAGEAdABlAAAAwAAAAEakCAAAAAAAAJdqBwBmAGkAbABlAFIAZQBmAAAABQEsADEANwA2
ADEARgAyADYARQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBCADYAMgBGAEQAOAAzADEA
OQBGADMARABFADIAMAAxADgALgBjAGUAcgAGHQkAAHsIAAA3wwsAcwB1AGIAagBlAGMAdABOAGEA
bQBlAAAABQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAIBnQAAAGkJAAAAAAAAzMkH
AFMAdQBiAGoAZQBjAHQAAAACATYAAACLCQAAPQMAAMsQAgBDAE4AAAACBQEPAHMAZQBjAHUAcgBl
AHMAdQBiAC0ARABDAC0AQwBBAAQBKgAAAMYJAAAAAAAA/xACAEQAQwAAAAIFAQkAcwBlAGMAdQBy
AGUAcwB1AGIABAEQAAAAxgkAAAIFAQMAbgBlAHQABARBwwAAAAsKAAAAAAAADowMAFMAdQBiAGoA
ZQBjAHQASwBlAHkASQBEAAAAmAAAAEY2CgAAAAAAAA2mCABjAG8AbQBwAHUAdABlAGQAAAAFAQUA
ZgBhAGwAcwBlAAZjCgAAUQgAAC7KBABoAGEAcwBoAAAABQEoADcANwAzAEUARAA2ADgAMAA1ADEA
NgA2ADYANgA3ADAARgA2AEYAMgAzAEYAQgAyADUAMQA5AEYAQwAxAEIAQQBDADIAMQA4AEMANABD
AEIAA0HWAAAA0woAAKQIAABXjRIAUwBpAGcAbgBhAHQAdQByAGUAQQBsAGcAbwByAGkAdABoAG0A
AACfAAAARgoLAADgBAAAKtMDAG8AaQBkAAAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQA
OQAuADEALgAxAC4ANQBGSwsAAAAAAAB5cQgAaABhAHMAaABOAGEAbQBlAAAABQEEAFMASABBADEA
BnYLAAAAAAAAYcUNAHAAdQBiAGwAaQBjAEsAZQB5AE4AYQBtAGUAAAAFAQMAUgBTAEEAA0GwAAAA
rgsAAAAAAADZCxIAUAB1AGIAbABpAGMASwBlAHkAQQBsAGcAbwByAGkAdABoAG0AAAB5AAAARgoL
AAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEZ2CwAABQEDAFIA
UwBBAAYlDAAAAAAAABzrDwBwAHUAYgBsAGkAYwBLAGUAeQBMAGUAbgBnAHQAaAAAAAUBBAAyADAA
NAA4AAMBfwAAAGMMAABLCwAAeV0GAEkAcwBzAHUAZQByAAAAAgEoAAAAiwkAAAIFAQ8AcwBlAGMA
dQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAAxgkAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIA
BAEQAAAAxgkAAAIFAQMAbgBlAHQABAQBbAAAAOcMAAAAAAAAvQQMAFMAZQByAGkAYQBsAE4AdQBt
AGIAZQByAAAAAgUBIAA3ADIANAAzAEQANgA2AEQAQgBGAEYAQQA5AEIAOQAyADQAMQBBAEQANwA0
AEUAOQA4AEMANwA2AEIARAA3AEIABAFOAAAAWA0AAAAAAACylwkATgBvAHQAQgBlAGYAbwByAGUA
AAACBQEUADIAMAAxADIALQAwADcALQAxADkAVAAxADYAOgA1ADUAOgAzADcAWgAEAUwAAACrDQAA
AAAAAMkNCABOAG8AdABBAGYAdABlAHIAAAACBQEUADIAMAAxADcALQAwADcALQAxADkAVAAxADcA
OgAwADUAOgAzADUAWgAEAfcBAAD8DQAAAAAAADT4CgBFAHgAdABlAG4AcwBpAG8AbgBzAAAAAkFm
AQAAJA4AAJcFAABibQgASwBlAHkAVQBzAGEAZwBlAAAAQwEAAEZHDgAAAAAAAB+XCABjAHIAaQB0
AGkAYwBhAGwAAAAFAQQAdAByAHUAZQBGcg4AABoDAABxigUAdgBhAGwAdQBlAAAABQECADgANgBG
kw4AACMGAAC4cCAAQwBFAFIAVABfAEQASQBHAEkAVABBAEwAXwBTAEkARwBOAEEAVABVAFIARQBf
AEsARQBZAF8AVQBTAEEARwBFAAAABQEEAHQAcgB1AGUARu4OAABHDgAA35ccAEMARQBSAFQAXwBL
AEUAWQBfAEMARQBSAFQAXwBTAEkARwBOAF8ASwBFAFkAXwBVAFMAQQBHAEUAAAAFAQQAdAByAHUA
ZQAGQQ8AACUMAAAcABcAQwBFAFIAVABfAEMAUgBMAF8AUwBJAEcATgBfAEsARQBZAF8AVQBTAEEA
RwBFAAAABQEEAHQAcgB1AGUAA0FjAAAAjw8AAAAAAACo8hAAQgBhAHMAaQBjAEMAbwBuAHMAdABy
AGEAaQBuAHQAcwAAADAAAABGRw4AAAUBBAB0AHIAdQBlAAbTDwAAAAAAAJ4YAgBjAEEAAAAFAQQA
dAByAHUAZQADBARB2AMAAPkPAAAAAAAAE4UZAEMAZQByAHQAaQBmAGkAYwBhAHQAZQBSAGUAdgBv
AGMAYQB0AGkAbwBuAEwAaQBzAHQAAADRAAAARj4QAAAAAAAAJdYIAGQAZQBsAHQAYQBDAFIATAAA
AAUBBAB0AHIAdQBlAEakCAAABQEsADUAMAA2AEUANABGAEUANwBGAEIARgAxADYAQQBEAEUANgA1
AEEAQgBEADAAOABCADUAMgA4ADcAMQBFADUAOQA4ADgARAAzADYAQQA5ADgALgBjAHIAbAAGyhAA
AHEEAACkIQoAaQBzAHMAdQBlAHIATgBhAG0AZQAAAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQA
QwAtAEMAQQACAWkAAABjDAAAAgEoAAAAiwkAAAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMA
LQBDAEEABAEcAAAAxgkAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAAxgkAAAIFAQMAbgBl
AHQABAQBUAAAAIIRAAAAAAAAJ1oKAFQAaABpAHMAVQBwAGQAYQB0AGUAAAACBQEUADIAMAAxADIA
LQAwADcALQAxADkAVAAxADYAOgA1ADUAOgA0ADQAWgAEAVAAAADXEQAAQQ8AAFzrCgBOAGUAeAB0
AFUAcABkAGEAdABlAAAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAxAFQAMAA1ADoAMQA1ADoANAA0
AFoABAGkAQAA/A0AAAIBtwAAADYSAABtBgAAxaMWAEEAdQB0AGgAbwByAGkAdAB5AEsAZQB5AEkA
ZABlAG4AdABpAGYAaQBlAHIAAAACQXYAAAB2EgAAAAAAANqWBQBLAGUAeQBJAEQAAABZAAAABmMK
AAAFASgANwA3ADMARQBEADYAOAAwADUAMQA2ADYANgA2ADcAMABGADYARgAyADMARgBCADIANQAx
ADkARgBDADEAQgBBAEMAMgAxADgAQwA0AEMAQgADBAEqAAAA8hIAAHgHAABmbgkAQwBSAEwATgB1
AG0AYgBlAHIAAAACBQECADAAMQAEAVoAAAAhEwAAFQQAAKlWDwBOAGUAeAB0AFAAdQBiAGwAaQBz
AGgAVABpAG0AZQAAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEANwA6ADAANQA6ADQANABa
AARBTwAAAIATAABIBgAAitARAEQAZQBsAHQAYQBDAFIATABJAG4AZABpAGMAYQB0AG8AcgAAABEA
AAAGRw4AAAUBBAB0AHIAdQBlAAIFAQIAMAAxAAQEBEE1AgAA+Q8AAIgAAABGpAgAAAUBLABGADgA
MwA2ADQARgBEAEIANgAwAEYANwA1ADEARgA3ADMAQwA2AEIANAAxADcAQwBBADEAQwA2AEYAOAA1
ADgAQQAwADAAMgA1ADIAMwAzAC4AYwByAGwABsoQAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBE
AEMALQBDAEEAAgFpAAAAYwwAAAIBKAAAAIsJAAACBQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABD
AC0AQwBBAAQBHAAAAMYJAAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAMYJAAACBQEDAG4A
ZQB0AAQEATIAAACCEQAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMQA5AFQAMQA2ADoANQA1ADoANAA0
AFoABAEyAAAA1xEAAAIFARQAMgAwADEAMgAtADAANwAtADIANwBUADAANQA6ADEANQA6ADQANABa
AAQBwgAAAPwNAAACAW0AAAA2EgAAAkFiAAAAdhIAAFkAAAAGYwoAAAUBKAA3ADcAMwBFAEQANgA4
ADAANQAxADYANgA2ADYANwAwAEYANgBGADIAMwBGAEIAMgA1ADEAOQBGAEMAMQBCAEEAQwAyADEA
OABDADQAQwBCAAMEAQ4AAADyEgAAAgUBAgAwADEABAEyAAAAIRMAAAIFARQAMgAwADEAMgAtADAA
NwAtADIANgBUADEANwA6ADAANQA6ADQANABaAAQEBEFYBgAAewgAAHIAAABGpAgAAAUBLABCADkA
QwAyADYAMwBCAEMAOQBEADkANgA5ADkAMAA2ADMARgBBADMAQwBGADMAQwBFADMAQQBGAEYARAA5
ADAARgA0ADQAOAAwADYAQwA4AC4AYwBlAHIABh0JAAAFAQQAZABhAG4AbwACAWwAAABpCQAAAgES
AAAAiwkAAAIFAQQAZABhAG4AbwAEARQAAACLCQAAAgUBBQBVAHMAZQByAHMABAEcAAAAxgkAAAIF
AQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAAxgkAAAIFAQMAbgBlAHQABARBdQAAAAsKAABsAAAA
RjYKAAAFAQUAZgBhAGwAcwBlAAZjCgAABQEoADQAQwAzAEYANgAwADAANwAxADEANABFADIAMQAz
ADUAMQBFAEYANwBGADMAMgA2ADUAQgBDAEQAMQAzAEEARQA4AEIANAA0ADkAQwBEAEEAA0FaAAAA
0woAAFEAAABGCgsAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADUA
RksLAAAFAQQAUwBIAEEAMQAGdgsAAAUBAwBSAFMAQQADQVoAAACuCwAAUQAAAEYKCwAABQEUADEA
LgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4AMQBGdgsAAAUBAwBSAFMAQQAGJQwA
AAUBBAAyADAANAA4AAMBaQAAAGMMAAACASgAAACLCQAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAt
AEQAQwAtAEMAQQAEARwAAADGCQAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAADGCQAAAgUB
AwBuAGUAdAAEBAEyAAAA5wwAAAIFARQAMQA1AEEAMgBDAEYARAA5ADAAMAAwADAAMAAwADAAMAAw
ADAAMQBFAAQBMgAAAFgNAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAwADEAOgA0
ADIAWgAEATIAAACrDQAAAgUBFAAyADAAMQAzAC0AMAA3AC0AMgAwAFQAMQA5ADoAMAAxADoANAAy
AFoABAEbAwAA/A0AAAIBlAEAAFYZAAAGBwAA+xUQAEUAeAB0AGUAbgBkAGUAZABLAGUAeQBVAHMA
YQBnAGUAAAACQZkAAACKGQAAAAAAAMFKBQBVAHMAYQBnAGUAAAB8AAAARgoLAAAFARYAMQAuADMA
LgA2AC4AMQAuADQALgAxAC4AMwAxADEALgAxADAALgAzAC4ANAAG3BkAAAAAAAArrQQAbgBhAG0A
ZQAAAAUBFgBFAG4AYwByAHkAcAB0AGkAbgBnACAARgBpAGwAZQAgAFMAeQBzAHQAZQBtAANBVQAA
AIoZAABMAAAARgoLAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgA0AAbcGQAA
BQEMAFMAZQBjAHUAcgBlACAARQBtAGEAaQBsAANBZwAAAIoZAABeAAAARgoLAAAFAREAMQAuADMA
LgA2AC4AMQAuADUALgA1AC4ANwAuADMALgAyAAbcGQAABQEVAEMAbABpAGUAbgB0ACAAQQB1AHQA
aABlAG4AdABpAGMAYQB0AGkAbwBuAAMEQZEAAAAkDgAAiAAAAEZHDgAABQEEAHQAcgB1AGUARnIO
AAAFAQIAQQAwAEaTDgAABQEEAHQAcgB1AGUABicbAAAAAAAAT28fAEMARQBSAFQAXwBLAEUAWQBf
AEUATgBDAEkAUABIAEUAUgBNAEUATgBUAF8ASwBFAFkAXwBVAFMAQQBHAEUAAAAFAQQAdAByAHUA
ZQADAW0AAAA2EgAAAkFiAAAAdhIAAFkAAAAGYwoAAAUBKAA3ADcAMwBFAEQANgA4ADAANQAxADYA
NgA2ADYANwAwAEYANgBGADIAMwBGAEIAMgA1ADEAOQBGAEMAMQBCAEEAQwAyADEAOABDADQAQwBC
AAMEAW8AAAD3GwAAAAAAAEjSDgBTAHUAYgBqAGUAYwB0AEEAbAB0AE4AYQBtAGUAAAACAT4AAAAn
HAAA+Q8AANM5AwBVAFAATgAAAAIFARIAZABhAG4AbwBAAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBl
AHQABAQEBEFmAAAAbRwAAJMOAAA46wwARQB2AGUAbgB0AEEAdQB4AEkAbgBmAG8AAAA7AAAABpgc
AAB2EgAAmuILAFAAcgBvAGMAZQBzAHMATgBhAG0AZQAAAAUBCQBsAHMAYQBzAHMALgBlAHgAZQAD
QckAAADYHAAAAAAAAFDbEgBDAG8AcgByAGUAbABhAHQAaQBvAG4AQQB1AHgASQBuAGYAbwAAAJIA
AABGDx0AAFUHAAAgOwYAVABhAHMAawBJAGQAAAAFASYAewBBADIANAA2ADkAOAA5AEYALQA3ADcA
NQAzAC0ANAA2ADkANgAtAEIANwA2ADkALQBFAEIANgA0ADYAOAA0ADIAOAA2AEMAMwB9AAZ6HQAA
9xsAAEj4CQBTAGUAcQBOAHUAbQBiAGUAcgAAAAUBAQA0AAMEAAAAOgAzqBsAACoqAABgEgAAIgAA
AAAAAACnwJD+r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgA
EQAAAAAABAAIAAQACAAIAAoAAQAEAAwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACnESEABAIL
AAsAAwAAAAAAAECnwJD+r2bNAewBAAA4HAAAuj4KAAAAAAAAAQEAAAAAAAUSAAAAAaERAABeHgAA
NAUAALwjFwBDAGUAcgB0AEcAZQB0AEMAZQByAHQAaQBmAGkAYwBhAHQAZQBDAGgAYQBpAG4AAAAC
QXsAAAB7CAAAcgAAAEakCAAABQEsAEIAOQBDADIANgAzAEIAQwA5AEQAOQA2ADkAOQAwADYAMwBG
AEEAMwBDAEYAMwBDAEUAMwBBAEYARgBEADkAMABGADQANAA4ADAANgBDADgALgBjAGUAcgAGHQkA
AAUBBABkAGEAbgBvAAMBrgAAACAfAACYHAAAmkEPAEEAZABkAGkAdABpAG8AbgBhAGwAUwB0AG8A
cgBlAAAAAkF7AAAAewgAAHIAAABGpAgAAAUBLABCADkAQwAyADYAMwBCAEMAOQBEADkANgA5ADkA
MAA2ADMARgBBADMAQwBGADMAQwBFADMAQQBGAEYARAA5ADAARgA0ADQAOAAwADYAQwA4AC4AYwBl
AHIABh0JAAAFAQQAZABhAG4AbwADBAFyAAAAVhkAAAJBZwAAAIoZAABeAAAARgoLAAAFAREAMQAu
ADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgAyAAbcGQAABQEVAEMAbABpAGUAbgB0ACAAQQB1
AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuAAMEQQ4BAABKIAAAAAAAAIcEBQBGAGwAYQBnAHMAAADx
AAAARnIOAAAFAQgANAAwADAAMAAwADAAMAA0AEaAIAAAghEAAKdDIwBDAEUAUgBUAF8AQwBIAEEA
SQBOAF8AQwBBAEMASABFAF8ATwBOAEwAWQBfAFUAUgBMAF8AUgBFAFQAUgBJAEUAVgBBAEwAAAAF
AQQAdAByAHUAZQAG4SAAAMoQAABk0C4AQwBFAFIAVABfAEMASABBAEkATgBfAFIARQBWAE8AQwBB
AFQASQBPAE4AXwBDAEgARQBDAEsAXwBDAEgAQQBJAE4AXwBFAFgAQwBMAFUARABFAF8AUgBPAE8A
VAAAAAUBBAB0AHIAdQBlAANBYAAAAF0hAAAAAAAAkdYPAEMAaABhAGkAbgBFAG4AZwBpAG4AZQBJ
AG4AZgBvAAAALwAAAAaOIQAAJxsAAA8LBwBjAG8AbgB0AGUAeAB0AAAABQEHAG0AYQBjAGgAaQBu
AGUAA0F2DQAAwiEAAIATAAAK1xAAQwBlAHIAdABpAGYAaQBjAGEAdABlAEMAaABhAGkAbgAAAMYA
AABG9SEAAFgNAAAyNAgAYwBoAGEAaQBuAFIAZQBmAAAABQEmAHsANwA5AEEANwAwADUARgAzAC0A
NwBCADEANwAtADQAQQBDADkALQBCADkAOABBAC0ANQBDADUAMwA2ADUAQgA5AEIARABBADkAfQAG
ZCIAAAAAAACU0xcAcgBlAHYAbwBjAGEAdABpAG8AbgBGAHIAZQBzAGgAbgBlAHMAcwBUAGkAbQBl
AAAABQELAFAAMQBEAFQAMgBIADQAOABNADkAUwACAfMAAADAIgAAwiEAAAqACwBUAHIAdQBzAHQA
UwB0AGEAdAB1AHMAAAACQTQAAADqIgAATQIAAHqXCwBFAHIAcgBvAHIAUwB0AGEAdAB1AHMAAAAL
AAAABnIOAAAFAQEAMAADQY8AAAAjIwAADx0AAGAUCgBJAG4AZgBvAFMAdABhAHQAdQBzAAAAaAAA
AEZyDgAABQEDADEAMAAwAAZZIwAA0w8AAJ7jHwBDAEUAUgBUAF8AVABSAFUAUwBUAF8ASABBAFMA
XwBQAFIARQBGAEUAUgBSAEUARABfAEkAUwBTAFUARQBSAAAABQEEAHQAcgB1AGUAAwQB2AgAALgj
AABWGQAAO7IMAEMAaABhAGkAbgBFAGwAZQBtAGUAbgB0AAAAAkF7AAAAewgAAHIAAABGpAgAAAUB
LABCADkAQwAyADYAMwBCAEMAOQBEADkANgA5ADkAMAA2ADMARgBBADMAQwBGADMAQwBFADMAQQBG
AEYARAA5ADAARgA0ADQAOAAwADYAQwA4AC4AYwBlAHIABh0JAAAFAQQAZABhAG4AbwADQVoAAADT
CgAAUQAAAEYKCwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBG
SwsAAAUBBABTAEgAQQAxAAZ2CwAABQEDAFIAUwBBAANBWgAAAK4LAABRAAAARgoLAAAFARQAMQAu
ADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEZ2CwAABQEDAFIAUwBBAAYlDAAA
BQEEADIAMAA0ADgAAwGmAAAAwCIAAAJBFAAAAOoiAAALAAAABnIOAAAFAQEAMAADQYIAAAAjIwAA
eQAAAEZyDgAABQEDADEAMAAyAEZdJQAA6iIAADo0HwBDAEUAUgBUAF8AVABSAFUAUwBUAF8ASABB
AFMAXwBLAEUAWQBfAE0AQQBUAEMASABfAEkAUwBTAFUARQBSAAAABQEEAHQAcgB1AGUABlkjAAAF
AQQAdAByAHUAZQADBAFuAQAAzSUAAF0hAACRRBAAQQBwAHAAbABpAGMAYQB0AGkAbwBuAFUAcwBh
AGcAZQAAAAJBcwAAAIoZAABqAAAARgoLAAAFARYAMQAuADMALgA2AC4AMQAuADQALgAxAC4AMwAx
ADEALgAxADAALgAzAC4ANAAG3BkAAAUBFgBFAG4AYwByAHkAcAB0AGkAbgBnACAARgBpAGwAZQAg
AFMAeQBzAHQAZQBtAANBVQAAAIoZAABMAAAARgoLAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1
AC4ANwAuADMALgA0AAbcGQAABQEMAFMAZQBjAHUAcgBlACAARQBtAGEAaQBsAANBZwAAAIoZAABe
AAAARgoLAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgAyAAbcGQAABQEVAEMA
bABpAGUAbgB0ACAAQQB1AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuAAMEASkAAABAJwAAYgUAAMaL
DQBJAHMAcwB1AGEAbgBjAGUAVQBzAGEAZwBlAAAAA0EhBQAAbicAAAAAAADsOg4AUgBlAHYAbwBj
AGEAdABpAG8AbgBJAG4AZgBvAAAAQwAAAAadJwAAAAAAAJI5DQBmAHIAZQBzAGgAbgBlAHMAcwBU
AGkAbQBlAAAABQELAFAAMQBEAFQAMgBIADQAOABNADkAUwACQT4AAADlJwAAAAAAANuqEABSAGUA
dgBvAGMAYQB0AGkAbwBuAFIAZQBzAHUAbAB0AAAACwAAAAZyDgAABQEBADAAA0FDAgAA+Q8AADoC
AABGMSgAAJ8HAAB1DwgAbABvAGMAYQB0AGkAbwBuAAAABQEIAFQAdgBvAEMAYQBjAGgAZQBGZCgA
APgCAABvMgMAdQByAGwAAAAFAbMAbABkAGEAcAA6AC8ALwAvAEMATgA9AHMAZQBjAHUAcgBlAHMA
dQBiAC0ARABDAC0AQwBBACwAQwBOAD0ARABDACwAQwBOAD0AQwBEAFAALABDAE4APQBQAHUAYgBs
AGkAYwAlADIAMABLAGUAeQAlADIAMABTAGUAcgB2AGkAYwBlAHMALABDAE4APQBTAGUAcgB2AGkA
YwBlAHMALABDAE4APQBDAG8AbgBmAGkAZwB1AHIAYQB0AGkAbwBuACwARABDAD0AcwBlAGMAdQBy
AGUAcwB1AGIALABEAEMAPQBuAGUAdAA/AGMAZQByAHQAaQBmAGkAYwBhAHQAZQBSAGUAdgBvAGMA
YQB0AGkAbwBuAEwAaQBzAHQAPwBiAGEAcwBlAD8AbwBiAGoAZQBjAHQAQwBsAGEAcwBzAD0AYwBS
AEwARABpAHMAdAByAGkAYgB1AHQAaQBvAG4AUABvAGkAbgB0AEakCAAABQEsAEYAOAAzADYANABG
AEQAQgA2ADAARgA3ADUAMQBGADcAMwBDADYAQgA0ADEANwBDAEEAMQBDADYARgA4ADUAOABBADAA
MAAyADUAMgAzADMALgBjAHIAbAAGyhAAAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMA
QQADQR4CAAD5DwAAFQIAAEY+EAAABQEEAHQAcgB1AGUARjEoAAAFAQgAVAB2AG8AQwBhAGMAaABl
AEZkKAAABQGtAGwAZABhAHAAOgAvAC8ALwBDAE4APQBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAt
AEMAQQAsAEMATgA9AEQAQwAsAEMATgA9AEMARABQACwAQwBOAD0AUAB1AGIAbABpAGMAJQAyADAA
SwBlAHkAJQAyADAAUwBlAHIAdgBpAGMAZQBzACwAQwBOAD0AUwBlAHIAdgBpAGMAZQBzACwAQwBO
AD0AQwBvAG4AZgBpAGcAdQByAGEAdABpAG8AbgAsAEQAQwA9AHMAZQBjAHUAcgBlAHMAdQBiACwA
RABDAD0AbgBlAHQAPwBkAGUAbAB0AGEAUgBlAHYAbwBjAGEAdABpAG8AbgBMAGkAcwB0AD8AYgBh
AHMAZQA/AG8AYgBqAGUAYwB0AEMAbABhAHMAcwA9AGMAUgBMAEQAaQBzAHQAcgBpAGIAdQB0AGkA
bwBuAFAAbwBpAG4AdABGpAgAAAUBLAA1ADAANgBFADQARgBFADcARgBCAEYAMQA2AEEARABFADYA
NQBBAEIARAAwADgAQgA1ADIAOAA3ADEARQA1ADkAOAA4AEQAMwA2AEEAOQA4AC4AYwByAGwABsoQ
AAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEAAwQEAaICAAC4IwAAAkGRAAAAewgA
AIgAAABGpAgAAAUBLAAxADcANgAxAEYAMgA2AEUAQgAwADgAMgA0ADcAMABGADQANABCADIANwA4
AEUAQgA2ADIARgBEADgAMwAxADkARgAzAEQARQAyADAAMQA4AC4AYwBlAHIABh0JAAAFAQ8AcwBl
AGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEAA0FaAAAA0woAAFEAAABGCgsAAAUBFAAxAC4AMgAu
ADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADUARksLAAAFAQQAUwBIAEEAMQAGdgsAAAUB
AwBSAFMAQQADQVoAAACuCwAAUQAAAEYKCwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQA
OQAuADEALgAxAC4AMQBGdgsAAAUBAwBSAFMAQQAGJQwAAAUBBAAyADAANAA4AAMB9QAAAMAiAAAC
QRQAAADqIgAACwAAAAZyDgAABQEBADAAA0HRAAAAIyMAAMgAAABGcg4AAAUBAwAxADAAQwBGLi4A
ACMjAACgvSAAQwBFAFIAVABfAFQAUgBVAFMAVABfAEgAQQBTAF8ATgBBAE0ARQBfAE0AQQBUAEMA
SABfAEkAUwBTAFUARQBSAAAABQEEAHQAcgB1AGUARokuAABeHgAAfJcZAEMARQBSAFQAXwBUAFIA
VQBTAFQAXwBJAFMAXwBTAEUATABGAF8AUwBJAEcATgBFAEQAAAAFAQQAdAByAHUAZQAGWSMAAAUB
BAB0AHIAdQBlAAMEQSoAAADNJQAAIQAAAAb2LgAAbicAAGz7AwBhAG4AeQAAAAUBBAB0AHIAdQBl
AANBGgAAAEAnAAARAAAABvYuAAAFAQQAdAByAHUAZQADBARBJAAAAG0cAAAbAAAABpgcAAAFAQkA
bABzAGEAcwBzAC4AZQB4AGUAA0FpAAAA2BwAAGAAAABGDx0AAAUBJgB7AEEAMgA0ADYAOQA4ADkA
RgAtADcANwA1ADMALQA0ADYAOQA2AC0AQgA3ADYAOQAtAEUAQgA2ADQANgA4ADQAMgA4ADYAQwAz
AH0ABnodAAAFAQEANQADQSoAAADULwAAAAAAAF2YBgBSAGUAcwB1AGwAdAAAAAsAAAAGcg4AAAUB
AQAwAAMEAAAAUwBBAAaLYBIAACoqAABwBAAAIwAAAAAAAABwc5n+r2bNAQ8BAQAMAWaPr6smAgAA
FAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAAAAAABAAIAAQACAAIAAoAAQAEAAwAEwAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC9AyEABAAeAB4AAQAAAAAAAECnwJD+r2bNAewBAAA4HAAA
uz4KAAAAAAAAAQEAAAAAAAUSAAAAAbcDAAC+MAAAYwwAAHnaIABDAGUAcgB0AFYAZQByAGkAZgB5
AEMAZQByAHQAaQBmAGkAYwBhAHQAZQBDAGgAYQBpAG4AUABvAGwAaQBjAHkAAAACQYkAAAASMQAA
9SEAAHIaBgBQAG8AbABpAGMAeQAAAGoAAABGMTEAAF0lAAB6BgQAdAB5AHAAZQAAAAUBFQBDAEUA
UgBUAF8AQwBIAEEASQBOAF8AUABPAEwASQBDAFkAXwBTAFMATAAGdjEAAAAAAABELwgAYwBvAG4A
cwB0AGEAbgB0AAAABQEBADQAA0F7AAAAewgAAHIAAABGpAgAAAUBLABCADkAQwAyADYAMwBCAEMA
OQBEADkANgA5ADkAMAA2ADMARgBBADMAQwBGADMAQwBFADMAQQBGAEYARAA5ADAARgA0ADQAOAAw
ADYAQwA4AC4AYwBlAHIABh0JAAAFAQQAZABhAG4AbwADQV4AAADCIQAAVQAAAAb1IQAABQEmAHsA
NwA5AEEANwAwADUARgAzAC0ANwBCADEANwAtADQAQQBDADkALQBCADkAOABBAC0ANQBDADUAMwA2
ADUAQgA5AEIARABBADkAfQADQRQAAABKIAAACwAAAAZyDgAABQEBADAAA0GqAAAAnDIAACccAABT
WBcAUwBTAEwAQQBkAGQAaQB0AGkAbwBuAGEAbABQAG8AbABpAGMAeQBJAG4AZgBvAAAALwAAAAbd
MgAAJA4AAOLxCABhAHUAdABoAFQAeQBwAGUAAAAFAQYAYwBsAGkAZQBuAHQAAkE0AAAAETMAADEo
AAA1DwsASQBnAG4AbwByAGUARgBsAGEAZwBzAAAACwAAAAZyDgAABQEBADAAAwRBeQAAAEszAAAS
MQAA8s8GAFMAdABhAHQAdQBzAAAAWgAAAEZqMwAAcg4AADE1CgBjAGgAYQBpAG4ASQBuAGQAZQB4
AAAABQECAC0AMQAGlTMAAAAAAAB2vgwAZQBsAGUAbQBlAG4AdABJAG4AZABlAHgAAAAFAQIALQAx
AANBJAAAAG0cAAAbAAAABpgcAAAFAQkAbABzAGEAcwBzAC4AZQB4AGUAA0FpAAAA2BwAAGAAAABG
Dx0AAAUBJgB7ADYAOQAyADgANgA1ADQARAAtADEAQgA1ADcALQA0ADIAOQBDAC0AQQAwADcAMQAt
ADIAQQBBADUANAA5ADQAQgBDAEQARABCAH0ABnodAAAFAQEAMQADQRQAAADULwAACwAAAAZyDgAA
BQEBADAAAwQAAEJwBAAAKioAALABAAAkAAAAAAAAAHBzmf6vZs0BDwEBAAwBZo+vqyYCAAAUAAAA
AQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAANkAIQAEAVAAUABAAAAAAAAAQHBzmf6vZs0BDADMAHDhWQMwFGAb
P5sPBTAUAAAYCwAAvD4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAHTAAAATjUA
AO4OAADfOxMAVwBpAG4AVgBlAHIAaQBmAHkAVAByAHUAcwB0AFMAdABhAHIAdAAAAAJBKgAAAG0c
AAAhAAAABpgcAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAA2BwAAGAAAABGDx0A
AAUBJgB7AEQANgA5AEUANwA1ADMAQQAtAEIAMgBCADEALQA0ADQAMQBFAC0AQQA0ADcANwAtAEEA
MgBGADQANAAxADgAMABCAEEARgBCAH0ABnodAAAFAQEAMQADBAAAADEAA0GwAQAAKioAAMABAAAl
AAAAAAAAAHBzmf6vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUA
CAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsAIQAE
AQsACgADAAAAAAAAQHBzmf6vZs0BDADMAHDhWQMwFGAbP5sPBTAUAAAYCwAAvT4KAAAAAAAAAQUA
AAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAHlAAAA/jYAAEAnAACGZxwAQwBlAHIAdABHAGUAdABD
AGUAcgB0AGkAZgBpAGMAYQB0AGUAQwBoAGEAaQBuAFMAdABhAHIAdAAAAAJBKgAAAG0cAAAhAAAA
BpgcAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAA2BwAAGAAAABGDx0AAAUBJgB7
AEQANgA5AEUANwA1ADMAQQAtAEIAMgBCADEALQA0ADQAMQBFAC0AQQA0ADcANwAtAEEAMgBGADQA
NAAxADgAMABCAEEARgBCAH0ABnodAAAFAQEAMgADBAAANgAxwAEAACoqAAC4AQAAJgAAAAAAAABw
c5n+r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8A
BAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADlACEABAEpACgABQAA
AAAAAEBwc5n+r2bNAQwAzABw4VkDMBRgGz+bDwUwFAAAGAsAAL4+CgAAAAAAAAEFAAAAAAAFFQAA
AKIi3utU9PmEufKMvHwEAAAB3wAAAL44AABKIAAAh/sZAEMAZQByAHQAVgBlAHIAaQBmAHkAUgBl
AHYAbwBjAGEAdABpAG8AbgBTAHQAYQByAHQAAAACQSoAAABtHAAAIQAAAAaYHAAABQEMAGkAZQB4
AHAAbABvAHIAZQAuAGUAeABlAANBaQAAANgcAABgAAAARg8dAAAFASYAewBEADYAOQBFADcANQAz
AEEALQBCADIAQgAxAC0ANAA0ADEARQAtAEEANAA3ADcALQBBADIARgA0ADQAMQA4ADAAQgBBAEYA
QgB9AAZ6HQAABQEBADMAAwQAAAC4AQAAKioAANABAAAnAAAAAAAAAHBzmf6vZs0BDwEBAAwBZo+v
qyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQA
HAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPcAIQAEATMAMgAuAAAAAAAAQHBzmf6vZs0BDADM
AHDhWQMwFGAbP5sPBTAUAAAYCwAAvz4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQA
AAHxAAAAdjoAAGQoAAAvriIAQwByAHkAcAB0AFIAZQB0AHIAaQBlAHYAZQBPAGIAagBlAGMAdABC
AHkAVQByAGwAQwBhAGMAaABlAFMAdABhAHIAdAAAAAJBKgAAAG0cAAAhAAAABpgcAAAFAQwAaQBl
AHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAA2BwAAGAAAABGDx0AAAUBJgB7AEQANgA5AEUANwA1
ADMAQQAtAEIAMgBCADEALQA0ADQAMQBFAC0AQQA0ADcANwAtAEEAMgBGADQANAAxADgAMABCAEEA
RgBCAH0ABnodAAAFAQEANAADBAAARQA5ADgAQ9ABAAAqKgAAqAgAACgAAAAAAAAAgZqZ/q9mzQEP
AQEADAFmj6+rJgIAABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEAEAAPAAQACAAEAAgA
CAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1AchAAQCMwAzAC4AAAAAAABAcHOZ
/q9mzQEMAMwAcOFZAzAUYBs/mw8FMBQAABgLAADAPgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5
hLnyjLx8BAAAAc4HAABGPAAAnDIAANMZHQBDAHIAeQBwAHQAUgBlAHQAcgBpAGUAdgBlAE8AYgBq
AGUAYwB0AEIAeQBVAHIAbABDAGEAYwBoAGUAAAACQVMBAACUPAAAjiEAAE86AwBVAFIATAAAACcA
AAAGrTwAAD4QAABlcwYAcwBjAGgAZQBtAGUAAAAFAQQAaAB0AHQAcAACBQGHAGgAdAB0AHAAOgAv
AC8AMQA5ADIALgAxADYAOAAuADAALgAyADIAOgAzADUAMAAyAC8ATQBFAHMAdwBTAFQAQgBIAE0A
RQBVAHcAUQB6AEEASgBCAGcAVQByAEQAZwBNAEMARwBnAFUAQQBCAEIAUwBpADIAbgBaAGQAMAA0
ADIAYgBwAEgAYgBBADcANABUAHgANgB1ADkAWQB2AGMAawBvAG0AUQBRAFUAZAB6ADcAVwBnAEYA
RgBtAFoAbgBEADIAOABqACUAMgBCAHkAVQBaACUAMgBGAEIAdQBzAEkAWQB4AE0AcwBDAEMAaABX
AGgAQgB1AEEAQQBBAEEAQQBBAEEAQgAwACUAMwBEAARBXQAAAOw9AABONQAAnwYGAE8AYgBqAGUA
YwB0AAAAPgAAAEYxMQAABQEVAEMATwBOAFQARQBYAFQAXwBPAEkARABfAE8AQwBTAFAAXwBSAEUA
UwBQAAZ2MQAABQEBADYAA0HMAAAASiAAAMMAAABGcg4AAAUBBAAyADAAMAAyAEZoPgAAlDwAAM9V
GgBDAFIAWQBQAFQAXwBDAEEAQwBIAEUAXwBPAE4ATABZAF8AUgBFAFQAUgBJAEUAVgBBAEwAAAAF
AQQAdAByAHUAZQAGtz4AAOcMAAB9WiQAQwBSAFkAUABUAF8ATABEAEEAUABfAFMAQwBPAFAARQBf
AEIAQQBTAEUAXwBPAE4ATABZAF8AUgBFAFQAUgBJAEUAVgBBAEwAAAAFAQQAdAByAHUAZQADQfEA
AAAfPwAASzMAAHLSBwBBAHUAeABJAG4AZgBvAAAA0AAAAEZAPwAAAAAAAD7qGABtAGEAeABVAHIA
bABSAGUAdAByAGkAZQB2AGEAbABCAHkAdABlAEMAbwB1AG4AdAAAAAUBCQAxADAANAA4ADUANwA2
ADAAMAAGlT8AALgjAAC75hMAYwBhAGMAaABlAEYAaQBsAGUATgBhAG0AZQBQAHIAZQBmAGkAeAAA
AAUBIQBFADgAMQA5ADIAQgBCADIAMgAwAEMARgBBADQAQQAzAEMAOABEADkAOQA1ADkAQgAwADUA
NAAwAEMAQwBDAEUAXwADQYICAAAVQAAAAAAAAPCVCQBDAGEAYwBoAGUASQBuAGYAbwAAAFsAAAAG
OkAAAFkjAABe+QwAbABhAHMAdABTAHkAbgBjAFQAaQBtAGUAAAAFARgAMgAwADEAMgAtADAANwAt
ADIAMABUADEAOQA6ADQAMgA6ADUANgAuADQANgAxAFoAAkFzAQAAmkAAAEgEAABYRBQAVQBSAEwA
QwBhAGMAaABlAFAAcgBlAGYAZQB0AGMAaABJAG4AZgBvAAAAOAEAAEbVQAAArgsAABk+CgBvAGIA
agBlAGMAdABUAHkAcABlAAAABQEhAEMAUgBZAFAAVABOAEUAVABfAFUAUgBMAF8AQwBBAEMASABF
AF8AUABSAEUAXwBGAEUAVABDAEgAXwBPAEMAUwBQAEY+QQAAjw8AAKhzBQBlAHIAcgBvAHIAAAAF
AQIAMwAyAEZfQQAAZCIAANQwDgB0AGgAaQBzAFUAcABkAGEAdABlAFQAaQBtAGUAAAAFARQAMgAw
ADEAMgAtADAANwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABaAAa2QQAAqw0AAAltDgBuAGUAeAB0
AFUAcABkAGEAdABlAFQAaQBtAGUAAAAFARQAMgAwADEAMgAtADAANwAtADIAOABUADAANwA6ADUA
MAA6ADEAMABaAANBhAAAABJCAADGCQAAvw4RAFUAUgBMAEMAYQBjAGgAZQBGAGwAdQBzAGgASQBu
AGYAbwAAAE8AAAAGR0IAAGkJAAAMCQoAZQB4AHAAaQByAGUAVABpAG0AZQAAAAUBFAAyADAAMQAy
AC0AMAA3AC0AMgA4AFQAMAA3ADoANQAwADoAMQAwAFoAAwQBwQAAAJxCAAD2LgAA7NgQAFIAZQB0
AHIAaQBlAHYAZQBkAE8AYgBqAGUAYwB0AHMAAAACQYwAAADQQgAAHz8AADL9DABPAEMAUwBQAFIA
ZQBzAHAAbwBuAHMAZQAAAGEAAAAGpAgAAAUBLABBADkARABBADQANwAyADkARQA4ADkAMgBDAEEA
QwAwADkAMABBADMAOABGADUAMgBFADQARgBEADUANgBDADMANgA0AEQARABEADcANAAxAC4AYgBp
AG4AAwRBKgAAAG0cAAAhAAAABpgcAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAA
2BwAAGAAAABGDx0AAAUBJgB7AEQANgA5AEUANwA1ADMAQQAtAEIAMgBCADEALQA0ADQAMQBFAC0A
QQA0ADcANwAtAEEAMgBGADQANAAxADgAMABCAEEARgBCAH0ABnodAAAFAQEANQADQRQAAADULwAA
CwAAAAZyDgAABQEBADAAAwQAAAsAqAgAACoqAABwBwAAKQAAAAAAAACj6Jn+r2bNAQ8BAQAMAWaP
r6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAE
ABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbBiEABAIpACkABQAAAAAAAECBmpn+r2bNAQwA
zABw4VkDMBRgGz+bDwUwFAAAGAsAAME+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwE
AAABlQYAAO5EAACVPwAAe54UAEMAZQByAHQAVgBlAHIAaQBmAHkAUgBlAHYAbwBjAGEAdABpAG8A
bgAAAAJBlwAAAHsIAACOAAAARqQIAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABDADMARgA3AEMA
MwBCAEQANwAzADEAQgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEAOAAuAGMAZQBy
AAYdCQAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AANBvQAAAMZFAABA
PwAA/pERAEkAcwBzAHUAZQByAEMAZQByAHQAaQBmAGkAYwBhAHQAZQAAAIgAAABGpAgAAAUBLAAx
ADcANgAxAEYAMgA2AEUAQgAwADgAMgA0ADcAMABGADQANABCADIANwA4AEUAQgA2ADIARgBEADgA
MwAxADkARgAzAEQARQAyADAAMQA4AC4AYwBlAHIABh0JAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIA
LQBEAEMALQBDAEEAA0GBAAAASiAAAHgAAABGcg4AAAUBAQA0AAacRgAAAAAAAC1gKQBDAEUAUgBU
AF8AVgBFAFIASQBGAFkAXwBSAEUAVgBfAEEAQwBDAFUATQBVAEwAQQBUAEkAVgBFAF8AVABJAE0A
RQBPAFUAVABfAEYATABBAEcAAAAFAQQAdAByAHUAZQADQSwBAAAORwAAzSUAABGzFABBAGQAZABp
AHQAaQBvAG4AYQBsAFAAYQByAGEAbQBlAHQAZQByAHMAAADxAAAARklHAAASQgAAP9wJAHQAaQBt
AGUAVABvAFUAcwBlAAAABQEYADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgA0ADMAOgA1ADQA
LgAwADIANQBaAEaeRwAA8hIAAGbnCwBjAHUAcgByAGUAbgB0AFQAaQBtAGUAAAAFARgAMgAwADEA
MgAtADAANwAtADIAMABUADEAOQA6ADQAMwA6ADUANAAuADAAMwA3AFoABvdHAADXEQAA3I0TAHUA
cgBsAFIAZQB0AHIAaQBlAHYAYQBsAFQAaQBtAGUAbwB1AHQAAAAFAQUAUABUADIAMABTAANBxwAA
AD9IAAAVQAAAcOIQAFIAZQB2AG8AYwBhAHQAaQBvAG4AUwB0AGEAdAB1AHMAAACUAAAARnJIAADQ
QgAAMtEFAGkAbgBkAGUAeAAAAAUBAQAwAEY+QQAABQEBADAARpxIAAB2MQAAhPQGAHIAZQBhAHMA
bwBuAAAABQEBADAABr1IAADhIAAA5OsTAGEAYwB0AHUAYQBsAEYAcgBlAHMAaABuAGUAcwBzAFQA
aQBtAGUAAAAFAQgAUABUADEAMwBNADQANABTAANBwQEAANBCAAC4AQAARjEoAAAFAQgAVQByAGwA
QwBhAGMAaABlAEZkKAAABQGHAGgAdAB0AHAAOgAvAC8AMQA5ADIALgAxADYAOAAuADAALgAyADIA
OgAzADUAMAAyAC8ATQBFAHMAdwBTAFQAQgBIAE0ARQBVAHcAUQB6AEEASgBCAGcAVQByAEQAZwBN
AEMARwBnAFUAQQBCAEIAUwBpADIAbgBaAGQAMAA0ADIAYgBwAEgAYgBBADcANABUAHgANgB1ADkA
WQB2AGMAawBvAG0AUQBRAFUAZAB6ADcAVwBnAEYARgBtAFoAbgBEADIAOABqACUAMgBCAHkAVQBa
ACUAMgBGAEIAdQBzAEkAWQB4AE0AcwBDAEMAaABXAGgAQgB1AEEAQQBBAEEAQQBBAEEAQgAwACUA
MwBEAEakCAAABQEsAEEAOQBEAEEANAA3ADIAOQBFADgAOQAyAEMAQQBDADAAOQAwAEEAMwA4AEYA
NQAyAEUANABGAEQANQA2AEMAMwA2ADQARABEAEQANwA0ADEALgBiAGkAbgAGyhAAAAUBDwBzAGUA
YwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQADQSoAAABtHAAAIQAAAAaYHAAABQEMAGkAZQB4AHAA
bABvAHIAZQAuAGUAeABlAANBaQAAANgcAABgAAAARg8dAAAFASYAewBEADYAOQBFADcANQAzAEEA
LQBCADIAQgAxAC0ANAA0ADEARQAtAEEANAA3ADcALQBBADIARgA0ADQAMQA4ADAAQgBBAEYAQgB9
AAZ6HQAABQEBADYAA0EUAAAA1C8AAAsAAAAGcg4AAAUBAQAwAAMEAABGAABwBwAAKioAADANAAAq
AAAAAAAAAKPomf6vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUA
CAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF0MIQAE
AgsACwADAAAAAAAAQKPomf6vZs0BDADMAHDhWQMwFGAbP5sPBTAUAAAYCwAAwj4KAAAAAAAAAQUA
AAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAFXDAAAXh4AAAJBlwAAAHsIAACOAAAARqQIAAAFASwA
MQA2ADgAOAA5ADUAMQBDADQARABDADMARgA3AEMAMwBCAEQANwAzADEAQgBEAEUAMABFAEQANgAz
ADUANwAzAEYAOQA5ADMARAA0ADEAOAAuAGMAZQByAAYdCQAABQESAG0AYQBpAGwALgBzAGUAYwB1
AHIAZQBzAHUAYgAuAG4AZQB0AAMBYAAAAARNAAD+NgAABjYOAFYAYQBsAGkAZABhAHQAaQBvAG4A
VABpAG0AZQAAAAIFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMwA6ADUANAAuADAA
MgA1AFoABAGiAAAAIB8AAAJBlwAAAHsIAACOAAAARqQIAAAFASwAMQA2ADgAOAA5ADUAMQBDADQA
RABDADMARgA3AEMAMwBCAEQANwAzADEAQgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0
ADEAOAAuAGMAZQByAAYdCQAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0
AAMEQSMBAABWGQAAKQAAAAYZTgAA3TIAAOKCBwBvAHIATQBhAHQAYwBoAAAABQEEAHQAcgB1AGUA
AkFnAAAAihkAAF4AAABGCgsAAAUBEQAxAC4AMwAuADYALgAxAC4ANQAuADUALgA3AC4AMwAuADEA
BtwZAAAFARUAUwBlAHIAdgBlAHIAIABBAHUAdABoAGUAbgB0AGkAYwBhAHQAaQBvAG4AA0E+AAAA
ihkAADUAAAAGCgsAAAUBFgAxAC4AMwAuADYALgAxAC4ANAAuADEALgAzADEAMQAuADEAMAAuADMA
LgAzAANBPAAAAIoZAAAzAAAABgoLAAAFARUAMgAuADEANgAuADgANAAwAC4AMQAuADEAMQAzADcA
MwAwAC4ANAAuADEAAwRBogAAAEogAACZAAAARnIOAAAFAQgANAA4ADAAMAAwADAAMAAwAEbhIAAA
BQEEAHQAcgB1AGUABmtPAABJRwAAPygqAEMARQBSAFQAXwBDAEgAQQBJAE4AXwBSAEUAVgBPAEMA
QQBUAEkATwBOAF8AQQBDAEMAVQBNAFUATABBAFQASQBWAEUAXwBUAEkATQBFAE8AVQBUAAAABQEE
AHQAcgB1AGUAA0EaAAAAXSEAABEAAAAGjiEAAAUBBAB1AHMAZQByAAMB0AAAAP5PAAAAAAAA1ZoO
AEEAZABkAGkAdABpAG8AbgBhAGwASQBuAGYAbwAAAAJBnwAAAC5QAADTCgAA12UZAE4AZQB0AHcA
bwByAGsAQwBvAG4AbgBlAGMAdABpAHYAaQB0AHkAUwB0AGEAdAB1AHMAAABaAAAARnIOAAAFAQEA
MQAGflAAAOUnAADbUBoAXwBTAEUATgBTAEEAUABJAF8ATgBFAFQAVwBPAFIASwBfAEEATABJAFYA
RQBfAEwAQQBOAAAABQEEAHQAcgB1AGUAAwRBKwcAAMIhAABuAAAARvUhAAAFASYAewA4AEIANQAz
ADIAMQBGAEIALQAxADIAMgAwAC0ANABGADcANwAtAEIANwBEADUALQBGADUAOAA4ADcAMAAyADYA
MQAxADUAMwB9AAZkIgAABQEIAFAAVAAxADMATQA0ADQAUwACAU0AAADAIgAAAkEUAAAA6iIAAAsA
AAAGcg4AAAUBAQAwAANBKQAAACMjAAAgAAAARnIOAAAFAQMAMQAwADAABlkjAAAFAQQAdAByAHUA
ZQADBAFLBAAAuCMAAAJBlwAAAHsIAACOAAAARqQIAAAFASwAMQA2ADgAOAA5ADUAMQBDADQARABD
ADMARgA3AEMAMwBCAEQANwAzADEAQgBEAEUAMABFAEQANgAzADUANwAzAEYAOQA5ADMARAA0ADEA
OAAuAGMAZQByAAYdCQAABQESAG0AYQBpAGwALgBzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AANB
WgAAANMKAABRAAAARgoLAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEA
LgA1AEZLCwAABQEEAFMASABBADEABnYLAAAFAQMAUgBTAEEAA0FaAAAArgsAAFEAAABGCgsAAAUB
FAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARnYLAAAFAQMAUgBTAEEA
BiUMAAAFAQQAMgAwADQAOAADAV4AAADAIgAAAkEUAAAA6iIAAAsAAAAGcg4AAAUBAQAwAANBOgAA
ACMjAAAxAAAARnIOAAAFAQMAMQAwADIARl0lAAAFAQQAdAByAHUAZQAGWSMAAAUBBAB0AHIAdQBl
AAMEAXIAAADNJQAAAkFnAAAAihkAAF4AAABGCgsAAAUBEQAxAC4AMwAuADYALgAxAC4ANQAuADUA
LgA3AC4AMwAuADEABtwZAAAFARUAUwBlAHIAdgBlAHIAIABBAHUAdABoAGUAbgB0AGkAYwBhAHQA
aQBvAG4AAwQBBQAAAEAnAAADQQICAABuJwAAGQAAAAadJwAABQEIAFAAVAAxADMATQA0ADQAUwAC
QRQAAADlJwAACwAAAAZyDgAABQEBADAAA0HBAQAA0EIAALgBAABGMSgAAAUBCABVAHIAbABDAGEA
YwBoAGUARmQoAAAFAYcAaAB0AHQAcAA6AC8ALwAxADkAMgAuADEANgA4AC4AMAAuADIAMgA6ADMA
NQAwADIALwBNAEUAcwB3AFMAVABCAEgATQBFAFUAdwBRAHoAQQBKAEIAZwBVAHIARABnAE0AQwBH
AGcAVQBBAEIAQgBTAGkAMgBuAFoAZAAwADQAMgBiAHAASABiAEEANwA0AFQAeAA2AHUAOQBZAHYA
YwBrAG8AbQBRAFEAVQBkAHoANwBXAGcARgBGAG0AWgBuAEQAMgA4AGoAJQAyAEIAeQBVAFoAJQAy
AEYAQgB1AHMASQBZAHgATQBzAEMAQwBoAFcAaABCAHUAQQBBAEEAQQBBAEEAQQBCADAAJQAzAEQA
RqQIAAAFASwAQQA5AEQAQQA0ADcAMgA5AEUAOAA5ADIAQwBBAEMAMAA5ADAAQQAzADgARgA1ADIA
RQA0AEYARAA1ADYAQwAzADYANABEAEQARAA3ADQAMQAuAGIAaQBuAAbKEAAABQEPAHMAZQBjAHUA
cgBlAHMAdQBiAC0ARABDAC0AQwBBAAMEBAEMAgAAuCMAAAJBkQAAAHsIAACIAAAARqQIAAAFASwA
MQA3ADYAMQBGADIANgBFAEIAMAA4ADIANAA3ADAARgA0ADQAQgAyADcAOABFAEIANgAyAEYARAA4
ADMAMQA5AEYAMwBEAEUAMgAwADEAOAAuAGMAZQByAAYdCQAABQEPAHMAZQBjAHUAcgBlAHMAdQBi
AC0ARABDAC0AQwBBAANBWgAAANMKAABRAAAARgoLAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAz
ADUANAA5AC4AMQAuADEALgA1AEZLCwAABQEEAFMASABBADEABnYLAAAFAQMAUgBTAEEAA0FaAAAA
rgsAAFEAAABGCgsAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEA
RnYLAAAFAQMAUgBTAEEABiUMAAAFAQQAMgAwADQAOAADAW8AAADAIgAAAkEUAAAA6iIAAAsAAAAG
cg4AAAUBAQAwAANBSwAAACMjAABCAAAARnIOAAAFAQMAMQAwAEMARi4uAAAFAQQAdAByAHUAZQBG
iS4AAAUBBAB0AHIAdQBlAAZZIwAABQEEAHQAcgB1AGUAAwRBGgAAAM0lAAARAAAABvYuAAAFAQQA
dAByAHUAZQADQRoAAABAJwAAEQAAAAb2LgAABQEEAHQAcgB1AGUAAwQEQSoAAABtHAAAIQAAAAaY
HAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAANgcAABgAAAARg8dAAAFASYAewBE
ADYAOQBFADcANQAzAEEALQBCADIAQgAxAC0ANAA0ADEARQAtAEEANAA3ADcALQBBADIARgA0ADQA
MQA4ADAAQgBBAEYAQgB9AAZ6HQAABQEBADcAA0EUAAAA1C8AAAsAAAAGcg4AAAUBAQAwAAMEAAAH
MA0AACoqAACoAwAAKwAAAAAAAAC0D5r+r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAG
AAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAADWAiEABAAeAB4AAQAAAAAAAECj6Jn+r2bNAQwAzABw4VkDMBRgGz+bDwUwFAAAGAsA
AMM+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAAB0AIAAL4wAAACQUcAAAASMQAA
PgAAAEYxMQAABQEVAEMARQBSAFQAXwBDAEgAQQBJAE4AXwBQAE8ATABJAEMAWQBfAFMAUwBMAAZ2
MQAABQEBADQAA0GXAAAAewgAAI4AAABGpAgAAAUBLAAxADYAOAA4ADkANQAxAEMANABEAEMAMwBG
ADcAQwAzAEIARAA3ADMAMQBCAEQARQAwAEUARAA2ADMANQA3ADMARgA5ADkAMwBEADQAMQA4AC4A
YwBlAHIABh0JAAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQAA0FeAAAA
wiEAAFUAAAAG9SEAAAUBJgB7ADgAQgA1ADMAMgAxAEYAQgAtADEAMgAyADAALQA0AEYANwA3AC0A
QgA3AEQANQAtAEYANQA4ADgANwAwADIANgAxADEANQAzAH0AA0EUAAAASiAAAAsAAAAGcg4AAAUB
AQAwAANBgwAAAJwyAABgAAAARt0yAAAFAQYAcwBlAHIAdgBlAHIABhpbAAALCgAAzpAKAHMAZQBy
AHYAZQByAE4AYQBtAGUAAAAFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQA
AkEUAAAAETMAAAsAAAAGcg4AAAUBAQAwAAMEQSMAAABLMwAAGgAAAEZqMwAABQECAC0AMQAGlTMA
AAUBAgAtADEAA0EqAAAAbRwAACEAAAAGmBwAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgAZQAD
QWkAAADYHAAAYAAAAEYPHQAABQEmAHsARAA2ADkARQA3ADUAMwBBAC0AQgAyAEIAMQAtADQANAAx
AEUALQBBADQANwA3AC0AQQAyAEYANAA0ADEAOAAwAEIAQQBGAEIAfQAGeh0AAAUBAQA4AANBFAAA
ANQvAAALAAAABnIOAAAFAQEAMAADBAAAqAMAACoqAAAwJAAALAAAAAAAAAC0D5r+r2bNAQ8BAQAM
AWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoA
AQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdIyEABABaAFoAAAIAAAAAAEC0D5r+r2bN
AQwAzABw4VkDMBRgGz+bDwUwFAAAGAsAAMQ+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKM
vHwEAAABVyMAAFEIAAACQf0DAAB7CAAAiAAAAEakCAAABQEsADEANwA2ADEARgAyADYARQBCADAA
OAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBCADYAMgBGAEQAOAAzADEAOQBGADMARABFADIAMAAx
ADgALgBjAGUAcgAGHQkAAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQACAWkAAABp
CQAAAgEoAAAAiwkAAAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAAxgkA
AAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAAxgkAAAIFAQMAbgBlAHQABARBdQAAAAsKAABs
AAAARjYKAAAFAQUAZgBhAGwAcwBlAAZjCgAABQEoADcANwAzAEUARAA2ADgAMAA1ADEANgA2ADYA
NgA3ADAARgA2AEYAMgAzAEYAQgAyADUAMQA5AEYAQwAxAEIAQQBDADIAMQA4AEMANABDAEIAA0Fa
AAAA0woAAFEAAABGCgsAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAu
ADUARksLAAAFAQQAUwBIAEEAMQAGdgsAAAUBAwBSAFMAQQADQVoAAACuCwAAUQAAAEYKCwAABQEU
ADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4AMQBGdgsAAAUBAwBSAFMAQQAG
JQwAAAUBBAAyADAANAA4AAMBaQAAAGMMAAACASgAAACLCQAAAgUBDwBzAGUAYwB1AHIAZQBzAHUA
YgAtAEQAQwAtAEMAQQAEARwAAADGCQAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAADGCQAA
AgUBAwBuAGUAdAAEBAFKAAAA5wwAAAIFASAANwAyADQAMwBEADYANgBEAEIARgBGAEEAOQBCADkA
MgA0ADEAQQBEADcANABFADkAOABDADcANgBCAEQANwBCAAQBMgAAAFgNAAACBQEUADIAMAAxADIA
LQAwADcALQAxADkAVAAxADYAOgA1ADUAOgAzADcAWgAEATIAAACrDQAAAgUBFAAyADAAMQA3AC0A
MAA3AC0AMQA5AFQAMQA3ADoAMAA1ADoAMwA1AFoABAGVAAAA/A0AAAJBWgAAACQOAABRAAAARkcO
AAAFAQQAdAByAHUAZQBGcg4AAAUBAgA4ADYARpMOAAAFAQQAdAByAHUAZQBG7g4AAAUBBAB0AHIA
dQBlAAZBDwAABQEEAHQAcgB1AGUAA0ErAAAAjw8AACIAAABGRw4AAAUBBAB0AHIAdQBlAAbTDwAA
BQEEAHQAcgB1AGUAAwQEQa8EAAB7CAAAjgAAAEakCAAABQEsADEANgA4ADgAOQA1ADEAQwA0AEQA
QwAzAEYANwBDADMAQgBEADcAMwAxAEIARABFADAARQBEADYAMwA1ADcAMwBGADkAOQAzAEQANAAx
ADgALgBjAGUAcgAGHQkAAAUBEgBtAGEAaQBsAC4AcwBlAGMAdQByAGUAcwB1AGIALgBuAGUAdAAC
ATkAAABpCQAAAgEuAAAAiwkAAAIFARIAbQBhAGkAbAAuAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBl
AHQABARBdQAAAAsKAABsAAAARjYKAAAFAQUAZgBhAGwAcwBlAAZjCgAABQEoADUAMQBBADYAMAA4
ADUAQgBBADcAMAA1AEEAQQAyADcAMwBEADkAMQBGADAAOAAxAEMARABCADQAQwA4AEIAMQA1ADMA
MQBCAEYANABCADMAA0FaAAAA0woAAFEAAABGCgsAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMA
NQA0ADkALgAxAC4AMQAuADUARksLAAAFAQQAUwBIAEEAMQAGdgsAAAUBAwBSAFMAQQADQVoAAACu
CwAAUQAAAEYKCwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4AMQBG
dgsAAAUBAwBSAFMAQQAGJQwAAAUBBAAyADAANAA4AAMBaQAAAGMMAAACASgAAACLCQAAAgUBDwBz
AGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAADGCQAAAgUBCQBzAGUAYwB1AHIAZQBz
AHUAYgAEARAAAADGCQAAAgUBAwBuAGUAdAAEBAEyAAAA5wwAAAIFARQAMQA1AEEAMQAwADYARQAw
ADAAMAAwADAAMAAwADAAMAAwADAAMQBEAAQBMgAAAFgNAAACBQEUADIAMAAxADIALQAwADcALQAy
ADAAVAAxADgAOgA1ADkAOgA0ADUAWgAEATIAAACrDQAAAgUBFAAyADAAMQA0AC0AMAA3AC0AMgAw
AFQAMQA4ADoANQA5ADoANAA1AFoABAGJAQAA/A0AAAIBcgAAAFYZAAACQWcAAACKGQAAXgAAAEYK
CwAABQERADEALgAzAC4ANgAuADEALgA1AC4ANQAuADcALgAzAC4AMQAG3BkAAAUBFQBTAGUAcgB2
AGUAcgAgAEEAdQB0AGgAZQBuAHQAaQBjAGEAdABpAG8AbgADBEFJAAAAJA4AAEAAAABGRw4AAAUB
BAB0AHIAdQBlAEZyDgAABQECAEEAMABGkw4AAAUBBAB0AHIAdQBlAAYnGwAABQEEAHQAcgB1AGUA
AwFHAAAA9xsAAAIBPAAAAEBlAACcRgAAbZEJAEkAUABBAGQAZAByAGUAcwBzAAAAAgUBCwAxADkA
MgAuADEANgA4AC4AMAAuADQABAQBbQAAADYSAAACQWIAAAB2EgAAWQAAAAZjCgAABQEoADcANwAz
AEUARAA2ADgAMAA1ADEANgA2ADYANgA3ADAARgA2AEYAMgAzAEYAQgAyADUAMQA5AEYAQwAxAEIA
QQBDADIAMQA4AEMANABDAEIAAwQEBEH5GQAA0EIAAIgAAABGpAgAAAUBLABBADkARABBADQANwAy
ADkARQA4ADkAMgBDAEEAQwAwADkAMABBADMAOABGADUAMgBFADQARgBEADUANgBDADMANgA0AEQA
RABEADcANAAxAC4AYgBpAG4ABsoQAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEA
AkFJAAAASzMAAAsAAAAGcg4AAAUBAQAwAAIFARgATwBDAFMAUABfAFMAVQBDAEMARQBTAFMARgBV
AEwAXwBSAEUAUwBQAE8ATgBTAEUABAFQAAAA2mYAAB0JAAC3NQoAUAByAG8AZAB1AGMAZQBkAEEA
dAAAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMAA6ADMAMABaAAQBaQAAAGMM
AAACASgAAACLCQAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAADGCQAA
AgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAADGCQAAAgUBAwBuAGUAdAAEBAGJAAAAnWcAALZB
AABJxg8ARABlAGwAZQBnAGEAdABlAGQAUwBpAGcAbgBlAHIAAAACASAAAACLCQAAAgUBCwBvAGMA
cwBwAHMAaQBnAG4AaQBuAGcABAEcAAAAxgkAAAIFAQkAUwBlAGMAdQByAGUAcwB1AGIABAEQAAAA
xgkAAAIFAQMAbgBlAHQABAQBKQIAACtoAACKGQAAwZAIAFIAZQBzAHAAbwBuAHMAZQAAAAIBMgAA
AOcMAAACBQEUADEAMQAyAEIARgA0AEEAMAAwADAAMAAwADAAMAAwADAAMAAwADAAQQAEQXMAAACG
aAAAAAAAAFbWCgBDAGUAcgB0AFMAdABhAHQAdQBzAAAACwAAAAZyDgAABQEBADEAAgUBHgBPAEMA
UwBQAF8AQgBBAFMASQBDAF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAE
QecAAAD+aAAAR0IAAAyQCwBSAGUAdgBvAGsAZQBkAEkAbgBmAG8AAABXAAAABidpAACcQgAA7MgO
AHIAZQB2AG8AYwBhAHQAaQBvAG4ARABhAHQAZQAAAAUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQA
MQA3ADoANQAwADoAMAAwAFoAAkFhAAAAg2kAAL1IAACkzAYAUgBlAGEAcwBvAG4AAAALAAAABnIO
AAAFAQEAMQACBQEZAEMAUgBMAF8AUgBFAEEAUwBPAE4AXwBLAEUAWQBfAEMATwBNAFAAUgBPAE0A
SQBTAEUABAQBMgAAAIIRAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAzADAAOgAx
ADAAWgAEATIAAADXEQAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3ADoANQAwADoAMQAw
AFoABAQBjwEAACtoAAACATIAAADnDAAAAgUBFAAxADEANAAzADQAQgA2ADcAMAAwADAAMAAwADAA
MAAwADAAMAAwAEIABEFVAAAAhmgAAAsAAAAGcg4AAAUBAQAxAAIFAR4ATwBDAFMAUABfAEIAQQBT
AEkAQwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABEGFAAAA/mgAADEA
AAAGJ2kAAAUBFAAyADAAMQAyAC0AMAA3AC0AMQA5AFQAMgAyADoANAA5ADoAMAAwAFoAAkFFAAAA
g2kAAAsAAAAGcg4AAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUAQQBTAE8ATgBfAFUATgBTAFAARQBD
AEkARgBJAEUARAAEBAEyAAAAghEAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADMA
MAA6ADEAMABaAAQBMgAAANcRAAACBQEUADIAMAAxADIALQAwADcALQAyADgAVAAwADcAOgA1ADAA
OgAxADAAWgAEBAGPAQAAK2gAAAIBMgAAAOcMAAACBQEUADEAMQA0ADQAOABGAEUANgAwADAAMAAw
ADAAMAAwADAAMAAwADAAQwAEQVUAAACGaAAACwAAAAZyDgAABQEBADEAAgUBHgBPAEMAUwBQAF8A
QgBBAFMASQBDAF8AUgBFAFYATwBLAEUARABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAEQYUAAAD+
aAAAMQAAAAYnaQAABQEUADIAMAAxADIALQAwADcALQAxADkAVAAyADIAOgA1ADMAOgAwADAAWgAC
QUUAAACDaQAACwAAAAZyDgAABQEBADAAAgUBFgBDAFIATABfAFIARQBBAFMATwBOAF8AVQBOAFMA
UABFAEMASQBGAEkARQBEAAQEATIAAACCEQAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5
ADoAMwAwADoAMQAwAFoABAEyAAAA1xEAAAIFARQAMgAwADEAMgAtADAANwAtADIAOABUADAANwA6
ADUAMAA6ADEAMABaAAQEAY8BAAAraAAAAgEyAAAA5wwAAAIFARQAMQAxADYAQgBGADkAMQA0ADAA
MAAwADAAMAAwADAAMAAwADAAMQAwAARBVQAAAIZoAAALAAAABnIOAAAFAQEAMQACBQEeAE8AQwBT
AFAAXwBCAEEAUwBJAEMAXwBSAEUAVgBPAEsARQBEAF8AQwBFAFIAVABfAFMAVABBAFQAVQBTAARB
hQAAAP5oAAAxAAAABidpAAAFARQAMgAwADEAMgAtADAANwAtADEAOQBUADIAMwA6ADMANgA6ADAA
MABaAAJBRQAAAINpAAALAAAABnIOAAAFAQEAMAACBQEWAEMAUgBMAF8AUgBFAEEAUwBPAE4AXwBV
AE4AUwBQAEUAQwBJAEYASQBFAEQABAQBMgAAAIIRAAACBQEUADIAMAAxADIALQAwADcALQAyADAA
VAAxADkAOgAzADAAOgAxADAAWgAEATIAAADXEQAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQA
MAA3ADoANQAwADoAMQAwAFoABAQB/wAAACtoAAACATIAAADnDAAAAgUBFAAxADEAQgA4ADEAQgA3
ADQAMAAwADAAMAAwADAAMAAwADAAMAAxADIABEFPAAAAhmgAAAsAAAAGcg4AAAUBAQAwAAIFARsA
TwBDAFMAUABfAEIAQQBTAEkAQwBfAEcATwBPAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABAEy
AAAAghEAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADMAMAA6ADEAMABaAAQBMgAA
ANcRAAACBQEUADIAMAAxADIALQAwADcALQAyADgAVAAwADcAOgA1ADAAOgAxADAAWgAEBAGPAQAA
K2gAAAIBMgAAAOcMAAACBQEUADEANQAwAEIANAAyADIAOAAwADAAMAAwADAAMAAwADAAMAAwADEA
MwAEQVUAAACGaAAACwAAAAZyDgAABQEBADEAAgUBHgBPAEMAUwBQAF8AQgBBAFMASQBDAF8AUgBF
AFYATwBLAEUARABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAEQYUAAAD+aAAAMQAAAAYnaQAABQEU
ADIAMAAxADIALQAwADcALQAyADAAVAAxADYAOgAyADcAOgAwADAAWgACQUUAAACDaQAACwAAAAZy
DgAABQEBADAAAgUBFgBDAFIATABfAFIARQBBAFMATwBOAF8AVQBOAFMAUABFAEMASQBGAEkARQBE
AAQEATIAAACCEQAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMwAwADoAMQAwAFoA
BAEyAAAA1xEAAAIFARQAMgAwADEAMgAtADAANwAtADIAOABUADAANwA6ADUAMAA6ADEAMABaAAQE
AY8BAAAraAAAAgEyAAAA5wwAAAIFARQAMQA1ADAAQwBFADMANwA1ADAAMAAwADAAMAAwADAAMAAw
ADAAMQA0AARBVQAAAIZoAAALAAAABnIOAAAFAQEAMQACBQEeAE8AQwBTAFAAXwBCAEEAUwBJAEMA
XwBSAEUAVgBPAEsARQBEAF8AQwBFAFIAVABfAFMAVABBAFQAVQBTAARBhQAAAP5oAAAxAAAABidp
AAAFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADEAMQA6ADAAMABaAAJBRQAAAINpAAAL
AAAABnIOAAAFAQEAMAACBQEWAEMAUgBMAF8AUgBFAEEAUwBPAE4AXwBVAE4AUwBQAEUAQwBJAEYA
SQBFAEQABAQBMgAAAIIRAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAzADAAOgAx
ADAAWgAEATIAAADXEQAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3ADoANQAwADoAMQAw
AFoABAQBjwEAACtoAAACATIAAADnDAAAAgUBFAAxADUANgA5ADQANABGADcAMAAwADAAMAAwADAA
MAAwADAAMAAxADUABEFVAAAAhmgAAAsAAAAGcg4AAAUBAQAxAAIFAR4ATwBDAFMAUABfAEIAQQBT
AEkAQwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABEGFAAAA/mgAADEA
AAAGJ2kAAAUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMQAxADoAMAAwAFoAAkFFAAAA
g2kAAAsAAAAGcg4AAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUAQQBTAE8ATgBfAFUATgBTAFAARQBD
AEkARgBJAEUARAAEBAEyAAAAghEAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADMA
MAA6ADEAMABaAAQBMgAAANcRAAACBQEUADIAMAAxADIALQAwADcALQAyADgAVAAwADcAOgA1ADAA
OgAxADAAWgAEBAH/AAAAK2gAAAIBMgAAAOcMAAACBQEUADEANQBBADEAMAA2AEUAMAAwADAAMAAw
ADAAMAAwADAAMAAwADEARAAEQU8AAACGaAAACwAAAAZyDgAABQEBADAAAgUBGwBPAEMAUwBQAF8A
QgBBAFMASQBDAF8ARwBPAE8ARABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAEATIAAACCEQAAAgUB
FAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMwAwADoAMQAwAFoABAEyAAAA1xEAAAIFARQA
MgAwADEAMgAtADAANwAtADIAOABUADAANwA6ADUAMAA6ADEAMABaAAQEAY8BAAAraAAAAgEyAAAA
5wwAAAIFARQAMQA1AEEAMgBDAEYARAA5ADAAMAAwADAAMAAwADAAMAAwADAAMQBFAARBVQAAAIZo
AAALAAAABnIOAAAFAQEAMQACBQEeAE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBSAEUAVgBPAEsARQBE
AF8AQwBFAFIAVABfAFMAVABBAFQAVQBTAARBhQAAAP5oAAAxAAAABidpAAAFARQAMgAwADEAMgAt
ADAANwAtADIAMABUADEAOQA6ADQAMAA6ADAAMABaAAJBRQAAAINpAAALAAAABnIOAAAFAQEAMAAC
BQEWAEMAUgBMAF8AUgBFAEEAUwBPAE4AXwBVAE4AUwBQAEUAQwBJAEYASQBFAEQABAQBMgAAAIIR
AAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAzADAAOgAxADAAWgAEATIAAADXEQAA
AgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3ADoANQAwADoAMQAwAFoABAQBpQEAACtoAAAC
ATIAAADnDAAAAgUBFAA2ADEAMQAxAEYAOABGAEUAMAAwADAAMAAwADAAMAAwADAAMAAwADMABEFV
AAAAhmgAAAsAAAAGcg4AAAUBAQAxAAIFAR4ATwBDAFMAUABfAEIAQQBTAEkAQwBfAFIARQBWAE8A
SwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABEGbAAAA/mgAADEAAAAGJ2kAAAUBFAAyADAA
MQAyAC0AMAA3AC0AMQA5AFQAMgAyADoAMQA3ADoAMAAwAFoAAkFbAAAAg2kAAAsAAAAGcg4AAAUB
AQA1AAIFASEAQwBSAEwAXwBSAEUAQQBTAE8ATgBfAEMARQBTAFMAQQBUAEkATwBOAF8ATwBGAF8A
TwBQAEUAUgBBAFQASQBPAE4ABAQBMgAAAIIRAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAx
ADkAOgAzADAAOgAxADAAWgAEATIAAADXEQAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3
ADoANQAwADoAMQAwAFoABAQBjwEAACtoAAACATIAAADnDAAAAgUBFAA2ADEAQgBCAEQAMgBGAEIA
MAAwADAAMAAwADAAMAAwADAAMAAwADYABEFVAAAAhmgAAAsAAAAGcg4AAAUBAQAxAAIFAR4ATwBD
AFMAUABfAEIAQQBTAEkAQwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMA
BEGFAAAA/mgAADEAAAAGJ2kAAAUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMgA5ADoA
MQA0AFoAAkFFAAAAg2kAAAsAAAAGcg4AAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUAQQBTAE8ATgBf
AFUATgBTAFAARQBDAEkARgBJAEUARAAEBAEyAAAAghEAAAIFARQAMgAwADEAMgAtADAANwAtADIA
MABUADEAOQA6ADMAMAA6ADEAMABaAAQBMgAAANcRAAACBQEUADIAMAAxADIALQAwADcALQAyADgA
VAAwADcAOgA1ADAAOgAxADAAWgAEBAH/AAAAK2gAAAIBMgAAAOcMAAACBQEUADYAMQBDADEARQA5
ADYAOAAwADAAMAAwADAAMAAwADAAMAAwADAANwAEQU8AAACGaAAACwAAAAZyDgAABQEBADAAAgUB
GwBPAEMAUwBQAF8AQgBBAFMASQBDAF8ARwBPAE8ARABfAEMARQBSAFQAXwBTAFQAQQBUAFUAUwAE
ATIAAACCEQAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMwAwADoAMQAwAFoABAEy
AAAA1xEAAAIFARQAMgAwADEAMgAtADAANwAtADIAOABUADAANwA6ADUAMAA6ADEAMABaAAQEAY8B
AAAraAAAAgEyAAAA5wwAAAIFARQANgAxAEMANQBFADcAOAA0ADAAMAAwADAAMAAwADAAMAAwADAA
MAA4AARBVQAAAIZoAAALAAAABnIOAAAFAQEAMQACBQEeAE8AQwBTAFAAXwBCAEEAUwBJAEMAXwBS
AEUAVgBPAEsARQBEAF8AQwBFAFIAVABfAFMAVABBAFQAVQBTAARBhQAAAP5oAAAxAAAABidpAAAF
ARQAMgAwADEAMgAtADAANwAtADEAOQBUADIAMQA6ADAAMwA6ADAAMABaAAJBRQAAAINpAAALAAAA
BnIOAAAFAQEAMAACBQEWAEMAUgBMAF8AUgBFAEEAUwBPAE4AXwBVAE4AUwBQAEUAQwBJAEYASQBF
AEQABAQBMgAAAIIRAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAzADAAOgAxADAA
WgAEATIAAADXEQAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgA4AFQAMAA3ADoANQAwADoAMQAwAFoA
BAQBjwEAACtoAAACATIAAADnDAAAAgUBFAA2ADEARABEADYAQQBFADYAMAAwADAAMAAwADAAMAAw
ADAAMAAwADkABEFVAAAAhmgAAAsAAAAGcg4AAAUBAQAxAAIFAR4ATwBDAFMAUABfAEIAQQBTAEkA
QwBfAFIARQBWAE8ASwBFAEQAXwBDAEUAUgBUAF8AUwBUAEEAVABVAFMABEGFAAAA/mgAADEAAAAG
J2kAAAUBFAAyADAAMQAyAC0AMAA3AC0AMQA5AFQAMgAxADoAMAAzADoAMAAwAFoAAkFFAAAAg2kA
AAsAAAAGcg4AAAUBAQAwAAIFARYAQwBSAEwAXwBSAEUAQQBTAE8ATgBfAFUATgBTAFAARQBDAEkA
RgBJAEUARAAEBAEyAAAAghEAAAIFARQAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADMAMAA6
ADEAMABaAAQBMgAAANcRAAACBQEUADIAMAAxADIALQAwADcALQAyADgAVAAwADcAOgA1ADAAOgAx
ADAAWgAEBAEXAQAAK2gAAAIBSgAAAOcMAAACBQEgADcAMgA0ADMARAA2ADYARABCAEYARgBBADkA
QgA5ADIANAAxAEEARAA3ADQARQA5ADgAQwA3ADYAQgBEADcAQgAEQU8AAACGaAAACwAAAAZyDgAA
BQEBADAAAgUBGwBPAEMAUwBQAF8AQgBBAFMASQBDAF8ARwBPAE8ARABfAEMARQBSAFQAXwBTAFQA
QQBUAFUAUwAEATIAAACCEQAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5ADoAMwAwADoA
MQAwAFoABAEyAAAA1xEAAAIFARQAMgAwADEAMgAtADAANwAtADIAOABUADAANwA6ADUAMAA6ADEA
MABaAAQEBEEqAAAAbRwAACEAAAAGmBwAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgAZQADQWkA
AADYHAAAYAAAAEYPHQAABQEmAHsARAA2ADkARQA3ADUAMwBBAC0AQgAyAEIAMQAtADQANAAxAEUA
LQBBADQANwA3AC0AQQAyAEYANAA0ADEAOAAwAEIAQQBGAEIAfQAGeh0AAAUBAQA5AAMEAAAGMCQA
ACoqAADgBgAALQAAAAAAAAAJ05r+r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIA
BgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAANBiEABAJQAFEAQAAAAAAAAEC0D5r+r2bNAQwAzABw4VkDMBRgGz+bDwUwFAAAGAsAAMU+
CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABBwYAAGaBAAAAAAAAI3AOAFcAaQBu
AFYAZQByAGkAZgB5AFQAcgB1AHMAdAAAAAIBcAAAAJaBAAAORwAA0aMIAEEAYwB0AGkAbwBuAEkA
RAAAAAIFASYAewA1ADcAMwBFADMAMQBGADgALQBBAEEAQgBBAC0AMQAxAEQAMAAtADgAQwBDAEIA
LQAwADAAQwAwADQARgBDADIAOQA1AEUARQB9AARBSQAAAAuCAAD+TwAAlQoIAFUASQBDAGgAbwBp
AGMAZQAAAAsAAAAGcg4AAAUBAQAyAAIFAQsAVwBUAEQAXwBVAEkAXwBOAE8ATgBFAARBgQAAAFmC
AADAIgAAik8PAFIAZQB2AG8AYwBhAHQAaQBvAG4AQwBoAGUAYwBrAAAAUAAAAEZyDgAABQEBADEA
BpWCAACLCQAAy1IVAFcAVABEAF8AUgBFAFYATwBLAEUAXwBXAEgATwBMAEUAQwBIAEEASQBOAAAA
BQEEAHQAcgB1AGUAA0FlAAAA34IAAL44AADHwwsAUwB0AGEAdABlAEEAYwB0AGkAbwBuAAAACwAA
AAZyDgAABQEBADEAAgUBFgBXAFQARABfAFMAVABBAFQARQBBAEMAVABJAE8ATgBfAFYARQBSAEkA
RgBZAARBaQAAAEogAABgAAAARnIOAAAFAQgAOAAwADAAMAAwADAAMAAwAAZrgwAAIB8AAFr9FgBD
AFAARABfAFUAUwBFAF8ATgBUADUAXwBDAEgAQQBJAE4AXwBGAEwAQQBHAAAABQEEAHQAcgB1AGUA
A0F+AAAAt4MAAK08AAAlBQ8AQwBlAHIAdABpAGYAaQBjAGEAdABlAEkAbgBmAG8AAABNAAAABuiD
AAA2CgAATQQLAGQAaQBzAHAAbABhAHkATgBhAG0AZQAAAAUBEgBtAGEAaQBsAC4AcwBlAGMAdQBy
AGUAcwB1AGIALgBuAGUAdAADQXcAAAA6hAAAnScAABIpCgBEAGkAZwBlAHMAdABJAG4AZgBvAAAA
UAAAAEZhhAAAlYIAAMslDwBkAGkAZwBlAHMAdABBAGwAZwBvAHIAaQB0AGgAbQAAAAUBAAAGkoQA
AJxIAACEKwYAZABpAGcAZQBzAHQAAAAFAQAAA0GbAQAAtoQAAFmCAACKqRAAUgBlAGcAUABvAGwA
aQBjAHkAUwBlAHQAdABpAG4AZwAAAGgBAABGcg4AAAUBBQAyADMAQwAwADAARvyEAAAAAAAAs2kS
AFcAVABQAEYAXwBPAEYARgBMAEkATgBFAE8ASwBfAEkATgBEAAAABQEEAHQAcgB1AGUARjuFAAAR
MwAA9QwSAFcAVABQAEYAXwBPAEYARgBMAEkATgBFAE8ASwBfAEMATwBNAAAABQEEAHQAcgB1AGUA
RnqFAABjCgAArukVAFcAVABQAEYAXwBPAEYARgBMAEkATgBFAE8ASwBOAEIAVQBfAEkATgBEAAAA
BQEEAHQAcgB1AGUARr+FAAA/SAAA8IwVAFcAVABQAEYAXwBPAEYARgBMAEkATgBFAE8ASwBOAEIA
VQBfAEMATwBNAAAABQEEAHQAcgB1AGUABgSGAAAxMQAAOv0ZAFcAVABQAEYAXwBJAEcATgBPAFIA
RQBSAEUAVgBPAEMAQQBUAEkATwBOAE8ATgBUAFMAAAAFAQQAdAByAHUAZQADQV4AAADCIQAAVQAA
AAb1IQAABQEmAHsAOABCADUAMwAyADEARgBCAC0AMQAyADIAMAAtADQARgA3ADcALQBCADcARAA1
AC0ARgA1ADgAOAA3ADAAMgA2ADEAMQA1ADMAfQADQSoAAABtHAAAIQAAAAaYHAAABQEMAGkAZQB4
AHAAbABvAHIAZQAuAGUAeABlAANBawAAANgcAABiAAAARg8dAAAFASYAewBEADYAOQBFADcANQAz
AEEALQBCADIAQgAxAC0ANAA0ADEARQAtAEEANAA3ADcALQBBADIARgA0ADQAMQA4ADAAQgBBAEYA
QgB9AAZ6HQAABQECADEAMAADQRQAAADULwAACwAAAAZyDgAABQEBADAAAwQAADjgBgAAKioAAIAB
AAAuAAAAAAAAAAnTmv6vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAI
ABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKkA
IQAEAQsACgADAAAAAAAAQAnTmv6vZs0BDADMAHDhWQMwFGAbP5sPBTAUAAAYCwAAxj4KAAAAAAAA
AQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAGjAAAA/jYAAAJBKgAAAG0cAAAhAAAABpgcAAAF
AQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAA2BwAAGAAAABGDx0AAAUBJgB7AEMARAA2
ADcARAAzADMAMAAtADYANwA1AEYALQA0ADAAQQAzAC0AOABDADEAMAAtADEANAA3AEEANgA1AEUA
NgBGADQAMQBFAH0ABnodAAAFAQEAMQADBAAAQQAEARyAAQAAKioAAIABAAAvAAAAAAAAAAnTmv6v
Zs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgA
BAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKkAIQAEASkAKAAFAAAAAAAA
QAnTmv6vZs0BDADMAHDhWQMwFGAbP5sPBTAUAAAYCwAAxz4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe
61T0+YS58oy8fAQAAAGjAAAAvjgAAAJBKgAAAG0cAAAhAAAABpgcAAAFAQwAaQBlAHgAcABsAG8A
cgBlAC4AZQB4AGUAA0FpAAAA2BwAAGAAAABGDx0AAAUBJgB7AEMARAA2ADcARAAzADMAMAAtADYA
NwA1AEYALQA0ADAAQQAzAC0AOABDADEAMAAtADEANAA3AEEANgA1AEUANgBGADQAMQBFAH0ABnod
AAAFAQEAMgADBAAAPQAABQGAAQAAKioAANgEAAAwAAAAAAAAABr6mv6vZs0BDwEBAAwBZo+vqyYC
AAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgABAAQAHAAT
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8DIQACAikAKQAFAAAAAAAAQAnTmv6vZs0BDADMAHDh
WQMwFGAbP5sPBTAUAAAYCwAAyD4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8fAQAAAH5
AwAA7kQAAAJBewAAAHsIAAByAAAARqQIAAAFASwAQgA5AEMAMgA2ADMAQgBDADkARAA5ADYAOQA5
ADAANgAzAEYAQQAzAEMARgAzAEMARQAzAEEARgBGAEQAOQAwAEYANAA0ADgAMAA2AEMAOAAuAGMA
ZQByAAYdCQAABQEEAGQAYQBuAG8AA0GRAAAAxkUAAIgAAABGpAgAAAUBLAAxADcANgAxAEYAMgA2
AEUAQgAwADgAMgA0ADcAMABGADQANABCADIANwA4AEUAQgA2ADIARgBEADgAMwAxADkARgAzAEQA
RQAyADAAMQA4AC4AYwBlAHIABh0JAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEA
A0F9AAAASiAAAHQAAABGcg4AAAUBAQAyAAZ6jAAAC4IAABXAJwBDAEUAUgBUAF8AVgBFAFIASQBG
AFkAXwBDAEEAQwBIAEUAXwBPAE4ATABZAF8AQgBBAFMARQBEAF8AUgBFAFYATwBDAEEAVABJAE8A
TgAAAAUBBAB0AHIAdQBlAANBjgAAAA5HAACFAAAARklHAAAFARgAMgAwADEAMgAtADAANwAtADIA
MABUADEAOQA6ADQAMwA6ADUANAAuADAANAA1AFoARp5HAAAFARgAMgAwADEAMgAtADAANwAtADIA
MABUADEAOQA6ADQAMwA6ADUANAAuADAANAA1AFoABvdHAAAFAQUAUABUADEANQBTAANBOAAAAD9I
AAAvAAAARnJIAAAFAQEAMABGPkEAAAUBCAA4ADAAMAA5ADIAMAAxADMABpxIAAAFAQEAMAADQSoA
AABtHAAAIQAAAAaYHAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAANgcAABgAAAA
Rg8dAAAFASYAewBDAEQANgA3AEQAMwAzADAALQA2ADcANQBGAC0ANAAwAEEAMwAtADgAQwAxADAA
LQAxADQANwBBADYANQBFADYARgA0ADEARQB9AAZ6HQAABQEBADMAA0HpAAAA1C8AABkAAAAGcg4A
AAUBCAA4ADAAMAA5ADIAMAAxADMAAgUBYQBUAGgAZQAgAHIAZQB2AG8AYwBhAHQAaQBvAG4AIABm
AHUAbgBjAHQAaQBvAG4AIAB3AGEAcwAgAHUAbgBhAGIAbABlACAAdABvACAAYwBoAGUAYwBrACAA
cgBlAHYAbwBjAGEAdABpAG8AbgAgAGIAZQBjAGEAdQBzAGUAIAB0AGgAZQAgAHIAZQB2AG8AYwBh
AHQAaQBvAG4AIABzAGUAcgB2AGUAcgAgAHcAYQBzACAAbwBmAGYAbABpAG4AZQAuAAQEAAAyAEMA
QQBD2AQAACoqAABwDQAAMQAAAAAAAAAa+pr+r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQA
AgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAACXDCEABABaAFoAAAIAAAAAAEAa+pr+r2bNAQwAzABw4VkDMBRgGz+bDwUwFAAA
GAsAAMk+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABkQwAAFEIAAACQf0DAAB7
CAAAiAAAAEakCAAABQEsADEANwA2ADEARgAyADYARQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3
ADgARQBCADYAMgBGAEQAOAAzADEAOQBGADMARABFADIAMAAxADgALgBjAGUAcgAGHQkAAAUBDwBz
AGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQACAWkAAABpCQAAAgEoAAAAiwkAAAIFAQ8AcwBl
AGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAAxgkAAAIFAQkAcwBlAGMAdQByAGUAcwB1
AGIABAEQAAAAxgkAAAIFAQMAbgBlAHQABARBdQAAAAsKAABsAAAARjYKAAAFAQUAZgBhAGwAcwBl
AAZjCgAABQEoADcANwAzAEUARAA2ADgAMAA1ADEANgA2ADYANgA3ADAARgA2AEYAMgAzAEYAQgAy
ADUAMQA5AEYAQwAxAEIAQQBDADIAMQA4AEMANABDAEIAA0FaAAAA0woAAFEAAABGCgsAAAUBFAAx
AC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADUARksLAAAFAQQAUwBIAEEAMQAG
dgsAAAUBAwBSAFMAQQADQVoAAACuCwAAUQAAAEYKCwAABQEUADEALgAyAC4AOAA0ADAALgAxADEA
MwA1ADQAOQAuADEALgAxAC4AMQBGdgsAAAUBAwBSAFMAQQAGJQwAAAUBBAAyADAANAA4AAMBaQAA
AGMMAAACASgAAACLCQAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAADG
CQAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAADGCQAAAgUBAwBuAGUAdAAEBAFKAAAA5wwA
AAIFASAANwAyADQAMwBEADYANgBEAEIARgBGAEEAOQBCADkAMgA0ADEAQQBEADcANABFADkAOABD
ADcANgBCAEQANwBCAAQBMgAAAFgNAAACBQEUADIAMAAxADIALQAwADcALQAxADkAVAAxADYAOgA1
ADUAOgAzADcAWgAEATIAAACrDQAAAgUBFAAyADAAMQA3AC0AMAA3AC0AMQA5AFQAMQA3ADoAMAA1
ADoAMwA1AFoABAGVAAAA/A0AAAJBWgAAACQOAABRAAAARkcOAAAFAQQAdAByAHUAZQBGcg4AAAUB
AgA4ADYARpMOAAAFAQQAdAByAHUAZQBG7g4AAAUBBAB0AHIAdQBlAAZBDwAABQEEAHQAcgB1AGUA
A0ErAAAAjw8AACIAAABGRw4AAAUBBAB0AHIAdQBlAAbTDwAABQEEAHQAcgB1AGUAAwQEQecHAAB7
CAAAcgAAAEakCAAABQEsAEIAOQBDADIANgAzAEIAQwA5AEQAOQA2ADkAOQAwADYAMwBGAEEAMwBD
AEYAMwBDAEUAMwBBAEYARgBEADkAMABGADQANAA4ADAANgBDADgALgBjAGUAcgAGHQkAAAUBBABk
AGEAbgBvAAIBbAAAAGkJAAACARIAAACLCQAAAgUBBABkAGEAbgBvAAQBFAAAAIsJAAACBQEFAFUA
cwBlAHIAcwAEARwAAADGCQAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAADGCQAAAgUBAwBu
AGUAdAAEBEF1AAAACwoAAGwAAABGNgoAAAUBBQBmAGEAbABzAGUABmMKAAAFASgANABDADMARgA2
ADAAMAA3ADEAMQA0AEUAMgAxADMANQAxAEUARgA3AEYAMwAyADYANQBCAEMARAAxADMAQQBFADgA
QgA0ADQAOQBDAEQAQQADQVoAAADTCgAAUQAAAEYKCwAABQEUADEALgAyAC4AOAA0ADAALgAxADEA
MwA1ADQAOQAuADEALgAxAC4ANQBGSwsAAAUBBABTAEgAQQAxAAZ2CwAABQEDAFIAUwBBAANBWgAA
AK4LAABRAAAARgoLAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAx
AEZ2CwAABQEDAFIAUwBBAAYlDAAABQEEADIAMAA0ADgAAwFpAAAAYwwAAAIBKAAAAIsJAAACBQEP
AHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAQBHAAAAMYJAAACBQEJAHMAZQBjAHUAcgBl
AHMAdQBiAAQBEAAAAMYJAAACBQEDAG4AZQB0AAQEATIAAADnDAAAAgUBFAAxADUAQQAyAEMARgBE
ADkAMAAwADAAMAAwADAAMAAwADAAMAAxAEUABAEyAAAAWA0AAAIFARQAMgAwADEAMgAtADAANwAt
ADIAMABUADEAOQA6ADAAMQA6ADQAMgBaAAQBMgAAAKsNAAACBQEUADIAMAAxADMALQAwADcALQAy
ADAAVAAxADkAOgAwADEAOgA0ADIAWgAEAU0CAAD8DQAAAgFEAQAAVhkAAAJBcwAAAIoZAABqAAAA
RgoLAAAFARYAMQAuADMALgA2AC4AMQAuADQALgAxAC4AMwAxADEALgAxADAALgAzAC4ANAAG3BkA
AAUBFgBFAG4AYwByAHkAcAB0AGkAbgBnACAARgBpAGwAZQAgAFMAeQBzAHQAZQBtAANBVQAAAIoZ
AABMAAAARgoLAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgA0AAbcGQAABQEM
AFMAZQBjAHUAcgBlACAARQBtAGEAaQBsAANBZwAAAIoZAABeAAAARgoLAAAFAREAMQAuADMALgA2
AC4AMQAuADUALgA1AC4ANwAuADMALgAyAAbcGQAABQEVAEMAbABpAGUAbgB0ACAAQQB1AHQAaABl
AG4AdABpAGMAYQB0AGkAbwBuAAMEQUkAAAAkDgAAQAAAAEZHDgAABQEEAHQAcgB1AGUARnIOAAAF
AQIAQQAwAEaTDgAABQEEAHQAcgB1AGUABicbAAAFAQQAdAByAHUAZQADAW0AAAA2EgAAAkFiAAAA
dhIAAFkAAAAGYwoAAAUBKAA3ADcAMwBFAEQANgA4ADAANQAxADYANgA2ADYANwAwAEYANgBGADIA
MwBGAEIAMgA1ADEAOQBGAEMAMQBCAEEAQwAyADEAOABDADQAQwBCAAMEATkAAAD3GwAAAgEuAAAA
JxwAAAIFARIAZABhAG4AbwBAAHMAZQBjAHUAcgBlAHMAdQBiAC4AbgBlAHQABAQEAVgCAAC4mQAA
/IQAAHNyCgBQAHIAbwBwAGUAcgB0AGkAZQBzAAAAAkEvAgAA4JkAAMZFAAB+Ww8ASwBlAHkAUABy
AG8AdgBpAGQAZQByAEkAbgBmAG8AAAD+AQAARjExAAAFAQ0AUABSAE8AVgBfAFIAUwBBAF8ARgBV
AEwATABGNJoAADpAAADeiQwAdAB5AHAAZQBDAG8AbgBzAHQAYQBuAHQAAAAFAQEAMQBGYZoAAPdH
AAAc2AwAcAByAG8AdgBpAGQAZQByAE4AYQBtAGUAAAAFAS4ATQBpAGMAcgBvAHMAbwBmAHQAIABF
AG4AaABhAG4AYwBlAGQAIABDAHIAeQBwAHQAbwBnAHIAYQBwAGgAaQBjACAAUAByAG8AdgBpAGQA
ZQByACAAdgAxAC4AMABG6JoAAGuDAADahAcAawBlAHkAUwBwAGUAYwAAAAUBDgBBAFQAXwBLAEUA
WQBFAFgAQwBIAEEATgBHAEUARiWbAADgmQAAPkgPAGsAZQB5AFMAcABlAGMAQwBvAG4AcwB0AGEA
bgB0AAAABQEBADEABlibAAAnaQAA7MwNAGMAbwBuAHQAYQBpAG4AZQByAE4AYQBtAGUAAAAFAUUA
ZABlADQANgAxAGIANwA0AGYAOQAxAGEAMAA2ADcAZgAzADcAYQBhAGMAOAAxADIAYQAzADgAOAA5
AGIAMgBmAF8AMAAzADAAOQAzADIANgBjAC0AMQBiADYAOAAtADQAOAA1AGEALQBiAGMAOQBjAC0A
YgAzAGUANABjAGMANQBjADkAYwAzADQAAwQEQSoAAABtHAAAIQAAAAaYHAAABQEMAGkAZQB4AHAA
bABvAHIAZQAuAGUAeABlAANBaQAAANgcAABgAAAARg8dAAAFASYAewBDAEQANgA3AEQAMwAzADAA
LQA2ADcANQBGAC0ANAAwAEEAMwAtADgAQwAxADAALQAxADQANwBBADYANQBFADYARgA0ADEARQB9
AAZ6HQAABQEBADQAAwQAAEcAAAIFARRwDQAAKioAAGgLAAAyAAAAAAAAAAAAAAAAAAAADwEBAAwB
Zo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARABAADwAEAAgABAAIAAgACgAB
AAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJYKIQACAgsACwADAAAAAAAAQBr6mv6vZs0B
DADMAHDhWQMwFGAbP5sPBTAUAAAYCwAAyj4KAAAAAAAAAQUAAAAAAAUVAAAAoiLe61T0+YS58oy8
fAQAAAGQCgAAXh4AAAJBewAAAHsIAAByAAAARqQIAAAFASwAQgA5AEMAMgA2ADMAQgBDADkARAA5
ADYAOQA5ADAANgAzAEYAQQAzAEMARgAzAEMARQAzAEEARgBGAEQAOQAwAEYANAA0ADgAMAA2AEMA
OAAuAGMAZQByAAYdCQAABQEEAGQAYQBuAG8AAwEFAAAAVhkAAANBmgAAAEogAACRAAAARnIOAAAF
AQgAQwAwADAAMAAwADAAMAAwAEbhIAAABQEEAHQAcgB1AGUABlWeAAB6HQAACBkmAEMARQBSAFQA
XwBDAEgAQQBJAE4AXwBSAEUAVgBPAEMAQQBUAEkATwBOAF8AQwBIAEUAQwBLAF8AQwBBAEMASABF
AF8ATwBOAEwAWQAAAAUBBAB0AHIAdQBlAANBGgAAAF0hAAARAAAABo4hAAAFAQQAdQBzAGUAcgAD
QbIHAADCIQAAVQAAAAb1IQAABQEmAHsANgA3AEUAMgAwAEUAQQBFAC0ANQA2AEEANwAtADQARgBF
ADUALQA5ADUARQA4AC0ARAA1AEMANQBEADUAQwBCAEIARAA4ADQAfQACARcBAADAIgAAAkHeAAAA
6iIAANUAAABGcg4AAAUBBwAxADAAMAAwADAANAAwAEZtnwAAYZoAAFw0JABDAEUAUgBUAF8AVABS
AFUAUwBUAF8AUgBFAFYATwBDAEEAVABJAE8ATgBfAFMAVABBAFQAVQBTAF8AVQBOAEsATgBPAFcA
TgAAAAUBBAB0AHIAdQBlAAbQnwAAQGUAAO2UIABDAEUAUgBUAF8AVABSAFUAUwBUAF8ASQBTAF8A
TwBGAEYATABJAE4ARQBfAFIARQBWAE8AQwBBAFQASQBPAE4AAAAFAQQAdAByAHUAZQADQSkAAAAj
IwAAIAAAAEZyDgAABQEDADEAMAAwAAZZIwAABQEEAHQAcgB1AGUAAwQBIQQAALgjAAACQXsAAAB7
CAAAcgAAAEakCAAABQEsAEIAOQBDADIANgAzAEIAQwA5AEQAOQA2ADkAOQAwADYAMwBGAEEAMwBD
AEYAMwBDAEUAMwBBAEYARgBEADkAMABGADQANAA4ADAANgBDADgALgBjAGUAcgAGHQkAAAUBBABk
AGEAbgBvAANBWgAAANMKAABRAAAARgoLAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5
AC4AMQAuADEALgA1AEZLCwAABQEEAFMASABBADEABnYLAAAFAQMAUgBTAEEAA0FaAAAArgsAAFEA
AABGCgsAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARnYLAAAF
AQMAUgBTAEEABiUMAAAFAQQAMgAwADQAOAADAYwAAADAIgAAAkFCAAAA6iIAADkAAABGcg4AAAUB
BwAxADAAMAAwADAANAAwAEZtnwAABQEEAHQAcgB1AGUABtCfAAAFAQQAdAByAHUAZQADQToAAAAj
IwAAMQAAAEZyDgAABQEDADEAMAAyAEZdJQAABQEEAHQAcgB1AGUABlkjAAAFAQQAdAByAHUAZQAD
BAFEAQAAzSUAAAJBcwAAAIoZAABqAAAARgoLAAAFARYAMQAuADMALgA2AC4AMQAuADQALgAxAC4A
MwAxADEALgAxADAALgAzAC4ANAAG3BkAAAUBFgBFAG4AYwByAHkAcAB0AGkAbgBnACAARgBpAGwA
ZQAgAFMAeQBzAHQAZQBtAANBVQAAAIoZAABMAAAARgoLAAAFAREAMQAuADMALgA2AC4AMQAuADUA
LgA1AC4ANwAuADMALgA0AAbcGQAABQEMAFMAZQBjAHUAcgBlACAARQBtAGEAaQBsAANBZwAAAIoZ
AABeAAAARgoLAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgAyAAbcGQAABQEV
AEMAbABpAGUAbgB0ACAAQQB1AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuAAMEAQUAAABAJwAAAwH0
AAAAbicAAAJB6QAAAOUnAAAZAAAABnIOAAAFAQgAOAAwADAAOQAyADAAMQAzAAIFAWEAVABoAGUA
IAByAGUAdgBvAGMAYQB0AGkAbwBuACAAZgB1AG4AYwB0AGkAbwBuACAAdwBhAHMAIAB1AG4AYQBi
AGwAZQAgAHQAbwAgAGMAaABlAGMAawAgAHIAZQB2AG8AYwBhAHQAaQBvAG4AIABiAGUAYwBhAHUA
cwBlACAAdABoAGUAIAByAGUAdgBvAGMAYQB0AGkAbwBuACAAcwBlAHIAdgBlAHIAIAB3AGEAcwAg
AG8AZgBmAGwAaQBuAGUALgAEBAQBDAIAALgjAAACQZEAAAB7CAAAiAAAAEakCAAABQEsADEANwA2
ADEARgAyADYARQBCADAAOAAyADQANwAwAEYANAA0AEIAMgA3ADgARQBCADYAMgBGAEQAOAAzADEA
OQBGADMARABFADIAMAAxADgALgBjAGUAcgAGHQkAAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQA
QwAtAEMAQQADQVoAAADTCgAAUQAAAEYKCwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQA
OQAuADEALgAxAC4ANQBGSwsAAAUBBABTAEgAQQAxAAZ2CwAABQEDAFIAUwBBAANBWgAAAK4LAABR
AAAARgoLAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEZ2CwAA
BQEDAFIAUwBBAAYlDAAABQEEADIAMAA0ADgAAwFvAAAAwCIAAAJBFAAAAOoiAAALAAAABnIOAAAF
AQEAMAADQUsAAAAjIwAAQgAAAEZyDgAABQEDADEAMABDAEYuLgAABQEEAHQAcgB1AGUARokuAAAF
AQQAdAByAHUAZQAGWSMAAAUBBAB0AHIAdQBlAAMEQRoAAADNJQAAEQAAAAb2LgAABQEEAHQAcgB1
AGUAA0EaAAAAQCcAABEAAAAG9i4AAAUBBAB0AHIAdQBlAAMEBEEqAAAAbRwAACEAAAAGmBwAAAUB
DABpAGUAeABwAGwAbwByAGUALgBlAHgAZQADQWkAAADYHAAAYAAAAEYPHQAABQEmAHsAQwBEADYA
NwBEADMAMwAwAC0ANgA3ADUARgAtADQAMABBADMALQA4AEMAMQAwAC0AMQA0ADcAQQA2ADUARQA2
AEYANAAxAEUAfQAGeh0AAAUBAQA1AANB6QAAANQvAAAZAAAABnIOAAAFAQgAOAAwADAAOQAyADAA
MQAzAAIFAWEAVABoAGUAIAByAGUAdgBvAGMAYQB0AGkAbwBuACAAZgB1AG4AYwB0AGkAbwBuACAA
dwBhAHMAIAB1AG4AYQBiAGwAZQAgAHQAbwAgAGMAaABlAGMAawAgAHIAZQB2AG8AYwBhAHQAaQBv
AG4AIABiAGUAYwBhAHUAcwBlACAAdABoAGUAIAByAGUAdgBvAGMAYQB0AGkAbwBuACAAcwBlAHIA
dgBlAHIAIAB3AGEAcwAgAG8AZgBmAGwAaQBuAGUALgAEBAAAaAsAADAANwA6ADUAMAA6ADEAMABa
AAQEBEEqAAAAmwgAACEAAAAGxggAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgAZQADQWkAAAAM
CQAAYAAAAEZDCQAABQEmAHsAMABBAEQAQwA4AEMAOQA3AC0ANgBGAEUAMwAtADQAMwA2AEYALQBB
ADYAMgA5AC0ANAA0AEMANABEADQANgBEADAAMwBDADMAfQAGrgkAAAUBAQA5AAMEAAAAUQB1AGEA
QCMAACoqAAAIBAAAFAAAAAAAAAA3ZeP9r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAG
AAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAzAyEABAJQAFEAQAAAAAAAAEDioeL9r2bNAQwAzAD4224ARCVIJH6WDwVEJQAA1AoA
AKw+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABLQMAAB5fAAACAVYAAABOXwAA
AgUBJgB7ADUANwAzAEUAMwAxAEYAOAAtAEEAQQBCAEEALQAxADEARAAwAC0AOABDAEMAQgAtADAA
MABDADAANABGAEMAMgA5ADUARQBFAH0ABEEvAAAAw18AAAsAAAAGBxIAAAUBAQAyAAIFAQsAVwBU
AEQAXwBVAEkAXwBOAE8ATgBFAARBJQAAABFgAAAcAAAARgcSAAAFAQEAMQAGTWAAAAUBBAB0AHIA
dQBlAANBRQAAAJdgAAALAAAABgcSAAAFAQEAMQACBQEWAFcAVABEAF8AUwBUAEEAVABFAEEAQwBU
AEkATwBOAF8AVgBFAFIASQBGAFkABEEzAAAA6hEAACoAAABGBxIAAAUBCAA4ADAAMAAwADAAMAAw
ADAABiNhAAAFAQQAdAByAHUAZQADQTYAAABvYQAALQAAAAagYQAABQESAG0AYQBpAGwALgBzAGUA
YwB1AHIAZQBzAHUAYgAuAG4AZQB0AANBGwAAAPJhAAASAAAARhliAAAFAQAABkpiAAAFAQAAA0Fx
AAAAbmIAAGgAAABGBxIAAAUBBQAyADMAQwAwADAARrRiAAAFAQQAdAByAHUAZQBG82IAAAUBBAB0
AHIAdQBlAEYyYwAABQEEAHQAcgB1AGUARndjAAAFAQQAdAByAHUAZQAGvGMAAAUBBAB0AHIAdQBl
AANBXgAAAJEmAABVAAAABsQmAAAFASYAewA5ADUAOQBDADcAQgAyADIALQBDAEQAMgBDAC0ANABD
AEIAOAAtADgARQAxADgALQBFAEIARABGAEUARgBBAEEARgA2ADUARgB9AANBKgAAAJsIAAAhAAAA
BsYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FrAAAADAkAAGIAAABGQwkAAAUBJgB7
ADAAQQBEAEMAOABDADkANwAtADYARgBFADMALQA0ADMANgBGAC0AQQA2ADIAOQAtADQANABDADQA
RAA0ADYARAAwADMAQwAzAH0ABq4JAAAFAQIAMQAwAANBFAAAANsXAAALAAAABgcSAAAFAQEAMAAD
BAAAHwAACAQAACoqAACAAQAAFQAAAAAAAAA3ZeP9r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAAB
AAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAACpACEABAELAAoAAwAAAAAAAEA3ZeP9r2bNAQwAzAD4224ARCVIJH6WDwVE
JQAA1AoAAK0+CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABowAAAJ4KAAACQSoA
AACbCAAAIQAAAAbGCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAA
RkMJAAAFASYAewA4AEIAOQBEAEQANwBBADcALQBGADUAMgA4AC0ANABFAEMANQAtAEEANgBCADAA
LQA0ADAAMwBCAEIARQBBAEIAMABDADIAMwB9AAauCQAABQEBADEAAwQAAABhAG0AgAEAACoqAACA
AQAAFgAAAAAAAAA3ZeP9r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAA
CAAVAAgAEQAQAA8ABAAIAAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACp
ACEABAEpACgABQAAAAAAAEA3ZeP9r2bNAQwAzAD4224ARCVIJH6WDwVEJQAA1AoAAK4+CgAAAAAA
AAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABowAAAE4MAAACQSoAAACbCAAAIQAAAAbGCAAA
BQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewA4AEIA
OQBEAEQANwBBADcALQBGADUAMgA4AC0ANABFAEMANQAtAEEANgBCADAALQA0ADAAMwBCAEIARQBB
AEIAMABDADIAMwB9AAauCQAABQEBADIAAwQAAAAoAFUAgAEAACoqAADYBAAAFwAAAAAAAABIjOP9
r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAQAA8ABAAI
AAQACAAIAAoAAQAEABwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/AyEAAgIpACkABQAAAAAA
AEA3ZeP9r2bNAQwAzAD4224ARCVIJH6WDwVEJQAA1AoAAK8+CgAAAAAAAAEFAAAAAAAFFQAAAKIi
3utU9PmEufKMvHwEAAAB+QMAAM4YAAACQXsAAAAKGQAAcgAAAEa/FgAABQEsAEIAOQBDADIANgAz
AEIAQwA5AEQAOQA2ADkAOQAwADYAMwBGAEEAMwBDAEYAMwBDAEUAMwBBAEYARgBEADkAMABGADQA
NAA4ADAANgBDADgALgBjAGUAcgAGlBkAAAUBBABkAGEAbgBvAANBkQAAAOYZAACIAAAARr8WAAAF
ASwAMQA3ADYAMQBGADIANgBFAEIAMAA4ADIANAA3ADAARgA0ADQAQgAyADcAOABFAEIANgAyAEYA
RAA4ADMAMQA5AEYAMwBEAEUAMgAwADEAOAAuAGMAZQByAAaUGQAABQEPAHMAZQBjAHUAcgBlAHMA
dQBiAC0ARABDAC0AQwBBAANBfQAAAOoRAAB0AAAARgcSAAAFAQEAMgAG8rEAAMNfAAAVwCcAQwBF
AFIAVABfAFYARQBSAEkARgBZAF8AQwBBAEMASABFAF8ATwBOAEwAWQBfAEIAQQBTAEUARABfAFIA
RQBWAE8AQwBBAFQASQBPAE4AAAAFAQQAdAByAHUAZQADQY4AAAAuGwAAhQAAAEZpGwAABQEYADIA
MAAxADIALQAwADcALQAyADAAVAAxADkAOgA0ADMAOgA1ADIALgA4ADQAMwBaAEa+GwAABQEYADIA
MAAxADIALQAwADcALQAyADAAVAAxADkAOgA0ADMAOgA1ADIALgA4ADQAMwBaAAYXHAAABQEFAFAA
VAAxADUAUwADQTgAAABfHAAALwAAAEaSHAAABQEBADAARgIVAAAFAQgAOAAwADAAOQAyADAAMQAz
AAa8HAAABQEBADAAA0EqAAAAmwgAACEAAAAGxggAAAUBDABpAGUAeABwAGwAbwByAGUALgBlAHgA
ZQADQWkAAAAMCQAAYAAAAEZDCQAABQEmAHsAOABCADkARABEADcAQQA3AC0ARgA1ADIAOAAtADQA
RQBDADUALQBBADYAQgAwAC0ANAAwADMAQgBCAEUAQQBCADAAQwAyADMAfQAGrgkAAAUBAQAzAANB
6QAAANsXAAAZAAAABgcSAAAFAQgAOAAwADAAOQAyADAAMQAzAAIFAWEAVABoAGUAIAByAGUAdgBv
AGMAYQB0AGkAbwBuACAAZgB1AG4AYwB0AGkAbwBuACAAdwBhAHMAIAB1AG4AYQBiAGwAZQAgAHQA
bwAgAGMAaABlAGMAawAgAHIAZQB2AG8AYwBhAHQAaQBvAG4AIABiAGUAYwBhAHUAcwBlACAAdABo
AGUAIAByAGUAdgBvAGMAYQB0AGkAbwBuACAAcwBlAHIAdgBlAHIAIAB3AGEAcwAgAG8AZgBmAGwA
aQBuAGUALgAEBAAAAGUAYwB1ANgEAAAqKgAAgA0AABgAAAAAAAAASIzj/a9mzQEPAQEADAFmj6+r
JgIAABQAAAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEAEAAPAAQACAAEAAgACAAKAAEABAAc
ABMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApwwhAAQAWgBaAAACAAAAAABASIzj/a9mzQEMAMwA
+NtuAEQlSCR+lg8FRCUAANQKAACwPgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAA
AaEMAACmNwAAAkH9AwAAChkAAIgAAABGvxYAAAUBLAAxADcANgAxAEYAMgA2AEUAQgAwADgAMgA0
ADcAMABGADQANABCADIANwA4AEUAQgA2ADIARgBEADgAMwAxADkARgAzAEQARQAyADAAMQA4AC4A
YwBlAHIABpQZAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEAAgFpAAAAZjgAAAIB
KAAAAIg4AAACBQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAQBHAAAAMM4AAACBQEJ
AHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAMM4AAACBQEDAG4AZQB0AAQEQXUAAAAIOQAAbAAAAEYz
OQAABQEFAGYAYQBsAHMAZQAGYDkAAAUBKAA3ADcAMwBFAEQANgA4ADAANQAxADYANgA2ADYANwAw
AEYANgBGADIAMwBGAEIAMgA1ADEAOQBGAEMAMQBCAEEAQwAyADEAOABDADQAQwBCAANBWgAAAEkp
AABRAAAARkYjAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEax
KQAABQEEAFMASABBADEABtwpAAAFAQMAUgBTAEEAA0FaAAAAFCoAAFEAAABGRiMAAAUBFAAxAC4A
MgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARtwpAAAFAQMAUgBTAEEABosqAAAF
AQQAMgAwADQAOAADAWkAAACOOgAAAgEoAAAAiDgAAAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBE
AEMALQBDAEEABAEcAAAAwzgAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAAwzgAAAIFAQMA
bgBlAHQABAQBSgAAABI7AAACBQEgADcAMgA0ADMARAA2ADYARABCAEYARgBBADkAQgA5ADIANAAx
AEEARAA3ADQARQA5ADgAQwA3ADYAQgBEADcAQgAEATIAAACDOwAAAgUBFAAyADAAMQAyAC0AMAA3
AC0AMQA5AFQAMQA2ADoANQA1ADoAMwA3AFoABAEyAAAA1jsAAAIFARQAMgAwADEANwAtADAANwAt
ADEAOQBUADEANwA6ADAANQA6ADMANQBaAAQBlQAAACc8AAACQVoAAABPPAAAUQAAAEZyPAAABQEE
AHQAcgB1AGUARgcSAAAFAQIAOAA2AEaqPAAABQEEAHQAcgB1AGUARgU9AAAFAQQAdAByAHUAZQAG
WD0AAAUBBAB0AHIAdQBlAANBKwAAAKY9AAAiAAAARnI8AAAFAQQAdAByAHUAZQAG6j0AAAUBBAB0
AHIAdQBlAAMEBEH3BwAAChkAAHIAAABGvxYAAAUBLABCADkAQwAyADYAMwBCAEMAOQBEADkANgA5
ADkAMAA2ADMARgBBADMAQwBGADMAQwBFADMAQQBGAEYARAA5ADAARgA0ADQAOAAwADYAQwA4AC4A
YwBlAHIABpQZAAAFAQQAZABhAG4AbwACAWwAAABmOAAAAgESAAAAiDgAAAIFAQQAZABhAG4AbwAE
ARQAAACIOAAAAgUBBQBVAHMAZQByAHMABAEcAAAAwzgAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIA
BAEQAAAAwzgAAAIFAQMAbgBlAHQABARBdQAAAAg5AABsAAAARjM5AAAFAQUAZgBhAGwAcwBlAAZg
OQAABQEoADQAQwAzAEYANgAwADAANwAxADEANABFADIAMQAzADUAMQBFAEYANwBGADMAMgA2ADUA
QgBDAEQAMQAzAEEARQA4AEIANAA0ADkAQwBEAEEAA0FaAAAASSkAAFEAAABGRiMAAAUBFAAxAC4A
MgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADUARrEpAAAFAQQAUwBIAEEAMQAG3CkA
AAUBAwBSAFMAQQADQVoAAAAUKgAAUQAAAEZGIwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1
ADQAOQAuADEALgAxAC4AMQBG3CkAAAUBAwBSAFMAQQAGiyoAAAUBBAAyADAANAA4AAMBaQAAAI46
AAACASgAAACIOAAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAADDOAAA
AgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAADDOAAAAgUBAwBuAGUAdAAEBAEyAAAAEjsAAAIF
ARQAMQA1AEEAMgBDAEYARAA5ADAAMAAwADAAMAAwADAAMAAwADAAMQBFAAQBMgAAAIM7AAACBQEU
ADIAMAAxADIALQAwADcALQAyADAAVAAxADkAOgAwADEAOgA0ADIAWgAEATIAAADWOwAAAgUBFAAy
ADAAMQAzAC0AMAA3AC0AMgAwAFQAMQA5ADoAMAAxADoANAAyAFoABAFdAgAAJzwAAAIBRAEAAMgi
AAACQXMAAAApIwAAagAAAEZGIwAABQEWADEALgAzAC4ANgAuADEALgA0AC4AMQAuADMAMQAxAC4A
MQAwAC4AMwAuADQABoEjAAAFARYARQBuAGMAcgB5AHAAdABpAG4AZwAgAEYAaQBsAGUAIABTAHkA
cwB0AGUAbQADQVUAAAApIwAATAAAAEZGIwAABQERADEALgAzAC4ANgAuADEALgA1AC4ANQAuADcA
LgAzAC4ANAAGgSMAAAUBDABTAGUAYwB1AHIAZQAgAEUAbQBhAGkAbAADQWcAAAApIwAAXgAAAEZG
IwAABQERADEALgAzAC4ANgAuADEALgA1AC4ANQAuADcALgAzAC4AMgAGgSMAAAUBFQBDAGwAaQBl
AG4AdAAgAEEAdQB0AGgAZQBuAHQAaQBjAGEAdABpAG8AbgADBEFJAAAATzwAAEAAAABGcjwAAAUB
BAB0AHIAdQBlAEYHEgAABQECAEEAMABGqjwAAAUBBAB0AHIAdQBlAAbuQQAABQEEAHQAcgB1AGUA
AwFtAAAAvkIAAAJBYgAAAP5CAABZAAAABmA5AAAFASgANwA3ADMARQBEADYAOAAwADUAMQA2ADYA
NgA2ADcAMABGADYARgAyADMARgBCADIANQAxADkARgBDADEAQgBBAEMAMgAxADgAQwA0AEMAQgAD
BAFJAAAATEIAAAIBPgAAAPu+AAC0NAAA0zkDAFUAUABOAAAAAgUBEgBkAGEAbgBvAEAAcwBlAGMA
dQByAGUAcwB1AGIALgBuAGUAdAAEBAQBWAIAAEC/AAC0YgAAc3IKAFAAcgBvAHAAZQByAHQAaQBl
AHMAAAACQS8CAABovwAA5hkAAH5bDwBLAGUAeQBQAHIAbwB2AGkAZABlAHIASQBuAGYAbwAAAP4B
AABGexEAAAUBDQBQAFIATwBWAF8AUgBTAEEAXwBGAFUATABMAEa8vwAA6j0AAN6JDAB0AHkAcABl
AEMAbwBuAHMAdABhAG4AdAAAAAUBAQAxAEbpvwAAxUcAABzYDABwAHIAbwB2AGkAZABlAHIATgBh
AG0AZQAAAAUBLgBNAGkAYwByAG8AcwBvAGYAdAAgAEUAbgBoAGEAbgBjAGUAZAAgAEMAcgB5AHAA
dABvAGcAcgBhAHAAaABpAGMAIABQAHIAbwB2AGkAZABlAHIAIAB2ADEALgAwAEZwwAAAI2EAANqE
BwBrAGUAeQBTAHAAZQBjAAAABQEOAEEAVABfAEsARQBZAEUAWABDAEgAQQBOAEcARQBGrcAAAGi/
AAA+SA8AawBlAHkAUwBwAGUAYwBDAG8AbgBzAHQAYQBuAHQAAAAFAQEAMQAG4MAAAK1GAADszA0A
YwBvAG4AdABhAGkAbgBlAHIATgBhAG0AZQAAAAUBRQBkAGUANAA2ADEAYgA3ADQAZgA5ADEAYQAw
ADYANwBmADMANwBhAGEAYwA4ADEAMgBhADMAOAA4ADkAYgAyAGYAXwAwADMAMAA5ADMAMgA2AGMA
LQAxAGIANgA4AC0ANAA4ADUAYQAtAGIAYwA5AGMALQBiADMAZQA0AGMAYwA1AGMAOQBjADMANAAD
BARBKgAAAJsIAAAhAAAABsYIAAAFAQwAaQBlAHgAcABsAG8AcgBlAC4AZQB4AGUAA0FpAAAADAkA
AGAAAABGQwkAAAUBJgB7ADgAQgA5AEQARAA3AEEANwAtAEYANQAyADgALQA0AEUAQwA1AC0AQQA2
AEIAMAAtADQAMAAzAEIAQgBFAEEAQgAwAEMAMgAzAH0ABq4JAAAFAQEANAADBAAAAEYARAA5AIAN
AAAqKgAAaAsAABkAAAAAAAAAuZ2O/q9mzQEPAQEADAFmj6+rJgIAABQAAAABAAQAAQAEAAIABgAC
AAYAAAAAAAgAFQAIABEAEAAPAAQACAAEAAgACAAKAAEABAAcABMAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAlgohAAICCwALAAMAAAAAAABASIzj/a9mzQEMAMwA+NtuAEQlSCR+lg8FRCUAANQKAACx
PgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAZAKAAC2IAAAAkF7AAAAChkAAHIA
AABGvxYAAAUBLABCADkAQwAyADYAMwBCAEMAOQBEADkANgA5ADkAMAA2ADMARgBBADMAQwBGADMA
QwBFADMAQQBGAEYARAA5ADAARgA0ADQAOAAwADYAQwA4AC4AYwBlAHIABpQZAAAFAQQAZABhAG4A
bwADAQUAAADIIgAAA0GaAAAA6hEAAJEAAABGBxIAAAUBCABDADAAMAAwADAAMAAwADAARnIkAAAF
AQQAdAByAHUAZQAG3cMAAExCAAAIGSYAQwBFAFIAVABfAEMASABBAEkATgBfAFIARQBWAE8AQwBB
AFQASQBPAE4AXwBDAEgARQBDAEsAXwBDAEEAQwBIAEUAXwBPAE4ATABZAAAABQEEAHQAcgB1AGUA
A0EaAAAAXSUAABEAAAAGjiUAAAUBBAB1AHMAZQByAANBsgcAAJEmAABVAAAABsQmAAAFASYAewBC
ADYAQQBGAEQAMAA3ADgALQA1AEEARABCAC0ANAAyADQAMgAtADkANQA2AEQALQBEAEUAOQAwADEA
NAAxAEUAMgAzAEYAOQB9AAIBFwEAAIknAAACQd4AAACzJwAA1QAAAEYHEgAABQEHADEAMAAwADAA
MAA0ADAARvXEAADpvwAAXDQkAEMARQBSAFQAXwBUAFIAVQBTAFQAXwBSAEUAVgBPAEMAQQBUAEkA
TwBOAF8AUwBUAEEAVABVAFMAXwBVAE4ASwBOAE8AVwBOAAAABQEEAHQAcgB1AGUABljFAAB8QgAA
7ZQgAEMARQBSAFQAXwBUAFIAVQBTAFQAXwBJAFMAXwBPAEYARgBMAEkATgBFAF8AUgBFAFYATwBD
AEEAVABJAE8ATgAAAAUBBAB0AHIAdQBlAANBKQAAAOwnAAAgAAAARgcSAAAFAQMAMQAwADAABiIo
AAAFAQQAdAByAHUAZQADBAEhBAAAgSgAAAJBewAAAAoZAAByAAAARr8WAAAFASwAQgA5AEMAMgA2
ADMAQgBDADkARAA5ADYAOQA5ADAANgAzAEYAQQAzAEMARgAzAEMARQAzAEEARgBGAEQAOQAwAEYA
NAA0ADgAMAA2AEMAOAAuAGMAZQByAAaUGQAABQEEAGQAYQBuAG8AA0FaAAAASSkAAFEAAABGRiMA
AAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADUARrEpAAAFAQQAUwBI
AEEAMQAG3CkAAAUBAwBSAFMAQQADQVoAAAAUKgAAUQAAAEZGIwAABQEUADEALgAyAC4AOAA0ADAA
LgAxADEAMwA1ADQAOQAuADEALgAxAC4AMQBG3CkAAAUBAwBSAFMAQQAGiyoAAAUBBAAyADAANAA4
AAMBjAAAAIknAAACQUIAAACzJwAAOQAAAEYHEgAABQEHADEAMAAwADAAMAA0ADAARvXEAAAFAQQA
dAByAHUAZQAGWMUAAAUBBAB0AHIAdQBlAANBOgAAAOwnAAAxAAAARgcSAAAFAQMAMQAwADIARgQr
AAAFAQQAdAByAHUAZQAGIigAAAUBBAB0AHIAdQBlAAMEAUQBAAB0KwAAAkFzAAAAKSMAAGoAAABG
RiMAAAUBFgAxAC4AMwAuADYALgAxAC4ANAAuADEALgAzADEAMQAuADEAMAAuADMALgA0AAaBIwAA
BQEWAEUAbgBjAHIAeQBwAHQAaQBuAGcAIABGAGkAbABlACAAUwB5AHMAdABlAG0AA0FVAAAAKSMA
AEwAAABGRiMAAAUBEQAxAC4AMwAuADYALgAxAC4ANQAuADUALgA3AC4AMwAuADQABoEjAAAFAQwA
UwBlAGMAdQByAGUAIABFAG0AYQBpAGwAA0FnAAAAKSMAAF4AAABGRiMAAAUBEQAxAC4AMwAuADYA
LgAxAC4ANQAuADUALgA3AC4AMwAuADIABoEjAAAFARUAQwBsAGkAZQBuAHQAIABBAHUAdABoAGUA
bgB0AGkAYwBhAHQAaQBvAG4AAwQBBQAAABUsAAADAfQAAABDLAAAAkHpAAAAtCwAABkAAAAGBxIA
AAUBCAA4ADAAMAA5ADIAMAAxADMAAgUBYQBUAGgAZQAgAHIAZQB2AG8AYwBhAHQAaQBvAG4AIABm
AHUAbgBjAHQAaQBvAG4AIAB3AGEAcwAgAHUAbgBhAGIAbABlACAAdABvACAAYwBoAGUAYwBrACAA
cgBlAHYAbwBjAGEAdABpAG8AbgAgAGIAZQBjAGEAdQBzAGUAIAB0AGgAZQAgAHIAZQB2AG8AYwBh
AHQAaQBvAG4AIABzAGUAcgB2AGUAcgAgAHcAYQBzACAAbwBmAGYAbABpAG4AZQAuAAQEBAEMAgAA
gSgAAAJBkQAAAAoZAACIAAAARr8WAAAFASwAMQA3ADYAMQBGADIANgBFAEIAMAA4ADIANAA3ADAA
RgA0ADQAQgAyADcAOABFAEIANgAyAEYARAA4ADMAMQA5AEYAMwBEAEUAMgAwADEAOAAuAGMAZQBy
AAaUGQAABQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAANBWgAAAEkpAABRAAAARkYj
AAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEaxKQAABQEEAFMA
SABBADEABtwpAAAFAQMAUgBTAEEAA0FaAAAAFCoAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgANAAw
AC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARtwpAAAFAQMAUgBTAEEABosqAAAFAQQAMgAwADQA
OAADAW8AAACJJwAAAkEUAAAAsycAAAsAAAAGBxIAAAUBAQAwAANBSwAAAOwnAABCAAAARgcSAAAF
AQMAMQAwAEMARlgwAAAFAQQAdAByAHUAZQBGszAAAAUBBAB0AHIAdQBlAAYiKAAABQEEAHQAcgB1
AGUAAwRBGgAAAHQrAAARAAAABiAxAAAFAQQAdAByAHUAZQADQRoAAAAVLAAAEQAAAAYgMQAABQEE
AHQAcgB1AGUAAwQEQSoAAACbCAAAIQAAAAbGCAAABQEMAGkAZQB4AHAAbABvAHIAZQAuAGUAeABl
AANBaQAAAAwJAABgAAAARkMJAAAFASYAewA4AEIAOQBEAEQANwBBADcALQBGADUAMgA4AC0ANABF
AEMANQAtAEEANgBCADAALQA0ADAAMwBCAEIARQBBAEIAMABDADIAMwB9AAauCQAABQEBADUAA0Hp
AAAA2xcAABkAAAAGBxIAAAUBCAA4ADAAMAA5ADIAMAAxADMAAgUBYQBUAGgAZQAgAHIAZQB2AG8A
YwBhAHQAaQBvAG4AIABmAHUAbgBjAHQAaQBvAG4AIAB3AGEAcwAgAHUAbgBhAGIAbABlACAAdABv
ACAAYwBoAGUAYwBrACAAcgBlAHYAbwBjAGEAdABpAG8AbgAgAGIAZQBjAGEAdQBzAGUAIAB0AGgA
ZQAgAHIAZQB2AG8AYwBhAHQAaQBvAG4AIABzAGUAcgB2AGUAcgAgAHcAYQBzACAAbwBmAGYAbABp
AG4AZQAuAAQEAABoCwAAKioAAGgBAAAaAAAAAAAAALmdjv6vZs0BDwEBAAwBZo+vqyYCAAAUAAAA
AQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARAAAAAAAEAAgABAAIAAgACgABAAQAHAATAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAKMAIQAEAQsACgADAAAAAAAAQLmdjv6vZs0B7AEAADgcAACyPgoA
AAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAZ0AAACeCgAAAkEkAAAAmwgAABsAAAAG
xggAAAUBCQBsAHMAYQBzAHMALgBlAHgAZQADQWkAAAAMCQAAYAAAAEZDCQAABQEmAHsAOQBFADAA
NwAxADcARAA2AC0ANQA0ADIAMgAtADQAMgA2AEMALQBCADcAQwBGAC0AOABFADUANAA1ADkAQQBE
ADkAQwBCADcAfQAGrgkAAAUBAQAxAAMEAAAAAAJoAQAAKioAAGgMAAAbAAAAAAAAALmdjv6vZs0B
DwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAIABUACAARAAAAAAAEAAgABAAI
AAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKMLIQAEAFoAWgAAAgAAAAAAQLmd
jv6vZs0B7AEAADgcAACzPgoAAAAAAAABBQAAAAAABRUAAACiIt7rVPT5hLnyjLx8BAAAAZ0LAACm
NwAAAkH9AwAAChkAAIgAAABGvxYAAAUBLAAxADcANgAxAEYAMgA2AEUAQgAwADgAMgA0ADcAMABG
ADQANABCADIANwA4AEUAQgA2ADIARgBEADgAMwAxADkARgAzAEQARQAyADAAMQA4AC4AYwBlAHIA
BpQZAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEAAgFpAAAAZjgAAAIBKAAAAIg4
AAACBQEPAHMAZQBjAHUAcgBlAHMAdQBiAC0ARABDAC0AQwBBAAQBHAAAAMM4AAACBQEJAHMAZQBj
AHUAcgBlAHMAdQBiAAQBEAAAAMM4AAACBQEDAG4AZQB0AAQEQXUAAAAIOQAAbAAAAEYzOQAABQEF
AGYAYQBsAHMAZQAGYDkAAAUBKAA3ADcAMwBFAEQANgA4ADAANQAxADYANgA2ADYANwAwAEYANgBG
ADIAMwBGAEIAMgA1ADEAOQBGAEMAMQBCAEEAQwAyADEAOABDADQAQwBCAANBWgAAAEkpAABRAAAA
RkYjAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEaxKQAABQEE
AFMASABBADEABtwpAAAFAQMAUgBTAEEAA0FaAAAAFCoAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgA
NAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARtwpAAAFAQMAUgBTAEEABosqAAAFAQQAMgAw
ADQAOAADAWkAAACOOgAAAgEoAAAAiDgAAAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBD
AEEABAEcAAAAwzgAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAAwzgAAAIFAQMAbgBlAHQA
BAQBSgAAABI7AAACBQEgADcAMgA0ADMARAA2ADYARABCAEYARgBBADkAQgA5ADIANAAxAEEARAA3
ADQARQA5ADgAQwA3ADYAQgBEADcAQgAEATIAAACDOwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMQA5
AFQAMQA2ADoANQA1ADoAMwA3AFoABAEyAAAA1jsAAAIFARQAMgAwADEANwAtADAANwAtADEAOQBU
ADEANwA6ADAANQA6ADMANQBaAAQBlQAAACc8AAACQVoAAABPPAAAUQAAAEZyPAAABQEEAHQAcgB1
AGUARgcSAAAFAQIAOAA2AEaqPAAABQEEAHQAcgB1AGUARgU9AAAFAQQAdAByAHUAZQAGWD0AAAUB
BAB0AHIAdQBlAANBKwAAAKY9AAAiAAAARnI8AAAFAQQAdAByAHUAZQAG6j0AAAUBBAB0AHIAdQBl
AAMEBEH5BgAAChkAAHIAAABGvxYAAAUBLABCADkAQwAyADYAMwBCAEMAOQBEADkANgA5ADkAMAA2
ADMARgBBADMAQwBGADMAQwBFADMAQQBGAEYARAA5ADAARgA0ADQAOAAwADYAQwA4AC4AYwBlAHIA
BpQZAAAFAQQAZABhAG4AbwACAWwAAABmOAAAAgESAAAAiDgAAAIFAQQAZABhAG4AbwAEARQAAACI
OAAAAgUBBQBVAHMAZQByAHMABAEcAAAAwzgAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQAAAA
wzgAAAIFAQMAbgBlAHQABARBdQAAAAg5AABsAAAARjM5AAAFAQUAZgBhAGwAcwBlAAZgOQAABQEo
ADQAQwAzAEYANgAwADAANwAxADEANABFADIAMQAzADUAMQBFAEYANwBGADMAMgA2ADUAQgBDAEQA
MQAzAEEARQA4AEIANAA0ADkAQwBEAEEAA0FaAAAASSkAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgA
NAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADUARrEpAAAFAQQAUwBIAEEAMQAG3CkAAAUBAwBS
AFMAQQADQVoAAAAUKgAAUQAAAEZGIwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAu
ADEALgAxAC4AMQBG3CkAAAUBAwBSAFMAQQAGiyoAAAUBBAAyADAANAA4AAMBaQAAAI46AAACASgA
AACIOAAAAgUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAEARwAAADDOAAAAgUBCQBz
AGUAYwB1AHIAZQBzAHUAYgAEARAAAADDOAAAAgUBAwBuAGUAdAAEBAEyAAAAEjsAAAIFARQAMQA1
AEEAMgBDAEYARAA5ADAAMAAwADAAMAAwADAAMAAwADAAMQBFAAQBMgAAAIM7AAACBQEUADIAMAAx
ADIALQAwADcALQAyADAAVAAxADkAOgAwADEAOgA0ADIAWgAEATIAAADWOwAAAgUBFAAyADAAMQAz
AC0AMAA3AC0AMgAwAFQAMQA5ADoAMAAxADoANAAyAFoABAFNAgAAJzwAAAIBRAEAAMgiAAACQXMA
AAApIwAAagAAAEZGIwAABQEWADEALgAzAC4ANgAuADEALgA0AC4AMQAuADMAMQAxAC4AMQAwAC4A
MwAuADQABoEjAAAFARYARQBuAGMAcgB5AHAAdABpAG4AZwAgAEYAaQBsAGUAIABTAHkAcwB0AGUA
bQADQVUAAAApIwAATAAAAEZGIwAABQERADEALgAzAC4ANgAuADEALgA1AC4ANQAuADcALgAzAC4A
NAAGgSMAAAUBDABTAGUAYwB1AHIAZQAgAEUAbQBhAGkAbAADQWcAAAApIwAAXgAAAEZGIwAABQER
ADEALgAzAC4ANgAuADEALgA1AC4ANQAuADcALgAzAC4AMgAGgSMAAAUBFQBDAGwAaQBlAG4AdAAg
AEEAdQB0AGgAZQBuAHQAaQBjAGEAdABpAG8AbgADBEFJAAAATzwAAEAAAABGcjwAAAUBBAB0AHIA
dQBlAEYHEgAABQECAEEAMABGqjwAAAUBBAB0AHIAdQBlAAbuQQAABQEEAHQAcgB1AGUAAwFtAAAA
vkIAAAJBYgAAAP5CAABZAAAABmA5AAAFASgANwA3ADMARQBEADYAOAAwADUAMQA2ADYANgA2ADcA
MABGADYARgAyADMARgBCADIANQAxADkARgBDADEAQgBBAEMAMgAxADgAQwA0AEMAQgADBAE5AAAA
TEIAAAIBLgAAAPu+AAACBQESAGQAYQBuAG8AQABzAGUAYwB1AHIAZQBzAHUAYgAuAG4AZQB0AAQE
BAFqAQAAQL8AAAJBXwEAAGi/AABWAQAARnsRAAAFAQ0AUABSAE8AVgBfAFIAUwBBAF8ARgBVAEwA
TABGvL8AAAUBAQAxAEbpvwAABQEuAE0AaQBjAHIAbwBzAG8AZgB0ACAARQBuAGgAYQBuAGMAZQBk
ACAAQwByAHkAcAB0AG8AZwByAGEAcABoAGkAYwAgAFAAcgBvAHYAaQBkAGUAcgAgAHYAMQAuADAA
RnDAAAAFAQ4AQQBUAF8ASwBFAFkARQBYAEMASABBAE4ARwBFAEatwAAABQEBADEABuDAAAAFAUUA
ZABlADQANgAxAGIANwA0AGYAOQAxAGEAMAA2ADcAZgAzADcAYQBhAGMAOAAxADIAYQAzADgAOAA5
AGIAMgBmAF8AMAAzADAAOQAzADIANgBjAC0AMQBiADYAOAAtADQAOAA1AGEALQBiAGMAOQBjAC0A
YgAzAGUANABjAGMANQBjADkAYwAzADQAAwQEQSQAAACbCAAAGwAAAAbGCAAABQEJAGwAcwBhAHMA
cwAuAGUAeABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewA5AEUAMAA3ADEANwBEADYALQA1ADQA
MgAyAC0ANAAyADYAQwAtAEIANwBDAEYALQA4AEUANQA0ADUAOQBBAEQAOQBDAEIANwB9AAauCQAA
BQEBADIAAwQAADcAAGgMAAAqKgAAmAgAABwAAAAAAAAAysSO/q9mzQEPAQEADAFmj6+rJgIAABQA
AAABAAQAAQAEAAIABgACAAYAAAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAKAAEABAAcABMAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAA0wchAAQCCwALAAMAAAAAAABAuZ2O/q9mzQHsAQAAOBwAALQ+
CgAAAAAAAAEFAAAAAAAFFQAAAKIi3utU9PmEufKMvHwEAAABzQcAALYgAAACQXsAAAAKGQAAcgAA
AEa/FgAABQEsAEIAOQBDADIANgAzAEIAQwA5AEQAOQA2ADkAOQAwADYAMwBGAEEAMwBDAEYAMwBD
AEUAMwBBAEYARgBEADkAMABGADQANAA4ADAANgBDADgALgBjAGUAcgAGlBkAAAUBBABkAGEAbgBv
AAMBBQAAAMgiAAADQRQAAADqEQAACwAAAAYHEgAABQEBADAAA0EaAAAAXSUAABEAAAAGjiUAAAUB
BAB1AHMAZQByAANBwQUAAJEmAABVAAAABsQmAAAFASYAewAxADMANABGADkAMwA4AEQALQAyADEA
RQAyAC0ANAA1AEEAOAAtADkANgAwADkALQBDADIAMAAyADEANgAyADcAMQBCAEUARgB9AAIBTQAA
AIknAAACQRQAAACzJwAACwAAAAYHEgAABQEBADAAA0EpAAAA7CcAACAAAABGBxIAAAUBAwAxADAA
MAAGIigAAAUBBAB0AHIAdQBlAAMEAfoCAACBKAAAAkF7AAAAChkAAHIAAABGvxYAAAUBLABCADkA
QwAyADYAMwBCAEMAOQBEADkANgA5ADkAMAA2ADMARgBBADMAQwBGADMAQwBFADMAQQBGAEYARAA5
ADAARgA0ADQAOAAwADYAQwA4AC4AYwBlAHIABpQZAAAFAQQAZABhAG4AbwADQVoAAABJKQAAUQAA
AEZGIwAABQEUADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBGsSkAAAUB
BABTAEgAQQAxAAbcKQAABQEDAFIAUwBBAANBWgAAABQqAABRAAAARkYjAAAFARQAMQAuADIALgA4
ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgAxAEbcKQAABQEDAFIAUwBBAAaLKgAABQEEADIA
MAA0ADgAAwFeAAAAiScAAAJBFAAAALMnAAALAAAABgcSAAAFAQEAMAADQToAAADsJwAAMQAAAEYH
EgAABQEDADEAMAAyAEYEKwAABQEEAHQAcgB1AGUABiIoAAAFAQQAdAByAHUAZQADBAFEAQAAdCsA
AAJBcwAAACkjAABqAAAARkYjAAAFARYAMQAuADMALgA2AC4AMQAuADQALgAxAC4AMwAxADEALgAx
ADAALgAzAC4ANAAGgSMAAAUBFgBFAG4AYwByAHkAcAB0AGkAbgBnACAARgBpAGwAZQAgAFMAeQBz
AHQAZQBtAANBVQAAACkjAABMAAAARkYjAAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAu
ADMALgA0AAaBIwAABQEMAFMAZQBjAHUAcgBlACAARQBtAGEAaQBsAANBZwAAACkjAABeAAAARkYj
AAAFAREAMQAuADMALgA2AC4AMQAuADUALgA1AC4ANwAuADMALgAyAAaBIwAABQEVAEMAbABpAGUA
bgB0ACAAQQB1AHQAaABlAG4AdABpAGMAYQB0AGkAbwBuAAMEAQUAAAAVLAAAAwQBDAIAAIEoAAAC
QZEAAAAKGQAAiAAAAEa/FgAABQEsADEANwA2ADEARgAyADYARQBCADAAOAAyADQANwAwAEYANAA0
AEIAMgA3ADgARQBCADYAMgBGAEQAOAAzADEAOQBGADMARABFADIAMAAxADgALgBjAGUAcgAGlBkA
AAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQADQVoAAABJKQAAUQAAAEZGIwAABQEU
ADEALgAyAC4AOAA0ADAALgAxADEAMwA1ADQAOQAuADEALgAxAC4ANQBGsSkAAAUBBABTAEgAQQAx
AAbcKQAABQEDAFIAUwBBAANBWgAAABQqAABRAAAARkYjAAAFARQAMQAuADIALgA4ADQAMAAuADEA
MQAzADUANAA5AC4AMQAuADEALgAxAEbcKQAABQEDAFIAUwBBAAaLKgAABQEEADIAMAA0ADgAAwFv
AAAAiScAAAJBFAAAALMnAAALAAAABgcSAAAFAQEAMAADQUsAAADsJwAAQgAAAEYHEgAABQEDADEA
MABDAEZYMAAABQEEAHQAcgB1AGUARrMwAAAFAQQAdAByAHUAZQAGIigAAAUBBAB0AHIAdQBlAAME
QRoAAAB0KwAAEQAAAAYgMQAABQEEAHQAcgB1AGUAA0EaAAAAFSwAABEAAAAGIDEAAAUBBAB0AHIA
dQBlAAMEBEGzAAAAmwgAAKoAAABGxggAAAUBCQBsAHMAYQBzAHMALgBlAHgAZQAG9OIAAAAAAAAA
XhAAaQBtAHAAZQByAHMAbwBuAGEAdABlAFQAbwBrAGUAbgAAAAUBLgBTAC0AMQAtADUALQAyADEA
LQAzADkANQA3ADIAMAAzADYAMQA4AC0AMgAyADMAMAA5ADcAMwA1ADIANAAtADMAMQA2ADMAMwA1
ADMANwA4ADUALQAxADEANAA4AANBaQAAAAwJAABgAAAARkMJAAAFASYAewA5AEUAMAA3ADEANwBE
ADYALQA1ADQAMgAyAC0ANAAyADYAQwAtAEIANwBDAEYALQA4AEUANQA0ADUAOQBBAEQAOQBDAEIA
NwB9AAauCQAABQEBADMAA0EUAAAA2xcAAAsAAAAGBxIAAAUBAQAwAAMEAAAAAACYCAAAKioAAEgE
AAAdAAAAAAAAAJaZkP6vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEABAACAAYAAgAGAAAAAAAI
ABUACAARAAAAAAAEAAgABAAIAAgACgABAAQAHAATAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIYD
IQAEAB4AHgABAAAAAAAAQMrEjv6vZs0B7AEAADgcAAC1PgoAAAAAAAABBQAAAAAABRUAAACiIt7r
VPT5hLnyjLx8BAAAAYADAADmMgAAAkFHAAAAOjMAAD4AAABGexEAAAUBFQBDAEUAUgBUAF8AQwBI
AEEASQBOAF8AUABPAEwASQBDAFkAXwBTAFMATAAGwBEAAAUBAQA0AANBewAAAAoZAAByAAAARr8W
AAAFASwAQgA5AEMAMgA2ADMAQgBDADkARAA5ADYAOQA5ADAANgAzAEYAQQAzAEMARgAzAEMARQAz
AEEARgBGAEQAOQAwAEYANAA0ADgAMAA2AEMAOAAuAGMAZQByAAaUGQAABQEEAGQAYQBuAG8AA0Fe
AAAAkSYAAFUAAAAGxCYAAAUBJgB7ADEAMwA0AEYAOQAzADgARAAtADIAMQBFADIALQA0ADUAQQA4
AC0AOQA2ADAAOQAtAEMAMgAwADIAMQA2ADIANwAxAEIARQBGAH0AA0EUAAAA6hEAAAsAAAAGBxIA
AAUBAQAwAANB8AAAALQ0AAAVAAAABvU0AAAFAQYAcwBlAHIAdgBlAHIAAkHMAAAAdDUAAMMAAABG
BxIAAAUBAwAyADgAMABGY+YAAEkpAACX6x8AUwBFAEMAVQBSAEkAVABZAF8ARgBMAEEARwBfAEkA
RwBOAE8AUgBFAF8AUgBFAFYATwBDAEEAVABJAE8ATgAAAAUBBAB0AHIAdQBlAAa85gAA+DUAAHbC
IABTAEUAQwBVAFIASQBUAFkAXwBGAEwAQQBHAF8ASQBHAE4ATwBSAEUAXwBXAFIATwBOAEcAXwBV
AFMAQQBHAEUAAAAFAQQAdAByAHUAZQADBEEjAAAArjUAABoAAABGzTUAAAUBAgAtADEABvg1AAAF
AQIALQAxAANBiQAAAJsIAACAAAAARsYIAAAFAQkAbABzAGEAcwBzAC4AZQB4AGUABvTiAAAFAS4A
UwAtADEALQA1AC0AMgAxAC0AMwA5ADUANwAyADAAMwA2ADEAOAAtADIAMgAzADAAOQA3ADMANQAy
ADQALQAzADEANgAzADMANQAzADcAOAA1AC0AMQAxADQAOAADQWkAAAAMCQAAYAAAAEZDCQAABQEm
AHsANgA2AEMAQwBFADYAOQBCAC0AOAA3ADUAQgAtADQAQQAxAEMALQBCAEIAQgA1AC0AOQBBADYA
MAAyADEAMwA1AEMAMgA4ADUAfQAGrgkAAAUBAQAxAANBFAAAANsXAAALAAAABgcSAAAFAQEAMAAD
BAAASAQAACoqAABYAQAAHgAAAAAAAACWmZD+r2bNAQ8BAQAMAWaPr6smAgAAFAAAAAEABAABAAQA
AgAGAAIABgAAAAAACAAVAAgAEQAAAAAABAAIAAQACAAIAAoAAQAEAAwAEwAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAACjACEABAELAAoAAwAAAAAAAECWmZD+r2bNAewBAAA4HAAAtj4KAAAAAAAAAQEA
AAAAAAUSAAAAAZ0AAACeCgAAAkEkAAAAmwgAABsAAAAGxggAAAUBCQBsAHMAYQBzAHMALgBlAHgA
ZQADQWkAAAAMCQAAYAAAAEZDCQAABQEmAHsAQQAyADQANgA5ADgAOQBGAC0ANwA3ADUAMwAtADQA
NgA5ADYALQBCADcANgA5AC0ARQBCADYANAA2ADgANAAyADgANgBDADMAfQAGrgkAAAUBAQAxAAME
AABzAHRYAQAAKioAAFgBAAAfAAAAAAAAAJaZkP6vZs0BDwEBAAwBZo+vqyYCAAAUAAAAAQAEAAEA
BAACAAYAAgAGAAAAAAAIABUACAARAAAAAAAEAAgABAAIAAgACgABAAQADAATAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAKMAIQAEASkAKAAFAAAAAAAAQJaZkP6vZs0B7AEAADgcAAC3PgoAAAAAAAAB
AQAAAAAABRIAAAABnQAAAE4MAAACQSQAAACbCAAAGwAAAAbGCAAABQEJAGwAcwBhAHMAcwAuAGUA
eABlAANBaQAAAAwJAABgAAAARkMJAAAFASYAewBBADIANAA2ADkAOAA5AEYALQA3ADcANQAzAC0A
NAA2ADkANgAtAEIANwA2ADkALQBFAEIANgA0ADYAOAA0ADIAOAA2AEMAMwB9AAauCQAABQEBADIA
AwQAAABkAFgBAAAqKgAAGAgAACAAAAAAAAAAp8CQ/q9mzQEPAQEADAFmj6+rJgIAABQAAAABAAQA
AQAEAAIABgACAAYAAAAAAAgAFQAIABEAAAAAAAQACAAEAAgACAAKAAEABAAMABMAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAYwchAAQCKQApAAUAAAAAAABAlpmQ/q9mzQHsAQAAOBwAALg+CgAAAAAA
AAEBAAAAAAAFEgAAAAFdBwAAzhgAAAJBewAAAAoZAAByAAAARr8WAAAFASwAQgA5AEMAMgA2ADMA
QgBDADkARAA5ADYAOQA5ADAANgAzAEYAQQAzAEMARgAzAEMARQAzAEEARgBGAEQAOQAwAEYANAA0
ADgAMAA2AEMAOAAuAGMAZQByAAaUGQAABQEEAGQAYQBuAG8AA0GRAAAA5hkAAIgAAABGvxYAAAUB
LAAxADcANgAxAEYAMgA2AEUAQgAwADgAMgA0ADcAMABGADQANABCADIANwA4AEUAQgA2ADIARgBE
ADgAMwAxADkARgAzAEQARQAyADAAMQA4AC4AYwBlAHIABpQZAAAFAQ8AcwBlAGMAdQByAGUAcwB1
AGIALQBEAEMALQBDAEEAA0EUAAAA6hEAAAsAAAAGBxIAAAUBAQAwAANBjgAAAC4bAACFAAAARmkb
AAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMwA6ADUAMwAuADkAOAAxAFoARr4b
AAAFARgAMgAwADEAMgAtADAANwAtADIAMABUADEAOQA6ADQAMwA6ADUAMwAuADkAOAAxAFoABhcc
AAAFAQUAUABUADEANQBTAANBSQAAAF8cAABAAAAARpIcAAAFAQEAMABGAhUAAAUBAQAwAEa8HAAA
BQEBADAABt0cAAAFAQsAUAAxAEQAVAAyAEgANAA4AE0AOQBTAANBVQIAANjtAAD7vgAAE4UZAEMA
ZQByAHQAaQBmAGkAYwBhAHQAZQBSAGUAdgBvAGMAYQB0AGkAbwBuAEwAaQBzAHQAAAAQAgAARjQd
AAAFAQgAVAB2AG8AQwBhAGMAaABlAEZnHQAABQGzAGwAZABhAHAAOgAvAC8ALwBDAE4APQBzAGUA
YwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAsAEMATgA9AEQAQwAsAEMATgA9AEMARABQACwAQwBO
AD0AUAB1AGIAbABpAGMAJQAyADAASwBlAHkAJQAyADAAUwBlAHIAdgBpAGMAZQBzACwAQwBOAD0A
UwBlAHIAdgBpAGMAZQBzACwAQwBOAD0AQwBvAG4AZgBpAGcAdQByAGEAdABpAG8AbgAsAEQAQwA9
AHMAZQBjAHUAcgBlAHMAdQBiACwARABDAD0AbgBlAHQAPwBjAGUAcgB0AGkAZgBpAGMAYQB0AGUA
UgBlAHYAbwBjAGEAdABpAG8AbgBMAGkAcwB0AD8AYgBhAHMAZQA/AG8AYgBqAGUAYwB0AEMAbABh
AHMAcwA9AGMAUgBMAEQAaQBzAHQAcgBpAGIAdQB0AGkAbwBuAFAAbwBpAG4AdABGvxYAAAUBLABG
ADgAMwA2ADQARgBEAEIANgAwAEYANwA1ADEARgA3ADMAQwA2AEIANAAxADcAQwBBADEAQwA2AEYA
OAA1ADgAQQAwADAAMgA1ADIAMwAzAC4AYwByAGwABu8eAAAFAQ8AcwBlAGMAdQByAGUAcwB1AGIA
LQBEAEMALQBDAEEAA0E4AgAA2O0AAC8CAABGO/AAAG9hAAAl1ggAZABlAGwAdABhAEMAUgBMAAAA
BQEEAHQAcgB1AGUARjQdAAAFAQgAVAB2AG8AQwBhAGMAaABlAEZnHQAABQGtAGwAZABhAHAAOgAv
AC8ALwBDAE4APQBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQAsAEMATgA9AEQAQwAsAEMA
TgA9AEMARABQACwAQwBOAD0AUAB1AGIAbABpAGMAJQAyADAASwBlAHkAJQAyADAAUwBlAHIAdgBp
AGMAZQBzACwAQwBOAD0AUwBlAHIAdgBpAGMAZQBzACwAQwBOAD0AQwBvAG4AZgBpAGcAdQByAGEA
dABpAG8AbgAsAEQAQwA9AHMAZQBjAHUAcgBlAHMAdQBiACwARABDAD0AbgBlAHQAPwBkAGUAbAB0
AGEAUgBlAHYAbwBjAGEAdABpAG8AbgBMAGkAcwB0AD8AYgBhAHMAZQA/AG8AYgBqAGUAYwB0AEMA
bABhAHMAcwA9AGMAUgBMAEQAaQBzAHQAcgBpAGIAdQB0AGkAbwBuAFAAbwBpAG4AdABGvxYAAAUB
LAA1ADAANgBFADQARgBFADcARgBCAEYAMQA2AEEARABFADYANQBBAEIARAAwADgAQgA1ADIAOAA3
ADEARQA1ADkAOAA4AEQAMwA2AEEAOQA4AC4AYwByAGwABu8eAAAFAQ8AcwBlAGMAdQByAGUAcwB1
AGIALQBEAEMALQBDAEEAA0EkAAAAmwgAABsAAAAGxggAAAUBCQBsAHMAYQBzAHMALgBlAHgAZQAD
QWkAAAAMCQAAYAAAAEZDCQAABQEmAHsAQQAyADQANgA5ADgAOQBGAC0ANwA3ADUAMwAtADQANgA5
ADYALQBCADcANgA5AC0ARQBCADYANAA2ADgANAAyADgANgBDADMAfQAGrgkAAAUBAQAzAANBFAAA
ANsXAAALAAAABgcSAAAFAQEAMAADBAAAZABDGAgAAABGKRUEAEcAdQBpAGQAAAAFASYAewAxAA8B
AQAMAWaPr6smAgAAFAAAAAEABAABAAQAAgAGAAIABgAAAAAACAAVAAgAEQAAAAAABAAIAAQACAAI
AAoAAQAEAAwAEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYwBlBABaAFoAAAIAAAAAAECnwJD+
r2bNAewBAAA4HAAAuT4KAAAAAAAAAQEAAAAAAAUSAAAAAQAAAAamNwAAAkH9AwAAChkAAIgAAABG
vxYAAAUBLAAxADcANgAxAEYAMgA2AEUAQgAwADgAMgA0ADcAMABGADQANABCADIANwA4AEUAQgA2
ADIARgBEADgAMwAxADkARgAzAEQARQAyADAAMQA4AC4AYwBlAHIABpQZAAAFAQ8AcwBlAGMAdQBy
AGUAcwB1AGIALQBEAEMALQBDAEEAAgFpAAAAZjgAAAIBKAAAAIg4AAACBQEPAHMAZQBjAHUAcgBl
AHMAdQBiAC0ARABDAC0AQwBBAAQBHAAAAMM4AAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAA
AMM4AAACBQEDAG4AZQB0AAQEQXUAAAAIOQAAbAAAAEYzOQAABQEFAGYAYQBsAHMAZQAGYDkAAAUB
KAA3ADcAMwBFAEQANgA4ADAANQAxADYANgA2ADYANwAwAEYANgBGADIAMwBGAEIAMgA1ADEAOQBG
AEMAMQBCAEEAQwAyADEAOABDADQAQwBCAANBWgAAAEkpAABRAAAARkYjAAAFARQAMQAuADIALgA4
ADQAMAAuADEAMQAzADUANAA5AC4AMQAuADEALgA1AEaxKQAABQEEAFMASABBADEABtwpAAAFAQMA
UgBTAEEAA0FaAAAAFCoAAFEAAABGRiMAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkA
LgAxAC4AMQAuADEARtwpAAAFAQMAUgBTAEEABosqAAAFAQQAMgAwADQAOAADAWkAAACOOgAAAgEo
AAAAiDgAAAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAAwzgAAAIFAQkA
cwBlAGMAdQByAGUAcwB1AGIABAEQAAAAwzgAAAIFAQMAbgBlAHQABAQBSgAAABI7AAACBQEgADcA
MgA0ADMARAA2ADYARABCAEYARgBBADkAQgA5ADIANAAxAEEARAA3ADQARQA5ADgAQwA3ADYAQgBE
ADcAQgAEATIAAACDOwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMQA5AFQAMQA2ADoANQA1ADoAMwA3
AFoABAEyAAAA1jsAAAIFARQAMgAwADEANwAtADAANwAtADEAOQBUADEANwA6ADAANQA6ADMANQBa
AAQBlQAAACc8AAACQVoAAABPPAAAUQAAAEZyPAAABQEEAHQAcgB1AGUARgcSAAAFAQIAOAA2AEaq
PAAABQEEAHQAcgB1AGUARgU9AAAFAQQAdAByAHUAZQAGWD0AAAUBBAB0AHIAdQBlAANBKwAAAKY9
AAAiAAAARnI8AAAFAQQAdAByAHUAZQAG6j0AAAUBBAB0AHIAdQBlAAMEBEHeAgAA2O0AAJkAAABG
O/AAAAUBBAB0AHIAdQBlAEa/FgAABQEsADUAMAA2AEUANABGAEUANwBGAEIARgAxADYAQQBEAEUA
NgA1AEEAQgBEADAAOABCADUAMgA4ADcAMQBFADUAOQA4ADgARAAzADYAQQA5ADgALgBjAHIAbAAG
7x4AAAUBDwBzAGUAYwB1AHIAZQBzAHUAYgAtAEQAQwAtAEMAQQACAWkAAACOOgAAAgEoAAAAiDgA
AAIFAQ8AcwBlAGMAdQByAGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAAwzgAAAIFAQkAcwBlAGMA
dQByAGUAcwB1AGIABAEQAAAAwzgAAAIFAQMAbgBlAHQABAQBMgAAAHBHAAACBQEUADIAMAAxADIA
LQAwADcALQAxADkAVAAxADYAOgA1ADUAOgA0ADQAWgAEATIAAADFRwAAAgUBFAAyADAAMQAyAC0A
MAA3AC0AMgAxAFQAMAA1ADoAMQA1ADoANAA0AFoABAFaAQAAJzwAAAIBbQAAAL5CAAACQWIAAAD+
QgAAWQAAAAZgOQAABQEoADcANwAzAEUARAA2ADgAMAA1ADEANgA2ADYANgA3ADAARgA2AEYAMgAz
AEYAQgAyADUAMQA5AEYAQwAxAEIAQQBDADIAMQA4AEMANABDAEIAAwQBKgAAAOH5AAC+GwAAZm4J
AEMAUgBMAE4AdQBtAGIAZQByAAAAAgUBAgAwADEABAFaAAAAEPoAABUEAACpVg8ATgBlAHgAdABQ
AHUAYgBsAGkAcwBoAFQAaQBtAGUAAAACBQEUADIAMAAxADIALQAwADcALQAyADAAVAAxADcAOgAw
ADUAOgA0ADQAWgAEQU8AAABv+gAAbmIAAIrQEQBEAGUAbAB0AGEAQwBSAEwASQBuAGQAaQBjAGEA
dABvAHIAAAARAAAABnI8AAAFAQQAdAByAHUAZQACBQECADAAMQAEBARBNQIAANjtAACIAAAARr8W
AAAFASwARgA4ADMANgA0AEYARABCADYAMABGADcANQAxAEYANwAzAEMANgBCADQAMQA3AEMAQQAx
AEMANgBGADgANQA4AEEAMAAwADIANQAyADMAMwAuAGMAcgBsAAbvHgAABQEPAHMAZQBjAHUAcgBl
AHMAdQBiAC0ARABDAC0AQwBBAAIBaQAAAI46AAACASgAAACIOAAAAgUBDwBzAGUAYwB1AHIAZQBz
AHUAYgAtAEQAQwAtAEMAQQAEARwAAADDOAAAAgUBCQBzAGUAYwB1AHIAZQBzAHUAYgAEARAAAADD
OAAAAgUBAwBuAGUAdAAEBAEyAAAAcEcAAAIFARQAMgAwADEAMgAtADAANwAtADEAOQBUADEANgA6
ADUANQA6ADQANABaAAQBMgAAAMVHAAACBQEUADIAMAAxADIALQAwADcALQAyADcAVAAwADUAOgAx
ADUAOgA0ADQAWgAEAcIAAAAnPAAAAgFtAAAAvkIAAAJBYgAAAP5CAABZAAAABmA5AAAFASgANwA3
ADMARQBEADYAOAAwADUAMQA2ADYANgA2ADcAMABGADYARgAyADMARgBCADIANQAxADkARgBDADEA
QgBBAEMAMgAxADgAQwA0AEMAQgADBAEOAAAA4fkAAAIFAQIAMAAxAAQBMgAAABD6AAACBQEUADIA
MAAxADIALQAwADcALQAyADYAVAAxADcAOgAwADUAOgA0ADQAWgAEBARBYwBlAAoZAAByAAAARr8W
AAAFASwAQgA5AEMAMgA2ADMAQgBDADkARAA5ADYAOQA5ADAANgAzAEYAQQAzAEMARgAzAEMARQAz
AEEARgBGAEQAOQAwAEYANAA0ADgAMAA2AEMAOAAuAGMAZQByAAaUGQAABQEEAGQAYQBuAG8AAgFs
AAAAZjgAAAIBEgAAAIg4AAACBQEEAGQAYQBuAG8ABAEUAAAAiDgAAAIFAQUAVQBzAGUAcgBzAAQB
HAAAAMM4AAACBQEJAHMAZQBjAHUAcgBlAHMAdQBiAAQBEAAAAMM4AAACBQEDAG4AZQB0AAQEQXUA
AAAIOQAAbAAAAEYzOQAABQEFAGYAYQBsAHMAZQAGYDkAAAUBKAA0AEMAMwBGADYAMAAwADcAMQAx
ADQARQAyADEAMwA1ADEARQBGADcARgAzADIANgA1AEIAQwBEADEAMwBBAEUAOABCADQANAA5AEMA
RABBAANBWgAAAEkpAABRAAAARkYjAAAFARQAMQAuADIALgA4ADQAMAAuADEAMQAzADUANAA5AC4A
MQAuADEALgA1AEaxKQAABQEEAFMASABBADEABtwpAAAFAQMAUgBTAEEAA0FaAAAAFCoAAFEAAABG
RiMAAAUBFAAxAC4AMgAuADgANAAwAC4AMQAxADMANQA0ADkALgAxAC4AMQAuADEARtwpAAAFAQMA
UgBTAEEABosqAAAFAQQAMgAwADQAOAADAWkAAACOOgAAAgEoAAAAiDgAAAIFAQ8AcwBlAGMAdQBy
AGUAcwB1AGIALQBEAEMALQBDAEEABAEcAAAAwzgAAAIFAQkAcwBlAGMAdQByAGUAcwB1AGIABAEQ
AAAAwzgAAAIFAQMAbgBlAHQABAQBMgAAABI7AAACBQEUADEANQBBADIAQwBGAEQAOQAwADAAMAAw
ADAAMAAwADAAMAAwADEARQAEATIAAACDOwAAAgUBFAAyADAAMQAyAC0AMAA3AC0AMgAwAFQAMQA5
ADoAMAAxADoANAAyAFoABAEAAgAGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
--e89a8f234567e9f89804c54859bc--

From danbryan80@gmail.com  Fri Jul 20 14:00:38 2012
Return-Path: <danbryan80@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1F38411E80BE for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 14:00:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.597
X-Spam-Level: 
X-Spam-Status: No, score=-3.597 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, RCVD_IN_DNSWL_LOW=-1, WEIRD_PORT=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PUZpSsm1eUNn for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 14:00:36 -0700 (PDT)
Received: from mail-lb0-f172.google.com (mail-lb0-f172.google.com [209.85.217.172]) by ietfa.amsl.com (Postfix) with ESMTP id 6DE0E11E809A for <pkix@ietf.org>; Fri, 20 Jul 2012 14:00:35 -0700 (PDT)
Received: by lbbgo11 with SMTP id go11so6063026lbb.31 for <pkix@ietf.org>; Fri, 20 Jul 2012 14:01:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=oKod0mlRXIW8IDOyp8YDNXAmVWhKbDuisrhrFedYGAA=; b=zYjzbJQAgTAaB7zbZoLVtpToFdcZfcURaqv4xvm77fA9+3m3XWo2dxv05q+1Wo9MmF ZeancnEwG6eVkJ7y1vSfoHnO6g+EPniCII/CyircLa2M2/gPHhogwiJ/uJ+Xh2k0yM34 JTtlodOPizmOJFOMQW7ogwFcHC5l/KF4jq7Pbd6rGCoonT85WJgBVXJ0WBt2tppsg5PL 9tLiRcIrcy9cwII4ZdKGOA9fYZlX4S3PpRqXXvZhnx6czrX3TVOsboWFYbHNfhYSXktv NrJ9tOtT6SItFNH4pygbAWv43qyN3vLdv1/ynTFLEe/xP/fO3NmioeX8fmeJ0rM7NuhG x8ew==
MIME-Version: 1.0
Received: by 10.112.54.37 with SMTP id g5mr3578182lbp.104.1342818090740; Fri, 20 Jul 2012 14:01:30 -0700 (PDT)
Received: by 10.114.37.73 with HTTP; Fri, 20 Jul 2012 14:01:30 -0700 (PDT)
In-Reply-To: <CAJKvcBTsBj+Opj257npOpWo7o75rHaM6bUU_jK1wOVuSb6Loow@mail.gmail.com>
References: <CAJKvcBS2YcE_mGw9Bi6wYf-6i==xmQ3K9FfXc2JCyvQZZ_042A@mail.gmail.com> <CAMm+LwgT+QfTG7KCRH203-PV2EMc-4tMvnFOz0jCJjVgeDznzg@mail.gmail.com> <CAJKvcBRa29M9gvQ5meys2UjC-NSgQudE=PEvFL4uPr8Og2rYKQ@mail.gmail.com> <CA+i=0E4hJzoyPqZva_CJ=+wCF9hwwLJ2KomCAqbFhv1CKrcV_Q@mail.gmail.com> <CAJKvcBQBky22rC-B44ra2f6=wZ7gYKX5fFZws3e4LJ2SgMsR0g@mail.gmail.com> <CA+i=0E5UakXNMu9FtTU+U8N=WpwvqV0zhU4c2=scDihUowWjfg@mail.gmail.com> <CAJKvcBS=VZtJ32RmTtp8iM8cABUhJtnvm1bLoVpHa4QmqFz5Jg@mail.gmail.com> <CAJKvcBTsBj+Opj257npOpWo7o75rHaM6bUU_jK1wOVuSb6Loow@mail.gmail.com>
Date: Fri, 20 Jul 2012 17:01:30 -0400
Message-ID: <CAJKvcBRmFXWdkhKH-pRGN8Ud7Mcnr30w2YNqQY-x6TthRE33jA@mail.gmail.com>
From: daniel bryan <danbryan80@gmail.com>
To: Erwann Abalea <eabalea@gmail.com>
Content-Type: multipart/related; boundary=bcaec55401c64beeaf04c5493313
Cc: pkix@ietf.org
Subject: Re: [pkix] OCSP POST vs GET
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Jul 2012 21:00:38 -0000

--bcaec55401c64beeaf04c5493313
Content-Type: multipart/alternative; boundary=bcaec55401c64beea204c5493312

--bcaec55401c64beea204c5493312
Content-Type: text/plain; charset=ISO-8859-1

One final note...

the 4 most recent requests were done with windows CAPI (it looks like its
encoded).  The others were done with the actividentity CAPI plugin (with
all the successes).

[image: Inline image 1]

On Fri, Jul 20, 2012 at 4:00 PM, daniel bryan <danbryan80@gmail.com> wrote:

> So I managed to get rid of the OCSP_MALFORMED_REQUEST_RESPONSE error in
> the logs by reissuing all certs with the only entry in AIA being "
> http://192.168.0.22" I deleted the ldap:///CN= entry that was included in
> the AIA extension.
>
> I think I have almost got rid of all the errors by doing that. currently
> there is only one error...
>
>
> Current status:
>
> using native windows I am able to use a revoked certificate to access a
> website due to the fact that it says the revocation server is offline" and
> it seems to "fail open" allowing me access when I shouldnt be allowed.
>
> Yet, using the actividentity plugin, it is able to intercept
> and communicate with the OCSP server and identifies the certificate as
> revoked and denys the users from accessing the website.
>
> Would someone kindly look at my 2 attached event logs and help me
> determine why windows believes the revocation server is
> offline? Basically a revoked user called dano, is attempting to
> authenticate to mail.securesub.net (which is a SLL cert required
> website/). I expect him to be denied in both conditions.
>
>
>
> On Fri, Jul 20, 2012 at 2:44 PM, daniel bryan <danbryan80@gmail.com>wrote:
>
>> Thanks for all the responses.  So the certificate does in deed have "
>> http://192.168.0.22:3502/ " , but the screen shot of the CA shows the
>> AIA to be " http://192.168.0.22:3502"
>>
>> I am unsure on how to remove the / from the issued certificate.
>>
>>
>>
>> On Fri, Jul 20, 2012 at 2:14 PM, Erwann Abalea <eabalea@gmail.com> wrote:
>>
>>> The screenshot doesn't show enough information.
>>>
>>> The attached certificate has this OCSP URL: http://192.168.0.22:3502/
>>> A trailing '/'. Remove it, get a new certificate, and try it.
>>>
>>> 2012/7/20 daniel bryan <danbryan80@gmail.com>
>>>
>>>> Thanks,
>>>>
>>>> I noticed my AIA does not have a / on the CA , but it does on the cert
>>>> the CA issued.  See screen shots.  Any thoughts?
>>>>
>>>> On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <eabalea@gmail.com>wrote:
>>>>
>>>>> The "malformedRequest" response is the 5 bytes response it received
>>>>> (the 5 at the end is the body size of the response).
>>>>>
>>>>> There's an extra leading '/' in the request. It may come from an extra
>>>>> trailing '/' at the OCSP URL. Check your certificates, read the
>>>>> authorityInfoAccess extension.
>>>>>
>>>>> RFC2560 states this:
>>>>>
>>>>> [...]
>>>>> GET {url}/{url-encoding of base-64 encoding of the DER encoding of
>>>>>    the OCSPRequest}
>>>>> [...]
>>>>>
>>>>> If your OCSP URL contains a trailing '/', the client will add one, and
>>>>> you'll come up with 2, that's what you get here.
>>>>>
>>>>> Ignoring the heading '/' gives a valid request, for an issuerKeyHash
>>>>> equal to a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:ef:58:bd:c9:28:99 and a
>>>>> serial number equal to 61BBD2FB000000000006 (in hex).
>>>>>
>>>>> 2012/7/20 daniel bryan <danbryan80@gmail.com>
>>>>>
>>>>>> So talking with the actividentity engineer it seems that the
>>>>>> responder is giving an HTTP 200 code to the get Request.
>>>>>>
>>>>>> 192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] "GET
>>>>>> //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgFFmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D
>>>>>> HTTP/1.1" 200 5
>>>>>>
>>>>>> yet, IIS recieved a malformed OCSP response.  Is there a way to see
>>>>>> the response that IIS rfecieved and determine why its malformed?
>>>>>>
>>>>>
>>> --
>>> Erwann.
>>>
>>
>>
>>
>> --
>> Dan Bryan
>> danbryan80@gmail.com
>> 443 333 1147
>>
>>
>
>
> --
> Dan Bryan
> danbryan80@gmail.com
> 443 333 1147
>
>


-- 
Dan Bryan
danbryan80@gmail.com
443 333 1147

--bcaec55401c64beea204c5493312
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">One f=
inal note...</font></font></font><div><font face=3D"comic sans ms, sans-ser=
if"><br></font></div><div><font face=3D"comic sans ms, sans-serif">the 4 mo=
st recent requests were done with windows CAPI (it looks like its encoded).=
 =A0The others were done with the actividentity CAPI plugin (with all the s=
uccesses).<br>
</font><div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-=
serif"><br></font></font></font></div><div><font color=3D"#000000"><font><f=
ont face=3D"comic sans ms,sans-serif"><img src=3D"cid:ii_138a630a6562b3db" =
alt=3D"Inline image 1"><br>
</font></font></font><br><div class=3D"gmail_quote">On Fri, Jul 20, 2012 at=
 4:00 PM, daniel bryan <span dir=3D"ltr">&lt;<a href=3D"mailto:danbryan80@g=
mail.com" target=3D"_blank">danbryan80@gmail.com</a>&gt;</span> wrote:<br><=
blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px=
 #ccc solid;padding-left:1ex">
<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">So I =
managed to get rid of the OCSP_MALFORMED_REQUEST_RESPONSE error in the logs=
 by reissuing all certs with the only entry in AIA being &quot;<a href=3D"h=
ttp://192.168.0.22" target=3D"_blank">http://192.168.0.22</a>&quot; I delet=
ed the ldap:///CN=3D entry that was included in the AIA extension.</font></=
font></font><div>

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br><=
/font></font></font></div><div><font color=3D"#000000"><font><font face=3D"=
comic sans ms,sans-serif">I think I have almost got rid of all the errors b=
y doing that. currently there is only one error...</font></font></font></di=
v>

<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif"><br></font></font></font></div><div><font co=
lor=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">Current statu=
s:</font></font></font></div>

<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">using native windows I am able to use a revo=
ked certificate to access a website due to the fact that it says the revoca=
tion server is offline&quot; and it seems to &quot;fail open&quot; allowing=
 me access when I shouldnt be allowed.</font></font></font></div>

<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">Yet, using the actividentity plugin, it is a=
ble to intercept and=A0communicate=A0with the OCSP server and identifies th=
e certificate as revoked and denys the users from accessing the website.</f=
ont></font></font></div>

<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">Would someone kindly look at my 2 attached e=
vent logs and help me determine why windows believes the revocation server =
is offline?=A0Basically=A0a revoked user called dano, is attempting to auth=
enticate to <a href=3D"http://mail.securesub.net" target=3D"_blank">mail.se=
curesub.net</a> (which is a SLL cert required website/). I expect him to be=
 denied in both conditions.</font></font></font></div>
<div class=3D"HOEnZb"><div class=3D"h5">
<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif"><br></font></font></font><br><div class=3D"g=
mail_quote">

On Fri, Jul 20, 2012 at 2:44 PM, daniel bryan <span dir=3D"ltr">&lt;<a href=
=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a>=
&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0=
 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">

<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">Thank=
s for all the responses. =A0So the certificate does in deed have &quot;</fo=
nt></font></font>
<a href=3D"http://192.168.0.22:3502/" target=3D"_blank">http://192.168.0.22=
:3502/</a>=A0&quot; , but the screen shot of the CA shows the AIA to be &qu=
ot;
<a href=3D"http://192.168.0.22:3502/" target=3D"_blank">http://192.168.0.22=
:3502</a>&quot;<div><font color=3D"#000000"><font><br></font></font></div><=
div><font color=3D"#000000"><font>I am unsure on how to remove the / from t=
he issued certificate.</font></font></div>


<div><font color=3D"#000000"><font><br></font></font></div><div><div><div><=
font color=3D"#000000"><font><br></font></font><br><div class=3D"gmail_quot=
e">On Fri, Jul 20, 2012 at 2:14 PM, Erwann Abalea <span dir=3D"ltr">&lt;<a =
href=3D"mailto:eabalea@gmail.com" target=3D"_blank">eabalea@gmail.com</a>&g=
t;</span> wrote:<br>


<blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1p=
x #ccc solid;padding-left:1ex">The screenshot doesn&#39;t show enough infor=
mation.<div><br></div><div>The attached certificate has this OCSP URL: <a h=
ref=3D"http://192.168.0.22:3502/" target=3D"_blank">http://192.168.0.22:350=
2/</a></div>


<div>A trailing &#39;/&#39;.=A0Remove it, get a new certificate, and try it=
.</div>
<div><div><div><br><div class=3D"gmail_quote">2012/7/20 daniel bryan <span =
dir=3D"ltr">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">d=
anbryan80@gmail.com</a>&gt;</span><br><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">



<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">Thank=
s,</font></font></font><div><font color=3D"#000000"><font><font face=3D"com=
ic sans ms,sans-serif"><br></font></font></font></div><div><font color=3D"#=
000000"><font><font face=3D"comic sans ms,sans-serif">I noticed my AIA does=
 not have a / on the CA , but it does on the cert the CA issued. =A0See scr=
een shots. =A0Any thoughts?</font></font></font></div>



<div><div><div><br><div class=3D"gmail_quote">
On Fri, Jul 20, 2012 at 1:16 PM, Erwann Abalea <span dir=3D"ltr">&lt;<a hre=
f=3D"mailto:eabalea@gmail.com" target=3D"_blank">eabalea@gmail.com</a>&gt;<=
/span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8=
ex;border-left:1px #ccc solid;padding-left:1ex">




<div>The &quot;malformedRequest&quot; response is the 5 bytes response it r=
eceived (the 5 at the end is the body size of the response).</div><div><br>=
</div><div>There&#39;s an extra leading &#39;/&#39; in the request. It may =
come from an extra trailing &#39;/&#39; at the OCSP URL. Check your certifi=
cates, read the authorityInfoAccess extension.</div>





<div><br></div><div>RFC2560 states this:</div><div><br></div><div>[...]</di=
v><div><div>GET {url}/{url-encoding of base-64 encoding of the DER encoding=
 of</div><div>=A0 =A0the OCSPRequest}</div></div>[...]<div><br></div><div>




If your OCSP URL contains a trailing &#39;/&#39;, the client will add one, =
and you&#39;ll come up with 2, that&#39;s what you get here.</div>
<div><br></div><div>Ignoring the heading &#39;/&#39; gives a valid request,=
 for an issuerKeyHash equal to=A0a2:da:76:5d:d3:8d:9b:a4:76:c0:ef:84:f1:ea:=
ef:58:bd:c9:28:99 and a serial number equal to 61BBD2FB000000000006 (in hex=
).</div>





<div><br><div class=3D"gmail_quote">2012/7/20 daniel bryan <span dir=3D"ltr=
">&lt;<a href=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80@=
gmail.com</a>&gt;</span><br><blockquote class=3D"gmail_quote" style=3D"marg=
in:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">





<font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">So ta=
lking with the actividentity engineer it seems that the responder is giving=
 an HTTP 200 code to the get Request.</font></font></font><div><font color=
=3D"#000000"><font><font face=3D"comic sans ms,sans-serif"><br>






</font></font></font></div><div><font color=3D"#000000"><font><font face=3D=
"comic sans ms,sans-serif">192.168.0.4 - - [20/Jul/2012:12:30:39 -0400] &qu=
ot;GET //MEswSTBHMEUwQzAJBgUrDgMCGgUABBSi2nZd042bpHbA74Tx6u9YvckomQQUdz7WgF=
FmZnD28j%2ByUZ%2FBusIYxMsCCmG70vsAAAAAAAY%3D HTTP/1.1&quot; 200 5</font></f=
ont></font></div>






<div><font color=3D"#000000"><font><font face=3D"comic sans ms,sans-serif">=
<br></font></font></font></div><div><font color=3D"#000000"><font><font fac=
e=3D"comic sans ms,sans-serif">yet, IIS recieved a malformed OCSP response.=
 =A0Is there a way to see the response that IIS rfecieved and determine why=
 its malformed?</font></font></font></div>



</blockquote></div></div></blockquote></div></div></div></div></blockquote>=
</div><div><br></div></div><span><font color=3D"#888888">-- <br>Erwann.<br>
</font></span></div></div>
</blockquote></div><br><br clear=3D"all"><div><br></div></div></div><div>--=
 <br><font face=3D"georgia, serif" color=3D"#000099" size=3D"4">Dan Bryan</=
font><div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a hre=
f=3D"mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a=
></font></div>


<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"=
tel:443%20333%201147" value=3D"+14433331147" target=3D"_blank">443 333 1147=
</a></font></div><br>
</div></div>
</blockquote></div><br><br clear=3D"all"><div><br></div>-- <br><font face=
=3D"georgia, serif" color=3D"#000099" size=3D"4">Dan Bryan</font><div><font=
 color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"mailto:dan=
bryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a></font></div>

<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"=
tel:443%20333%201147" value=3D"+14433331147" target=3D"_blank">443 333 1147=
</a></font></div><br>
</div>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>=
<font face=3D"georgia, serif" color=3D"#000099" size=3D"4">Dan Bryan</font>=
<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4"><a href=3D"=
mailto:danbryan80@gmail.com" target=3D"_blank">danbryan80@gmail.com</a></fo=
nt></div>
<div><font color=3D"#000099" face=3D"georgia, serif" size=3D"4">443 333 114=
7</font></div><br>
</div></div>

--bcaec55401c64beea204c5493312--
--bcaec55401c64beeaf04c5493313
Content-Type: image/png; name="image.png"
Content-Transfer-Encoding: base64
Content-ID: <ii_138a630a6562b3db>
X-Attachment-Id: ii_138a630a6562b3db
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--bcaec55401c64beeaf04c5493313--

From paul.hoffman@vpnc.org  Fri Jul 20 17:45:47 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AB9C11E808D for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 17:45:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.578
X-Spam-Level: 
X-Spam-Status: No, score=-102.578 tagged_above=-999 required=5 tests=[AWL=0.021, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hHsXCpA9JMI8 for <pkix@ietfa.amsl.com>; Fri, 20 Jul 2012 17:45:47 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id E72D511E8087 for <pkix@ietf.org>; Fri, 20 Jul 2012 17:45:46 -0700 (PDT)
Received: from [10.20.30.102] (50-1-50-97.dsl.dynamic.fusionbroadband.com [50.1.50.97]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6KNtOV1062868 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Fri, 20 Jul 2012 16:55:25 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=us-ascii
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <50094E05.6000500@ieca.com>
Date: Fri, 20 Jul 2012 17:46:37 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <D5EC8A9D-DF5A-4D00-8C5A-F98E1639FA65@vpnc.org>
References: <p06240804cc064804b5f2@[128.89.89.227]> <50094E05.6000500@ieca.com>
To: Sean Turner <turners@ieca.com>
X-Mailer: Apple Mail (2.1278)
Cc: pkix@ietf.org
Subject: Re: [pkix] My proposal was: Re: new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 21 Jul 2012 00:45:47 -0000

On Jul 20, 2012, at 5:24 AM, Sean Turner wrote:

> Having watched this issue play out based on a request in my AD review =
back in 2011-08-02 (yep that's about a year ago), here's my proposal:
>=20
>  Remove the proposed updates for s3.2 to RFC 5280 (i.e.,
>  delete s2 entirely from the draft).
>=20
> AD's don't get everything they want ;)  I think it's time to get the =
text that has consensus published.

Please: no. Instead, the chairs could be more active about building =
consensus. The current method (let topics wander around without specific =
consensus calls) hasn't worked, but other methods probably will.

And it is not just for what ADs want here: this was a very real problem =
that caused a lot of wasted time in a different WG (DANE), and could =
absolutely affect other WGs in the future (tls and httpbis).

--Paul Hoffman=

From turners@ieca.com  Sun Jul 22 20:14:17 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0AA3E21F869D for <pkix@ietfa.amsl.com>; Sun, 22 Jul 2012 20:14:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.265
X-Spam-Level: 
X-Spam-Status: No, score=-102.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wfHjy0JvmvM5 for <pkix@ietfa.amsl.com>; Sun, 22 Jul 2012 20:14:16 -0700 (PDT)
Received: from gateway16.websitewelcome.com (gateway16.websitewelcome.com [69.56.160.2]) by ietfa.amsl.com (Postfix) with ESMTP id 5EE6021F869C for <pkix@ietf.org>; Sun, 22 Jul 2012 20:14:13 -0700 (PDT)
Received: by gateway16.websitewelcome.com (Postfix, from userid 5007) id 78078BD4D82ED; Sun, 22 Jul 2012 22:14:13 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway16.websitewelcome.com (Postfix) with ESMTP id 69AC4BD4D82BD for <pkix@ietf.org>; Sun, 22 Jul 2012 22:14:13 -0500 (CDT)
Received: from [71.191.15.186] (port=36467 helo=thunderfish.local) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1St964-0002Cf-GR; Sun, 22 Jul 2012 22:14:12 -0500
Message-ID: <500CC183.3000402@ieca.com>
Date: Sun, 22 Jul 2012 23:14:11 -0400
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: Stefan Santesson <stefan@aaa-sec.com>
References: <CC2F5A7A.47F79%stefan@aaa-sec.com>
In-Reply-To: <CC2F5A7A.47F79%stefan@aaa-sec.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (thunderfish.local) [71.191.15.186]:36467
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 13
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Cc: pkix@ietf.org
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Jul 2012 03:14:17 -0000

Stefan,

In terms of figuring out what's changed in the draft, this version is 
much easier to follow.

The addition of the list of changes was definitely a good idea 
(definitely saved yourself a comment from me during AD review).

I haven't checked this but did you incorporate the verified errata and 
considered the HFDU (hold for document update) errata?

spt

On 7/20/12 1:07 PM, Stefan Santesson wrote:
> All,
>
> I finally got to tackle the update of RFC2560bis document.
>
> At the last ITEF/PKIX meeting we concluded that this effort needs a restart.
> The changes in the 04 draft compared to the original document are so
> extensive that it is hard to make sure that the update is actually
> compatible with the existing standard.
>
> I have therefore made a new draft almost from scratch, trying to change
> as little as possible compared to RFC 2560.
>
> The new draft is available here:
> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_02.txt
>
> A diff compared to RFC 2560 is available here:
> http://tinyurl.com/rfc2560bis05diff
>
> The list of changes (this list is included in the draft) is:
>
> This document differs from RFC 2560 in only a few areas:
>
>     o  Section 4.1.1 specifies the ASN.1 syntax for the nonce
>        extension, which was missing in RFC 2560.
>
>     o  Section 4.4.7 specifies a new extension that may be included in
>        a request message to specify signature algorithms the client
>        would prefer the server use to sign the response as specified
>        in [RFC6277].
>
>     o  Section 2.3 extends the use of the "unauthorized" error
>        response, as specified in [RFC5019].
>
>     o  Section 4.2.1 and 4.2.2.3 states that a response may include
>        revocation status information for certificates that were not
>        included in the request, as permitted in [RFC5019].
>
>     o  Section 4.3 changes set of cryptographic algorithms that
>        clients must support and the set of cryptographic algorithms
>        that clients should support as specified in [RFC6277].
>
>     o Section 4.2.2.2 has been updated to clarify when a responder is
>        considered an Authorized Responder.
>
>
>
> Section headings and numbering are as much as possible kept intact from
> RFC 2560.
> The ASN-1 modules are imported form rfc2560bis draft 04.
>
> What important updates did I miss to cover in this draft?
>
> If this is considered a good starting point for a restarted draft
> effort, then I will publish this as draft 05 as soon as the draft
> submission is re-opened.
>
> /Stefan
>
>
>
>
>
>

From stefan@aaa-sec.com  Mon Jul 23 03:11:49 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B923221F84F3 for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 03:11:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.341
X-Spam-Level: 
X-Spam-Status: No, score=-101.341 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yC1UmbzYYu3Y for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 03:11:49 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id A8D0E21F86B0 for <pkix@ietf.org>; Mon, 23 Jul 2012 03:11:47 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 04F9421BACBD for <pkix@ietf.org>; Mon, 23 Jul 2012 12:11:43 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id b6A13yY82wMQ for <pkix@ietf.org>; Mon, 23 Jul 2012 12:11:42 +0200 (CEST)
Received: from s326.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 9CA5521BAE03 for <pkix@ietf.org>; Mon, 23 Jul 2012 12:11:42 +0200 (CEST)
Received: (qmail 75240 invoked from network); 23 Jul 2012 10:11:41 -0000
Received: from 2-248-142-230-no39.business.telia.com (HELO [192.168.1.12]) (stefan@fiddler.nu@[2.248.142.230]) (envelope-sender <stefan@aaa-sec.com>) by s326.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <turners@ieca.com>; 23 Jul 2012 10:11:41 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 23 Jul 2012 12:11:38 +0200
From: Stefan Santesson <stefan@aaa-sec.com>
To: Sean Turner <turners@ieca.com>
Message-ID: <CC32EF61.48084%stefan@aaa-sec.com>
Thread-Topic: RFC2560bis update
In-Reply-To: <500CC183.3000402@ieca.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Cc: pkix@ietf.org
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Jul 2012 10:11:49 -0000

Sean,

Good point,

I actually forgot to process the erratas. I'll go ahead and do that and
will put up a new version.

/Stefan

On 12-07-23 5:14 AM, "Sean Turner" <turners@ieca.com> wrote:

>Stefan,
>
>In terms of figuring out what's changed in the draft, this version is
>much easier to follow.
>
>The addition of the list of changes was definitely a good idea
>(definitely saved yourself a comment from me during AD review).
>
>I haven't checked this but did you incorporate the verified errata and
>considered the HFDU (hold for document update) errata?
>
>spt
>
>On 7/20/12 1:07 PM, Stefan Santesson wrote:
>> All,
>>
>> I finally got to tackle the update of RFC2560bis document.
>>
>> At the last ITEF/PKIX meeting we concluded that this effort needs a
>>restart.
>> The changes in the 04 draft compared to the original document are so
>> extensive that it is hard to make sure that the update is actually
>> compatible with the existing standard.
>>
>> I have therefore made a new draft almost from scratch, trying to change
>> as little as possible compared to RFC 2560.
>>
>> The new draft is available here:
>> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_02.txt
>>
>> A diff compared to RFC 2560 is available here:
>> http://tinyurl.com/rfc2560bis05diff
>>
>> The list of changes (this list is included in the draft) is:
>>
>> This document differs from RFC 2560 in only a few areas:
>>
>>     o  Section 4.1.1 specifies the ASN.1 syntax for the nonce
>>        extension, which was missing in RFC 2560.
>>
>>     o  Section 4.4.7 specifies a new extension that may be included in
>>        a request message to specify signature algorithms the client
>>        would prefer the server use to sign the response as specified
>>        in [RFC6277].
>>
>>     o  Section 2.3 extends the use of the "unauthorized" error
>>        response, as specified in [RFC5019].
>>
>>     o  Section 4.2.1 and 4.2.2.3 states that a response may include
>>        revocation status information for certificates that were not
>>        included in the request, as permitted in [RFC5019].
>>
>>     o  Section 4.3 changes set of cryptographic algorithms that
>>        clients must support and the set of cryptographic algorithms
>>        that clients should support as specified in [RFC6277].
>>
>>     o Section 4.2.2.2 has been updated to clarify when a responder is
>>        considered an Authorized Responder.
>>
>>
>>
>> Section headings and numbering are as much as possible kept intact from
>> RFC 2560.
>> The ASN-1 modules are imported form rfc2560bis draft 04.
>>
>> What important updates did I miss to cover in this draft?
>>
>> If this is considered a good starting point for a restarted draft
>> effort, then I will publish this as draft 05 as soon as the draft
>> submission is re-opened.
>>
>> /Stefan
>>
>>
>>
>>
>>
>>



From stefan@aaa-sec.com  Mon Jul 23 06:40:38 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6350421F867D for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 06:40:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.344
X-Spam-Level: 
X-Spam-Status: No, score=-101.344 tagged_above=-999 required=5 tests=[AWL=-0.508, BAYES_40=-0.185, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ASzYaB8T-B+x for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 06:40:38 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id CD42B21F85F9 for <pkix@ietf.org>; Mon, 23 Jul 2012 06:40:36 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id B34C921C92F4 for <pkix@ietf.org>; Mon, 23 Jul 2012 15:40:35 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id cmDQnqkz1eSS for <pkix@ietf.org>; Mon, 23 Jul 2012 15:40:32 +0200 (CEST)
Received: from s327.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id A793D21C93A4 for <pkix@ietf.org>; Mon, 23 Jul 2012 15:40:27 +0200 (CEST)
Received: (qmail 24386 invoked from network); 23 Jul 2012 13:40:27 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.2]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s327.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <pkix@ietf.org>; 23 Jul 2012 13:40:27 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 23 Jul 2012 15:40:33 +0200
From: Stefan Santesson <stefan@aaa-sec.com>
To: <pkix@ietf.org>
Message-ID: <CC3320B9.480D2%stefan@aaa-sec.com>
Thread-Topic: Agenda posed
In-Reply-To: <500CC183.3000402@ieca.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Subject: [pkix] Agenda posed
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Jul 2012 13:40:38 -0000

Agenda for Vancouver is up:
http://www.ietf.org/proceedings/84/agenda/agenda-84-pkix

Please let me know if I missed anything.

/Stefan



From stefan@aaa-sec.com  Mon Jul 23 07:23:32 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B02C121F8704 for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 07:23:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.298
X-Spam-Level: 
X-Spam-Status: No, score=-101.298 tagged_above=-999 required=5 tests=[AWL=-0.046, BAYES_00=-2.599, HELO_EQ_SE=0.35, HTML_MESSAGE=0.001, J_CHICKENPOX_43=0.6, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2OVLzHjOQ6g3 for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 07:23:29 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 54B3621F867D for <pkix@ietf.org>; Mon, 23 Jul 2012 07:23:27 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 08B8F21D1172 for <pkix@ietf.org>; Mon, 23 Jul 2012 16:22:29 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id lh4yM2fPNafI for <pkix@ietf.org>; Mon, 23 Jul 2012 16:22:23 +0200 (CEST)
Received: from s329.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 4FB7D21D10FF for <pkix@ietf.org>; Mon, 23 Jul 2012 16:22:23 +0200 (CEST)
Received: (qmail 65851 invoked from network); 23 Jul 2012 14:22:23 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.2]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s329.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <rybar@nbusr.sk>; 23 Jul 2012 14:22:23 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 23 Jul 2012 16:22:29 +0200
From: Stefan Santesson <stefan@aaa-sec.com>
To: Peter Rybar <rybar@nbusr.sk>, 'Sean Turner' <turners@ieca.com>, <DPKemp@missi.ncsc.mil>, <david.cooper@nist.gov>
Message-ID: <CC332A05.4812B%stefan@aaa-sec.com>
Thread-Topic: [pkix] RFC2560bis update - CertHash extension
In-Reply-To: <201207231312.q6NDCb4U027465@gw.nbusr.sk>
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3425905352_25506783"
Cc: pkix@ietf.org, daniela.jakubikova@nbusr.sk
Subject: Re: [pkix] RFC2560bis update - CertHash extension
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Jul 2012 14:23:32 -0000

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3425905352_25506783
Content-type: text/plain;
	charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable

Hi Peter,

My first though about this is that such extension should go into a separate
specification and not be included in the base specification, unless it is s=
o
widely used that is ought to go into the main spec.

I would like to hear from others.
I changed the title of the thread for discussion of this particular issue.

/Stefan


From:  Peter Rybar <rybar@nbusr.sk>
Date:  Monday, 23 July, 2012 3:12 PM
To:  Stefan Santesson <stefan@aaa-sec.com>, 'Sean Turner'
<turners@ieca.com>, <DPKemp@missi.ncsc.mil>, <david.cooper@nist.gov>
Cc:  <pkix@ietf.org>, <daniela.jakubikova@nbusr.sk>
Subject:  RE: [pkix] RFC2560bis update

> All,
> =20
> Is it possible to include already defined and widely used CertHash OCSP
> SingleResponse singleExtensions used as Positive Statement?
> =20
> RFC 2560 in part "2.2  Response" expects positive statement to be used bu=
t it
> is not defined in RFC 2560.
> " The "good" state indicates a positive response to the status inquiry.
>    At a minimum, this positive response indicates that the certificate
>    is not revoked, but does not necessarily mean that the certificate
>    was ever issued or that the time at which the response was produced
>    is within the certificate's validity interval. Response extensions
>    may be used to convey additional information on assertions made by
>    the responder regarding the status of the certificate such as
>    positive statement about issuance, validity, etc. "
> =20
> The CertHashextension (Positive Statement) is used in indirect OCSP respo=
nse
> as a positive statement that OCSP responder knows the status of the
> certificate and also provides the integrity protectionof the certificate =
if
> the certificate is already expired and algorithms used in the certificate
> could be weak. The CertHash extension (Positive Statement) adopted from C=
ommon
> PKI Optional SigG-Profile is designed to be included in the OCSP
> singleExtensions of SingleResponse(RFC 2560).
> =20
>    Common PKI Object Identifiers:     1.3.36.8.3.13
> =20
>   CertHash ::=3D SEQUENCE {
>       hashAlgorithm AlgorithmIdentifier,
>                  -- The identifier of the algorithm that has been used
>                  -- the hash value below.
>       certificateHash OCTET STRING
>                  -- The hash over DER-encoding of the entire PKC or AC
>                            --   (i.e. NOT a hash over tbsCertificate).
>   }
> =20
> It is on the page 9 in the presentation.
> http://files.lockitin.webnode.sk/200000078-00104010a3/12th%20Edition%20of=
%20th
> e%20Conference%20June%2004-06th%202012%20Poland.ppt
> =20
> There is also experimental extension which is on the page 10.
> =20
> The OCSP response with ProofOfExistence extension of signer=B9s signature c=
an be
> used as a secure time-mark with the same functionality as expected from t=
he
> signature time stamp. The ProofOfExistence extension is designed to be
> included in the singleRequestExtensions of OCSP(RFC 2560) and the same
> ProofOfExistence must be included in the singleExtensions of
> SingleResponse(RFC 2560).
> =20
>  Object Identifiers: 1.3.6.1.4.1.38655.1.4
>       ProofOfExistence ::=3D  SEQUENCE {
>            poEType  PoEType DEFAULT poESignerSignatureBinOctets,
>            poE MessageImprint
>        }
>        PoEType ::=3D  INTEGER  { poESignerSignatureBinOctets(0), poEAnyDATA=
(1) }
>       =20
>        MessageImprint ::=3D SEQUENCE  {    -- MessageImprint is defined in =
RFC
> 3161
>            hashAlgorithm               AlgorithmIdentifier,
>            hashedMessage                OCTET STRING
>        }
> =20
> =20
> Pete Rybar
> =20
> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of S=
tefan
> Santesson
> Sent: Monday, July 23, 2012 12:12 PM
> To: Sean Turner
> Cc: pkix@ietf.org
> Subject: Re: [pkix] RFC2560bis update
> =20
> Sean,
> =20
> Good point,
> =20
> I actually forgot to process the erratas. I'll go ahead and do that and
> will put up a new version.
> =20
> /Stefan
> =20
> On 12-07-23 5:14 AM, "Sean Turner" <turners@ieca.com> wrote:
> =20
>> >Stefan,
>> >=20
>> >In terms of figuring out what's changed in the draft, this version is
>> >much easier to follow.
>> >=20
>> >The addition of the list of changes was definitely a good idea
>> >(definitely saved yourself a comment from me during AD review).
>> >=20
>> >I haven't checked this but did you incorporate the verified errata and
>> >considered the HFDU (hold for document update) errata?
>> >=20
>> >spt
>> >=20
>> >On 7/20/12 1:07 PM, Stefan Santesson wrote:
>>> >> All,
>>> >>=20
>>> >> I finally got to tackle the update of RFC2560bis document.
>>> >>=20
>>> >> At the last ITEF/PKIX meeting we concluded that this effort needs a
>>> >>restart.
>>> >> The changes in the 04 draft compared to the original document are so
>>> >> extensive that it is hard to make sure that the update is actually
>>> >> compatible with the existing standard.
>>> >>=20
>>> >> I have therefore made a new draft almost from scratch, trying to cha=
nge
>>> >> as little as possible compared to RFC 2560.
>>> >>=20
>>> >> The new draft is available here:
>>> >> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_02.=
txt
>>> >>=20
>>> >> A diff compared to RFC 2560 is available here:
>>> >> http://tinyurl.com/rfc2560bis05diff
>>> >>=20
>>> >> The list of changes (this list is included in the draft) is:
>>> >>=20
>>> >> This document differs from RFC 2560 in only a few areas:
>>> >>=20
>>> >>     o  Section 4.1.1 specifies the ASN.1 syntax for the nonce
>>> >>        extension, which was missing in RFC 2560.
>>> >>=20
>>> >>     o  Section 4.4.7 specifies a new extension that may be included =
in
>>> >>        a request message to specify signature algorithms the client
>>> >>        would prefer the server use to sign the response as specified
>>> >>        in [RFC6277].
>>> >>=20
>>> >>     o  Section 2.3 extends the use of the "unauthorized" error
>>> >>        response, as specified in [RFC5019].
>>> >>=20
>>> >>     o  Section 4.2.1 and 4.2.2.3 states that a response may include
>>> >>        revocation status information for certificates that were not
>>> >>        included in the request, as permitted in [RFC5019].
>>> >>=20
>>> >>     o  Section 4.3 changes set of cryptographic algorithms that
>>> >>        clients must support and the set of cryptographic algorithms
>>> >>        that clients should support as specified in [RFC6277].
>>> >>=20
>>> >>     o Section 4.2.2.2 has been updated to clarify when a responder i=
s
>>> >>        considered an Authorized Responder.
>>> >>=20
>>> >>=20
>>> >>=20
>>> >> Section headings and numbering are as much as possible kept intact f=
rom
>>> >> RFC 2560.
>>> >> The ASN-1 modules are imported form rfc2560bis draft 04.
>>> >>=20
>>> >> What important updates did I miss to cover in this draft?
>>> >>=20
>>> >> If this is considered a good starting point for a restarted draft
>>> >> effort, then I will publish this as draft 05 as soon as the draft
>>> >> submission is re-opened.
>>> >>=20
>>> >> /Stefan
>>> >>=20
>>> >>=20
>>> >>=20
>>> >>=20
>>> >>=20
>>> >>=20
> =20
> =20
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix



--B_3425905352_25506783
Content-type: text/html;
	charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable

<html><head></head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: s=
pace; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size:=
 14px; font-family: Calibri, sans-serif; "><div>Hi Peter,</div><div><br></di=
v><div>My first though about this is that such extension should go into a se=
parate specification and not be included in the base specification, unless i=
t is so widely used that is ought to go into the main spec.</div><div><br></=
div><div>I would like to hear from others.</div><div>I changed the title of =
the thread for discussion of this particular issue.</div><div><br></div><div=
>/Stefan</div><div><br></div><div><br></div><span id=3D"OLK_SRC_BODY_SECTION">=
<div style=3D"font-family:Calibri; font-size:11pt; text-align:left; color:blac=
k; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in=
; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORD=
ER-RIGHT: medium none; PADDING-TOP: 3pt"><span style=3D"font-weight:bold">From=
: </span> Peter Rybar &lt;<a href=3D"mailto:rybar@nbusr.sk">rybar@nbusr.sk</a>=
&gt;<br><span style=3D"font-weight:bold">Date: </span> Monday, 23 July, 2012 3=
:12 PM<br><span style=3D"font-weight:bold">To: </span> Stefan Santesson &lt;<a=
 href=3D"mailto:stefan@aaa-sec.com">stefan@aaa-sec.com</a>&gt;, 'Sean Turner' =
&lt;<a href=3D"mailto:turners@ieca.com">turners@ieca.com</a>&gt;, &lt;<a href=3D=
"mailto:DPKemp@missi.ncsc.mil">DPKemp@missi.ncsc.mil</a>&gt;, &lt;<a href=3D"m=
ailto:david.cooper@nist.gov">david.cooper@nist.gov</a>&gt;<br><span style=3D"f=
ont-weight:bold">Cc: </span> &lt;<a href=3D"mailto:pkix@ietf.org">pkix@ietf.or=
g</a>&gt;, &lt;<a href=3D"mailto:daniela.jakubikova@nbusr.sk">daniela.jakubiko=
va@nbusr.sk</a>&gt;<br><span style=3D"font-weight:bold">Subject: </span> RE: [=
pkix] RFC2560bis update<br></div><div><br></div><blockquote id=3D"MAC_OUTLOOK_=
ATTRIBUTION_BLOCKQUOTE" style=3D"BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5=
; MARGIN:0 0 0 5;"><div xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn=
:schemas-microsoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:off=
ice:word" xmlns:p=3D"urn:schemas-microsoft-com:office:powerpoint" xmlns:oa=3D"ur=
n:schemas-microsoft-com:office:activation" xmlns:st1=3D"urn:schemas-microsoft-=
com:office:smarttags" xmlns=3D"http://www.w3.org/TR/REC-html40"><meta http-equ=
iv=3D"Content-Type" content=3D"text/html; charset=3Dutf-8"><meta name=3D"Generator" =
content=3D"Microsoft Word 11 (filtered medium)"><o:smarttagtype namespaceuri=3D"=
urn:schemas-microsoft-com:office:smarttags" name=3D"metricconverter"><!--[if !=
mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]--><style>
<!--
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
	{margin:0cm;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";}
@page Section1
	{size:595.3pt 841.9pt;
	margin:70.85pt 69.6pt 70.85pt 69.6pt;}
div.Section1
	{page:Section1;}
-->
</style><div lang=3D"SK" link=3D"blue" vlink=3D"purple"><div class=3D"Section1"><p =
class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" st=
yle=3D"font-size:10.0pt">All,<o:p></o:p></span></font></p><p class=3D"MsoPlainTe=
xt"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10=
.0pt"><o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D=
"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">Is it pos=
sible to include already defined and widely
used CertHash OCSP SingleResponse singleExtensions used as Positive Stateme=
nt? <o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=
=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;</o:p>=
</span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New">=
<span lang=3D"EN-US" style=3D"font-size:10.0pt">RFC <st1:metricconverter product=
id=3D"2560 in" w:st=3D"on">2560
 in</st1:metricconverter> part "2.2&nbsp; Response" expects positive
statement to be used but it is not defined in RFC 2560.<o:p></o:p></span></=
font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lan=
g=3D"EN-US" style=3D"font-size:10.0pt">"</span><span lang=3D"EN-US"> </span></font=
><span lang=3D"EN-US">The "good" state indicates a positive response to the
status inquiry.<o:p></o:p></span></p><p class=3D"MsoPlainText"><font size=3D"2"=
 face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&nbsp;&nbsp;=
 At a minimum, this positive response indicates that
the certificate<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font s=
ize=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&nbsp=
;&nbsp; is not revoked, <i><span style=3D"font-style:italic">but
does not necessarily mean that the certificate<o:p></o:p></span></i></span>=
</font></p><p class=3D"MsoPlainText"><i><font size=3D"2" face=3D"Courier New"><spa=
n lang=3D"EN-US" style=3D"font-size:10.0pt;font-style:italic">&nbsp;&nbsp; was e=
ver issued or that the time
at which the response was produced<o:p></o:p></span></font></i></p><p class=
=3D"MsoPlainText"><i><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" styl=
e=3D"font-size:10.0pt;font-style:italic">&nbsp;&nbsp; is within the certificat=
e's
validity interval</span></font></i><span lang=3D"EN-US">. <b><span style=3D"fon=
t-weight:bold">Response extensions<o:p></o:p></span></b></span></p><p class=3D=
"MsoPlainText"><b><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=
=3D"font-size:10.0pt;font-weight:bold">&nbsp;&nbsp; may be used to convey addi=
tional
information on assertions made by<o:p></o:p></span></font></b></p><p class=3D=
"MsoPlainText"><b><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=
=3D"font-size:10.0pt;font-weight:bold">&nbsp;&nbsp; the responder regarding th=
e status
of the certificate such as<o:p></o:p></span></font></b></p><p class=3D"MsoPla=
inText"><b><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-=
size:10.0pt;font-weight:bold">&nbsp;&nbsp; <font color=3D"red"><span style=3D"co=
lor:red">positive statement</span></font> about issuance, validity,
etc.</span></font></b><span lang=3D"EN-US"> "<o:p></o:p></span></p><p class=3D"=
MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"fo=
nt-size:10.0pt"><o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><=
font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"=
>The <b><span style=3D"font-weight:bold">CertHash</span></b><b><span style=3D"fo=
nt-weight:bold">extension</span></b> (Positive Statement) is
used in indirect OCSP response as a positive statement that OCSP responder =
<b><span style=3D"font-weight:bold">knows the status</span></b> of the certifi=
cate and
also provides the <b><span style=3D"font-weight:bold">integrity protection</s=
pan></b><b><span style=3D"font-weight:bold">of</span></b> the certificate if t=
he <b><span style=3D"font-weight:bold">certificate is already expired</span></=
b> and <b><span style=3D"font-weight:bold">algorithms</span></b> used in the c=
ertificate <b><span style=3D"font-weight:bold">could be weak</span></b>. The <=
b><span style=3D"font-weight:bold">CertHash</span></b> <b><span style=3D"font-we=
ight:bold">extension</span></b>
(Positive Statement) adopted from Common PKI Optional SigG-Profile is desig=
ned
to be included in the OCSP singleExtensions of SingleResponse(RFC 2560). <o=
:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Cour=
ier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;</o:p></span=
></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span =
lang=3D"EN-US" style=3D"font-size:10.0pt">&nbsp;&nbsp; Common PKI Object Identif=
iers:&nbsp;&nbsp;&nbsp;&nbsp; 1.3.36.8.3.13<o:p></o:p></span></font></p><p c=
lass=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" sty=
le=3D"font-size:10.0pt"><o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainT=
ext"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:1=
0.0pt">&nbsp; CertHash ::=3D SEQUENCE {<o:p></o:p></span></font></p><p class=3D"=
MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"fo=
nt-size:10.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; hashAlgorithm AlgorithmIdenti=
fier,<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" fac=
e=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
-- The identifier of the algorithm
that has been used <o:p></o:p></span></font></p><p class=3D"MsoPlainText"><fo=
nt size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp; -- the hash value below.<o:p></o:p></span></font></p><p class=
=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"=
font-size:10.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; certificateHash OCTET STRIN=
G<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"C=
ourier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&nbsp;&nbsp;&nbsp;&n=
bsp;&nbsp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; -- T=
he hash over DER-encoding of the
entire PKC or AC <o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font=
 size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&nb=
sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
; --&nbsp;&nbsp; (i.e. NOT a hash over
tbsCertificate).<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font =
size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&nbs=
p; }</span><o:p></o:p></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=
=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;</o:p>=
</span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New">=
<span lang=3D"EN-US" style=3D"font-size:10.0pt">It is on the page <st1:metriccon=
verter productid=3D"9 in" w:st=3D"on">9 in</st1:metricconverter> the presentatio=
n.<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"=
Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><a href=3D"http://fil=
es.lockitin.webnode.sk/200000078-00104010a3/12th%20Edition%20of%20the%20Conf=
erence%20June%2004-06th%202012%20Poland.ppt">http://files.lockitin.webnode.s=
k/200000078-00104010a3/12th%20Edition%20of%20the%20Conference%20June%2004-06=
th%202012%20Poland.ppt</a><o:p></o:p></span></font></p><p class=3D"MsoPlainTex=
t"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.=
0pt"><o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"=
2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">There is a=
lso experimental extension which is on the
page 10.<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2"=
 face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;<=
/o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier =
New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">The OCSP response with <b><=
span style=3D"font-weight:
bold">ProofOfExistence</span></b> extension of signer&#8217;s signature can=
 be used
as a secure time-mark with the <b><span style=3D"font-weight:bold">same
functionality </span></b>as expected from<b><span style=3D"font-weight:bold">=
 the
signature time stamp</span></b>. The ProofOfExistence extension is designed=
 to
be included in the singleRequestExtensions of OCSP(RFC 2560) and the same
ProofOfExistence must be included in the singleExtensions of SingleResponse=
(RFC
2560). <o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" =
face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;</=
o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier N=
ew"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&nbsp;Object Identifiers: 1.=
3.6.1.4.1.38655.1.4<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><fon=
t size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp; ProofOfExistence ::=3D&nbsp; SEQUENCE {<o:p></o:p=
></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"=
><span lang=3D"EN-US" style=3D"font-size:10.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
nbsp;&nbsp;&nbsp;&nbsp;&nbsp; poEType&nbsp; PoEType DEFAULT
poESignerSignatureBinOctets,<o:p></o:p></span></font></p><p class=3D"MsoPlain=
Text"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:=
10.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; poE Mes=
sageImprint<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"=
2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&nbsp;&nbs=
p;&nbsp;&nbsp;&nbsp;&nbsp; }<o:p></o:p></span></font></p><p class=3D"MsoPlainT=
ext"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:1=
0.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; PoEType ::=3D&nbsp; INTEGER&nbsp; =
{
poESignerSignatureBinOctets(0), poEAnyDATA(1) }<o:p></o:p></span></font></p=
><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US=
" style=3D"font-size:10.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <o:p></o:p><=
/span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><=
span lang=3D"EN-US" style=3D"font-size:10.0pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
sp; MessageImprint ::=3D SEQUENCE&nbsp; {&nbsp;&nbsp;&nbsp; -- MessageImprint
is defined in RFC 3161<o:p></o:p></span></font></p><p class=3D"MsoPlainText">=
<font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt=
">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; hashAlgorithm=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
p;&nbsp;&nbsp;
AlgorithmIdentifier,<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><f=
ont size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; hashedMessage&n=
bsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=
&nbsp;&nbsp; OCTET STRING<o:p></o:p></span></font></p><p class=3D"MsoPlainText=
"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0=
pt">&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; }</span><o:p></o:p></font></p><p cl=
ass=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" styl=
e=3D"font-size:10.0pt"><o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainTe=
xt"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10=
.0pt"><o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D=
"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">Pete Ryba=
r<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"C=
ourier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;</o:p></s=
pan></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><sp=
an lang=3D"EN-US" style=3D"font-size:10.0pt">-----Original Message-----<br>
From: <a href=3D"mailto:pkix-bounces@ietf.org">pkix-bounces@ietf.org</a> [<a =
href=3D"mailto:pkix-bounces@ietf.org">mailto:pkix-bounces@ietf.org</a>] On Beh=
alf Of Stefan
Santesson<br>
Sent: Monday, July 23, 2012 12:12 PM<br>
To: Sean Turner<br>
Cc: <a href=3D"mailto:pkix@ietf.org">pkix@ietf.org</a><br>
Subject: Re: [pkix] RFC2560bis update<o:p></o:p></span></font></p><p class=3D=
"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"f=
ont-size:10.0pt"><o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText">=
<font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt=
">Sean,<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" f=
ace=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;</o=
:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier Ne=
w"><span lang=3D"EN-US" style=3D"font-size:10.0pt">Good point,<o:p></o:p></span>=
</font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span l=
ang=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;</o:p></span></font></p><p c=
lass=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" sty=
le=3D"font-size:10.0pt">I actually forgot to process the erratas. I'll go
ahead and do that and<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><=
font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"=
>will put up a new version.<o:p></o:p></span></font></p><p class=3D"MsoPlainTe=
xt"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10=
.0pt"><o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D=
"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">/Stefan<o=
:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Cour=
ier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;</o:p></span=
></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span =
lang=3D"EN-US" style=3D"font-size:10.0pt">On 12-07-23 5:14 AM, "Sean Turner"
&lt;<a href=3D"mailto:turners@ieca.com">turners@ieca.com</a>&gt; wrote:<o:p><=
/o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier =
New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;</o:p></span></f=
ont></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=
=3D"EN-US" style=3D"font-size:10.0pt">&gt;Stefan,<o:p></o:p></span></font></p><p=
 class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" s=
tyle=3D"font-size:10.0pt">&gt;<o:p>&nbsp;</o:p></span></font></p><p class=3D"Mso=
PlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-=
size:10.0pt">&gt;In terms of figuring out what's changed in the
draft, this version is<o:p></o:p></span></font></p><p class=3D"MsoPlainText">=
<font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt=
">&gt;much easier to follow.<o:p></o:p></span></font></p><p class=3D"MsoPlainT=
ext"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:1=
0.0pt">&gt;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font =
size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;=
The addition of the list of changes was definitely
a good idea<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D=
"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;(defi=
nitely saved yourself a comment from me
during AD review).<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><fon=
t size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&g=
t;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" =
face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;I haven't=
 checked this but did you incorporate the
verified errata and<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><fo=
nt size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&=
gt;considered the HFDU (hold for document update)
errata?<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" =
face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;<o:p>&nbs=
p;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Couri=
er New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;spt<o:p></o:p></span=
></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span =
lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;<o:p>&nbsp;</o:p></span></font></p=
><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US=
" style=3D"font-size:10.0pt">&gt;On 7/20/12 1:07 PM, Stefan Santesson wrote:<o=
:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Cour=
ier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; All,<o:p></o:p=
></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"=
><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&nbsp;</o:p></span=
></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span =
lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; I finally got to tackle the u=
pdate of
RFC2560bis document.<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><f=
ont size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
&gt;&gt;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font siz=
e=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt=
; At the last ITEF/PKIX meeting we concluded
that this effort needs a<o:p></o:p></span></font></p><p class=3D"MsoPlainText=
"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0=
pt">&gt;&gt;restart.<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><fo=
nt size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&=
gt;&gt; The changes in the 04 draft compared to the
original document are so<o:p></o:p></span></font></p><p class=3D"MsoPlainText=
"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0=
pt">&gt;&gt; extensive that it is hard to make sure that
the update is actually<o:p></o:p></span></font></p><p class=3D"MsoPlainText">=
<font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt=
">&gt;&gt; compatible with the existing standard.<o:p></o:p></span></font></=
p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-U=
S" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&nbsp;</o:p></span></font></p><p cl=
ass=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" styl=
e=3D"font-size:10.0pt">&gt;&gt; I have therefore made a new draft almost from
scratch, trying to change<o:p></o:p></span></font></p><p class=3D"MsoPlainTex=
t"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.=
0pt">&gt;&gt; as little as possible compared to RFC 2560.<o:p></o:p></span><=
/font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span la=
ng=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&nbsp;</o:p></span></font><=
/p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-=
US" style=3D"font-size:10.0pt">&gt;&gt; The new draft is available here:<o:p><=
/o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier =
New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;
<a href=3D"http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_0=
2.txt">http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_02.t=
xt</a><o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" fa=
ce=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&n=
bsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Cou=
rier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; A diff compar=
ed to RFC 2560 is available
here:<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" fa=
ce=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; <a hre=
f=3D"http://tinyurl.com/rfc2560bis05diff">http://tinyurl.com/rfc2560bis05diff<=
/a><o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D=
"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&nbsp=
;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courie=
r New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; The list of chan=
ges (this list is included in
the draft) is:<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font si=
ze=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&g=
t;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" =
face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; This=
 document differs from RFC <st1:metricconverter productid=3D"2560 in" w:st=3D"on=
">2560 in</st1:metricconverter> only a few areas:<o:p></o:p></span></font></=
p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-U=
S" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&nbsp;</o:p></span></font></p><p cl=
ass=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" styl=
e=3D"font-size:10.0pt">&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp; o&nbsp; Section 4.1.1 =
specifies the ASN.1
syntax for the nonce<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><f=
ont size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; extension, which was miss=
ing in RFC
2560.<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" fa=
ce=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&n=
bsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Cou=
rier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;&nbsp;&nbsp;&n=
bsp;&nbsp; o&nbsp; Section 4.4.7 specifies a new
extension that may be included in<o:p></o:p></span></font></p><p class=3D"Mso=
PlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-=
size:10.0pt">&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; a request me=
ssage to specify signature
algorithms the client<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><=
font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"=
>&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; would prefer the server =
use to sign
the response as specified<o:p></o:p></span></font></p><p class=3D"MsoPlainTex=
t"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.=
0pt">&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; in [RFC6277].<o:p></=
o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier N=
ew"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&nbsp;</o:p></s=
pan></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><sp=
an lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp; o&=
nbsp; Section 2.3 extends the use of the
"unauthorized" error<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><f=
ont size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; response, as specified in=
 [RFC5019].<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"=
2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o=
:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=
=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;&nbsp;&nb=
sp;&nbsp;&nbsp; o&nbsp; Section 4.2.1 and 4.2.2.3 states that
a response may include<o:p></o:p></span></font></p><p class=3D"MsoPlainText">=
<font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt=
">&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; revocation status infor=
mation for
certificates that were not<o:p></o:p></span></font></p><p class=3D"MsoPlainTe=
xt"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10=
.0pt">&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; included in the req=
uest, as permitted
in [RFC5019].<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font siz=
e=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt=
;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" f=
ace=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;&nbsp;=
&nbsp;&nbsp;&nbsp; o&nbsp; Section 4.3 changes set of
cryptographic algorithms that<o:p></o:p></span></font></p><p class=3D"MsoPlai=
nText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size=
:10.0pt">&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; clients must sup=
port and the set of
cryptographic algorithms<o:p></o:p></span></font></p><p class=3D"MsoPlainText=
"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0=
pt">&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; that clients should s=
upport as
specified in [RFC6277].<o:p></o:p></span></font></p><p class=3D"MsoPlainText"=
><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font =
size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;=
&gt;&nbsp;&nbsp;&nbsp;&nbsp; o Section 4.2.2.2 has been updated to
clarify when a responder is<o:p></o:p></span></font></p><p class=3D"MsoPlainT=
ext"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:1=
0.0pt">&gt;&gt;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; considered an Auth=
orized Responder.<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font =
size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;=
&gt;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2=
" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:=
p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D=
"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&nbsp=
;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courie=
r New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; Section headings=
 and numbering are as much as
possible kept intact from<o:p></o:p></span></font></p><p class=3D"MsoPlainTex=
t"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.=
0pt">&gt;&gt; RFC 2560.<o:p></o:p></span></font></p><p class=3D"MsoPlainText">=
<font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt=
">&gt;&gt; The ASN-1 modules are imported form
rfc2560bis draft 04.<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><f=
ont size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
&gt;&gt;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font siz=
e=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt=
; What important updates did I miss to cover in
this draft?<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D=
"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<=
o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" fac=
e=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; If this=
 is considered a good starting point
for a restarted draft<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><=
font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"=
>&gt;&gt; effort, then I will publish this as draft 05
as soon as the draft<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><f=
ont size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
&gt;&gt; submission is re-opened.<o:p></o:p></span></font></p><p class=3D"MsoP=
lainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-s=
ize:10.0pt">&gt;&gt;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainTex=
t"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.=
0pt">&gt;&gt; /Stefan<o:p></o:p></span></font></p><p class=3D"MsoPlainText"><f=
ont size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
&gt;&gt;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font siz=
e=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt=
;<o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" f=
ace=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&=
nbsp;</o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Co=
urier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&nbsp;</=
o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier N=
ew"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&nbsp;</o:p></s=
pan></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><sp=
an lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<o:p>&nbsp;</o:p></span></f=
ont></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=
=3D"EN-US" style=3D"font-size:10.0pt"><o:p>&nbsp;</o:p></span></font></p><p clas=
s=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D=
"font-size:10.0pt"><o:p>&nbsp;</o:p></span></font></p><p class=3D"MsoPlainText=
"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0=
pt">_______________________________________________<o:p></o:p></span></font>=
</p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN=
-US" style=3D"font-size:10.0pt">pkix mailing list<o:p></o:p></span></font></p>=
<p class=3D"MsoPlainText"><font size=3D"2" face=3D"Courier New"><span lang=3D"EN-US"=
 style=3D"font-size:10.0pt"><a href=3D"mailto:pkix@ietf.org">pkix@ietf.org</a><o=
:p></o:p></span></font></p><p class=3D"MsoPlainText"><font size=3D"2" face=3D"Cour=
ier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><a href=3D"https://www.ie=
tf.org/mailman/listinfo/pkix">https://www.ietf.org/mailman/listinfo/pkix</a>=
<o:p></o:p></span></font></p></div></div></o:smarttagtype></div></blockquote=
></span></body></html>

--B_3425905352_25506783--




From eabalea@gmail.com  Mon Jul 23 09:24:00 2012
Return-Path: <eabalea@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 86A5111E808D for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 09:24:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.998
X-Spam-Level: 
X-Spam-Status: No, score=-2.998 tagged_above=-999 required=5 tests=[AWL=-0.600, BAYES_00=-2.599, HTML_MESSAGE=0.001, J_CHICKENPOX_43=0.6, J_CHICKENPOX_62=0.6, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7tbHpcFJgQZZ for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 09:23:58 -0700 (PDT)
Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) by ietfa.amsl.com (Postfix) with ESMTP id BDB2F11E807F for <pkix@ietf.org>; Mon, 23 Jul 2012 09:23:57 -0700 (PDT)
Received: by obbwc20 with SMTP id wc20so11210375obb.31 for <pkix@ietf.org>; Mon, 23 Jul 2012 09:23:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=zDlMaN9ubg3Fr7XM+x+LU2sNhkNh6Yjz8jDnz2tQtNI=; b=GFIpaqxlBAjbFpo36lWOBj5RHUUi/6BDFvsBf2uSAAgR8n5j6X3g9RI/V9l3bwOQSk I2KigD4oQShUPR+0KXHmFsqP1zoMSMIrYUSDEeKsqRxKI6i+HTf6j4NB0n0gSCfwRzkS zoI9ipBksf5uAEW/2iJmaYlile5DmtgmB1DmzPTarda7VIW491+lUKum3T0/X1RWyIFK 6/i1spacyPUFo9rYGS8XxbonSW5x9wTquev/OMTPbVKty+jQpOq+bBvSb/R2ZydNXpg+ 5INuOb6BnqMWjzQMYUIMjtZjFB1kpv67Jd7PB2vrL3pHE/ef6SQBl0AW8R/jMaJM8mK8 JC0Q==
MIME-Version: 1.0
Received: by 10.182.136.66 with SMTP id py2mr15513225obb.9.1343060637162; Mon, 23 Jul 2012 09:23:57 -0700 (PDT)
Received: by 10.182.55.227 with HTTP; Mon, 23 Jul 2012 09:23:57 -0700 (PDT)
In-Reply-To: <CC332A05.4812B%stefan@aaa-sec.com>
References: <201207231312.q6NDCb4U027465@gw.nbusr.sk> <CC332A05.4812B%stefan@aaa-sec.com>
Date: Mon, 23 Jul 2012 18:23:57 +0200
Message-ID: <CA+i=0E4q7O7qipy42bcSq-8Ezv0zcbEF2=TW6o=dg3=5eSReYA@mail.gmail.com>
From: Erwann Abalea <eabalea@gmail.com>
To: Stefan Santesson <stefan@aaa-sec.com>
Content-Type: multipart/alternative; boundary=e89a8f503194309c4a04c581acc1
Cc: daniela.jakubikova@nbusr.sk, pkix@ietf.org
Subject: Re: [pkix] RFC2560bis update - CertHash extension
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Jul 2012 16:24:00 -0000

--e89a8f503194309c4a04c581acc1
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

This extension is not "widely used" and should be discussed separately.
I've never encountered it in any of the big CAs; I wanted to check for CAs
based in Slovakia but haven't found any OCSP responder to query.

2012/7/23 Stefan Santesson <stefan@aaa-sec.com>

> Hi Peter,
>
> My first though about this is that such extension should go into a
> separate specification and not be included in the base specification,
> unless it is so widely used that is ought to go into the main spec.
>
> I would like to hear from others.
> I changed the title of the thread for discussion of this particular issue=
.
>
> /Stefan
>
>
> From: Peter Rybar <rybar@nbusr.sk>
> Date: Monday, 23 July, 2012 3:12 PM
> To: Stefan Santesson <stefan@aaa-sec.com>, 'Sean Turner' <turners@ieca.co=
m>,
> <DPKemp@missi.ncsc.mil>, <david.cooper@nist.gov>
> Cc: <pkix@ietf.org>, <daniela.jakubikova@nbusr.sk>
> Subject: RE: [pkix] RFC2560bis update
>
> **
>
> All,****
>
> ** **
>
> Is it possible to include already defined and widely used CertHash OCSP
> SingleResponse singleExtensions used as Positive Statement? ****
>
> ** **
>
> RFC **2560 in** part "2.2  Response" expects positive statement to be
> used but it is not defined in RFC 2560.****
>
> " The "good" state indicates a positive response to the status inquiry.**=
*
> *
>
>    At a minimum, this positive response indicates that the certificate***=
*
>
>    is not revoked, *but does not necessarily mean that the certificate*
>
> *   was ever issued or that the time at which the response was produced*
>
> *   is within the certificate's validity interval*. *Response extensions*
>
> *   may be used to convey additional information on assertions made by*
>
> *   the responder regarding the status of the certificate such as*
>
> *   positive statement about issuance, validity, etc.* "****
>
> ** **
>
> The *CertHash**extension* (Positive Statement) is used in indirect OCSP
> response as a positive statement that OCSP responder *knows the status*of=
 the certificate and also provides the
> *integrity protection**of* the certificate if the *certificate is already
> expired* and *algorithms* used in the certificate *could be weak*. The *
> CertHash* *extension* (Positive Statement) adopted from Common PKI
> Optional SigG-Profile is designed to be included in the OCSP
> singleExtensions of SingleResponse(RFC 2560). ****
>
> ** **
>
>    Common PKI Object Identifiers:     1.3.36.8.3.13****
>
> ** **
>
>   CertHash ::=3D SEQUENCE {****
>
>       hashAlgorithm AlgorithmIdentifier,****
>
>                  -- The identifier of the algorithm that has been used **=
*
> *
>
>                  -- the hash value below.****
>
>       certificateHash OCTET STRING****
>
>                  -- The hash over DER-encoding of the entire PKC or AC **=
*
> *
>
>                            --   (i.e. NOT a hash over tbsCertificate).***=
*
>
>   }****
>
> ** **
>
> It is on the page **9 in** the presentation.****
>
>
> http://files.lockitin.webnode.sk/200000078-00104010a3/12th%20Edition%20of=
%20the%20Conference%20June%2004-06th%202012%20Poland.ppt
> ****
>
> ** **
>
> There is also experimental extension which is on the page 10.****
>
> ** **
>
> The OCSP response with *ProofOfExistence* extension of signer=E2=80=99s s=
ignature
> can be used as a secure time-mark with the *same functionality *as
> expected from* the signature time stamp*. The ProofOfExistence extension
> is designed to be included in the singleRequestExtensions of OCSP(RFC 256=
0)
> and the same ProofOfExistence must be included in the singleExtensions of
> SingleResponse(RFC 2560). ****
>
> ** **
>
>  Object Identifiers: 1.3.6.1.4.1.38655.1.4****
>
>       ProofOfExistence ::=3D  SEQUENCE {****
>
>            poEType  PoEType DEFAULT poESignerSignatureBinOctets,****
>
>            poE MessageImprint****
>
>        }****
>
>        PoEType ::=3D  INTEGER  { poESignerSignatureBinOctets(0),
> poEAnyDATA(1) }****
>
>        ****
>
>        MessageImprint ::=3D SEQUENCE  {    -- MessageImprint is defined i=
n
> RFC 3161****
>
>            hashAlgorithm                AlgorithmIdentifier,****
>
>            hashedMessage                OCTET STRING****
>
>        }****
>
> ** **
>
> ** **
>
> Pete Rybar****
>
> ** **
>
> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org<pkix-bounces@ie=
tf.org>]
> On Behalf Of Stefan Santesson
> Sent: Monday, July 23, 2012 12:12 PM
> To: Sean Turner
> Cc: pkix@ietf.org
> Subject: Re: [pkix] RFC2560bis update****
>
> ** **
>
> Sean,****
>
> ** **
>
> Good point,****
>
> ** **
>
> I actually forgot to process the erratas. I'll go ahead and do that and**=
*
> *
>
> will put up a new version.****
>
> ** **
>
> /Stefan****
>
> ** **
>
> On 12-07-23 5:14 AM, "Sean Turner" <turners@ieca.com> wrote:****
>
> ** **
>
> >Stefan,****
>
> >** **
>
> >In terms of figuring out what's changed in the draft, this version is***=
*
>
> >much easier to follow.****
>
> >** **
>
> >The addition of the list of changes was definitely a good idea****
>
> >(definitely saved yourself a comment from me during AD review).****
>
> >** **
>
> >I haven't checked this but did you incorporate the verified errata and**=
*
> *
>
> >considered the HFDU (hold for document update) errata?****
>
> >** **
>
> >spt****
>
> >** **
>
> >On 7/20/12 1:07 PM, Stefan Santesson wrote:****
>
> >> All,****
>
> >>** **
>
> >> I finally got to tackle the update of RFC2560bis document.****
>
> >>** **
>
> >> At the last ITEF/PKIX meeting we concluded that this effort needs a***=
*
>
> >>restart.****
>
> >> The changes in the 04 draft compared to the original document are so**=
*
> *
>
> >> extensive that it is hard to make sure that the update is actually****
>
> >> compatible with the existing standard.****
>
> >>** **
>
> >> I have therefore made a new draft almost from scratch, trying to chang=
e
> ****
>
> >> as little as possible compared to RFC 2560.****
>
> >>** **
>
> >> The new draft is available here:****
>
> >> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_02.tx=
t
> ****
>
> >>** **
>
> >> A diff compared to RFC 2560 is available here:****
>
> >> http://tinyurl.com/rfc2560bis05diff****
>
> >>** **
>
> >> The list of changes (this list is included in the draft) is:****
>
> >>** **
>
> >> This document differs from RFC **2560 in** only a few areas:****
>
> >>** **
>
> >>     o  Section 4.1.1 specifies the ASN.1 syntax for the nonce****
>
> >>        extension, which was missing in RFC 2560.****
>
> >>** **
>
> >>     o  Section 4.4.7 specifies a new extension that may be included in=
*
> ***
>
> >>        a request message to specify signature algorithms the client***=
*
>
> >>        would prefer the server use to sign the response as specified**=
*
> *
>
> >>        in [RFC6277].****
>
> >>** **
>
> >>     o  Section 2.3 extends the use of the "unauthorized" error****
>
> >>        response, as specified in [RFC5019].****
>
> >>** **
>
> >>     o  Section 4.2.1 and 4.2.2.3 states that a response may include***=
*
>
> >>        revocation status information for certificates that were not***=
*
>
> >>        included in the request, as permitted in [RFC5019].****
>
> >>** **
>
> >>     o  Section 4.3 changes set of cryptographic algorithms that****
>
> >>        clients must support and the set of cryptographic algorithms***=
*
>
> >>        that clients should support as specified in [RFC6277].****
>
> >>** **
>
> >>     o Section 4.2.2.2 has been updated to clarify when a responder is*=
*
> **
>
> >>        considered an Authorized Responder.****
>
> >>** **
>
> >>** **
>
> >>** **
>
> >> Section headings and numbering are as much as possible kept intact fro=
m
> ****
>
> >> RFC 2560.****
>
> >> The ASN-1 modules are imported form rfc2560bis draft 04.****
>
> >>** **
>
> >> What important updates did I miss to cover in this draft?****
>
> >>** **
>
> >> If this is considered a good starting point for a restarted draft****
>
> >> effort, then I will publish this as draft 05 as soon as the draft****
>
> >> submission is re-opened.****
>
> >>** **
>
> >> /Stefan****
>
> >>** **
>
> >>** **
>
> >>** **
>
> >>** **
>
> >>** **
>
> >>** **
>
> ** **
>
> ** **
>
> _______________________________________________****
>
> pkix mailing list****
>
> pkix@ietf.org****
>
> https://www.ietf.org/mailman/listinfo/pkix****
> **
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>
>


--=20
Erwann.

--e89a8f503194309c4a04c581acc1
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

This extension is not &quot;widely used&quot;=C2=A0and should be discussed =
separately.<div>I&#39;ve never encountered it in any of the big CAs; I want=
ed to check for CAs based in Slovakia but haven&#39;t found any OCSP respon=
der to query.</div>
<div><div><div><br><div class=3D"gmail_quote">2012/7/23 Stefan Santesson <s=
pan dir=3D"ltr">&lt;<a href=3D"mailto:stefan@aaa-sec.com" target=3D"_blank"=
>stefan@aaa-sec.com</a>&gt;</span><br><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div style=3D"font-size:14px;font-family:Calibri,sans-serif;word-wrap:break=
-word"><div>Hi Peter,</div><div><br></div><div>My first though about this i=
s that such extension should go into a separate specification and not be in=
cluded in the base specification, unless it is so widely used that is ought=
 to go into the main spec.</div>
<div><br></div><div>I would like to hear from others.</div><div>I changed t=
he title of the thread for discussion of this particular issue.</div><div><=
br></div><div>/Stefan</div><div><br></div><div><br></div><span><div style=
=3D"border-right:medium none;padding-right:0in;padding-left:0in;padding-top=
:3pt;text-align:left;font-size:11pt;border-bottom:medium none;font-family:C=
alibri;border-top:#b5c4df 1pt solid;padding-bottom:0in;border-left:medium n=
one">
<span style=3D"font-weight:bold">From: </span> Peter Rybar &lt;<a href=3D"m=
ailto:rybar@nbusr.sk" target=3D"_blank">rybar@nbusr.sk</a>&gt;<br><span sty=
le=3D"font-weight:bold">Date: </span> Monday, 23 July, 2012 3:12 PM<br><spa=
n style=3D"font-weight:bold">To: </span> Stefan Santesson &lt;<a href=3D"ma=
ilto:stefan@aaa-sec.com" target=3D"_blank">stefan@aaa-sec.com</a>&gt;, &#39=
;Sean Turner&#39; &lt;<a href=3D"mailto:turners@ieca.com" target=3D"_blank"=
>turners@ieca.com</a>&gt;, &lt;<a href=3D"mailto:DPKemp@missi.ncsc.mil" tar=
get=3D"_blank">DPKemp@missi.ncsc.mil</a>&gt;, &lt;<a href=3D"mailto:david.c=
ooper@nist.gov" target=3D"_blank">david.cooper@nist.gov</a>&gt;<br>
<span style=3D"font-weight:bold">Cc: </span> &lt;<a href=3D"mailto:pkix@iet=
f.org" target=3D"_blank">pkix@ietf.org</a>&gt;, &lt;<a href=3D"mailto:danie=
la.jakubikova@nbusr.sk" target=3D"_blank">daniela.jakubikova@nbusr.sk</a>&g=
t;<br>
<span style=3D"font-weight:bold">Subject: </span> RE: [pkix] RFC2560bis upd=
ate<br></div><div><br></div><blockquote style=3D"BORDER-LEFT:#b5c4df 5 soli=
d;PADDING:0 0 0 5;MARGIN:0 0 0 5"><div><u></u><div lang=3D"SK" link=3D"blue=
" vlink=3D"purple">
<div><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:=
10.0pt">All,<u></u><u></u></span></font></p><p><font face=3D"Courier New"><=
span lang=3D"EN-US" style=3D"font-size:10.0pt"><u></u>=C2=A0<u></u></span><=
/font></p><p>
<font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
Is it possible to include already defined and widely
used CertHash OCSP SingleResponse singleExtensions used as Positive Stateme=
nt? <u></u><u></u></span></font></p><p><font face=3D"Courier New"><span lan=
g=3D"EN-US" style=3D"font-size:10.0pt"><u></u>=C2=A0<u></u></span></font></=
p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.=
0pt">RFC <u></u>2560
 in<u></u> part &quot;2.2=C2=A0 Response&quot; expects positive
statement to be used but it is not defined in RFC 2560.<u></u><u></u></span=
></font></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"fon=
t-size:10.0pt">&quot;</span><span lang=3D"EN-US"> </span></font><span lang=
=3D"EN-US">The &quot;good&quot; state indicates a positive response to the
status inquiry.<u></u><u></u></span></p><p><font face=3D"Courier New"><span=
 lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0=C2=A0 At a minimum, this =
positive response indicates that
the certificate<u></u><u></u></span></font></p><p><font face=3D"Courier New=
"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0=C2=A0 is not revok=
ed, <i><span style=3D"font-style:italic">but
does not necessarily mean that the certificate<u></u><u></u></span></i></sp=
an></font></p><p><i><font face=3D"Courier New"><span lang=3D"EN-US" style=
=3D"font-size:10.0pt;font-style:italic">=C2=A0=C2=A0 was ever issued or tha=
t the time
at which the response was produced<u></u><u></u></span></font></i></p><p><i=
><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt;=
font-style:italic">=C2=A0=C2=A0 is within the certificate&#39;s
validity interval</span></font></i><span lang=3D"EN-US">. <b><span style=3D=
"font-weight:bold">Response extensions<u></u><u></u></span></b></span></p><=
p><b><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.=
0pt;font-weight:bold">=C2=A0=C2=A0 may be used to convey additional
information on assertions made by<u></u><u></u></span></font></b></p><p><b>=
<font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt;f=
ont-weight:bold">=C2=A0=C2=A0 the responder regarding the status
of the certificate such as<u></u><u></u></span></font></b></p><p><b><font f=
ace=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt;font-wei=
ght:bold">=C2=A0=C2=A0 <font color=3D"red"><span style=3D"color:red">positi=
ve statement</span></font> about issuance, validity,
etc.</span></font></b><span lang=3D"EN-US"> &quot;<u></u><u></u></span></p>=
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t"><u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"><spa=
n lang=3D"EN-US" style=3D"font-size:10.0pt">The <b><span style=3D"font-weig=
ht:bold">CertHash</span></b><b><span style=3D"font-weight:bold">extension</=
span></b> (Positive Statement) is
used in indirect OCSP response as a positive statement that OCSP responder =
<b><span style=3D"font-weight:bold">knows the status</span></b> of the cert=
ificate and
also provides the <b><span style=3D"font-weight:bold">integrity protection<=
/span></b><b><span style=3D"font-weight:bold">of</span></b> the certificate=
 if the <b><span style=3D"font-weight:bold">certificate is already expired<=
/span></b> and <b><span style=3D"font-weight:bold">algorithms</span></b> us=
ed in the certificate <b><span style=3D"font-weight:bold">could be weak</sp=
an></b>. The <b><span style=3D"font-weight:bold">CertHash</span></b> <b><sp=
an style=3D"font-weight:bold">extension</span></b>
(Positive Statement) adopted from Common PKI Optional SigG-Profile is desig=
ned
to be included in the OCSP singleExtensions of SingleResponse(RFC 2560). <u=
></u><u></u></span></font></p><p><font face=3D"Courier New"><span lang=3D"E=
N-US" style=3D"font-size:10.0pt"><u></u>=C2=A0<u></u></span></font></p><p><=
font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
=C2=A0=C2=A0 Common PKI Object Identifiers:=C2=A0=C2=A0=C2=A0=C2=A0 1.3.36.=
8.3.13<u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t"><u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"><spa=
n lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0 CertHash ::=3D SEQUENCE =
{<u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 hashAlgorithm AlgorithmIdentifier,<u></u>=
<u></u></span></font></p><p><font face=3D"Courier New"><span lang=3D"EN-US"=
 style=3D"font-size:10.0pt">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -- The identifier of the algo=
rithm
that has been used <u></u><u></u></span></font></p><p><font face=3D"Courier=
 New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0 =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 -- t=
he hash value below.<u></u><u></u></span></font></p><p><font face=3D"Courie=
r New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0 certificateHash OCTET STRING<u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0 -- The hash over DER-encoding of the
entire PKC or AC <u></u><u></u></span></font></p><p><font face=3D"Courier N=
ew"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0=C2=A0=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 --=C2=A0=C2=A0=
 (i.e. NOT a hash over
tbsCertificate).<u></u><u></u></span></font></p><p><font face=3D"Courier Ne=
w"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0 }</span><u></u><u=
></u></font></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D=
"font-size:10.0pt"><u></u>=C2=A0<u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">It is on the page <u></u>9 in<u></u> the presentation.<u></u><u></u></sp=
an></font></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"f=
ont-size:10.0pt"><a href=3D"http://files.lockitin.webnode.sk/200000078-0010=
4010a3/12th%20Edition%20of%20the%20Conference%20June%2004-06th%202012%20Pol=
and.ppt" target=3D"_blank">http://files.lockitin.webnode.sk/200000078-00104=
010a3/12th%20Edition%20of%20the%20Conference%20June%2004-06th%202012%20Pola=
nd.ppt</a><u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t"><u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"><spa=
n lang=3D"EN-US" style=3D"font-size:10.0pt">There is also experimental exte=
nsion which is on the
page 10.<u></u><u></u></span></font></p><p><font face=3D"Courier New"><span=
 lang=3D"EN-US" style=3D"font-size:10.0pt"><u></u>=C2=A0<u></u></span></fon=
t></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size=
:10.0pt">The OCSP response with <b><span style=3D"font-weight:bold">ProofOf=
Existence</span></b> extension of signer=E2=80=99s signature can be used
as a secure time-mark with the <b><span style=3D"font-weight:bold">same
functionality </span></b>as expected from<b><span style=3D"font-weight:bold=
"> the
signature time stamp</span></b>. The ProofOfExistence extension is designed=
 to
be included in the singleRequestExtensions of OCSP(RFC 2560) and the same
ProofOfExistence must be included in the singleExtensions of SingleResponse=
(RFC
2560). <u></u><u></u></span></font></p><p><font face=3D"Courier New"><span =
lang=3D"EN-US" style=3D"font-size:10.0pt"><u></u>=C2=A0<u></u></span></font=
></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:=
10.0pt">=C2=A0Object Identifiers: 1.3.6.1.4.1.38655.1.4<u></u><u></u></span=
></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 ProofOfExistence ::=3D=C2=A0 SEQUENCE {<u=
></u><u></u></span></font></p><p><font face=3D"Courier New"><span lang=3D"E=
N-US" style=3D"font-size:10.0pt">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0 poEType=C2=A0 PoEType DEFAULT
poESignerSignatureBinOctets,<u></u><u></u></span></font></p><p><font face=
=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 poE MessageImprint<u></=
u><u></u></span></font></p><p><font face=3D"Courier New"><span lang=3D"EN-U=
S" style=3D"font-size:10.0pt">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 }<u></u>=
<u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 PoEType ::=3D=C2=A0 INTEGER=C2=A0 {
poESignerSignatureBinOctets(0), poEAnyDATA(1) }<u></u><u></u></span></font>=
</p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:1=
0.0pt">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 <u></u><u></u></span></font></p=
><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0=
pt">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 MessageImprint ::=3D SEQUENCE=C2=
=A0 {=C2=A0=C2=A0=C2=A0 -- MessageImprint
is defined in RFC 3161<u></u><u></u></span></font></p><p><font face=3D"Cour=
ier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 hashAlgorithm=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0
AlgorithmIdentifier,<u></u><u></u></span></font></p><p><font face=3D"Courie=
r New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 hashedMessage=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 OC=
TET STRING<u></u><u></u></span></font></p><p><font face=3D"Courier New"><sp=
an lang=3D"EN-US" style=3D"font-size:10.0pt">=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0 }</span><u></u><u></u></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t"><u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"><spa=
n lang=3D"EN-US" style=3D"font-size:10.0pt"><u></u>=C2=A0<u></u></span></fo=
nt></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-siz=
e:10.0pt">Pete Rybar<u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t"><u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"><spa=
n lang=3D"EN-US" style=3D"font-size:10.0pt">-----Original Message-----<br>
From: <a href=3D"mailto:pkix-bounces@ietf.org" target=3D"_blank">pkix-bounc=
es@ietf.org</a> [<a href=3D"mailto:pkix-bounces@ietf.org" target=3D"_blank"=
>mailto:pkix-bounces@ietf.org</a>] On Behalf Of Stefan
Santesson<br>
Sent: Monday, July 23, 2012 12:12 PM<br>
To: Sean Turner<br>
Cc: <a href=3D"mailto:pkix@ietf.org" target=3D"_blank">pkix@ietf.org</a><br=
>
Subject: Re: [pkix] RFC2560bis update<u></u><u></u></span></font></p><p><fo=
nt face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><u>=
</u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"><span lang=
=3D"EN-US" style=3D"font-size:10.0pt">Sean,<u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t"><u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"><spa=
n lang=3D"EN-US" style=3D"font-size:10.0pt">Good point,<u></u><u></u></span=
></font></p><p>
<font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
<u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"><span l=
ang=3D"EN-US" style=3D"font-size:10.0pt">I actually forgot to process the e=
rratas. I&#39;ll go
ahead and do that and<u></u><u></u></span></font></p><p><font face=3D"Couri=
er New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">will put up a new v=
ersion.<u></u><u></u></span></font></p><p><font face=3D"Courier New"><span =
lang=3D"EN-US" style=3D"font-size:10.0pt"><u></u>=C2=A0<u></u></span></font=
></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">/Stefan<u></u><u></u></span></font></p><p><font face=3D"Courier New"><sp=
an lang=3D"EN-US" style=3D"font-size:10.0pt"><u></u>=C2=A0<u></u></span></f=
ont></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-si=
ze:10.0pt">On 12-07-23 5:14 AM, &quot;Sean Turner&quot;
&lt;<a href=3D"mailto:turners@ieca.com" target=3D"_blank">turners@ieca.com<=
/a>&gt; wrote:<u></u><u></u></span></font></p><p><font face=3D"Courier New"=
><span lang=3D"EN-US" style=3D"font-size:10.0pt"><u></u>=C2=A0<u></u></span=
></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;Stefan,<u></u><u></u></span></font></p><p><font face=3D"Courier New"=
><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;<u></u>=C2=A0<u></u></=
span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;In terms of figuring out what&#39;s changed in the
draft, this version is<u></u><u></u></span></font></p><p><font face=3D"Cour=
ier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;much easier to=
 follow.<u></u><u></u></span></font></p><p><font face=3D"Courier New"><span=
 lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;<u></u>=C2=A0<u></u></span><=
/font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;The addition of the list of changes was definitely
a good idea<u></u><u></u></span></font></p><p><font face=3D"Courier New"><s=
pan lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;(definitely saved yoursel=
f a comment from me
during AD review).<u></u><u></u></span></font></p><p><font face=3D"Courier =
New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;<u></u>=C2=A0<u></=
u></span></font></p><p><font face=3D"Courier New"><span lang=3D"EN-US" styl=
e=3D"font-size:10.0pt">&gt;I haven&#39;t checked this but did you incorpora=
te the
verified errata and<u></u><u></u></span></font></p><p><font face=3D"Courier=
 New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;considered the HF=
DU (hold for document update)
errata?<u></u><u></u></span></font></p><p><font face=3D"Courier New"><span =
lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;<u></u>=C2=A0<u></u></span></=
font></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-s=
ize:10.0pt">&gt;spt<u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;<u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New">=
<span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;On 7/20/12 1:07 PM, Ste=
fan Santesson wrote:<u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt; All,<u></u><u></u></span></font></p><p><font face=3D"Courier Ne=
w"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0<u>=
</u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt; I finally got to tackle the update of
RFC2560bis document.<u></u><u></u></span></font></p><p><font face=3D"Courie=
r New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=
=A0<u></u></span></font></p><p><font face=3D"Courier New"><span lang=3D"EN-=
US" style=3D"font-size:10.0pt">&gt;&gt; At the last ITEF/PKIX meeting we co=
ncluded
that this effort needs a<u></u><u></u></span></font></p><p><font face=3D"Co=
urier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;restart.=
<u></u><u></u></span></font></p><p><font face=3D"Courier New"><span lang=3D=
"EN-US" style=3D"font-size:10.0pt">&gt;&gt; The changes in the 04 draft com=
pared to the
original document are so<u></u><u></u></span></font></p><p><font face=3D"Co=
urier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; extensi=
ve that it is hard to make sure that
the update is actually<u></u><u></u></span></font></p><p><font face=3D"Cour=
ier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; compatibl=
e with the existing standard.<u></u><u></u></span></font></p><p><font face=
=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u=
></u>=C2=A0<u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt; I have therefore made a new draft almost from
scratch, trying to change<u></u><u></u></span></font></p><p><font face=3D"C=
ourier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; as lit=
tle as possible compared to RFC 2560.<u></u><u></u></span></font></p><p><fo=
nt face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt=
;&gt;<u></u>=C2=A0<u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt; The new draft is available here:<u></u><u></u></span></font></p=
><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0=
pt">&gt;&gt;
<a href=3D"http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05=
_02.txt" target=3D"_blank">http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pk=
ix-rfc2560bis-05_02.txt</a><u></u><u></u></span></font></p><p><font face=3D=
"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></=
u>=C2=A0<u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt; A diff compared to RFC 2560 is available
here:<u></u><u></u></span></font></p><p><font face=3D"Courier New"><span la=
ng=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; <a href=3D"http://tinyurl.=
com/rfc2560bis05diff" target=3D"_blank">http://tinyurl.com/rfc2560bis05diff=
</a><u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt;<u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier N=
ew"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; The list of ch=
anges (this list is included in
the draft) is:<u></u><u></u></span></font></p><p><font face=3D"Courier New"=
><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0<u></=
u></span></font></p><p><font face=3D"Courier New"><span lang=3D"EN-US" styl=
e=3D"font-size:10.0pt">&gt;&gt; This document differs from RFC <u></u>2560 =
in<u></u> only a few areas:<u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt;<u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier N=
ew"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=C2=A0=C2=A0=C2=
=A0=C2=A0 o=C2=A0 Section 4.1.1 specifies the ASN.1
syntax for the nonce<u></u><u></u></span></font></p><p><font face=3D"Courie=
r New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 extension, which was missing in RFC
2560.<u></u><u></u></span></font></p><p><font face=3D"Courier New"><span la=
ng=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0<u></u></span>=
</font></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font=
-size:10.0pt">&gt;&gt;=C2=A0=C2=A0=C2=A0=C2=A0 o=C2=A0 Section 4.4.7 specif=
ies a new
extension that may be included in<u></u><u></u></span></font></p><p><font f=
ace=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt=
;=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 a request message to specify si=
gnature
algorithms the client<u></u><u></u></span></font></p><p><font face=3D"Couri=
er New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 would prefer the server use to sign
the response as specified<u></u><u></u></span></font></p><p><font face=3D"C=
ourier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 in [RFC6277].<u></u><u></u></span></fo=
nt></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-siz=
e:10.0pt">&gt;&gt;<u></u>=C2=A0<u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt;=C2=A0=C2=A0=C2=A0=C2=A0 o=C2=A0 Section 2.3 extends the use of =
the
&quot;unauthorized&quot; error<u></u><u></u></span></font></p><p><font face=
=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 response, as specified in [RFC50=
19].<u></u><u></u></span></font></p><p>
<font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
&gt;&gt;<u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"=
><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=C2=A0=C2=A0=C2=A0=
=C2=A0 o=C2=A0 Section 4.2.1 and 4.2.2.3 states that
a response may include<u></u><u></u></span></font></p><p><font face=3D"Cour=
ier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=C2=A0=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 revocation status information for
certificates that were not<u></u><u></u></span></font></p><p><font face=3D"=
Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 included in the request, as permitted
in [RFC5019].<u></u><u></u></span></font></p><p><font face=3D"Courier New">=
<span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0<u></u=
></span></font></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=
=3D"font-size:10.0pt">&gt;&gt;=C2=A0=C2=A0=C2=A0=C2=A0 o=C2=A0 Section 4.3 =
changes set of
cryptographic algorithms that<u></u><u></u></span></font></p><p><font face=
=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 clients must support and the set=
 of
cryptographic algorithms<u></u><u></u></span></font></p><p><font face=3D"Co=
urier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 that clients should support as
specified in [RFC6277].<u></u><u></u></span></font></p><p><font face=3D"Cou=
rier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=
=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"><span lang=3D"=
EN-US" style=3D"font-size:10.0pt">&gt;&gt;=C2=A0=C2=A0=C2=A0=C2=A0 o Sectio=
n 4.2.2.2 has been updated to
clarify when a responder is<u></u><u></u></span></font></p><p><font face=3D=
"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;=C2=
=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 considered an Authorized Responder.=
<u></u><u></u></span></font></p><p><font face=3D"Courier New"><span lang=3D=
"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0<u></u></span></fon=
t></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt;<u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier N=
ew"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0<u=
></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt; Section headings and numbering are as much as
possible kept intact from<u></u><u></u></span></font></p><p><font face=3D"C=
ourier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; RFC 25=
60.<u></u><u></u></span></font></p><p><font face=3D"Courier New"><span lang=
=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; The ASN-1 modules are import=
ed form
rfc2560bis draft 04.<u></u><u></u></span></font></p><p><font face=3D"Courie=
r New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=
=A0<u></u></span></font></p><p><font face=3D"Courier New"><span lang=3D"EN-=
US" style=3D"font-size:10.0pt">&gt;&gt; What important updates did I miss t=
o cover in
this draft?<u></u><u></u></span></font></p><p><font face=3D"Courier New"><s=
pan lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0<u></u><=
/span></font></p><p><font face=3D"Courier New"><span lang=3D"EN-US" style=
=3D"font-size:10.0pt">&gt;&gt; If this is considered a good starting point
for a restarted draft<u></u><u></u></span></font></p><p><font face=3D"Couri=
er New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; effort, th=
en I will publish this as draft 05
as soon as the draft<u></u><u></u></span></font></p><p><font face=3D"Courie=
r New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt; submission =
is re-opened.<u></u><u></u></span></font></p><p><font face=3D"Courier New">=
<span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0<u></u=
></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt; /Stefan<u></u><u></u></span></font></p><p><font face=3D"Courier=
 New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0=
<u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt;<u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier N=
ew"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0<u=
></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt;<u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier N=
ew"><span lang=3D"EN-US" style=3D"font-size:10.0pt">&gt;&gt;<u></u>=C2=A0<u=
></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">&gt;&gt;<u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier N=
ew"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><u></u>=C2=A0<u></u></s=
pan></font></p><p>
<font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0pt">=
<u></u>=C2=A0<u></u></span></font></p><p><font face=3D"Courier New"><span l=
ang=3D"EN-US" style=3D"font-size:10.0pt">__________________________________=
_____________<u></u><u></u></span></font></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t">pkix mailing list<u></u><u></u></span></font></p><p><font face=3D"Courie=
r New"><span lang=3D"EN-US" style=3D"font-size:10.0pt"><a href=3D"mailto:pk=
ix@ietf.org" target=3D"_blank">pkix@ietf.org</a><u></u><u></u></span></font=
></p>
<p><font face=3D"Courier New"><span lang=3D"EN-US" style=3D"font-size:10.0p=
t"><a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blank"=
>https://www.ietf.org/mailman/listinfo/pkix</a><u></u><u></u></span></font>=
</p></div>
</div><u></u></div></blockquote></span></div>
<br>_______________________________________________<br>
pkix mailing list<br>
<a href=3D"mailto:pkix@ietf.org">pkix@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/pkix</a><br>
<br></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>Erwann.<=
br>
</div></div></div>

--e89a8f503194309c4a04c581acc1--

From mrex@sap.com  Mon Jul 23 10:47:22 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0A9411E80AE for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 10:47:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.49
X-Spam-Level: 
X-Spam-Status: No, score=-9.49 tagged_above=-999 required=5 tests=[AWL=-0.730,  BAYES_05=-1.11, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kiyZa6tJ3Hvf for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 10:47:21 -0700 (PDT)
Received: from smtpde01.sap-ag.de (smtpde01.sap-ag.de [155.56.68.170]) by ietfa.amsl.com (Postfix) with ESMTP id 060E911E807F for <pkix@ietf.org>; Mon, 23 Jul 2012 10:47:20 -0700 (PDT)
Received: from mail.sap.corp by smtpde01.sap-ag.de (26) with ESMTP id q6NHlHKo029651 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Mon, 23 Jul 2012 19:47:18 +0200 (MEST)
In-Reply-To: <OF0C759671.4F90B3E2-ON85257A41.0048ABEC-85257A41.004926B8@us.ibm.com>
To: Tom Gindin <tgindin@us.ibm.com>
Date: Mon, 23 Jul 2012 19:47:17 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120723174717.A376D1A0E7@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: pkix@ietf.org
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Jul 2012 17:47:22 -0000

Tom Gindin wrote:
>         Peter:
> 
>         Admittedly, my word choice was inconsistent.  I should have said "
> still used as sources for trust anchors", to match the later reference to 
> "importing".  However, the issuer of a v3 non-CA certificate, whether the 
> subject or not, does not intend that anyone use that key and name to 
> validate other certificates.  Therefore, code which creates trust anchors 
> by importing certificates should not do so with a v3 non-CA certificate, 
> although it may deem these certificates to be directly trusted EE's if it 
> so chooses.

Unfortunately, the world is not as simple as we might like it to be:

  http://www.entrust.net/knowledge-base/technote.cfm?tn=7869

To me it appears that neither the admin who created the cert,
nor the software that he used for this, nor any of the Browser vendors/
suppliers adequately complained about the obvious invalidity of this
X.509v3 RootCA cert, before it was wide shipped and put in use.

Our own PKI software did not allow use of such a cert as "trust anchor"
(i.e. signer of other certs), so I received a few support calls back then.


-Martin

From hallam@gmail.com  Mon Jul 23 17:13:45 2012
Return-Path: <hallam@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 348F411E80F3 for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 17:13:45 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.536
X-Spam-Level: 
X-Spam-Status: No, score=-5.536 tagged_above=-999 required=5 tests=[AWL=-1.937, BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id VYGhq9LPf92P for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 17:13:44 -0700 (PDT)
Received: from mail-vc0-f172.google.com (mail-vc0-f172.google.com [209.85.220.172]) by ietfa.amsl.com (Postfix) with ESMTP id 78BEC11E808E for <pkix@ietf.org>; Mon, 23 Jul 2012 17:13:42 -0700 (PDT)
Received: by vcbfo14 with SMTP id fo14so5701013vcb.31 for <pkix@ietf.org>; Mon, 23 Jul 2012 17:13:42 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=TydreCFOnCyWb9/hAzL5t50z/H7CaIUxcrJSlWGe41k=; b=SSouyxlG9k4M+QOlJOpNH5SZKHlDKwncvEVVPEQOuGYdjHSNviRdxlJjNh87uJlrF3 ULrZ5jpIteKga9Iq3w2u65HQvaV5/Xi27WZEpEZBuB1ThtSd8c29JqMKuJiVAfGLkeWF KVnrT2NrCsVK+II2vx17i/epjN1h854tTi2x+a67aoGz1w41hCPEGb801p6/f99QywMW x3jq61HnxOxwmE1risJFkgfrs+X1DZOALWNthyUr+MiLyVRSTgZA/5s0U9NYb6i2oPna gXHD24oam2Tsh5HIrKqb1K9Pvnivf763urn7xwzGK1C7zQDwmqrLwYdtxNZ5tUo8PmX2 M/Gw==
MIME-Version: 1.0
Received: by 10.220.222.145 with SMTP id ig17mr13139364vcb.15.1343088821893; Mon, 23 Jul 2012 17:13:41 -0700 (PDT)
Received: by 10.58.56.227 with HTTP; Mon, 23 Jul 2012 17:13:41 -0700 (PDT)
In-Reply-To: <CC3320B9.480D2%stefan@aaa-sec.com>
References: <500CC183.3000402@ieca.com> <CC3320B9.480D2%stefan@aaa-sec.com>
Date: Mon, 23 Jul 2012 20:13:41 -0400
Message-ID: <CAMm+Lwi_AzRPXSKx9CAxbLYFWssAfR6XcMEoahLaUYLsG5bYrQ@mail.gmail.com>
From: Phillip Hallam-Baker <hallam@gmail.com>
To: Stefan Santesson <stefan@aaa-sec.com>
Content-Type: text/plain; charset=ISO-8859-1
Cc: pkix@ietf.org
Subject: Re: [pkix] Agenda posed
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Jul 2012 00:13:45 -0000

Sean will no doubt bring it up, but he wants to discuss the tree
walking thing. I can make slides.

On Mon, Jul 23, 2012 at 9:40 AM, Stefan Santesson <stefan@aaa-sec.com> wrote:
> Agenda for Vancouver is up:
> http://www.ietf.org/proceedings/84/agenda/agenda-84-pkix
>
> Please let me know if I missed anything.
>
> /Stefan
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix



-- 
Website: http://hallambaker.com/

From tgindin@us.ibm.com  Mon Jul 23 18:25:24 2012
Return-Path: <tgindin@us.ibm.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3DCAB11E80F3 for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 18:25:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.524
X-Spam-Level: 
X-Spam-Status: No, score=-10.524 tagged_above=-999 required=5 tests=[AWL=0.075, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id njIqtaw2axUN for <pkix@ietfa.amsl.com>; Mon, 23 Jul 2012 18:25:23 -0700 (PDT)
Received: from e7.ny.us.ibm.com (e7.ny.us.ibm.com [32.97.182.137]) by ietfa.amsl.com (Postfix) with ESMTP id C172711E8085 for <pkix@ietf.org>; Mon, 23 Jul 2012 18:25:22 -0700 (PDT)
Received: from /spool/local by e7.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <pkix@ietf.org> from <tgindin@us.ibm.com>; Mon, 23 Jul 2012 21:25:15 -0400
Received: from d01dlp01.pok.ibm.com (9.56.224.56) by e7.ny.us.ibm.com (192.168.1.107) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Mon, 23 Jul 2012 21:24:59 -0400
Received: from d01relay06.pok.ibm.com (d01relay06.pok.ibm.com [9.56.227.116]) by d01dlp01.pok.ibm.com (Postfix) with ESMTP id 934F238C803F for <pkix@ietf.org>; Mon, 23 Jul 2012 21:24:58 -0400 (EDT)
Received: from d01av05.pok.ibm.com (d01av05.pok.ibm.com [9.56.224.195]) by d01relay06.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id q6O1OwRM45547652 for <pkix@ietf.org>; Mon, 23 Jul 2012 21:24:58 -0400
Received: from d01av05.pok.ibm.com (loopback [127.0.0.1]) by d01av05.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id q6O1Ow4L018113 for <pkix@ietf.org>; Mon, 23 Jul 2012 21:24:58 -0400
Received: from d01ml062.pok.ibm.com (d01ml062.pok.ibm.com [9.63.10.95]) by d01av05.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id q6O1Owsd018110; Mon, 23 Jul 2012 21:24:58 -0400
In-Reply-To: <20120723174717.A376D1A0E7@ld9781.wdf.sap.corp>
References: <OF0C759671.4F90B3E2-ON85257A41.0048ABEC-85257A41.004926B8@us.ibm.com> <20120723174717.A376D1A0E7@ld9781.wdf.sap.corp>
To: mrex@sap.com
MIME-Version: 1.0
X-KeepSent: 34FB1CDC:F7B85EE8-85257A44:007853A7; type=4; name=$KeepSent
X-Mailer: Lotus Notes Build V853_CD5_06022011 June 02, 2011
From: Tom Gindin <tgindin@us.ibm.com>
Message-ID: <OF34FB1CDC.F7B85EE8-ON85257A44.007853A7-85257A45.0007C8A7@us.ibm.com>
Date: Mon, 23 Jul 2012 21:24:57 -0400
X-MIMETrack: Serialize by Router on D01ML062/01/M/IBM(Release 8.5.3 ZX853HP5|January 12, 2012) at 07/23/2012 21:24:58, Serialize complete at 07/23/2012 21:24:58
Content-Type: text/plain; charset="US-ASCII"
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 12072401-5806-0000-0000-00001799A7F4
Cc: pkix@ietf.org
Subject: Re: [pkix] new version of 5280 clarifications
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Jul 2012 01:25:24 -0000

        Martin:

        I do know that certificate, and I have had a copy of it for 
several years.  Entrust issued another one with the same key and name and 
standard extensions.  I've had a copy of that one for over two years as 
well.
        I would characterize the older of the two certificates as a 
"non-compliant CA certificate" rather than as a "non-CA certificate", 
since its NetscapeCertType extension indicates that it's a CA.  Its 
notBefore date is less than a year after RFC 2459.
        Would you think my wording would be more appropriate as "a 
certificate containing a KeyUsage extension without keyCertSign set"? That 
thing doesn't have a KeyUsage, and most v3 EE certificates do.

Tom Gindin





From:   mrex@sap.com (Martin Rex)
To:     Tom Gindin/Watson/IBM@IBMUS, 
Cc:     Peter Sylvester <peter.sylvester@edelweb.fr>, pkix@ietf.org
Date:   07/23/2012 01:52 PM
Subject:        Re: [pkix] new version of 5280 clarifications



Tom Gindin wrote:
>         Peter:
> 
>         Admittedly, my word choice was inconsistent.  I should have said 
"
> still used as sources for trust anchors", to match the later reference 
to 
> "importing".  However, the issuer of a v3 non-CA certificate, whether 
the 
> subject or not, does not intend that anyone use that key and name to 
> validate other certificates.  Therefore, code which creates trust 
anchors 
> by importing certificates should not do so with a v3 non-CA certificate, 

> although it may deem these certificates to be directly trusted EE's if 
it 
> so chooses.

Unfortunately, the world is not as simple as we might like it to be:

  http://www.entrust.net/knowledge-base/technote.cfm?tn=7869

To me it appears that neither the admin who created the cert,
nor the software that he used for this, nor any of the Browser vendors/
suppliers adequately complained about the obvious invalidity of this
X.509v3 RootCA cert, before it was wide shipped and put in use.

Our own PKI software did not allow use of such a cert as "trust anchor"
(i.e. signer of other certs), so I received a few support calls back then.


-Martin




From stefan@aaa-sec.com  Tue Jul 24 07:43:44 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0F8D21F8681 for <pkix@ietfa.amsl.com>; Tue, 24 Jul 2012 07:43:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.341
X-Spam-Level: 
X-Spam-Status: No, score=-101.341 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iDcyaS8S3Q7x for <pkix@ietfa.amsl.com>; Tue, 24 Jul 2012 07:43:43 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id BC2A921F850D for <pkix@ietf.org>; Tue, 24 Jul 2012 07:43:41 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 7C15922A45CA for <pkix@ietf.org>; Tue, 24 Jul 2012 16:43:40 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id cYy8lGYECNYK for <pkix@ietf.org>; Tue, 24 Jul 2012 16:43:40 +0200 (CEST)
Received: from s328.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 107CF22A45D3 for <pkix@ietf.org>; Tue, 24 Jul 2012 16:43:40 +0200 (CEST)
Received: (qmail 1950 invoked from network); 24 Jul 2012 14:43:39 -0000
Received: from 2-248-142-230-no39.business.telia.com (HELO [192.168.1.12]) (stefan@fiddler.nu@[2.248.142.230]) (envelope-sender <stefan@aaa-sec.com>) by s328.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <turners@ieca.com>; 24 Jul 2012 14:43:39 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Tue, 24 Jul 2012 16:43:37 +0200
From: Stefan Santesson <stefan@aaa-sec.com>
To: Sean Turner <turners@ieca.com>
Message-ID: <CC34805E.4850C%stefan@aaa-sec.com>
Thread-Topic: RFC2560bis update
In-Reply-To: <500CC183.3000402@ieca.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Cc: pkix@ietf.org
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Jul 2012 14:43:44 -0000

Reposted the draft now with all but one errata included:
http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.txt


Diff to RFC 2560:
http://tools.ietf.org//rfcdiff?url1=http://tools.ietf.org/rfc/rfc2560.txt&u
rl2=http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.txt

The only errata not adopted is editorial errata 3251
The errata does not suggest any text that is better in my mind, and that
section is in any way the main subject for final wordsmithing in the
process to complete this update (section 4.2.2.2)

/Stefan




On 12-07-23 5:14 AM, "Sean Turner" <turners@ieca.com> wrote:

>Stefan,
>
>In terms of figuring out what's changed in the draft, this version is
>much easier to follow.
>
>The addition of the list of changes was definitely a good idea
>(definitely saved yourself a comment from me during AD review).
>
>I haven't checked this but did you incorporate the verified errata and
>considered the HFDU (hold for document update) errata?
>
>spt
>
>On 7/20/12 1:07 PM, Stefan Santesson wrote:
>> All,
>>
>> I finally got to tackle the update of RFC2560bis document.
>>
>> At the last ITEF/PKIX meeting we concluded that this effort needs a
>>restart.
>> The changes in the 04 draft compared to the original document are so
>> extensive that it is hard to make sure that the update is actually
>> compatible with the existing standard.
>>
>> I have therefore made a new draft almost from scratch, trying to change
>> as little as possible compared to RFC 2560.
>>
>> The new draft is available here:
>> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_02.txt
>>
>> A diff compared to RFC 2560 is available here:
>> http://tinyurl.com/rfc2560bis05diff
>>
>> The list of changes (this list is included in the draft) is:
>>
>> This document differs from RFC 2560 in only a few areas:
>>
>>     o  Section 4.1.1 specifies the ASN.1 syntax for the nonce
>>        extension, which was missing in RFC 2560.
>>
>>     o  Section 4.4.7 specifies a new extension that may be included in
>>        a request message to specify signature algorithms the client
>>        would prefer the server use to sign the response as specified
>>        in [RFC6277].
>>
>>     o  Section 2.3 extends the use of the "unauthorized" error
>>        response, as specified in [RFC5019].
>>
>>     o  Section 4.2.1 and 4.2.2.3 states that a response may include
>>        revocation status information for certificates that were not
>>        included in the request, as permitted in [RFC5019].
>>
>>     o  Section 4.3 changes set of cryptographic algorithms that
>>        clients must support and the set of cryptographic algorithms
>>        that clients should support as specified in [RFC6277].
>>
>>     o Section 4.2.2.2 has been updated to clarify when a responder is
>>        considered an Authorized Responder.
>>
>>
>>
>> Section headings and numbering are as much as possible kept intact from
>> RFC 2560.
>> The ASN-1 modules are imported form rfc2560bis draft 04.
>>
>> What important updates did I miss to cover in this draft?
>>
>> If this is considered a good starting point for a restarted draft
>> effort, then I will publish this as draft 05 as soon as the draft
>> submission is re-opened.
>>
>> /Stefan
>>
>>
>>
>>
>>
>>



From stefan@aaa-sec.com  Tue Jul 24 07:56:05 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06AEF21F8642 for <pkix@ietfa.amsl.com>; Tue, 24 Jul 2012 07:56:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.341
X-Spam-Level: 
X-Spam-Status: No, score=-101.341 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_ILLEGAL_IP=1.908, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wuQJW51QZME6 for <pkix@ietfa.amsl.com>; Tue, 24 Jul 2012 07:56:04 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 4F59421F863B for <pkix@ietf.org>; Tue, 24 Jul 2012 07:56:04 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 722B222A62B7 for <pkix@ietf.org>; Tue, 24 Jul 2012 16:56:03 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 7zuJ_2oiKVQL for <pkix@ietf.org>; Tue, 24 Jul 2012 16:56:03 +0200 (CEST)
Received: from s331.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 41ADD22A6155 for <pkix@ietf.org>; Tue, 24 Jul 2012 16:56:03 +0200 (CEST)
Received: (qmail 47991 invoked from network); 24 Jul 2012 14:56:03 -0000
Received: from 2-248-142-230-no39.business.telia.com (HELO [192.168.1.12]) (stefan@fiddler.nu@[2.248.142.230]) (envelope-sender <stefan@aaa-sec.com>) by s331.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <pkix@ietf.org>; 24 Jul 2012 14:56:03 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Tue, 24 Jul 2012 16:56:00 +0200
From: Stefan Santesson <stefan@aaa-sec.com>
To: <pkix@ietf.org>
Message-ID: <CC348402.48545%stefan@aaa-sec.com>
Thread-Topic: [pkix] Agenda posed
In-Reply-To: <CC3320B9.480D2%stefan@aaa-sec.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Subject: Re: [pkix] Agenda posed
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Jul 2012 14:56:05 -0000

Agenda updated.

Status is still preliminary.

/Stefan

On 12-07-23 3:40 PM, "Stefan Santesson" <stefan@aaa-sec.com> wrote:

>Agenda for Vancouver is up:
>http://www.ietf.org/proceedings/84/agenda/agenda-84-pkix
>
>Please let me know if I missed anything.
>
>/Stefan
>
>
>_______________________________________________
>pkix mailing list
>pkix@ietf.org
>https://www.ietf.org/mailman/listinfo/pkix



From Internet-Drafts@ietf.org  Tue Jul 24 16:03:30 2012
Return-Path: <Internet-Drafts@ietf.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 31A1711E807F; Tue, 24 Jul 2012 16:03:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.391
X-Spam-Level: 
X-Spam-Status: No, score=-102.391 tagged_above=-999 required=5 tests=[AWL=0.208, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aqAXFbl7Z-pE; Tue, 24 Jul 2012 16:03:29 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 69CD711E809F; Tue, 24 Jul 2012 16:03:29 -0700 (PDT)
MIME-Version: 1.0
Content-Type: Multipart/Mixed; Boundary="NextPart"
From: Internet-Drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.30p3
Message-ID: <20120724230329.11044.18940.idtracker@ietfa.amsl.com>
Date: Tue, 24 Jul 2012 16:03:29 -0700
Cc: pkix@ietf.org
Subject: [pkix] I-D ACTION:draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Jul 2012 23:03:30 -0000

--NextPart

A new Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Public-Key Infrastructure (X.509) Working Group of the IETF.

    Title         : Updates to the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile 
    Author(s)     : P. Yee
    Filename      : draft-ietf-pkix-rfc5280-clarifications
    Pages         : 7 
    Date          : July 24, 2012 
    
This document updates RFC 5280, the Internet X.509 Public Key
   Infrastructure Certificate and Certificate Revocation List (CRL)
   Profile.  This document changes the set of acceptable encoding
   methods for the explicitText field of the user notice policy
   qualifier and clarifies the rules for converting internationalized
   domain name labels to ASCII.  This document also provides some
   clarifications on the use of self-signed certificates, trust anchors,
   and some updated security considerations.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-pkix-rfc5280-clarifications-06.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Message/External-body;
	name="draft-ietf-pkix-rfc5280-clarifications";
	site="ftp.ietf.org"; access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID: <2012-07-24160329.I-D@ietf.org>


--NextPart--

From Internet-Drafts@ietf.org  Tue Jul 24 16:07:00 2012
Return-Path: <Internet-Drafts@ietf.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1DF7711E80B8; Tue, 24 Jul 2012 16:07:00 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.399
X-Spam-Level: 
X-Spam-Status: No, score=-102.399 tagged_above=-999 required=5 tests=[AWL=0.200, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d2fU8ppf6phE; Tue, 24 Jul 2012 16:06:59 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A69C611E80A5; Tue, 24 Jul 2012 16:06:59 -0700 (PDT)
MIME-Version: 1.0
Content-Type: Multipart/Mixed; Boundary="NextPart"
From: Internet-Drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.30p3
Message-ID: <20120724230659.19241.99978.idtracker@ietfa.amsl.com>
Date: Tue, 24 Jul 2012 16:06:59 -0700
Cc: pkix@ietf.org
Subject: [pkix] I-D ACTION:draft-ietf-pkix-cmp-transport-protocols-20.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 24 Jul 2012 23:07:00 -0000

--NextPart

A new Internet-Draft is available from the on-line Internet-Drafts directories.
This draft is a work item of the Public-Key Infrastructure (X.509) Working Group of the IETF.

    Title         : Internet X.509 Public Key Infrastructure -- HTTP Transfer for CMP
    Author(s)     : T. Kause, et al
    Filename      : draft-ietf-pkix-cmp-transport-protocols
    Pages         : 15 
    Date          : July 24, 2012 
    
This document describes how to layer the Certificate Management
   Protocol over HTTP.  It is the &quot;CMPtrans&quot; document referenced in RFC
   4210 and therefore updates the reference given therein.

A URL for this Internet-Draft is:
http://www.ietf.org/internet-drafts/draft-ietf-pkix-cmp-transport-protocols-20.txt

Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/

Below is the data which will enable a MIME compliant mail reader
implementation to automatically retrieve the ASCII version of the
Internet-Draft.

--NextPart
Content-Type: Message/External-body;
	name="draft-ietf-pkix-cmp-transport-protocols";
	site="ftp.ietf.org"; access-type="anon-ftp";
	directory="internet-drafts"

Content-Type: text/plain
Content-ID: <2012-07-24160659.I-D@ietf.org>


--NextPart--

From paul.hoffman@vpnc.org  Tue Jul 24 17:06:19 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 85CFC11E8088 for <pkix@ietfa.amsl.com>; Tue, 24 Jul 2012 17:06:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.58
X-Spam-Level: 
X-Spam-Status: No, score=-102.58 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ksb+p02KaTN3 for <pkix@ietfa.amsl.com>; Tue, 24 Jul 2012 17:06:19 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id F270411E8080 for <pkix@ietf.org>; Tue, 24 Jul 2012 17:06:18 -0700 (PDT)
Received: from [10.20.30.100] (50-1-50-97.dsl.dynamic.fusionbroadband.com [50.1.50.97]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6ONF2GL048044 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for <pkix@ietf.org>; Tue, 24 Jul 2012 16:15:03 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
From: Paul Hoffman <paul.hoffman@vpnc.org>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Date: Tue, 24 Jul 2012 17:06:15 -0700
Message-Id: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org>
To: IETF PKIX <pkix@ietf.org>
Mime-Version: 1.0 (Apple Message framework v1278)
X-Mailer: Apple Mail (2.1278)
Subject: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jul 2012 00:06:19 -0000

The very latest wording:

|  In some cases, a self-signed certificate that does not contain a
|  BasicConstraints extension (and thus is implicitly an EE certificate)
|  is used to convey a public key. Such a certificate (i.e., a self-
|  signed certificate not marked as a CA certificate) is not compatible
|  with the path validation rules described in Section 6, or the
|  definitions in the paragraph above. This document RECOMMENDS that
|  self-signed certificates used to convey trust anchor data be marked
|  (see Section 4.2.1.9) as CA certificates, but acknowledges that this
|  convention is often not adopted in practice. Other uses of self-
|  signed EE certificates are outside the scope of this specification.

This seems fine to me, and solves the problem that we encountered in the =
DANE WG. A slight proposed rewording for clarity with no semantic =
changes:

A self-signed certificate that does not contain a BasicConstraints
extension is implicitly an EE certificate, and is explicitly not
marked as a CA certificate. Such a certificate is used to convey a
public key in some environments. Such a certificate is not
compatible wth the path validation ...

--Paul Hoffman=

From rbarnes@bbn.com  Tue Jul 24 17:14:36 2012
Return-Path: <rbarnes@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF9E521F84B9 for <pkix@ietfa.amsl.com>; Tue, 24 Jul 2012 17:14:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.608
X-Spam-Level: 
X-Spam-Status: No, score=-106.608 tagged_above=-999 required=5 tests=[AWL=-0.009, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id l8Za5z6FCHyN for <pkix@ietfa.amsl.com>; Tue, 24 Jul 2012 17:14:36 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 481A821F84B6 for <pkix@ietf.org>; Tue, 24 Jul 2012 17:14:36 -0700 (PDT)
Received: from [128.89.254.152] (port=49768) by smtp.bbn.com with esmtps (TLSv1:AES128-SHA:128) (Exim 4.77 (FreeBSD)) (envelope-from <rbarnes@bbn.com>) id 1StpFK-000FZZ-By; Tue, 24 Jul 2012 20:14:34 -0400
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=us-ascii
From: "Richard L. Barnes" <rbarnes@bbn.com>
In-Reply-To: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org>
Date: Tue, 24 Jul 2012 17:14:33 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <8DE4D53A-1A6B-469D-9037-9864BE2918E8@bbn.com>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org>
To: Paul Hoffman <paul.hoffman@vpnc.org>
X-Mailer: Apple Mail (2.1278)
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jul 2012 00:14:36 -0000

On Jul 24, 2012, at 5:06 PM, Paul Hoffman wrote:

> The very latest wording:
>=20
> |  In some cases, a self-signed certificate that does not contain a
> |  BasicConstraints extension (and thus is implicitly an EE =
certificate)
> |  is used to convey a public key. Such a certificate (i.e., a self-
> |  signed certificate not marked as a CA certificate) is not =
compatible
> |  with the path validation rules described in Section 6, or the
> |  definitions in the paragraph above. This document RECOMMENDS that
> |  self-signed certificates used to convey trust anchor data be marked
> |  (see Section 4.2.1.9) as CA certificates, but acknowledges that =
this
> |  convention is often not adopted in practice. Other uses of self-
> |  signed EE certificates are outside the scope of this specification.
>=20
> This seems fine to me, and solves the problem that we encountered in =
the DANE WG. A slight proposed rewording for clarity with no semantic =
changes:
>=20
> A self-signed certificate that does not contain a BasicConstraints
> extension is implicitly an EE certificate, and is explicitly not
> marked as a CA certificate. Such a certificate is used to convey a
> public key in some environments. Such a certificate is not
> compatible wth the path validation ...

This text looks clearer to me.

--Richard=

From eabalea@gmail.com  Wed Jul 25 03:17:33 2012
Return-Path: <eabalea@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 73E3021F8587 for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 03:17:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -3.512
X-Spam-Level: 
X-Spam-Status: No, score=-3.512 tagged_above=-999 required=5 tests=[AWL=0.086,  BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9l2XRt4YzkEw for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 03:17:32 -0700 (PDT)
Received: from mail-ob0-f172.google.com (mail-ob0-f172.google.com [209.85.214.172]) by ietfa.amsl.com (Postfix) with ESMTP id 1F48021F850D for <pkix@ietf.org>; Wed, 25 Jul 2012 03:17:32 -0700 (PDT)
Received: by obbwc20 with SMTP id wc20so1026589obb.31 for <pkix@ietf.org>; Wed, 25 Jul 2012 03:17:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=5/O3XpxqdawWxUzc9qWGk3GXKLd4YfgCYTOcsuAiI4I=; b=Scy97WxZy6nmQG6a2Nz0mzaQwRaeioF1MUcTjI7Nummvkh855FlbtVmiHRHZiIzk2p Bv6N5Q4MoDcLlSK58vtQ6lAyVVY3a9i3POd2JlhD825iTpEUPc4dg5s0n/IZWWpn+dV6 IZXp/jykfx9xnQ2w/bUmLrS4H7/cPrngPPHUNqkfotEKAsGVKXZdzZER5Z1XlWz2E5M8 1yHIp0DtB4tEkXaymKFjYcWnDDhyiq4qXfdSuf374etykwrl/EHhS2F53CQYdeEq+qR8 D1ozfdFwBhSBsa0Pi5zaih83uXK491R4hLKU4aKBfYLDaHNmNJqytlnj8NDVxJXscf6x 0Zfg==
MIME-Version: 1.0
Received: by 10.60.30.170 with SMTP id t10mr33321131oeh.10.1343211451668; Wed, 25 Jul 2012 03:17:31 -0700 (PDT)
Received: by 10.182.55.227 with HTTP; Wed, 25 Jul 2012 03:17:31 -0700 (PDT)
In-Reply-To: <CC34805E.4850C%stefan@aaa-sec.com>
References: <500CC183.3000402@ieca.com> <CC34805E.4850C%stefan@aaa-sec.com>
Date: Wed, 25 Jul 2012 12:17:31 +0200
Message-ID: <CA+i=0E4PLkgoN9jnpePHTL=SQcj808m4jTS8yar71eV2GdO8Zw@mail.gmail.com>
From: Erwann Abalea <eabalea@gmail.com>
To: Stefan Santesson <stefan@aaa-sec.com>
Content-Type: multipart/alternative; boundary=e89a8ff1cb686f586504c5a4c940
Cc: pkix@ietf.org
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jul 2012 10:17:33 -0000

--e89a8ff1cb686f586504c5a4c940
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

=C2=A74.4.1, the OID definitions paging is messed (id-pkix-ocsp-nonce is sp=
lit).
=C2=A74.2.2.2.1, that seems stupid, but couldn't you also add an ASN.1 synt=
ax
for the ocspNoCheck extension? OCSP responders with an empty value for this
extension have been seen (it's not permitted by the standard).

2012/7/24 Stefan Santesson <stefan@aaa-sec.com>

>
> Reposted the draft now with all but one errata included:
> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.txt
>
>
> Diff to RFC 2560:
> http://tools.ietf.org//rfcdiff?url1=3Dhttp://tools.ietf.org/rfc/rfc2560.t=
xt&u
> rl2=3Dhttp://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03=
.txt
>
> The only errata not adopted is editorial errata 3251
> The errata does not suggest any text that is better in my mind, and that
> section is in any way the main subject for final wordsmithing in the
> process to complete this update (section 4.2.2.2)
>
> /Stefan
>
>
>
>
> On 12-07-23 5:14 AM, "Sean Turner" <turners@ieca.com> wrote:
>
> >Stefan,
> >
> >In terms of figuring out what's changed in the draft, this version is
> >much easier to follow.
> >
> >The addition of the list of changes was definitely a good idea
> >(definitely saved yourself a comment from me during AD review).
> >
> >I haven't checked this but did you incorporate the verified errata and
> >considered the HFDU (hold for document update) errata?
> >
> >spt
> >
> >On 7/20/12 1:07 PM, Stefan Santesson wrote:
> >> All,
> >>
> >> I finally got to tackle the update of RFC2560bis document.
> >>
> >> At the last ITEF/PKIX meeting we concluded that this effort needs a
> >>restart.
> >> The changes in the 04 draft compared to the original document are so
> >> extensive that it is hard to make sure that the update is actually
> >> compatible with the existing standard.
> >>
> >> I have therefore made a new draft almost from scratch, trying to chang=
e
> >> as little as possible compared to RFC 2560.
> >>
> >> The new draft is available here:
> >> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_02.tx=
t
> >>
> >> A diff compared to RFC 2560 is available here:
> >> http://tinyurl.com/rfc2560bis05diff
> >>
> >> The list of changes (this list is included in the draft) is:
> >>
> >> This document differs from RFC 2560 in only a few areas:
> >>
> >>     o  Section 4.1.1 specifies the ASN.1 syntax for the nonce
> >>        extension, which was missing in RFC 2560.
> >>
> >>     o  Section 4.4.7 specifies a new extension that may be included in
> >>        a request message to specify signature algorithms the client
> >>        would prefer the server use to sign the response as specified
> >>        in [RFC6277].
> >>
> >>     o  Section 2.3 extends the use of the "unauthorized" error
> >>        response, as specified in [RFC5019].
> >>
> >>     o  Section 4.2.1 and 4.2.2.3 states that a response may include
> >>        revocation status information for certificates that were not
> >>        included in the request, as permitted in [RFC5019].
> >>
> >>     o  Section 4.3 changes set of cryptographic algorithms that
> >>        clients must support and the set of cryptographic algorithms
> >>        that clients should support as specified in [RFC6277].
> >>
> >>     o Section 4.2.2.2 has been updated to clarify when a responder is
> >>        considered an Authorized Responder.
> >>
> >>
> >>
> >> Section headings and numbering are as much as possible kept intact fro=
m
> >> RFC 2560.
> >> The ASN-1 modules are imported form rfc2560bis draft 04.
> >>
> >> What important updates did I miss to cover in this draft?
> >>
> >> If this is considered a good starting point for a restarted draft
> >> effort, then I will publish this as draft 05 as soon as the draft
> >> submission is re-opened.
> >>
> >> /Stefan
> >>
> >>
> >>
> >>
> >>
> >>
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>



--=20
Erwann.

--e89a8ff1cb686f586504c5a4c940
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

=C2=A74.4.1, the OID definitions paging is messed (id-pkix-ocsp-nonce is sp=
lit).<div>=C2=A74.2.2.2.1, that seems stupid, but couldn&#39;t you also add=
 an ASN.1 syntax for the ocspNoCheck extension? OCSP responders with an emp=
ty value for this extension have been seen (it&#39;s not permitted by the s=
tandard).<br>
<br><div class=3D"gmail_quote">2012/7/24 Stefan Santesson <span dir=3D"ltr"=
>&lt;<a href=3D"mailto:stefan@aaa-sec.com" target=3D"_blank">stefan@aaa-sec=
.com</a>&gt;</span><br><blockquote class=3D"gmail_quote" style=3D"margin:0 =
0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<br>
Reposted the draft now with all but one errata included:<br>
<a href=3D"http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05=
_03.txt" target=3D"_blank">http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pk=
ix-rfc2560bis-05_03.txt</a><br>
<br>
<br>
Diff to RFC 2560:<br>
<a href=3D"http://tools.ietf.org//rfcdiff?url1=3Dhttp://tools.ietf.org/rfc/=
rfc2560.txt&amp;u
rl2=3Dhttp://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.t=
xt" target=3D"_blank">http://tools.ietf.org//rfcdiff?url1=3Dhttp://tools.ie=
tf.org/rfc/rfc2560.txt&amp;u<br>
rl2=3Dhttp://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.t=
xt</a><br>
<br>
The only errata not adopted is editorial errata 3251<br>
The errata does not suggest any text that is better in my mind, and that<br=
>
section is in any way the main subject for final wordsmithing in the<br>
process to complete this update (section 4.2.2.2)<br>
<div class=3D"im HOEnZb"><br>
/Stefan<br>
<br>
<br>
<br>
<br>
On 12-07-23 5:14 AM, &quot;Sean Turner&quot; &lt;<a href=3D"mailto:turners@=
ieca.com">turners@ieca.com</a>&gt; wrote:<br>
<br>
</div><div class=3D"HOEnZb"><div class=3D"h5">&gt;Stefan,<br>
&gt;<br>
&gt;In terms of figuring out what&#39;s changed in the draft, this version =
is<br>
&gt;much easier to follow.<br>
&gt;<br>
&gt;The addition of the list of changes was definitely a good idea<br>
&gt;(definitely saved yourself a comment from me during AD review).<br>
&gt;<br>
&gt;I haven&#39;t checked this but did you incorporate the verified errata =
and<br>
&gt;considered the HFDU (hold for document update) errata?<br>
&gt;<br>
&gt;spt<br>
&gt;<br>
&gt;On 7/20/12 1:07 PM, Stefan Santesson wrote:<br>
&gt;&gt; All,<br>
&gt;&gt;<br>
&gt;&gt; I finally got to tackle the update of RFC2560bis document.<br>
&gt;&gt;<br>
&gt;&gt; At the last ITEF/PKIX meeting we concluded that this effort needs =
a<br>
&gt;&gt;restart.<br>
&gt;&gt; The changes in the 04 draft compared to the original document are =
so<br>
&gt;&gt; extensive that it is hard to make sure that the update is actually=
<br>
&gt;&gt; compatible with the existing standard.<br>
&gt;&gt;<br>
&gt;&gt; I have therefore made a new draft almost from scratch, trying to c=
hange<br>
&gt;&gt; as little as possible compared to RFC 2560.<br>
&gt;&gt;<br>
&gt;&gt; The new draft is available here:<br>
&gt;&gt; <a href=3D"http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2=
560bis-05_02.txt" target=3D"_blank">http://aaa-sec.com/ietf/rfc2560bis/draf=
t-ietf-pkix-rfc2560bis-05_02.txt</a><br>
&gt;&gt;<br>
&gt;&gt; A diff compared to RFC 2560 is available here:<br>
&gt;&gt; <a href=3D"http://tinyurl.com/rfc2560bis05diff" target=3D"_blank">=
http://tinyurl.com/rfc2560bis05diff</a><br>
&gt;&gt;<br>
&gt;&gt; The list of changes (this list is included in the draft) is:<br>
&gt;&gt;<br>
&gt;&gt; This document differs from RFC 2560 in only a few areas:<br>
&gt;&gt;<br>
&gt;&gt; =C2=A0 =C2=A0 o =C2=A0Section 4.1.1 specifies the ASN.1 syntax for=
 the nonce<br>
&gt;&gt; =C2=A0 =C2=A0 =C2=A0 =C2=A0extension, which was missing in RFC 256=
0.<br>
&gt;&gt;<br>
&gt;&gt; =C2=A0 =C2=A0 o =C2=A0Section 4.4.7 specifies a new extension that=
 may be included in<br>
&gt;&gt; =C2=A0 =C2=A0 =C2=A0 =C2=A0a request message to specify signature =
algorithms the client<br>
&gt;&gt; =C2=A0 =C2=A0 =C2=A0 =C2=A0would prefer the server use to sign the=
 response as specified<br>
&gt;&gt; =C2=A0 =C2=A0 =C2=A0 =C2=A0in [RFC6277].<br>
&gt;&gt;<br>
&gt;&gt; =C2=A0 =C2=A0 o =C2=A0Section 2.3 extends the use of the &quot;una=
uthorized&quot; error<br>
&gt;&gt; =C2=A0 =C2=A0 =C2=A0 =C2=A0response, as specified in [RFC5019].<br=
>
&gt;&gt;<br>
&gt;&gt; =C2=A0 =C2=A0 o =C2=A0Section 4.2.1 and 4.2.2.3 states that a resp=
onse may include<br>
&gt;&gt; =C2=A0 =C2=A0 =C2=A0 =C2=A0revocation status information for certi=
ficates that were not<br>
&gt;&gt; =C2=A0 =C2=A0 =C2=A0 =C2=A0included in the request, as permitted i=
n [RFC5019].<br>
&gt;&gt;<br>
&gt;&gt; =C2=A0 =C2=A0 o =C2=A0Section 4.3 changes set of cryptographic alg=
orithms that<br>
&gt;&gt; =C2=A0 =C2=A0 =C2=A0 =C2=A0clients must support and the set of cry=
ptographic algorithms<br>
&gt;&gt; =C2=A0 =C2=A0 =C2=A0 =C2=A0that clients should support as specifie=
d in [RFC6277].<br>
&gt;&gt;<br>
&gt;&gt; =C2=A0 =C2=A0 o Section 4.2.2.2 has been updated to clarify when a=
 responder is<br>
&gt;&gt; =C2=A0 =C2=A0 =C2=A0 =C2=A0considered an Authorized Responder.<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt; Section headings and numbering are as much as possible kept intact=
 from<br>
&gt;&gt; RFC 2560.<br>
&gt;&gt; The ASN-1 modules are imported form rfc2560bis draft 04.<br>
&gt;&gt;<br>
&gt;&gt; What important updates did I miss to cover in this draft?<br>
&gt;&gt;<br>
&gt;&gt; If this is considered a good starting point for a restarted draft<=
br>
&gt;&gt; effort, then I will publish this as draft 05 as soon as the draft<=
br>
&gt;&gt; submission is re-opened.<br>
&gt;&gt;<br>
&gt;&gt; /Stefan<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
&gt;&gt;<br>
<br>
<br>
_______________________________________________<br>
pkix mailing list<br>
<a href=3D"mailto:pkix@ietf.org">pkix@ietf.org</a><br>
<a href=3D"https://www.ietf.org/mailman/listinfo/pkix" target=3D"_blank">ht=
tps://www.ietf.org/mailman/listinfo/pkix</a><br>
</div></div></blockquote></div><br><br clear=3D"all"><div><br></div>-- <br>=
Erwann.<br>
</div>

--e89a8ff1cb686f586504c5a4c940--

From SChokhani@cygnacom.com  Wed Jul 25 07:12:41 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C798F21F852E for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 07:12:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WKkFpSgu4xV6 for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 07:12:41 -0700 (PDT)
Received: from ipedge2.cygnacom.com (ipedge2.cygnacom.com [216.191.252.27]) by ietfa.amsl.com (Postfix) with ESMTP id E81AF21F84E6 for <pkix@ietf.org>; Wed, 25 Jul 2012 07:12:40 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,653,1336363200";  d="scan'208";a="1467538"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge2.cygnacom.com with ESMTP; 25 Jul 2012 10:12:40 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Wed, 25 Jul 2012 10:12:39 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: Paul Hoffman <paul.hoffman@vpnc.org>, IETF PKIX <pkix@ietf.org>
Date: Wed, 25 Jul 2012 10:12:39 -0400
Thread-Topic: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
Thread-Index: Ac1p+VSCCagrRmq9Tyyo9wLcfMHDZwAdb8Yg
Message-ID: <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org>
In-Reply-To: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [pkix] Self-signed cert wording in	draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jul 2012 14:12:42 -0000

This text in the clarification as well as Paul's modifications are self-con=
tradictory and inconsistent with 5280.  I propose the following replacement=
:

| This document RECOMMENDS that =20
| self-signed certificates used to convey trust anchor data be marked =20
| (see Section 4.2.1.9) as CA certificates, but acknowledges that this =20
| convention is sometimes not adopted in practice. Uses of self- =20
| signed EE certificates are outside the scope of this specification.

-----Original Message-----
From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of Pau=
l Hoffman
Sent: Tuesday, July 24, 2012 8:06 PM
To: IETF PKIX
Subject: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifi=
cations-06.txt

The very latest wording:

|  In some cases, a self-signed certificate that does not contain a =20
| BasicConstraints extension (and thus is implicitly an EE certificate) =20
| is used to convey a public key. Such a certificate (i.e., a self- =20
| signed certificate not marked as a CA certificate) is not compatible =20
| with the path validation rules described in Section 6, or the =20
| definitions in the paragraph above. This document RECOMMENDS that =20
| self-signed certificates used to convey trust anchor data be marked =20
| (see Section 4.2.1.9) as CA certificates, but acknowledges that this =20
| convention is often not adopted in practice. Other uses of self- =20
| signed EE certificates are outside the scope of this specification.

This seems fine to me, and solves the problem that we encountered in the DA=
NE WG. A slight proposed rewording for clarity with no semantic changes:

A self-signed certificate that does not contain a BasicConstraints extensio=
n is implicitly an EE certificate, and is explicitly not marked as a CA cer=
tificate. Such a certificate is used to convey a public key in some environ=
ments. Such a certificate is not compatible wth the path validation ...

--Paul Hoffman
_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From paul.hoffman@vpnc.org  Wed Jul 25 08:08:16 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B44D421F8568 for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 08:08:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.58
X-Spam-Level: 
X-Spam-Status: No, score=-102.58 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yskPRuBNxLQ7 for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 08:08:16 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id 0E9DB21F84EC for <pkix@ietf.org>; Wed, 25 Jul 2012 08:08:15 -0700 (PDT)
Received: from [10.20.30.100] (50-1-50-97.dsl.dynamic.fusionbroadband.com [50.1.50.97]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6PEGmDE076326 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Wed, 25 Jul 2012 07:16:49 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=us-ascii
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com>
Date: Wed, 25 Jul 2012 08:08:01 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com>
To: Santosh Chokhani <schokhani@cygnacom.com>
X-Mailer: Apple Mail (2.1278)
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording in	draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jul 2012 15:08:16 -0000

On Jul 25, 2012, at 7:12 AM, Santosh Chokhani wrote:

> This text in the clarification as well as Paul's modifications are =
self-contradictory and inconsistent with 5280. =20

You jumbled three assertions in that sentence. Separating them out:

- Which two statements in the clarifications draft contradict each =
other?

- Which two statements in my proposed wording contradict each other?

- Of course they are "inconsistent with 5280": this draft updates RFC =
5280.=20

> I propose the following replacement:
>=20
> | This document RECOMMENDS that =20
> | self-signed certificates used to convey trust anchor data be marked =20=

> | (see Section 4.2.1.9) as CA certificates, but acknowledges that this =
=20
> | convention is sometimes not adopted in practice. Uses of self- =20
> | signed EE certificates are outside the scope of this specification.

You are proposing to remove the text that actually describes the =
certificates we are discussing. Serious question: in what way does =
removing that description *help* the reader of the document?

Replacing "often" for "sometimes" doesn't indicate a contradiction; your =
guess as the the frequency is as good as anyone else's.

--Paul Hoffman=

From SChokhani@cygnacom.com  Wed Jul 25 08:33:35 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CF45621F857A for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 08:33:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zLnin7QLPcs4 for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 08:33:35 -0700 (PDT)
Received: from ipedge1.cygnacom.com (ipedge1.cygnacom.com [216.191.252.12]) by ietfa.amsl.com (Postfix) with ESMTP id ECE0B21F8554 for <pkix@ietf.org>; Wed, 25 Jul 2012 08:33:34 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,653,1336363200";  d="scan'208";a="5716359"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge1.cygnacom.com with ESMTP; 25 Jul 2012 11:33:34 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Wed, 25 Jul 2012 11:33:34 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: Paul Hoffman <paul.hoffman@vpnc.org>
Date: Wed, 25 Jul 2012 11:33:32 -0400
Thread-Topic: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
Thread-Index: Ac1qd0+XGtplwVCKRDGl9kcC7q6PPwAAkMEg
Message-ID: <B83745DA469B7847811819C5005244AF362994AE@scygexch7.cygnacom.com>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org>
In-Reply-To: <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording in	draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jul 2012 15:33:35 -0000

Paul,

Before I made my posted, I word searched 5280 for "self signed" and "self-s=
igned" and I found that aside from C.2, self-signed was used only for start=
ing certification path validation context.  So, simply stating that its use=
 for EE is outside the scope of the standard seems the right thing.=20

As to contradiction:
"Such a certificate (i.e., a self-
|  signed certificate not marked as a CA certificate) is not compatible
|  with the path validation rules described in Section 6, or the
|  definitions in the paragraph above."  is incorrect.  Section 6 is fine w=
ith a TA that is not marked as a CA certificate.

Also, stating "other uses of self-signed EE" implies you have discussed at =
least one use.  Neither the RFC nor the clarification identify what that us=
e is.  Do you mean using EE certificate as trust anchor?

"sometimes" "often" change was made to give a realistic impression of the f=
requency.

Finally, what problem not having this text or the text I propose does not s=
olve.  If you tell me that, maybe we can converge on better wording.

-----Original Message-----
From: Paul Hoffman [mailto:paul.hoffman@vpnc.org]=20
Sent: Wednesday, July 25, 2012 11:08 AM
To: Santosh Chokhani
Cc: IETF PKIX
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-cla=
rifications-06.txt

On Jul 25, 2012, at 7:12 AM, Santosh Chokhani wrote:

> This text in the clarification as well as Paul's modifications are self-c=
ontradictory and inconsistent with 5280. =20

You jumbled three assertions in that sentence. Separating them out:

- Which two statements in the clarifications draft contradict each other?

- Which two statements in my proposed wording contradict each other?

- Of course they are "inconsistent with 5280": this draft updates RFC 5280.=
=20

> I propose the following replacement:
>=20
> | This document RECOMMENDS that
> | self-signed certificates used to convey trust anchor data be marked=20
> | (see Section 4.2.1.9) as CA certificates, but acknowledges that this=20
> | convention is sometimes not adopted in practice. Uses of self-=20
> | signed EE certificates are outside the scope of this specification.

You are proposing to remove the text that actually describes the certificat=
es we are discussing. Serious question: in what way does removing that desc=
ription *help* the reader of the document?

Replacing "often" for "sometimes" doesn't indicate a contradiction; your gu=
ess as the the frequency is as good as anyone else's.

--Paul Hoffman

From housley@vigilsec.com  Wed Jul 25 10:31:58 2012
Return-Path: <housley@vigilsec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2B83821F86EC for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 10:31:58 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.583
X-Spam-Level: 
X-Spam-Status: No, score=-102.583 tagged_above=-999 required=5 tests=[AWL=0.016, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gaarukt12yeu for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 10:31:54 -0700 (PDT)
Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id 1FCC721F86D5 for <pkix@ietf.org>; Wed, 25 Jul 2012 10:31:54 -0700 (PDT)
Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id B0DBB9A471B for <pkix@ietf.org>; Wed, 25 Jul 2012 13:31:59 -0400 (EDT)
X-Virus-Scanned: amavisd-new at smetech.net
Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id ExtEbsJChkff for <pkix@ietf.org>; Wed, 25 Jul 2012 13:31:49 -0400 (EDT)
Received: from [128.107.30.91] (unknown [128.107.30.91]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 865649A470F for <pkix@ietf.org>; Wed, 25 Jul 2012 13:31:58 -0400 (EDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1084)
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com>
Date: Wed, 25 Jul 2012 13:31:52 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <4BE59EB1-4379-4F39-ADF6-5C8C0E50711D@vigilsec.com>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com>
To: IETF PKIX <pkix@ietf.org>
X-Mailer: Apple Mail (2.1084)
Subject: Re: [pkix] Self-signed cert wording in	draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jul 2012 17:31:58 -0000

There are two cases, and I think that the confusion is that people have =
tried to handle them in one paragraph.  I think we need a separate =
paragraph for each case.

(1) the self-signed certificate is providing a trust anchor that will be =
used on path validation.

(2) the self-signed certificate is providing a trusted end-entity public =
key, and no path validation is needed.

Russ


On Jul 25, 2012, at 10:12 AM, Santosh Chokhani wrote:

> This text in the clarification as well as Paul's modifications are =
self-contradictory and inconsistent with 5280.  I propose the following =
replacement:
>=20
> | This document RECOMMENDS that =20
> | self-signed certificates used to convey trust anchor data be marked =20=

> | (see Section 4.2.1.9) as CA certificates, but acknowledges that this =
=20
> | convention is sometimes not adopted in practice. Uses of self- =20
> | signed EE certificates are outside the scope of this specification.
>=20
> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf =
Of Paul Hoffman
> Sent: Tuesday, July 24, 2012 8:06 PM
> To: IETF PKIX
> Subject: [pkix] Self-signed cert wording in =
draft-ietf-pkix-rfc5280-clarifications-06.txt
>=20
> The very latest wording:
>=20
> |  In some cases, a self-signed certificate that does not contain a =20=

> | BasicConstraints extension (and thus is implicitly an EE =
certificate) =20
> | is used to convey a public key. Such a certificate (i.e., a self- =20=

> | signed certificate not marked as a CA certificate) is not compatible =
=20
> | with the path validation rules described in Section 6, or the =20
> | definitions in the paragraph above. This document RECOMMENDS that =20=

> | self-signed certificates used to convey trust anchor data be marked =20=

> | (see Section 4.2.1.9) as CA certificates, but acknowledges that this =
=20
> | convention is often not adopted in practice. Other uses of self- =20
> | signed EE certificates are outside the scope of this specification.
>=20
> This seems fine to me, and solves the problem that we encountered in =
the DANE WG. A slight proposed rewording for clarity with no semantic =
changes:
>=20
> A self-signed certificate that does not contain a BasicConstraints =
extension is implicitly an EE certificate, and is explicitly not marked =
as a CA certificate. Such a certificate is used to convey a public key =
in some environments. Such a certificate is not compatible wth the path =
validation ...
>=20
> --Paul Hoffman
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix


From SChokhani@cygnacom.com  Wed Jul 25 11:51:14 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D08A21F86DE for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 11:51:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id fbBjTFKN-W8r for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 11:51:13 -0700 (PDT)
Received: from ipedge1.cygnacom.com (ipedge1.cygnacom.com [216.191.252.12]) by ietfa.amsl.com (Postfix) with ESMTP id 121DE21F86C7 for <pkix@ietf.org>; Wed, 25 Jul 2012 11:51:11 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,654,1336363200";  d="scan'208";a="5718794"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge1.cygnacom.com with ESMTP; 25 Jul 2012 14:50:59 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Wed, 25 Jul 2012 14:50:58 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: Russ Housley <housley@vigilsec.com>, IETF PKIX <pkix@ietf.org>
Date: Wed, 25 Jul 2012 14:50:58 -0400
Thread-Topic: [pkix] Self-signed cert wording	in draft-ietf-pkix-rfc5280-clarifications-06.txt
Thread-Index: Ac1qi2aIxDbl86E6R2ew40QaazoinQACdXJQ
Message-ID: <B83745DA469B7847811819C5005244AF362994E1@scygexch7.cygnacom.com>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <4BE59EB1-4379-4F39-ADF6-5C8C0E50711D@vigilsec.com>
In-Reply-To: <4BE59EB1-4379-4F39-ADF6-5C8C0E50711D@vigilsec.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [pkix] Self-signed cert wording	in	draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 25 Jul 2012 18:51:14 -0000

Russ,

I would think that case 2 can be handled in Section 6.1.1 by add the follow=
ing "When n =3D 0, the information in the trust anchor can be used directly=
 without path validation algorithm presented in this section"

-----Original Message-----
From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of Rus=
s Housley
Sent: Wednesday, July 25, 2012 1:32 PM
To: IETF PKIX
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-cla=
rifications-06.txt

There are two cases, and I think that the confusion is that people have tri=
ed to handle them in one paragraph.  I think we need a separate paragraph f=
or each case.

(1) the self-signed certificate is providing a trust anchor that will be us=
ed on path validation.

(2) the self-signed certificate is providing a trusted end-entity public ke=
y, and no path validation is needed.

Russ


On Jul 25, 2012, at 10:12 AM, Santosh Chokhani wrote:

> This text in the clarification as well as Paul's modifications are self-c=
ontradictory and inconsistent with 5280.  I propose the following replaceme=
nt:
>=20
> | This document RECOMMENDS that
> | self-signed certificates used to convey trust anchor data be marked=20
> | (see Section 4.2.1.9) as CA certificates, but acknowledges that this=20
> | convention is sometimes not adopted in practice. Uses of self-=20
> | signed EE certificates are outside the scope of this specification.
>=20
> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf=20
> Of Paul Hoffman
> Sent: Tuesday, July 24, 2012 8:06 PM
> To: IETF PKIX
> Subject: [pkix] Self-signed cert wording in=20
> draft-ietf-pkix-rfc5280-clarifications-06.txt
>=20
> The very latest wording:
>=20
> |  In some cases, a self-signed certificate that does not contain a=20
> | BasicConstraints extension (and thus is implicitly an EE=20
> | certificate) is used to convey a public key. Such a certificate=20
> | (i.e., a self- signed certificate not marked as a CA certificate) is=20
> | not compatible with the path validation rules described in Section=20
> | 6, or the definitions in the paragraph above. This document=20
> | RECOMMENDS that self-signed certificates used to convey trust anchor=20
> | data be marked (see Section 4.2.1.9) as CA certificates, but=20
> | acknowledges that this convention is often not adopted in practice.=20
> | Other uses of self- signed EE certificates are outside the scope of thi=
s specification.
>=20
> This seems fine to me, and solves the problem that we encountered in the =
DANE WG. A slight proposed rewording for clarity with no semantic changes:
>=20
> A self-signed certificate that does not contain a BasicConstraints extens=
ion is implicitly an EE certificate, and is explicitly not marked as a CA c=
ertificate. Such a certificate is used to convey a public key in some envir=
onments. Such a certificate is not compatible wth the path validation ...
>=20
> --Paul Hoffman
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix

_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From tgindin@us.ibm.com  Wed Jul 25 18:45:26 2012
Return-Path: <tgindin@us.ibm.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6130521F8692 for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 18:45:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.539
X-Spam-Level: 
X-Spam-Status: No, score=-10.539 tagged_above=-999 required=5 tests=[AWL=0.060, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dc0HZy0iXBlD for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 18:45:25 -0700 (PDT)
Received: from e9.ny.us.ibm.com (e9.ny.us.ibm.com [32.97.182.139]) by ietfa.amsl.com (Postfix) with ESMTP id 692FB21F867D for <pkix@ietf.org>; Wed, 25 Jul 2012 18:45:25 -0700 (PDT)
Received: from /spool/local by e9.ny.us.ibm.com with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted for <pkix@ietf.org> from <tgindin@us.ibm.com>; Wed, 25 Jul 2012 21:44:52 -0400
Received: from d01dlp02.pok.ibm.com (9.56.224.85) by e9.ny.us.ibm.com (192.168.1.109) with IBM ESMTP SMTP Gateway: Authorized Use Only! Violators will be prosecuted;  Wed, 25 Jul 2012 21:44:51 -0400
Received: from d01relay03.pok.ibm.com (d01relay03.pok.ibm.com [9.56.227.235]) by d01dlp02.pok.ibm.com (Postfix) with ESMTP id C388C6E8041 for <pkix@ietf.org>; Wed, 25 Jul 2012 21:44:50 -0400 (EDT)
Received: from d01av03.pok.ibm.com (d01av03.pok.ibm.com [9.56.224.217]) by d01relay03.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id q6Q1ioqH317768 for <pkix@ietf.org>; Wed, 25 Jul 2012 21:44:50 -0400
Received: from d01av03.pok.ibm.com (loopback [127.0.0.1]) by d01av03.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id q6Q1infr000612 for <pkix@ietf.org>; Wed, 25 Jul 2012 22:44:50 -0300
Received: from d01ml062.pok.ibm.com (d01ml062.pok.ibm.com [9.63.10.95]) by d01av03.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id q6Q1inhs000606; Wed, 25 Jul 2012 22:44:49 -0300
In-Reply-To: <B83745DA469B7847811819C5005244AF362994E1@scygexch7.cygnacom.com>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org>	<B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <4BE59EB1-4379-4F39-ADF6-5C8C0E50711D@vigilsec.com> <B83745DA469B7847811819C5005244AF362994E1@scygexch7.cygnacom.com>
To: Santosh Chokhani <SChokhani@cygnacom.com>
MIME-Version: 1.0
X-KeepSent: 236E706D:6A8C10DE-85257A47:0009318B; type=4; name=$KeepSent
X-Mailer: Lotus Notes Build V853_CD5_06022011 June 02, 2011
From: Tom Gindin <tgindin@us.ibm.com>
Message-ID: <OF236E706D.6A8C10DE-ON85257A47.0009318B-85257A47.00099A99@us.ibm.com>
Date: Wed, 25 Jul 2012 21:44:47 -0400
X-MIMETrack: Serialize by Router on D01ML062/01/M/IBM(Release 8.5.3 ZX853HP5|January 12, 2012) at 07/25/2012 21:44:49, Serialize complete at 07/25/2012 21:44:49
Content-Type: text/plain; charset="US-ASCII"
X-Content-Scanned: Fidelis XPS MAILER
x-cbid: 12072601-7182-0000-0000-0000021347F7
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert	wording	in	draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 01:45:26 -0000

        Here's mine: Any self-signed certificate intended to convey trust 
anchor data SHOULD contain a basic constraints extension suitable for a CA 
(see Section 4.2.1.9).  A self-signed certificate intended for direct 
trust as an EE SHOULD contain a KeyUsage extension without keyCertSign.
        The rules for classifying a self-signed certificate after a user 
decides to trust it follow from this, but they're out of scope.

Tom Gindin





From:   Santosh Chokhani <SChokhani@cygnacom.com>
To:     Russ Housley <housley@vigilsec.com>, IETF PKIX <pkix@ietf.org>, 
Date:   07/25/2012 02:53 PM
Subject:        Re: [pkix] Self-signed cert     wording in 
draft-ietf-pkix-rfc5280-clarifications-06.txt
Sent by:        pkix-bounces@ietf.org



Russ,

I would think that case 2 can be handled in Section 6.1.1 by add the 
following "When n = 0, the information in the trust anchor can be used 
directly without path validation algorithm presented in this section"

-----Original Message-----
From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of 
Russ Housley
Sent: Wednesday, July 25, 2012 1:32 PM
To: IETF PKIX
Subject: Re: [pkix] Self-signed cert wording in 
draft-ietf-pkix-rfc5280-clarifications-06.txt

There are two cases, and I think that the confusion is that people have 
tried to handle them in one paragraph.  I think we need a separate 
paragraph for each case.

(1) the self-signed certificate is providing a trust anchor that will be 
used on path validation.

(2) the self-signed certificate is providing a trusted end-entity public 
key, and no path validation is needed.

Russ


On Jul 25, 2012, at 10:12 AM, Santosh Chokhani wrote:

> This text in the clarification as well as Paul's modifications are 
self-contradictory and inconsistent with 5280.  I propose the following 
replacement:
> 
> | This document RECOMMENDS that
> | self-signed certificates used to convey trust anchor data be marked 
> | (see Section 4.2.1.9) as CA certificates, but acknowledges that this 
> | convention is sometimes not adopted in practice. Uses of self- 
> | signed EE certificates are outside the scope of this specification.
> 
> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf 
> Of Paul Hoffman
> Sent: Tuesday, July 24, 2012 8:06 PM
> To: IETF PKIX
> Subject: [pkix] Self-signed cert wording in 
> draft-ietf-pkix-rfc5280-clarifications-06.txt
> 
> The very latest wording:
> 
> |  In some cases, a self-signed certificate that does not contain a 
> | BasicConstraints extension (and thus is implicitly an EE 
> | certificate) is used to convey a public key. Such a certificate 
> | (i.e., a self- signed certificate not marked as a CA certificate) is 
> | not compatible with the path validation rules described in Section 
> | 6, or the definitions in the paragraph above. This document 
> | RECOMMENDS that self-signed certificates used to convey trust anchor 
> | data be marked (see Section 4.2.1.9) as CA certificates, but 
> | acknowledges that this convention is often not adopted in practice. 
> | Other uses of self- signed EE certificates are outside the scope of 
this specification.
> 
> This seems fine to me, and solves the problem that we encountered in the 
DANE WG. A slight proposed rewording for clarity with no semantic changes:
> 
> A self-signed certificate that does not contain a BasicConstraints 
extension is implicitly an EE certificate, and is explicitly not marked as 
a CA certificate. Such a certificate is used to convey a public key in 
some environments. Such a certificate is not compatible wth the path 
validation ...
> 
> --Paul Hoffman
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix

_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix
_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix




From James.H.Manger@team.telstra.com  Wed Jul 25 23:53:53 2012
Return-Path: <James.H.Manger@team.telstra.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F8A621F86D9 for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 23:53:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.194
X-Spam-Level: 
X-Spam-Status: No, score=-1.194 tagged_above=-999 required=5 tests=[AWL=-0.294, BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, HTML_MESSAGE=0.001, RELAY_IS_203=0.994]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gH17RhRLTXEo for <pkix@ietfa.amsl.com>; Wed, 25 Jul 2012 23:53:52 -0700 (PDT)
Received: from ipxano.tcif.telstra.com.au (ipxano.tcif.telstra.com.au [203.35.82.200]) by ietfa.amsl.com (Postfix) with ESMTP id 4EF5321F86D1 for <pkix@ietf.org>; Wed, 25 Jul 2012 23:53:50 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,659,1336312800"; d="scan'208,217";a="88973689"
Received: from unknown (HELO ipcbni.tcif.telstra.com.au) ([10.97.216.204]) by ipoani.tcif.telstra.com.au with ESMTP; 26 Jul 2012 16:53:50 +1000
X-IronPort-AV: E=McAfee;i="5400,1158,6783"; a="78698423"
Received: from wsmsg3701.srv.dir.telstra.com ([172.49.40.169]) by ipcbni.tcif.telstra.com.au with ESMTP; 26 Jul 2012 16:53:49 +1000
Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by WSMSG3701.srv.dir.telstra.com ([172.49.40.169]) with mapi; Thu, 26 Jul 2012 16:53:48 +1000
From: "Manger, James H" <James.H.Manger@team.telstra.com>
To: Erwann Abalea <eabalea@gmail.com>, Stefan Santesson <stefan@aaa-sec.com>
Date: Thu, 26 Jul 2012 16:53:47 +1000
Thread-Topic: [pkix] RFC2560bis update
Thread-Index: Ac1qTrx+DasCO+nsRK+DxOjZKJv8MwAp9qQA
Message-ID: <255B9BB34FB7D647A506DC292726F6E114F8073BDB@WSMSG3153V.srv.dir.telstra.com>
References: <500CC183.3000402@ieca.com>	<CC34805E.4850C%stefan@aaa-sec.com> <CA+i=0E4PLkgoN9jnpePHTL=SQcj808m4jTS8yar71eV2GdO8Zw@mail.gmail.com>
In-Reply-To: <CA+i=0E4PLkgoN9jnpePHTL=SQcj808m4jTS8yar71eV2GdO8Zw@mail.gmail.com>
Accept-Language: en-US, en-AU
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US, en-AU
Content-Type: multipart/alternative; boundary="_000_255B9BB34FB7D647A506DC292726F6E114F8073BDBWSMSG3153Vsrv_"
MIME-Version: 1.0
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 06:53:53 -0000

--_000_255B9BB34FB7D647A506DC292726F6E114F8073BDBWSMSG3153Vsrv_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

U3RlZmFuLA0KDQpXaWxsIHRoZSBBU04uMSBtb2R1bGUgW0FwcGVuZGl4IEIuMV0gYmUgcmVwbGFj
ZWQgd2l0aCB0aGUgdXBkYXRlZCBtb2R1bGUgaW4gUkZDNTkxMiDigJxOZXcgQVNOLjEgZm9yIFBL
SVjigJ0gc2VjdGlvbiA0Pw0KSSB0aGluayBpdCBzaG91bGQgYmUgcmVwbGFjZWQuDQoNCkkgd291
bGQgYWRkIHRoZSBmb2xsb3dpbmcgdG8gdGhlIE9DU1AgbW9kdWxlIGluIFJGQzU5MTIsIGJldHdl
ZW4gdGhlIOKAnC0tIFJlc3BvbnNlIEV4dGVuc2lvbnPigJ0gYW5kIOKAnC0tIE9iamVjdCBJZGVu
dGlmaWVyc+KAnSBwYXJ0cyAocGVyaGFwcyBJIHNob3VsZCBzdWJtaXQgdGhpcyBhcyBhbiBlcnJh
dGEgdG8gUkZDNTkxMiBhcyB3ZWxsKToNCg0KICAtLSBDZXJ0aWZpY2F0ZSBFeHRlbnNpb24NCg0K
ICBleHQtb2NzcC1ub2NoZWNrIEVYVEVOU0lPTiA6Oj0geyBTWU5UQVgNCiAgICBOVUxMIElERU5U
SUZJRUQgQlkgaWQtcGtpeC1vY3NwLW5vY2hlY2sgfQ0KDQoNCi0tDQpKYW1lcyBNYW5nZXINCg0K
RnJvbTogcGtpeC1ib3VuY2VzQGlldGYub3JnIFttYWlsdG86cGtpeC1ib3VuY2VzQGlldGYub3Jn
XSBPbiBCZWhhbGYgT2YgRXJ3YW5uIEFiYWxlYQ0KU2VudDogV2VkbmVzZGF5LCAyNSBKdWx5IDIw
MTIgODoxOCBQTQ0KVG86IFN0ZWZhbiBTYW50ZXNzb24NCkNjOiBwa2l4QGlldGYub3JnDQpTdWJq
ZWN0OiBSZTogW3BraXhdIFJGQzI1NjBiaXMgdXBkYXRlDQoNCsKnNC40LjEsIHRoZSBPSUQgZGVm
aW5pdGlvbnMgcGFnaW5nIGlzIG1lc3NlZCAoaWQtcGtpeC1vY3NwLW5vbmNlIGlzIHNwbGl0KS4N
CsKnNC4yLjIuMi4xLCB0aGF0IHNlZW1zIHN0dXBpZCwgYnV0IGNvdWxkbid0IHlvdSBhbHNvIGFk
ZCBhbiBBU04uMSBzeW50YXggZm9yIHRoZSBvY3NwTm9DaGVjayBleHRlbnNpb24/IE9DU1AgcmVz
cG9uZGVycyB3aXRoIGFuIGVtcHR5IHZhbHVlIGZvciB0aGlzIGV4dGVuc2lvbiBoYXZlIGJlZW4g
c2VlbiAoaXQncyBub3QgcGVybWl0dGVkIGJ5IHRoZSBzdGFuZGFyZCkuDQoyMDEyLzcvMjQgU3Rl
ZmFuIFNhbnRlc3NvbiA8c3RlZmFuQGFhYS1zZWMuY29tPG1haWx0bzpzdGVmYW5AYWFhLXNlYy5j
b20+Pg0KDQpSZXBvc3RlZCB0aGUgZHJhZnQgbm93IHdpdGggYWxsIGJ1dCBvbmUgZXJyYXRhIGlu
Y2x1ZGVkOg0KaHR0cDovL2FhYS1zZWMuY29tL2lldGYvcmZjMjU2MGJpcy9kcmFmdC1pZXRmLXBr
aXgtcmZjMjU2MGJpcy0wNV8wMy50eHQNCg0KDQpEaWZmIHRvIFJGQyAyNTYwOg0KaHR0cDovL3Rv
b2xzLmlldGYub3JnLy9yZmNkaWZmP3VybDE9aHR0cDovL3Rvb2xzLmlldGYub3JnL3JmYy9yZmMy
NTYwLnR4dCZ1DQpybDI9aHR0cDovL2FhYS1zZWMuY29tL2lldGYvcmZjMjU2MGJpcy9kcmFmdC1p
ZXRmLXBraXgtcmZjMjU2MGJpcy0wNV8wMy50eHQ8aHR0cDovL3Rvb2xzLmlldGYub3JnL3JmY2Rp
ZmY/dXJsMT1odHRwOi8vdG9vbHMuaWV0Zi5vcmcvcmZjL3JmYzI1NjAudHh0JnUlMGQlMGFybDI9
aHR0cDovL2FhYS1zZWMuY29tL2lldGYvcmZjMjU2MGJpcy9kcmFmdC1pZXRmLXBraXgtcmZjMjU2
MGJpcy0wNV8wMy50eHQ+DQoNClRoZSBvbmx5IGVycmF0YSBub3QgYWRvcHRlZCBpcyBlZGl0b3Jp
YWwgZXJyYXRhIDMyNTENClRoZSBlcnJhdGEgZG9lcyBub3Qgc3VnZ2VzdCBhbnkgdGV4dCB0aGF0
IGlzIGJldHRlciBpbiBteSBtaW5kLCBhbmQgdGhhdA0Kc2VjdGlvbiBpcyBpbiBhbnkgd2F5IHRo
ZSBtYWluIHN1YmplY3QgZm9yIGZpbmFsIHdvcmRzbWl0aGluZyBpbiB0aGUNCnByb2Nlc3MgdG8g
Y29tcGxldGUgdGhpcyB1cGRhdGUgKHNlY3Rpb24gNC4yLjIuMikNCg0KL1N0ZWZhbg0KDQo=

--_000_255B9BB34FB7D647A506DC292726F6E114F8073BDBWSMSG3153Vsrv_
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
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--_000_255B9BB34FB7D647A506DC292726F6E114F8073BDBWSMSG3153Vsrv_--

From mattking1@gmail.com  Thu Jul 26 07:51:01 2012
Return-Path: <mattking1@gmail.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A258521F86E5 for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 07:51:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.599
X-Spam-Level: 
X-Spam-Status: No, score=-5.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, GB_I_LETTER=-2, RCVD_IN_DNSWL_LOW=-1]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bescHbat4LFI for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 07:50:59 -0700 (PDT)
Received: from mail-qa0-f51.google.com (mail-qa0-f51.google.com [209.85.216.51]) by ietfa.amsl.com (Postfix) with ESMTP id EFD0121F86E4 for <pkix@ietf.org>; Thu, 26 Jul 2012 07:50:58 -0700 (PDT)
Received: by qaea16 with SMTP id a16so1238712qae.10 for <pkix@ietf.org>; Thu, 26 Jul 2012 07:50:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:message-id:subject:from:to:cc:content-type; bh=FkFn831TmkpWiH2Z19SBuf2qdaX8DDWkIAq6hgYxNos=; b=A1VauYp1RMCevMtDDEUeIw9jj12jmsdUw4zuO4d/azfzssbbYbQH62EYchDAyEeoEK ZG4UI3UHG2laG+wKLYTsGgxNCoteZgmT5+DFUMUwmPZadZuHTcE6YF7MQt6Hij30rsBf i8jnihG0FE1jq5L2RSsyH2b25JusGwgKBpeA0+nYkKWH6jXEAyn+ppDhIn+syzYsYY3P 7OcdhG/6SENegNF8JXJNVmkV+IA5D0AvweFw4RUjrKao0f2sDm1o65jrhdZCSDk1zlN5 vduG5cnkunDUeA3Vvsc6DGrU1W814r2Cu+abNlCWLfOLXnNxEDjZ3agQEIHI5OfowLmS ptNQ==
MIME-Version: 1.0
Received: by 10.60.28.162 with SMTP id c2mr41786975oeh.3.1343314258336; Thu, 26 Jul 2012 07:50:58 -0700 (PDT)
Received: by 10.76.1.106 with HTTP; Thu, 26 Jul 2012 07:50:58 -0700 (PDT)
Date: Thu, 26 Jul 2012 10:50:58 -0400
Message-ID: <CAF4=xaGo+sFY=DvWQjugFTnNo6ZxjxOn2XazXxJ60BXKLhTxbg@mail.gmail.com>
From: Matt King <mattking1@gmail.com>
To: pkix@ietf.org
Content-Type: multipart/mixed; boundary=e89a8ff1c762309cca04c5bcb944
Cc: pkix-chairs@tools.ietf.org
Subject: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 14:51:01 -0000

--e89a8ff1c762309cca04c5bcb944
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Dear PKIX Members

Patrick Patterson and I respectfully submit the updated claimSigning
EKU internet draft titled =93draft-king-pkix-claimsigning-extn-0.txt=94
(abstract below and updated version attached) for your review prior to
our discussion at next week's PKIX WG meeting.

We have addressed comments provided in the March meeting and believe
this version is ready to move forward.

I will post this version using the I-D Submission Tool on July 30th.

Abstract

   This document specifies an Extended Key Usage (EKU) value which
   indicates that the certificate holder is authorized to sign security
   tokens to assert claims, or attributes, about a subject.

   When a certificate that asserts the claimSigning EKU signs a claim,
   the owner of the service holding that certificate is asserting that a
   statement about the subject is true. For example, a IdP secure token
   service (STS) would use an X.509 certificate containing the
   claimSigning EKU to sign SAML assertions containing an identifier and
   attributes about a user. This EKU value would allow for a separation
   between the designation that a given Identity belongs within a given
   Federation, and the empowerment of that entity within the federation
   to sign claims..  This approach allows for greater flexibility for
   the operators of Federated systems and for Certification Authorities
   and avoids the overloading of other, already established methods
   (such as Assurance Level designation via certificatePolicy OID).

Matt
--
Matt King
Protiviti, Inc.
Government Services
Matthew.King@pgs.protiviti.com
MattKing1@gmail.com
410-271-5624 (Mobile)

--e89a8ff1c762309cca04c5bcb944
Content-Type: text/plain; charset=US-ASCII; name="draft-king-pkix-claimsigning-extn-05.txt"
Content-Disposition: attachment; 
	filename="draft-king-pkix-claimsigning-extn-05.txt"
Content-Transfer-Encoding: base64
X-Attachment-Id: f_h53yk6ni0
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--e89a8ff1c762309cca04c5bcb944--

From david.cooper@nist.gov  Thu Jul 26 08:01:08 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9701721F8787 for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 08:01:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.748
X-Spam-Level: 
X-Spam-Status: No, score=-5.748 tagged_above=-999 required=5 tests=[AWL=-0.608, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b+cdqxX9l5zl for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 08:01:07 -0700 (PDT)
Received: from wsget1.nist.gov (wsget1.nist.gov [129.6.13.150]) by ietfa.amsl.com (Postfix) with ESMTP id 4B5C021F8782 for <pkix@ietf.org>; Thu, 26 Jul 2012 08:01:07 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget1.nist.gov (129.6.13.150) with Microsoft SMTP Server (TLS) id 14.1.355.2; Thu, 26 Jul 2012 11:00:49 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Thu, 26 Jul 2012 11:00:29 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6QF13IM024584; Thu, 26 Jul 2012 11:01:05 -0400
Message-ID: <50115BAF.7050104@nist.gov>
Date: Thu, 26 Jul 2012 11:01:03 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: Paul Hoffman <paul.hoffman@vpnc.org>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org>
In-Reply-To: <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org>
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 15:01:08 -0000

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Paul,<br>
    <div class="moz-cite-prefix"><br>
      While this draft updates RFC 5280, it does not make changes to
      Section 6 that are relevant to this discussion.&nbsp; The draft say
      that use of a self-signed certificate that does not contain a
      BasicConstraints extension as the source of trust anchor
      information "is not compatible with the path validation rules
      described in Section 6."&nbsp; Yet, there is no basis for that
      assertion.&nbsp; RFC 5280 simply says that "trust anchor information
      may be provided to the path processing procedure in the form of a
      self-signed certificate."&nbsp; While RFC 5280 requires conforming CAs
      to include certain information, including a BasicConstraints
      extension, in self-signed certificates, those requirements are
      distinct from the path validation rules in Section 6.&nbsp; Russ
      Housley also noted this:<br>
      <br>
      <div class="moz-cite-prefix">On 07/14/2012 03:28 PM, Russ Housley
        wrote:<br>
      </div>
      <blockquote
        cite="mid:3FACEB65-2BEA-4CC3-8E46-E175FD41DC47@vigilsec.com"
        type="cite">
        <pre wrap="">The path validation algorithm in Section 6 of RFC 5280 starts with a trust anchor, and self-signed certificates are a convenient way to distribute such trust anchors.  However, RFC 5280 does not, and should not, impose any particular approach to trust anchor distribution.  This proposed clarification RECOMMENDS that the self-signed certificate include the basic constraints extension with the CA-bit set.  Nothing in Section 6 justifies this recommendation.

In fact, Section 6 is quite clear to say that it does not impose any requirements on self-signed certificates that are used to distribute a trust anchor:

   When the trust anchor is provided in the form of a self-signed
   certificate, this self-signed certificate is not included as part of
   the prospective certification path.  Information about trust anchors
   is provided as inputs to the certification path validation algorithm
   (Section 6.1.1).

Russ
</pre>
      </blockquote>
      <br>
      The text in the draft is also inconsistent with RFC 5280 when it
      says:<br>
      <blockquote>This document RECOMMENDS that self-signed certificates
        used to convey trust anchor data be marked (see Section 4.2.1.9)
        as CA certificates<br>
      </blockquote>
      While not entirely clear, this statement seems to be directed at
      the issuers of the certificates, and Section 4.2.1.9 already says
      that conforming CAs MUST include a BasicConstraints extension.<br>
      <br>
      In fact that paragraph in Section 4.2.1.9 says:<br>
      <blockquote>Conforming CAs MUST include this extension in all CA
        certificates that contain public keys used to validate digital
        signatures on certificates and MUST mark the extension as
        critical in such certificates.&nbsp; <u>This extension MAY appear as
          a critical or non-critical extension in CA certificates</u>
        that contain public keys used exclusively for purposes other
        than validating digital signatures on certificates.&nbsp; Such CA
        certificates include ones that contain public keys used
        exclusively for validating digital signatures on CRLs and ones
        that contain key management public keys used with certificate
        enrollment protocols.<br>
      </blockquote>
      So this paragraph, which also appeared in RFC 3280, refers to CA
      certificates that do not contain a BasicConstraints extension.&nbsp;
      So, the text in the draft is inconsistent with this when it refers
      to any certificate that does not contain a BasicConstraints
      extension as an EE certificate.&nbsp; And, as I noted earlier, it is
      also inconsistent with X.509, since X.509 defines an EE
      certificate as a certificate issued to an end-entity and defines
      an end entity as a certificate subject that uses its private key
      for purposes other than signing certificates.&nbsp; Meanwhile it
      defines a CA as an authority trusted by one or more users to
      create and assigned public-key certificates.&nbsp; So, if the public
      key in the self-signed certificate is used as a trust anchor for
      certification path validation, then the issuer of the certificate
      is a CA and not an EE and certificate is not an EE certificate.<br>
      <br>
      I also agree with Santosh that it is inappropriate to state that
      something "is often not adopted in practice" if "your guess as the
      the frequency is as good as anyone else's."&nbsp; Given that we know of
      self-signed certificate used to convey trust anchor information
      that do not include BasicContraints extensions, we can say that
      the inclusion of the extension is "sometimes not adopted in
      practice" or is "not always adopted in practice," but let's not
      say "often" unless we know that it's often.<br>
      <br>
      Dave <br>
      <br>
      On 07/25/2012 11:08 AM, Paul Hoffman wrote:<br>
    </div>
    <blockquote cite="mid:F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org"
      type="cite">
      <pre wrap="">On Jul 25, 2012, at 7:12 AM, Santosh Chokhani wrote:

</pre>
      <blockquote type="cite">
        <pre wrap="">This text in the clarification as well as Paul's modifications are self-contradictory and inconsistent with 5280.  
</pre>
      </blockquote>
      <pre wrap="">
You jumbled three assertions in that sentence. Separating them out:

- Which two statements in the clarifications draft contradict each other?

- Which two statements in my proposed wording contradict each other?

- Of course they are "inconsistent with 5280": this draft updates RFC 5280. 

</pre>
      <blockquote type="cite">
        <pre wrap="">I propose the following replacement:

| This document RECOMMENDS that  
| self-signed certificates used to convey trust anchor data be marked  
| (see Section 4.2.1.9) as CA certificates, but acknowledges that this  
| convention is sometimes not adopted in practice. Uses of self-  
| signed EE certificates are outside the scope of this specification.
</pre>
      </blockquote>
      <pre wrap="">
You are proposing to remove the text that actually describes the certificates we are discussing. Serious question: in what way does removing that description *help* the reader of the document?

Replacing "often" for "sometimes" doesn't indicate a contradiction; your guess as the the frequency is as good as anyone else's.

--Paul Hoffman
_______________________________________________
pkix mailing list
<a class="moz-txt-link-abbreviated" href="mailto:pkix@ietf.org">pkix@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/pkix">https://www.ietf.org/mailman/listinfo/pkix</a>

</pre>
    </blockquote>
    <br>
  </body>
</html>

From david.cooper@nist.gov  Thu Jul 26 08:43:08 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 16C8821F8755 for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 08:43:08 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.662
X-Spam-Level: 
X-Spam-Status: No, score=-5.662 tagged_above=-999 required=5 tests=[AWL=-0.521, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id j8AdB4hUN4nz for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 08:43:07 -0700 (PDT)
Received: from wsget1.nist.gov (wsget1.nist.gov [129.6.13.150]) by ietfa.amsl.com (Postfix) with ESMTP id C73FD21F8734 for <pkix@ietf.org>; Thu, 26 Jul 2012 08:43:04 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget1.nist.gov (129.6.13.150) with Microsoft SMTP Server (TLS) id 14.1.355.2; Thu, 26 Jul 2012 11:42:42 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Thu, 26 Jul 2012 11:42:23 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6QFgp3k026945; Thu, 26 Jul 2012 11:42:56 -0400
Message-ID: <5011657B.5000503@nist.gov>
Date: Thu, 26 Jul 2012 11:42:51 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: Russ Housley <housley@vigilsec.com>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <4BE59EB1-4379-4F39-ADF6-5C8C0E50711D@vigilsec.com>
In-Reply-To: <4BE59EB1-4379-4F39-ADF6-5C8C0E50711D@vigilsec.com>
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 15:43:08 -0000

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 07/25/2012 01:31 PM, Russ Housley
      wrote:<br>
    </div>
    <blockquote
      cite="mid:4BE59EB1-4379-4F39-ADF6-5C8C0E50711D@vigilsec.com"
      type="cite">
      <pre wrap="">There are two cases, and I think that the confusion is that people have tried to handle them in one paragraph.  I think we need a separate paragraph for each case.

(1) the self-signed certificate is providing a trust anchor that will be used on path validation.

(2) the self-signed certificate is providing a trusted end-entity public key, and no path validation is needed.
</pre>
    </blockquote>
    <br>
    Russ,<br>
    <br>
    I thought case (1) was already adequately covered in RFC 5280.&nbsp;
    Section 4 of RFC 5280 imposes requirements on conforming CAs (e.g.,
    inclusion of BasicConstraints, keyUsage, and subjectKeyIdentifier
    extensions) and Section 6 discusses their use as the source of trust
    anchor information (and, optionally, using information the in
    certificates as the basis for choosing values for the other inputs
    to the path validation algorithm).<br>
    <br>
    Case (2) is the one that I tried to address in the -04 draft when I
    was tasked to discuss self-signed EE certificates:<br>
    <blockquote>In some cases, a self-signed certificate is used to
      convey a public key that is not intended to be used to begin
      certification paths.&nbsp; Such a self-signed certificate is commonly
      referred to as a self-signed end-entity certificate.&nbsp; While
      Section 6.2 notes that implementations are not required to process
      extensions that appear in self-signed certificates, self-signed
      end-entity certificates SHOULD NOT include a BasicConstraints
      extension that asserts the cA boolean.&nbsp; The use of self-signed
      certificates for purposes other than to convey a public key for
      use to begin certification paths is outside the scope of this
      specification.<br>
    </blockquote>
    <br>
    As I noted in my previous message, X.509 defines an end-entity
    certificate as a certificate issued to an entity that uses its
    private key for purposes other than signing certificates, and so
    that is what the -04 draft addresses: self-signed certificates in
    which the subject public key is used for purposes other than
    verifying signatures on certificates.&nbsp; Prior to writing this text, I
    also read some of the messages on the DANE listed that people
    referred me to and this seemed to be the topic.<br>
    <br>
    As someone else noted, part of the problem we're having it that
    there has been no clear statement of what the topic is that needs to
    be addressed.&nbsp; We've been told that it is "self-signed EE
    certificates" but apparently some people interpret that to mean
    self-signed certificates that do not contain a BasicConstraints
    extension, even though that is inconsistent with both X.509 and RFC
    5280.&nbsp; We've heard people say about different pieces of text that
    has been proposed that it either "solves the problem that we
    encountered in the DANE WG" or "is not the subject of this text,"
    but we haven't been given a clear statement of what the text is
    supposed to address.&nbsp; When Steve Kent responded to a comment on the
    list by saying that that "is not the subject of this text," I asked
    him to then explain what was the subject of the text
    (<a class="moz-txt-link-freetext" href="http://www.ietf.org/mail-archive/web/pkix/current/msg30902.html">http://www.ietf.org/mail-archive/web/pkix/current/msg30902.html</a>),
    but he never responded.&nbsp; How can the WG come to consensus on text
    that "solves the problem that we encountered in the DANE WG" if no
    one can clearly explain to this WG what that problem was?<br>
    <br>
    Dave<br>
    <br>
  </body>
</html>

From d.w.chadwick@kent.ac.uk  Thu Jul 26 09:17:44 2012
Return-Path: <d.w.chadwick@kent.ac.uk>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1733021F862A for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 09:17:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f+cHQesr7pPE for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 09:17:43 -0700 (PDT)
Received: from mx1.kent.ac.uk (mx1.kent.ac.uk [129.12.21.39]) by ietfa.amsl.com (Postfix) with ESMTP id 3AB3D21F85BB for <pkix@ietf.org>; Thu, 26 Jul 2012 09:17:43 -0700 (PDT)
Received: from mx4.kent.ac.uk ([129.12.21.35]) by mx1.kent.ac.uk with esmtps (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from <d.w.chadwick@kent.ac.uk>) id 1SuQku-00020u-Fi; Thu, 26 Jul 2012 17:17:40 +0100
Received: from 181.36.112.87.dyn.plus.net ([87.112.36.181] helo=[192.168.1.38]) by mx4.kent.ac.uk with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from <d.w.chadwick@kent.ac.uk>) id 1SuQkt-000280-Vx; Thu, 26 Jul 2012 17:17:40 +0100
Message-ID: <50116DA5.5050008@kent.ac.uk>
Date: Thu, 26 Jul 2012 17:17:41 +0100
From: David Chadwick <d.w.chadwick@kent.ac.uk>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: Matt King <mattking1@gmail.com>
References: <CAF4=xaGo+sFY=DvWQjugFTnNo6ZxjxOn2XazXxJ60BXKLhTxbg@mail.gmail.com>
In-Reply-To: <CAF4=xaGo+sFY=DvWQjugFTnNo6ZxjxOn2XazXxJ60BXKLhTxbg@mail.gmail.com>
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 8bit
Cc: pkix@ietf.org, pkix-chairs@tools.ietf.org
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 16:17:44 -0000

Dear Matt

I dont think this ID is needed since the X.509 standard already defines 
the extension you are looking for. Its called SOA identifier (source of 
authority identifier), and the standard states

  "the certificate subject may ..... use the private-key corresponding 
to the certified public-key to issue certificates that
assign privilege to holders."

So this extra extension confers the administrative authority you are 
looking for. Whilst the X.509 text was written before SAML assertions 
were widely known about it does not specifically state "issue SAML 
assertions". But since SAML assertions as a type of certificate, XML 
encoded rather than ASN.1 encoded, then one can interpret the text as 
covering SAML assertions as well as X.509 certificates.

regards

David

On 26/07/2012 15:50, Matt King wrote:
> Dear PKIX Members
>
> Patrick Patterson and I respectfully submit the updated claimSigning
> EKU internet draft titled “draft-king-pkix-claimsigning-extn-0.txt”
> (abstract below and updated version attached) for your review prior to
> our discussion at next week's PKIX WG meeting.
>
> We have addressed comments provided in the March meeting and believe
> this version is ready to move forward.
>
> I will post this version using the I-D Submission Tool on July 30th.
>
> Abstract
>
>     This document specifies an Extended Key Usage (EKU) value which
>     indicates that the certificate holder is authorized to sign security
>     tokens to assert claims, or attributes, about a subject.
>
>     When a certificate that asserts the claimSigning EKU signs a claim,
>     the owner of the service holding that certificate is asserting that a
>     statement about the subject is true. For example, a IdP secure token
>     service (STS) would use an X.509 certificate containing the
>     claimSigning EKU to sign SAML assertions containing an identifier and
>     attributes about a user. This EKU value would allow for a separation
>     between the designation that a given Identity belongs within a given
>     Federation, and the empowerment of that entity within the federation
>     to sign claims..  This approach allows for greater flexibility for
>     the operators of Federated systems and for Certification Authorities
>     and avoids the overloading of other, already established methods
>     (such as Assurance Level designation via certificatePolicy OID).
>
> Matt
> --
> Matt King
> Protiviti, Inc.
> Government Services
> Matthew.King@pgs.protiviti.com
> MattKing1@gmail.com
> 410-271-5624 (Mobile)
>
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>

From paul.hoffman@vpnc.org  Thu Jul 26 11:25:38 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6BFF621F86A1 for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 11:25:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.58
X-Spam-Level: 
X-Spam-Status: No, score=-102.58 tagged_above=-999 required=5 tests=[AWL=0.019, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BCAort2SbZz1 for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 11:25:38 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id E738521F869F for <pkix@ietf.org>; Thu, 26 Jul 2012 11:25:37 -0700 (PDT)
Received: from [10.20.30.100] (50-1-50-97.dsl.dynamic.fusionbroadband.com [50.1.50.97]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6QHYKe6035568 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for <pkix@ietf.org>; Thu, 26 Jul 2012 10:34:23 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Content-Type: text/plain; charset=iso-8859-1
Mime-Version: 1.0 (Apple Message framework v1278)
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <50115BAF.7050104@nist.gov>
Date: Thu, 26 Jul 2012 11:25:33 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org> <50115BAF.7050104@nist.gov>
To: IETF PKIX <pkix@ietf.org>
X-Mailer: Apple Mail (2.1278)
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 18:25:38 -0000

The comments from David and Santosh bring us around yet again on the =
difference between:
a) a CA certificate
b) a certificate that can be used as a trust anchor
c) a self-issued certificate that is used only to convey a public key

My reading of RFC 5280 is that (a) and (b) are sometimes used =
interchangeably, and sometimes not. This sloppiness might or might not =
be able to be cleared up through WG consensus on a document such as =
draft-ietf-pkix-rfc5280-clarifications.

Regardless of clarifying (a) and (b), the only thing I care about for =
draft-ietf-pkix-rfc5280-clarifications is making it clear that (c) is =
allowed by this update. I do not believe that either of Santosh's =
suggestions for new wording for this draft, regardless of whether or not =
they are correct, make this last point clear.

--Paul Hoffman=

From SChokhani@cygnacom.com  Thu Jul 26 11:31:38 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A037B21F85F9 for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 11:31:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y50f9aiJ0IaP for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 11:31:38 -0700 (PDT)
Received: from ipedge2.cygnacom.com (ipedge2.cygnacom.com [216.191.252.27]) by ietfa.amsl.com (Postfix) with ESMTP id E5C9221F85F3 for <pkix@ietf.org>; Thu, 26 Jul 2012 11:31:37 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,660,1336363200";  d="scan'208";a="1478226"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge2.cygnacom.com with ESMTP; 26 Jul 2012 14:31:37 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Thu, 26 Jul 2012 14:31:37 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: Paul Hoffman <paul.hoffman@vpnc.org>, IETF PKIX <pkix@ietf.org>
Date: Thu, 26 Jul 2012 14:31:35 -0400
Thread-Topic: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
Thread-Index: Ac1rXBhkUwuQfzbCRxCEhVj/JCdGcQAAJHnA
Message-ID: <B83745DA469B7847811819C5005244AF36299588@scygexch7.cygnacom.com>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org>	<50115BAF.7050104@nist.gov> <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org>
In-Reply-To: <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [pkix] Self-signed cert wording in	draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 18:31:38 -0000

Paul,

Why does not the following addition to Section 6.1.1 not do the trick?

"When n =3D 0, the information in the trust anchor can be used directly wit=
hout invoking the path validation algorithm presented in this section"

-----Original Message-----
From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of Pau=
l Hoffman
Sent: Thursday, July 26, 2012 2:26 PM
To: IETF PKIX
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-cla=
rifications-06.txt

The comments from David and Santosh bring us around yet again on the differ=
ence between:
a) a CA certificate
b) a certificate that can be used as a trust anchor
c) a self-issued certificate that is used only to convey a public key

My reading of RFC 5280 is that (a) and (b) are sometimes used interchangeab=
ly, and sometimes not. This sloppiness might or might not be able to be cle=
ared up through WG consensus on a document such as draft-ietf-pkix-rfc5280-=
clarifications.

Regardless of clarifying (a) and (b), the only thing I care about for draft=
-ietf-pkix-rfc5280-clarifications is making it clear that (c) is allowed by=
 this update. I do not believe that either of Santosh's suggestions for new=
 wording for this draft, regardless of whether or not they are correct, mak=
e this last point clear.

--Paul Hoffman
_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From aallison@nab.org  Thu Jul 26 11:33:30 2012
Return-Path: <aallison@nab.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id ECC3121F86B1 for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 11:33:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.98
X-Spam-Level: 
X-Spam-Status: No, score=-5.98 tagged_above=-999 required=5 tests=[AWL=0.619,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id N7jPa0jezUFD for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 11:33:30 -0700 (PDT)
Received: from p01c11o148.mxlogic.net (p01c11o148.mxlogic.net [208.65.144.71]) by ietfa.amsl.com (Postfix) with ESMTP id C28E521F85F9 for <pkix@ietf.org>; Thu, 26 Jul 2012 11:33:29 -0700 (PDT)
Received: from unknown [208.97.234.91] (EHLO NABSREX027324.NAB.ORG) by p01c11o148.mxlogic.net(mxl_mta-6.14.0-1) with ESMTP id 97d81105.0.769.00-384.1908.p01c11o148.mxlogic.net (envelope-from <aallison@nab.org>);  Thu, 26 Jul 2012 12:33:29 -0600 (MDT)
X-MXL-Hash: 50118d794edcdbde-39ada68d04e8d2e16e511ab80b64bc83f58bb9c2
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Thu, 26 Jul 2012 14:33:28 -0400
Message-ID: <71C9EC0544D1F64D8B7D91EDCC6220200C35425C@NABSREX027324.NAB.ORG>
In-Reply-To: <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [pkix] Self-signed cert wording indraft-ietf-pkix-rfc5280-clarifications-06.txt
Thread-Index: Ac1rXBBrR6h6LPJ3QjmThoZww5ykSQAAHycg
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org><B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com><F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org><50115BAF.7050104@nist.gov> <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org>
From: "Art Allison" <AAllison@nab.org>
To: "IETF PKIX" <pkix@ietf.org>
X-Spam: [F=0.2000000000; CM=0.500; S=0.200(2010122901)]
X-MAIL-FROM: <aallison@nab.org>
X-SOURCE-IP: [208.97.234.91]
X-AnalysisOut: [v=2.0 cv=F8nggNdN c=1 sm=0 a=tFGTPFZixTZ3yCXJchW01Q==:17 a]
X-AnalysisOut: [=25t2MIfLGj4A:10 a=BvPfnLs-15kA:10 a=BLceEmwcHowA:10 a=8nJ]
X-AnalysisOut: [EP1OIZ-IA:10 a=g0FpLpFZAAAA:8 a=48vgC7mUAAAA:8 a=wCukYX9Dh]
X-AnalysisOut: [MbMsvXZRwAA:9 a=wPNLvfGTeEIA:10 a=8SgyfJxrfqYA:10 a=-9UqKS]
X-AnalysisOut: [le32gA:10 a=Qd0007q6B0YA:10 a=lZB815dzVvQA:10 a=EA5ldjENhD]
X-AnalysisOut: [IYwqbm:21 a=jzZjjB36gVcnlRjP:21]
Subject: Re: [pkix] Self-signed cert wording indraft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 18:33:31 -0000

Newbie here.. can someone explain how a 'clarifications' document can be =
true to that label when it prohibits a previously optional coding? =
<i.e., is technically not backwards compatible>?

I am not currently questioning the decision to prohibit that option... =
as I do not know the impact or lack thereof... just the =
characterization... this seems to be a revision at least.

Art

Art Allison=20
Senior Director Advanced Engineering, Technology=20
National Association of Broadcasters
1771 N Street NW
Washington, DC 20036
Phone=A0 202 429 5418
Fax=A0 202 775 4981=20
www.nab.org=20
Advocacy =A0Education=A0 Innovation=20


-----Original Message-----
From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of =
Paul Hoffman
Sent: Thursday, July 26, 2012 2:26 PM
To: IETF PKIX
Subject: Re: [pkix] Self-signed cert wording =
indraft-ietf-pkix-rfc5280-clarifications-06.txt

The comments from David and Santosh bring us around yet again on the =
difference between:
a) a CA certificate
b) a certificate that can be used as a trust anchor
c) a self-issued certificate that is used only to convey a public key

My reading of RFC 5280 is that (a) and (b) are sometimes used =
interchangeably, and sometimes not. This sloppiness might or might not =
be able to be cleared up through WG consensus on a document such as =
draft-ietf-pkix-rfc5280-clarifications.

Regardless of clarifying (a) and (b), the only thing I care about for =
draft-ietf-pkix-rfc5280-clarifications is making it clear that (c) is =
allowed by this update. I do not believe that either of Santosh's =
suggestions for new wording for this draft, regardless of whether or not =
they are correct, make this last point clear.

--Paul Hoffman
_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From paul.hoffman@vpnc.org  Thu Jul 26 12:25:43 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E45A221F861B for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 12:25:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.581
X-Spam-Level: 
X-Spam-Status: No, score=-102.581 tagged_above=-999 required=5 tests=[AWL=0.018, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w-bedqp-G5pG for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 12:25:43 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id 75B3721F85F9 for <pkix@ietf.org>; Thu, 26 Jul 2012 12:25:43 -0700 (PDT)
Received: from [10.20.30.100] (50-1-50-97.dsl.dynamic.fusionbroadband.com [50.1.50.97]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6QIYFO8046832 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 26 Jul 2012 11:34:16 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=us-ascii
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <B83745DA469B7847811819C5005244AF36299588@scygexch7.cygnacom.com>
Date: Thu, 26 Jul 2012 12:25:28 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <3CE92E2B-E342-4EA1-A20F-51FD6416FA0A@vpnc.org>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org>	<50115BAF.7050104@nist.gov> <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org> <B83745DA469B7847811819C5005244AF36299588@scygexch7.cygnacom.com>
To: Santosh Chokhani <SChokhani@cygnacom.com>
X-Mailer: Apple Mail (2.1278)
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 19:25:44 -0000

On Jul 26, 2012, at 11:31 AM, Santosh Chokhani wrote:

> Why does not the following addition to Section 6.1.1 not do the trick?
>=20
> "When n =3D 0, the information in the trust anchor can be used =
directly without invoking the path validation algorithm presented in =
this section"

Because it does not mention that the self-issued certificate is used =
only to convey a public key, nor does it even say "self-issued =
certificate". *You* might understand that rule, but this document is =
also supposed to clarify for PKIX non-experts.

--Paul Hoffman=

From paul.hoffman@vpnc.org  Thu Jul 26 12:29:04 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D0B011E808A for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 12:29:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.581
X-Spam-Level: 
X-Spam-Status: No, score=-102.581 tagged_above=-999 required=5 tests=[AWL=0.018, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rqixtcZF-8vp for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 12:29:04 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id DBF3921F8637 for <pkix@ietf.org>; Thu, 26 Jul 2012 12:29:03 -0700 (PDT)
Received: from [10.20.30.100] (50-1-50-97.dsl.dynamic.fusionbroadband.com [50.1.50.97]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6QIbmoX047431 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 26 Jul 2012 11:37:50 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <71C9EC0544D1F64D8B7D91EDCC6220200C35425C@NABSREX027324.NAB.ORG>
Date: Thu, 26 Jul 2012 12:29:01 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <776E8DEB-3F62-407E-A680-CA74FA7E8488@vpnc.org>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org><B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com><F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org><50115BAF.7050104@nist.gov> <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org> <71C9EC0544D1F64D8B7D91EDCC6220200C35425C@NABSREX027324.NAB.ORG>
To: Art Allison <AAllison@nab.org>
X-Mailer: Apple Mail (2.1278)
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording indraft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 19:29:04 -0000

On Jul 26, 2012, at 11:33 AM, Art Allison wrote:

> Newbie here.. can someone explain how a 'clarifications' document can =
be true to that label when it prohibits a previously optional coding? =
<i.e., is technically not backwards compatible>?

"clarifications" appears in the file name, but not the title of the =
actual document. (The file name will disappear when this is published as =
an RFC.)
        Updates to the Internet X.509 Public Key Infrastructure
       Certificate and Certificate Revocation List (CRL) Profile=20
The first sentence of the Abstract drives home the "updates" point:
   This document updates RFC 5280, the Internet X.509 Public Key
   Infrastructure Certificate and Certificate Revocation List (CRL)
   Profile.

--Paul Hoffman=

From SChokhani@cygnacom.com  Thu Jul 26 12:31:01 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AC8721F85D9 for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 12:31:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RMa0+AFLR+SP for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 12:31:00 -0700 (PDT)
Received: from ipedge1.cygnacom.com (ipedge1.cygnacom.com [216.191.252.12]) by ietfa.amsl.com (Postfix) with ESMTP id 0926C21F859A for <pkix@ietf.org>; Thu, 26 Jul 2012 12:30:59 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,660,1336363200";  d="scan'208";a="5730932"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge1.cygnacom.com with ESMTP; 26 Jul 2012 15:30:57 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Thu, 26 Jul 2012 15:30:57 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: Paul Hoffman <paul.hoffman@vpnc.org>
Date: Thu, 26 Jul 2012 15:30:55 -0400
Thread-Topic: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
Thread-Index: Ac1rZHL6VPiBOe6qRxuJfGYUpSLPuQAABZng
Message-ID: <B83745DA469B7847811819C5005244AF36299597@scygexch7.cygnacom.com>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org>	<50115BAF.7050104@nist.gov> <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org> <B83745DA469B7847811819C5005244AF36299588@scygexch7.cygnacom.com> <3CE92E2B-E342-4EA1-A20F-51FD6416FA0A@vpnc.org>
In-Reply-To: <3CE92E2B-E342-4EA1-A20F-51FD6416FA0A@vpnc.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 19:31:01 -0000

Paul,

I assume we are talking about "self-signed" and not "self-issued"?

Why is it important to say it is used to convey a public key only?  What el=
se is a certificate used for?  If you mean one should not being a path usin=
g this certificate as a trust anchor, there is nothing in the certificate t=
hat prevents it.   This is all in the user context and outside the scope of=
 5280.  User decide what each public key they trust for.  5280 does not add=
ress that.

If you want to make a claim to clarify self-signed, the following revision =
will help"

"When n =3D 0, the information in the trust anchor (e.g., a self-signed cer=
tificate) can be used directly without invoking the path validation algorit=
hm presented in this section"

-----Original Message-----
From: Paul Hoffman [mailto:paul.hoffman@vpnc.org]=20
Sent: Thursday, July 26, 2012 3:25 PM
To: Santosh Chokhani
Cc: IETF PKIX
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-cla=
rifications-06.txt

On Jul 26, 2012, at 11:31 AM, Santosh Chokhani wrote:

> Why does not the following addition to Section 6.1.1 not do the trick?
>=20
> "When n =3D 0, the information in the trust anchor can be used directly w=
ithout invoking the path validation algorithm presented in this section"

Because it does not mention that the self-issued certificate is used only t=
o convey a public key, nor does it even say "self-issued certificate". *You=
* might understand that rule, but this document is also supposed to clarify=
 for PKIX non-experts.

--Paul Hoffman

From paul.hoffman@vpnc.org  Thu Jul 26 12:40:04 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5040611E8098 for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 12:40:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.581
X-Spam-Level: 
X-Spam-Status: No, score=-102.581 tagged_above=-999 required=5 tests=[AWL=0.018, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id K7p5ss+Mdg8U for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 12:40:03 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id BC6CE11E808A for <pkix@ietf.org>; Thu, 26 Jul 2012 12:40:03 -0700 (PDT)
Received: from [10.20.30.100] (50-1-50-97.dsl.dynamic.fusionbroadband.com [50.1.50.97]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6QImlJq050497 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Thu, 26 Jul 2012 11:48:49 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=us-ascii
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <B83745DA469B7847811819C5005244AF36299597@scygexch7.cygnacom.com>
Date: Thu, 26 Jul 2012 12:40:00 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <B0847562-1EBB-44DF-9341-AD092E9D9D48@vpnc.org>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org>	<50115BAF.7050104@nist.gov> <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org> <B83745DA469B7847811819C5005244AF36299588@scygexch7.cygnacom.com> <3CE92E2B-E342-4EA1-A20F-51FD6416FA0A@vpnc.org> <B83745DA469B7847811819C5005244AF36299597@scygexch7.cygnacom.com>
To: Santosh Chokhani <schokhani@cygnacom.com>
X-Mailer: Apple Mail (2.1278)
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 19:40:04 -0000

On Jul 26, 2012, at 12:30 PM, Santosh Chokhani wrote:

> I assume we are talking about "self-signed" and not "self-issued"?

That is a bad assumption. For the purpose of simply conveying a public =
key, a certificate might be either self-signed or self-issued: it is =
irrelevant.

> Why is it important to say it is used to convey a public key only? =20

Because that's what the use case I (and many others) care about here. If =
you don't care about it, that's fine, but that doesn't make our use case =
go away.

> What else is a certificate used for? =20

Associating a public key with an identifier. Saying who authenticated =
the association. The rest of the glop in RFC 5280.

> If you mean one should not being a path using this certificate as a =
trust anchor, there is nothing in the certificate that prevents it.  =20

Wait wait wait. *You're* the one who was trying to tie this into the =
Section 6.1 wording, not me, remember?

> This is all in the user context and outside the scope of 5280.  User =
decide what each public key they trust for.  5280 does not address that.

Others might disagree.

> If you want to make a claim to clarify self-signed, the following =
revision will help"
>=20
> "When n =3D 0, the information in the trust anchor (e.g., a =
self-signed certificate) can be used directly without invoking the path =
validation algorithm presented in this section"

This does not help, given its location in the spec.

--Paul Hoffman=

From SChokhani@cygnacom.com  Thu Jul 26 12:51:57 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 50CC821F855D for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 12:51:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yPA7XY+lvpQU for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 12:51:56 -0700 (PDT)
Received: from ipedge1.cygnacom.com (ipedge1.cygnacom.com [216.191.252.12]) by ietfa.amsl.com (Postfix) with ESMTP id 7391321F8504 for <pkix@ietf.org>; Thu, 26 Jul 2012 12:51:56 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,660,1336363200";  d="scan'208";a="5731151"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge1.cygnacom.com with ESMTP; 26 Jul 2012 15:51:55 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Thu, 26 Jul 2012 15:51:55 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: Paul Hoffman <paul.hoffman@vpnc.org>
Date: Thu, 26 Jul 2012 15:51:54 -0400
Thread-Topic: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
Thread-Index: Ac1rZnPU0LIixG97SYaSaIuZ8saHmgAAJgGQ
Message-ID: <B83745DA469B7847811819C5005244AF3629959D@scygexch7.cygnacom.com>
References: <13639216-D159-48D8-A938-F5C1EFF9E3D1@vpnc.org> <B83745DA469B7847811819C5005244AF362994A2@scygexch7.cygnacom.com> <F6AC6C2E-5FA1-4FBB-AE02-EA0A3E005425@vpnc.org>	<50115BAF.7050104@nist.gov> <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org> <B83745DA469B7847811819C5005244AF36299588@scygexch7.cygnacom.com> <3CE92E2B-E342-4EA1-A20F-51FD6416FA0A@vpnc.org> <B83745DA469B7847811819C5005244AF36299597@scygexch7.cygnacom.com> <B0847562-1EBB-44DF-9341-AD092E9D9D48@vpnc.org>
In-Reply-To: <B0847562-1EBB-44DF-9341-AD092E9D9D48@vpnc.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 19:51:57 -0000

Paul,

See in-line.

-----Original Message-----
From: Paul Hoffman [mailto:paul.hoffman@vpnc.org]=20
Sent: Thursday, July 26, 2012 3:40 PM
To: Santosh Chokhani
Cc: IETF PKIX
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-cla=
rifications-06.txt

On Jul 26, 2012, at 12:30 PM, Santosh Chokhani wrote:

> I assume we are talking about "self-signed" and not "self-issued"?

That is a bad assumption. For the purpose of simply conveying a public key,=
 a certificate might be either self-signed or self-issued: it is irrelevant=
.
[Santosh] It is not irrelevant.  Self-signed means you implicitly trust the=
 public key.  The clarification you supported was addressing self-signed on=
ly

> Why is it important to say it is used to convey a public key only? =20

Because that's what the use case I (and many others) care about here. If yo=
u don't care about it, that's fine, but that doesn't make our use case go a=
way.
[Santosh] My point is that all X.509 public key certificates are used to co=
nvey public key and hence saying that is unnecessary.

> What else is a certificate used for? =20

Associating a public key with an identifier. Saying who authenticated the a=
ssociation. The rest of the glop in RFC 5280.
[Santosh] That goes without saying.

> If you mean one should not being a path using this certificate as a trust=
 anchor, there is nothing in the certificate that prevents it.  =20

Wait wait wait. *You're* the one who was trying to tie this into the Sectio=
n 6.1 wording, not me, remember?
[Santosh] If you use 5280 concept and trust a self-signed certificate, that=
 public key is unconstrained from 5280 viewpoint.

> This is all in the user context and outside the scope of 5280.  User deci=
de what each public key they trust for.  5280 does not address that.

Others might disagree.
[Santosh] Tell me where in 5280 they scope trusted public key.

> If you want to make a claim to clarify self-signed, the following revisio=
n will help"
>=20
> "When n =3D 0, the information in the trust anchor (e.g., a self-signed c=
ertificate) can be used directly without invoking the path validation algor=
ithm presented in this section"

This does not help, given its location in the spec.
[Santosh] So, the text is fine except for the location?  If so, put it in 6=
.1.1 and add the following to a location of your choice:

"The public key in a trust anchor (e.g., a self-signed certificate) can be =
used directly by the relying party for their intended purpose without invok=
ing the path validation algorithm presented in Section 6."

--Paul Hoffman

From mrex@sap.com  Thu Jul 26 13:18:18 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A8B4911E809C for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 13:18:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.891
X-Spam-Level: 
X-Spam-Status: No, score=-9.891 tagged_above=-999 required=5 tests=[AWL=-0.242, BAYES_00=-2.599, HELO_EQ_DE=0.35, J_CHICKENPOX_34=0.6, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08fDXn0YDQ0M for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 13:18:18 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id BE57311E8098 for <pkix@ietf.org>; Thu, 26 Jul 2012 13:18:17 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id q6QKIALA022278 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 26 Jul 2012 22:18:15 +0200 (MEST)
In-Reply-To: <EA195DDC-8BCA-41EA-8420-8D1607C88837@vpnc.org>
To: Paul Hoffman <paul.hoffman@vpnc.org>
Date: Thu, 26 Jul 2012 22:18:10 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120726201810.0CADE1A0F9@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 20:18:18 -0000

Paul Hoffman wrote:
>
> The comments from David and Santosh bring us around yet again
> on the difference between:
>   a) a CA certificate
>   b) a certificate that can be used as a trust anchor
>   c) a self-issued certificate that is used only to convey a public key
> 
> My reading of RFC 5280 is that (a) and (b) are sometimes used
> interchangeably, and sometimes not.  This sloppiness might or
> might not be able to be cleared up through WG consensus on a
> document such as draft-ietf-pkix-rfc5280-clarifications.

While it should be possible with reasonable implementations of PKIX
to make _any_ CA certficate a trust anchor, there is a non-marginal
amount of broken PKI software in the installed base where trying
to make a non-self-signed CA certificate a trust anchor will not
give you the expected result, in particular if you decide to make
a non-self-signed CA cert a trust anchor due to the lack of a rootCA cert.


> 
> Regardless of clarifying (a) and (b),

What exactly do you want to have clarified for (b): what rfc5280 intended
to mean (and imply), or what kind of unexpected interop problems exist
in the installed base?  I believe that doing the former without the
latter would widen the gap between expectations and installed base.


>
> the only thing I care about for draft-ietf-pkix-rfc5280-clarifications
> is making it clear that (c) is allowed by this update.

But you do realize that this has always been allowed by rfc5280 and its
predecessors?  The X.509 spec is clearer by spelling out explicitly that
self-signed non-CA certificates are outside the scope of the X.509 spec.

(I quoted this before from X.509 11/2008)

  3.4.61  self-signed certificate

    [...]

    NOTE Use of self-issued certificates and self-signed certificates
    issued by other than CAs are outside the scope of this
    Recommendation | International Standard.


I believe that the most honest reaction would be to spell out something
similar in rfc5280-clarifications.

All of the requirements on certificate (attributes) described in
rfc5280 Section 4 and Section 5 apply explicitly to "certificates issued
by conforming CA".

And the certificate path validation described in Section 6 also applies
only to certificates issued by a CA (whose public key&name is used as
trust anchor to verify the signature on a certification path.


>From the top of my head I can not think of anything in rfc5280 that can
be said to apply to a self-signed certificate created by a non-CA entity.


I know pretty well that most if not all PKI implementations can deal
with self-signed certificates created by non-CA entities, and their use
is actually pretty common.


It would probably be sensible to write an information document seperate
from PKIX to describe how self-signed certificates created by non-CA
entities are typically used in the installed base with PKI(X)
implementations.  Adding a few words to rfc5280 that create the
impression "PKIX doesn't mind when you use self-signed non-CA certs",
may create unjustified expectations about their usefulness and
(lack of) interference with the normal PKIX machinery.  And I had the
impression that there are folks on the pkix mailing list who strongly
dislike these certs...  ;-)


-Martin

From iesg-secretary@ietf.org  Thu Jul 26 13:23:38 2012
Return-Path: <iesg-secretary@ietf.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1895521F85E3; Thu, 26 Jul 2012 13:23:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.582
X-Spam-Level: 
X-Spam-Status: No, score=-102.582 tagged_above=-999 required=5 tests=[AWL=0.017, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CHr6JdwwMoBj; Thu, 26 Jul 2012 13:23:37 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1172311E80B3; Thu, 26 Jul 2012 13:23:37 -0700 (PDT)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: The IESG <iesg-secretary@ietf.org>
To: IETF-Announce <ietf-announce@ietf.org>
X-Test-IDTracker: no
X-IETF-IDTracker: 4.30p3
Message-ID: <20120726202337.4647.10423.idtracker@ietfa.amsl.com>
Date: Thu, 26 Jul 2012 13:23:37 -0700
Cc: pkix mailing list <pkix@ietf.org>, pkix chair <pkix-chairs@tools.ietf.org>, RFC Editor <rfc-editor@rfc-editor.org>
Subject: [pkix] Protocol Action: 'Internet X.509 Public Key Infrastructure -- HTTP	Transfer for CMP' to Proposed Standard	(draft-ietf-pkix-cmp-transport-protocols-20.txt)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 20:23:38 -0000

The IESG has approved the following document:
- 'Internet X.509 Public Key Infrastructure -- HTTP Transfer for CMP'
  (draft-ietf-pkix-cmp-transport-protocols-20.txt) as Proposed Standard

This document is the product of the Public-Key Infrastructure (X.509)
Working Group.

The IESG contact persons are Sean Turner and Stephen Farrell.

A URL of this Internet Draft is:
http://datatracker.ietf.org/doc/draft-ietf-pkix-cmp-transport-protocols/




Technical Summary

CMP was designed [RFC 2510] to be carried over various transport
protocols, and the initial specification described how to do so for TCP,
HTTP, FTP, and MIME (at varying levels of detail). The current version
of CMP [RFC 4210] included an informative reference to a document that
was supposed to define how to carry CMP over various transport
protocols. That document expired in 2000, leaving no updated, detailed
description for how to transport CMP messages. This document was
prepared to replace that old one. The authors of this document
resurrected the HTTP part of that document, after the original authors
indicated that they were not available to work on this document.

Working Group Summary

As noted above, this document attracted little interest in the WG,
because it focuses on use of CMP (which is not popular) in the 3GPP
environment (which is equally uninteresting to most WG members).

Document Quality

The document is reasonably well written and fairly clear (modulo some
spelling errors), especially considering that the authors are not native
English speakers. 

Personnel

Steve Kent (kent@bbn.com) is the Document Shepherd.
Sean Turner (turners@ieca.com) is the Responsible AD.




From thierry.moreau@connotech.com  Thu Jul 26 13:29:51 2012
Return-Path: <thierry.moreau@connotech.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5735C11E80D6 for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 13:29:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.502
X-Spam-Level: 
X-Spam-Status: No, score=-0.502 tagged_above=-999 required=5 tests=[AWL=1.497,  BAYES_00=-2.599, J_CHICKENPOX_34=0.6]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CxsgigU8KnXZ for <pkix@ietfa.amsl.com>; Thu, 26 Jul 2012 13:29:50 -0700 (PDT)
Received: from mail.connotech.com (connotech.com [76.10.176.241]) by ietfa.amsl.com (Postfix) with ESMTP id 57C6111E80C9 for <pkix@ietf.org>; Thu, 26 Jul 2012 13:29:50 -0700 (PDT)
Received: from [192.168.1.200] (unknown [192.168.1.200]) by mail.connotech.com (Postfix) with ESMTPA id 7F5F730942; Thu, 26 Jul 2012 21:11:21 -0400 (EDT)
Message-ID: <5011AA0F.3060109@connotech.com>
Date: Thu, 26 Jul 2012 16:35:27 -0400
From: Thierry Moreau <thierry.moreau@connotech.com>
User-Agent: Thunderbird 2.0.0.17 (X11/20090608)
MIME-Version: 1.0
To: mrex@sap.com
References: <20120726201810.0CADE1A0F9@ld9781.wdf.sap.corp>
In-Reply-To: <20120726201810.0CADE1A0F9@ld9781.wdf.sap.corp>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Cc: IETF PKIX <pkix@ietf.org>, Paul Hoffman <paul.hoffman@vpnc.org>
Subject: Re: [pkix] Self-signed cert wording in draft-ietf-pkix-rfc5280-clarifications-06.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Thu, 26 Jul 2012 20:29:51 -0000

Martin Rex wrote:
> Paul Hoffman wrote:
>> The comments from David and Santosh bring us around yet again
>> on the difference between:
>>   a) ...
>>   b) ...
>>   c) a self-issued certificate that is used only to convey a public key
>>
>> [...] the only thing I care about for draft-ietf-pkix-rfc5280-clarifications
>> is making it clear that (c) is allowed by this update.
> 
> But you do realize that this has always been allowed by rfc5280 and its
> predecessors?  The X.509 spec is clearer by spelling out explicitly that
> self-signed non-CA certificates are outside the scope of the X.509 spec.
> 
> (I quoted this before from X.509 11/2008)
> 
>   3.4.61  self-signed certificate
> 
>     [...]
> 
>     NOTE Use of self-issued certificates and self-signed certificates
>     issued by other than CAs are outside the scope of this
>     Recommendation | International Standard.
> 
> 
> I believe that the most honest reaction would be to spell out something
> similar in rfc5280-clarifications.
> 
> All of the requirements on certificate (attributes) described in
> rfc5280 Section 4 and Section 5 apply explicitly to "certificates issued
> by conforming CA".
> 
> And the certificate path validation described in Section 6 also applies
> only to certificates issued by a CA (whose public key&name is used as
> trust anchor to verify the signature on a certification path.
> 
> 
>>From the top of my head I can not think of anything in rfc5280 that can
> be said to apply to a self-signed certificate created by a non-CA entity.
> 
> 
> I know pretty well that most if not all PKI implementations can deal
> with self-signed certificates created by non-CA entities, and their use
> is actually pretty common.
> 
> 
> It would probably be sensible to write an information document seperate
> from PKIX to describe how self-signed certificates created by non-CA
> entities are typically used in the installed base with PKI(X)
> implementations.  Adding a few words to rfc5280 that create the
> impression "PKIX doesn't mind when you use self-signed non-CA certs",
> may create unjustified expectations about their usefulness and
> (lack of) interference with the normal PKIX machinery.  And I had the
> impression that there are folks on the pkix mailing list who strongly
> dislike these certs...  ;-)
> 

+1

Regards,

-- 
- Thierry Moreau

CONNOTECH Experts-conseils inc.
9130 Place de Montgolfier
Montreal, QC, Canada H2M 2A1

Tel. +1-514-385-5691

From stefan@aaa-sec.com  Fri Jul 27 06:52:09 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8ED3A21F86B6 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 06:52:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.851
X-Spam-Level: 
X-Spam-Status: No, score=-101.851 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_SE=0.35, HTML_FONT_SIZE_LARGE=0.001, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Osz2umrrlnRP for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 06:52:08 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 5E29D21F865D for <pkix@ietf.org>; Fri, 27 Jul 2012 06:52:07 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id E35871CCD00F for <pkix@ietf.org>; Fri, 27 Jul 2012 15:52:05 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id hvcmyK3-nBxR for <pkix@ietf.org>; Fri, 27 Jul 2012 15:52:05 +0200 (CEST)
Received: from s328.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id DA97F1CCD021 for <pkix@ietf.org>; Fri, 27 Jul 2012 15:52:04 +0200 (CEST)
Received: (qmail 49886 invoked from network); 27 Jul 2012 13:52:03 -0000
Received: from m190f36d0.tmodns.net (HELO [10.242.10.99]) (stefan@fiddler.nu@[208.54.15.25]) (envelope-sender <stefan@aaa-sec.com>) by s328.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <mmyers@fastq.com>; 27 Jul 2012 13:52:03 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Fri, 27 Jul 2012 08:51:58 -0500
From: Stefan Santesson <stefan@aaa-sec.com>
To: Michael Myers <mmyers@fastq.com>
Message-ID: <CC331D8C.480B4%stefan@aaa-sec.com>
Thread-Topic: [pkix] RFC2560bis update
In-Reply-To: <0B7D0BB1-50AB-4621-A983-976D95A68232@fastq.com>
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3426223924_1866472"
Cc: pkix@ietf.org
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 13:52:09 -0000

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3426223924_1866472
Content-type: text/plain;
	charset="US-ASCII"
Content-transfer-encoding: 7bit

Sorry, this mail got stuck in my out box. Resending it way late.

Mike,

Thanks for the input.

I agree that the text is not ideal and could use some wordsmithing.
I just wanted to see if a sentence like this (in some edited form) could do
the job with respect to the expressed lack of clarity of RFC 2560, whether
CA rekeying is part of MUST support for relying parties.

The opinion in the room at last PKIX suggested that it is not.

Pleas feel free to suggest alternative wordings.

/Stefan



From:  Michael Myers <mmyers@fastq.com>
Date:  Friday, 20 July, 2012 8:11 PM
To:  Stefan Santesson <stefan@aaa-sec.com>
Cc:  <pkix@ietf.org>
Subject:  Re: [pkix] RFC2560bis update

> Stefan,
> 
> A good bit of work.  Some preliminary comments below, marked with [MM].  More
> MAY follow.  I'd be happy to provide some alternative text to sharpen things
> up, if that would be useful.  I hope all this goofy formatting comes across.
> 
> Mike
> 
> 4.2.2.2  Authorized Responders
> 
>    TBD --------- UPDATE THIS SECTIOIN -------------
> 
>    The key that signs a certificate's status information need not be the
>    same key that signed the certificate. It is necessary however to
>    ensure that the entity signing this information is authorized to do
>    so.  Therefore, a certificate's issuer MUST either sign the OCSP
>    responses itself or it MUST explicitly designate this authority to
>    another entity.
> 
> [MM] You are forgetting about local configuration.  See point (1) below.
> 
>    OCSP signing delegation SHALL be designated by the
>    inclusion of id-kp-OCSPSigning in an extendedKeyUsage certificate
>    extension included in the OCSP response signer's certificate.  This
>    certificate MUST be issued directly by the CA that issued the
>    certificate in question.
> 
>    The CA SHOULD use the same issuing key to issue a delegation
>    certificate as was used to sign the certificate being checked for
>    revocation.
> 
> [MM]  The following bit in italics could use some wordsmithing.
> 
>    Systems relying on OCSP responses MUST recognize a
>    delegation certificate as being issued by the CA that issued the
>    certificate in question if the delegation certificate and the
>    certificate being checked for revocation was signed by the same key.
> 
> [MM]  What does it mean to "recognize"?  Perhaps "accept as valid"?
>       Also, "issued by" is ambiguous.  Follow the keys.
>       For example, above.  "The key that signs . . . "
>    Systems relying on OCSP responses MAY recognize a delegation
>    certificate as being issued by the CA that issued the certificate in
>    question if the delegation certificate and the certificate being
>    checked for revocation was issued by the same CA using different
>    issuing keys.
>    id-kp-OCSPSigning OBJECT IDENTIFIER ::= {id-kp 9}
> 
>    Systems or applications that rely on OCSP responses MUST be capable
>    of detecting and enforcing use of the id-ad-ocspSigning value as
>    described above. They MAY provide a means of locally configuring one
>  
> 
> 
> Stefan Santesson        Expires January 21, 2013               [Page 14]
> 
> INTERNET DRAFT                 PKIX OCSP                   July 20, 2012
> 
> 
>    or more OCSP signing authorities, and specifying the set of CAs for
>    which each signing authority is trusted. They MUST reject the
>    response if the certificate required to validate the signature on the
>    response fails to meet at least one of the following criteria:
> 
>    1. Matches a local configuration of OCSP signing authority for the
>    certificate in question; or
> 
>    2. Is the certificate of the CA that issued the certificate in
>    question; or
> 
>    3. Includes a value of id-ad-ocspSigning in an ExtendedKeyUsage
>    extension and is issued by the CA that issued the certificate in
>    question as stated above.
> 
>    Additional acceptance or rejection criteria may apply to either the
>    response itself or to the certificate used to validate the signature
>    on the response.
> 



--B_3426223924_1866472
Content-type: text/html;
	charset="US-ASCII"
Content-transfer-encoding: quoted-printable

<html><head></head><body style=3D"color: rgb(0, 0, 0); font-size: 14px; font-=
family: Calibri, sans-serif; word-wrap: break-word; -webkit-nbsp-mode: space=
; -webkit-line-break: after-white-space; "><div>Sorry, this mail got stuck i=
n my out box. Resending it way late.</div><div><br></div><div>Mike,</div><di=
v><br></div><div>Thanks for the input.</div><div><br></div><div>I agree that=
 the text is not ideal and could use some wordsmithing.</div><div>I just wan=
ted to see if a sentence like this (in some edited form) could do the job wi=
th respect to the expressed lack of clarity of RFC 2560, whether CA rekeying=
 is part of MUST support for relying parties.</div><div><br></div><div>The o=
pinion in the room at last PKIX suggested that it is not.</div><div><br></di=
v><div>Pleas feel free to suggest alternative wordings.</div><div><br></div>=
<div>/Stefan</div><div><br></div><div><br></div><div><br></div><span id=3D"OLK=
_SRC_BODY_SECTION"><div style=3D"font-family:Calibri; font-size:11pt; text-ali=
gn:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; =
PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c=
4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span style=3D"fon=
t-weight:bold">From: </span> Michael Myers &lt;<a href=3D"mailto:mmyers@fastq.=
com">mmyers@fastq.com</a>&gt;<br><span style=3D"font-weight:bold">Date: </span=
> Friday, 20 July, 2012 8:11 PM<br><span style=3D"font-weight:bold">To: </span=
> Stefan Santesson &lt;<a href=3D"mailto:stefan@aaa-sec.com">stefan@aaa-sec.co=
m</a>&gt;<br><span style=3D"font-weight:bold">Cc: </span> &lt;<a href=3D"mailto:=
pkix@ietf.org">pkix@ietf.org</a>&gt;<br><span style=3D"font-weight:bold">Subje=
ct: </span> Re: [pkix] RFC2560bis update<br></div><div><br></div><blockquote=
 id=3D"MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style=3D"BORDER-LEFT: #b5c4df 5 solid=
; PADDING:0 0 0 5; MARGIN:0 0 0 5;"><div><div style=3D"word-wrap: break-word; =
-webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Stefan,<d=
iv><br></div><div>A good bit of work. &nbsp;Some preliminary comments below,=
 marked with [MM]. &nbsp;More MAY follow. &nbsp;I'd be happy to provide some=
 alternative text to sharpen things up, if that would be useful. &nbsp;I hop=
e all this goofy formatting comes across.</div><div><br></div><div>Mike</div=
><div style=3D"font-size: 20px; "><span class=3D"Apple-style-span" style=3D"font-s=
ize: medium;"><font class=3D"Apple-style-span" size=3D"6"><span class=3D"Apple-sty=
le-span" style=3D"font-size: 20px;"><br></span></font></span></div><div style=3D=
"font-size: 20px; "><span class=3D"Apple-style-span" style=3D"font-size: medium;=
"><font class=3D"Apple-style-span" size=3D"6"><span class=3D"Apple-style-span" sty=
le=3D"font-size: 20px;"><span class=3D"Apple-style-span" style=3D"font-family: Tim=
es; font-size: medium; "><pre style=3D"word-wrap: break-word; white-space: pre=
-wrap; font-size: 14px; ">4.2.2.2  Authorized Responders

   TBD --------- UPDATE THIS SECTIOIN -------------

   The key that signs a certificate's status information need not be the
   same key that signed the certificate. It is necessary however to
   ensure that the entity signing this information is authorized to do
   so.  Therefore, a certificate's issuer MUST either sign the OCSP
   responses itself or it MUST explicitly designate this authority to
   another entity.</pre><pre style=3D"word-wrap: break-word; white-space: pre=
-wrap; font-size: 14px; "><br></pre><pre style=3D"word-wrap: break-word; white=
-space: pre-wrap; font-size: 14px; "><b>[MM] You are forgetting about local =
configuration.  See point (1) below.</b></pre><pre style=3D"word-wrap: break-w=
ord; white-space: pre-wrap; font-size: 14px; "><b><br></b></pre><pre style=3D"=
word-wrap: break-word; white-space: pre-wrap; font-size: 14px; ">   OCSP sig=
ning delegation SHALL be designated by the
   inclusion of id-kp-OCSPSigning in an extendedKeyUsage certificate
   extension included in the OCSP response signer's certificate.  This
   certificate MUST be issued directly by the CA that issued the
   certificate in question.

   The CA SHOULD use the same issuing key to issue a delegation
   certificate as was used to sign the certificate being checked for
   revocation.</pre><pre style=3D"word-wrap: break-word; white-space: pre-wra=
p; font-size: 14px; "><br></pre><pre style=3D"word-wrap: break-word; white-spa=
ce: pre-wrap; font-size: 14px; "><b>[MM]  The following bit in italics could=
 use some wordsmithing.</b></pre><pre style=3D"word-wrap: break-word; white-sp=
ace: pre-wrap; font-size: 14px; "><br></pre><pre style=3D"word-wrap: break-wor=
d; white-space: pre-wrap; font-size: 14px; "><i>   Systems relying on OCSP r=
esponses MUST recognize a
   delegation certificate as being issued by the CA that issued the
   certificate in question if the delegation certificate and the
   certificate being checked for revocation was signed by the same key.</i>=
</pre><pre style=3D"word-wrap: break-word; white-space: pre-wrap; font-size: 1=
4px; "><br></pre><pre style=3D"word-wrap: break-word; white-space: pre-wrap; f=
ont-size: 14px; "><b>[MM]  What does it mean to "recognize"?  Perhaps "accep=
t as valid"?</b></pre><pre style=3D"word-wrap: break-word; white-space: pre-wr=
ap; font-size: 14px; "><b>      Also, "issued by" is ambiguous.  Follow the =
keys.</b></pre><pre style=3D"word-wrap: break-word; white-space: pre-wrap; fon=
t-size: 14px; "><b>      For example, above.  "The key that signs . . . "</b=
></pre><pre style=3D"word-wrap: break-word; white-space: pre-wrap; font-size: =
14px; ">   Systems relying on OCSP responses MAY <b>recognize</b> a delegati=
on
   certificate as being <b>issued by</b> the CA that issued the certificate=
 in
   question if the delegation certificate and the certificate being
   checked for revocation <i><span class=3D"Apple-style-span" style=3D"font-sty=
le: normal;">was </span><b><span class=3D"Apple-style-span" style=3D"font-style:=
 normal;">issued</span> </b><span class=3D"Apple-style-span" style=3D"font-style=
: normal;"><b>by</b> the same CA</span></i> using different
   issuing keys.
</pre><pre style=3D"word-wrap: break-word; white-space: pre-wrap; font-size: =
14px; ">   id-kp-OCSPSigning OBJECT IDENTIFIER ::=3D {id-kp 9}

   Systems or applications that rely on OCSP responses MUST be capable
   of detecting and enforcing use of the id-ad-ocspSigning value as
   described above. They MAY provide a means of <b>locally configuring</b> =
one
 


Stefan Santesson        Expires January 21, 2013               [Page 14]
=0C
INTERNET DRAFT                 PKIX OCSP                   July 20, 2012


   or more OCSP signing authorities, and specifying the set of CAs for
   which each signing authority is trusted. They MUST reject the
   response if the certificate required to validate the signature on the
   response fails to meet at least one of the following criteria:

   1. Matches a <b>local configuration</b> of OCSP signing authority for th=
e
   certificate in question; or

   2. Is the certificate of the CA that issued the certificate in
   question; or

   3. Includes a value of id-ad-ocspSigning in an ExtendedKeyUsage
   extension and is <b>issued by</b> the CA that issued the certificate in
   question as stated above.

   Additional acceptance or rejection criteria may apply to either the
   response itself or to the certificate used to validate the signature
   on the response.
</pre><div><br></div></span></span></font></span></div></div></div></blockq=
uote></span></body></html>

--B_3426223924_1866472--



From denis.pinkas@bull.net  Fri Jul 27 07:06:17 2012
Return-Path: <denis.pinkas@bull.net>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1A6D721F86CB for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 07:06:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.248
X-Spam-Level: 
X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MTqBIjBvcabb for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 07:06:16 -0700 (PDT)
Received: from odin2.bull.net (odin2.bull.net [129.184.85.11]) by ietfa.amsl.com (Postfix) with ESMTP id 83C1D21F86D4 for <pkix@ietf.org>; Fri, 27 Jul 2012 07:06:08 -0700 (PDT)
Received: from MSGC-003.bull.fr (MSGC-003.frcl.bull.fr [129.184.87.131]) by odin2.bull.net (Bull S.A.) with ESMTP id 9470513812C; Fri, 27 Jul 2012 16:06:07 +0200 (CEST)
In-Reply-To: <CC331D8C.480B4%stefan@aaa-sec.com>
References: <0B7D0BB1-50AB-4621-A983-976D95A68232@fastq.com> <CC331D8C.480B4%stefan@aaa-sec.com>
To: Stefan Santesson <stefan@aaa-sec.com>
MIME-Version: 1.0
X-KeepSent: 3DE93392:448A74CD-C1257A48:004C6562; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.2 August 10, 2010
From: denis.pinkas@bull.net
Message-ID: <OF3DE93392.448A74CD-ONC1257A48.004C6562-C1257A48.004D76A0@bull.net>
Date: Fri, 27 Jul 2012 16:06:06 +0200
X-MIMETrack: Serialize by Router on MSGC-003/SRV/BULL(Release 8.5.2FP1|November 29, 2010) at 27/07/2012 16:06:07, Serialize complete at 27/07/2012 16:06:07
Content-Type: multipart/alternative; boundary="=_alternative 004D4F7EC1257A48_="
Cc: pkix@ietf.org
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 14:06:17 -0000

Message en plusieurs parties au format MIME
--=_alternative 004D4F7EC1257A48_=
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable

Stefan,

I am puzzled.

During the last IETF meeting in Paris, it was agreed that the current=20
co-editors (and you are among them)=20
would issue a new version of the 2560bis taking into consideration the=20
comments made during  the meeting.

However, since then, I have not seen any new draft. What I have seen=20
however is a list of errata which correct=20
only a few points from RFC 2560.

So my questions:

  1) do you still plan to issue a new draft of 2560bis ?=20
  2) If yes to the above question, can you commit to a time frame for this =

issue  ?
  3) Are you looking for some help to commit to a date ?  If yes, as said=20
during the Paris meeting I can offer my help as a co-editor.

Looking forward to your responses.

Denis



De :    Stefan Santesson <stefan@aaa-sec.com>
A :     Michael Myers <mmyers@fastq.com>
Cc :    pkix@ietf.org
Date :  27/07/2012 15:52
Objet : Re: [pkix] RFC2560bis update
Envoy=E9 par :    pkix-bounces@ietf.org



Sorry, this mail got stuck in my out box. Resending it way late.

Mike,

Thanks for the input.

I agree that the text is not ideal and could use some wordsmithing.
I just wanted to see if a sentence like this (in some edited form) could=20
do the job with respect to the expressed lack of clarity of RFC 2560,=20
whether CA rekeying is part of MUST support for relying parties.

The opinion in the room at last PKIX suggested that it is not.

Pleas feel free to suggest alternative wordings.

/Stefan



From: Michael Myers <mmyers@fastq.com>
Date: Friday, 20 July, 2012 8:11 PM
To: Stefan Santesson <stefan@aaa-sec.com>
Cc: <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update

Stefan,

A good bit of work.  Some preliminary comments below, marked with [MM].=20
More MAY follow.  I'd be happy to provide some alternative text to sharpen =

things up, if that would be useful.  I hope all this goofy formatting=20
comes across.

Mike

4.2.2.2  Authorized Responders

   TBD --------- UPDATE THIS SECTIOIN -------------

   The key that signs a certificate's status information need not be the
   same key that signed the certificate. It is necessary however to
   ensure that the entity signing this information is authorized to do
   so.  Therefore, a certificate's issuer MUST either sign the OCSP
   responses itself or it MUST explicitly designate this authority to
   another entity.

[MM] You are forgetting about local configuration.  See point (1) below.

   OCSP signing delegation SHALL be designated by the
   inclusion of id-kp-OCSPSigning in an extendedKeyUsage certificate
   extension included in the OCSP response signer's certificate.  This
   certificate MUST be issued directly by the CA that issued the
   certificate in question.

   The CA SHOULD use the same issuing key to issue a delegation
   certificate as was used to sign the certificate being checked for
   revocation.

[MM]  The following bit in italics could use some wordsmithing.

   Systems relying on OCSP responses MUST recognize a
   delegation certificate as being issued by the CA that issued the
   certificate in question if the delegation certificate and the
   certificate being checked for revocation was signed by the same key.

[MM]  What does it mean to "recognize"?  Perhaps "accept as valid"?
      Also, "issued by" is ambiguous.  Follow the keys.
      For example, above.  "The key that signs . . . "
   Systems relying on OCSP responses MAY recognize a delegation
   certificate as being issued by the CA that issued the certificate in
   question if the delegation certificate and the certificate being
   checked for revocation was issued by the same CA using different
   issuing keys.

   id-kp-OCSPSigning OBJECT IDENTIFIER ::=3D {id-kp 9}

   Systems or applications that rely on OCSP responses MUST be capable
   of detecting and enforcing use of the id-ad-ocspSigning value as
   described above. They MAY provide a means of locally configuring one
=20


Stefan Santesson        Expires January 21, 2013               [Page 14]
=0C
INTERNET DRAFT                 PKIX OCSP                   July 20, 2012


   or more OCSP signing authorities, and specifying the set of CAs for
   which each signing authority is trusted. They MUST reject the
   response if the certificate required to validate the signature on the
   response fails to meet at least one of the following criteria:

   1. Matches a local configuration of OCSP signing authority for the
   certificate in question; or

   2. Is the certificate of the CA that issued the certificate in
   question; or

   3. Includes a value of id-ad-ocspSigning in an ExtendedKeyUsage
   extension and is issued by the CA that issued the certificate in
   question as stated above.

   Additional acceptance or rejection criteria may apply to either the
   response itself or to the certificate used to validate the signature
   on the response.

=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix


--=_alternative 004D4F7EC1257A48_=
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable

<font size=3D2 face=3D"sans-serif">Stefan,</font>
<br>
<br><font size=3D2 face=3D"sans-serif">I am puzzled.</font>
<br>
<br><font size=3D2 face=3D"sans-serif">During the last IETF meeting in Pari=
s,
it was agreed that the current co-editors (and you are among them) <br>
would issue a new version of the 2560bis taking into consideration the
comments made during &nbsp;the meeting.</font>
<br>
<br><font size=3D2 face=3D"sans-serif">However, since then, I have not seen
any new draft. What I have seen however is a list of errata which correct
<br>
only a few points from RFC 2560.</font>
<br>
<br><font size=3D2 face=3D"sans-serif">So my questions:</font>
<br>
<br><font size=3D2 face=3D"sans-serif">&nbsp; 1) do you still plan to issue
a new draft of 2560bis ? </font>
<br><font size=3D2 face=3D"sans-serif">&nbsp; 2) If yes to the above questi=
on,
can you commit to a time frame for this issue &nbsp;?</font>
<br><font size=3D2 face=3D"sans-serif">&nbsp; 3) Are you looking for some h=
elp
to commit to a date ? &nbsp;If yes, as said during the Paris meeting I
can offer my help as a co-editor.</font>
<br>
<br><font size=3D2 face=3D"sans-serif">Looking forward to your responses.</=
font>
<br>
<br><font size=3D2 face=3D"sans-serif">Denis</font>
<br>
<br>
<br>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">De : &nbsp; &nbsp; &=
nbsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">Stefan Santesson &lt;stefan=
@aaa-sec.com&gt;</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">A : &nbsp; &nbsp; &n=
bsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">Michael Myers &lt;mmyers@fa=
stq.com&gt;</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Cc&nbsp;: &nbsp; &nb=
sp;
&nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">pkix@ietf.org</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Date : &nbsp; &nbsp;=
 &nbsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">27/07/2012 15:52</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Objet : &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">Re: [pkix] RFC2560bis
update</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Envoy=E9 par : &nbsp=
; &nbsp;
&nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">pkix-bounces@ietf.or=
g</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3D2 face=3D"Calibri">Sorry, this mail got stuck in my out bo=
x.
Resending it way late.</font>
<br>
<br><font size=3D2 face=3D"Calibri">Mike,</font>
<br>
<br><font size=3D2 face=3D"Calibri">Thanks for the input.</font>
<br>
<br><font size=3D2 face=3D"Calibri">I agree that the text is not ideal and
could use some wordsmithing.</font>
<br><font size=3D2 face=3D"Calibri">I just wanted to see if a sentence like
this (in some edited form) could do the job with respect to the expressed
lack of clarity of RFC 2560, whether CA rekeying is part of MUST support
for relying parties.</font>
<br>
<br><font size=3D2 face=3D"Calibri">The opinion in the room at last PKIX su=
ggested
that it is not.</font>
<br>
<br><font size=3D2 face=3D"Calibri">Pleas feel free to suggest alternative
wordings.</font>
<br>
<br><font size=3D2 face=3D"Calibri">/Stefan</font>
<br>
<br>
<br>
<br><font size=3D2 face=3D"Calibri"><b>From: </b>Michael Myers &lt;</font><=
a href=3Dmailto:mmyers@fastq.com><font size=3D2 color=3Dblue face=3D"Calibr=
i"><u>mmyers@fastq.com</u></font></a><font size=3D2 face=3D"Calibri">&gt;<b=
><br>
Date: </b>Friday, 20 July, 2012 8:11 PM<b><br>
To: </b>Stefan Santesson &lt;</font><a href=3D"mailto:stefan@aaa-sec.com"><=
font size=3D2 color=3Dblue face=3D"Calibri"><u>stefan@aaa-sec.com</u></font=
></a><font size=3D2 face=3D"Calibri">&gt;<b><br>
Cc: </b>&lt;</font><a href=3Dmailto:pkix@ietf.org><font size=3D2 color=3Dbl=
ue face=3D"Calibri"><u>pkix@ietf.org</u></font></a><font size=3D2 face=3D"C=
alibri">&gt;<b><br>
Subject: </b>Re: [pkix] RFC2560bis update</font>
<br>
<br><font size=3D2 face=3D"Calibri">Stefan,</font>
<br>
<br><font size=3D2 face=3D"Calibri">A good bit of work. &nbsp;Some prelimin=
ary
comments below, marked with [MM]. &nbsp;More MAY follow. &nbsp;I'd be happy
to provide some alternative text to sharpen things up, if that would be
useful. &nbsp;I hope all this goofy formatting comes across.</font>
<br>
<br><font size=3D2 face=3D"Calibri">Mike</font>
<br>
<br><tt><font size=3D2>4.2.2.2 &nbsp;Authorized Responders<br>
<br>
 &nbsp; TBD --------- UPDATE THIS SECTIOIN -------------<br>
<br>
 &nbsp; The key that signs a certificate's status information need not
be the<br>
 &nbsp; same key that signed the certificate. It is necessary however to<br>
 &nbsp; ensure that the entity signing this information is authorized to
do<br>
 &nbsp; so. &nbsp;Therefore, a certificate's issuer MUST either sign the
OCSP<br>
 &nbsp; responses itself or it MUST explicitly designate this authority
to<br>
 &nbsp; another entity.</font></tt>
<br>
<br><tt><font size=3D2><b>[MM] You are forgetting about local configuration.
&nbsp;See point (1) below.</b></font></tt>
<br>
<br><tt><font size=3D2>&nbsp; &nbsp;OCSP signing delegation SHALL be design=
ated
by the<br>
 &nbsp; inclusion of id-kp-OCSPSigning in an extendedKeyUsage certificate<b=
r>
 &nbsp; extension included in the OCSP response signer's certificate. &nbsp=
;This<br>
 &nbsp; certificate MUST be issued directly by the CA that issued the<br>
 &nbsp; certificate in question.<br>
<br>
 &nbsp; The CA SHOULD use the same issuing key to issue a delegation<br>
 &nbsp; certificate as was used to sign the certificate being checked for<b=
r>
 &nbsp; revocation.</font></tt>
<br>
<br><tt><font size=3D2><b>[MM] &nbsp;The following bit in italics could use
some wordsmithing.</b></font></tt>
<br>
<br><tt><font size=3D2><i>&nbsp; &nbsp;Systems relying on OCSP responses
MUST recognize a<br>
 &nbsp; delegation certificate as being issued by the CA that issued the<br>
 &nbsp; certificate in question if the delegation certificate and the<br>
 &nbsp; certificate being checked for revocation was signed by the same
key.</i></font></tt>
<br>
<br><tt><font size=3D2><b>[MM] &nbsp;What does it mean to &quot;recognize&q=
uot;?
&nbsp;Perhaps &quot;accept as valid&quot;?</b></font></tt>
<br><tt><font size=3D2><b>&nbsp; &nbsp; &nbsp; Also, &quot;issued by&quot;
is ambiguous. &nbsp;Follow the keys.</b></font></tt>
<br><tt><font size=3D2><b>&nbsp; &nbsp; &nbsp; For example, above. &nbsp;&q=
uot;The
key that signs . . . &quot;</b></font></tt>
<br><tt><font size=3D2>&nbsp; &nbsp;Systems relying on OCSP responses MAY
<b>recognize</b> a delegation<br>
 &nbsp; certificate as being <b>issued by</b> the CA that issued the certif=
icate
in<br>
 &nbsp; question if the delegation certificate and the certificate being<br>
 &nbsp; checked for revocation was <b>issued<i> </i>by</b> the same CA
using different<br>
 &nbsp; issuing keys.<br>
</font></tt>
<br><tt><font size=3D2>&nbsp; &nbsp;id-kp-OCSPSigning OBJECT IDENTIFIER ::=
=3D
{id-kp 9}<br>
<br>
 &nbsp; Systems or applications that rely on OCSP responses MUST be capable=
<br>
 &nbsp; of detecting and enforcing use of the id-ad-ocspSigning value as<br>
 &nbsp; described above. They MAY provide a means of <b>locally configuring=
</b>
one<br>
 <br>
<br>
<br>
Stefan Santesson &nbsp; &nbsp; &nbsp; &nbsp;Expires January 21, 2013 &nbsp;
&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [Page 14]<br>
=0C<br>
INTERNET DRAFT &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
PKIX OCSP &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;
July 20, 2012<br>
<br>
<br>
 &nbsp; or more OCSP signing authorities, and specifying the set of CAs
for<br>
 &nbsp; which each signing authority is trusted. They MUST reject the<br>
 &nbsp; response if the certificate required to validate the signature
on the<br>
 &nbsp; response fails to meet at least one of the following criteria:<br>
<br>
 &nbsp; 1. Matches a <b>local configuration</b> of OCSP signing authority
for the<br>
 &nbsp; certificate in question; or<br>
<br>
 &nbsp; 2. Is the certificate of the CA that issued the certificate in<br>
 &nbsp; question; or<br>
<br>
 &nbsp; 3. Includes a value of id-ad-ocspSigning in an ExtendedKeyUsage<br>
 &nbsp; extension and is <b>issued by</b> the CA that issued the certificate
in<br>
 &nbsp; question as stated above.<br>
<br>
 &nbsp; Additional acceptance or rejection criteria may apply to either
the<br>
 &nbsp; response itself or to the certificate used to validate the signatur=
e<br>
 &nbsp; on the response.<br>
</font></tt>
<br><tt><font size=3D2>=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F<br>
pkix mailing list<br>
pkix@ietf.org<br>
</font></tt><a href=3Dhttps://www.ietf.org/mailman/listinfo/pkix><tt><font =
size=3D2>https://www.ietf.org/mailman/listinfo/pkix</font></tt></a><tt><fon=
t size=3D2><br>
</font></tt>
<br>
--=_alternative 004D4F7EC1257A48_=--

From david.cooper@nist.gov  Fri Jul 27 08:11:27 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB1D721F8501 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 08:11:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.597
X-Spam-Level: 
X-Spam-Status: No, score=-5.597 tagged_above=-999 required=5 tests=[AWL=-0.456, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2KBU+rN0EcRK for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 08:11:21 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id 9952521F84D3 for <pkix@ietf.org>; Fri, 27 Jul 2012 08:11:20 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Fri, 27 Jul 2012 11:11:15 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Fri, 27 Jul 2012 11:10:39 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6RFBIT8000997	for <pkix@ietf.org>; Fri, 27 Jul 2012 11:11:18 -0400
Message-ID: <5012AF96.3050709@nist.gov>
Date: Fri, 27 Jul 2012 11:11:18 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: "pkix@ietf.org" <pkix@ietf.org>
References: <CC363AFD.494CA%stefan@aaa-sec.com>
In-Reply-To: <CC363AFD.494CA%stefan@aaa-sec.com>
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 15:11:27 -0000

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Stefan,<br>
      <br>
      If you agree that the approach taken in the -04 draft would result
      in a better document than the approach of trying to minimize the
      textual changes from RFC 2560, then I don't understand why you
      want to go with the latter approach.<br>
      <br>
      The main reason for creating 2560bis was to deal with the problem
      of people misinterpreting RFC 2560.&nbsp; For example, we were getting
      messages on the PKIX mail list about browser vendors having to
      deal with PKI vendors that had created infrastructures with OCSP
      responders that were not compatible with the browser's
      implementation, with the PKI vendors then pointing to RFC 2560
      (and their interpretation of it) as the basis for arguing that
      there was nothing wrong with their infrastructure's architecture
      and so the browser vendor needed to deal with it in some manner.&nbsp;
      I very careful in the development of the earlier drafts of -04 to
      include plenty of text (along with examples in Appendix E) to help
      ensure that even someone who wasn't a PKI expert would be able to
      understand it.&nbsp; I was also extremely careful to avoid making any
      changes to the protocol, as I was directed when I was given the
      assignment to develop 2560bis.<br>
      <br>
      I understand there was some disagreement expressed during the last
      IETF meeting with some of the text in the -04 draft, but I don't
      think that's an argument for starting from scratch with a new
      approach that emphasizes minimizing the textual changes in the
      document.&nbsp; On the contrary, I think it highlights the reason that
      we need to go with the approach in the -04 draft.&nbsp; Most of the
      comments that have been made on the -04 draft have been arguments
      that the -04 draft differs from RFC 2560 (or at least from what
      the commenters believe that RFC 2560 intended to say).&nbsp; If members
      of the PKIX WG can't agree on what RFC 2560 means, then it
      shouldn't be a surprise that non-PKI experts are even more prone
      to misinterpreting it.<br>
      <br>
      It may be easier to get consensus if we leave the text mostly
      unchanged.&nbsp; But if consensus is achieved because text that is
      prone to misinterpretation is left unchanged so that no one can
      argue that the protocol was changed, even though they continue to
      disagree about what the text means, then we haven't really
      achieved the goal that we set for ourselves in developing
      2560bis.&nbsp; Given how import OCSP is, I think it is most important
      to make 2560bis the best possible document that it can be rather
      than settling for something that is less than ideal in the name of
      expedience.<br>
      <br>
      Let us please return to working from the -04 draft.&nbsp; There seemed
      to be consensus that that draft was close to being done, and I
      believe that the new text will be very helpful in ensuring that
      there is a common understanding of the protocol and enabling clear
      communication between producers and consumers (e.g., a browser
      vendor could inform PKI vendors that it requires the use of either
      integrated OCSP responders in which the target certificate and
      response are signed by the same key, as depicted in Figure 1, or
      designated OCSP responders in which the target certificate and the
      OCSP responder certificate are signed by the same key, as depicted
      in Figures 4, 8, and 9).<br>
      <br>
      Dave<br>
      <br>
      On 07/25/2012 06:14 PM, Stefan Santesson wrote:<br>
    </div>
    <blockquote cite="mid:CC363AFD.494CA%25stefan@aaa-sec.com"
      type="cite">
      <div>Hi David,</div>
      <div><br>
      </div>
      <div>I appreciate your effort, but we had long serious discussions
        on this at the last PKIX meeting and the direction was clear.</div>
      <div>We needed to take a step back from the "complete overhaul"
        approach and focus on the important changes in a format that was
        closer to the original document.</div>
      <div><br>
      </div>
      <div>In the end, your document might be better, but a more
        restricted approach is easier to evaluate and process through
        the WG and the IETF.</div>
      <div><br>
      </div>
      <div>/Stefan</div>
      <div><br>
      </div>
      <span id="OLK_SRC_BODY_SECTION">
        <div style="font-family:Calibri; font-size:11pt;
          text-align:left; color:black; BORDER-BOTTOM: medium none;
          BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT:
          0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid;
          BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span
            style="font-weight:bold">From: </span> "David A. Cooper"
          &lt;<a moz-do-not-send="true"
            href="mailto:david.cooper@nist.gov">david.cooper@nist.gov</a>&gt;<br>
          <span style="font-weight:bold">Date: </span> Tuesday, 24
          July, 2012 5:49 PM<br>
          <span style="font-weight:bold">To: </span> Stefan Santesson
          &lt;<a moz-do-not-send="true" href="mailto:stefan@aaa-sec.com">stefan@aaa-sec.com</a>&gt;<br>
          <span style="font-weight:bold">Subject: </span> Re: [pkix]
          RFC2560bis update<br>
        </div>
        <div><br>
        </div>
        <blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE"
          style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0
          0 0 5;">
          <div>
            <meta content="text/html; charset=ISO-8859-1"
              http-equiv="Content-Type">
            <div bgcolor="#FFFFFF" text="#000000">
              <div class="moz-cite-prefix">Stefan,<br>
                <br>
                I don't understand why you decided to start from scratch
                on the development on 2560bis.&nbsp; It was my impression
                that the -04 draft was very close to being ready to
                publish, and that there were only a few minor issues
                that needed to be addressed.<br>
                <br>
                There is a reason that the -04 draft is so different
                than RFC 2560.&nbsp; We undertook the development of 2560bis
                because there was a lot of message traffic on the PKIX
                mail list from people who were having problems as a
                result of others misinterpreting RFC 2560.&nbsp; So, the goal
                in developing 2560bis wasn't to make the few changes
                mentioned in the Introduction but to address the
                problems of people misunderstanding the document.<br>
                <br>
                When I first worked to develop 2560bis, I quickly came
                to the conclusion that it would be impossible to address
                all of the confusion people were having about OCSP
                without reorganizing the document in order to improve
                its readability, and when I presented the initial draft
                of 2560bis at IETF 78 there was a lot of support for the
                approach that I took.&nbsp; One of the mandates that I was
                given when asked to work on 2560bis was to make no
                changes to the protocol, and I worked very hard to
                ensure that I didn't make any changes.<br>
                <br>
                So, given all of the work that has gone into developing
                2560bis and the substantial improvement it makes in the
                presentation of the protocol, I don't see the reason to
                start from scratch on this and to make the primary goal
                to change the text of the document as little as possible
                rather than to fix the the problems that lead to the
                decision to develop this document in the first place.<br>
                <br>
                Thanks,<br>
                <br>
                Dave<br>
                <br>
                On 07/20/2012 01:07 PM, Stefan Santesson wrote:<br>
              </div>
              <blockquote cite="mid:CC2F5A7A.47F79%25stefan@aaa-sec.com"
                type="cite">
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">All,</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><br>
                </div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">I finally got to tackle
                  the update of RFC2560bis document.</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><br>
                </div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">At the last ITEF/PKIX
                  meeting we concluded that this effort needs a restart.</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">The changes in the 04
                  draft compared to the original document are so
                  extensive that it is hard to make sure that the update
                  is actually compatible with the existing standard.</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><br>
                </div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">I have therefore made a
                  new draft almost from scratch, trying to change as
                  little as possible compared to RFC 2560.</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><br>
                </div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">The new draft is
                  available here:</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><a
                    moz-do-not-send="true"
href="http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_02.txt">http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_02.txt</a></div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><br>
                </div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">A diff compared to RFC
                  2560 is available here:</div>
                <div><font class="Apple-style-span"
                    face="Calibri,sans-serif"><a moz-do-not-send="true"
                      href="http://tinyurl.com/rfc2560bis05diff">http://tinyurl.com/rfc2560bis05diff</a></font></div>
                <div><font class="Apple-style-span"
                    face="Calibri,sans-serif"><br>
                  </font></div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">The list of changes
                  (this list is included in the draft) is:</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><br>
                </div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><span
                    class="Apple-style-span" style="font-family: Times;
                    font-size: medium; ">
                    <pre style="word-wrap: break-word; white-space: pre-wrap; ">This document differs from RFC 2560 in only a few areas:

   o  Section 4.1.1 specifies the ASN.1 syntax for the nonce
      extension, which was missing in RFC 2560.

   o  Section 4.4.7 specifies a new extension that may be included in
      a request message to specify signature algorithms the client
      would prefer the server use to sign the response as specified
      in [RFC6277].

   o  Section 2.3 extends the use of the "unauthorized" error
      response, as specified in [RFC5019].

   o  Section 4.2.1 and 4.2.2.3 states that a response may include
      revocation status information for certificates that were not
      included in the request, as permitted in [RFC5019].

   o  Section 4.3 changes set of cryptographic algorithms that
      clients must support and the set of cryptographic algorithms
      that clients should support as specified in [RFC6277].

   o Section 4.2.2.2 has been updated to clarify when a responder is
      considered an Authorized Responder.
</pre>
                    <div><br>
                    </div>
                  </span></div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><br>
                </div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">Section headings and
                  numbering are as much as possible kept intact from RFC
                  2560.</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">The ASN-1 modules are
                  imported form rfc2560bis draft 04.</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><br>
                </div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">What important updates
                  did I miss to cover in this draft?</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><br>
                </div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">If this is considered a
                  good starting point for a restarted draft effort, then
                  I will publish this as draft 05 as soon as the draft
                  submission is re-opened.</div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; "><br>
                </div>
                <div style="color: rgb(0, 0, 0); font-family: Calibri,
                  sans-serif; font-size: 14px; ">/Stefan</div>
              </blockquote>
            </div>
          </div>
        </blockquote>
      </span>
    </blockquote>
    <br>
  </body>
</html>

From denis.pinkas@bull.net  Fri Jul 27 08:25:28 2012
Return-Path: <denis.pinkas@bull.net>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8F28C21F8460 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 08:25:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.248
X-Spam-Level: 
X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599, HELO_EQ_FR=0.35, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TyucuAPsK+bn for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 08:25:27 -0700 (PDT)
Received: from odin2.bull.net (odin2.bull.net [129.184.85.11]) by ietfa.amsl.com (Postfix) with ESMTP id AABFE21F8646 for <pkix@ietf.org>; Fri, 27 Jul 2012 08:25:26 -0700 (PDT)
Received: from MSGC-003.bull.fr (MSGC-003.frcl.bull.fr [129.184.87.131]) by odin2.bull.net (Bull S.A.) with ESMTP id 1C81A1207D2; Fri, 27 Jul 2012 17:25:26 +0200 (CEST)
In-Reply-To: <5012AF96.3050709@nist.gov>
References: <CC363AFD.494CA%stefan@aaa-sec.com> <5012AF96.3050709@nist.gov>
To: "David A. Cooper" <david.cooper@nist.gov>
MIME-Version: 1.0
X-KeepSent: 854794A0:83F2154E-C1257A48:0053F82F; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.2 August 10, 2010
From: denis.pinkas@bull.net
Message-ID: <OF854794A0.83F2154E-ONC1257A48.0053F82F-C1257A48.0054B99A@bull.net>
Date: Fri, 27 Jul 2012 17:25:25 +0200
X-MIMETrack: Serialize by Router on MSGC-003/SRV/BULL(Release 8.5.2FP1|November 29, 2010) at 27/07/2012 17:25:25, Serialize complete at 27/07/2012 17:25:25
Content-Type: multipart/alternative; boundary="=_alternative 005490E9C1257A48_="
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 15:25:28 -0000

Message en plusieurs parties au format MIME
--=_alternative 005490E9C1257A48_=
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable

Dave,

Your email states:

"Let us please return to working from the -04 draft.  There seemed to be=20
consensus that that draft was close to being done, ..."

I fully agree that we should continue working from the -04 draft, because=20
the structure of RFC 2560 needs to be changed.

However, I strongly disagree "that the draft was close to being done".=20
Many changes still need to be done and several pages=20
of the draft would need to be deleted.

Denis



De :    "David A. Cooper" <david.cooper@nist.gov>
A :     "pkix@ietf.org" <pkix@ietf.org>
Date :  27/07/2012 17:11
Objet : Re: [pkix] RFC2560bis update
Envoy=E9 par :    pkix-bounces@ietf.org



Stefan,

If you agree that the approach taken in the -04 draft would result in a=20
better document than the approach of trying to minimize the textual=20
changes from RFC 2560, then I don't understand why you want to go with the =

latter approach.

The main reason for creating 2560bis was to deal with the problem of=20
people misinterpreting RFC 2560.  For example, we were getting messages on =

the PKIX mail list about browser vendors having to deal with PKI vendors=20
that had created infrastructures with OCSP responders that were not=20
compatible with the browser's implementation, with the PKI vendors then=20
pointing to RFC 2560 (and their interpretation of it) as the basis for=20
arguing that there was nothing wrong with their infrastructure's=20
architecture and so the browser vendor needed to deal with it in some=20
manner.  I very careful in the development of the earlier drafts of -04 to =

include plenty of text (along with examples in Appendix E) to help ensure=20
that even someone who wasn't a PKI expert would be able to understand it.=20
I was also extremely careful to avoid making any changes to the protocol,=20
as I was directed when I was given the assignment to develop 2560bis.

I understand there was some disagreement expressed during the last IETF=20
meeting with some of the text in the -04 draft, but I don't think that's=20
an argument for starting from scratch with a new approach that emphasizes=20
minimizing the textual changes in the document.  On the contrary, I think=20
it highlights the reason that we need to go with the approach in the -04=20
draft.  Most of the comments that have been made on the -04 draft have=20
been arguments that the -04 draft differs from RFC 2560 (or at least from=20
what the commenters believe that RFC 2560 intended to say).  If members of =

the PKIX WG can't agree on what RFC 2560 means, then it shouldn't be a=20
surprise that non-PKI experts are even more prone to misinterpreting it.

It may be easier to get consensus if we leave the text mostly unchanged.=20
But if consensus is achieved because text that is prone to=20
misinterpretation is left unchanged so that no one can argue that the=20
protocol was changed, even though they continue to disagree about what the =

text means, then we haven't really achieved the goal that we set for=20
ourselves in developing 2560bis.  Given how import OCSP is, I think it is=20
most important to make 2560bis the best possible document that it can be=20
rather than settling for something that is less than ideal in the name of=20
expedience.

Let us please return to working from the -04 draft.  There seemed to be=20
consensus that that draft was close to being done, and I believe that the=20
new text will be very helpful in ensuring that there is a common=20
understanding of the protocol and enabling clear communication between=20
producers and consumers (e.g., a browser vendor could inform PKI vendors=20
that it requires the use of either integrated OCSP responders in which the =

target certificate and response are signed by the same key, as depicted in =

Figure 1, or designated OCSP responders in which the target certificate=20
and the OCSP responder certificate are signed by the same key, as depicted =

in Figures 4, 8, and 9).

Dave

On 07/25/2012 06:14 PM, Stefan Santesson wrote:
Hi David,

I appreciate your effort, but we had long serious discussions on this at=20
the last PKIX meeting and the direction was clear.
We needed to take a step back from the "complete overhaul" approach and=20
focus on the important changes in a format that was closer to the original =

document.

In the end, your document might be better, but a more restricted approach=20
is easier to evaluate and process through the WG and the IETF.

/Stefan

From: "David A. Cooper" <david.cooper@nist.gov>
Date: Tuesday, 24 July, 2012 5:49 PM
To: Stefan Santesson <stefan@aaa-sec.com>
Subject: Re: [pkix] RFC2560bis update

Stefan,

I don't understand why you decided to start from scratch on the=20
development on 2560bis.  It was my impression that the -04 draft was very=20
close to being ready to publish, and that there were only a few minor=20
issues that needed to be addressed.

There is a reason that the -04 draft is so different than RFC 2560.  We=20
undertook the development of 2560bis because there was a lot of message=20
traffic on the PKIX mail list from people who were having problems as a=20
result of others misinterpreting RFC 2560.  So, the goal in developing=20
2560bis wasn't to make the few changes mentioned in the Introduction but=20
to address the problems of people misunderstanding the document.

When I first worked to develop 2560bis, I quickly came to the conclusion=20
that it would be impossible to address all of the confusion people were=20
having about OCSP without reorganizing the document in order to improve=20
its readability, and when I presented the initial draft of 2560bis at IETF =

78 there was a lot of support for the approach that I took.  One of the=20
mandates that I was given when asked to work on 2560bis was to make no=20
changes to the protocol, and I worked very hard to ensure that I didn't=20
make any changes.

So, given all of the work that has gone into developing 2560bis and the=20
substantial improvement it makes in the presentation of the protocol, I=20
don't see the reason to start from scratch on this and to make the primary =

goal to change the text of the document as little as possible rather than=20
to fix the the problems that lead to the decision to develop this document =

in the first place.

Thanks,

Dave

On 07/20/2012 01:07 PM, Stefan Santesson wrote:
All,

I finally got to tackle the update of RFC2560bis document.

At the last ITEF/PKIX meeting we concluded that this effort needs a=20
restart.
The changes in the 04 draft compared to the original document are so=20
extensive that it is hard to make sure that the update is actually=20
compatible with the existing standard.

I have therefore made a new draft almost from scratch, trying to change as =

little as possible compared to RFC 2560.

The new draft is available here:
http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05=5F02.txt

A diff compared to RFC 2560 is available here:
http://tinyurl.com/rfc2560bis05diff

The list of changes (this list is included in the draft) is:

This document differs from RFC 2560 in only a few areas:

   o  Section 4.1.1 specifies the ASN.1 syntax for the nonce
      extension, which was missing in RFC 2560.

   o  Section 4.4.7 specifies a new extension that may be included in
      a request message to specify signature algorithms the client
      would prefer the server use to sign the response as specified
      in [RFC6277].

   o  Section 2.3 extends the use of the "unauthorized" error
      response, as specified in [RFC5019].

   o  Section 4.2.1 and 4.2.2.3 states that a response may include
      revocation status information for certificates that were not
      included in the request, as permitted in [RFC5019].

   o  Section 4.3 changes set of cryptographic algorithms that
      clients must support and the set of cryptographic algorithms
      that clients should support as specified in [RFC6277].

   o Section 4.2.2.2 has been updated to clarify when a responder is
      considered an Authorized Responder.



Section headings and numbering are as much as possible kept intact from=20
RFC 2560.
The ASN-1 modules are imported form rfc2560bis draft 04.

What important updates did I miss to cover in this draft?

If this is considered a good starting point for a restarted draft effort,=20
then I will publish this as draft 05 as soon as the draft submission is=20
re-opened.

/Stefan
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix


--=_alternative 005490E9C1257A48_=
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: quoted-printable

<font size=3D2 face=3D"Arial">Dave,</font>
<br>
<br><font size=3D2 face=3D"Arial">Your email states:</font>
<br>
<br><font size=3D2 face=3D"Arial">&quot;Let us please return to working from
the -04 draft. &nbsp;There seemed to be consensus that that draft was close
to being done, ...&quot;</font>
<br>
<br><font size=3D2 face=3D"Arial">I fully agree that we should continue wor=
king
from the -04 draft, because the structure of RFC 2560 needs to be changed.<=
/font>
<br>
<br><font size=3D2 face=3D"Arial">However, I strongly disagree &quot;that t=
he
draft was close to being done&quot;. Many changes still need to be done
and several pages <br>
of the draft would need to be deleted.</font>
<br>
<br><font size=3D2 face=3D"Arial">Denis</font>
<br>
<br>
<br>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">De : &nbsp; &nbsp; &=
nbsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">&quot;David A. Cooper&quot;
&lt;david.cooper@nist.gov&gt;</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">A : &nbsp; &nbsp; &n=
bsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">&quot;pkix@ietf.org&quot;
&lt;pkix@ietf.org&gt;</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Date : &nbsp; &nbsp;=
 &nbsp;
&nbsp;</font><font size=3D1 face=3D"sans-serif">27/07/2012 17:11</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Objet : &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">Re: [pkix] RFC2560bis
update</font>
<br><font size=3D1 color=3D#5f5f5f face=3D"sans-serif">Envoy=E9 par : &nbsp=
; &nbsp;
&nbsp; &nbsp;</font><font size=3D1 face=3D"sans-serif">pkix-bounces@ietf.or=
g</font>
<br>
<hr noshade>
<br>
<br>
<br><font size=3D3>Stefan,<br>
<br>
If you agree that the approach taken in the -04 draft would result in a
better document than the approach of trying to minimize the textual changes
from RFC 2560, then I don't understand why you want to go with the latter
approach.<br>
<br>
The main reason for creating 2560bis was to deal with the problem of people
misinterpreting RFC 2560. &nbsp;For example, we were getting messages on
the PKIX mail list about browser vendors having to deal with PKI vendors
that had created infrastructures with OCSP responders that were not compati=
ble
with the browser's implementation, with the PKI vendors then pointing to
RFC 2560 (and their interpretation of it) as the basis for arguing that
there was nothing wrong with their infrastructure's architecture and so
the browser vendor needed to deal with it in some manner. &nbsp;I very
careful in the development of the earlier drafts of -04 to include plenty
of text (along with examples in Appendix E) to help ensure that even someone
who wasn't a PKI expert would be able to understand it. &nbsp;I was also
extremely careful to avoid making any changes to the protocol, as I was
directed when I was given the assignment to develop 2560bis.<br>
<br>
I understand there was some disagreement expressed during the last IETF
meeting with some of the text in the -04 draft, but I don't think that's
an argument for starting from scratch with a new approach that emphasizes
minimizing the textual changes in the document. &nbsp;On the contrary,
I think it highlights the reason that we need to go with the approach in
the -04 draft. &nbsp;Most of the comments that have been made on the -04
draft have been arguments that the -04 draft differs from RFC 2560 (or
at least from what the commenters believe that RFC 2560 intended to say).
&nbsp;If members of the PKIX WG can't agree on what RFC 2560 means, then
it shouldn't be a surprise that non-PKI experts are even more prone to
misinterpreting it.<br>
<br>
It may be easier to get consensus if we leave the text mostly unchanged.
&nbsp;But if consensus is achieved because text that is prone to misinterpr=
etation
is left unchanged so that no one can argue that the protocol was changed,
even though they continue to disagree about what the text means, then we
haven't really achieved the goal that we set for ourselves in developing
2560bis. &nbsp;Given how import OCSP is, I think it is most important to
make 2560bis the best possible document that it can be rather than settling
for something that is less than ideal in the name of expedience.<br>
<br>
Let us please return to working from the -04 draft. &nbsp;There seemed
to be consensus that that draft was close to being done, and I believe
that the new text will be very helpful in ensuring that there is a common
understanding of the protocol and enabling clear communication between
producers and consumers (e.g., a browser vendor could inform PKI vendors
that it requires the use of either integrated OCSP responders in which
the target certificate and response are signed by the same key, as depicted
in Figure 1, or designated OCSP responders in which the target certificate
and the OCSP responder certificate are signed by the same key, as depicted
in Figures 4, 8, and 9).<br>
<br>
Dave<br>
<br>
On 07/25/2012 06:14 PM, Stefan Santesson wrote:</font>
<br><font size=3D3>Hi David,</font>
<br>
<br><font size=3D3>I appreciate your effort, but we had long serious discus=
sions
on this at the last PKIX meeting and the direction was clear.</font>
<br><font size=3D3>We needed to take a step back from the &quot;complete
overhaul&quot; approach and focus on the important changes in a format
that was closer to the original document.</font>
<br>
<br><font size=3D3>In the end, your document might be better, but a more
restricted approach is easier to evaluate and process through the WG and
the IETF.</font>
<br>
<br><font size=3D3>/Stefan</font>
<br>
<br><font size=3D2 face=3D"Calibri"><b>From: </b>&quot;David A. Cooper&quot;
&lt;</font><a href=3Dmailto:david.cooper@nist.gov><font size=3D2 color=3Dbl=
ue face=3D"Calibri"><u>david.cooper@nist.gov</u></font></a><font size=3D2 f=
ace=3D"Calibri">&gt;<b><br>
Date: </b>Tuesday, 24 July, 2012 5:49 PM<b><br>
To: </b>Stefan Santesson &lt;</font><a href=3D"mailto:stefan@aaa-sec.com"><=
font size=3D2 color=3Dblue face=3D"Calibri"><u>stefan@aaa-sec.com</u></font=
></a><font size=3D2 face=3D"Calibri">&gt;<b><br>
Subject: </b>Re: [pkix] RFC2560bis update</font>
<br>
<br><font size=3D3>Stefan,<br>
<br>
I don't understand why you decided to start from scratch on the development
on 2560bis. &nbsp;It was my impression that the -04 draft was very close
to being ready to publish, and that there were only a few minor issues
that needed to be addressed.<br>
<br>
There is a reason that the -04 draft is so different than RFC 2560. &nbsp;We
undertook the development of 2560bis because there was a lot of message
traffic on the PKIX mail list from people who were having problems as a
result of others misinterpreting RFC 2560. &nbsp;So, the goal in developing
2560bis wasn't to make the few changes mentioned in the Introduction but
to address the problems of people misunderstanding the document.<br>
<br>
When I first worked to develop 2560bis, I quickly came to the conclusion
that it would be impossible to address all of the confusion people were
having about OCSP without reorganizing the document in order to improve
its readability, and when I presented the initial draft of 2560bis at IETF
78 there was a lot of support for the approach that I took. &nbsp;One of
the mandates that I was given when asked to work on 2560bis was to make
no changes to the protocol, and I worked very hard to ensure that I didn't
make any changes.<br>
<br>
So, given all of the work that has gone into developing 2560bis and the
substantial improvement it makes in the presentation of the protocol, I
don't see the reason to start from scratch on this and to make the primary
goal to change the text of the document as little as possible rather than
to fix the the problems that lead to the decision to develop this document
in the first place.<br>
<br>
Thanks,<br>
<br>
Dave<br>
<br>
On 07/20/2012 01:07 PM, Stefan Santesson wrote:</font>
<br><font size=3D2 face=3D"Calibri">All,</font>
<br>
<br><font size=3D2 face=3D"Calibri">I finally got to tackle the update of R=
FC2560bis
document.</font>
<br>
<br><font size=3D2 face=3D"Calibri">At the last ITEF/PKIX meeting we conclu=
ded
that this effort needs a restart.</font>
<br><font size=3D2 face=3D"Calibri">The changes in the 04 draft compared to
the original document are so extensive that it is hard to make sure that
the update is actually compatible with the existing standard.</font>
<br>
<br><font size=3D2 face=3D"Calibri">I have therefore made a new draft almost
from scratch, trying to change as little as possible compared to RFC 2560.<=
/font>
<br>
<br><font size=3D2 face=3D"Calibri">The new draft is available here:</font>
<br><a href=3D"http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bi=
s-05=5F02.txt"><font size=3D2 color=3Dblue face=3D"Calibri"><u>http://aaa-s=
ec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05=5F02.txt</u></font></a>
<br>
<br><font size=3D2 face=3D"Calibri">A diff compared to RFC 2560 is available
here:</font>
<br><a href=3Dhttp://tinyurl.com/rfc2560bis05diff><font size=3D3 color=3Dbl=
ue face=3D"Calibri"><u>http://tinyurl.com/rfc2560bis05diff</u></font></a>
<br>
<br><font size=3D2 face=3D"Calibri">The list of changes (this list is inclu=
ded
in the draft) is:</font>
<br>
<br><tt><font size=3D3>This document differs from RFC 2560 in only a few
areas:<br>
<br>
 &nbsp; o &nbsp;Section 4.1.1 specifies the ASN.1 syntax for the nonce<br>
 &nbsp; &nbsp; &nbsp;extension, which was missing in RFC 2560.<br>
<br>
 &nbsp; o &nbsp;Section 4.4.7 specifies a new extension that may be included
in<br>
 &nbsp; &nbsp; &nbsp;a request message to specify signature algorithms
the client<br>
 &nbsp; &nbsp; &nbsp;would prefer the server use to sign the response as
specified<br>
 &nbsp; &nbsp; &nbsp;in [RFC6277].<br>
<br>
 &nbsp; o &nbsp;Section 2.3 extends the use of the &quot;unauthorized&quot;
error<br>
 &nbsp; &nbsp; &nbsp;response, as specified in [RFC5019].<br>
<br>
 &nbsp; o &nbsp;Section 4.2.1 and 4.2.2.3 states that a response may includ=
e<br>
 &nbsp; &nbsp; &nbsp;revocation status information for certificates that
were not<br>
 &nbsp; &nbsp; &nbsp;included in the request, as permitted in [RFC5019].<br>
<br>
 &nbsp; o &nbsp;Section 4.3 changes set of cryptographic algorithms that<br>
 &nbsp; &nbsp; &nbsp;clients must support and the set of cryptographic
algorithms<br>
 &nbsp; &nbsp; &nbsp;that clients should support as specified in [RFC6277].=
<br>
<br>
 &nbsp; o Section 4.2.2.2 has been updated to clarify when a responder
is<br>
 &nbsp; &nbsp; &nbsp;considered an Authorized Responder.<br>
</font></tt>
<br>
<br>
<br><font size=3D2 face=3D"Calibri">Section headings and numbering are as m=
uch
as possible kept intact from RFC 2560.</font>
<br><font size=3D2 face=3D"Calibri">The ASN-1 modules are imported form rfc=
2560bis
draft 04.</font>
<br>
<br><font size=3D2 face=3D"Calibri">What important updates did I miss to co=
ver
in this draft?</font>
<br>
<br><font size=3D2 face=3D"Calibri">If this is considered a good starting p=
oint
for a restarted draft effort, then I will publish this as draft 05 as soon
as the draft submission is re-opened.</font>
<br>
<br><font size=3D2 face=3D"Calibri">/Stefan</font>
<br><tt><font size=3D2>=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=5F=
=5F=5F=5F=5F=5F<br>
pkix mailing list<br>
pkix@ietf.org<br>
</font></tt><a href=3Dhttps://www.ietf.org/mailman/listinfo/pkix><tt><font =
size=3D2>https://www.ietf.org/mailman/listinfo/pkix</font></tt></a><tt><fon=
t size=3D2><br>
</font></tt>
<br>
--=_alternative 005490E9C1257A48_=--

From david.cooper@nist.gov  Fri Jul 27 08:26:26 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEEBF21F8646 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 08:26:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.546
X-Spam-Level: 
X-Spam-Status: No, score=-5.546 tagged_above=-999 required=5 tests=[AWL=-0.405, BAYES_00=-2.599, HTML_FONT_SIZE_LARGE=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b7jRj3T7bOoz for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 08:26:26 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id 861DA21F8460 for <pkix@ietf.org>; Fri, 27 Jul 2012 08:26:24 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Fri, 27 Jul 2012 11:26:20 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Fri, 27 Jul 2012 11:25:44 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6RFQMQ0001855	for <pkix@ietf.org>; Fri, 27 Jul 2012 11:26:23 -0400
Message-ID: <5012B31E.7020400@nist.gov>
Date: Fri, 27 Jul 2012 11:26:22 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: "pkix@ietf.org" <pkix@ietf.org>
References: <CC331D8C.480B4%stefan@aaa-sec.com>
In-Reply-To: <CC331D8C.480B4%stefan@aaa-sec.com>
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 15:26:26 -0000

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">Stefan,<br>
      <br>
      I don't think this is a matter of lack of clarity in RFC 2560.&nbsp; I
      think RFC 2560 is simply silent on what conforming relying parties
      need to support.&nbsp; I would also argue (contrary to your slides from
      the previous IETF meeting) that 2560bis is silent on this issue as
      well.&nbsp; Following RFC 2560, draft -04 of 2560bis states the
      requirements for an OCSP response to be valid (and 2560bis goes
      further by adding a Note to point that using different keys to
      sign the target certificate and the response (or OCSP responder
      certificate) will cause interoperability problems since some
      clients will not be able to accept such responses), but nowhere
      does it state that conforming relying parties MUST be able to
      accept responses that are signed with different keys.<br>
      <br>
      I believe that requiring issuers to sign OCSP responses (or OCSP
      responder certificates) with the same key as the target
      certificate would be a same from RFC 2560, which only imposes a
      requirement of "same CA," would be a change in the protocol, which
      I was told I was not allowed to do when I was asked to develop
      2560bis.&nbsp; However, since RFC 2560 does not have any conformance
      requirements in this area, it would not be a change from RFC 2560
      (or the earlier drafts of 2560bis) to state that conforming
      relying parties MUST be able to accept responses signed with the
      same key but are not required to be able to accept responses
      signed with different keys.&nbsp; Similarly, while stating that issuers
      SHOULD sign certificates and responses (or OCSP responder
      certificates) with the same key is something that would be new
      compared to RFC 2560, at least it doesn't forbid something that
      was previously allowed by RFC 2560.<br>
      <br>
      Dave<br>
      <br>
      On 07/27/2012 09:51 AM, Stefan Santesson wrote:<br>
    </div>
    <blockquote cite="mid:CC331D8C.480B4%25stefan@aaa-sec.com"
      type="cite">
      <div>Sorry, this mail got stuck in my out box. Resending it way
        late.</div>
      <div><br>
      </div>
      <div>Mike,</div>
      <div><br>
      </div>
      <div>Thanks for the input.</div>
      <div><br>
      </div>
      <div>I agree that the text is not ideal and could use some
        wordsmithing.</div>
      <div>I just wanted to see if a sentence like this (in some edited
        form) could do the job with respect to the expressed lack of
        clarity of RFC 2560, whether CA rekeying is part of MUST support
        for relying parties.</div>
      <div><br>
      </div>
      <div>The opinion in the room at last PKIX suggested that it is
        not.</div>
      <div><br>
      </div>
      <div>Pleas feel free to suggest alternative wordings.</div>
      <div><br>
      </div>
      <div>/Stefan</div>
      <div><br>
      </div>
      <div><br>
      </div>
      <span id="OLK_SRC_BODY_SECTION">
        <div style="font-family:Calibri; font-size:11pt;
          text-align:left; color:black; BORDER-BOTTOM: medium none;
          BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT:
          0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid;
          BORDER-RIGHT: medium none; PADDING-TOP: 3pt"><span
            style="font-weight:bold">From: </span> Michael Myers &lt;<a
            moz-do-not-send="true" href="mailto:mmyers@fastq.com">mmyers@fastq.com</a>&gt;<br>
          <span style="font-weight:bold">Date: </span> Friday, 20 July,
          2012 8:11 PM<br>
          <span style="font-weight:bold">To: </span> Stefan Santesson
          &lt;<a moz-do-not-send="true" href="mailto:stefan@aaa-sec.com">stefan@aaa-sec.com</a>&gt;<br>
          <span style="font-weight:bold">Cc: </span> &lt;<a
            moz-do-not-send="true" href="mailto:pkix@ietf.org">pkix@ietf.org</a>&gt;<br>
          <span style="font-weight:bold">Subject: </span> Re: [pkix]
          RFC2560bis update<br>
        </div>
        <div><br>
        </div>
        <blockquote id="MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE"
          style="BORDER-LEFT: #b5c4df 5 solid; PADDING:0 0 0 5; MARGIN:0
          0 0 5;">
          <div>
            <div style="word-wrap: break-word; -webkit-nbsp-mode: space;
              -webkit-line-break: after-white-space; ">Stefan,
              <div><br>
              </div>
              <div>A good bit of work. &nbsp;Some preliminary comments below,
                marked with [MM]. &nbsp;More MAY follow. &nbsp;I'd be happy to
                provide some alternative text to sharpen things up, if
                that would be useful. &nbsp;I hope all this goofy formatting
                comes across.</div>
              <div><br>
              </div>
              <div>Mike</div>
              <div style="font-size: 20px; "><span
                  class="Apple-style-span" style="font-size: medium;"><font
                    class="Apple-style-span" size="6"><span
                      class="Apple-style-span" style="font-size: 20px;"><br>
                    </span></font></span></div>
              <div style="font-size: 20px; "><span
                  class="Apple-style-span" style="font-size: medium;"><font
                    class="Apple-style-span" size="6"><span
                      class="Apple-style-span" style="font-size: 20px;"><span
                        class="Apple-style-span" style="font-family:
                        Times; font-size: medium; ">
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; ">4.2.2.2  Authorized Responders

   TBD --------- UPDATE THIS SECTIOIN -------------

   The key that signs a certificate's status information need not be the
   same key that signed the certificate. It is necessary however to
   ensure that the entity signing this information is authorized to do
   so.  Therefore, a certificate's issuer MUST either sign the OCSP
   responses itself or it MUST explicitly designate this authority to
   another entity.</pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; ">
</pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; "><b>[MM] You are forgetting about local configuration.  See point (1) below.</b></pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; "><b>
</b></pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; ">   OCSP signing delegation SHALL be designated by the
   inclusion of id-kp-OCSPSigning in an extendedKeyUsage certificate
   extension included in the OCSP response signer's certificate.  This
   certificate MUST be issued directly by the CA that issued the
   certificate in question.

   The CA SHOULD use the same issuing key to issue a delegation
   certificate as was used to sign the certificate being checked for
   revocation.</pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; ">
</pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; "><b>[MM]  The following bit in italics could use some wordsmithing.</b></pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; ">
</pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; "><i>   Systems relying on OCSP responses MUST recognize a
   delegation certificate as being issued by the CA that issued the
   certificate in question if the delegation certificate and the
   certificate being checked for revocation was signed by the same key.</i></pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; ">
</pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; "><b>[MM]  What does it mean to "recognize"?  Perhaps "accept as valid"?</b></pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; "><b>      Also, "issued by" is ambiguous.  Follow the keys.</b></pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; "><b>      For example, above.  "The key that signs . . . "</b></pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; ">   Systems relying on OCSP responses MAY <b>recognize</b> a delegation
   certificate as being <b>issued by</b> the CA that issued the certificate in
   question if the delegation certificate and the certificate being
   checked for revocation <i><span class="Apple-style-span" style="font-style: normal;">was </span><b><span class="Apple-style-span" style="font-style: normal;">issued</span> </b><span class="Apple-style-span" style="font-style: normal;"><b>by</b> the same CA</span></i> using different
   issuing keys.
</pre>
                        <pre style="word-wrap: break-word; white-space: pre-wrap; font-size: 14px; ">   id-kp-OCSPSigning OBJECT IDENTIFIER ::= {id-kp 9}

   Systems or applications that rely on OCSP responses MUST be capable
   of detecting and enforcing use of the id-ad-ocspSigning value as
   described above. They MAY provide a means of <b>locally configuring</b> one
 


Stefan Santesson        Expires January 21, 2013               [Page 14]

INTERNET DRAFT                 PKIX OCSP                   July 20, 2012


   or more OCSP signing authorities, and specifying the set of CAs for
   which each signing authority is trusted. They MUST reject the
   response if the certificate required to validate the signature on the
   response fails to meet at least one of the following criteria:

   1. Matches a <b>local configuration</b> of OCSP signing authority for the
   certificate in question; or

   2. Is the certificate of the CA that issued the certificate in
   question; or

   3. Includes a value of id-ad-ocspSigning in an ExtendedKeyUsage
   extension and is <b>issued by</b> the CA that issued the certificate in
   question as stated above.

   Additional acceptance or rejection criteria may apply to either the
   response itself or to the certificate used to validate the signature
   on the response.
</pre>
                        <div><br>
                        </div>
                      </span></span></font></span></div>
            </div>
          </div>
        </blockquote>
      </span>
    </blockquote>
    <br>
  </body>
</html>

From ppatterson@carillon.ca  Fri Jul 27 08:44:33 2012
Return-Path: <ppatterson@carillon.ca>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6F5BA21F8773 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 08:44:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rYr8wdldiVb2 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 08:44:32 -0700 (PDT)
Received: from mail.carillon.ca (mail.carillon.ca [207.115.107.18]) by ietfa.amsl.com (Postfix) with ESMTP id B538B21F8771 for <pkix@ietf.org>; Fri, 27 Jul 2012 08:44:32 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.carillon.ca (Postfix) with ESMTP id CD4A0A81131; Fri, 27 Jul 2012 11:44:30 -0400 (EDT)
X-Virus-Scanned: Debian amavisd-new at rhea-new.carillon.ca
Received: from mail.carillon.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3oqpq9BK0xtl; Fri, 27 Jul 2012 11:44:29 -0400 (EDT)
Received: from [192.168.6.146] (modemcable198.19-37-24.static.videotron.ca [24.37.19.198]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.carillon.ca (Postfix) with ESMTPSA id 1B0ECA8053D; Fri, 27 Jul 2012 11:44:29 -0400 (EDT)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset=us-ascii
From: Patrick Patterson <ppatterson@carillon.ca>
In-Reply-To: <50116DA5.5050008@kent.ac.uk>
Date: Fri, 27 Jul 2012 11:44:25 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <5A5DFF62-F9CF-4F30-9ED8-92ACE29C58E4@carillon.ca>
References: <CAF4=xaGo+sFY=DvWQjugFTnNo6ZxjxOn2XazXxJ60BXKLhTxbg@mail.gmail.com> <50116DA5.5050008@kent.ac.uk>
To: David Chadwick <d.w.chadwick@kent.ac.uk>
X-Mailer: Apple Mail (2.1084)
Cc: pkix@ietf.org, pkix-chairs@tools.ietf.org
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 15:44:33 -0000

Hello David,

On 2012-07-26, at 12:17 PM, David Chadwick wrote:

> Dear Matt
>=20
> I dont think this ID is needed since the X.509 standard already =
defines the extension you are looking for. Its called SOA identifier =
(source of authority identifier), and the standard states
>=20
> "the certificate subject may ..... use the private-key corresponding =
to the certified public-key to issue certificates that
> assign privilege to holders."
>=20
> So this extra extension confers the administrative authority you are =
looking for. Whilst the X.509 text was written before SAML assertions =
were widely known about it does not specifically state "issue SAML =
assertions". But since SAML assertions as a type of certificate, XML =
encoded rather than ASN.1 encoded, then one can interpret the text as =
covering SAML assertions as well as X.509 certificates.
>=20

Ok - so how would this work in practice? I've not seen too many relying =
party applications that know what to do with this extension.  Also, is =
the SOA extension allowed within an X.509 Identity Certificate? All of =
the references I can find to it talk about its use in an Attribute =
Certificate. What would be the keyUsage parameters then?

The other thing is that a given IDP may NOT be the Source of Authority =
for an attribute asserted in the claim - it could be operated according =
to some Federation rules that may allow it to pull from the true Source =
of Authority (for instance, an Active Directory instance, the DUNS =
database, Department of Commerce CAGE code registry, etc.) and bundle =
those attributes into one or more SAML Assertions. So I think that even =
if SOA is valid in Identity Certificates (which it will have to be, =
since I know of very few PKIs that deal in ACs), this may not confer the =
right information from my reading of X.509.

The concept with the EKU value is that it simply indicates that the =
holder of the cert can be used to sign claims - but in a way that =
doesn't pollute or overload the certificatePolicy extension like some =
have been doing to indicate a certificate may be used to sign PIV cards, =
for instance :) As it states in the ID, Federation Realm designation is =
out of scope.

Cheers,

---
Patrick Patterson
Chief PKI Architect
Carillon Information Security Inc.
http://www.carillon.ca






From mrex@sap.com  Fri Jul 27 08:52:51 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6020E21F87D3 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 08:52:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.18
X-Spam-Level: 
X-Spam-Status: No, score=-10.18 tagged_above=-999 required=5 tests=[AWL=0.069,  BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 30A+4TunI1J9 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 08:52:49 -0700 (PDT)
Received: from smtpde01.sap-ag.de (smtpde01.sap-ag.de [155.56.68.170]) by ietfa.amsl.com (Postfix) with ESMTP id A95E221F87C4 for <pkix@ietf.org>; Fri, 27 Jul 2012 08:52:48 -0700 (PDT)
Received: from mail.sap.corp by smtpde01.sap-ag.de (26) with ESMTP id q6RFqfw3021303 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 27 Jul 2012 17:52:46 +0200 (MEST)
In-Reply-To: <OF854794A0.83F2154E-ONC1257A48.0053F82F-C1257A48.0054B99A@bull.net>
To: denis.pinkas@bull.net
Date: Fri, 27 Jul 2012 17:52:40 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120727155240.E79EA1A0FD@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 15:52:51 -0000

denis.pinkas@bull.net wrote:
>
>> 
>> "Let us please return to working from the -04 draft.  There seemed to be 
>> consensus that that draft was close to being done, ..."
> 
> I fully agree that we should continue working from the -04 draft, because 
> the structure of RFC 2560 needs to be changed.

I strongly disagree!

If you believe that you need a completely different document structure,
then you should write a completely independent OCSPv2 document that
deals with new future implementations of OCSPv2 and does not care
about the installed base.


If the idea is to make slight modifications to the existing description
of OCSP (rfc2560) that will be clearer to *NEW* implementations that
want to interop with the currently installed base of rfc2560, then
it is vitally important that the changes are small and obvious,
such as when using rfcdiff on rfc2560 and rfc2560bis.

I like Stefan's approach.


-Martin

From denis.pinkas@bull.net  Fri Jul 27 09:10:13 2012
Return-Path: <denis.pinkas@bull.net>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F0C3521F8732 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 09:10:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.248
X-Spam-Level: 
X-Spam-Status: No, score=-2.248 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_FR=0.35, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tNPUhOxi3nNU for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 09:10:12 -0700 (PDT)
Received: from odin2.bull.net (odin2.bull.net [129.184.85.11]) by ietfa.amsl.com (Postfix) with ESMTP id 1CB9721F86A1 for <pkix@ietf.org>; Fri, 27 Jul 2012 09:10:12 -0700 (PDT)
Received: from MSGC-003.bull.fr (MSGC-003.frcl.bull.fr [129.184.87.131]) by odin2.bull.net (Bull S.A.) with ESMTP id 2FA5A1207CB; Fri, 27 Jul 2012 18:10:11 +0200 (CEST)
In-Reply-To: <20120727155240.E79EA1A0FD@ld9781.wdf.sap.corp>
References: <OF854794A0.83F2154E-ONC1257A48.0053F82F-C1257A48.0054B99A@bull.net> <20120727155240.E79EA1A0FD@ld9781.wdf.sap.corp>
To: mrex@sap.com
MIME-Version: 1.0
X-KeepSent: CD001F4D:82DC7151-C1257A48:00583B6A; type=4; name=$KeepSent
X-Mailer: Lotus Notes Release 8.5.2 August 10, 2010
From: denis.pinkas@bull.net
Message-ID: <OFCD001F4D.82DC7151-ONC1257A48.00583B6A-C1257A48.0058D27E@bull.net>
Date: Fri, 27 Jul 2012 18:10:11 +0200
X-MIMETrack: Serialize by Router on MSGC-003/SRV/BULL(Release 8.5.2FP1|November 29, 2010) at 27/07/2012 18:10:10, Serialize complete at 27/07/2012 18:10:10
Content-Type: multipart/alternative; boundary="=_alternative 0058B314C1257A48_="
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 16:10:13 -0000

Message en plusieurs parties au format MIME
--=_alternative 0058B314C1257A48_=
Content-Type: text/plain; charset="US-ASCII"

Martin,

You are (voluntarily) misinterpreting my statement.

 I do care about the installed base, and this is why on several aspects 
draft-04 is far from what it should be.

The document needs to be clarified and corrected on several aspects, in 
particular those  dealing with OCSP responses validation.

See my slides from the last meeting in Paris. If you have problems with 
some text in these slides, then, please be very specific.

Denis



De :    mrex@sap.com (Martin Rex)
A :     denis.pinkas@bull.net
Cc :    "David A. Cooper" <david.cooper@nist.gov>, "pkix@ietf.org" 
<pkix@ietf.org>
Date :  27/07/2012 17:52
Objet : Re: [pkix] RFC2560bis update



denis.pinkas@bull.net wrote:
>
>> 
>> "Let us please return to working from the -04 draft.  There seemed to 
be 
>> consensus that that draft was close to being done, ..."
> 
> I fully agree that we should continue working from the -04 draft, 
because 
> the structure of RFC 2560 needs to be changed.

I strongly disagree!

If you believe that you need a completely different document structure,
then you should write a completely independent OCSPv2 document that
deals with new future implementations of OCSPv2 and does not care
about the installed base.


If the idea is to make slight modifications to the existing description
of OCSP (rfc2560) that will be clearer to *NEW* implementations that
want to interop with the currently installed base of rfc2560, then
it is vitally important that the changes are small and obvious,
such as when using rfcdiff on rfc2560 and rfc2560bis.

I like Stefan's approach.


-Martin


--=_alternative 0058B314C1257A48_=
Content-Type: text/html; charset="US-ASCII"

<font size=2 face="sans-serif">Martin,</font>
<br>
<br><font size=2 face="sans-serif">You are (voluntarily) misinterpreting
my statement.</font>
<br>
<br><font size=2 face="sans-serif">&nbsp;I do care about the installed
base, and this is why on several aspects draft-04 is far from what it should
be.</font>
<br>
<br><font size=2 face="sans-serif">The document needs to be clarified and
corrected on several aspects, in particular those &nbsp;dealing with OCSP
responses validation.</font>
<br>
<br><font size=2 face="sans-serif">See my slides from the last meeting
in Paris. If you have problems with some text in these slides, then, please
be very specific.</font>
<br>
<br><font size=2 face="sans-serif">Denis</font>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">De : &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">mrex@sap.com (Martin
Rex)</font>
<br><font size=1 color=#5f5f5f face="sans-serif">A : &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">denis.pinkas@bull.net</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Cc&nbsp;: &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size=1 face="sans-serif">&quot;David
A. Cooper&quot; &lt;david.cooper@nist.gov&gt;, &quot;pkix@ietf.org&quot;
&lt;pkix@ietf.org&gt;</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date : &nbsp; &nbsp; &nbsp;
&nbsp;</font><font size=1 face="sans-serif">27/07/2012 17:52</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Objet : &nbsp; &nbsp;
&nbsp; &nbsp;</font><font size=1 face="sans-serif">Re: [pkix] RFC2560bis
update</font>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size=2>denis.pinkas@bull.net wrote:<br>
&gt;<br>
&gt;&gt; <br>
&gt;&gt; &quot;Let us please return to working from the -04 draft. &nbsp;There
seemed to be <br>
&gt;&gt; consensus that that draft was close to being done, ...&quot;<br>
&gt; <br>
&gt; I fully agree that we should continue working from the -04 draft,
because <br>
&gt; the structure of RFC 2560 needs to be changed.<br>
<br>
I strongly disagree!<br>
<br>
If you believe that you need a completely different document structure,<br>
then you should write a completely independent OCSPv2 document that<br>
deals with new future implementations of OCSPv2 and does not care<br>
about the installed base.<br>
<br>
<br>
If the idea is to make slight modifications to the existing description<br>
of OCSP (rfc2560) that will be clearer to *NEW* implementations that<br>
want to interop with the currently installed base of rfc2560, then<br>
it is vitally important that the changes are small and obvious,<br>
such as when using rfcdiff on rfc2560 and rfc2560bis.<br>
<br>
I like Stefan's approach.<br>
<br>
<br>
-Martin<br>
</font></tt>
<br>
--=_alternative 0058B314C1257A48_=--

From david.cooper@nist.gov  Fri Jul 27 09:19:25 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 39A0621F876A for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 09:19:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.234
X-Spam-Level: 
X-Spam-Status: No, score=-6.234 tagged_above=-999 required=5 tests=[AWL=0.365,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5r7X+Cl0ezcj for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 09:19:23 -0700 (PDT)
Received: from wsget1.nist.gov (wsget1.nist.gov [129.6.13.150]) by ietfa.amsl.com (Postfix) with ESMTP id 3474721F8741 for <pkix@ietf.org>; Fri, 27 Jul 2012 09:19:23 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget1.nist.gov (129.6.13.150) with Microsoft SMTP Server (TLS) id 14.1.355.2; Fri, 27 Jul 2012 12:18:59 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Fri, 27 Jul 2012 12:18:38 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6RGJH9R006660; Fri, 27 Jul 2012 12:19:17 -0400
Message-ID: <5012BF85.3010105@nist.gov>
Date: Fri, 27 Jul 2012 12:19:17 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: "mrex@sap.com" <mrex@sap.com>
References: <20120727155240.E79EA1A0FD@ld9781.wdf.sap.corp>
In-Reply-To: <20120727155240.E79EA1A0FD@ld9781.wdf.sap.corp>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 16:19:25 -0000

Martin,

You seem to be conflating changing the document structure with changing 
the protocol.  The main driver in the development of the -04 draft of 
2560bis was to make the description of the protocol clearer without 
making any changes to the protocol.  Why would we need to change the 
version number of the protocol if we're not changing the protocol?  The 
document structure of RFC 5280 is very different from the document 
structure of X.509, but RFC 5280 still specifies v3 certificates and v2 
CRLs.  No one suggested that had to specify a different version number 
for the certificates and CRLs just because it uses a different document 
structure to describe them.

The changes between RFC 2560 and 2560bis, which are very minor, are 
detailed in the Introduction (just as Stefan has done in his proposed 
text), so a reader does not have to rely on rfcdiff to determine what 
has changed.

Interoperability is the reason that we need to rewrite this with a 
different document structure.  We have interoperability problems now 
with the current text as a result of people not fully understanding the 
text.  If we want interoperability, we need to fix that.

Dave

On 07/27/2012 11:52 AM, Martin Rex wrote:
> denis.pinkas@bull.net wrote:
>>> "Let us please return to working from the -04 draft.  There seemed to be
>>> consensus that that draft was close to being done, ..."
>> I fully agree that we should continue working from the -04 draft, because
>> the structure of RFC 2560 needs to be changed.
> I strongly disagree!
>
> If you believe that you need a completely different document structure,
> then you should write a completely independent OCSPv2 document that
> deals with new future implementations of OCSPv2 and does not care
> about the installed base.
>
>
> If the idea is to make slight modifications to the existing description
> of OCSP (rfc2560) that will be clearer to *NEW* implementations that
> want to interop with the currently installed base of rfc2560, then
> it is vitally important that the changes are small and obvious,
> such as when using rfcdiff on rfc2560 and rfc2560bis.
>
> I like Stefan's approach.
>
>
> -Martin
> .
>


From d.w.chadwick@kent.ac.uk  Fri Jul 27 09:43:53 2012
Return-Path: <d.w.chadwick@kent.ac.uk>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 429B121F875C for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 09:43:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.699
X-Spam-Level: 
X-Spam-Status: No, score=-5.699 tagged_above=-999 required=5 tests=[AWL=0.900,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FIxrZLfS3leN for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 09:43:52 -0700 (PDT)
Received: from mx1.kent.ac.uk (mx1.kent.ac.uk [129.12.21.39]) by ietfa.amsl.com (Postfix) with ESMTP id D316421F8755 for <pkix@ietf.org>; Fri, 27 Jul 2012 09:43:51 -0700 (PDT)
Received: from mx4.kent.ac.uk ([129.12.21.35]) by mx1.kent.ac.uk with esmtps (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from <d.w.chadwick@kent.ac.uk>) id 1Sundk-0004cg-P9; Fri, 27 Jul 2012 17:43:48 +0100
Received: from [146.90.6.12] (helo=[192.168.1.39]) by mx4.kent.ac.uk with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from <d.w.chadwick@kent.ac.uk>) id 1Sundk-0000Hf-7R; Fri, 27 Jul 2012 17:43:48 +0100
Message-ID: <5012C545.6070206@kent.ac.uk>
Date: Fri, 27 Jul 2012 17:43:49 +0100
From: David Chadwick <d.w.chadwick@kent.ac.uk>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: Patrick Patterson <ppatterson@carillon.ca>
References: <CAF4=xaGo+sFY=DvWQjugFTnNo6ZxjxOn2XazXxJ60BXKLhTxbg@mail.gmail.com> <50116DA5.5050008@kent.ac.uk> <5A5DFF62-F9CF-4F30-9ED8-92ACE29C58E4@carillon.ca>
In-Reply-To: <5A5DFF62-F9CF-4F30-9ED8-92ACE29C58E4@carillon.ca>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: pkix@ietf.org, pkix-chairs@tools.ietf.org
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 16:43:53 -0000

Hi Patrick

On 27/07/2012 16:44, Patrick Patterson wrote:
> Hello David,
>
> On 2012-07-26, at 12:17 PM, David Chadwick wrote:
>
>> Dear Matt
>>
>> I dont think this ID is needed since the X.509 standard already
>> defines the extension you are looking for. Its called SOA
>> identifier (source of authority identifier), and the standard
>> states
>>
>> "the certificate subject may ..... use the private-key
>> corresponding to the certified public-key to issue certificates
>> that assign privilege to holders."
>>
>> So this extra extension confers the administrative authority you
>> are looking for. Whilst the X.509 text was written before SAML
>> assertions were widely known about it does not specifically state
>> "issue SAML assertions". But since SAML assertions as a type of
>> certificate, XML encoded rather than ASN.1 encoded, then one can
>> interpret the text as covering SAML assertions as well as X.509
>> certificates.
>>
>
> Ok - so how would this work in practice?

Very similar to your proposed EKU. The concept is the same. A subject's 
PKC is given an extension to say that they are the attribute authority 
for issuing privilege attributes to other entities. (Note in the 
discussion below I am using AA rather than SOA since most people 
currently do not support delegation of authority but assume the AA is 
the SOA. But once you introduce dynamic delegation of authority you need 
to differentiate between the SOA and the subordinate AAs (as in trust 
anchor CAs and subordinate CAs)).

In terms of encoding, there is an OID for the SOAidentifier extension 
(whose content is null), whereas with EKU there is an OID for the new 
key usage. Once you have detected this OID in your PKC, thereafter the 
code you need for validating certs/assertions/claims is the same.

  I've not seen too many
> relying party applications that know what to do with this extension.

You do the same as you propose with your extension.
If the certificate/assertion/claim (these are all synonymous 
conceptually) is signed by an authority who has a PKC with the 
extension, then the signer is authorised by the CA to issue 
certs/assertions/claims. If no such extension exists in the signer's 
PKC, then it is up to the relying party to determine who the trusted 
attribute authorities are. What this extension effectively does is 
remove the set of trusted AAs from the RP's configured trust store, and 
replaces it with a trusted CA, and the trusted CA then dynamically says 
who the trusted AAs are (by inserting this extension in their PKCs).

Of course on its own this one extension is not enough, since the RP 
needs to know the following (at least)

i) who are the trusted AAs.
ii) which attributes is each AA trusted to issue
iii) who can the AA issue these attributes to.

so for example, you might trust Bank of America AA to issue visa 
attributes to anyone, the university of kent to issue student attributes 
to anyone with a kent email address etc.


> Also, is the SOA extension allowed within an X.509 Identity
> Certificate?

yes its only allowed in PKCs and not in ACs.
Remember that the PMI infrastructure is conceptually separate from the 
PKI infrastructure.

All of the references I can find to it talk about its
> use in an Attribute Certificate.

No, its not allowed in ACs. I will copy the standard text for you at the 
end of this message in case you dont have access to it.

  What would be the keyUsage
> parameters then?

Key usage is a PKI concept not a PMI concept.
SOAIdentifier is the bridge between PKI and PMI. It allows the PKI to 
transitively pass trust to the root of the PMI.


>
> The other thing is that a given IDP may NOT be the Source of
> Authority for an attribute asserted in the claim - it could be
> operated according to some Federation rules that may allow it to pull
> from the true Source of Authority (for instance, an Active Directory
> instance, the DUNS database, Department of Commerce CAGE code
> registry, etc.) and bundle those attributes into one or more SAML
> Assertions.


this is confused thinking. If the SAML assertion has no history of its 
origin, but only contains attributes signed by the SAML authority, then 
by definition that SAML authority is the root of trust (otherwise the 
assertion is not trusted). The only way you can have an intermediate 
authority issue an attribute assertion for which it is not 
authoritative, is if the SOA has delegated authority to it. In which 
case the RP must have a delegation certificate (or set of trust rules) 
which state that the intermediate authority is trusted to issue the 
following attributes on behalf of the SOA.


So I think that even if SOA is valid in Identity
> Certificates (which it will have to be, since I know of very few PKIs
> that deal in ACs), this may not confer the right information from my
> reading of X.509.

you can read the X.509 extension text below

>
> The concept with the EKU value is that it simply indicates that the
> holder of the cert can be used to sign claims

which is the same concept as SOAidentifier.

- but in a way that
> doesn't pollute or overload the certificatePolicy extension

this is irrelevant isnt it, since certificatePolicy is to do with PKI 
validation, but the new extension is to do with PMI validation.

  like some
> have been doing to indicate a certificate may be used to sign PIV
> cards, for instance :) As it states in the ID, Federation Realm
> designation is out of scope.

regards

David

15.3.2      SOA extension fields
The following extension fields are defined:
a)     SOA identifier;
b)    Attribute descriptor.
15.3.2.1   SOA identifier extension
15.3.2.1.1  SOA identifier extension definition
The SOA identifier extension indicates that the certificate subject may 
act as an SOA for purposes of privilege
management. As such, the certificate subject may define attributes that 
assign privilege, issue attribute descriptor
certificates for those attributes and use the private-key corresponding 
to the certified public-key to issue certificates that
assign privilege to holders. Those subsequent certificates may be 
attribute certificates or public-key certificates with a
subjectDirectoryAttributes extension containing the privileges.
In some environments, this extension is not required and other 
mechanisms may be used to determine the entities that
may act as SOAs. This extension is required only in environments where 
tight centralized control by a CA is required to
manage the entities that act as SOAs.

This field is defined as follows:
sOAIdentifier EXTENSION  ::=  {
   SYNTAX            NULL
   IDENTIFIED BY         id-ce-sOAIdentifier }
If this extension is not present in a certificate, the subject/holder 
ability to act as an SOA shall be determined by other
means.
This field may only be present in a public-key certificate issued to an 
SOA. It shall not be included in attribute
certificates or public-key certificates issued to other AAs or to 
end-entity privilege holders.
Cross-certification applies only to public-key certificates and not to 
attribute certificates. Therefore, a cross-certificate
issued to the CA that is the issuer of a certificate containing the SOA 
identifier extension does not provide transitive trust
to the SOA identified in this extension.
This extension is always non-critical

>
> Cheers,
>
> --- Patrick Patterson Chief PKI Architect Carillon Information
> Security Inc. http://www.carillon.ca
>
>
>
>
>

From mrex@sap.com  Fri Jul 27 10:02:47 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2DEE121F8766 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 10:02:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.183
X-Spam-Level: 
X-Spam-Status: No, score=-10.183 tagged_above=-999 required=5 tests=[AWL=0.066, BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oVzFk7+4A+xB for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 10:02:46 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id 663A621F8767 for <pkix@ietf.org>; Fri, 27 Jul 2012 10:02:46 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id q6RH2hIB000132 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 27 Jul 2012 19:02:44 +0200 (MEST)
In-Reply-To: <5012BF85.3010105@nist.gov>
To: "David A. Cooper" <david.cooper@nist.gov>
Date: Fri, 27 Jul 2012 19:02:43 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120727170243.3A2291A0FD@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 17:02:47 -0000

David A. Cooper wrote:
> Martin,
> 
> You seem to be conflating changing the document structure with changing 
> the protocol.  The main driver in the development of the -04 draft of 
> 2560bis was to make the description of the protocol clearer without 
> making any changes to the protocol.  Why would we need to change the 
> version number of the protocol if we're not changing the protocol?  The 
> document structure of RFC 5280 is very different from the document 
> structure of X.509, but RFC 5280 still specifies v3 certificates and v2 
> CRLs.  No one suggested that had to specify a different version number 
> for the certificates and CRLs just because it uses a different document 
> structure to describe them.
> 
> The changes between RFC 2560 and 2560bis, which are very minor, are 
> detailed in the Introduction (just as Stefan has done in his proposed 
> text), so a reader does not have to rely on rfcdiff to determine what 
> has changed.
> 
> Interoperability is the reason that we need to rewrite this with a 
> different document structure.  We have interoperability problems now 
> with the current text as a result of people not fully understanding the 
> text.  If we want interoperability, we need to fix that.

You're missing the point.

The protocol is *NOT* what some folks may have had on their minds when
rfc2560 was developed.  Instead, the protocol is defined by what the
*current* document says (plus the variation in reading the existing
text has created in readers/ implementers).

If you want to change that text, then you DO, in fact, change the protocol.


A clarification of the existing protocol means that you leave the existing
text and structure as is (except for real errata), and add explanations,
clarification and recommendations how to best interpret and implement
the existing protocol, in order to improve interop with and within the
installed base.

Really, the smaller the changes to an existing implementation are, and
the clearer the advantage of such a small change is conveyed, the more
likely such a change will be made available as a software patch to
the installed base.


-Martin

From paul.hoffman@vpnc.org  Fri Jul 27 10:30:19 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8697D21F867F for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 10:30:19 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.581
X-Spam-Level: 
X-Spam-Status: No, score=-102.581 tagged_above=-999 required=5 tests=[AWL=0.018, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IR2qBhhmowsn for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 10:30:19 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id 0D2E821F866D for <pkix@ietf.org>; Fri, 27 Jul 2012 10:30:18 -0700 (PDT)
Received: from [10.20.30.100] (50-1-50-97.dsl.dynamic.fusionbroadband.com [50.1.50.97]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6RGd4bu071996 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO) for <pkix@ietf.org>; Fri, 27 Jul 2012 09:39:05 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1278)
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <20120727170243.3A2291A0FD@ld9781.wdf.sap.corp>
Date: Fri, 27 Jul 2012 10:30:17 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <F37D62E0-F37D-4548-A244-60EFDD24C23A@vpnc.org>
References: <20120727170243.3A2291A0FD@ld9781.wdf.sap.corp>
To: IETF PKIX <pkix@ietf.org>
X-Mailer: Apple Mail (2.1278)
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 17:30:19 -0000

For the record, I disagree with Martin on this. If the protocol changes =
are all fairly legitimately clarifications, then the protocol number =
should not be changed. You can (and, unfortunately probably will) argue =
about whether or not a particular clarification is a change, but that's =
mostly irrelevant in the real world of deployments.

The IPsec WG dealt with these issue in the IKEv2bis work and, in the =
end, all implementations just did the right thing.

--Paul Hoffman=

From david.cooper@nist.gov  Fri Jul 27 10:35:54 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E631E21F8701 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 10:35:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.268
X-Spam-Level: 
X-Spam-Status: No, score=-6.268 tagged_above=-999 required=5 tests=[AWL=0.331,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id erxWZdhRmy17 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 10:35:54 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id DCA9511E8093 for <pkix@ietf.org>; Fri, 27 Jul 2012 10:35:53 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Fri, 27 Jul 2012 13:35:42 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Fri, 27 Jul 2012 13:35:05 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6RHZgVG010484; Fri, 27 Jul 2012 13:35:43 -0400
Message-ID: <5012D16E.6000109@nist.gov>
Date: Fri, 27 Jul 2012 13:35:42 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: "mrex@sap.com" <mrex@sap.com>
References: <20120727170243.3A2291A0FD@ld9781.wdf.sap.corp>
In-Reply-To: <20120727170243.3A2291A0FD@ld9781.wdf.sap.corp>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 17:35:55 -0000

Martin,

You can disagree all you want, but it is possible to change the way that 
a protocol is described without changing the protocol itself.  So your 
assertion that "If you want to change that text, then you DO, in fact, 
change the protocol" is simply wrong. Otherwise, you're going to have to 
explain why PKIX was fundamentally wrong to describe X.509 certificates 
in RFC 5280 without changing the version number for the certificates.

I also notice that you haven't pointed to a single instance in the -04 
draft of 2560bis where the reorganization of the document has resulted 
in a change in the protocol, other than those changes explicitly 
highlighted in the Introduction.  You insist that one cannot change the 
text without changing the protocol.  So, provide some evidence.

In addition, if you are so against changing the text because changing 
the text would necessarily change the protocol, then why do you say:

> Really, the smaller the changes to an existing implementation are, and
> the clearer the advantage of such a small change is conveyed, the more
> likely such a change will be made available as a software patch to
> the installed base.

This implies that you are the one who wants to make (small) changes to 
the protocol.

On 07/27/2012 01:02 PM, Martin Rex wrote:
> David A. Cooper wrote:
>> Martin,
>>
>> You seem to be conflating changing the document structure with changing
>> the protocol.  The main driver in the development of the -04 draft of
>> 2560bis was to make the description of the protocol clearer without
>> making any changes to the protocol.  Why would we need to change the
>> version number of the protocol if we're not changing the protocol?  The
>> document structure of RFC 5280 is very different from the document
>> structure of X.509, but RFC 5280 still specifies v3 certificates and v2
>> CRLs.  No one suggested that had to specify a different version number
>> for the certificates and CRLs just because it uses a different document
>> structure to describe them.
>>
>> The changes between RFC 2560 and 2560bis, which are very minor, are
>> detailed in the Introduction (just as Stefan has done in his proposed
>> text), so a reader does not have to rely on rfcdiff to determine what
>> has changed.
>>
>> Interoperability is the reason that we need to rewrite this with a
>> different document structure.  We have interoperability problems now
>> with the current text as a result of people not fully understanding the
>> text.  If we want interoperability, we need to fix that.
> You're missing the point.
>
> The protocol is *NOT* what some folks may have had on their minds when
> rfc2560 was developed.  Instead, the protocol is defined by what the
> *current* document says (plus the variation in reading the existing
> text has created in readers/ implementers).
>
> If you want to change that text, then you DO, in fact, change the protocol.
>
>
> A clarification of the existing protocol means that you leave the existing
> text and structure as is (except for real errata), and add explanations,
> clarification and recommendations how to best interpret and implement
> the existing protocol, in order to improve interop with and within the
> installed base.
>
> Really, the smaller the changes to an existing implementation are, and
> the clearer the advantage of such a small change is conveyed, the more
> likely such a change will be made available as a software patch to
> the installed base.
>
>
> -Martin

From turners@ieca.com  Fri Jul 27 11:15:41 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD2A821F8543 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 11:15:41 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -100.965
X-Spam-Level: 
X-Spam-Status: No, score=-100.965 tagged_above=-999 required=5 tests=[AWL=1.300, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id my0pq8CF-v+T for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 11:15:41 -0700 (PDT)
Received: from gateway12.websitewelcome.com (gateway12.websitewelcome.com [67.18.94.14]) by ietfa.amsl.com (Postfix) with ESMTP id 1A75621F84D6 for <pkix@ietf.org>; Fri, 27 Jul 2012 11:15:36 -0700 (PDT)
Received: by gateway12.websitewelcome.com (Postfix, from userid 5007) id 73BC276280639; Fri, 27 Jul 2012 13:15:36 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway12.websitewelcome.com (Postfix) with ESMTP id 655B4762805F9 for <pkix@ietf.org>; Fri, 27 Jul 2012 13:15:36 -0500 (CDT)
Received: from [209.20.186.192] (port=50915 helo=d142-058-229-156.wireless.sfu.ca) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1Sup4Y-0005B1-BM for pkix@ietf.org; Fri, 27 Jul 2012 13:15:35 -0500
Message-ID: <5012DAC3.4010304@ieca.com>
Date: Fri, 27 Jul 2012 11:15:31 -0700
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <20120710215409.15427.69818.idtracker@ietfa.amsl.com> <016a01cd5ee9$6aff0060$40fd0120$@akayla.com>
In-Reply-To: <016a01cd5ee9$6aff0060$40fd0120$@akayla.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (d142-058-229-156.wireless.sfu.ca) [209.20.186.192]:50915
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 6
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Subject: Re: [pkix] I-D Action: draft-ietf-pkix-est-02.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 18:15:41 -0000

I reviewed this draft.  I sent my editorial nits to the editors/chairs 
directly, but I've got some comments/questions too that I'd like to talk 
about at the session (or via email).  Not wanting to surprise you:

- In s2.1 - If it's just about getting a TA to verify the EST server's 
cert that's a whole different set of text to just getting a self-signed 
EST server cert.  In the later case don't you just get it from the TLS 
exchange?

- In s2.3/2.3.1 - Why would use HTTP Basic/Digest authentication if 
you're rekeying/renewing?  Is this only going to be the case where 
you're using a cert but it's expired?  If so then we need to move that 
to 3rd para.

- In s2.3.1 - Need to add some text to allow for name changes in 
certificate requests.  See 6402 attribute.  I found it much later in the 
draft, but it'd be worth adding some text earlier.

- In s2.3.2 - Requiring a client cert before it gets ke cert is okay by 
me, but is this one of those times where we want to allow the ke key to 
be used once to do the request?  Maybe it's loaded by a manufacturer and 
that's all it's got?

- HTTP Basic or Digest Authentication - is it just basic or basic or 
does it also allow digest?  There's two in 2617.  I think it's both, but 
the draft waffles sometimes.

- In s3.3 - seems like the text about the HTTP persistent connections 
ought to be in the earlier section which is about HTTP layer design and 
not in the HTTP layer design section.

- In s3.3.1.1 - method 1 discusses a client having TAs for the server 
and method 2 also discusses a client having TAs for the server.  Is the 
difference that method 1 is for when the EST server is fronting for a CA 
and method 2 is about the EST server fronting for an RA?  If that's the 
case, then I'd make that much clearer.

- In s3.3.1.1 - Please explain the rationale for requiring that 
subsequent connections using method 3 initially should result in using 
method 2 in subsequent connections?  If I accept a cert in the initial 
connection that doesn't have the ra EKU set what happens?

- In s4.1 - why MUST the EST server's cert be an EE cert?

- in s4.1 - The methods kind of read like steps: if then else.  I think 
it might be better either make them methods or call them steps.

- in s4.1 - Can you explain the RA authorization policy OID?  Is it just 
one OID or is a new extension?

- in s4.3 - I think it says the client can continue even if the 
authentication fails, but that contradicts the earlier section that says 
the client MUST reject the connection if authentication fails.

- in s4.3.1 - I liked the way section 4.4.2 addressed both positive and 
negative responses.  Consider rewording s4.3.1 to be more like 4.4.2.

- in s4.6 - I know my co-AD will cream you on the NULL cipher suite. 
It's true they are inately "secure" but that's only for authentication 
and not integrity.  There's no privacy/confidentially protection.

- in full CMC - where's the restriction for method 3 come from?

- server key generation - I'm still thinking about this section.

- in s5: If there's a certificate extension to be registered we'll get 
the OID from Russ, as he controls the PKIX Arc.

spt

On 7/10/12 3:14 PM, Peter Yee wrote:
> This is a substantially revised draft from the previous one we posted.  A
> lot
> of reorganization of the text has been done for clarity.  We've also added
> a fair amount of new text which we hope makes the intent of the protocol
> clearer.  In addition to that, we've also incorporated the CSR attributes
> draft from Dan Harkins and Sean Turner, with Dan joining us as an editor
> of the document.  We've dropped the crypto algorithms section for now,
> although we're considering a secondary draft which will address TLS
> cipher suites for use with EST.  Support for server-generated keys is now
> available for cases where the client does not want to or cannot generate
> its own keys.  New tables provide a handy means to collate pointers to
> the various parallel sections of the document.
>
> Your input on the document would be most welcome.  This draft
> represents our response to the large amount of input we received from
> interested parties.
>
> Max, Dan, and I look forward to presenting our update in Vancouver and
> seeing you there.
>
> Thank you.
>
> 		-Peter
>
> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of
> internet-drafts@ietf.org
> Sent: Tuesday, July 10, 2012 2:54 PM
> To: i-d-announce@ietf.org
> Cc: pkix@ietf.org
> Subject: [pkix] I-D Action: draft-ietf-pkix-est-02.txt
>
>
> A New Internet-Draft is available from the on-line Internet-Drafts
> directories.
>   This draft is a work item of the Public-Key Infrastructure (X.509) Working
> Group of the IETF.
>
> 	Title           : Enrollment over Secure Transport
> 	Author(s)       : Max Pritikin
>                            Peter E. Yee
>                            Dan Harkins
> 	Filename        : draft-ietf-pkix-est-02.txt
> 	Pages           : 46
> 	Date            : 2012-07-10
>
> Abstract:
>     This document profiles certificate enrollment for clients using
>     Certificate Management over CMS (CMC) messages over a secure
>     transport.  This profile, called Enrollment over Secure Transport
>     (EST), describes a simple yet functional certificate management
>     protocol targeting simple Public Key Infrastructure clients that need
>     to acquire client certificate(s) and associated Certification
>     Authority (CA) certificate(s).
>
>
> The IETF datatracker status page for this draft is:
> https://datatracker.ietf.org/doc/draft-ietf-pkix-est
>
> There's also a htmlized version available at:
> http://tools.ietf.org/html/draft-ietf-pkix-est-02
>
> A diff from previous version is available at:
> http://tools.ietf.org/rfcdiff?url2=draft-ietf-pkix-est-02
>
>
> Internet-Drafts are also available by anonymous FTP at:
> ftp://ftp.ietf.org/internet-drafts/
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>

From mrex@sap.com  Fri Jul 27 11:19:38 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 391D721F855D for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 11:19:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.186
X-Spam-Level: 
X-Spam-Status: No, score=-10.186 tagged_above=-999 required=5 tests=[AWL=0.063, BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qfZ7syrlAgTn for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 11:19:37 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id 5E65521F84D6 for <pkix@ietf.org>; Fri, 27 Jul 2012 11:19:37 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id q6RIJUpo005754 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Fri, 27 Jul 2012 20:19:35 +0200 (MEST)
In-Reply-To: <5012D16E.6000109@nist.gov>
To: "David A. Cooper" <david.cooper@nist.gov>
Date: Fri, 27 Jul 2012 20:19:30 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120727181930.24B231A0FD@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 18:19:38 -0000

David A. Cooper wrote:
> 
>    it is possible to change the way that a protocol is described
> without changing the protocol itself.

In theory this is possible, in practice this has NEVER works.


>
> So your assertion that "If you want to change that text, then you DO,
> in fact, change the protocol" is simply wrong.

Just the contrary.  If you did not want change the protocol (and the
interoperability-impaired implemenations based on the existing spec),
then we should end the discussion and kill the rfc2560bis document
here and now.


>
> Otherwise, you're going to have to 
> explain why PKIX was fundamentally wrong to describe X.509 certificates 
> in RFC 5280 without changing the version number for the certificates.

This is something that the authors of X.509 and PKIX would have to explain!

And both of them did:

ITU-T T-REC X.509 11-2008  3rd page:

  Summary

  ITU-T Recommendation X.509 | ISO/IEC 9594-8 defines a framework for
  public-key certificates and attribute certificates. These frameworks
  may be used by other standards bodies to profile their application
  to Public Key Infrastructures (PKI) and Privilege Management
  Infrastructures (PMI).  [...]

RFC5280 PKIX, page 1:

   Abstract

   This memo profiles the X.509 v3 certificate and X.509 v2 certificate
   revocation list (CRL) for use in the Internet.


> 
> In addition, if you are so against changing the text because changing 
> the text would necessarily change the protocol, then why do you say:
> 
> > Really, the smaller the changes to an existing implementation are, and
> > the clearer the advantage of such a small change is conveyed, the more
> > likely such a change will be made available as a software patch to
> > the installed base.
> 
> This implies that you are the one who wants to make (small) changes to 
> the protocol.


I'm sorry if my english is so terrible.

I am violently opposing to changing the protocol (i.e. the spec).

I am, however, all for giving very precise hints to implementors what
to consider during new implementations or what to change in the behaviour
of existing implementations in order to improve interoperability with
other implementations.

One of the big problems of the feature-ladden protocols around X.509/PKIX
is that there exist independent implementations based on perfectly valid
individual subsets of protocol options that turn out to be non-interoperable
to each other.


There are other that believe that by changing requirement levels for
some protocol options or by killing some protocol options that are
being used in a fashion not intended by the original protocol designers,
is the better approach, because they want to complain to vendors about
non-compliance to a *NEW* protocol spec.

I do not like the latter approach at all, I do not believe that it
works in any reasonable fashion, but most importantly, it has the
pre-requisite of CHANGING the protocol.  Those pushing the latter approach
should at least be honest about that.


-Martin

From aallison@nab.org  Fri Jul 27 11:53:32 2012
Return-Path: <aallison@nab.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 68A9321F86C5 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 11:53:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.796
X-Spam-Level: 
X-Spam-Status: No, score=-5.796 tagged_above=-999 required=5 tests=[AWL=0.804,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RvjPYJhcXwKo for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 11:53:31 -0700 (PDT)
Received: from p01c11o145.mxlogic.net (p01c11o145.mxlogic.net [208.65.144.68]) by ietfa.amsl.com (Postfix) with ESMTP id 6592521F86C4 for <pkix@ietf.org>; Fri, 27 Jul 2012 11:53:31 -0700 (PDT)
Received: from unknown [208.97.234.91] (EHLO NABSREX027324.NAB.ORG) by p01c11o145.mxlogic.net(mxl_mta-6.14.0-1) with ESMTP id aa3e2105.0.1685.00-347.4133.p01c11o145.mxlogic.net (envelope-from <aallison@nab.org>);  Fri, 27 Jul 2012 12:53:31 -0600 (MDT)
X-MXL-Hash: 5012e3ab790df88f-f33649a9d1172a0717785af73526d126d829827e
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Fri, 27 Jul 2012 14:53:30 -0400
Message-ID: <71C9EC0544D1F64D8B7D91EDCC6220200C354463@NABSREX027324.NAB.ORG>
In-Reply-To: <20120727181930.24B231A0FD@ld9781.wdf.sap.corp>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [pkix] RFC2560bis update
Thread-Index: Ac1sJGNsBhpTTrMLRkuTKm43Ix2t/gAAthhA
References: <5012D16E.6000109@nist.gov> <20120727181930.24B231A0FD@ld9781.wdf.sap.corp>
From: "Art Allison" <AAllison@nab.org>
To: <pkix@ietf.org>
X-Spam: [F=0.2000000000; CM=0.500; S=0.200(2010122901)]
X-MAIL-FROM: <aallison@nab.org>
X-SOURCE-IP: [208.97.234.91]
X-AnalysisOut: [v=2.0 cv=C/deP3z+ c=1 sm=0 a=tFGTPFZixTZ3yCXJchW01Q==:17 a]
X-AnalysisOut: [=BvPfnLs-15kA:10 a=BLceEmwcHowA:10 a=8nJEP1OIZ-IA:10 a=g0F]
X-AnalysisOut: [pLpFZAAAA:8 a=48vgC7mUAAAA:8 a=qQrV3OUNlkhmXDITdDYA:9 a=wP]
X-AnalysisOut: [NLvfGTeEIA:10 a=8SgyfJxrfqYA:10 a=-9UqKSle32gA:10 a=Qd0007]
X-AnalysisOut: [q6B0YA:10 a=lZB815dzVvQA:10 a=kPu8jHEER4u-JgJg:21 a=y-wiDG]
X-AnalysisOut: [CbQBTlNBqC:21]
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 18:53:32 -0000

I have not seen another substantive change listed that I happened to =
spot.
=20
The use of the IA5String was optional, but is prohibited in -06 (and at =
least back to -04)..
This is clearly not backwards compatible for any implementation that =
choose to use the IA5String.

In general, adding a substantive feature might be reasonable to obtain =
more capability, but directly obsoleting previous hard-coded =
implementations in shipped products would force those using the old =
approach to ignore the new RFC.

Art

Art Allison=20
Senior Director Advanced Engineering, Technology=20
National Association of Broadcasters
1771 N Street NW
Washington, DC 20036
Phone=A0 202 429 5418
Fax=A0 202 775 4981=20
www.nab.org=20
Advocacy =A0Education=A0 Innovation=20

-----Original Message-----
From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of =
Martin Rex
Sent: Friday, July 27, 2012 2:20 PM
To: David A. Cooper
Cc: pkix@ietf.org
Subject: Re: [pkix] RFC2560bis update

David A. Cooper wrote:
>=20
>    it is possible to change the way that a protocol is described=20
> without changing the protocol itself.

In theory this is possible, in practice this has NEVER works.


>
> So your assertion that "If you want to change that text, then you DO,=20
> in fact, change the protocol" is simply wrong.

Just the contrary.  If you did not want change the protocol (and the =
interoperability-impaired implemenations based on the existing spec), =
then we should end the discussion and kill the rfc2560bis document here =
and now.


>
> Otherwise, you're going to have to
> explain why PKIX was fundamentally wrong to describe X.509=20
> certificates in RFC 5280 without changing the version number for the =
certificates.

This is something that the authors of X.509 and PKIX would have to =
explain!

And both of them did:

ITU-T T-REC X.509 11-2008  3rd page:

  Summary

  ITU-T Recommendation X.509 | ISO/IEC 9594-8 defines a framework for
  public-key certificates and attribute certificates. These frameworks
  may be used by other standards bodies to profile their application
  to Public Key Infrastructures (PKI) and Privilege Management
  Infrastructures (PMI).  [...]

RFC5280 PKIX, page 1:

   Abstract

   This memo profiles the X.509 v3 certificate and X.509 v2 certificate
   revocation list (CRL) for use in the Internet.


>=20
> In addition, if you are so against changing the text because changing=20
> the text would necessarily change the protocol, then why do you say:
>=20
> > Really, the smaller the changes to an existing implementation are,=20
> > and the clearer the advantage of such a small change is conveyed,=20
> > the more likely such a change will be made available as a software=20
> > patch to the installed base.
>=20
> This implies that you are the one who wants to make (small) changes to =

> the protocol.


I'm sorry if my english is so terrible.

I am violently opposing to changing the protocol (i.e. the spec).

I am, however, all for giving very precise hints to implementors what to =
consider during new implementations or what to change in the behaviour =
of existing implementations in order to improve interoperability with =
other implementations.

One of the big problems of the feature-ladden protocols around =
X.509/PKIX is that there exist independent implementations based on =
perfectly valid individual subsets of protocol options that turn out to =
be non-interoperable to each other.


There are other that believe that by changing requirement levels for =
some protocol options or by killing some protocol options that are being =
used in a fashion not intended by the original protocol designers, is =
the better approach, because they want to complain to vendors about =
non-compliance to a *NEW* protocol spec.

I do not like the latter approach at all, I do not believe that it works =
in any reasonable fashion, but most importantly, it has the =
pre-requisite of CHANGING the protocol.  Those pushing the latter =
approach should at least be honest about that.


-Martin
_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From david.cooper@nist.gov  Fri Jul 27 11:59:24 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5794D21F86D6 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 11:59:24 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.295
X-Spam-Level: 
X-Spam-Status: No, score=-6.295 tagged_above=-999 required=5 tests=[AWL=0.304,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rMp2rn--vM8i for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 11:59:23 -0700 (PDT)
Received: from wsget1.nist.gov (wsget1.nist.gov [129.6.13.150]) by ietfa.amsl.com (Postfix) with ESMTP id 2E4CB21F86D5 for <pkix@ietf.org>; Fri, 27 Jul 2012 11:59:22 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget1.nist.gov (129.6.13.150) with Microsoft SMTP Server (TLS) id 14.1.355.2; Fri, 27 Jul 2012 14:59:02 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Fri, 27 Jul 2012 14:58:41 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6RIxKc0014827; Fri, 27 Jul 2012 14:59:21 -0400
Message-ID: <5012E508.8010005@nist.gov>
Date: Fri, 27 Jul 2012 14:59:20 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: Art Allison <AAllison@nab.org>
References: <5012D16E.6000109@nist.gov> <20120727181930.24B231A0FD@ld9781.wdf.sap.corp> <71C9EC0544D1F64D8B7D91EDCC6220200C354463@NABSREX027324.NAB.ORG>
In-Reply-To: <71C9EC0544D1F64D8B7D91EDCC6220200C354463@NABSREX027324.NAB.ORG>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 18:59:24 -0000

Art,

I believe that you are referring to the rules for encoding the 
explicitText string in draft-ietf-pkix-rfc5280-clarifications, not to 
2560bis, which is the topic of this discussion.

Dave

On 07/27/2012 02:53 PM, Art Allison wrote:
> I have not seen another substantive change listed that I happened to spot.
>   
> The use of the IA5String was optional, but is prohibited in -06 (and at least back to -04)..
> This is clearly not backwards compatible for any implementation that choose to use the IA5String.
>
> In general, adding a substantive feature might be reasonable to obtain more capability, but directly obsoleting previous hard-coded implementations in shipped products would force those using the old approach to ignore the new RFC.
>
> Art
>
> Art Allison
> Senior Director Advanced Engineering, Technology
> National Association of Broadcasters
> 1771 N Street NW
> Washington, DC 20036
> Phone  202 429 5418
> Fax  202 775 4981
> www.nab.org
> Advocacy  Education  Innovation
>
> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of Martin Rex
> Sent: Friday, July 27, 2012 2:20 PM
> To: David A. Cooper
> Cc: pkix@ietf.org
> Subject: Re: [pkix] RFC2560bis update
>
> David A. Cooper wrote:
>>     it is possible to change the way that a protocol is described
>> without changing the protocol itself.
> In theory this is possible, in practice this has NEVER works.
>
>
>> So your assertion that "If you want to change that text, then you DO,
>> in fact, change the protocol" is simply wrong.
> Just the contrary.  If you did not want change the protocol (and the interoperability-impaired implemenations based on the existing spec), then we should end the discussion and kill the rfc2560bis document here and now.
>
>
>> Otherwise, you're going to have to
>> explain why PKIX was fundamentally wrong to describe X.509
>> certificates in RFC 5280 without changing the version number for the certificates.
> This is something that the authors of X.509 and PKIX would have to explain!
>
> And both of them did:
>
> ITU-T T-REC X.509 11-2008  3rd page:
>
>    Summary
>
>    ITU-T Recommendation X.509 | ISO/IEC 9594-8 defines a framework for
>    public-key certificates and attribute certificates. These frameworks
>    may be used by other standards bodies to profile their application
>    to Public Key Infrastructures (PKI) and Privilege Management
>    Infrastructures (PMI).  [...]
>
> RFC5280 PKIX, page 1:
>
>     Abstract
>
>     This memo profiles the X.509 v3 certificate and X.509 v2 certificate
>     revocation list (CRL) for use in the Internet.
>
>
>> In addition, if you are so against changing the text because changing
>> the text would necessarily change the protocol, then why do you say:
>>
>>> Really, the smaller the changes to an existing implementation are,
>>> and the clearer the advantage of such a small change is conveyed,
>>> the more likely such a change will be made available as a software
>>> patch to the installed base.
>> This implies that you are the one who wants to make (small) changes to
>> the protocol.
>
> I'm sorry if my english is so terrible.
>
> I am violently opposing to changing the protocol (i.e. the spec).
>
> I am, however, all for giving very precise hints to implementors what to consider during new implementations or what to change in the behaviour of existing implementations in order to improve interoperability with other implementations.
>
> One of the big problems of the feature-ladden protocols around X.509/PKIX is that there exist independent implementations based on perfectly valid individual subsets of protocol options that turn out to be non-interoperable to each other.
>
>
> There are other that believe that by changing requirement levels for some protocol options or by killing some protocol options that are being used in a fashion not intended by the original protocol designers, is the better approach, because they want to complain to vendors about non-compliance to a *NEW* protocol spec.
>
> I do not like the latter approach at all, I do not believe that it works in any reasonable fashion, but most importantly, it has the pre-requisite of CHANGING the protocol.  Those pushing the latter approach should at least be honest about that.
>
>
> -Martin
>


From aallison@nab.org  Fri Jul 27 12:02:35 2012
Return-Path: <aallison@nab.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEB1621F86E8 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 12:02:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.91
X-Spam-Level: 
X-Spam-Status: No, score=-5.91 tagged_above=-999 required=5 tests=[AWL=0.689,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cnGyhjNEbrd7 for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 12:02:34 -0700 (PDT)
Received: from p01c11o148.mxlogic.net (p01c11o148.mxlogic.net [208.65.144.71]) by ietfa.amsl.com (Postfix) with ESMTP id ECDDE21F86DF for <pkix@ietf.org>; Fri, 27 Jul 2012 12:02:32 -0700 (PDT)
Received: from unknown [208.97.234.91] by p01c11o148.mxlogic.net(mxl_mta-6.14.0-1) with SMTP id 6c5e2105.0.1426.00-347.4068.p01c11o148.mxlogic.net (envelope-from <aallison@nab.org>);  Fri, 27 Jul 2012 13:02:34 -0600 (MDT)
X-MXL-Hash: 5012e5ca2bc53bf2-e089e9e360951f28f5f5d6dc26c5e36c073710bd
X-MimeOLE: Produced By Microsoft Exchange V6.5
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Date: Fri, 27 Jul 2012 15:01:18 -0400
Message-ID: <71C9EC0544D1F64D8B7D91EDCC6220200C35446A@NABSREX027324.NAB.ORG>
In-Reply-To: <5012E508.8010005@nist.gov>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: [pkix] RFC2560bis update
Thread-Index: Ac1sKfCxkYeew7vDSB+5fOBsKvmJ8AAAB1oA
References: <5012D16E.6000109@nist.gov> <20120727181930.24B231A0FD@ld9781.wdf.sap.corp> <71C9EC0544D1F64D8B7D91EDCC6220200C354463@NABSREX027324.NAB.ORG> <5012E508.8010005@nist.gov>
From: "Art Allison" <AAllison@nab.org>
To: <pkix@ietf.org>
X-Spam: [F=0.2000000000; CM=0.500; S=0.200(2010122901)]
X-MAIL-FROM: <aallison@nab.org>
X-SOURCE-IP: [208.97.234.91]
X-AnalysisOut: [v=2.0 cv=T5I7uY2Q c=1 sm=0 a=tFGTPFZixTZ3yCXJchW01Q==:17 a]
X-AnalysisOut: [=BvPfnLs-15kA:10 a=BLceEmwcHowA:10 a=8nJEP1OIZ-IA:10 a=g0F]
X-AnalysisOut: [pLpFZAAAA:8 a=48vgC7mUAAAA:8 a=Qh5wlhkw4L_ANfxKCSwA:9 a=wP]
X-AnalysisOut: [NLvfGTeEIA:10 a=8SgyfJxrfqYA:10 a=-9UqKSle32gA:10 a=Qd0007]
X-AnalysisOut: [q6B0YA:10 a=lZB815dzVvQA:10 a=DUo_MSGNv_RO7_JT:21 a=aGb4qZ]
X-AnalysisOut: [UEXoCMNUJD:21]
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 19:02:35 -0000

Apologies..=20
Yes, wrong thread <principal applies here too, though not the specific =
cite>

Art Allison=20
Senior Director Advanced Engineering, Technology=20
National Association of Broadcasters
1771 N Street NW
Washington, DC 20036
Phone=A0 202 429 5418
Fax=A0 202 775 4981=20
www.nab.org=20
Advocacy =A0Education=A0 Innovation=20


-----Original Message-----
From: David A. Cooper [mailto:david.cooper@nist.gov]=20
Sent: Friday, July 27, 2012 2:59 PM
To: Art Allison
Cc: pkix@ietf.org
Subject: Re: [pkix] RFC2560bis update

Art,

I believe that you are referring to the rules for encoding the =
explicitText string in draft-ietf-pkix-rfc5280-clarifications, not to =
2560bis, which is the topic of this discussion.

Dave

On 07/27/2012 02:53 PM, Art Allison wrote:
> I have not seen another substantive change listed that I happened to =
spot.
>  =20
> The use of the IA5String was optional, but is prohibited in -06 (and =
at least back to -04)..
> This is clearly not backwards compatible for any implementation that =
choose to use the IA5String.
>
> In general, adding a substantive feature might be reasonable to obtain =
more capability, but directly obsoleting previous hard-coded =
implementations in shipped products would force those using the old =
approach to ignore the new RFC.
>
> Art
>
> Art Allison
> Senior Director Advanced Engineering, Technology National Association=20
> of Broadcasters
> 1771 N Street NW
> Washington, DC 20036
> Phone  202 429 5418
> Fax  202 775 4981
> www.nab.org
> Advocacy  Education  Innovation
>
> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf=20
> Of Martin Rex
> Sent: Friday, July 27, 2012 2:20 PM
> To: David A. Cooper
> Cc: pkix@ietf.org
> Subject: Re: [pkix] RFC2560bis update
>
> David A. Cooper wrote:
>>     it is possible to change the way that a protocol is described=20
>> without changing the protocol itself.
> In theory this is possible, in practice this has NEVER works.
>
>
>> So your assertion that "If you want to change that text, then you DO, =

>> in fact, change the protocol" is simply wrong.
> Just the contrary.  If you did not want change the protocol (and the =
interoperability-impaired implemenations based on the existing spec), =
then we should end the discussion and kill the rfc2560bis document here =
and now.
>
>
>> Otherwise, you're going to have to
>> explain why PKIX was fundamentally wrong to describe X.509=20
>> certificates in RFC 5280 without changing the version number for the =
certificates.
> This is something that the authors of X.509 and PKIX would have to =
explain!
>
> And both of them did:
>
> ITU-T T-REC X.509 11-2008  3rd page:
>
>    Summary
>
>    ITU-T Recommendation X.509 | ISO/IEC 9594-8 defines a framework for
>    public-key certificates and attribute certificates. These =
frameworks
>    may be used by other standards bodies to profile their application
>    to Public Key Infrastructures (PKI) and Privilege Management
>    Infrastructures (PMI).  [...]
>
> RFC5280 PKIX, page 1:
>
>     Abstract
>
>     This memo profiles the X.509 v3 certificate and X.509 v2 =
certificate
>     revocation list (CRL) for use in the Internet.
>
>
>> In addition, if you are so against changing the text because changing =

>> the text would necessarily change the protocol, then why do you say:
>>
>>> Really, the smaller the changes to an existing implementation are,=20
>>> and the clearer the advantage of such a small change is conveyed,=20
>>> the more likely such a change will be made available as a software=20
>>> patch to the installed base.
>> This implies that you are the one who wants to make (small) changes=20
>> to the protocol.
>
> I'm sorry if my english is so terrible.
>
> I am violently opposing to changing the protocol (i.e. the spec).
>
> I am, however, all for giving very precise hints to implementors what =
to consider during new implementations or what to change in the =
behaviour of existing implementations in order to improve =
interoperability with other implementations.
>
> One of the big problems of the feature-ladden protocols around =
X.509/PKIX is that there exist independent implementations based on =
perfectly valid individual subsets of protocol options that turn out to =
be non-interoperable to each other.
>
>
> There are other that believe that by changing requirement levels for =
some protocol options or by killing some protocol options that are being =
used in a fashion not intended by the original protocol designers, is =
the better approach, because they want to complain to vendors about =
non-compliance to a *NEW* protocol spec.
>
> I do not like the latter approach at all, I do not believe that it =
works in any reasonable fashion, but most importantly, it has the =
pre-requisite of CHANGING the protocol.  Those pushing the latter =
approach should at least be honest about that.
>
>
> -Martin
>


From david.cooper@nist.gov  Fri Jul 27 12:28:43 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6AC3021F869F for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 12:28:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.319
X-Spam-Level: 
X-Spam-Status: No, score=-6.319 tagged_above=-999 required=5 tests=[AWL=0.280,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6lA+z1lQRc1y for <pkix@ietfa.amsl.com>; Fri, 27 Jul 2012 12:28:42 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id 2A1DD21F8699 for <pkix@ietf.org>; Fri, 27 Jul 2012 12:28:42 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Fri, 27 Jul 2012 15:28:37 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Fri, 27 Jul 2012 15:28:01 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6RJSeLB016639; Fri, 27 Jul 2012 15:28:40 -0400
Message-ID: <5012EBE8.6020806@nist.gov>
Date: Fri, 27 Jul 2012 15:28:40 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: Art Allison <AAllison@nab.org>
References: <5012D16E.6000109@nist.gov> <20120727181930.24B231A0FD@ld9781.wdf.sap.corp> <71C9EC0544D1F64D8B7D91EDCC6220200C354463@NABSREX027324.NAB.ORG> <5012E508.8010005@nist.gov> <71C9EC0544D1F64D8B7D91EDCC6220200C35446A@NABSREX027324.NAB.ORG>
In-Reply-To: <71C9EC0544D1F64D8B7D91EDCC6220200C35446A@NABSREX027324.NAB.ORG>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: [pkix] encoding of explicitText in 5280 update (was Re: RFC2560bis update)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2012 19:28:43 -0000

Art,

Actually, it is not the same principle.  Martin is claiming that it is 
not possible to change the way one describes a protocol (in order to 
make the description of the protocol more clear) without 
(unintentionally) changing the protocol itself.  The change the you cite 
in the 5280 update document wasn't unintentional, so it not an example 
of a change that was accidentally (and unknowingly) introduced as a 
result of an attempt to state the same requirements in a different way.

The change that you cite in the 5280 update document actually dates back 
to the -00 draft of that document 
(http://tools.ietf.org/html/draft-ietf-pkix-rfc5280-clarifications-00). 
As I recall, the proposed change was made for (at least) a couple of 
reasons.

The scope of the 5280 update document was initially limited to 
addressing issues that were discovered as a result of an effort to find 
interoperable implementations of the features in RFC 5280, as was 
required at the time to advance a document to the status of Draft 
Standard.  One of the things that I documented as an issue in my report 
(http://tools.ietf.org/id/draft-cooper-pkix-rfc5280-impl-report-01.txt) 
was the following:

    The user notice certificate policy qualifier allows for user notice
    text to be encoded using one of four string types: IA5String,
    VisibleString, BMPString, and UTF8String.  While RFC 2459 and RFC
    3280 provided no guidance on the selection of an encoding, RFC 5280
    requires that user notice text be encoded in either UTF8String or
    IA5String.  During the search for interoperable implementations,
    several Web server and email client certificates were located that
    included user notices, but they all encoded the user notices using
    the VisibleString type.  A few people also noted that at least one CA
    product encoded user notice text in BMPString.  Therefore, an update
    to RFC 5280 [RFC5280u] is being developed that permits user notices
    to be encoded as VisibleString or BMPString.

So, this change was not made with a disregard for backwards 
compatibility with existing implementations, but in an effort to more 
closely align the requirements with the behavior of existing 
implementations.

This change was further supported by the statement in the text that "The 
explicitText string SHOULD NOT include any control characters."  If I 
recall correctly, a comparison of IA5String and VisibleString showed 
VisibleString to consist of the characters of IA5String minus the 
control characters, so VisibleString was the more appropriate choice for 
encoding in addition to being the one that implementers were already using.

Dave

On 07/27/2012 03:01 PM, Art Allison wrote:
> Apologies..
> Yes, wrong thread <principal applies here too, though not the specific cite>
>
> Art Allison
> Senior Director Advanced Engineering, Technology
> National Association of Broadcasters
> 1771 N Street NW
> Washington, DC 20036
> Phone  202 429 5418
> Fax  202 775 4981
> www.nab.org
> Advocacy  Education  Innovation
>
>
> -----Original Message-----
> From: David A. Cooper [mailto:david.cooper@nist.gov]
> Sent: Friday, July 27, 2012 2:59 PM
> To: Art Allison
> Cc: pkix@ietf.org
> Subject: Re: [pkix] RFC2560bis update
>
> Art,
>
> I believe that you are referring to the rules for encoding the explicitText string in draft-ietf-pkix-rfc5280-clarifications, not to 2560bis, which is the topic of this discussion.
>
> Dave
>
> On 07/27/2012 02:53 PM, Art Allison wrote:
>> I have not seen another substantive change listed that I happened to spot.
>>    
>> The use of the IA5String was optional, but is prohibited in -06 (and at least back to -04)..
>> This is clearly not backwards compatible for any implementation that choose to use the IA5String.
>>
>> In general, adding a substantive feature might be reasonable to obtain more capability, but directly obsoleting previous hard-coded implementations in shipped products would force those using the old approach to ignore the new RFC.
>>
>> Art
>>
>> Art Allison
>> Senior Director Advanced Engineering, Technology National Association
>> of Broadcasters
>> 1771 N Street NW
>> Washington, DC 20036
>> Phone  202 429 5418
>> Fax  202 775 4981
>> www.nab.org
>> Advocacy  Education  Innovation
>>
>> -----Original Message-----
>> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf
>> Of Martin Rex
>> Sent: Friday, July 27, 2012 2:20 PM
>> To: David A. Cooper
>> Cc: pkix@ietf.org
>> Subject: Re: [pkix] RFC2560bis update
>>
>> David A. Cooper wrote:
>>>      it is possible to change the way that a protocol is described
>>> without changing the protocol itself.
>> In theory this is possible, in practice this has NEVER works.
>>
>>
>>> So your assertion that "If you want to change that text, then you DO,
>>> in fact, change the protocol" is simply wrong.
>> Just the contrary.  If you did not want change the protocol (and the interoperability-impaired implemenations based on the existing spec), then we should end the discussion and kill the rfc2560bis document here and now.
>>
>>
>>> Otherwise, you're going to have to
>>> explain why PKIX was fundamentally wrong to describe X.509
>>> certificates in RFC 5280 without changing the version number for the certificates.
>> This is something that the authors of X.509 and PKIX would have to explain!
>>
>> And both of them did:
>>
>> ITU-T T-REC X.509 11-2008  3rd page:
>>
>>     Summary
>>
>>     ITU-T Recommendation X.509 | ISO/IEC 9594-8 defines a framework for
>>     public-key certificates and attribute certificates. These frameworks
>>     may be used by other standards bodies to profile their application
>>     to Public Key Infrastructures (PKI) and Privilege Management
>>     Infrastructures (PMI).  [...]
>>
>> RFC5280 PKIX, page 1:
>>
>>      Abstract
>>
>>      This memo profiles the X.509 v3 certificate and X.509 v2 certificate
>>      revocation list (CRL) for use in the Internet.
>>
>>
>>> In addition, if you are so against changing the text because changing
>>> the text would necessarily change the protocol, then why do you say:
>>>
>>>> Really, the smaller the changes to an existing implementation are,
>>>> and the clearer the advantage of such a small change is conveyed,
>>>> the more likely such a change will be made available as a software
>>>> patch to the installed base.
>>> This implies that you are the one who wants to make (small) changes
>>> to the protocol.
>> I'm sorry if my english is so terrible.
>>
>> I am violently opposing to changing the protocol (i.e. the spec).
>>
>> I am, however, all for giving very precise hints to implementors what to consider during new implementations or what to change in the behaviour of existing implementations in order to improve interoperability with other implementations.
>>
>> One of the big problems of the feature-ladden protocols around X.509/PKIX is that there exist independent implementations based on perfectly valid individual subsets of protocol options that turn out to be non-interoperable to each other.
>>
>>
>> There are other that believe that by changing requirement levels for some protocol options or by killing some protocol options that are being used in a fashion not intended by the original protocol designers, is the better approach, because they want to complain to vendors about non-compliance to a *NEW* protocol spec.
>>
>> I do not like the latter approach at all, I do not believe that it works in any reasonable fashion, but most importantly, it has the pre-requisite of CHANGING the protocol.  Those pushing the latter approach should at least be honest about that.
>>
>>
>> -Martin
>>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
> .
>


From wwwrun@rfc-editor.org  Sat Jul 28 05:10:31 2012
Return-Path: <wwwrun@rfc-editor.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BFB1E21F85C0 for <pkix@ietfa.amsl.com>; Sat, 28 Jul 2012 05:10:31 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.276
X-Spam-Level: 
X-Spam-Status: No, score=-102.276 tagged_above=-999 required=5 tests=[AWL=0.324, BAYES_00=-2.599, NO_RELAYS=-0.001, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PfRJnw+F7eI8 for <pkix@ietfa.amsl.com>; Sat, 28 Jul 2012 05:10:31 -0700 (PDT)
Received: from rfc-editor.org (rfc-editor.org [IPv6:2001:1890:123a::1:2f]) by ietfa.amsl.com (Postfix) with ESMTP id 0C82021F85BB for <pkix@ietf.org>; Sat, 28 Jul 2012 05:10:31 -0700 (PDT)
Received: by rfc-editor.org (Postfix, from userid 30) id 4B1B7621A1; Sat, 28 Jul 2012 05:10:08 -0700 (PDT)
To: chokhani@orionsec.com, wford@verisign.com, rsabett@cooley.com, cmerrill@mccarter.com, swu@infoliance.com, stephen.farrell@cs.tcd.ie, turners@ieca.com, kent@bbn.com, stefan@aaa-sec.com
From: RFC Errata System <rfc-editor@rfc-editor.org>
Message-Id: <20120728121008.4B1B7621A1@rfc-editor.org>
Date: Sat, 28 Jul 2012 05:10:08 -0700 (PDT)
X-Mailman-Approved-At: Sun, 29 Jul 2012 09:27:01 -0700
Cc: pkix@ietf.org, gustavo.mezzetti@istruzione.it, rfc-editor@rfc-editor.org
Subject: [pkix] [Editorial Errata Reported] RFC3647 (3299)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 28 Jul 2012 12:10:31 -0000

The following errata report has been submitted for RFC3647,
"Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=3647&eid=3299

--------------------------------------
Type: Editorial
Reported by: Mezzetti, Gustavo <gustavo.mezzetti@istruzione.it>

Section: 3.1

Original Text
-------------
A CP within this category often makes sets requirements
appropriate for a certain "level of assurance" provided
by certificates, relative to certificates issued pursuant
to related CPs.

Corrected Text
--------------
A CP within this category often
[either say "makes" or "sets", but not both]
requirements appropriate for a certain "level of assurance" provided by
certificates, relative to certificates issued pursuant to related CPs.

Notes
-----


Instructions:
-------------
This errata is currently posted as "Reported". If necessary, please
use "Reply All" to discuss whether it should be verified or
rejected. When a decision is reached, the verifying party (IESG)
can log in to change the status and edit the report, if necessary. 

--------------------------------------
RFC3647 (draft-ietf-pkix-ipki-new-rfc2527-02)
--------------------------------------
Title               : Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework
Publication Date    : November 2003
Author(s)           : S. Chokhani, W. Ford, R. Sabett, C. Merrill, S. Wu
Category            : INFORMATIONAL
Source              : Public-Key Infrastructure (X.509)
Area                : Security
Stream              : IETF
Verifying Party     : IESG

From SChokhani@cygnacom.com  Sat Jul 28 14:34:36 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A7EED21F86C2 for <pkix@ietfa.amsl.com>; Sat, 28 Jul 2012 14:34:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mDGfitMnYJp8 for <pkix@ietfa.amsl.com>; Sat, 28 Jul 2012 14:34:36 -0700 (PDT)
Received: from ipedge2.cygnacom.com (ipedge2.cygnacom.com [216.191.252.27]) by ietfa.amsl.com (Postfix) with ESMTP id 028C621F86A8 for <pkix@ietf.org>; Sat, 28 Jul 2012 14:34:35 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,673,1336363200";  d="scan'208";a="1490839"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge2.cygnacom.com with ESMTP; 28 Jul 2012 17:34:23 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Sat, 28 Jul 2012 17:34:22 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: RFC Errata System <rfc-editor@rfc-editor.org>, Santosh Chokhani <chokhani@orionsec.com>, "wford@verisign.com" <wford@verisign.com>, "rsabett@cooley.com" <rsabett@cooley.com>, "cmerrill@mccarter.com" <cmerrill@mccarter.com>, "swu@infoliance.com" <swu@infoliance.com>, "stephen.farrell@cs.tcd.ie" <stephen.farrell@cs.tcd.ie>, "turners@ieca.com" <turners@ieca.com>, "kent@bbn.com" <kent@bbn.com>, "stefan@aaa-sec.com" <stefan@aaa-sec.com>
Date: Sat, 28 Jul 2012 17:34:20 -0400
Thread-Topic: [Editorial Errata Reported] RFC3647 (3299)
Thread-Index: Ac1sugasa4J1pHKQQq6ciEs8gBVrNgATbSdw
Message-ID: <B83745DA469B7847811819C5005244AF3629963E@scygexch7.cygnacom.com>
References: <20120728121008.4B1B7621A1@rfc-editor.org>
In-Reply-To: <20120728121008.4B1B7621A1@rfc-editor.org>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Mailman-Approved-At: Sun, 29 Jul 2012 09:27:01 -0700
Cc: "Randy@zwillgen.com" <Randy@zwillgen.com>, "Charles Merrill \(chas.merrill@yahoo.com\)" <chas.merrill@yahoo.com>, "Stephen Wu \(swu@ckwlaw.com\)" <swu@ckwlaw.com>, "wford@wyltan.com" <wford@wyltan.com>, "pkix@ietf.org" <pkix@ietf.org>, "gustavo.mezzetti@istruzione.it" <gustavo.mezzetti@istruzione.it>
Subject: Re: [pkix] [Editorial Errata Reported] RFC3647 (3299)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 28 Jul 2012 21:34:36 -0000

I agree with the errata.  The word "makes" should be deleted.  The word "se=
ts" should be used and remain.

BTW, all authors' e-mail addresses have changed.  The correct e-mail addres=
ses are as follows.  I have copied this e-mail to the correct e-mail addres=
ses.

schokhani@cygnacom.com
wford@wyltan.com
Randy@zwillgen.com
chas.merrill@yahoo.com
swu@ckwlaw.com

-----Original Message-----
From: RFC Errata System [mailto:rfc-editor@rfc-editor.org]=20
Sent: Saturday, July 28, 2012 8:10 AM
To: Santosh Chokhani; wford@verisign.com; rsabett@cooley.com; cmerrill@mcca=
rter.com; swu@infoliance.com; stephen.farrell@cs.tcd.ie; turners@ieca.com; =
kent@bbn.com; stefan@aaa-sec.com
Cc: gustavo.mezzetti@istruzione.it; pkix@ietf.org; rfc-editor@rfc-editor.or=
g
Subject: [Editorial Errata Reported] RFC3647 (3299)


The following errata report has been submitted for RFC3647, "Internet X.509=
 Public Key Infrastructure Certificate Policy and Certification Practices F=
ramework".

--------------------------------------
You may review the report below and at:
http://www.rfc-editor.org/errata_search.php?rfc=3D3647&eid=3D3299

--------------------------------------
Type: Editorial
Reported by: Mezzetti, Gustavo <gustavo.mezzetti@istruzione.it>

Section: 3.1

Original Text
-------------
A CP within this category often makes sets requirements

appropriate for a certain "level of assurance" provided

by certificates, relative to certificates issued pursuant

to related CPs.

Corrected Text
--------------
A CP within this category often

[either say "makes" or "sets", but not both]

requirements appropriate for a certain "level of assurance" provided by

certificates, relative to certificates issued pursuant to related CPs.

Notes
-----


Instructions:
-------------
This errata is currently posted as "Reported". If necessary, please use "Re=
ply All" to discuss whether it should be verified or rejected. When a decis=
ion is reached, the verifying party (IESG) can log in to change the status =
and edit the report, if necessary.=20

--------------------------------------
RFC3647 (draft-ietf-pkix-ipki-new-rfc2527-02)
--------------------------------------
Title               : Internet X.509 Public Key Infrastructure Certificate =
Policy and Certification Practices Framework
Publication Date    : November 2003
Author(s)           : S. Chokhani, W. Ford, R. Sabett, C. Merrill, S. Wu
Category            : INFORMATIONAL
Source              : Public-Key Infrastructure (X.509)
Area                : Security
Stream              : IETF
Verifying Party     : IESG

From kent@bbn.com  Sun Jul 29 10:13:43 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0A33E21F86AD for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 10:13:43 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.599
X-Spam-Level: 
X-Spam-Status: No, score=-106.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ycvkc4cNpX1j for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 10:13:42 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 5354021F8665 for <pkix@ietf.org>; Sun, 29 Jul 2012 10:13:42 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:33327 helo=COMSEC.local) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1SvX3l-000LqU-8S for pkix@ietf.org; Sun, 29 Jul 2012 13:13:41 -0400
Message-ID: <50156F44.6010305@bbn.com>
Date: Sun, 29 Jul 2012 13:13:40 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: pkix <pkix@ietf.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Jul 2012 17:13:43 -0000

Folks,

Recent messages exchanges point to significant disagreement about the 
future direction
for this doc. At the March meeting Stefan presented a proposal for how 
to move
ahead, as outlined in his slides. As noted in the minutes, the audience 
(at the mic)
included one indication of support for this streamlined approach, and 
one expression
of concern. Not a lot of interest.

Work on this doc has dragged on for 2 years now. In October of 2011 
Santosh argued that
version -04 of the doc was, in his opinion, a step backwards, adding 
more confusion to
RFC 2560 vs. clarifying it. Stefan agreed (in a message in March of 
2012), and
thus he created the current, stripped-down version of the doc (-05) 
which was published
recently.

Given the mixed response to this version, it's not clear that the WG 
members who are interested
in OCSP clarifications are in agreement on how to proceed.

So, let's begin a straw poll on the topic.  Here are the options I am 
offering:

     A - continue to work with the -05 version as the basis for an RFC
     B - revert to the -04 version as the basis for an RFC
     C - don't publish a clarifications document for OCSP
     D - the respondent volunteers to work on a new version of 2560bis

Please send your replies to the list starting now. The straw poll will close
in two weeks, on August 12. While there are many other, legitimate 
comments one could
offer, I am interested only in replies to this multiple choice straw 
poll (i.e., no
essay replies :-) )

Thanks,

Steve



From housley@vigilsec.com  Sun Jul 29 10:19:23 2012
Return-Path: <housley@vigilsec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6BD8721F8726 for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 10:19:23 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level: 
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CAoJfX9jTzoE for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 10:19:22 -0700 (PDT)
Received: from odin.smetech.net (mail.smetech.net [208.254.26.82]) by ietfa.amsl.com (Postfix) with ESMTP id A931321F8720 for <pkix@ietf.org>; Sun, 29 Jul 2012 10:19:22 -0700 (PDT)
Received: from localhost (unknown [208.254.26.81]) by odin.smetech.net (Postfix) with ESMTP id D6B24F2403E; Sun, 29 Jul 2012 13:19:23 -0400 (EDT)
X-Virus-Scanned: amavisd-new at smetech.net
Received: from odin.smetech.net ([208.254.26.82]) by localhost (ronin.smetech.net [208.254.26.81]) (amavisd-new, port 10024) with ESMTP id ecg4XRVBMT94; Sun, 29 Jul 2012 13:19:20 -0400 (EDT)
Received: from dhcp-55b9.meeting.ietf.org (unknown [130.129.85.185]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by odin.smetech.net (Postfix) with ESMTP id 287B0F2403B; Sun, 29 Jul 2012 13:19:21 -0400 (EDT)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset=us-ascii
From: Russ Housley <housley@vigilsec.com>
In-Reply-To: <50156F44.6010305@bbn.com>
Date: Sun, 29 Jul 2012 13:18:57 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <C6529C7C-6735-4CB6-A605-E788EC7D3016@vigilsec.com>
References: <50156F44.6010305@bbn.com>
To: Stephen Kent <kent@bbn.com>
X-Mailer: Apple Mail (2.1084)
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Jul 2012 17:19:23 -0000

A.


On Jul 29, 2012, at 1:13 PM, Stephen Kent wrote:

> Folks,
>=20
> Recent messages exchanges point to significant disagreement about the =
future direction
> for this doc. At the March meeting Stefan presented a proposal for how =
to move
> ahead, as outlined in his slides. As noted in the minutes, the =
audience (at the mic)
> included one indication of support for this streamlined approach, and =
one expression
> of concern. Not a lot of interest.
>=20
> Work on this doc has dragged on for 2 years now. In October of 2011 =
Santosh argued that
> version -04 of the doc was, in his opinion, a step backwards, adding =
more confusion to
> RFC 2560 vs. clarifying it. Stefan agreed (in a message in March of =
2012), and
> thus he created the current, stripped-down version of the doc (-05) =
which was published
> recently.
>=20
> Given the mixed response to this version, it's not clear that the WG =
members who are interested
> in OCSP clarifications are in agreement on how to proceed.
>=20
> So, let's begin a straw poll on the topic.  Here are the options I am =
offering:
>=20
>    A - continue to work with the -05 version as the basis for an RFC
>    B - revert to the -04 version as the basis for an RFC
>    C - don't publish a clarifications document for OCSP
>    D - the respondent volunteers to work on a new version of 2560bis
>=20
> Please send your replies to the list starting now. The straw poll will =
close
> in two weeks, on August 12. While there are many other, legitimate =
comments one could
> offer, I am interested only in replies to this multiple choice straw =
poll (i.e., no
> essay replies :-) )
>=20
> Thanks,
>=20
> Steve
>=20
>=20
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix


From kent@bbn.com  Sun Jul 29 11:20:44 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27FD921F8663 for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 11:20:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.534
X-Spam-Level: 
X-Spam-Status: No, score=-106.534 tagged_above=-999 required=5 tests=[AWL=0.064, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FRFGOF+zzfSV for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 11:20:43 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id 0627E21F86CA for <pkix@ietf.org>; Sun, 29 Jul 2012 11:20:43 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:57646 helo=COMSEC.local) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1SvY6Y-000NqV-IQ for pkix@ietf.org; Sun, 29 Jul 2012 14:20:38 -0400
Message-ID: <50157EF6.2000102@bbn.com>
Date: Sun, 29 Jul 2012 14:20:38 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: pkix <pkix@ietf.org>
Content-Type: multipart/alternative; boundary="------------050005040209020603060301"
Subject: [pkix] resolving an outstanding issue for 5280bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Jul 2012 18:20:44 -0000

This is a multi-part message in MIME format.
--------------050005040209020603060301
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Folks,

The debate on section 2 of 5280bis has dragged on for several weeks.  I 
have reviewed the message exchanges and I suggest the following 
replacement text for this contentions section, based on a message from 
Martin Rex, who pointed out that X.509 seems to contain appropriate text 
that is not included in 5280:

*2.Update to RFC 5280, Section 3.2: Certification Paths and Trust*

**

*Add the following paragraph to the end of RFC 5280, Section 3.2:*

**

*In some cases, a self-signed certificate that does not contain 
aBasicConstraints extension is used to convey a public key. Consistent 
with Section 3.4.61 of X.509 (11/2008) we note that **use of self-issued 
certificates and self-signed certificates issued by other than CAs are 
outside the scope of this specification. Thus, for example, a web server 
that issues a self-signed certificate for use with TLS [RFC4346] and/or 
DANE [RFC6394] is not inconsistent with RFC 5280.***


I want to hear from Paul, in particular, to see if he feels that this 
text will address his concerns.

Steve

--------------050005040209020603060301
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Folks,<br>
    <br>
    The debate on section 2 of 5280bis has dragged on for several
    weeks.&nbsp; I have reviewed the message exchanges and I suggest the
    following replacement text for this contentions section, based on a
    message from Martin Rex, who pointed out that X.509 seems to contain
    appropriate text that is not included in 5280:<br>
    <meta name="Title" content="">
    <!--[if gte mso 9]><xml>
 <o:DocumentProperties>
  <o:Revision>0</o:Revision>
  <o:TotalTime>0</o:TotalTime>
  <o:Pages>1</o:Pages>
  <o:Words>746</o:Words>
  <o:Characters>4256</o:Characters>
  <o:Company>BBN Technologies</o:Company>
  <o:Lines>35</o:Lines>
  <o:Paragraphs>9</o:Paragraphs>
  <o:CharactersWithSpaces>4993</o:CharactersWithSpaces>
  <o:Version>14.0</o:Version>
 </o:DocumentProperties>
 <o:OfficeDocumentSettings>
  <o:AllowPNG/>
 </o:OfficeDocumentSettings>
</xml><![endif]-->
    <!--[if gte mso 9]><xml>
 <w:WordDocument>
  <w:View>Normal</w:View>
  <w:Zoom>0</w:Zoom>
  <w:TrackMoves/>
  <w:TrackFormatting/>
  <w:PunctuationKerning/>
  <w:ValidateAgainstSchemas/>
  <w:SaveIfXMLInvalid>false</w:SaveIfXMLInvalid>
  <w:IgnoreMixedContent>false</w:IgnoreMixedContent>
  <w:AlwaysShowPlaceholderText>false</w:AlwaysShowPlaceholderText>
  <w:DoNotPromoteQF/>
  <w:LidThemeOther>EN-US</w:LidThemeOther>
  <w:LidThemeAsian>JA</w:LidThemeAsian>
  <w:LidThemeComplexScript>X-NONE</w:LidThemeComplexScript>
  <w:Compatibility>
   <w:BreakWrappedTables/>
   <w:SnapToGridInCell/>
   <w:WrapTextWithPunct/>
   <w:UseAsianBreakRules/>
   <w:DontGrowAutofit/>
   <w:SplitPgBreakAndParaMark/>
   <w:EnableOpenTypeKerning/>
   <w:DontFlipMirrorIndents/>
   <w:OverrideTableStyleHps/>
   <w:UseFELayout/>
  </w:Compatibility>
  <m:mathPr>
   <m:mathFont m:val="Cambria Math"/>
   <m:brkBin m:val="before"/>
   <m:brkBinSub m:val="&#45;-"/>
   <m:smallFrac m:val="off"/>
   <m:dispDef/>
   <m:lMargin m:val="0"/>
   <m:rMargin m:val="0"/>
   <m:defJc m:val="centerGroup"/>
   <m:wrapIndent m:val="1440"/>
   <m:intLim m:val="subSup"/>
   <m:naryLim m:val="undOvr"/>
  </m:mathPr></w:WordDocument>
</xml><![endif]--><!--[if gte mso 9]><xml>
 <w:LatentStyles DefLockedState="false" DefUnhideWhenUsed="true"
  DefSemiHidden="true" DefQFormat="false" DefPriority="99"
  LatentStyleCount="276">
  <w:LsdException Locked="false" Priority="0" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Normal"/>
  <w:LsdException Locked="false" Priority="9" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="heading 1"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 2"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 3"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 4"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 5"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 6"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 7"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 8"/>
  <w:LsdException Locked="false" Priority="9" QFormat="true" Name="heading 9"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 1"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 2"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 3"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 4"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 5"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 6"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 7"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 8"/>
  <w:LsdException Locked="false" Priority="39" Name="toc 9"/>
  <w:LsdException Locked="false" Priority="35" QFormat="true" Name="caption"/>
  <w:LsdException Locked="false" Priority="10" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Title"/>
  <w:LsdException Locked="false" Priority="1" Name="Default Paragraph Font"/>
  <w:LsdException Locked="false" Priority="11" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Subtitle"/>
  <w:LsdException Locked="false" Priority="22" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Strong"/>
  <w:LsdException Locked="false" Priority="20" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Emphasis"/>
  <w:LsdException Locked="false" Priority="59" SemiHidden="false"
   UnhideWhenUsed="false" Name="Table Grid"/>
  <w:LsdException Locked="false" UnhideWhenUsed="false" Name="Placeholder Text"/>
  <w:LsdException Locked="false" Priority="1" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="No Spacing"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 1"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 1"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 1"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 1"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 1"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 1"/>
  <w:LsdException Locked="false" UnhideWhenUsed="false" Name="Revision"/>
  <w:LsdException Locked="false" Priority="34" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="List Paragraph"/>
  <w:LsdException Locked="false" Priority="29" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Quote"/>
  <w:LsdException Locked="false" Priority="30" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Intense Quote"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 1"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 1"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 1"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 1"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 1"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 1"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 1"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 1"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 2"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 2"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 2"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 2"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 2"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 2"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 2"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 2"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 2"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 2"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 2"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 2"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 2"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 2"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 3"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 3"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 3"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 3"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 3"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 3"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 3"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 3"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 3"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 3"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 3"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 3"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 3"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 3"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 4"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 4"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 4"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 4"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 4"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 4"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 4"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 4"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 4"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 4"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 4"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 4"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 4"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 4"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 5"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 5"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 5"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 5"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 5"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 5"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 5"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 5"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 5"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 5"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 5"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 5"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 5"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 5"/>
  <w:LsdException Locked="false" Priority="60" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Shading Accent 6"/>
  <w:LsdException Locked="false" Priority="61" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light List Accent 6"/>
  <w:LsdException Locked="false" Priority="62" SemiHidden="false"
   UnhideWhenUsed="false" Name="Light Grid Accent 6"/>
  <w:LsdException Locked="false" Priority="63" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 1 Accent 6"/>
  <w:LsdException Locked="false" Priority="64" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Shading 2 Accent 6"/>
  <w:LsdException Locked="false" Priority="65" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 1 Accent 6"/>
  <w:LsdException Locked="false" Priority="66" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium List 2 Accent 6"/>
  <w:LsdException Locked="false" Priority="67" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 1 Accent 6"/>
  <w:LsdException Locked="false" Priority="68" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 2 Accent 6"/>
  <w:LsdException Locked="false" Priority="69" SemiHidden="false"
   UnhideWhenUsed="false" Name="Medium Grid 3 Accent 6"/>
  <w:LsdException Locked="false" Priority="70" SemiHidden="false"
   UnhideWhenUsed="false" Name="Dark List Accent 6"/>
  <w:LsdException Locked="false" Priority="71" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Shading Accent 6"/>
  <w:LsdException Locked="false" Priority="72" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful List Accent 6"/>
  <w:LsdException Locked="false" Priority="73" SemiHidden="false"
   UnhideWhenUsed="false" Name="Colorful Grid Accent 6"/>
  <w:LsdException Locked="false" Priority="19" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Subtle Emphasis"/>
  <w:LsdException Locked="false" Priority="21" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Intense Emphasis"/>
  <w:LsdException Locked="false" Priority="31" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Subtle Reference"/>
  <w:LsdException Locked="false" Priority="32" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Intense Reference"/>
  <w:LsdException Locked="false" Priority="33" SemiHidden="false"
   UnhideWhenUsed="false" QFormat="true" Name="Book Title"/>
  <w:LsdException Locked="false" Priority="37" Name="Bibliography"/>
  <w:LsdException Locked="false" Priority="39" QFormat="true" Name="TOC Heading"/>
 </w:LatentStyles>
</xml><![endif]--><!--StartFragment--><span
      style="font-size:10.0pt;font-family:Monaco"></span><span
      style="font-size:10.0pt;font-family:Monaco"></span><span
      style="font-size:10.0pt;font-family:Monaco"><o:p>&nbsp;</o:p></span>
    <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:Monaco">2.<span
            style="mso-spacerun:yes">&nbsp;
          </span>Update to RFC 5280, Section 3.2: Certification Paths
          and Trust<o:p></o:p></span></b></p>
    <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:Monaco"><o:p>&nbsp;</o:p></span></b></p>
    <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:Monaco">Add the following
          paragraph to the
          end of RFC 5280, Section 3.2:<o:p></o:p></span></b></p>
    <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:Monaco"><o:p>&nbsp;</o:p></span></b></p>
    <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:Monaco">In some cases, a
          self-signed
          certificate that does not contain a<o:p></o:p>
          BasicConstraints extension is used to convey a public key.
          Consistent
          with Section 3.4.61 of X.509 (11/2008) we note that </span></b><b
        style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:
Monaco;mso-bidi-font-family:Courier;mso-fareast-language:EN-US">use of
          self-issued certificates and self-signed certificates issued
          by other than CAs
          are outside the scope of this specification. Thus, for
          example, a web server
          that issues a self-signed certificate for use with TLS
          [RFC4346] and/or DANE [RFC6394] is not inconsistent with RFC
          5280.</span></b><b style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:Monaco"><o:p></o:p></span></b></p>
    <!--EndFragment-->
    <meta name="Keywords" content="">
    <meta http-equiv="Content-Type" content="text/html;
      charset=ISO-8859-1">
    <meta name="ProgId" content="Word.Document">
    <meta name="Generator" content="Microsoft Word 14">
    <meta name="Originator" content="Microsoft Word 14">
    <link rel="File-List"
href="file://localhost/Users/stk/Library/Caches/TemporaryItems/msoclip/0/clip_filelist.xml">
    <link rel="themeData"
href="file://localhost/Users/stk/Library/Caches/TemporaryItems/msoclip/0/clip_themedata.xml">
    <style>
<!--
 /* Font Definitions */
@font-face
	{font-family:"Courier New";
	panose-1:2 7 3 9 2 2 5 2 4 4;
	mso-font-charset:0;
	mso-generic-font-family:auto;
	mso-font-pitch:variable;
	mso-font-signature:-536859905 -1073711037 9 0 511 0;}
@font-face
	{font-family:Wingdings;
	panose-1:5 0 0 0 0 0 0 0 0 0;
	mso-font-charset:2;
	mso-generic-font-family:auto;
	mso-font-pitch:variable;
	mso-font-signature:0 268435456 0 0 -2147483648 0;}
@font-face
	{font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-font-charset:78;
	mso-generic-font-family:auto;
	mso-font-pitch:variable;
	mso-font-signature:1 134676480 16 0 131072 0;}
@font-face
	{font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-font-charset:78;
	mso-generic-font-family:auto;
	mso-font-pitch:variable;
	mso-font-signature:1 134676480 16 0 131072 0;}
@font-face
	{font-family:Cambria;
	panose-1:2 4 5 3 5 4 6 3 2 4;
	mso-font-charset:0;
	mso-generic-font-family:auto;
	mso-font-pitch:variable;
	mso-font-signature:-536870145 1073743103 0 0 415 0;}
@font-face
	{font-family:Monaco;
	panose-1:2 0 5 0 0 0 0 0 0 0;
	mso-font-charset:0;
	mso-generic-font-family:auto;
	mso-font-pitch:variable;
	mso-font-signature:3 0 0 0 1 0;}
 /* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{mso-style-unhide:no;
	mso-style-qformat:yes;
	mso-style-parent:"";
	margin:0in;
	margin-bottom:.0001pt;
	mso-pagination:widow-orphan;
	font-size:12.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Cambria;
	mso-ascii-font-family:Cambria;
	mso-ascii-theme-font:minor-latin;
	mso-fareast-font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-fareast-theme-font:minor-fareast;
	mso-hansi-font-family:Cambria;
	mso-hansi-theme-font:minor-latin;
	mso-bidi-font-family:"Times New Roman";
	mso-bidi-theme-font:minor-bidi;
	mso-fareast-language:JA;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
	{mso-style-priority:34;
	mso-style-unhide:no;
	mso-style-qformat:yes;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	mso-add-space:auto;
	mso-pagination:widow-orphan;
	font-size:12.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Cambria;
	mso-ascii-font-family:Cambria;
	mso-ascii-theme-font:minor-latin;
	mso-fareast-font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-fareast-theme-font:minor-fareast;
	mso-hansi-font-family:Cambria;
	mso-hansi-theme-font:minor-latin;
	mso-bidi-font-family:"Times New Roman";
	mso-bidi-theme-font:minor-bidi;
	mso-fareast-language:JA;}
p.MsoListParagraphCxSpFirst, li.MsoListParagraphCxSpFirst, div.MsoListParagraphCxSpFirst
	{mso-style-priority:34;
	mso-style-unhide:no;
	mso-style-qformat:yes;
	mso-style-type:export-only;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	mso-add-space:auto;
	mso-pagination:widow-orphan;
	font-size:12.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Cambria;
	mso-ascii-font-family:Cambria;
	mso-ascii-theme-font:minor-latin;
	mso-fareast-font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-fareast-theme-font:minor-fareast;
	mso-hansi-font-family:Cambria;
	mso-hansi-theme-font:minor-latin;
	mso-bidi-font-family:"Times New Roman";
	mso-bidi-theme-font:minor-bidi;
	mso-fareast-language:JA;}
p.MsoListParagraphCxSpMiddle, li.MsoListParagraphCxSpMiddle, div.MsoListParagraphCxSpMiddle
	{mso-style-priority:34;
	mso-style-unhide:no;
	mso-style-qformat:yes;
	mso-style-type:export-only;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	mso-add-space:auto;
	mso-pagination:widow-orphan;
	font-size:12.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Cambria;
	mso-ascii-font-family:Cambria;
	mso-ascii-theme-font:minor-latin;
	mso-fareast-font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-fareast-theme-font:minor-fareast;
	mso-hansi-font-family:Cambria;
	mso-hansi-theme-font:minor-latin;
	mso-bidi-font-family:"Times New Roman";
	mso-bidi-theme-font:minor-bidi;
	mso-fareast-language:JA;}
p.MsoListParagraphCxSpLast, li.MsoListParagraphCxSpLast, div.MsoListParagraphCxSpLast
	{mso-style-priority:34;
	mso-style-unhide:no;
	mso-style-qformat:yes;
	mso-style-type:export-only;
	margin-top:0in;
	margin-right:0in;
	margin-bottom:0in;
	margin-left:.5in;
	margin-bottom:.0001pt;
	mso-add-space:auto;
	mso-pagination:widow-orphan;
	font-size:12.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Cambria;
	mso-ascii-font-family:Cambria;
	mso-ascii-theme-font:minor-latin;
	mso-fareast-font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-fareast-theme-font:minor-fareast;
	mso-hansi-font-family:Cambria;
	mso-hansi-theme-font:minor-latin;
	mso-bidi-font-family:"Times New Roman";
	mso-bidi-theme-font:minor-bidi;
	mso-fareast-language:JA;}
.MsoChpDefault
	{mso-style-type:export-only;
	mso-default-props:yes;
	font-size:10.0pt;
	mso-ansi-font-size:10.0pt;
	mso-bidi-font-size:10.0pt;
	font-family:Cambria;
	mso-ascii-font-family:Cambria;
	mso-ascii-theme-font:minor-latin;
	mso-fareast-font-family:"&#65325;&#65331; &#26126;&#26397;";
	mso-fareast-theme-font:minor-fareast;
	mso-hansi-font-family:Cambria;
	mso-hansi-theme-font:minor-latin;
	mso-bidi-font-family:"Times New Roman";
	mso-bidi-theme-font:minor-bidi;
	mso-fareast-language:JA;}
@page WordSection1
	{size:8.5in 792.7pt;
	margin:1.0in 1.0in 1.0in 1.0in;
	mso-header-margin:.5in;
	mso-footer-margin:.5in;
	mso-paper-source:0;}
div.WordSection1
	{page:WordSection1;}
 /* List Definitions */
@list l0
	{mso-list-id:887956361;
	mso-list-type:hybrid;
	mso-list-template-ids:-90292546 67698703 67698691 67698693 67698689 67698691 67698693 67698689 67698691 67698693;}
@list l0:level1
	{mso-level-tab-stop:none;
	mso-level-number-position:left;
	margin-left:.75in;
	text-indent:-.25in;}
@list l0:level2
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	margin-left:1.25in;
	text-indent:-.25in;
	font-family:"Courier New";
	mso-bidi-font-family:"Times New Roman";}
@list l0:level3
	{mso-level-number-format:bullet;
	mso-level-text:&#61607;;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	margin-left:1.75in;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level4
	{mso-level-number-format:bullet;
	mso-level-text:&#61623;;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	margin-left:2.25in;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level5
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	margin-left:2.75in;
	text-indent:-.25in;
	font-family:"Courier New";
	mso-bidi-font-family:"Times New Roman";}
@list l0:level6
	{mso-level-number-format:bullet;
	mso-level-text:&#61607;;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	margin-left:3.25in;
	text-indent:-.25in;
	font-family:Wingdings;}
@list l0:level7
	{mso-level-number-format:bullet;
	mso-level-text:&#61623;;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	margin-left:3.75in;
	text-indent:-.25in;
	font-family:Symbol;}
@list l0:level8
	{mso-level-number-format:bullet;
	mso-level-text:o;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	margin-left:4.25in;
	text-indent:-.25in;
	font-family:"Courier New";
	mso-bidi-font-family:"Times New Roman";}
@list l0:level9
	{mso-level-number-format:bullet;
	mso-level-text:&#61607;;
	mso-level-tab-stop:none;
	mso-level-number-position:left;
	margin-left:4.75in;
	text-indent:-.25in;
	font-family:Wingdings;}
ol
	{margin-bottom:0in;}
ul
	{margin-bottom:0in;}
-->
</style><br>
    I want to hear from Paul, in particular, to see if he feels that
    this text will address his concerns.<br>
    <br>
    Steve<br>
  </body>
</html>

--------------050005040209020603060301--

From SChokhani@cygnacom.com  Sun Jul 29 13:01:20 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0BB3721F8748 for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 13:01:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ORwNiA5RPSxW for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 13:01:19 -0700 (PDT)
Received: from ipedge1.cygnacom.com (ipedge1.cygnacom.com [216.191.252.12]) by ietfa.amsl.com (Postfix) with ESMTP id 647CD21F8534 for <pkix@ietf.org>; Sun, 29 Jul 2012 13:01:19 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,675,1336363200";  d="scan'208";a="5751239"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge1.cygnacom.com with ESMTP; 29 Jul 2012 16:01:18 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Sun, 29 Jul 2012 16:01:18 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: Stephen Kent <kent@bbn.com>, pkix <pkix@ietf.org>
Date: Sun, 29 Jul 2012 16:01:17 -0400
Thread-Topic: [pkix] 2560bis
Thread-Index: Ac1trYfNp64ILoXMQKSTUK22SMhPegAFz9+A
Message-ID: <B83745DA469B7847811819C5005244AF36299643@scygexch7.cygnacom.com>
References: <50156F44.6010305@bbn.com>
In-Reply-To: <50156F44.6010305@bbn.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Jul 2012 20:01:20 -0000

Steve,

My vote would be A + adding client side processing rules a la Section 6 of =
5280.

-----Original Message-----
From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of Ste=
phen Kent
Sent: Sunday, July 29, 2012 1:14 PM
To: pkix
Subject: [pkix] 2560bis

Folks,

Recent messages exchanges point to significant disagreement about the futur=
e direction for this doc. At the March meeting Stefan presented a proposal =
for how to move ahead, as outlined in his slides. As noted in the minutes, =
the audience (at the mic) included one indication of support for this strea=
mlined approach, and one expression of concern. Not a lot of interest.

Work on this doc has dragged on for 2 years now. In October of 2011 Santosh=
 argued that version -04 of the doc was, in his opinion, a step backwards, =
adding more confusion to RFC 2560 vs. clarifying it. Stefan agreed (in a me=
ssage in March of 2012), and thus he created the current, stripped-down ver=
sion of the doc (-05) which was published recently.

Given the mixed response to this version, it's not clear that the WG member=
s who are interested in OCSP clarifications are in agreement on how to proc=
eed.

So, let's begin a straw poll on the topic.  Here are the options I am
offering:

     A - continue to work with the -05 version as the basis for an RFC
     B - revert to the -04 version as the basis for an RFC
     C - don't publish a clarifications document for OCSP
     D - the respondent volunteers to work on a new version of 2560bis

Please send your replies to the list starting now. The straw poll will clos=
e in two weeks, on August 12. While there are many other, legitimate commen=
ts one could offer, I am interested only in replies to this multiple choice=
 straw poll (i.e., no essay replies :-) )

Thanks,

Steve


_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From stephen.farrell@cs.tcd.ie  Sun Jul 29 13:04:54 2012
Return-Path: <stephen.farrell@cs.tcd.ie>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 479E221F8748 for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 13:04:54 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level: 
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yUfk6vRHFjne for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 13:04:53 -0700 (PDT)
Received: from scss.tcd.ie (hermes.scss.tcd.ie [IPv6:2001:770:10:200:889f:cdff:fe8d:ccd2]) by ietfa.amsl.com (Postfix) with ESMTP id 329F321F8534 for <pkix@ietf.org>; Sun, 29 Jul 2012 13:04:53 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by hermes.scss.tcd.ie (Postfix) with ESMTP id A0D8217148A; Sun, 29 Jul 2012 21:04:50 +0100 (IST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; h= content-transfer-encoding:content-type:in-reply-to:references :subject:mime-version:user-agent:from:date:message-id:received :received:x-virus-scanned; s=cs; t=1343592290; bh=uBuXSNWxrdO6Mi l13wSCTzciUXI3Xm2IZCuRDVTSvNI=; b=jxV2rowwru2zomWNecvNiZzunxxZhF deReg02a6EY02tH5s4cBkUtjIRHnqw5PC3PmA9IgyN62/z4iJXZMnt1D/Y9UZs80 nVMCdnqNit15zRz6/PbvkMgq8kHvGrG+y0a44OfxUAOfepjuvnhH/wxan+YYQs4o RNiu1T01HAnwI9htAJxP28/hyCeWU4hDAfVCgAzFyxu93Wmqr9u5xkTay7/6Yroc fazk2tM086VUHnzbCW7KzXmLugimjqHDN1i5wR5Dm2Q/FOV3D6JZsWmlqV+NozkN UvN8x4kotknLX5whLnppaUHI6VppWzpY+s4bhmfN7TV6hmGoyioHOr6Q==
X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie
Received: from scss.tcd.ie ([127.0.0.1]) by localhost (scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10027) with ESMTP id cZcF3tatvMDD; Sun, 29 Jul 2012 21:04:50 +0100 (IST)
Received: from [130.129.37.121] (unknown [130.129.37.121]) by smtp.scss.tcd.ie (Postfix) with ESMTPSA id 9B7DA171484; Sun, 29 Jul 2012 21:04:48 +0100 (IST)
Message-ID: <5015974A.4020107@cs.tcd.ie>
Date: Sun, 29 Jul 2012 21:04:26 +0100
From: Stephen Farrell <stephen.farrell@cs.tcd.ie>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:14.0) Gecko/20120714 Thunderbird/14.0
MIME-Version: 1.0
To: Stephen Kent <kent@bbn.com>
References: <50156F44.6010305@bbn.com>
In-Reply-To: <50156F44.6010305@bbn.com>
X-Enigmail-Version: 1.4.3
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Jul 2012 20:04:54 -0000

a

On 07/29/2012 06:13 PM, Stephen Kent wrote:
> Folks,
> 
> Recent messages exchanges point to significant disagreement about the
> future direction
> for this doc. At the March meeting Stefan presented a proposal for how
> to move
> ahead, as outlined in his slides. As noted in the minutes, the audience
> (at the mic)
> included one indication of support for this streamlined approach, and
> one expression
> of concern. Not a lot of interest.
> 
> Work on this doc has dragged on for 2 years now. In October of 2011
> Santosh argued that
> version -04 of the doc was, in his opinion, a step backwards, adding
> more confusion to
> RFC 2560 vs. clarifying it. Stefan agreed (in a message in March of
> 2012), and
> thus he created the current, stripped-down version of the doc (-05)
> which was published
> recently.
> 
> Given the mixed response to this version, it's not clear that the WG
> members who are interested
> in OCSP clarifications are in agreement on how to proceed.
> 
> So, let's begin a straw poll on the topic.  Here are the options I am
> offering:
> 
>     A - continue to work with the -05 version as the basis for an RFC
>     B - revert to the -04 version as the basis for an RFC
>     C - don't publish a clarifications document for OCSP
>     D - the respondent volunteers to work on a new version of 2560bis
> 
> Please send your replies to the list starting now. The straw poll will
> close
> in two weeks, on August 12. While there are many other, legitimate
> comments one could
> offer, I am interested only in replies to this multiple choice straw
> poll (i.e., no
> essay replies :-) )
> 
> Thanks,
> 
> Steve
> 
> 
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
> 
> 

From kent@bbn.com  Sun Jul 29 14:16:26 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4AE1F21F853A for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 14:16:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.24
X-Spam-Level: 
X-Spam-Status: No, score=-106.24 tagged_above=-999 required=5 tests=[AWL=-0.241, BAYES_00=-2.599, J_CHICKENPOX_31=0.6, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wsRBABK2Fi5o for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 14:16:25 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id D034D21F8534 for <pkix@ietf.org>; Sun, 29 Jul 2012 14:16:25 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:54309 helo=COMSEC.local) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1Svaqa-000OVJ-Lc; Sun, 29 Jul 2012 17:16:20 -0400
Message-ID: <5015A824.6020805@bbn.com>
Date: Sun, 29 Jul 2012 17:16:20 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:13.0) Gecko/20120614 Thunderbird/13.0.1
MIME-Version: 1.0
To: Michael Myers <mmyers@fastq.com>
References: <50156F44.6010305@bbn.com> <5015974A.4020107@cs.tcd.ie> <FEF51B53-194F-4564-AB64-0D4A4F6FB166@fastq.com>
In-Reply-To: <FEF51B53-194F-4564-AB64-0D4A4F6FB166@fastq.com>
Content-Type: text/plain; charset=US-ASCII; format=flowed
Content-Transfer-Encoding: 7bit
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Jul 2012 21:16:26 -0000

I've seen message from you, today, but I don;t recall if I saw the 
messages because I also
was cc'd.

I have seen errors from the mail list manager software, as would be the 
case if your
messages were being held.

Steve

On 7/29/12 4:51 PM, Michael Myers wrote:
> Ping.
>
> I suspect I'm not getting through to PKIX for some reason.
>
> Mike
>



From ppatterson@carillon.ca  Sun Jul 29 14:37:03 2012
Return-Path: <ppatterson@carillon.ca>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 94BFE11E80B8 for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 14:37:03 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3vlwPdr1FC70 for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 14:37:02 -0700 (PDT)
Received: from mail.carillon.ca (mail.carillon.ca [207.115.107.18]) by ietfa.amsl.com (Postfix) with ESMTP id A84DD11E80AE for <pkix@ietf.org>; Sun, 29 Jul 2012 14:37:02 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.carillon.ca (Postfix) with ESMTP id E0EBBA81103; Sun, 29 Jul 2012 17:37:07 -0400 (EDT)
X-Virus-Scanned: Debian amavisd-new at rhea-new.carillon.ca
Received: from mail.carillon.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IFe0vjE3rZrw; Sun, 29 Jul 2012 17:37:07 -0400 (EDT)
Received: from dhcp-11b8.meeting.ietf.org (dhcp-11b8.meeting.ietf.org [130.129.17.184]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.carillon.ca (Postfix) with ESMTPSA id DC5F9A806FC; Sun, 29 Jul 2012 17:37:06 -0400 (EDT)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset=us-ascii
From: Patrick Patterson <ppatterson@carillon.ca>
In-Reply-To: <5012C545.6070206@kent.ac.uk>
Date: Sun, 29 Jul 2012 17:36:57 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <EA182095-9420-4378-8E34-0BA331234D3D@carillon.ca>
References: <CAF4=xaGo+sFY=DvWQjugFTnNo6ZxjxOn2XazXxJ60BXKLhTxbg@mail.gmail.com> <50116DA5.5050008@kent.ac.uk> <5A5DFF62-F9CF-4F30-9ED8-92ACE29C58E4@carillon.ca> <5012C545.6070206@kent.ac.uk>
To: David Chadwick <d.w.chadwick@kent.ac.uk>
X-Mailer: Apple Mail (2.1084)
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 29 Jul 2012 21:37:03 -0000

Hello David,


On 2012-07-27, at 12:43 PM, David Chadwick wrote:

> Hi Patrick
>=20
> On 27/07/2012 16:44, Patrick Patterson wrote:
>> Hello David,
>>=20
>> On 2012-07-26, at 12:17 PM, David Chadwick wrote:
>>=20
>> Ok - so how would this work in practice?
>=20
> Very similar to your proposed EKU. The concept is the same. A =
subject's PKC is given an extension to say that they are the attribute =
authority for issuing privilege attributes to other entities. (Note in =
the discussion below I am using AA rather than SOA since most people =
currently do not support delegation of authority but assume the AA is =
the SOA. But once you introduce dynamic delegation of authority you need =
to differentiate between the SOA and the subordinate AAs (as in trust =
anchor CAs and subordinate CAs)).
>=20
> In terms of encoding, there is an OID for the SOAidentifier extension =
(whose content is null), whereas with EKU there is an OID for the new =
key usage. Once you have detected this OID in your PKC, thereafter the =
code you need for validating certs/assertions/claims is the same.
>=20

Ok - however, with a number of the new certificate policies that are =
being put in place due to recent events, the trend is towards moving to =
a mandatory, restrictive EKU for certificates that assert both =
digitalSignature and nonRepudiation/contentCommitment KU bits, with =
anyEKU specifically disallowed. Since I would presume that any SOA would =
require both of these, and RFC5280 processing rules prohibit relying =
party applications from allowing a certificate for a purpose that is not =
allowed by the EKU value, I still don't see how this would help?

> I've not seen too many
>> relying party applications that know what to do with this extension.
>=20
> You do the same as you propose with your extension.
> If the certificate/assertion/claim (these are all synonymous =
conceptually) is signed by an authority who has a PKC with the =
extension, then the signer is authorised by the CA to issue =
certs/assertions/claims. If no such extension exists in the signer's =
PKC, then it is up to the relying party to determine who the trusted =
attribute authorities are. What this extension effectively does is =
remove the set of trusted AAs from the RP's configured trust store, and =
replaces it with a trusted CA, and the trusted CA then dynamically says =
who the trusted AAs are (by inserting this extension in their PKCs).
>=20

Ok - but there is a difference between implementing a simple check for =
an OID value of an already understood extension, and implementing =
support for an extension that hitherto has not traditionally been =
understood. Furthermore, from what you included, this extension cannot =
be marked critical, which is not what is desired for the claimSigning =
EKU.=20

> Of course on its own this one extension is not enough, since the RP =
needs to know the following (at least)
>=20
> i) who are the trusted AAs.
> ii) which attributes is each AA trusted to issue
> iii) who can the AA issue these attributes to.
>=20
> so for example, you might trust Bank of America AA to issue visa =
attributes to anyone, the university of kent to issue student attributes =
to anyone with a kent email address etc.
>=20

As I said in the draft, Federation Realm designation, and the marking of =
who is authorised as a Trust point (either CA or IDP) is out of scope =
for this ID.=20

So, I would suggest that there is still a requirement for this ID. :)

Best Regards,

---
Patrick Patterson
Chief PKI Architect
Carillon Information Security Inc.
http://www.carillon.ca






From stefan@aaa-sec.com  Sun Jul 29 19:56:49 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A377511E8101 for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 19:56:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.281
X-Spam-Level: 
X-Spam-Status: No, score=-102.281 tagged_above=-999 required=5 tests=[AWL=0.968, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iiwj7ycqlTrT for <pkix@ietfa.amsl.com>; Sun, 29 Jul 2012 19:56:48 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 929DE11E8105 for <pkix@ietf.org>; Sun, 29 Jul 2012 19:56:48 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 9F8B91CF767E for <pkix@ietf.org>; Mon, 30 Jul 2012 04:56:45 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id J4b0x2nJ7ziq for <pkix@ietf.org>; Mon, 30 Jul 2012 04:56:45 +0200 (CEST)
Received: from s329.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 496901CF7672 for <pkix@ietf.org>; Mon, 30 Jul 2012 04:56:45 +0200 (CEST)
Received: (qmail 81770 invoked from network); 30 Jul 2012 02:56:44 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.203]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s329.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <kent@bbn.com>; 30 Jul 2012 02:56:44 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Sun, 29 Jul 2012 19:56:40 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: Stephen Kent <kent@bbn.com>, pkix <pkix@ietf.org>
Message-ID: <CC3B422F.49E72%stefan@aaa-sec.com>
Thread-Topic: [pkix] 2560bis
In-Reply-To: <50156F44.6010305@bbn.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 02:56:49 -0000

Voting for A.


Clarifications.

The approach of A is to start from the original 2560 RFC and only fix what
is "broken" or clearly needed, include errata's and include the published
OCSP algorithm agility RFC.
The 05 draft is a starting point where I have included all the advertised
fixes of 04, without rewriting the whole OCSP spec.

If anyone now feels that anything is missing (like Santosh advertised),
then we can discuss adding more stuff, but any stuff added/clarified must
be motivated and agreed.

Proceeding with alternative B probably also includes finding an author
that is prepared to bring the 04 draft to completion.
At present I doubt that I can take on doing that given the opposition
(including my own) of the 04 draft approach.

Steve and I have agreed to submit the 05 version tomorrow (to make it more
accessible). If the WG decides to go ahead with option B, then 04 can be
resubmitted as 06.
Until then the 05 draft is available here:
http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.txt



/Stefan
 


On 12-07-29 10:13 AM, "Stephen Kent" <kent@bbn.com> wrote:

>Folks,
>
>Recent messages exchanges point to significant disagreement about the
>future direction
>for this doc. At the March meeting Stefan presented a proposal for how
>to move
>ahead, as outlined in his slides. As noted in the minutes, the audience
>(at the mic)
>included one indication of support for this streamlined approach, and
>one expression
>of concern. Not a lot of interest.
>
>Work on this doc has dragged on for 2 years now. In October of 2011
>Santosh argued that
>version -04 of the doc was, in his opinion, a step backwards, adding
>more confusion to
>RFC 2560 vs. clarifying it. Stefan agreed (in a message in March of
>2012), and
>thus he created the current, stripped-down version of the doc (-05)
>which was published
>recently.
>
>Given the mixed response to this version, it's not clear that the WG
>members who are interested
>in OCSP clarifications are in agreement on how to proceed.
>
>So, let's begin a straw poll on the topic.  Here are the options I am
>offering:
>
>     A - continue to work with the -05 version as the basis for an RFC
>     B - revert to the -04 version as the basis for an RFC
>     C - don't publish a clarifications document for OCSP
>     D - the respondent volunteers to work on a new version of 2560bis
>
>Please send your replies to the list starting now. The straw poll will
>close
>in two weeks, on August 12. While there are many other, legitimate
>comments one could
>offer, I am interested only in replies to this multiple choice straw
>poll (i.e., no
>essay replies :-) )
>
>Thanks,
>
>Steve
>
>
>_______________________________________________
>pkix mailing list
>pkix@ietf.org
>https://www.ietf.org/mailman/listinfo/pkix



From david.cooper@nist.gov  Mon Jul 30 07:06:42 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 274B421F87F3 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 07:06:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.339
X-Spam-Level: 
X-Spam-Status: No, score=-6.339 tagged_above=-999 required=5 tests=[AWL=0.260,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wtRcbraEHnMO for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 07:06:41 -0700 (PDT)
Received: from wsget1.nist.gov (wsget1.nist.gov [129.6.13.150]) by ietfa.amsl.com (Postfix) with ESMTP id D834021F87F2 for <pkix@ietf.org>; Mon, 30 Jul 2012 07:06:40 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget1.nist.gov (129.6.13.150) with Microsoft SMTP Server (TLS) id 14.1.355.2; Mon, 30 Jul 2012 10:06:36 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Mon, 30 Jul 2012 10:05:48 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6UE6ZO0014652	for <pkix@ietf.org>; Mon, 30 Jul 2012 10:06:38 -0400
Message-ID: <501694EB.2040908@nist.gov>
Date: Mon, 30 Jul 2012 10:06:35 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: pkix <pkix@ietf.org>
References: <CC3B422F.49E72%stefan@aaa-sec.com>
In-Reply-To: <CC3B422F.49E72%stefan@aaa-sec.com>
Content-Type: text/plain; charset="UTF-8"; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 14:06:42 -0000

Voting for B.

As primary author of the -04 draft, I am willing to work to bring that 
draft to completion, following the "Way forward" that Stefan described 
in the final slide of his presentation as the March meeting:

â€¢ Resolve the designated responder clarification
â€¢ Final review?
â€¢ WG-Â­â€�LC

â€¢ Letâ€™s get this over with.



On 07/29/2012 10:56 PM, Stefan Santesson wrote:
> Voting for A.
>
>
> Clarifications.
>
> The approach of A is to start from the original 2560 RFC and only fix what
> is "broken" or clearly needed, include errata's and include the published
> OCSP algorithm agility RFC.
> The 05 draft is a starting point where I have included all the advertised
> fixes of 04, without rewriting the whole OCSP spec.
>
> If anyone now feels that anything is missing (like Santosh advertised),
> then we can discuss adding more stuff, but any stuff added/clarified must
> be motivated and agreed.
>
> Proceeding with alternative B probably also includes finding an author
> that is prepared to bring the 04 draft to completion.
> At present I doubt that I can take on doing that given the opposition
> (including my own) of the 04 draft approach.
>
> Steve and I have agreed to submit the 05 version tomorrow (to make it more
> accessible). If the WG decides to go ahead with option B, then 04 can be
> resubmitted as 06.
> Until then the 05 draft is available here:
> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.txt
>
>
>
> /Stefan
>   
>
>
> On 12-07-29 10:13 AM, "Stephen Kent" <kent@bbn.com> wrote:
>
>> Folks,
>>
>> Recent messages exchanges point to significant disagreement about the
>> future direction
>> for this doc. At the March meeting Stefan presented a proposal for how
>> to move
>> ahead, as outlined in his slides. As noted in the minutes, the audience
>> (at the mic)
>> included one indication of support for this streamlined approach, and
>> one expression
>> of concern. Not a lot of interest.
>>
>> Work on this doc has dragged on for 2 years now. In October of 2011
>> Santosh argued that
>> version -04 of the doc was, in his opinion, a step backwards, adding
>> more confusion to
>> RFC 2560 vs. clarifying it. Stefan agreed (in a message in March of
>> 2012), and
>> thus he created the current, stripped-down version of the doc (-05)
>> which was published
>> recently.
>>
>> Given the mixed response to this version, it's not clear that the WG
>> members who are interested
>> in OCSP clarifications are in agreement on how to proceed.
>>
>> So, let's begin a straw poll on the topic.  Here are the options I am
>> offering:
>>
>>      A - continue to work with the -05 version as the basis for an RFC
>>      B - revert to the -04 version as the basis for an RFC
>>      C - don't publish a clarifications document for OCSP
>>      D - the respondent volunteers to work on a new version of 2560bis
>>
>> Please send your replies to the list starting now. The straw poll will
>> close
>> in two weeks, on August 12. While there are many other, legitimate
>> comments one could
>> offer, I am interested only in replies to this multiple choice straw
>> poll (i.e., no
>> essay replies :-) )
>>
>> Thanks,
>>
>> Steve
>>
>>
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
> .
>


From paul.hoffman@vpnc.org  Mon Jul 30 07:11:53 2012
Return-Path: <paul.hoffman@vpnc.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 229A921F87F9 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 07:11:53 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.599
X-Spam-Level: 
X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id D0bz6tCnX+CU for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 07:11:52 -0700 (PDT)
Received: from hoffman.proper.com (IPv6.Hoffman.Proper.COM [IPv6:2605:8e00:100:41::81]) by ietfa.amsl.com (Postfix) with ESMTP id 8EAA921F8764 for <pkix@ietf.org>; Mon, 30 Jul 2012 07:11:52 -0700 (PDT)
Received: from [192.168.0.22] (S01060026f3e16488.vc.shawcable.net [24.84.235.32]) (authenticated bits=0) by hoffman.proper.com (8.14.5/8.14.5) with ESMTP id q6UDKYrE023893 (version=TLSv1/SSLv3 cipher=AES128-SHA bits=128 verify=NO); Mon, 30 Jul 2012 06:20:36 -0700 (MST) (envelope-from paul.hoffman@vpnc.org)
Mime-Version: 1.0 (Apple Message framework v1278)
Content-Type: text/plain; charset=iso-8859-1
From: Paul Hoffman <paul.hoffman@vpnc.org>
In-Reply-To: <50157EF6.2000102@bbn.com>
Date: Mon, 30 Jul 2012 07:11:46 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <F253C3DC-07ED-41F8-B22D-6EEBFBDD4E9B@vpnc.org>
References: <50157EF6.2000102@bbn.com>
To: Stephen Kent <kent@bbn.com>
X-Mailer: Apple Mail (2.1278)
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] resolving an outstanding issue for 5280bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 14:11:53 -0000

> 2.  Update to RFC 5280, Section 3.2: Certification Paths and Trust
> =20
> Add the following paragraph to the end of RFC 5280, Section 3.2:
> =20
> In some cases, a self-signed certificate that does not contain a =
BasicConstraints extension is used to convey a public key. Consistent =
with Section 3.4.61 of X.509 (11/2008) we note that use of self-issued =
certificates and self-signed certificates issued by other than CAs are =
outside the scope of this specification. Thus, for example, a web server =
that issues a self-signed certificate for use with TLS [RFC4346] and/or =
DANE [RFC6394] is not inconsistent with RFC 5280.
>=20
> I want to hear from Paul, in particular, to see if he feels that this =
text will address his concerns.

I definitely like the new wording other than the references in the last =
sentence and "issues" in that sentence. The sentence applies to all =
versions of TLS and to more than just the requirements document for =
DANE. Also, a web server generally doesn't "issue" a self-signed cert: =
it uses one that was generated for it by some human. Counter-proposal =
for the last sentence:

Thus, for example, a web server that uses a self-signed certificate for =
identifying itself is not inconsistent with RFC 5280.

--Paul Hoffman=

From peter.sylvester@edelweb.fr  Mon Jul 30 07:23:44 2012
Return-Path: <peter.sylvester@edelweb.fr>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 03FDE21F86E0 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 07:23:44 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pKCwr07iQTNh for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 07:23:43 -0700 (PDT)
Received: from mx1.on-x.com (mx1.on-x.com [92.103.215.13]) by ietfa.amsl.com (Postfix) with ESMTP id 5CE4C21F86DE for <pkix@ietf.org>; Mon, 30 Jul 2012 07:23:43 -0700 (PDT)
Received: from varuna.puteaux.on-x (varuna.puteaux.on-x [192.168.10.6]) by mx1.on-x.com (Postfix) with ESMTP id 33B7A5F3CC for <pkix@ietf.org>; Mon, 30 Jul 2012 16:21:54 +0200 (CEST)
Received: from smtps.on-x.com (mintaka.puteaux.on-x [192.168.14.11]) by varuna.puteaux.on-x (Postfix) with ESMTP id 142FF7C94F for <pkix@ietf.org>; Mon, 30 Jul 2012 15:58:09 +0200 (CEST)
Received: from [192.168.18.180] (unknown [192.168.18.180]) by smtps.on-x.com (Postfix) with ESMTPSA id 420CF236338 for <pkix@ietf.org>; Mon, 30 Jul 2012 10:02:15 -0400 (EDT)
Message-ID: <50169905.9050100@edelweb.fr>
Date: Mon, 30 Jul 2012 16:24:05 +0200
From: Peter Sylvester <peter.sylvester@edelweb.fr>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:14.0) Gecko/20120714 Thunderbird/14.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <50157EF6.2000102@bbn.com> <F253C3DC-07ED-41F8-B22D-6EEBFBDD4E9B@vpnc.org>
In-Reply-To: <F253C3DC-07ED-41F8-B22D-6EEBFBDD4E9B@vpnc.org>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [pkix] resolving an outstanding issue for 5280bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 14:23:44 -0000

On 07/30/2012 04:11 PM, Paul Hoffman wrote:
>> 2.  Update to RFC 5280, Section 3.2: Certification Paths and Trust
>>   
>> Add the following paragraph to the end of RFC 5280, Section 3.2:
>>   
>> In some cases, a self-signed certificate that does not contain a BasicConstraints extension is used to convey a public key. Consistent with Section 3.4.61 of X.509 (11/2008) we note that use of self-issued certificates and self-signed certificates issued by other than CAs are outside the scope of this specification. Thus, for example, a web server that issues a self-signed certificate for use with TLS [RFC4346] and/or DANE [RFC6394] is not inconsistent with RFC 5280.
>>
>> I want to hear from Paul, in particular, to see if he feels that this text will address his concerns.
> I definitely like the new wording other than the references in the last sentence and "issues" in that sentence. The sentence applies to all versions of TLS and to more than just the requirements document for DANE. Also, a web server generally doesn't "issue" a self-signed cert: it uses one that was generated for it by some human. Counter-proposal for the last sentence:
>
> Thus, for example, a web server that uses a self-signed certificate for identifying itself is not inconsistent with RFC 5280.
>
> -
This sentence is better than the one from Steven, but I think it is not 
good at
all to give an example that treats a situation that is out of scope.
Saying that it is not inconsistent means there is an opinion about
something that is out of scope.

Developers using crypto certificate validation
libraries will ask for general support of self signed certs.

Maybe: "For example, a web server that wants to use a self-signed
certificate is out of scope."

/P

From SChokhani@cygnacom.com  Mon Jul 30 07:28:36 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3410021F87EF for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 07:28:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wjCAdAB4XGyY for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 07:28:35 -0700 (PDT)
Received: from ipedge2.cygnacom.com (ipedge2.cygnacom.com [216.191.252.27]) by ietfa.amsl.com (Postfix) with ESMTP id E75A221F8673 for <pkix@ietf.org>; Mon, 30 Jul 2012 07:28:34 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,679,1336363200";  d="scan'208";a="1498467"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge2.cygnacom.com with ESMTP; 30 Jul 2012 10:28:32 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Mon, 30 Jul 2012 10:28:32 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: "David A. Cooper" <david.cooper@nist.gov>, pkix <pkix@ietf.org>
Date: Mon, 30 Jul 2012 10:28:30 -0400
Thread-Topic: [pkix] 2560bis
Thread-Index: Ac1uXJeHP9JCeBkhTHOwI8n1tif/gQAAqT0A
Message-ID: <B83745DA469B7847811819C5005244AF36299662@scygexch7.cygnacom.com>
References: <CC3B422F.49E72%stefan@aaa-sec.com> <501694EB.2040908@nist.gov>
In-Reply-To: <501694EB.2040908@nist.gov>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 14:28:36 -0000
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From david.cooper@nist.gov  Mon Jul 30 08:59:13 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C75C421F85E7 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 08:59:13 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.356
X-Spam-Level: 
X-Spam-Status: No, score=-6.356 tagged_above=-999 required=5 tests=[AWL=0.243,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CDzy-lO1OFKS for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 08:59:13 -0700 (PDT)
Received: from wsget1.nist.gov (wsget1.nist.gov [129.6.13.150]) by ietfa.amsl.com (Postfix) with ESMTP id 9EF4321F8604 for <pkix@ietf.org>; Mon, 30 Jul 2012 08:59:12 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget1.nist.gov (129.6.13.150) with Microsoft SMTP Server (TLS) id 14.1.355.2; Mon, 30 Jul 2012 11:59:09 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Mon, 30 Jul 2012 11:58:21 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6UFxAat005835; Mon, 30 Jul 2012 11:59:11 -0400
Message-ID: <5016AF4E.3000700@nist.gov>
Date: Mon, 30 Jul 2012 11:59:10 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: Santosh Chokhani <SChokhani@cygnacom.com>
References: <CC3B422F.49E72%stefan@aaa-sec.com> <501694EB.2040908@nist.gov> <B83745DA469B7847811819C5005244AF36299662@scygexch7.cygnacom.com>
In-Reply-To: <B83745DA469B7847811819C5005244AF36299662@scygexch7.cygnacom.com>
Content-Type: text/plain; charset="UTF-8"; format=flowed
Content-Transfer-Encoding: 8bit
Cc: pkix <pkix@ietf.org>
Subject: [pkix] Updating the -04 draft of 2560bis (was Re:  2560bis)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 15:59:13 -0000

Santosh,

I believe that I found the message to which you are referring.  As you 
noted in your message, these issues are not particular to OCSP, but are 
relevant to X.509-based PKIs in general.  The issues also apply, for 
example, to the processing of CRLs and to attribute certificates.  At 
the time, I suggested addressing things like this by writing a separate 
document that describes best practices for both issuers and relying 
parties, not just for OCSP, but for the PKI in general.  I said that I 
would be willing to work on such a document, but got no responses to 
that suggestion.

As for 2560bis, I certainly want to do my best to address everyone's 
concerns, but I can only do so within the mandate that I was given to 
not make any changes to the protocol.

Dave

On 07/30/2012 10:28 AM, Santosh Chokhani wrote:
> David,
>
> I am willing to support you on Option B.  I do not recall if this was in our private conversation only or in the PKIX post, but in order for that to work, you need to discuss how the client need to enforce the various trust models you present in the annex(es) and how that relates to gaining crypto binding since name uniqueness is not guaranteed.
>
> -----Original Message-----
> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of David A. Cooper
> Sent: Monday, July 30, 2012 10:07 AM
> To: pkix
> Subject: Re: [pkix] 2560bis
>
> Voting for B.
>
> As primary author of the -04 draft, I am willing to work to bring that draft to completion, following the "Way forward" that Stefan described in the final slide of his presentation as the March meeting:
>
> â€¢ Resolve the designated responder clarification â€¢ Final review?
> â€¢ WG-Â­â€�LC
>
> â€¢ Letâ€™s get this over with.
>
>
>
> On 07/29/2012 10:56 PM, Stefan Santesson wrote:
>> Voting for A.
>>
>>
>> Clarifications.
>>
>> The approach of A is to start from the original 2560 RFC and only fix
>> what is "broken" or clearly needed, include errata's and include the
>> published OCSP algorithm agility RFC.
>> The 05 draft is a starting point where I have included all the
>> advertised fixes of 04, without rewriting the whole OCSP spec.
>>
>> If anyone now feels that anything is missing (like Santosh
>> advertised), then we can discuss adding more stuff, but any stuff
>> added/clarified must be motivated and agreed.
>>
>> Proceeding with alternative B probably also includes finding an author
>> that is prepared to bring the 04 draft to completion.
>> At present I doubt that I can take on doing that given the opposition
>> (including my own) of the 04 draft approach.
>>
>> Steve and I have agreed to submit the 05 version tomorrow (to make it
>> more accessible). If the WG decides to go ahead with option B, then 04
>> can be resubmitted as 06.
>> Until then the 05 draft is available here:
>> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.tx
>> t
>>
>>
>>
>> /Stefan
>>    
>>
>>
>> On 12-07-29 10:13 AM, "Stephen Kent" <kent@bbn.com> wrote:
>>
>>> Folks,
>>>
>>> Recent messages exchanges point to significant disagreement about the
>>> future direction for this doc. At the March meeting Stefan presented
>>> a proposal for how to move ahead, as outlined in his slides. As noted
>>> in the minutes, the audience (at the mic) included one indication of
>>> support for this streamlined approach, and one expression of concern.
>>> Not a lot of interest.
>>>
>>> Work on this doc has dragged on for 2 years now. In October of 2011
>>> Santosh argued that version -04 of the doc was, in his opinion, a
>>> step backwards, adding more confusion to RFC 2560 vs. clarifying it.
>>> Stefan agreed (in a message in March of 2012), and thus he created
>>> the current, stripped-down version of the doc (-05) which was
>>> published recently.
>>>
>>> Given the mixed response to this version, it's not clear that the WG
>>> members who are interested in OCSP clarifications are in agreement on
>>> how to proceed.
>>>
>>> So, let's begin a straw poll on the topic.  Here are the options I am
>>> offering:
>>>
>>>       A - continue to work with the -05 version as the basis for an RFC
>>>       B - revert to the -04 version as the basis for an RFC
>>>       C - don't publish a clarifications document for OCSP
>>>       D - the respondent volunteers to work on a new version of
>>> 2560bis
>>>
>>> Please send your replies to the list starting now. The straw poll
>>> will close in two weeks, on August 12. While there are many other,
>>> legitimate comments one could offer, I am interested only in replies
>>> to this multiple choice straw poll (i.e., no essay replies :-) )
>>>
>>> Thanks,
>>>
>>> Steve
>>>

From internet-drafts@ietf.org  Mon Jul 30 09:11:38 2012
Return-Path: <internet-drafts@ietf.org>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2259411E8099; Mon, 30 Jul 2012 09:11:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.582
X-Spam-Level: 
X-Spam-Status: No, score=-102.582 tagged_above=-999 required=5 tests=[AWL=0.017, BAYES_00=-2.599, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tbuZUXWEV0fk; Mon, 30 Jul 2012 09:11:37 -0700 (PDT)
Received: from ietfa.amsl.com (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22D1B11E8098; Mon, 30 Jul 2012 09:11:37 -0700 (PDT)
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
From: internet-drafts@ietf.org
To: i-d-announce@ietf.org
X-Test-IDTracker: no
X-IETF-IDTracker: 4.32
Message-ID: <20120730161137.26448.7196.idtracker@ietfa.amsl.com>
Date: Mon, 30 Jul 2012 09:11:37 -0700
Cc: pkix@ietf.org
Subject: [pkix] I-D Action: draft-ietf-pkix-rfc2560bis-05.txt
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 16:11:38 -0000

A New Internet-Draft is available from the on-line Internet-Drafts director=
ies.
 This draft is a work item of the Public-Key Infrastructure (X.509) Working=
 Group of the IETF.

	Title           : X.509 Internet Public Key Infrastructure Online Certific=
ate Status Protocol - OCSP
	Author(s)       : Stefan Santesson
	Filename        : draft-ietf-pkix-rfc2560bis-05.txt
	Pages           : 36
	Date            : 2012-07-30

Abstract:
   This document specifies a protocol useful in determining the current
   status of a digital certificate without requiring CRLs. Additional
   mechanisms addressing PKIX operational requirements are specified in
   separate documents. This document obsoletes RFC 2560 and RFC 6277.


The IETF datatracker status page for this draft is:
https://datatracker.ietf.org/doc/draft-ietf-pkix-rfc2560bis

There's also a htmlized version available at:
http://tools.ietf.org/html/draft-ietf-pkix-rfc2560bis-05

A diff from previous version is available at:
http://tools.ietf.org/rfcdiff?url2=3Ddraft-ietf-pkix-rfc2560bis-05


Internet-Drafts are also available by anonymous FTP at:
ftp://ftp.ietf.org/internet-drafts/


From stefan@aaa-sec.com  Mon Jul 30 09:18:01 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7D2C721F860B for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:18:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.523
X-Spam-Level: 
X-Spam-Status: No, score=-102.523 tagged_above=-999 required=5 tests=[AWL=0.726, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 10hkBBhEAnkv for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:18:00 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 55D8C21F8602 for <pkix@ietf.org>; Mon, 30 Jul 2012 09:17:59 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 550DF1D24362 for <pkix@ietf.org>; Mon, 30 Jul 2012 18:17:58 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id Bt1j5P9yyVul for <pkix@ietf.org>; Mon, 30 Jul 2012 18:17:57 +0200 (CEST)
Received: from s328.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id ED3541D2433C for <pkix@ietf.org>; Mon, 30 Jul 2012 18:17:57 +0200 (CEST)
Received: (qmail 15120 invoked from network); 30 Jul 2012 16:17:56 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.203]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s328.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <stefan@aaa-sec.com>; 30 Jul 2012 16:17:56 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 30 Jul 2012 09:17:48 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: Stefan Santesson <stefan@aaa-sec.com>, Stephen Kent <kent@bbn.com>, pkix <pkix@ietf.org>
Message-ID: <CC3C0198.49EF2%stefan@aaa-sec.com>
Thread-Topic: [pkix] 2560bis
In-Reply-To: <CC3B422F.49E72%stefan@aaa-sec.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 16:18:01 -0000

The 05 draft is now submitted:
http://tools.ietf.org/html/draft-ietf-pkix-rfc2560bis-05

/Stefan

On 12-07-29 7:56 PM, "Stefan Santesson" <stefan@aaa-sec.com> wrote:

>Voting for A.
>
>
>Clarifications.
>
>The approach of A is to start from the original 2560 RFC and only fix what
>is "broken" or clearly needed, include errata's and include the published
>OCSP algorithm agility RFC.
>The 05 draft is a starting point where I have included all the advertised
>fixes of 04, without rewriting the whole OCSP spec.
>
>If anyone now feels that anything is missing (like Santosh advertised),
>then we can discuss adding more stuff, but any stuff added/clarified must
>be motivated and agreed.
>
>Proceeding with alternative B probably also includes finding an author
>that is prepared to bring the 04 draft to completion.
>At present I doubt that I can take on doing that given the opposition
>(including my own) of the 04 draft approach.
>
>Steve and I have agreed to submit the 05 version tomorrow (to make it more
>accessible). If the WG decides to go ahead with option B, then 04 can be
>resubmitted as 06.
>Until then the 05 draft is available here:
>http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.txt
>
>
>
>/Stefan
> 
>
>
>On 12-07-29 10:13 AM, "Stephen Kent" <kent@bbn.com> wrote:
>
>>Folks,
>>
>>Recent messages exchanges point to significant disagreement about the
>>future direction
>>for this doc. At the March meeting Stefan presented a proposal for how
>>to move
>>ahead, as outlined in his slides. As noted in the minutes, the audience
>>(at the mic)
>>included one indication of support for this streamlined approach, and
>>one expression
>>of concern. Not a lot of interest.
>>
>>Work on this doc has dragged on for 2 years now. In October of 2011
>>Santosh argued that
>>version -04 of the doc was, in his opinion, a step backwards, adding
>>more confusion to
>>RFC 2560 vs. clarifying it. Stefan agreed (in a message in March of
>>2012), and
>>thus he created the current, stripped-down version of the doc (-05)
>>which was published
>>recently.
>>
>>Given the mixed response to this version, it's not clear that the WG
>>members who are interested
>>in OCSP clarifications are in agreement on how to proceed.
>>
>>So, let's begin a straw poll on the topic.  Here are the options I am
>>offering:
>>
>>     A - continue to work with the -05 version as the basis for an RFC
>>     B - revert to the -04 version as the basis for an RFC
>>     C - don't publish a clarifications document for OCSP
>>     D - the respondent volunteers to work on a new version of 2560bis
>>
>>Please send your replies to the list starting now. The straw poll will
>>close
>>in two weeks, on August 12. While there are many other, legitimate
>>comments one could
>>offer, I am interested only in replies to this multiple choice straw
>>poll (i.e., no
>>essay replies :-) )
>>
>>Thanks,
>>
>>Steve
>>
>>
>>_______________________________________________
>>pkix mailing list
>>pkix@ietf.org
>>https://www.ietf.org/mailman/listinfo/pkix
>
>
>_______________________________________________
>pkix mailing list
>pkix@ietf.org
>https://www.ietf.org/mailman/listinfo/pkix



From SChokhani@cygnacom.com  Mon Jul 30 09:18:20 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 33DC421F861F for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:18:20 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5k1u9zDD-+tf for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:18:19 -0700 (PDT)
Received: from ipedge1.cygnacom.com (ipedge1.cygnacom.com [216.191.252.12]) by ietfa.amsl.com (Postfix) with ESMTP id 173F921F8622 for <pkix@ietf.org>; Mon, 30 Jul 2012 09:18:18 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,679,1336363200";  d="scan'208";a="5758792"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge1.cygnacom.com with ESMTP; 30 Jul 2012 12:18:16 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Mon, 30 Jul 2012 12:18:16 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: "David A. Cooper" <david.cooper@nist.gov>
Date: Mon, 30 Jul 2012 12:18:15 -0400
Thread-Topic: Updating the -04 draft of 2560bis (was Re: [pkix] 2560bis)
Thread-Index: Ac1ubFTS2tVDPtW5RbSk8GiH7H0/3wAAdQkg
Message-ID: <B83745DA469B7847811819C5005244AF36299682@scygexch7.cygnacom.com>
References: <CC3B422F.49E72%stefan@aaa-sec.com> <501694EB.2040908@nist.gov> <B83745DA469B7847811819C5005244AF36299662@scygexch7.cygnacom.com> <5016AF4E.3000700@nist.gov>
In-Reply-To: <5016AF4E.3000700@nist.gov>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
MIME-Version: 1.0
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] Updating the -04 draft of 2560bis (was Re:  2560bis)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 16:18:20 -0000
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==

From kent@bbn.com  Mon Jul 30 09:29:48 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8042221F85F0 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:29:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -105.37
X-Spam-Level: 
X-Spam-Status: No, score=-105.37 tagged_above=-999 required=5 tests=[AWL=-1.071, BAYES_00=-2.599, MANGLED_YOUR=2.3, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CFxF50St1d-c for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:29:48 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id 0B4D621F85C3 for <pkix@ietf.org>; Mon, 30 Jul 2012 09:29:48 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:37461 helo=COMSEC.local) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1Svsqk-0007o4-HG for pkix@ietf.org; Mon, 30 Jul 2012 12:29:42 -0400
Message-ID: <5016B676.2010300@bbn.com>
Date: Mon, 30 Jul 2012 12:29:42 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <50157EF6.2000102@bbn.com> <F253C3DC-07ED-41F8-B22D-6EEBFBDD4E9B@vpnc.org> <50169905.9050100@edelweb.fr>
In-Reply-To: <50169905.9050100@edelweb.fr>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [pkix] resolving an outstanding issue for 5280bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 16:29:48 -0000

Peter,

I think an example here is important, especially because the example is 
what has motivated
this change. I have reworded the text to say that the example is out of 
scope rather than
"not inconsistent ..." (But, if something is out of scope, then it is 
not inconsistent with
the spec :-) , logically.)
Y
our suggested wording is not attractive to me, since it 
anthropomorphizes the web server,
and says nothing about RP behavior.

I hope the new wording (see my reply to Paul) is more acceptable.

Steve



From kent@bbn.com  Mon Jul 30 09:29:48 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF00B21F8608 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:29:48 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.437
X-Spam-Level: 
X-Spam-Status: No, score=-106.437 tagged_above=-999 required=5 tests=[AWL=0.161, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yfuBLVs3RO7B for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:29:48 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 4DACD21F85EA for <pkix@ietf.org>; Mon, 30 Jul 2012 09:29:48 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:47456 helo=COMSEC.local) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1Svsqi-0001VC-5d; Mon, 30 Jul 2012 12:29:40 -0400
Message-ID: <5016B673.7070505@bbn.com>
Date: Mon, 30 Jul 2012 12:29:39 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: Paul Hoffman <paul.hoffman@vpnc.org>
References: <50157EF6.2000102@bbn.com> <F253C3DC-07ED-41F8-B22D-6EEBFBDD4E9B@vpnc.org>
In-Reply-To: <F253C3DC-07ED-41F8-B22D-6EEBFBDD4E9B@vpnc.org>
Content-Type: multipart/alternative; boundary="------------070506000705050603060203"
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] resolving an outstanding issue for 5280bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 16:29:49 -0000

This is a multi-part message in MIME format.
--------------070506000705050603060203
Content-Type: text/plain; charset=iso-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Paul,

Thanks for the feedback.

I'm comfortable with revising the last sentence to avoid an example that 
might be unduly restrictive.
I assume you prefer to not use the word "issue" a it might connote a CA, 
when we are saying that the
signer of the cert is not a CA. I'm not happy with "uses" as it's an 
ambiguous term. How about:

*In some cases, a self-signed certificate that does not contain a BasicConstraints extension is used to convey a public key. Consistent with Section 3.4.61 of X.509 (11/2008) we note that use of self-issued certificates and self-signed certificates issued by other than CAs are outside the scope of this specification. Thus, for example, a web server might generate a self-signed certificate to identity itself, and relying parties might accept this certificate. Such behavior is outside the scope of RFC 5280.*

How about this text?

Steve


--------------070506000705050603060203
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=iso-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Paul,<br>
    <br>
    Thanks for the feedback. <br>
    <br>
    I'm comfortable with revising the last sentence to avoid an example
    that might be unduly restrictive. <br>
    I assume you prefer to not use the word "issue" a it might connote a
    CA, when we are saying that the<br>
    signer of the cert is not a CA. I'm not happy with "uses" as it's an
    ambiguous term. How about:<br>
    <pre wrap=""><b>In some cases, a self-signed certificate that does not contain a BasicConstraints extension is used to convey a public key. Consistent with Section 3.4.61 of X.509 (11/2008) we note that use of self-issued certificates and self-signed certificates issued by other than CAs are outside the scope of this specification. Thus, for example, a web server might generate a self-signed certificate to identity itself, and relying parties might accept this certificate. Such behavior is outside the scope of RFC 5280.</b></pre>
    How about this text?<br>
    <br>
    Steve<br>
    <br>
  </body>
</html>

--------------070506000705050603060203--

From stefan@aaa-sec.com  Mon Jul 30 09:44:17 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5587711E8114 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:44:17 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.668
X-Spam-Level: 
X-Spam-Status: No, score=-102.668 tagged_above=-999 required=5 tests=[AWL=0.581, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id thUT+bQcxip6 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:44:16 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id DBD1511E8111 for <pkix@ietf.org>; Mon, 30 Jul 2012 09:44:15 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 38F061D245C1 for <pkix@ietf.org>; Mon, 30 Jul 2012 18:44:15 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id ZWc1yWhIMdRb for <pkix@ietf.org>; Mon, 30 Jul 2012 18:44:14 +0200 (CEST)
Received: from s326.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 8AD9F1D245A0 for <pkix@ietf.org>; Mon, 30 Jul 2012 18:44:14 +0200 (CEST)
Received: (qmail 61323 invoked from network); 30 Jul 2012 16:44:14 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.203]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s326.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <SChokhani@cygnacom.com>; 30 Jul 2012 16:44:14 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 30 Jul 2012 09:44:06 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: Santosh Chokhani <SChokhani@cygnacom.com>, "David A. Cooper" <david.cooper@nist.gov>
Message-ID: <CC3C0594.49F06%stefan@aaa-sec.com>
Thread-Topic: [pkix] Updating the -04 draft of 2560bis (was Re:  2560bis)
In-Reply-To: <B83745DA469B7847811819C5005244AF36299682@scygexch7.cygnacom.com>
Mime-version: 1.0
Content-type: text/plain; charset="EUC-KR"
Content-transfer-encoding: quoted-printable
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] Updating the -04 draft of 2560bis (was Re:  2560bis)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 16:44:17 -0000

I agree with Santosh here that RFC 2560 provided mechanisms for crypto
binding, it just failed to be clear enough on the subject.

More importantly, this is how OCSP is implemented, thus the update need to
reflect that.
The 05 draft has a paragraph in section 4.2.2.2 (2nd paragraph) that deals
with client behavior.

The principle for authorized responders being. Clients MUST recognize OCSP
certs issued by the same CA key as issued the cert being checked. Clients
MAY recognize OCSP certs issued by the CA using a different key.

The wording may not be perfect (suggestions are welcome) but in principle
I think this provides what you ask for.

/Stefan



On 12-07-30 9:18 AM, "Santosh Chokhani" <SChokhani@cygnacom.com> wrote:

>David,
>
>The problem with saying these problems are not unique OCSP is somewhat
>misleading.  While what you say is true, draft 04 took an explicit step
>away from crypto binding (which is implicit and explicit in places in
>2560) and relied on names alone without discussing compensating controls.
>
>Thus, while the issue may be general, for a bis to be in the right
>direction from the current RFC, it needs to address it or point to a
>document that addresses it.  Thus, this is something that needs to be
>integral to 2560 bis strategy, be it in the document or in a separate
>guidance that bis cites.
>
>In terms of working on such item, if the WG is in favor of it and the WG
>chairs want me to, I am happy to work on it with you.
>
>-----Original Message-----
>From: David A. Cooper [mailto:david.cooper@nist.gov]
>Sent: Monday, July 30, 2012 11:59 AM
>To: Santosh Chokhani
>Cc: pkix
>Subject: Updating the -04 draft of 2560bis (was Re: [pkix] 2560bis)
>
>Santosh,
>
>I believe that I found the message to which you are referring.  As you
>noted in your message, these issues are not particular to OCSP, but are
>relevant to X.509-based PKIs in general.  The issues also apply, for
>example, to the processing of CRLs and to attribute certificates.  At the
>time, I suggested addressing things like this by writing a separate
>document that describes best practices for both issuers and relying
>parties, not just for OCSP, but for the PKI in general.  I said that I
>would be willing to work on such a document, but got no responses to that
>suggestion.
>
>As for 2560bis, I certainly want to do my best to address everyone's
>concerns, but I can only do so within the mandate that I was given to not
>make any changes to the protocol.
>
>Dave
>
>On 07/30/2012 10:28 AM, Santosh Chokhani wrote:
>> David,
>>
>> I am willing to support you on Option B.  I do not recall if this was
>>in our private conversation only or in the PKIX post, but in order for
>>that to work, you need to discuss how the client need to enforce the
>>various trust models you present in the annex(es) and how that relates
>>to gaining crypto binding since name uniqueness is not guaranteed.
>>
>> -----Original Message-----
>> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf
>> Of David A. Cooper
>> Sent: Monday, July 30, 2012 10:07 AM
>> To: pkix
>> Subject: Re: [pkix] 2560bis
>>
>> Voting for B.
>>
>> As primary author of the -04 draft, I am willing to work to bring that
>>draft to completion, following the "Way forward" that Stefan described
>>in the final slide of his presentation as the March meeting:
>>
>> ? Resolve the designated responder clarification ? Final review?
>> ? WG-=A1=A9-LC
>>
>> ? Let=A1=AFs get this over with.
>>
>>
>>
>> On 07/29/2012 10:56 PM, Stefan Santesson wrote:
>>> Voting for A.
>>>
>>>
>>> Clarifications.
>>>
>>> The approach of A is to start from the original 2560 RFC and only fix
>>> what is "broken" or clearly needed, include errata's and include the
>>> published OCSP algorithm agility RFC.
>>> The 05 draft is a starting point where I have included all the
>>> advertised fixes of 04, without rewriting the whole OCSP spec.
>>>
>>> If anyone now feels that anything is missing (like Santosh
>>> advertised), then we can discuss adding more stuff, but any stuff
>>> added/clarified must be motivated and agreed.
>>>
>>> Proceeding with alternative B probably also includes finding an
>>> author that is prepared to bring the 04 draft to completion.
>>> At present I doubt that I can take on doing that given the opposition
>>> (including my own) of the 04 draft approach.
>>>
>>> Steve and I have agreed to submit the 05 version tomorrow (to make it
>>> more accessible). If the WG decides to go ahead with option B, then
>>> 04 can be resubmitted as 06.
>>> Until then the 05 draft is available here:
>>> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.t
>>> x
>>> t
>>>
>>>
>>>
>>> /Stefan
>>>   =20
>>>
>>>
>>> On 12-07-29 10:13 AM, "Stephen Kent" <kent@bbn.com> wrote:
>>>
>>>> Folks,
>>>>
>>>> Recent messages exchanges point to significant disagreement about
>>>> the future direction for this doc. At the March meeting Stefan
>>>> presented a proposal for how to move ahead, as outlined in his
>>>> slides. As noted in the minutes, the audience (at the mic) included
>>>> one indication of support for this streamlined approach, and one
>>>>expression of concern.
>>>> Not a lot of interest.
>>>>
>>>> Work on this doc has dragged on for 2 years now. In October of 2011
>>>> Santosh argued that version -04 of the doc was, in his opinion, a
>>>> step backwards, adding more confusion to RFC 2560 vs. clarifying it.
>>>> Stefan agreed (in a message in March of 2012), and thus he created
>>>> the current, stripped-down version of the doc (-05) which was
>>>> published recently.
>>>>
>>>> Given the mixed response to this version, it's not clear that the WG
>>>> members who are interested in OCSP clarifications are in agreement
>>>> on how to proceed.
>>>>
>>>> So, let's begin a straw poll on the topic.  Here are the options I
>>>> am
>>>> offering:
>>>>
>>>>       A - continue to work with the -05 version as the basis for an
>>>>RFC
>>>>       B - revert to the -04 version as the basis for an RFC
>>>>       C - don't publish a clarifications document for OCSP
>>>>       D - the respondent volunteers to work on a new version of
>>>> 2560bis
>>>>
>>>> Please send your replies to the list starting now. The straw poll
>>>> will close in two weeks, on August 12. While there are many other,
>>>> legitimate comments one could offer, I am interested only in replies
>>>> to this multiple choice straw poll (i.e., no essay replies :-) )
>>>>
>>>> Thanks,
>>>>
>>>> Steve
>>>>
>_______________________________________________
>pkix mailing list
>pkix@ietf.org
>https://www.ietf.org/mailman/listinfo/pkix



From stefan@aaa-sec.com  Mon Jul 30 09:49:28 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A608A11E8101 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:49:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.765
X-Spam-Level: 
X-Spam-Status: No, score=-102.765 tagged_above=-999 required=5 tests=[AWL=0.484, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EhmpEx0dY6FV for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:49:28 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id ED4C811E80E1 for <pkix@ietf.org>; Mon, 30 Jul 2012 09:49:27 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id CF0DE1D24683 for <pkix@ietf.org>; Mon, 30 Jul 2012 18:49:26 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id N5Io-id92YMp for <pkix@ietf.org>; Mon, 30 Jul 2012 18:49:26 +0200 (CEST)
Received: from s329.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 9DC8C1D24576 for <pkix@ietf.org>; Mon, 30 Jul 2012 18:49:26 +0200 (CEST)
Received: (qmail 17229 invoked from network); 30 Jul 2012 16:49:25 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.203]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s329.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <stefan@aaa-sec.com>; 30 Jul 2012 16:49:25 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 30 Jul 2012 09:49:17 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: Stefan Santesson <stefan@aaa-sec.com>, <pkix@ietf.org>
Message-ID: <CC3C08F8.49F1D%stefan@aaa-sec.com>
Thread-Topic: [pkix] Agenda posed
In-Reply-To: <CC3320B9.480D2%stefan@aaa-sec.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Subject: Re: [pkix] Agenda posed
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 16:49:28 -0000

The final agenda has been posted:
http://www.ietf.org/proceedings/84/agenda/agenda-84-pkix

/Stefan


On 12-07-23 3:40 PM, "Stefan Santesson" <stefan@aaa-sec.com> wrote:

>Agenda for Vancouver is up:
>http://www.ietf.org/proceedings/84/agenda/agenda-84-pkix
>
>Please let me know if I missed anything.
>
>/Stefan
>
>
>_______________________________________________
>pkix mailing list
>pkix@ietf.org
>https://www.ietf.org/mailman/listinfo/pkix



From peter.sylvester@edelweb.fr  Mon Jul 30 09:56:10 2012
Return-Path: <peter.sylvester@edelweb.fr>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21B7011E80F6 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:56:10 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.449
X-Spam-Level: 
X-Spam-Status: No, score=-1.449 tagged_above=-999 required=5 tests=[AWL=-1.150, BAYES_00=-2.599, MANGLED_YOUR=2.3]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JnvfUJmtUgp1 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 09:56:09 -0700 (PDT)
Received: from mx1.on-x.com (mx1.on-x.com [92.103.215.13]) by ietfa.amsl.com (Postfix) with ESMTP id 8708311E8087 for <pkix@ietf.org>; Mon, 30 Jul 2012 09:56:09 -0700 (PDT)
Received: from varuna.puteaux.on-x (varuna.puteaux.on-x [192.168.10.6]) by mx1.on-x.com (Postfix) with ESMTP id ADDDC5F404; Mon, 30 Jul 2012 18:54:19 +0200 (CEST)
Received: from smtps.on-x.com (mintaka.puteaux.on-x [192.168.14.11]) by varuna.puteaux.on-x (Postfix) with ESMTP id 70C6C847482; Mon, 30 Jul 2012 18:30:27 +0200 (CEST)
Received: from [192.168.18.180] (unknown [192.168.18.180]) by smtps.on-x.com (Postfix) with ESMTPSA id 91690236338; Mon, 30 Jul 2012 12:34:33 -0400 (EDT)
Message-ID: <5016BCBA.4010105@edelweb.fr>
Date: Mon, 30 Jul 2012 18:56:26 +0200
From: Peter Sylvester <peter.sylvester@edelweb.fr>
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:14.0) Gecko/20120714 Thunderbird/14.0
MIME-Version: 1.0
To: Stephen Kent <kent@bbn.com>
References: <50157EF6.2000102@bbn.com> <F253C3DC-07ED-41F8-B22D-6EEBFBDD4E9B@vpnc.org> <50169905.9050100@edelweb.fr> <5016B676.2010300@bbn.com>
In-Reply-To: <5016B676.2010300@bbn.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: PKIX <pkix@ietf.org>
Subject: Re: [pkix] resolving an outstanding issue for 5280bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 16:56:10 -0000

On 07/30/2012 06:29 PM, Stephen Kent wrote:
> Peter,
>
> I think an example here is important, especially because the example 
> is what has motivated
> this change. 
I am not against an example.

> I have reworded the text to say that the example is out of scope 
> rather than
> "not inconsistent ..." (But, if something is out of scope, then it is 
> not inconsistent with
> the spec :-) , logically.)
Making a consistency statement about something outside your theory is 
not always
possible, in fact, in general, it is impossible. If you declare 
something out of scope,
then you don't want to make any statement, if you say it is not 
inconsistent,
you have enlarged the scope.

> Y
> our suggested wording is not attractive to me, since it 
> anthropomorphizes the web server,
> and says nothing about RP behavior.
What about

"For example a web server or client may use a self-signed certificate
   as a means to identify itself. It is out of scope how an RP
   authenticates information presented in this form."

>
> I hope the new wording (see my reply to Paul) is more acceptable.

There was a word 'identity' instead of 'identify', but the server wants
to have its identity authenticated.
>
/P

From kent@bbn.com  Mon Jul 30 10:07:38 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE32721F8587 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 10:07:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.449
X-Spam-Level: 
X-Spam-Status: No, score=-106.449 tagged_above=-999 required=5 tests=[AWL=0.150, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aKJwAFn80VKg for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 10:07:37 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.1.81]) by ietfa.amsl.com (Postfix) with ESMTP id 5F45321F8577 for <pkix@ietf.org>; Mon, 30 Jul 2012 10:07:30 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:50132 helo=COMSEC.local) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1SvtRG-0001wY-2A; Mon, 30 Jul 2012 13:07:26 -0400
Message-ID: <5016BF4D.20201@bbn.com>
Date: Mon, 30 Jul 2012 13:07:25 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: Peter Sylvester <peter.sylvester@edelweb.fr>
References: <50157EF6.2000102@bbn.com> <F253C3DC-07ED-41F8-B22D-6EEBFBDD4E9B@vpnc.org> <50169905.9050100@edelweb.fr> <5016B676.2010300@bbn.com> <5016BCBA.4010105@edelweb.fr>
In-Reply-To: <5016BCBA.4010105@edelweb.fr>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: PKIX <pkix@ietf.org>
Subject: Re: [pkix] resolving an outstanding issue for 5280bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 17:07:39 -0000

Peter,
>> I have reworded the text to say that the example is out of scope 
>> rather than
>> "not inconsistent ..." (But, if something is out of scope, then it is 
>> not inconsistent with
>> the spec :-) , logically.)
> Making a consistency statement about something outside your theory is 
> not always
> possible, in fact, in general, it is impossible. If you declare 
> something out of scope,
> then you don't want to make any statement, if you say it is not 
> inconsistent,
> you have enlarged the scope.
we have different understandings of logic here, but it's not relevant to 
the new text
so we ought to move on.
> What about
>
> "For example a web server or client may use a self-signed certificate
>   as a means to identify itself. It is out of scope how an RP
>   authenticates information presented in this form."
I like some aspects of your text. I'll think about it.
> I hope the new wording (see my reply to Paul) is more acceptable.
>
> There was a word 'identity' instead of 'identify', but the server wants
> to have its identity authenticated.
The server doesn't "want" anything. The people operating the server want 
something :-) .

Steve


From david.cooper@nist.gov  Mon Jul 30 10:52:18 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B03C11E8115 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 10:52:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.371
X-Spam-Level: 
X-Spam-Status: No, score=-6.371 tagged_above=-999 required=5 tests=[AWL=0.228,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YEjzBEUwDi6G for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 10:52:17 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id A711911E8118 for <pkix@ietf.org>; Mon, 30 Jul 2012 10:52:16 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Mon, 30 Jul 2012 13:52:07 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Mon, 30 Jul 2012 13:51:25 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6UHqCoX005559; Mon, 30 Jul 2012 13:52:15 -0400
Message-ID: <5016C9CC.7060803@nist.gov>
Date: Mon, 30 Jul 2012 13:52:12 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: Stefan Santesson <stefan@aaa-sec.com>
References: <CC3C0594.49F06%stefan@aaa-sec.com>
In-Reply-To: <CC3C0594.49F06%stefan@aaa-sec.com>
Content-Type: text/plain; charset="windows-1252"; format=flowed
Content-Transfer-Encoding: 8bit
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] Updating the -04 draft of 2560bis (was Re:  2560bis)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 17:52:18 -0000

Stefan,

As I stated in a previous message 
(http://www.ietf.org/mail-archive/web/pkix/current/msg31423.html), I 
believe there is a bit of miscommunication here.

RFC 2560 imposes a requirement of "same CA," and your draft doesn't 
change that. What it does say in Section 4.2.2.2 is that "The CA SHOULD 
use the same issuing key...." In other words, it is not a violation of 
the protocol to use different keys, but it isn't a good idea either.

In the -04 draft, I didn't include any conformance requirements in this 
area (such as you propose in the second paragraph of Section 4.2.2.2 of 
the -05 draft) since there were no conformance requirements in RFC 2560, 
and I was mandated not to make any changes. However, I came as close to 
saying "SHOULD use the same key" as I thought that I could without 
violating the "no changes" mandate. I included notes that warned issuers 
that use of different keys would cause interoperability problems since 
some clients would be unable to process such responses, and I included 
an example in Appendix E to show how a CA could perform a key rollover 
while continuing to work with clients that require the target 
certificate and the OCSP responder certificate to be signed using the 
same key.

I'm not against what you wrote in Section 4.2.2.2 of the -05 draft, as 
it is not inconsistent with RFC 2560. However, it is a change from RFC 
2560 since it is specifying conformance requirements and RFC 2560 didn't 
specify any.

Dave

On 07/30/2012 12:44 PM, Stefan Santesson wrote:
> I agree with Santosh here that RFC 2560 provided mechanisms for crypto
> binding, it just failed to be clear enough on the subject.
>
> More importantly, this is how OCSP is implemented, thus the update need to
> reflect that.
> The 05 draft has a paragraph in section 4.2.2.2 (2nd paragraph) that deals
> with client behavior.
>
> The principle for authorized responders being. Clients MUST recognize OCSP
> certs issued by the same CA key as issued the cert being checked. Clients
> MAY recognize OCSP certs issued by the CA using a different key.
>
> The wording may not be perfect (suggestions are welcome) but in principle
> I think this provides what you ask for.
>
> /Stefan
>
>
>
> On 12-07-30 9:18 AM, "Santosh Chokhani" <SChokhani@cygnacom.com> wrote:
>
>> David,
>>
>> The problem with saying these problems are not unique OCSP is somewhat
>> misleading.  While what you say is true, draft 04 took an explicit step
>> away from crypto binding (which is implicit and explicit in places in
>> 2560) and relied on names alone without discussing compensating controls.
>>
>> Thus, while the issue may be general, for a bis to be in the right
>> direction from the current RFC, it needs to address it or point to a
>> document that addresses it.  Thus, this is something that needs to be
>> integral to 2560 bis strategy, be it in the document or in a separate
>> guidance that bis cites.
>>
>> In terms of working on such item, if the WG is in favor of it and the WG
>> chairs want me to, I am happy to work on it with you.
>>
>> -----Original Message-----
>> From: David A. Cooper [mailto:david.cooper@nist.gov]
>> Sent: Monday, July 30, 2012 11:59 AM
>> To: Santosh Chokhani
>> Cc: pkix
>> Subject: Updating the -04 draft of 2560bis (was Re: [pkix] 2560bis)
>>
>> Santosh,
>>
>> I believe that I found the message to which you are referring.  As you
>> noted in your message, these issues are not particular to OCSP, but are
>> relevant to X.509-based PKIs in general.  The issues also apply, for
>> example, to the processing of CRLs and to attribute certificates.  At the
>> time, I suggested addressing things like this by writing a separate
>> document that describes best practices for both issuers and relying
>> parties, not just for OCSP, but for the PKI in general.  I said that I
>> would be willing to work on such a document, but got no responses to that
>> suggestion.
>>
>> As for 2560bis, I certainly want to do my best to address everyone's
>> concerns, but I can only do so within the mandate that I was given to not
>> make any changes to the protocol.
>>
>> Dave
>>
>> On 07/30/2012 10:28 AM, Santosh Chokhani wrote:
>>> David,
>>>
>>> I am willing to support you on Option B.  I do not recall if this was
>>> in our private conversation only or in the PKIX post, but in order for
>>> that to work, you need to discuss how the client need to enforce the
>>> various trust models you present in the annex(es) and how that relates
>>> to gaining crypto binding since name uniqueness is not guaranteed.
>>>
>>> -----Original Message-----
>>> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf
>>> Of David A. Cooper
>>> Sent: Monday, July 30, 2012 10:07 AM
>>> To: pkix
>>> Subject: Re: [pkix] 2560bis
>>>
>>> Voting for B.
>>>
>>> As primary author of the -04 draft, I am willing to work to bring that
>>> draft to completion, following the "Way forward" that Stefan described
>>> in the final slide of his presentation as the March meeting:
>>>
>>> ? Resolve the designated responder clarification ? Final review?
>>> ? WG-­-LC
>>>
>>> ? Let’s get this over with.
>>>
>>>
>>>
>>> On 07/29/2012 10:56 PM, Stefan Santesson wrote:
>>>> Voting for A.
>>>>
>>>>
>>>> Clarifications.
>>>>
>>>> The approach of A is to start from the original 2560 RFC and only fix
>>>> what is "broken" or clearly needed, include errata's and include the
>>>> published OCSP algorithm agility RFC.
>>>> The 05 draft is a starting point where I have included all the
>>>> advertised fixes of 04, without rewriting the whole OCSP spec.
>>>>
>>>> If anyone now feels that anything is missing (like Santosh
>>>> advertised), then we can discuss adding more stuff, but any stuff
>>>> added/clarified must be motivated and agreed.
>>>>
>>>> Proceeding with alternative B probably also includes finding an
>>>> author that is prepared to bring the 04 draft to completion.
>>>> At present I doubt that I can take on doing that given the opposition
>>>> (including my own) of the 04 draft approach.
>>>>
>>>> Steve and I have agreed to submit the 05 version tomorrow (to make it
>>>> more accessible). If the WG decides to go ahead with option B, then
>>>> 04 can be resubmitted as 06.
>>>> Until then the 05 draft is available here:
>>>> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.t
>>>> x
>>>> t
>>>>
>>>>
>>>>
>>>> /Stefan
>>>>     
>>>>
>>>>
>>>> On 12-07-29 10:13 AM, "Stephen Kent" <kent@bbn.com> wrote:
>>>>
>>>>> Folks,
>>>>>
>>>>> Recent messages exchanges point to significant disagreement about
>>>>> the future direction for this doc. At the March meeting Stefan
>>>>> presented a proposal for how to move ahead, as outlined in his
>>>>> slides. As noted in the minutes, the audience (at the mic) included
>>>>> one indication of support for this streamlined approach, and one
>>>>> expression of concern.
>>>>> Not a lot of interest.
>>>>>
>>>>> Work on this doc has dragged on for 2 years now. In October of 2011
>>>>> Santosh argued that version -04 of the doc was, in his opinion, a
>>>>> step backwards, adding more confusion to RFC 2560 vs. clarifying it.
>>>>> Stefan agreed (in a message in March of 2012), and thus he created
>>>>> the current, stripped-down version of the doc (-05) which was
>>>>> published recently.
>>>>>
>>>>> Given the mixed response to this version, it's not clear that the WG
>>>>> members who are interested in OCSP clarifications are in agreement
>>>>> on how to proceed.
>>>>>
>>>>> So, let's begin a straw poll on the topic.  Here are the options I
>>>>> am
>>>>> offering:
>>>>>
>>>>>        A - continue to work with the -05 version as the basis for an
>>>>> RFC
>>>>>        B - revert to the -04 version as the basis for an RFC
>>>>>        C - don't publish a clarifications document for OCSP
>>>>>        D - the respondent volunteers to work on a new version of
>>>>> 2560bis
>>>>>
>>>>> Please send your replies to the list starting now. The straw poll
>>>>> will close in two weeks, on August 12. While there are many other,
>>>>> legitimate comments one could offer, I am interested only in replies
>>>>> to this multiple choice straw poll (i.e., no essay replies :-) )
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Steve
>>>>>
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>


From stefan@aaa-sec.com  Mon Jul 30 11:38:26 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C7F1B11E80E8 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 11:38:26 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.834
X-Spam-Level: 
X-Spam-Status: No, score=-102.834 tagged_above=-999 required=5 tests=[AWL=0.415, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DltNLyNq6HoP for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 11:38:25 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 664BC11E80E0 for <pkix@ietf.org>; Mon, 30 Jul 2012 11:38:25 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 5DA421D24F89 for <pkix@ietf.org>; Mon, 30 Jul 2012 20:38:24 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id gf0P0JC65S7a for <pkix@ietf.org>; Mon, 30 Jul 2012 20:38:23 +0200 (CEST)
Received: from s327.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 9D4E81D24FB8 for <pkix@ietf.org>; Mon, 30 Jul 2012 20:38:23 +0200 (CEST)
Received: (qmail 83746 invoked from network); 30 Jul 2012 18:38:20 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.206]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s327.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <david.cooper@nist.gov>; 30 Jul 2012 18:38:20 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 30 Jul 2012 11:38:04 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: "David A. Cooper" <david.cooper@nist.gov>
Message-ID: <CC3C20AD.49F55%stefan@aaa-sec.com>
Thread-Topic: [pkix] Updating the -04 draft of 2560bis (was Re:  2560bis)
In-Reply-To: <5016C9CC.7060803@nist.gov>
Mime-version: 1.0
Content-type: text/plain; charset="EUC-KR"
Content-transfer-encoding: quoted-printable
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] Updating the -04 draft of 2560bis (was Re:  2560bis)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 18:38:26 -0000

I view it as a clarification, as it is consistent with the general
perceived intention of the standard and consistent with current deployment.

The clarification is necessary for OSCP response providers. They need this
to know what configuration they have reason to expect to work with
compliant clients.
That is, issue from the same key and it works. If you don't, you can't
expect it to work.

The clarifications is necessary for clients to know why they are required
to support.

Hence the clarification is necessary.

/Stefan

On 12-07-30 10:52 AM, "David A. Cooper" <david.cooper@nist.gov> wrote:

>Stefan,
>
>As I stated in a previous message
>(http://www.ietf.org/mail-archive/web/pkix/current/msg31423.html), I
>believe there is a bit of miscommunication here.
>
>RFC 2560 imposes a requirement of "same CA," and your draft doesn't
>change that. What it does say in Section 4.2.2.2 is that "The CA SHOULD
>use the same issuing key...." In other words, it is not a violation of
>the protocol to use different keys, but it isn't a good idea either.
>
>In the -04 draft, I didn't include any conformance requirements in this
>area (such as you propose in the second paragraph of Section 4.2.2.2 of
>the -05 draft) since there were no conformance requirements in RFC 2560,
>and I was mandated not to make any changes. However, I came as close to
>saying "SHOULD use the same key" as I thought that I could without
>violating the "no changes" mandate. I included notes that warned issuers
>that use of different keys would cause interoperability problems since
>some clients would be unable to process such responses, and I included
>an example in Appendix E to show how a CA could perform a key rollover
>while continuing to work with clients that require the target
>certificate and the OCSP responder certificate to be signed using the
>same key.
>
>I'm not against what you wrote in Section 4.2.2.2 of the -05 draft, as
>it is not inconsistent with RFC 2560. However, it is a change from RFC
>2560 since it is specifying conformance requirements and RFC 2560 didn't
>specify any.
>
>Dave
>
>On 07/30/2012 12:44 PM, Stefan Santesson wrote:
>> I agree with Santosh here that RFC 2560 provided mechanisms for crypto
>> binding, it just failed to be clear enough on the subject.
>>
>> More importantly, this is how OCSP is implemented, thus the update need
>>to
>> reflect that.
>> The 05 draft has a paragraph in section 4.2.2.2 (2nd paragraph) that
>>deals
>> with client behavior.
>>
>> The principle for authorized responders being. Clients MUST recognize
>>OCSP
>> certs issued by the same CA key as issued the cert being checked.
>>Clients
>> MAY recognize OCSP certs issued by the CA using a different key.
>>
>> The wording may not be perfect (suggestions are welcome) but in
>>principle
>> I think this provides what you ask for.
>>
>> /Stefan
>>
>>
>>
>> On 12-07-30 9:18 AM, "Santosh Chokhani" <SChokhani@cygnacom.com> wrote:
>>
>>> David,
>>>
>>> The problem with saying these problems are not unique OCSP is somewhat
>>> misleading.  While what you say is true, draft 04 took an explicit step
>>> away from crypto binding (which is implicit and explicit in places in
>>> 2560) and relied on names alone without discussing compensating
>>>controls.
>>>
>>> Thus, while the issue may be general, for a bis to be in the right
>>> direction from the current RFC, it needs to address it or point to a
>>> document that addresses it.  Thus, this is something that needs to be
>>> integral to 2560 bis strategy, be it in the document or in a separate
>>> guidance that bis cites.
>>>
>>> In terms of working on such item, if the WG is in favor of it and the
>>>WG
>>> chairs want me to, I am happy to work on it with you.
>>>
>>> -----Original Message-----
>>> From: David A. Cooper [mailto:david.cooper@nist.gov]
>>> Sent: Monday, July 30, 2012 11:59 AM
>>> To: Santosh Chokhani
>>> Cc: pkix
>>> Subject: Updating the -04 draft of 2560bis (was Re: [pkix] 2560bis)
>>>
>>> Santosh,
>>>
>>> I believe that I found the message to which you are referring.  As you
>>> noted in your message, these issues are not particular to OCSP, but are
>>> relevant to X.509-based PKIs in general.  The issues also apply, for
>>> example, to the processing of CRLs and to attribute certificates.  At
>>>the
>>> time, I suggested addressing things like this by writing a separate
>>> document that describes best practices for both issuers and relying
>>> parties, not just for OCSP, but for the PKI in general.  I said that I
>>> would be willing to work on such a document, but got no responses to
>>>that
>>> suggestion.
>>>
>>> As for 2560bis, I certainly want to do my best to address everyone's
>>> concerns, but I can only do so within the mandate that I was given to
>>>not
>>> make any changes to the protocol.
>>>
>>> Dave
>>>
>>> On 07/30/2012 10:28 AM, Santosh Chokhani wrote:
>>>> David,
>>>>
>>>> I am willing to support you on Option B.  I do not recall if this was
>>>> in our private conversation only or in the PKIX post, but in order for
>>>> that to work, you need to discuss how the client need to enforce the
>>>> various trust models you present in the annex(es) and how that relates
>>>> to gaining crypto binding since name uniqueness is not guaranteed.
>>>>
>>>> -----Original Message-----
>>>> From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf
>>>> Of David A. Cooper
>>>> Sent: Monday, July 30, 2012 10:07 AM
>>>> To: pkix
>>>> Subject: Re: [pkix] 2560bis
>>>>
>>>> Voting for B.
>>>>
>>>> As primary author of the -04 draft, I am willing to work to bring that
>>>> draft to completion, following the "Way forward" that Stefan described
>>>> in the final slide of his presentation as the March meeting:
>>>>
>>>> ? Resolve the designated responder clarification ? Final review?
>>>> ? WG-=A1=A9-LC
>>>>
>>>> ? Let=A1=AFs get this over with.
>>>>
>>>>
>>>>
>>>> On 07/29/2012 10:56 PM, Stefan Santesson wrote:
>>>>> Voting for A.
>>>>>
>>>>>
>>>>> Clarifications.
>>>>>
>>>>> The approach of A is to start from the original 2560 RFC and only fix
>>>>> what is "broken" or clearly needed, include errata's and include the
>>>>> published OCSP algorithm agility RFC.
>>>>> The 05 draft is a starting point where I have included all the
>>>>> advertised fixes of 04, without rewriting the whole OCSP spec.
>>>>>
>>>>> If anyone now feels that anything is missing (like Santosh
>>>>> advertised), then we can discuss adding more stuff, but any stuff
>>>>> added/clarified must be motivated and agreed.
>>>>>
>>>>> Proceeding with alternative B probably also includes finding an
>>>>> author that is prepared to bring the 04 draft to completion.
>>>>> At present I doubt that I can take on doing that given the opposition
>>>>> (including my own) of the 04 draft approach.
>>>>>
>>>>> Steve and I have agreed to submit the 05 version tomorrow (to make it
>>>>> more accessible). If the WG decides to go ahead with option B, then
>>>>> 04 can be resubmitted as 06.
>>>>> Until then the 05 draft is available here:
>>>>> http://aaa-sec.com/ietf/rfc2560bis/draft-ietf-pkix-rfc2560bis-05_03.t
>>>>> x
>>>>> t
>>>>>
>>>>>
>>>>>
>>>>> /Stefan
>>>>>    =20
>>>>>
>>>>>
>>>>> On 12-07-29 10:13 AM, "Stephen Kent" <kent@bbn.com> wrote:
>>>>>
>>>>>> Folks,
>>>>>>
>>>>>> Recent messages exchanges point to significant disagreement about
>>>>>> the future direction for this doc. At the March meeting Stefan
>>>>>> presented a proposal for how to move ahead, as outlined in his
>>>>>> slides. As noted in the minutes, the audience (at the mic) included
>>>>>> one indication of support for this streamlined approach, and one
>>>>>> expression of concern.
>>>>>> Not a lot of interest.
>>>>>>
>>>>>> Work on this doc has dragged on for 2 years now. In October of 2011
>>>>>> Santosh argued that version -04 of the doc was, in his opinion, a
>>>>>> step backwards, adding more confusion to RFC 2560 vs. clarifying it.
>>>>>> Stefan agreed (in a message in March of 2012), and thus he created
>>>>>> the current, stripped-down version of the doc (-05) which was
>>>>>> published recently.
>>>>>>
>>>>>> Given the mixed response to this version, it's not clear that the WG
>>>>>> members who are interested in OCSP clarifications are in agreement
>>>>>> on how to proceed.
>>>>>>
>>>>>> So, let's begin a straw poll on the topic.  Here are the options I
>>>>>> am
>>>>>> offering:
>>>>>>
>>>>>>        A - continue to work with the -05 version as the basis for an
>>>>>> RFC
>>>>>>        B - revert to the -04 version as the basis for an RFC
>>>>>>        C - don't publish a clarifications document for OCSP
>>>>>>        D - the respondent volunteers to work on a new version of
>>>>>> 2560bis
>>>>>>
>>>>>> Please send your replies to the list starting now. The straw poll
>>>>>> will close in two weeks, on August 12. While there are many other,
>>>>>> legitimate comments one could offer, I am interested only in replies
>>>>>> to this multiple choice straw poll (i.e., no essay replies :-) )
>>>>>>
>>>>>> Thanks,
>>>>>>
>>>>>> Steve
>>>>>>
>>> _______________________________________________
>>> pkix mailing list
>>> pkix@ietf.org
>>> https://www.ietf.org/mailman/listinfo/pkix
>>
>



From stefan@aaa-sec.com  Mon Jul 30 12:04:49 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 349FD11E817B for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 12:04:49 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.886
X-Spam-Level: 
X-Spam-Status: No, score=-102.886 tagged_above=-999 required=5 tests=[AWL=0.363, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lWapnFmdS4VJ for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 12:04:48 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 495D811E815E for <pkix@ietf.org>; Mon, 30 Jul 2012 12:04:48 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id A641F1D251BC for <pkix@ietf.org>; Mon, 30 Jul 2012 21:04:47 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id XRpwvJzX5MFR for <pkix@ietf.org>; Mon, 30 Jul 2012 21:04:47 +0200 (CEST)
Received: from s329.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 47F441D251B5 for <pkix@ietf.org>; Mon, 30 Jul 2012 21:04:47 +0200 (CEST)
Received: (qmail 55816 invoked from network); 30 Jul 2012 19:04:46 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.206]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s329.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <mattking1@gmail.com>; 30 Jul 2012 19:04:46 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 30 Jul 2012 12:04:40 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: Matt King <mattking1@gmail.com>, <pkix@ietf.org>
Message-ID: <CC3C258A.49F6C%stefan@aaa-sec.com>
Thread-Topic: [pkix] Updated claimSigning EKU Internet Draft
In-Reply-To: <CAF4=xaGo+sFY=DvWQjugFTnNo6ZxjxOn2XazXxJ60BXKLhTxbg@mail.gmail.com>
Mime-version: 1.0
Content-type: text/plain; charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 19:04:49 -0000

I have a number of issues/questions regarding this draft (still).

1) Definition of "Claim"
This EKU is said to state that the subject is appropriate to sign
"claims", but the draft does not make an effort to define what a claim is.
It provides the examples SAML assertions and Attribute Assertions, but
does not state what else could be regarded as a claim.
Thus this EKU could be used for virtually anything in absence of a clear
definition.

2) Explain when this EKU is needed, relative to metadata and
pre-configured trust.
The only examples are SAML. In SAML it is common to either preconfigure
trust in assertion signers, removing the need for an EKU, or by placing
the cert in signed metadata also removing the need for an EKU. What are
the particular use-case where you would neither use metadata, nor
pre-configured trust?
A clarification of this would help the reader to understand when this EKU
is appropriate.

3) Discussion about assurance levels and policy OIDs.
When would you convey information about assurance level of an assertion in
a certificate policy of the signing certificate?
Information about assurance level is provided in SAML requests and
responses.
Information about what assurance level the IdP is trusted to provide
(certified for) is normally provided in signed metadata (SAML) or may be
implicit in the case of pre-configured trust.
When would it be appropriate to solve this using cert policies?
Is there any deployed examples of this?


/Stefan






On 12-07-26 9:50 AM, "Matt King" <mattking1@gmail.com> wrote:

>Dear PKIX Members
>
>Patrick Patterson and I respectfully submit the updated claimSigning
>EKU internet draft titled =B3draft-king-pkix-claimsigning-extn-0.txt=B2
>(abstract below and updated version attached) for your review prior to
>our discussion at next week's PKIX WG meeting.
>
>We have addressed comments provided in the March meeting and believe
>this version is ready to move forward.
>
>I will post this version using the I-D Submission Tool on July 30th.
>
>Abstract
>
>   This document specifies an Extended Key Usage (EKU) value which
>   indicates that the certificate holder is authorized to sign security
>   tokens to assert claims, or attributes, about a subject.
>
>   When a certificate that asserts the claimSigning EKU signs a claim,
>   the owner of the service holding that certificate is asserting that a
>   statement about the subject is true. For example, a IdP secure token
>   service (STS) would use an X.509 certificate containing the
>   claimSigning EKU to sign SAML assertions containing an identifier and
>   attributes about a user. This EKU value would allow for a separation
>   between the designation that a given Identity belongs within a given
>   Federation, and the empowerment of that entity within the federation
>   to sign claims..  This approach allows for greater flexibility for
>   the operators of Federated systems and for Certification Authorities
>   and avoids the overloading of other, already established methods
>   (such as Assurance Level designation via certificatePolicy OID).
>
>Matt
>--
>Matt King
>Protiviti, Inc.
>Government Services
>Matthew.King@pgs.protiviti.com
>MattKing1@gmail.com
>410-271-5624 (Mobile)
>_______________________________________________
>pkix mailing list
>pkix@ietf.org
>https://www.ietf.org/mailman/listinfo/pkix



From stefan@aaa-sec.com  Mon Jul 30 12:06:51 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E234C11E8174 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 12:06:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.926
X-Spam-Level: 
X-Spam-Status: No, score=-102.926 tagged_above=-999 required=5 tests=[AWL=0.323, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MGQM3c1cHeFW for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 12:06:51 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 292A411E817B for <pkix@ietf.org>; Mon, 30 Jul 2012 12:06:51 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id C1CED1D25221 for <pkix@ietf.org>; Mon, 30 Jul 2012 21:06:48 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id fyqtXeHlUOt2 for <pkix@ietf.org>; Mon, 30 Jul 2012 21:06:48 +0200 (CEST)
Received: from s327.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 83E0B1D251DD for <pkix@ietf.org>; Mon, 30 Jul 2012 21:06:48 +0200 (CEST)
Received: (qmail 61144 invoked from network); 30 Jul 2012 19:06:47 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.206]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s327.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <stefan@aaa-sec.com>; 30 Jul 2012 19:06:47 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 30 Jul 2012 12:06:41 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: Stefan Santesson <stefan@aaa-sec.com>, "David A. Cooper" <david.cooper@nist.gov>
Message-ID: <CC3C2905.49F8C%stefan@aaa-sec.com>
Thread-Topic: [pkix] Updating the -04 draft of 2560bis (was Re:  2560bis)
In-Reply-To: <CC3C20AD.49F55%stefan@aaa-sec.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] Updating the -04 draft of 2560bis (was Re:  2560bis)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 19:06:52 -0000

Sorry, bad typo here:

On 12-07-30 11:38 AM, "Stefan Santesson" <stefan@aaa-sec.com> wrote:

>The clarifications is necessary for clients to know why they are required
>to support.


This should be:
The clarifications is necessary for clients to know what they are required
to support.



From stefan@aaa-sec.com  Mon Jul 30 14:18:38 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0E90311E80DB for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 14:18:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.26
X-Spam-Level: 
X-Spam-Status: No, score=-102.26 tagged_above=-999 required=5 tests=[AWL=-0.408, BAYES_00=-2.599, HELO_EQ_SE=0.35, HTML_MESSAGE=0.001, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lUnm4pUsS-Me for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 14:18:37 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 3627811E80DC for <pkix@ietf.org>; Mon, 30 Jul 2012 14:18:36 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id A95A81D25CC2 for <pkix@ietf.org>; Mon, 30 Jul 2012 23:18:35 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id WH1yTCfloRvv for <pkix@ietf.org>; Mon, 30 Jul 2012 23:18:34 +0200 (CEST)
Received: from s327.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id DB52F1D25CB4 for <pkix@ietf.org>; Mon, 30 Jul 2012 23:18:32 +0200 (CEST)
Received: (qmail 62787 invoked from network); 30 Jul 2012 21:18:32 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.204]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s327.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <denis.pinkas@bull.net>; 30 Jul 2012 21:18:32 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 30 Jul 2012 14:18:25 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: <denis.pinkas@bull.net>, "David A. Cooper" <david.cooper@nist.gov>
Message-ID: <CC3C46C1.49FB4%stefan@aaa-sec.com>
Thread-Topic: [pkix] RFC2560bis update
In-Reply-To: <OF854794A0.83F2154E-ONC1257A48.0053F82F-C1257A48.0054B99A@bull.net>
Mime-version: 1.0
Content-type: multipart/alternative; boundary="B_3426502712_11422732"
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 21:18:38 -0000

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3426502712_11422732
Content-type: text/plain;
	charset="US-ASCII"
Content-transfer-encoding: 7bit

This statement by Denis is one of the reasons why I believe it is better to
reduce the changes to what is necessary.

Changing the whole document structure may provide some advantages, but
brings more disadvantages.
Practically it makes it very hard for a reader to figure out what has
actually changed.

It also makes it a lot harder to process the document through the IETF as
people will disagree on whether the changes is actually better/more accurate
and whether they pose substantial changes that may render a compliant
implementer non-comformant.

Things are not black or white. I simply believe that doing minimal changes
to the original document serves the community best.
Don't fix what is not broken.

/Stefan


From:  <denis.pinkas@bull.net>
Date:  Friday, 27 July, 2012 8:25 AM
To:  "David A. Cooper" <david.cooper@nist.gov>
Cc:  "pkix@ietf.org" <pkix@ietf.org>
Subject:  Re: [pkix] RFC2560bis update

> However, I strongly disagree "that the draft was close to being done". Many
> changes still need to be done and several pages
> of the draft would need to be deleted.



--B_3426502712_11422732
Content-type: text/html;
	charset="US-ASCII"
Content-transfer-encoding: quoted-printable

<html><head></head><body style=3D"word-wrap: break-word; -webkit-nbsp-mode: s=
pace; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size:=
 14px; font-family: Calibri, sans-serif; "><div>This statement by Denis is o=
ne of the reasons why I believe it is better to reduce the changes to what i=
s necessary.</div><div><br></div><div>Changing the whole document structure =
may provide some advantages, but brings more disadvantages.</div><div>Practi=
cally it makes it very hard for a reader to figure out what has actually cha=
nged.</div><div><br></div><div>It also makes it a lot harder to process the =
document through the IETF as people will disagree on whether the changes is =
actually better/more accurate and whether they pose substantial changes that=
 may render a compliant implementer non-comformant.</div><div><br></div><div=
>Things are not black or white. I simply believe that doing minimal changes =
to the original document serves the community best.</div><div>Don't fix what=
 is not broken.</div><div><br></div><div>/Stefan</div><div><br></div><div><b=
r></div><span id=3D"OLK_SRC_BODY_SECTION"><div style=3D"font-family:Calibri; fon=
t-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDE=
R-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: =
0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: =
3pt"><span style=3D"font-weight:bold">From: </span> &lt;<a href=3D"mailto:denis.=
pinkas@bull.net">denis.pinkas@bull.net</a>&gt;<br><span style=3D"font-weight:b=
old">Date: </span> Friday, 27 July, 2012 8:25 AM<br><span style=3D"font-weight=
:bold">To: </span> "David A. Cooper" &lt;<a href=3D"mailto:david.cooper@nist.g=
ov">david.cooper@nist.gov</a>&gt;<br><span style=3D"font-weight:bold">Cc: </sp=
an> "<a href=3D"mailto:pkix@ietf.org">pkix@ietf.org</a>" &lt;<a href=3D"mailto:p=
kix@ietf.org">pkix@ietf.org</a>&gt;<br><span style=3D"font-weight:bold">Subjec=
t: </span> Re: [pkix] RFC2560bis update<br></div><div><br></div><blockquote =
id=3D"MAC_OUTLOOK_ATTRIBUTION_BLOCKQUOTE" style=3D"BORDER-LEFT: #b5c4df 5 solid;=
 PADDING:0 0 0 5; MARGIN:0 0 0 5;"><span class=3D"Apple-style-span" style=3D"bor=
der-collapse: separate; color: rgb(0, 0, 0); font-family: Calibri; font-styl=
e: normal; font-variant: normal; font-weight: normal; letter-spacing: normal=
; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0p=
x; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; =
-webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px=
; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; =
-webkit-text-stroke-width: 0px; font-size: medium; "><font size=3D"2" face=3D"Ar=
ial">However, I strongly disagree "that the draft was close to being done". =
Many changes still need to be done and several pages<span class=3D"Apple-conve=
rted-space">&nbsp;</span><br>of the draft would need to be deleted.</font><s=
pan class=3D"Apple-converted-space">&nbsp;</span></span></blockquote></span></=
body></html>

--B_3426502712_11422732--



From ppatterson@carillon.ca  Mon Jul 30 14:35:12 2012
Return-Path: <ppatterson@carillon.ca>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3C4911E812E for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 14:35:12 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OVXSuMSCm+o4 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 14:35:12 -0700 (PDT)
Received: from mail.carillon.ca (mail.carillon.ca [207.115.107.18]) by ietfa.amsl.com (Postfix) with ESMTP id F402511E812C for <pkix@ietf.org>; Mon, 30 Jul 2012 14:35:11 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.carillon.ca (Postfix) with ESMTP id 61D68A808A5; Mon, 30 Jul 2012 17:35:18 -0400 (EDT)
X-Virus-Scanned: Debian amavisd-new at rhea-new.carillon.ca
Received: from mail.carillon.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wkE8ub+fPQod; Mon, 30 Jul 2012 17:35:17 -0400 (EDT)
Received: from dhcp-11b8.meeting.ietf.org (dhcp-11b8.meeting.ietf.org [130.129.17.184]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.carillon.ca (Postfix) with ESMTPSA id 488A7A806FC; Mon, 30 Jul 2012 17:35:17 -0400 (EDT)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset=us-ascii
From: Patrick Patterson <ppatterson@carillon.ca>
In-Reply-To: <CC3C258A.49F6C%stefan@aaa-sec.com>
Date: Mon, 30 Jul 2012 17:35:09 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <03FF991A-8F2D-44F5-B77A-F5F0E49EA6C1@carillon.ca>
References: <CC3C258A.49F6C%stefan@aaa-sec.com>
To: Stefan Santesson <stefan@aaa-sec.com>
X-Mailer: Apple Mail (2.1084)
Cc: pkix@ietf.org
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 21:35:12 -0000

Hello Stefan:


On 2012-07-30, at 3:04 PM, Stefan Santesson wrote:

> I have a number of issues/questions regarding this draft (still).
>=20
> 1) Definition of "Claim"
> This EKU is said to state that the subject is appropriate to sign
> "claims", but the draft does not make an effort to define what a claim =
is.
> It provides the examples SAML assertions and Attribute Assertions, but
> does not state what else could be regarded as a claim.
> Thus this EKU could be used for virtually anything in absence of a =
clear
> definition.
>=20

Ok - I'll work with Matt to come up with this kind of wording.

> 2) Explain when this EKU is needed, relative to metadata and
> pre-configured trust.
> The only examples are SAML. In SAML it is common to either =
preconfigure
> trust in assertion signers, removing the need for an EKU, or by =
placing
> the cert in signed metadata also removing the need for an EKU. What =
are
> the particular use-case where you would neither use metadata, nor
> pre-configured trust?
> A clarification of this would help the reader to understand when this =
EKU
> is appropriate.
>=20

The necessity of this EKU does not mean that Federations do not use =
Metadata to exchange information regarding who is a trusted IDP in their =
environment. The main reason for this EKU is to allow a Certificate to =
be used by an IDP to sign claims. As we state in the draft, if we don't =
have this EKU, then we have to have a certificate that doesn't have an =
EKU value to sign claims. Unfortunately, due to recent events regarding =
the abuse of certificates asserting Key Usage values of digitalSignature =
and nonRepudiation, a number of policy authorities are mandating strict =
EKU values in all certificates asserting these key usage values, and =
mandating by policy that the anyEKU OID not be present. This means, that =
absent this EKU value, we can't have claims signed by IDPs using PKI =
Certificate credentials, due to strict RFC5280 enforcement.=20

> 3) Discussion about assurance levels and policy OIDs.
> When would you convey information about assurance level of an =
assertion in
> a certificate policy of the signing certificate?
> Information about assurance level is provided in SAML requests and
> responses.
> Information about what assurance level the IdP is trusted to provide
> (certified for) is normally provided in signed metadata (SAML) or may =
be
> implicit in the case of pre-configured trust.
> When would it be appropriate to solve this using cert policies?
> Is there any deployed examples of this?
>=20

Since this I-D isn't part of a protocol definition, is this really =
appropriate?=20



---
Patrick Patterson
Chief PKI Architect
Carillon Information Security Inc.
http://www.carillon.ca






From stefan@aaa-sec.com  Mon Jul 30 14:52:25 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 026E011E81C7 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 14:52:25 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.922
X-Spam-Level: 
X-Spam-Status: No, score=-102.922 tagged_above=-999 required=5 tests=[AWL=0.328, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S1sqL2FiMIe1 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 14:52:23 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 8DC5211E813C for <pkix@ietf.org>; Mon, 30 Jul 2012 14:52:23 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 9CFC51D25F4D for <pkix@ietf.org>; Mon, 30 Jul 2012 23:52:22 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id ZMwIDDfF1Rwz for <pkix@ietf.org>; Mon, 30 Jul 2012 23:52:22 +0200 (CEST)
Received: from s326.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 3CA2B1D25F4F for <pkix@ietf.org>; Mon, 30 Jul 2012 23:52:22 +0200 (CEST)
Received: (qmail 12362 invoked from network); 30 Jul 2012 21:52:21 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.204]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s326.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <ppatterson@carillon.ca>; 30 Jul 2012 21:52:21 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 30 Jul 2012 14:52:16 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: Patrick Patterson <ppatterson@carillon.ca>
Message-ID: <CC3C4E72.49FCE%stefan@aaa-sec.com>
Thread-Topic: [pkix] Updated claimSigning EKU Internet Draft
In-Reply-To: <03FF991A-8F2D-44F5-B77A-F5F0E49EA6C1@carillon.ca>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Cc: pkix@ietf.org
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 21:52:25 -0000

In line;

On 12-07-30 2:35 PM, "Patrick Patterson" <ppatterson@carillon.ca> wrote:

>Hello Stefan:
>
>
>On 2012-07-30, at 3:04 PM, Stefan Santesson wrote:
>
>> I have a number of issues/questions regarding this draft (still).
>> 
>> 1) Definition of "Claim"
>> This EKU is said to state that the subject is appropriate to sign
>> "claims", but the draft does not make an effort to define what a claim
>>is.
>> It provides the examples SAML assertions and Attribute Assertions, but
>> does not state what else could be regarded as a claim.
>> Thus this EKU could be used for virtually anything in absence of a clear
>> definition.
>> 
>
>Ok - I'll work with Matt to come up with this kind of wording.
>
>> 2) Explain when this EKU is needed, relative to metadata and
>> pre-configured trust.
>> The only examples are SAML. In SAML it is common to either preconfigure
>> trust in assertion signers, removing the need for an EKU, or by placing
>> the cert in signed metadata also removing the need for an EKU. What are
>> the particular use-case where you would neither use metadata, nor
>> pre-configured trust?
>> A clarification of this would help the reader to understand when this
>>EKU
>> is appropriate.
>> 
>
>The necessity of this EKU does not mean that Federations do not use
>Metadata to exchange information regarding who is a trusted IDP in their
>environment. The main reason for this EKU is to allow a Certificate to be
>used by an IDP to sign claims. As we state in the draft, if we don't have
>this EKU, then we have to have a certificate that doesn't have an EKU
>value to sign claims. Unfortunately, due to recent events regarding the
>abuse of certificates asserting Key Usage values of digitalSignature and
>nonRepudiation, a number of policy authorities are mandating strict EKU
>values in all certificates asserting these key usage values, and
>mandating by policy that the anyEKU OID not be present. This means, that
>absent this EKU value, we can't have claims signed by IDPs using PKI
>Certificate credentials, due to strict RFC5280 enforcement.

I'm sorry, I still don't get this. If you find the cert in the metadata,
you know that it is suitable to sign assertions. All verifier of the
assertion consume metadata.
Major implementations of SAML can handle this. They don't need any EKU.

I'm just asking you to clarify the use case and to position it relative to
SAML metadata usage, which obviously works today.


> 
>
>> 3) Discussion about assurance levels and policy OIDs.
>> When would you convey information about assurance level of an assertion
>>in
>> a certificate policy of the signing certificate?
>> Information about assurance level is provided in SAML requests and
>> responses.
>> Information about what assurance level the IdP is trusted to provide
>> (certified for) is normally provided in signed metadata (SAML) or may be
>> implicit in the case of pre-configured trust.
>> When would it be appropriate to solve this using cert policies?
>> Is there any deployed examples of this?
>> 
>
>Since this I-D isn't part of a protocol definition, is this really
>appropriate? 
>

Well, I think you need to clarify under what type of implementation, what
you write makes sense.
I would for example consider this quite odd in a SAML federation using
SAML metadata. And I don't think a SAML federation with pre-configured
trust cares.

/Stefan




>
>
>---
>Patrick Patterson
>Chief PKI Architect
>Carillon Information Security Inc.
>http://www.carillon.ca
>
>
>
>
>



From hotz@jpl.nasa.gov  Mon Jul 30 16:15:06 2012
Return-Path: <hotz@jpl.nasa.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E29CE21F850C for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 16:15:05 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.312
X-Spam-Level: 
X-Spam-Status: No, score=-6.312 tagged_above=-999 required=5 tests=[AWL=0.288,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wa6o3AO7Dtbq for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 16:15:04 -0700 (PDT)
Received: from mail.jpl.nasa.gov (smtp.jpl.nasa.gov [128.149.139.109]) by ietfa.amsl.com (Postfix) with ESMTP id C10AF21F8513 for <pkix@ietf.org>; Mon, 30 Jul 2012 16:15:02 -0700 (PDT)
Received: from laphotz.jpl.nasa.gov (laphotz.jpl.nasa.gov [128.149.133.44]) (authenticated (0 bits)) by smtp.jpl.nasa.gov (Sentrion-MTA-4.2.2/Sentrion-MTA-4.2.2) with ESMTP id q6UNEsUp026932 (using TLSv1/SSLv3 with cipher AES128-SHA (128 bits) verified NO); Mon, 30 Jul 2012 16:14:55 -0700
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset=us-ascii
From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
In-Reply-To: <CC3C46C1.49FB4%stefan@aaa-sec.com>
Date: Mon, 30 Jul 2012 16:14:52 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <4C39C11C-FFBE-4701-B39A-2DF6CB8936C7@jpl.nasa.gov>
References: <CC3C46C1.49FB4%stefan@aaa-sec.com>
To: Stefan Santesson <stefan@aaa-sec.com>
X-Mailer: Apple Mail (2.1084)
X-Source-Sender: hotz@jpl.nasa.gov
X-AUTH: Authorized
Cc: pkix PKIX <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 30 Jul 2012 23:15:06 -0000

Going back to my memories of the discussions that prompted this update, =
there are two issues I thought were important:  1) the lack of clarity =
about what the response codes meant, and 2) the need for some allowance =
for a separating the signer for revocation info from the main CA chain.  =
I note that there is a new MAY which might allow a way to address 2).  =
If it actually allows some mitigation of a hacked CA, I wish there were =
some corresponding discussion.

T. Miller had a very nice writeup comparing the three response codes =
with what a responder would actually be able to know and answer for.  I =
see no changes relating to that.  IMO that info needs to get put in.  =
IMO it ought to replace the paragraph which says a "never issued" cert =
is "good".  That probably violates the stated scope of this update, so I =
my be in the rough, consensus-wise.

At the very highest level, a PKI with long-lived certs needs a parallel =
infrastructure which can prevent bad certs from being used.  OCSP is the =
thing which is actually deployed for that function.  IMO it needs to be =
fixed so it can actually provide that functionality.  For me getting the =
function done effectively trumps details about backward compatibility.
------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu


From stefan@aaa-sec.com  Mon Jul 30 18:49:34 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 27E0221F8517 for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 18:49:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.249
X-Spam-Level: 
X-Spam-Status: No, score=-103.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id lCw3-bbxbfmH for <pkix@ietfa.amsl.com>; Mon, 30 Jul 2012 18:49:33 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id 1919921F852C for <pkix@ietf.org>; Mon, 30 Jul 2012 18:49:32 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 0E0C21D26F48 for <pkix@ietf.org>; Tue, 31 Jul 2012 03:49:31 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id d6ND26B5Czft for <pkix@ietf.org>; Tue, 31 Jul 2012 03:49:30 +0200 (CEST)
Received: from s328.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id B4E531D26F47 for <pkix@ietf.org>; Tue, 31 Jul 2012 03:49:30 +0200 (CEST)
Received: (qmail 70007 invoked from network); 31 Jul 2012 01:49:30 -0000
Received: from dhcp-1702.meeting.ietf.org (HELO [130.129.23.2]) (stefan@fiddler.nu@[130.129.23.2]) (envelope-sender <stefan@aaa-sec.com>) by s328.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <hotz@jpl.nasa.gov>; 31 Jul 2012 01:49:30 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Mon, 30 Jul 2012 18:49:25 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: "Henry B. Hotz" <hotz@jpl.nasa.gov>
Message-ID: <CC3C85FB.4A037%stefan@aaa-sec.com>
Thread-Topic: [pkix] RFC2560bis update
In-Reply-To: <4C39C11C-FFBE-4701-B39A-2DF6CB8936C7@jpl.nasa.gov>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Cc: pkix PKIX <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 01:49:34 -0000

Henry,

On 12-07-30 4:14 PM, "Henry B. Hotz" <hotz@jpl.nasa.gov> wrote:

>Going back to my memories of the discussions that prompted this update,
>there are two issues I thought were important:  1) the lack of clarity
>about what the response codes meant, and 2) the need for some allowance
>for a separating the signer for revocation info from the main CA chain.
>I note that there is a new MAY which might allow a way to address 2).  If
>it actually allows some mitigation of a hacked CA, I wish there were some
>corresponding discussion.
>
>T. Miller had a very nice writeup comparing the three response codes with
>what a responder would actually be able to know and answer for.  I see no
>changes relating to that.  IMO that info needs to get put in.  IMO it
>ought to replace the paragraph which says a "never issued" cert is
>"good".  That probably violates the stated scope of this update, so I my
>be in the rough, consensus-wise.

Text regarding response codes has been updated, but only to accommodate
Lightweight OCSP.
This effort is not suitable for what you ask for, which I think
discussions on this list has demonstrated.

>
>At the very highest level, a PKI with long-lived certs needs a parallel
>infrastructure which can prevent bad certs from being used.  OCSP is the
>thing which is actually deployed for that function.  IMO it needs to be
>fixed so it can actually provide that functionality.  For me getting the
>function done effectively trumps details about backward compatibility.

The problem is that not all agree what "that problem" means in reality.
There is no way the current OCSP protocol can assure that a bad
certificate form a compromised CA will be marked "bad".
If the CA is not compromised, the current protocol works as it is.

Discussions has shown that it is hard to agree on what level of
"compromise" that OCSP protocol should be able to capture as result of
such effort.

Thus, it need to be discussed separate form this update.

/Stefan


>------------------------------------------------------
>The opinions expressed in this message are mine,
>not those of Caltech, JPL, NASA, or the US Government.
>Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
>
>_______________________________________________
>pkix mailing list
>pkix@ietf.org
>https://www.ietf.org/mailman/listinfo/pkix



From david.cooper@nist.gov  Tue Jul 31 07:56:07 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 91B3221F86AD for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 07:56:07 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.385
X-Spam-Level: 
X-Spam-Status: No, score=-6.385 tagged_above=-999 required=5 tests=[AWL=0.214,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7A5SdfHcrSc1 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 07:56:07 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id 9746521F8697 for <pkix@ietf.org>; Tue, 31 Jul 2012 07:56:06 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Tue, 31 Jul 2012 10:55:54 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Tue, 31 Jul 2012 10:55:10 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6VEu35v016144; Tue, 31 Jul 2012 10:56:03 -0400
Message-ID: <5017F203.7020007@nist.gov>
Date: Tue, 31 Jul 2012 10:56:03 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: "Henry B. Hotz" <hotz@jpl.nasa.gov>
References: <CC3C46C1.49FB4%stefan@aaa-sec.com> <4C39C11C-FFBE-4701-B39A-2DF6CB8936C7@jpl.nasa.gov>
In-Reply-To: <4C39C11C-FFBE-4701-B39A-2DF6CB8936C7@jpl.nasa.gov>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
Cc: pkix PKIX <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 14:56:07 -0000

Henry,

I believe that you are referring to discussions that took place on the 
mail list earlier this year in which people proposed changes to OCSP.

The decision to develop 2560bis was made a couple of years ago, and it 
was agreed at the time that the scope of the update would be limited to 
making the presentation of the protocol more clear and that no changes 
would be made to the protocol.

As I recall there were several discussion threads involving questions 
about OCSP at the time.  Here is one of the messages that I found from 
one of those threads that helped to motivate the development of 2560bis: 
http://www.ietf.org/mail-archive/web/pkix/current/msg27687.html. That 
message provides one example of the problems that were occurring as a 
result of some people misunderstanding RFC 2560, and the types of issues 
that I worked very hard to try to address in the -04 draft of 2560bis.

Dave

On 07/30/2012 07:14 PM, Henry B. Hotz wrote:
> Going back to my memories of the discussions that prompted this update, there are two issues I thought were important:  1) the lack of clarity about what the response codes meant, and 2) the need for some allowance for a separating the signer for revocation info from the main CA chain.  I note that there is a new MAY which might allow a way to address 2).  If it actually allows some mitigation of a hacked CA, I wish there were some corresponding discussion.
>
> T. Miller had a very nice writeup comparing the three response codes with what a responder would actually be able to know and answer for.  I see no changes relating to that.  IMO that info needs to get put in.  IMO it ought to replace the paragraph which says a "never issued" cert is "good".  That probably violates the stated scope of this update, so I my be in the rough, consensus-wise.
>
> At the very highest level, a PKI with long-lived certs needs a parallel infrastructure which can prevent bad certs from being used.  OCSP is the thing which is actually deployed for that function.  IMO it needs to be fixed so it can actually provide that functionality.  For me getting the function done effectively trumps details about backward compatibility.
> ------------------------------------------------------
> The opinions expressed in this message are mine,
> not those of Caltech, JPL, NASA, or the US Government.
> Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
>
> .
>


From david.cooper@nist.gov  Tue Jul 31 10:37:36 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9B4CD21F8818 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 10:37:36 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.396
X-Spam-Level: 
X-Spam-Status: No, score=-6.396 tagged_above=-999 required=5 tests=[AWL=0.203,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PYp9PZS+e7fO for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 10:37:35 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id 1388F21F84EB for <pkix@ietf.org>; Tue, 31 Jul 2012 10:37:30 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Tue, 31 Jul 2012 13:37:19 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Tue, 31 Jul 2012 13:36:34 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6VHbR6o013446; Tue, 31 Jul 2012 13:37:28 -0400
Message-ID: <501817D7.7030108@nist.gov>
Date: Tue, 31 Jul 2012 13:37:27 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: Stefan Santesson <stefan@aaa-sec.com>
References: <CC3C258A.49F6C%stefan@aaa-sec.com>
In-Reply-To: <CC3C258A.49F6C%stefan@aaa-sec.com>
Content-Type: text/plain; charset="ISO-8859-1"; format=flowed
Content-Transfer-Encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 17:37:36 -0000

Stefan,

Based on earlier discussions that I've had with some of the editors of 
this document, I believe that the reason the draft isn't entirely clear 
about what might constitute a "Claim" is that there is a desire for the 
definition of this OID to be somewhat generic so that in the future, 
when a key purpose OID is needed to indicate that the subject is 
authorized to sign "claims," this OID can be used rather than having to 
define a new OID for each specific application.

As an example, there are some signed CMS objects on PIV Cards. The CMS 
objects contain such things as biometric data of the cardholder and/or a 
unique identifier that has been assigned to the card.  In FIPS 201, a 
key purpose OID was defined, id-PIV-content-signing, and there is a 
requirement that the signer of the CMS objects on the PIV Card must have 
a certificate that asserts the id-PIV-content-signing key purpose OID.  
When PIV-Interoperable cards were defined (similar to PIV Cards, but not 
issued by the U.S. Federal government), a new key purpose OID needed to 
be defined for the signers of the CMS objects on those cards, 
id-fpki-pivi-content-signing.  It was noted that if there were a generic 
"claim signing" OID, then that OID could be used for both PIV and PIV-I 
Cards in addition to other cards that don't qualify as either PIV or 
PIV-I.  We even received a comment on the current draft of FIPS 201 
(http://csrc.nist.gov/publications/drafts/fips201-2/draft-fips-201-2_comments_disposition-for-2011-draft.pdf) 
asking that FIPS 201 specify the use of the claimSigning OID being 
discussed in the PKIX WG rather than (or in addition to) the 
id-PIV-content-signing OID.

Dave

On 07/30/2012 03:04 PM, Stefan Santesson wrote:
> I have a number of issues/questions regarding this draft (still).
>
> 1) Definition of "Claim"
> This EKU is said to state that the subject is appropriate to sign
> "claims", but the draft does not make an effort to define what a claim is.
> It provides the examples SAML assertions and Attribute Assertions, but
> does not state what else could be regarded as a claim.
> Thus this EKU could be used for virtually anything in absence of a clear
> definition.
>
> 2) Explain when this EKU is needed, relative to metadata and
> pre-configured trust.
> The only examples are SAML. In SAML it is common to either preconfigure
> trust in assertion signers, removing the need for an EKU, or by placing
> the cert in signed metadata also removing the need for an EKU. What are
> the particular use-case where you would neither use metadata, nor
> pre-configured trust?
> A clarification of this would help the reader to understand when this EKU
> is appropriate.
>
> 3) Discussion about assurance levels and policy OIDs.
> When would you convey information about assurance level of an assertion in
> a certificate policy of the signing certificate?
> Information about assurance level is provided in SAML requests and
> responses.
> Information about what assurance level the IdP is trusted to provide
> (certified for) is normally provided in signed metadata (SAML) or may be
> implicit in the case of pre-configured trust.
> When would it be appropriate to solve this using cert policies?
> Is there any deployed examples of this?
>
>
> /Stefan

From stefan@aaa-sec.com  Tue Jul 31 10:55:50 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8AC5921F8864 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 10:55:50 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -103.249
X-Spam-Level: 
X-Spam-Status: No, score=-103.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zjgz69wwzQsv for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 10:55:49 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id AE4C621F8552 for <pkix@ietf.org>; Tue, 31 Jul 2012 10:55:48 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 558DB1D82245 for <pkix@ietf.org>; Tue, 31 Jul 2012 19:55:47 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id FksIhXg44vXL for <pkix@ietf.org>; Tue, 31 Jul 2012 19:55:46 +0200 (CEST)
Received: from s328.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id E90231D82238 for <pkix@ietf.org>; Tue, 31 Jul 2012 19:55:46 +0200 (CEST)
Received: (qmail 97965 invoked from network); 31 Jul 2012 17:55:46 -0000
Received: from dhcp-1702.meeting.ietf.org (HELO [130.129.23.2]) (stefan@fiddler.nu@[130.129.23.2]) (envelope-sender <stefan@aaa-sec.com>) by s328.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <david.cooper@nist.gov>; 31 Jul 2012 17:55:46 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Tue, 31 Jul 2012 10:55:38 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: "David A. Cooper" <david.cooper@nist.gov>
Message-ID: <CC3D68F8.4A14F%stefan@aaa-sec.com>
Thread-Topic: [pkix] Updated claimSigning EKU Internet Draft
In-Reply-To: <501817D7.7030108@nist.gov>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 17:55:50 -0000

David,

A broad definition of "Claim" may be appropriate, but there need to be one.
Absent a definition, the EKU becomes somewhat pointless as usage
declaration.

/Stefan




On 12-07-31 10:37 AM, "David A. Cooper" <david.cooper@nist.gov> wrote:

>Stefan,
>
>Based on earlier discussions that I've had with some of the editors of
>this document, I believe that the reason the draft isn't entirely clear
>about what might constitute a "Claim" is that there is a desire for the
>definition of this OID to be somewhat generic so that in the future,
>when a key purpose OID is needed to indicate that the subject is
>authorized to sign "claims," this OID can be used rather than having to
>define a new OID for each specific application.
>
>As an example, there are some signed CMS objects on PIV Cards. The CMS
>objects contain such things as biometric data of the cardholder and/or a
>unique identifier that has been assigned to the card.  In FIPS 201, a
>key purpose OID was defined, id-PIV-content-signing, and there is a
>requirement that the signer of the CMS objects on the PIV Card must have
>a certificate that asserts the id-PIV-content-signing key purpose OID.
>When PIV-Interoperable cards were defined (similar to PIV Cards, but not
>issued by the U.S. Federal government), a new key purpose OID needed to
>be defined for the signers of the CMS objects on those cards,
>id-fpki-pivi-content-signing.  It was noted that if there were a generic
>"claim signing" OID, then that OID could be used for both PIV and PIV-I
>Cards in addition to other cards that don't qualify as either PIV or
>PIV-I.  We even received a comment on the current draft of FIPS 201
>(http://csrc.nist.gov/publications/drafts/fips201-2/draft-fips-201-2_comme
>nts_disposition-for-2011-draft.pdf)
>asking that FIPS 201 specify the use of the claimSigning OID being
>discussed in the PKIX WG rather than (or in addition to) the
>id-PIV-content-signing OID.
>
>Dave
>
>On 07/30/2012 03:04 PM, Stefan Santesson wrote:
>> I have a number of issues/questions regarding this draft (still).
>>
>> 1) Definition of "Claim"
>> This EKU is said to state that the subject is appropriate to sign
>> "claims", but the draft does not make an effort to define what a claim
>>is.
>> It provides the examples SAML assertions and Attribute Assertions, but
>> does not state what else could be regarded as a claim.
>> Thus this EKU could be used for virtually anything in absence of a clear
>> definition.
>>
>> 2) Explain when this EKU is needed, relative to metadata and
>> pre-configured trust.
>> The only examples are SAML. In SAML it is common to either preconfigure
>> trust in assertion signers, removing the need for an EKU, or by placing
>> the cert in signed metadata also removing the need for an EKU. What are
>> the particular use-case where you would neither use metadata, nor
>> pre-configured trust?
>> A clarification of this would help the reader to understand when this
>>EKU
>> is appropriate.
>>
>> 3) Discussion about assurance levels and policy OIDs.
>> When would you convey information about assurance level of an assertion
>>in
>> a certificate policy of the signing certificate?
>> Information about assurance level is provided in SAML requests and
>> responses.
>> Information about what assurance level the IdP is trusted to provide
>> (certified for) is normally provided in signed metadata (SAML) or may be
>> implicit in the case of pre-configured trust.
>> When would it be appropriate to solve this using cert policies?
>> Is there any deployed examples of this?
>>
>>
>> /Stefan



From hotz@jpl.nasa.gov  Tue Jul 31 11:04:39 2012
Return-Path: <hotz@jpl.nasa.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B962B21F88AC for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 11:04:39 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.369
X-Spam-Level: 
X-Spam-Status: No, score=-6.369 tagged_above=-999 required=5 tests=[AWL=0.230,  BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id o05xSc3NQOkE for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 11:04:39 -0700 (PDT)
Received: from mail.jpl.nasa.gov (sentrion3.jpl.nasa.gov [128.149.139.109]) by ietfa.amsl.com (Postfix) with ESMTP id 1BDA121F88AB for <pkix@ietf.org>; Tue, 31 Jul 2012 11:04:38 -0700 (PDT)
Received: from laphotz.jpl.nasa.gov (laphotz.jpl.nasa.gov [128.149.133.44]) (authenticated (0 bits)) by smtp.jpl.nasa.gov (Sentrion-MTA-4.2.2/Sentrion-MTA-4.2.2) with ESMTP id q6VI4Y5L028817 (using TLSv1/SSLv3 with cipher AES128-SHA (128 bits) verified NO); Tue, 31 Jul 2012 11:04:35 -0700
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset=us-ascii
From: "Henry B. Hotz" <hotz@jpl.nasa.gov>
In-Reply-To: <CC3C85FB.4A037%stefan@aaa-sec.com>
Date: Tue, 31 Jul 2012 11:04:33 -0700
Content-Transfer-Encoding: quoted-printable
Message-Id: <8FE7DE62-BC31-4C88-98B4-6BF064B9F46A@jpl.nasa.gov>
References: <CC3C85FB.4A037%stefan@aaa-sec.com>
To: Stefan Santesson <stefan@aaa-sec.com>
X-Mailer: Apple Mail (2.1084)
X-Source-Sender: hotz@jpl.nasa.gov
X-AUTH: Authorized
Cc: pkix PKIX <pkix@ietf.org>
Subject: Re: [pkix] RFC2560bis update
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 18:04:39 -0000

So we agree that I'm in the rough consensus-wise about what I think =
needs to be done to OCSP.  ;-)  There is a perfectly defensible =
viewpoint that OCSP is the wrong solution for the problem anyway, and =
you should use SCVP instead (if it were available anyway).

My frustration is that just doing the MUST's for the RFCs that are =
actually implemented (e.g. in browsers and public CAs) and deployed =
doesn't get you the advertised level of security.  You need to pick and =
choose options, lobotomize deployments, and implement extra stuff to get =
to what I would consider "good" security.  There doesn't seem to be =
consensus to close the gap.  Or at least attempts to gain consensus seem =
to generate an excessive amount of heat.  I've even seen multiple =
threats to ignore the products of this group if the results don't meet =
some constraints some implementor wants, irrespective of the technical =
goals or overall consensus.

I'm just frustrated that the kinds of clarifications in 2560bis seem =
inadequate to deal with the overall gap between the advertised security =
and actual security of the biggest application of this protocol.  *sigh*

On Jul 30, 2012, at 6:49 PM, Stefan Santesson wrote:

> Henry,
>=20
> On 12-07-30 4:14 PM, "Henry B. Hotz" <hotz@jpl.nasa.gov> wrote:
>=20
>> Going back to my memories of the discussions that prompted this =
update,
>> there are two issues I thought were important:  1) the lack of =
clarity
>> about what the response codes meant, and 2) the need for some =
allowance
>> for a separating the signer for revocation info from the main CA =
chain.
>> I note that there is a new MAY which might allow a way to address 2). =
 If
>> it actually allows some mitigation of a hacked CA, I wish there were =
some
>> corresponding discussion.
>>=20
>> T. Miller had a very nice writeup comparing the three response codes =
with
>> what a responder would actually be able to know and answer for.  I =
see no
>> changes relating to that.  IMO that info needs to get put in.  IMO it
>> ought to replace the paragraph which says a "never issued" cert is
>> "good".  That probably violates the stated scope of this update, so I =
my
>> be in the rough, consensus-wise.
>=20
> Text regarding response codes has been updated, but only to =
accommodate
> Lightweight OCSP.
> This effort is not suitable for what you ask for, which I think
> discussions on this list has demonstrated.
>=20
>>=20
>> At the very highest level, a PKI with long-lived certs needs a =
parallel
>> infrastructure which can prevent bad certs from being used.  OCSP is =
the
>> thing which is actually deployed for that function.  IMO it needs to =
be
>> fixed so it can actually provide that functionality.  For me getting =
the
>> function done effectively trumps details about backward =
compatibility.
>=20
> The problem is that not all agree what "that problem" means in =
reality.
> There is no way the current OCSP protocol can assure that a bad
> certificate form a compromised CA will be marked "bad".
> If the CA is not compromised, the current protocol works as it is.
>=20
> Discussions has shown that it is hard to agree on what level of
> "compromise" that OCSP protocol should be able to capture as result of
> such effort.
>=20
> Thus, it need to be discussed separate form this update.
>=20
> /Stefan
>=20
>=20
>> ------------------------------------------------------
>> The opinions expressed in this message are mine,
>> not those of Caltech, JPL, NASA, or the US Government.
>> Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu
>>=20
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>=20
>=20

------------------------------------------------------
The opinions expressed in this message are mine,
not those of Caltech, JPL, NASA, or the US Government.
Henry.B.Hotz@jpl.nasa.gov, or hbhotz@oxy.edu


From kent@bbn.com  Tue Jul 31 12:37:37 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4769811E80FF for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 12:37:37 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.467
X-Spam-Level: 
X-Spam-Status: No, score=-106.467 tagged_above=-999 required=5 tests=[AWL=0.131, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uDtVqo9EBsnk for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 12:37:36 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id B698521F8463 for <pkix@ietf.org>; Tue, 31 Jul 2012 12:37:36 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:38290 helo=dhcp-15b7.meeting.ietf.org) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1SwIG4-0001qZ-MN for pkix@ietf.org; Tue, 31 Jul 2012 15:37:32 -0400
Message-ID: <501833FC.7000207@bbn.com>
Date: Tue, 31 Jul 2012 15:37:32 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: pkix <pkix@ietf.org>
Content-Type: multipart/alternative; boundary="------------010602070103040601070107"
Subject: [pkix] new text for 5280bis, Section 3.2
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 19:37:37 -0000

This is a multi-part message in MIME format.
--------------010602070103040601070107
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Another version, incorporating Peter's suggested text*
*

*2.Update to RFC 5280, Section 3.2: Certification Paths and Trust*

***Add the following paragraph to the end of RFC 5280, Section 3.2:*

***In some cases, a self-signed certificate that does not contain a 
BasicConstraints extension is used to convey a public key. Consistent 
with Section 3.4.61 of X.509 (11/2008) we note that use of self-issued 
certificates and self-signed certificates issued by other than CAs are 
outside the scope of this specification. Thus, for example, a web server 
or client might generate a self-signed certificate to identity itself. 
These**certificates, and how a relying party uses them to authenticate 
asserted identities, are both outside the scope of RFC 5280.*

Comments?

Steve


--------------010602070103040601070107
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>

    <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    Another version, incorporating Peter's suggested text<b><br>
    </b>
    <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:Monaco">2.<span
            style="mso-spacerun:yes">&nbsp; </span>Update to RFC 5280,
          Section 3.2: Certification Paths and Trust<o:p></o:p></span></b></p>
    <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:Monaco"><o:p></o:p></span></b><b>Add
        the following paragraph to the end of RFC 5280, Section 3.2:</b><br>
    </p>
    <b style="mso-bidi-font-weight:normal"><span
        style="font-size:10.0pt;font-family:Monaco"></span></b><b>In
      some cases, a self-signed certificate that does not contain a
      BasicConstraints extension is used to convey a public key.
      Consistent with Section 3.4.61 of X.509 (11/2008) we note that use
      of self-issued certificates and self-signed certificates issued by
      other than CAs are outside the scope of this specification. Thus,
      for example, a web server or client might generate a self-signed
      certificate to identity itself. These</b><b> certificates, and how
      a relying party uses them to authenticate asserted identities, are
      both outside the scope of RFC 5280.</b><br>
    <pre wrap="">
Comments?

Steve
</pre>
  </body>
</html>

--------------010602070103040601070107--

From SChokhani@cygnacom.com  Tue Jul 31 12:56:29 2012
Return-Path: <SChokhani@cygnacom.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5F22421F8773 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 12:56:29 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=-0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NHfpXO+5P-O8 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 12:56:28 -0700 (PDT)
Received: from ipedge1.cygnacom.com (ipedge1.cygnacom.com [216.191.252.12]) by ietfa.amsl.com (Postfix) with ESMTP id 2756E21F876F for <pkix@ietf.org>; Tue, 31 Jul 2012 12:56:22 -0700 (PDT)
X-IronPort-AV: E=Sophos;i="4.77,688,1336363200"; d="scan'208,217";a="5772855"
Received: from unknown (HELO scygexch7.cygnacom.com) ([10.4.60.22]) by ipedge1.cygnacom.com with ESMTP; 31 Jul 2012 15:56:19 -0400
Received: from scygexch7.cygnacom.com ([::1]) by scygexch7.cygnacom.com ([::1]) with mapi; Tue, 31 Jul 2012 15:56:19 -0400
From: Santosh Chokhani <SChokhani@cygnacom.com>
To: Stephen Kent <kent@bbn.com>, pkix <pkix@ietf.org>
Date: Tue, 31 Jul 2012 15:56:18 -0400
Thread-Topic: [pkix] new text for 5280bis, Section 3.2
Thread-Index: Ac1vU/OBsE1AyZa9RJGbnqfUO7lEEAAAmE4A
Message-ID: <B83745DA469B7847811819C5005244AF36299738@scygexch7.cygnacom.com>
References: <501833FC.7000207@bbn.com>
In-Reply-To: <501833FC.7000207@bbn.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: multipart/alternative; boundary="_000_B83745DA469B7847811819C5005244AF36299738scygexch7cygnac_"
MIME-Version: 1.0
Subject: Re: [pkix] new text for 5280bis, Section 3.2
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 19:56:29 -0000

--_000_B83745DA469B7847811819C5005244AF36299738scygexch7cygnac_
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

Steve,

I think putting this in Section 3.2 may give the impression that a trust an=
chor need to have basic constraints extension.

How about the following:

Consistent with Section 3.4.61 of X.509 (11/2008) we note that use of self-=
issued certificates and self-signed certificates when issued by entities ot=
her than CAs are outside the scope of this specification. Thus, for example=
, a web server or client might generate a self-signed certificate to identi=
ty itself. These certificates, and how a relying party uses them to authent=
icate asserted identities, are both outside the scope of RFC 5280.

From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of Ste=
phen Kent
Sent: Tuesday, July 31, 2012 3:38 PM
To: pkix
Subject: [pkix] new text for 5280bis, Section 3.2

Another version, incorporating Peter's suggested text
2.  Update to RFC 5280, Section 3.2: Certification Paths and Trust
Add the following paragraph to the end of RFC 5280, Section 3.2:
In some cases, a self-signed certificate that does not contain a BasicConst=
raints extension is used to convey a public key. Consistent with Section 3.=
4.61 of X.509 (11/2008) we note that use of self-issued certificates and se=
lf-signed certificates issued by other than CAs are outside the scope of th=
is specification. Thus, for example, a web server or client might generate =
a self-signed certificate to identity itself. These certificates, and how a=
 relying party uses them to authenticate asserted identities, are both outs=
ide the scope of RFC 5280.




Comments?



Steve

--_000_B83745DA469B7847811819C5005244AF36299738scygexch7cygnac_
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:=
//www.w3.org/TR/REC-html40"><head><meta http-equiv=3DContent-Type content=
=3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros=
oft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
	{font-family:Calibri;
	panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
	{font-family:Tahoma;
	panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
	{font-family:Consolas;
	panose-1:2 11 6 9 2 2 4 3 2 4;}
@font-face
	{font-family:Monaco;
	panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0in;
	margin-bottom:.0001pt;
	font-size:12.0pt;
	font-family:"Times New Roman","serif";
	color:black;}
a:link, span.MsoHyperlink
	{mso-style-priority:99;
	color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{mso-style-priority:99;
	color:purple;
	text-decoration:underline;}
pre
	{mso-style-priority:99;
	mso-style-link:"HTML Preformatted Char";
	margin:0in;
	margin-bottom:.0001pt;
	font-size:10.0pt;
	font-family:"Courier New";
	color:black;}
span.HTMLPreformattedChar
	{mso-style-name:"HTML Preformatted Char";
	mso-style-priority:99;
	mso-style-link:"HTML Preformatted";
	font-family:Consolas;
	color:black;}
span.EmailStyle19
	{mso-style-type:personal-reply;
	font-family:"Arial","sans-serif";
	color:#1F497D;
	font-weight:normal;
	font-style:normal;
	text-decoration:none none;}
.MsoChpDefault
	{mso-style-type:export-only;
	font-size:10.0pt;}
@page WordSection1
	{size:8.5in 11.0in;
	margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
	{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body bgcolor=3Dwhite lang=3DEN-US=
 link=3Dblue vlink=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal>=
<span style=3D'font-size:9.0pt;font-family:"Arial","sans-serif";color:#1F49=
7D'>Steve,<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-si=
ze:9.0pt;font-family:"Arial","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p><=
/span></p><p class=3DMsoNormal><span style=3D'font-size:9.0pt;font-family:"=
Arial","sans-serif";color:#1F497D'>I think putting this in Section 3.2 may =
give the impression that a trust anchor need to have basic constraints exte=
nsion.<o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:9=
.0pt;font-family:"Arial","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></spa=
n></p><p class=3DMsoNormal><span style=3D'font-size:9.0pt;font-family:"Aria=
l","sans-serif";color:#1F497D'>How about the following:<o:p></o:p></span></=
p><p class=3DMsoNormal><span style=3D'font-size:9.0pt;font-family:"Arial","=
sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span></p><p class=3DMsoNormal=
><b>Consistent with Section 3.4.61 of X.509 (11/2008) we note that use of s=
elf-issued certificates and self-signed certificates when issued by entitie=
s other than CAs are outside the scope of this specification. Thus, for exa=
mple, a web server or client might generate a self-signed certificate to id=
entity itself. These certificates, and how a relying party uses them to aut=
henticate asserted identities, are both outside the scope of RFC 5280.</b><=
span style=3D'font-size:9.0pt;font-family:"Arial","sans-serif";color:#1F497=
D'><o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'font-size:9.0p=
t;font-family:"Arial","sans-serif";color:#1F497D'><o:p>&nbsp;</o:p></span><=
/p><div><div style=3D'border:none;border-top:solid #B5C4DF 1.0pt;padding:3.=
0pt 0in 0in 0in'><p class=3DMsoNormal><b><span style=3D'font-size:10.0pt;fo=
nt-family:"Tahoma","sans-serif";color:windowtext'>From:</span></b><span sty=
le=3D'font-size:10.0pt;font-family:"Tahoma","sans-serif";color:windowtext'>=
 pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] <b>On Behalf Of </b>S=
tephen Kent<br><b>Sent:</b> Tuesday, July 31, 2012 3:38 PM<br><b>To:</b> pk=
ix<br><b>Subject:</b> [pkix] new text for 5280bis, Section 3.2<o:p></o:p></=
span></p></div></div><p class=3DMsoNormal><o:p>&nbsp;</o:p></p><p class=3DM=
soNormal>Another version, incorporating Peter's suggested text<o:p></o:p></=
p><p class=3DMsoNormal style=3D'mso-margin-top-alt:auto;mso-margin-bottom-a=
lt:auto'><b><span style=3D'font-size:10.0pt;font-family:"Monaco","serif"'>2=
.&nbsp; Update to RFC 5280, Section 3.2: Certification Paths and Trust</spa=
n></b><o:p></o:p></p><p class=3DMsoNormal style=3D'mso-margin-top-alt:auto;=
mso-margin-bottom-alt:auto'><b>Add the following paragraph to the end of RF=
C 5280, Section 3.2:</b><o:p></o:p></p><p class=3DMsoNormal><b>In some case=
s, a self-signed certificate that does not contain a BasicConstraints exten=
sion is used to convey a public key. Consistent with Section 3.4.61 of X.50=
9 (11/2008) we note that use of self-issued certificates and self-signed ce=
rtificates issued by other than CAs are outside the scope of this specifica=
tion. Thus, for example, a web server or client might generate a self-signe=
d certificate to identity itself. These certificates, and how a relying par=
ty uses them to authenticate asserted identities, are both outside the scop=
e of RFC 5280.</b><br><br><o:p></o:p></p><pre><o:p>&nbsp;</o:p></pre><pre>C=
omments?<o:p></o:p></pre><pre><o:p>&nbsp;</o:p></pre><pre>Steve<o:p></o:p><=
/pre></div></body></html>=

--_000_B83745DA469B7847811819C5005244AF36299738scygexch7cygnac_--

From david.cooper@nist.gov  Tue Jul 31 12:58:28 2012
Return-Path: <david.cooper@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 34E8D21F884C for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 12:58:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -5.678
X-Spam-Level: 
X-Spam-Status: No, score=-5.678 tagged_above=-999 required=5 tests=[AWL=-0.537, BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_HTML_ONLY=1.457, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id X4jUi8kcbRE4 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 12:58:27 -0700 (PDT)
Received: from wsget1.nist.gov (wsget1.nist.gov [129.6.13.150]) by ietfa.amsl.com (Postfix) with ESMTP id 6F70921F8773 for <pkix@ietf.org>; Tue, 31 Jul 2012 12:58:26 -0700 (PDT)
Received: from WSGHUB1.xchange.nist.gov (129.6.42.34) by wsget1.nist.gov (129.6.13.150) with Microsoft SMTP Server (TLS) id 14.1.355.2; Tue, 31 Jul 2012 15:58:00 -0400
Received: from smtp.nist.gov (129.6.16.226) by smtp-g.nist.gov (129.6.42.33) with Microsoft SMTP Server id 14.1.355.2; Tue, 31 Jul 2012 15:57:09 -0400
Received: from st26.ncsl.nist.gov (st26.ncsl.nist.gov [129.6.54.72])	by smtp.nist.gov (8.13.1/8.13.1) with ESMTP id q6VJw3pm002532	for <pkix@ietf.org>; Tue, 31 Jul 2012 15:58:04 -0400
Message-ID: <501838CB.5020104@nist.gov>
Date: Tue, 31 Jul 2012 15:58:03 -0400
From: "David A. Cooper" <david.cooper@nist.gov>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120723 Thunderbird/14.0
MIME-Version: 1.0
To: pkix <pkix@ietf.org>
References: <501833FC.7000207@bbn.com>
In-Reply-To: <501833FC.7000207@bbn.com>
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Subject: Re: [pkix] new text for 5280bis, Section 3.2
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 19:58:28 -0000

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">What is the reason for the first
      sentence in the proposed paragraph?&nbsp; It doesn't seem to be at all
      related to the rest of the paragraph.<br>
      <br>
      On 07/31/2012 03:37 PM, Stephen Kent wrote:<br>
    </div>
    <blockquote cite="mid:501833FC.7000207@bbn.com" type="cite">
      <meta http-equiv="content-type" content="text/html;
        charset=ISO-8859-1">
      Another version, incorporating Peter's suggested text<b><br>
      </b>
      <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
            style="font-size:10.0pt;font-family:Monaco">2.<span
              style="mso-spacerun:yes">&nbsp; </span>Update to RFC 5280,
            Section 3.2: Certification Paths and Trust<o:p></o:p></span></b></p>
      <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
            style="font-size:10.0pt;font-family:Monaco"><o:p></o:p></span></b><b>Add

          the following paragraph to the end of RFC 5280, Section 3.2:</b><br>
      </p>
      <b style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:Monaco"></span></b><b>In
        some cases, a self-signed certificate that does not contain a
        BasicConstraints extension is used to convey a public key.
        Consistent with Section 3.4.61 of X.509 (11/2008) we note that
        use of self-issued certificates and self-signed certificates
        issued by other than CAs are outside the scope of this
        specification. Thus, for example, a web server or client might
        generate a self-signed certificate to identity itself. These</b><b>
        certificates, and how a relying party uses them to authenticate
        asserted identities, are both outside the scope of RFC 5280.</b><br>
      <pre wrap="">Comments?

Steve
</pre>
    </blockquote>
    <br>
  </body>
</html>

From mrex@sap.com  Tue Jul 31 13:32:42 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 06E5221F8960 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 13:32:42 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.188
X-Spam-Level: 
X-Spam-Status: No, score=-10.188 tagged_above=-999 required=5 tests=[AWL=0.061, BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2iH7IEUW43qd for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 13:32:41 -0700 (PDT)
Received: from smtpde02.sap-ag.de (smtpde02.sap-ag.de [155.56.68.140]) by ietfa.amsl.com (Postfix) with ESMTP id 4C50C21F895D for <pkix@ietf.org>; Tue, 31 Jul 2012 13:32:41 -0700 (PDT)
Received: from mail.sap.corp by smtpde02.sap-ag.de (26) with ESMTP id q6VKWXDS000606 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Tue, 31 Jul 2012 22:32:33 +0200 (MEST)
In-Reply-To: <50156F44.6010305@bbn.com>
To: Stephen Kent <kent@bbn.com>
Date: Tue, 31 Jul 2012 22:32:33 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120731203233.703EC1A106@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 20:32:42 -0000

I'm for option  A.


Stephen Kent wrote:
>
> So, let's begin a straw poll on the topic.  Here are the options I am 
> offering:
> 
>      A - continue to work with the -05 version as the basis for an RFC
>      B - revert to the -04 version as the basis for an RFC
>      C - don't publish a clarifications document for OCSP
>      D - the respondent volunteers to work on a new version of 2560bis

From turners@ieca.com  Tue Jul 31 14:02:22 2012
Return-Path: <turners@ieca.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 837A321F88E3 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 14:02:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -101.81
X-Spam-Level: 
X-Spam-Status: No, score=-101.81 tagged_above=-999 required=5 tests=[AWL=0.455, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6Q2JRlux61VB for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 14:02:21 -0700 (PDT)
Received: from gateway07.websitewelcome.com (gateway07.websitewelcome.com [67.18.65.21]) by ietfa.amsl.com (Postfix) with ESMTP id B6A9621F8879 for <pkix@ietf.org>; Tue, 31 Jul 2012 14:02:21 -0700 (PDT)
Received: by gateway07.websitewelcome.com (Postfix, from userid 5007) id 69EDFDA8DCFEF; Tue, 31 Jul 2012 16:02:21 -0500 (CDT)
Received: from gator1743.hostgator.com (gator1743.hostgator.com [184.173.253.227]) by gateway07.websitewelcome.com (Postfix) with ESMTP id 5D29BDA8DCFCC for <pkix@ietf.org>; Tue, 31 Jul 2012 16:02:21 -0500 (CDT)
Received: from [130.129.37.148] (port=50010 helo=dhcp-2594.meeting.ietf.org) by gator1743.hostgator.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.77) (envelope-from <turners@ieca.com>) id 1SwJa8-0003V8-N3 for pkix@ietf.org; Tue, 31 Jul 2012 16:02:20 -0500
Message-ID: <501847DC.5030509@ieca.com>
Date: Tue, 31 Jul 2012 14:02:20 -0700
From: Sean Turner <turners@ieca.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: "pkix@ietf.org" <pkix@ietf.org>
References: <CC3D68F8.4A14F%stefan@aaa-sec.com>
In-Reply-To: <CC3D68F8.4A14F%stefan@aaa-sec.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - gator1743.hostgator.com
X-AntiAbuse: Original Domain - ietf.org
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - ieca.com
X-BWhitelist: no
X-Source: 
X-Source-Args: 
X-Source-Dir: 
X-Source-Sender: (dhcp-2594.meeting.ietf.org) [130.129.37.148]:50010
X-Source-Auth: sean.turner@ieca.com
X-Email-Count: 1
X-Source-Cap: ZG9tbWdyNDg7ZG9tbWdyNDg7Z2F0b3IxNzQzLmhvc3RnYXRvci5jb20=
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 21:02:22 -0000

I'm confused how a vague definition of a claim lines up with the need 
for a specific EKU (from Patrick's earlier message):

   Unfortunately, due to recent events regarding the abuse
   of certificates asserting Key Usage values of
   digitalSignature and nonRepudiation, a number of policy
   authorities are mandating strict EKU values in all
   certificates asserting these key usage values, and
   mandating by policy that the anyEKU OID not be present.

You need a specific EKU to indicate you can sign a nebulous thing. 
What's the client going to check to know whether it's signing a claim or 
not?

spt

On 7/31/12 10:55 AM, Stefan Santesson wrote:
> David,
>
> A broad definition of "Claim" may be appropriate, but there need to be one.
> Absent a definition, the EKU becomes somewhat pointless as usage
> declaration.
>
> /Stefan
>
>
>
>
> On 12-07-31 10:37 AM, "David A. Cooper" <david.cooper@nist.gov> wrote:
>
>> Stefan,
>>
>> Based on earlier discussions that I've had with some of the editors of
>> this document, I believe that the reason the draft isn't entirely clear
>> about what might constitute a "Claim" is that there is a desire for the
>> definition of this OID to be somewhat generic so that in the future,
>> when a key purpose OID is needed to indicate that the subject is
>> authorized to sign "claims," this OID can be used rather than having to
>> define a new OID for each specific application.
>>
>> As an example, there are some signed CMS objects on PIV Cards. The CMS
>> objects contain such things as biometric data of the cardholder and/or a
>> unique identifier that has been assigned to the card.  In FIPS 201, a
>> key purpose OID was defined, id-PIV-content-signing, and there is a
>> requirement that the signer of the CMS objects on the PIV Card must have
>> a certificate that asserts the id-PIV-content-signing key purpose OID.
>> When PIV-Interoperable cards were defined (similar to PIV Cards, but not
>> issued by the U.S. Federal government), a new key purpose OID needed to
>> be defined for the signers of the CMS objects on those cards,
>> id-fpki-pivi-content-signing.  It was noted that if there were a generic
>> "claim signing" OID, then that OID could be used for both PIV and PIV-I
>> Cards in addition to other cards that don't qualify as either PIV or
>> PIV-I.  We even received a comment on the current draft of FIPS 201
>> (http://csrc.nist.gov/publications/drafts/fips201-2/draft-fips-201-2_comme
>> nts_disposition-for-2011-draft.pdf)
>> asking that FIPS 201 specify the use of the claimSigning OID being
>> discussed in the PKIX WG rather than (or in addition to) the
>> id-PIV-content-signing OID.
>>
>> Dave
>>
>> On 07/30/2012 03:04 PM, Stefan Santesson wrote:
>>> I have a number of issues/questions regarding this draft (still).
>>>
>>> 1) Definition of "Claim"
>>> This EKU is said to state that the subject is appropriate to sign
>>> "claims", but the draft does not make an effort to define what a claim
>>> is.
>>> It provides the examples SAML assertions and Attribute Assertions, but
>>> does not state what else could be regarded as a claim.
>>> Thus this EKU could be used for virtually anything in absence of a clear
>>> definition.
>>>
>>> 2) Explain when this EKU is needed, relative to metadata and
>>> pre-configured trust.
>>> The only examples are SAML. In SAML it is common to either preconfigure
>>> trust in assertion signers, removing the need for an EKU, or by placing
>>> the cert in signed metadata also removing the need for an EKU. What are
>>> the particular use-case where you would neither use metadata, nor
>>> pre-configured trust?
>>> A clarification of this would help the reader to understand when this
>>> EKU
>>> is appropriate.
>>>
>>> 3) Discussion about assurance levels and policy OIDs.
>>> When would you convey information about assurance level of an assertion
>>> in
>>> a certificate policy of the signing certificate?
>>> Information about assurance level is provided in SAML requests and
>>> responses.
>>> Information about what assurance level the IdP is trusted to provide
>>> (certified for) is normally provided in signed metadata (SAML) or may be
>>> implicit in the case of pre-configured trust.
>>> When would it be appropriate to solve this using cert policies?
>>> Is there any deployed examples of this?
>>>
>>>
>>> /Stefan
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix
>

From d.w.chadwick@kent.ac.uk  Tue Jul 31 14:02:35 2012
Return-Path: <d.w.chadwick@kent.ac.uk>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F19E21F88ED for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 14:02:35 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bqtup1CrbXkq for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 14:02:34 -0700 (PDT)
Received: from mx1.kent.ac.uk (mx1.kent.ac.uk [129.12.21.39]) by ietfa.amsl.com (Postfix) with ESMTP id D899F21F88F1 for <pkix@ietf.org>; Tue, 31 Jul 2012 14:02:33 -0700 (PDT)
Received: from mx0.kent.ac.uk ([129.12.21.32]) by mx1.kent.ac.uk with esmtps (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from <d.w.chadwick@kent.ac.uk>) id 1SwJaK-0006KW-3z; Tue, 31 Jul 2012 22:02:32 +0100
Received: from [87.113.180.224] (helo=[192.168.1.39]) by mx0.kent.ac.uk with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.72) (envelope-from <d.w.chadwick@kent.ac.uk>) id 1SwJaJ-0007Hk-H9; Tue, 31 Jul 2012 22:02:31 +0100
Message-ID: <501847E6.1070408@kent.ac.uk>
Date: Tue, 31 Jul 2012 22:02:30 +0100
From: David Chadwick <d.w.chadwick@kent.ac.uk>
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: Patrick Patterson <ppatterson@carillon.ca>
References: <CAF4=xaGo+sFY=DvWQjugFTnNo6ZxjxOn2XazXxJ60BXKLhTxbg@mail.gmail.com> <50116DA5.5050008@kent.ac.uk> <5A5DFF62-F9CF-4F30-9ED8-92ACE29C58E4@carillon.ca> <5012C545.6070206@kent.ac.uk> <EA182095-9420-4378-8E34-0BA331234D3D@carillon.ca>
In-Reply-To: <EA182095-9420-4378-8E34-0BA331234D3D@carillon.ca>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cc: IETF PKIX <pkix@ietf.org>
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 21:02:35 -0000

Hi Patrick

On 29/07/2012 22:36, Patrick Patterson wrote:
> Hello David,
>
>
> On 2012-07-27, at 12:43 PM, David Chadwick wrote:
>
>> Hi Patrick
>>
>> On 27/07/2012 16:44, Patrick Patterson wrote:
>>> Hello David,
>>>
>>> On 2012-07-26, at 12:17 PM, David Chadwick wrote:
>>>
>>> Ok - so how would this work in practice?
>>
>> Very similar to your proposed EKU. The concept is the same. A
>> subject's PKC is given an extension to say that they are the
>> attribute authority for issuing privilege attributes to other
>> entities. (Note in the discussion below I am using AA rather than
>> SOA since most people currently do not support delegation of
>> authority but assume the AA is the SOA. But once you introduce
>> dynamic delegation of authority you need to differentiate between
>> the SOA and the subordinate AAs (as in trust anchor CAs and
>> subordinate CAs)).
>>
>> In terms of encoding, there is an OID for the SOAidentifier
>> extension (whose content is null), whereas with EKU there is an OID
>> for the new key usage. Once you have detected this OID in your PKC,
>> thereafter the code you need for validating certs/assertions/claims
>> is the same.
>>
>
> Ok - however, with a number of the new certificate policies that are
> being put in place due to recent events, the trend is towards moving
> to a mandatory, restrictive EKU for certificates that assert both
> digitalSignature and nonRepudiation/contentCommitment KU bits,

Well if you have a requirement for a mandatory EKU, then you either have 
to have an EKU, or remove the mandatory requirement. I dont see an 
alternative to this. (Of course this is not a requirement of X.509, but 
is a much more recent operational development as you say below.)

  with
> anyEKU specifically disallowed. Since I would presume that any SOA
> would require both of these, and RFC5280 processing rules prohibit
> relying party applications from allowing a certificate for a purpose
> that is not allowed by the EKU value, I still don't see how this
> would help?
>
>> I've not seen too many
>>> relying party applications that know what to do with this
>>> extension.
>>
>> You do the same as you propose with your extension. If the
>> certificate/assertion/claim (these are all synonymous conceptually)
>> is signed by an authority who has a PKC with the extension, then
>> the signer is authorised by the CA to issue
>> certs/assertions/claims. If no such extension exists in the
>> signer's PKC, then it is up to the relying party to determine who
>> the trusted attribute authorities are. What this extension
>> effectively does is remove the set of trusted AAs from the RP's
>> configured trust store, and replaces it with a trusted CA, and the
>> trusted CA then dynamically says who the trusted AAs are (by
>> inserting this extension in their PKCs).
>>
>
> Ok - but there is a difference between implementing a simple check
> for an OID value of an already understood extension, and implementing
> support for an extension that hitherto has not traditionally been
> understood.

I dont believe so. The code is essentially the same, looking for an OID 
in a certificate extension. The semantics come from the text that 
describe the OID, and those semantics are built into the code that 
executes after the OID has been found. And this code is the same for 
both extensions. (we implemented this many years ago).


  Furthermore, from what you included, this extension
> cannot be marked critical, which is not what is desired for the
> claimSigning EKU.

The distinction between critical and non-critical is actually not there 
for code that understands the extension. Both critical and non-critical 
extensions have to be obeyed if the RP understands the extension. The 
use of non-critical is there to help RPs that dont understand the 
extension and have other means of configuring in the trust e.g. through 
IDP meta-data. So I think making the extension critical is a negative 
aspect and is self defeating since it means that RPs that use IDP-meta 
data to configure in trust cannot work once the extension is marked 
critical. Thus non-critical seems to be the correct approach to me.

Furthermore the process of PKI checking is different to and separate 
from PMI checking. An RP has a signed assertion/claim/certificate that 
it needs to validate. If it has its own trust rules for which IDPs it 
trusts to issue which claims then it does not want or need the PKI to do 
this for it. All it requires from the PKI is assurance that the 
signature is from an IDP that it trusts. End of story. It does not need 
the PKI to tell it if the signer has used the correct key with the 
correct EKU in it. It has its own rules for this.

It appears to me that what the EKU is trying to do is implement the thin 
end of the authorisation wedge into the PKI authentication mechanism. 
But EKU is too blunt an instrument to implement PMI in.


>
>> Of course on its own this one extension is not enough, since the RP
>> needs to know the following (at least)
>>
>> i) who are the trusted AAs. ii) which attributes is each AA trusted
>> to issue iii) who can the AA issue these attributes to.
>>
>> so for example, you might trust Bank of America AA to issue visa
>> attributes to anyone, the university of kent to issue student
>> attributes to anyone with a kent email address etc.
>>
>
> As I said in the draft, Federation Realm designation, and the marking
> of who is authorised as a Trust point (either CA or IDP) is out of
> scope for this ID.

Agreed. Doing authorisation is not part of a PKI. So draw the line at 
passing over the root of trust from the PKI to a PMI entity, and then 
leave the PMI to work out everything else.

regards

David

>
> So, I would suggest that there is still a requirement for this ID.
> :)
>
> Best Regards,
>
> --- Patrick Patterson Chief PKI Architect Carillon Information
> Security Inc. http://www.carillon.ca
>
>
>
>
>

From peter.sylvester@edelweb.fr  Tue Jul 31 14:13:51 2012
Return-Path: <peter.sylvester@edelweb.fr>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C2CB621F88C0 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 14:13:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, HTML_MESSAGE=0.001]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f2LTc8L2OMS9 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 14:13:51 -0700 (PDT)
Received: from mx1.on-x.com (mx1.on-x.com [92.103.215.13]) by ietfa.amsl.com (Postfix) with ESMTP id 0842321F8923 for <pkix@ietf.org>; Tue, 31 Jul 2012 14:13:51 -0700 (PDT)
Received: from varuna.puteaux.on-x (varuna.puteaux.on-x [192.168.10.6]) by mx1.on-x.com (Postfix) with ESMTP id 8A07B5E06B for <pkix@ietf.org>; Tue, 31 Jul 2012 23:11:56 +0200 (CEST)
Received: from smtps.on-x.com (mintaka.puteaux.on-x [192.168.14.11]) by varuna.puteaux.on-x (Postfix) with ESMTP id EFCF97D603 for <pkix@ietf.org>; Tue, 31 Jul 2012 22:47:53 +0200 (CEST)
Received: from [192.168.0.29] (gut75-3-82-227-163-182.fbx.proxad.net [82.227.163.182]) by smtps.on-x.com (Postfix) with ESMTPSA id 35AF0236338 for <pkix@ietf.org>; Tue, 31 Jul 2012 16:52:00 -0400 (EDT)
Message-ID: <50184A86.6090005@edelweb.fr>
Date: Tue, 31 Jul 2012 23:13:42 +0200
From: Peter Sylvester <peter.sylvester@edelweb.fr>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120714 Thunderbird/14.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <501833FC.7000207@bbn.com>
In-Reply-To: <501833FC.7000207@bbn.com>
Content-Type: multipart/alternative; boundary="------------030505080509000701020906"
Subject: Re: [pkix] new text for 5280bis, Section 3.2
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 21:13:51 -0000

This is a multi-part message in MIME format.
--------------030505080509000701020906
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

On 07/31/2012 09:37 PM, Stephen Kent wrote:

at least two bugs

s/generate/use/

s/identity/identify


> Another version, incorporating Peter's suggested text*
> *
>
> *2.Update to RFC 5280, Section 3.2: Certification Paths and Trust*
>
> ***Add the following paragraph to the end of RFC 5280, Section 3.2:*
>
> ***In some cases, a self-signed certificate that does not contain a BasicConstraints extension is 
> used to convey a public key. Consistent with Section 3.4.61 of X.509 (11/2008) we note that use of 
> self-issued certificates and self-signed certificates issued by other than CAs are outside the 
> scope of this specification. Thus, for example, a web server or client might generate a 
> self-signed certificate to identity itself. These**certificates, and how a relying party uses them 
> to authenticate asserted identities, are both outside the scope of RFC 5280.*
> Comments?
>
> Steve
>
>
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix


--------------030505080509000701020906
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">On 07/31/2012 09:37 PM, Stephen Kent
      wrote:<br>
      <br>
      at least two bugs<br>
      <br>
      s/generate/use/<br>
      <br>
      s/identity/identify<br>
      <br>
      <br>
    </div>
    <blockquote cite="mid:501833FC.7000207@bbn.com" type="cite">
      <meta http-equiv="content-type" content="text/html;
        charset=ISO-8859-1">
      Another version, incorporating Peter's suggested text<b><br>
      </b>
      <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
            style="font-size:10.0pt;font-family:Monaco">2.<span
              style="mso-spacerun:yes">&nbsp; </span>Update to RFC 5280,
            Section 3.2: Certification Paths and Trust<o:p></o:p></span></b></p>
      <p class="MsoNormal"><b style="mso-bidi-font-weight:normal"><span
            style="font-size:10.0pt;font-family:Monaco"><o:p></o:p></span></b><b>Add

          the following paragraph to the end of RFC 5280, Section 3.2:</b><br>
      </p>
      <b style="mso-bidi-font-weight:normal"><span
          style="font-size:10.0pt;font-family:Monaco"></span></b><b>In
        some cases, a self-signed certificate that does not contain a
        BasicConstraints extension is used to convey a public key.
        Consistent with Section 3.4.61 of X.509 (11/2008) we note that
        use of self-issued certificates and self-signed certificates
        issued by other than CAs are outside the scope of this
        specification. Thus, for example, a web server or client might
        generate a self-signed certificate to identity itself. These</b><b>
        certificates, and how a relying party uses them to authenticate
        asserted identities, are both outside the scope of RFC 5280.</b><br>
      <pre wrap="">Comments?

Steve
</pre>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
pkix mailing list
<a class="moz-txt-link-abbreviated" href="mailto:pkix@ietf.org">pkix@ietf.org</a>
<a class="moz-txt-link-freetext" href="https://www.ietf.org/mailman/listinfo/pkix">https://www.ietf.org/mailman/listinfo/pkix</a>
</pre>
    </blockquote>
    <br>
  </body>
</html>

--------------030505080509000701020906--

From peter.sylvester@edelweb.fr  Tue Jul 31 14:27:09 2012
Return-Path: <peter.sylvester@edelweb.fr>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5048D21F8876 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 14:27:09 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.599
X-Spam-Level: 
X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000,  BAYES_00=-2.599]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id PmdarsH9jw1q for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 14:27:08 -0700 (PDT)
Received: from mx1.on-x.com (mx1.on-x.com [92.103.215.13]) by ietfa.amsl.com (Postfix) with ESMTP id A766421F8874 for <pkix@ietf.org>; Tue, 31 Jul 2012 14:27:08 -0700 (PDT)
Received: from varuna.puteaux.on-x (varuna.puteaux.on-x [192.168.10.6]) by mx1.on-x.com (Postfix) with ESMTP id CE2865E073 for <pkix@ietf.org>; Tue, 31 Jul 2012 23:25:14 +0200 (CEST)
Received: from smtps.on-x.com (mintaka.puteaux.on-x [192.168.14.11]) by varuna.puteaux.on-x (Postfix) with ESMTP id 6DFE3842176 for <pkix@ietf.org>; Tue, 31 Jul 2012 23:01:14 +0200 (CEST)
Received: from [192.168.0.29] (gut75-3-82-227-163-182.fbx.proxad.net [82.227.163.182]) by smtps.on-x.com (Postfix) with ESMTPSA id C92A3236338 for <pkix@ietf.org>; Tue, 31 Jul 2012 17:05:20 -0400 (EDT)
Message-ID: <50184DA7.4080604@edelweb.fr>
Date: Tue, 31 Jul 2012 23:27:03 +0200
From: Peter Sylvester <peter.sylvester@edelweb.fr>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:14.0) Gecko/20120714 Thunderbird/14.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <CC3D68F8.4A14F%stefan@aaa-sec.com> <501847DC.5030509@ieca.com>
In-Reply-To: <501847DC.5030509@ieca.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 21:27:09 -0000

On 07/31/2012 11:02 PM, Sean Turner wrote:
> I'm confused how a vague definition of a claim lines up with the need for a specific EKU (from 
> Patrick's earlier message):
>
>   Unfortunately, due to recent events regarding the abuse
>   of certificates asserting Key Usage values of
>   digitalSignature and nonRepudiation, a number of policy
>   authorities are mandating strict EKU values in all
>   certificates asserting these key usage values, and
>   mandating by policy that the anyEKU OID not be present.
>
> You need a specific EKU to indicate you can sign a nebulous thing. What's the client going to 
> check to know whether it's signing a claim or not?
>
> spt

+1




From kent@bbn.com  Tue Jul 31 14:52:32 2012
Return-Path: <kent@bbn.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0D5121F8852 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 14:52:32 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -106.475
X-Spam-Level: 
X-Spam-Status: No, score=-106.475 tagged_above=-999 required=5 tests=[AWL=0.123, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GAHnSMCW3kXP for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 14:52:32 -0700 (PDT)
Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by ietfa.amsl.com (Postfix) with ESMTP id 01E2821F86D6 for <pkix@ietf.org>; Tue, 31 Jul 2012 14:52:31 -0700 (PDT)
Received: from dommiel.bbn.com ([192.1.122.15]:44426 helo=dhcp-15b7.meeting.ietf.org) by smtp.bbn.com with esmtp (Exim 4.77 (FreeBSD)) (envelope-from <kent@bbn.com>) id 1SwKMh-00047t-1j for pkix@ietf.org; Tue, 31 Jul 2012 17:52:31 -0400
Message-ID: <5018539E.5040802@bbn.com>
Date: Tue, 31 Jul 2012 17:52:30 -0400
From: Stephen Kent <kent@bbn.com>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:14.0) Gecko/20120713 Thunderbird/14.0
MIME-Version: 1.0
To: pkix@ietf.org
References: <501833FC.7000207@bbn.com> <50184A86.6090005@edelweb.fr>
In-Reply-To: <50184A86.6090005@edelweb.fr>
Content-Type: multipart/alternative; boundary="------------030203030100030407000807"
Subject: Re: [pkix] new text for 5280bis, Section 3.2
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 21:52:33 -0000

This is a multi-part message in MIME format.
--------------030203030100030407000807
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit


On 7/31/12 5:13 PM, Peter Sylvester wrote:
> On 07/31/2012 09:37 PM, Stephen Kent wrote:
>
> at least two bugs
>
> s/generate/use/
I think "generate" is appropriate. 5280 imposes rules on entities that 
signs certs
and these are self-signed certs. "Using" certs is too ambiguous.
>
> s/identity/identify
>
whoops. you're right here!

Steve

--------------030203030100030407000807
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <br>
    <div class="moz-cite-prefix">On 7/31/12 5:13 PM, Peter Sylvester
      wrote:<br>
    </div>
    <blockquote cite="mid:50184A86.6090005@edelweb.fr" type="cite">
      <meta content="text/html; charset=ISO-8859-1"
        http-equiv="Content-Type">
      <div class="moz-cite-prefix">On 07/31/2012 09:37 PM, Stephen Kent
        wrote:<br>
        <br>
        at least two bugs<br>
        <br>
        s/generate/use/<br>
      </div>
    </blockquote>
    I think "generate" is appropriate. 5280 imposes rules on entities
    that signs certs<br>
    and these are self-signed certs. "Using" certs is too ambiguous.<br>
    <blockquote cite="mid:50184A86.6090005@edelweb.fr" type="cite">
      <div class="moz-cite-prefix"> <br>
        s/identity/identify<br>
        <br>
      </div>
    </blockquote>
    whoops. you're right here!<br>
    <br>
    Steve<br>
  </body>
</html>

--------------030203030100030407000807--

From william.polk@nist.gov  Tue Jul 31 16:47:30 2012
Return-Path: <william.polk@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id F1DEC11E8142 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 16:47:30 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 567+Hkg7KwIS for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 16:47:30 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id 5A49A11E808E for <pkix@ietf.org>; Tue, 31 Jul 2012 16:47:30 -0700 (PDT)
Received: from WSXGHUB1.xchange.nist.gov (129.6.18.96) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Tue, 31 Jul 2012 19:46:57 -0400
Received: from MBCLUSTER.xchange.nist.gov ([fe80::d479:3188:aec0:cb66]) by WSXGHUB1.xchange.nist.gov ([129.6.18.96]) with mapi; Tue, 31 Jul 2012 19:47:07 -0400
From: "Polk, William T." <william.polk@nist.gov>
To: Stephen Kent <kent@bbn.com>, pkix <pkix@ietf.org>
Date: Tue, 31 Jul 2012 19:46:12 -0400
Thread-Topic: [pkix] 2560bis
Thread-Index: Ac1trWx6m3G2BR9AS7mbME7rpub9NgByDH38
Message-ID: <D7A0423E5E193F40BE6E94126930C4930B9F70E730@MBCLUSTER.xchange.nist.gov>
References: <50156F44.6010305@bbn.com>
In-Reply-To: <50156F44.6010305@bbn.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 31 Jul 2012 23:47:31 -0000

B.

________________________________________
From: pkix-bounces@ietf.org [pkix-bounces@ietf.org] On Behalf Of Stephen Kent [kent@bbn.com]
Sent: Sunday, July 29, 2012 1:13 PM
To: pkix
Subject: [pkix] 2560bis

Folks,

Recent messages exchanges point to significant disagreement about the
future direction
for this doc. At the March meeting Stefan presented a proposal for how
to move
ahead, as outlined in his slides. As noted in the minutes, the audience
(at the mic)
included one indication of support for this streamlined approach, and
one expression
of concern. Not a lot of interest.

Work on this doc has dragged on for 2 years now. In October of 2011
Santosh argued that
version -04 of the doc was, in his opinion, a step backwards, adding
more confusion to
RFC 2560 vs. clarifying it. Stefan agreed (in a message in March of
2012), and
thus he created the current, stripped-down version of the doc (-05)
which was published
recently.

Given the mixed response to this version, it's not clear that the WG
members who are interested
in OCSP clarifications are in agreement on how to proceed.

So, let's begin a straw poll on the topic.  Here are the options I am
offering:

     A - continue to work with the -05 version as the basis for an RFC
     B - revert to the -04 version as the basis for an RFC
     C - don't publish a clarifications document for OCSP
     D - the respondent volunteers to work on a new version of 2560bis

Please send your replies to the list starting now. The straw poll will close
in two weeks, on August 12. While there are many other, legitimate
comments one could
offer, I am interested only in replies to this multiple choice straw
poll (i.e., no
essay replies :-) )

Thanks,

Steve


_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From william.polk@nist.gov  Tue Jul 31 17:22:34 2012
Return-Path: <william.polk@nist.gov>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EEC0C21F88D2 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 17:22:34 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -6.599
X-Spam-Level: 
X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RYfiTJcJpPPg for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 17:22:34 -0700 (PDT)
Received: from wsget2.nist.gov (wsget2.nist.gov [129.6.13.151]) by ietfa.amsl.com (Postfix) with ESMTP id 212A921F88C5 for <pkix@ietf.org>; Tue, 31 Jul 2012 17:22:34 -0700 (PDT)
Received: from WSXGHUB1.xchange.nist.gov (129.6.18.96) by wsget2.nist.gov (129.6.13.151) with Microsoft SMTP Server (TLS) id 14.1.355.2; Tue, 31 Jul 2012 20:22:23 -0400
Received: from MBCLUSTER.xchange.nist.gov ([fe80::d479:3188:aec0:cb66]) by WSXGHUB1.xchange.nist.gov ([129.6.18.96]) with mapi; Tue, 31 Jul 2012 20:22:33 -0400
From: "Polk, William T." <william.polk@nist.gov>
To: Stephen Kent <kent@bbn.com>, pkix <pkix@ietf.org>
Date: Tue, 31 Jul 2012 20:21:37 -0400
Thread-Topic: [pkix] 2560bis (essay version)
Thread-Index: AQHNb3uIGJDuUxJCGkSHYOac7VOEvQ==
Message-ID: <D7A0423E5E193F40BE6E94126930C4930B9F70E731@MBCLUSTER.xchange.nist.gov>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
acceptlanguage: en-US
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Subject: Re: [pkix] 2560bis (essay version)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Aug 2012 00:22:35 -0000

My apologies for the essay, but since I can't be at the session tomorrow I wanted to add
a rationale.  Since Steve asked that we *not* supply an essay, I am supplying my rant in a
separate message.

First, I want to note that I support the chairs effort to bring 2560bis to publication ASAP.
There is a real need.  Experience shows that implementers who weren't in the room/on the list
in 1999 have interpreted some text inconsistently, and have encountered problems (e.g.
key rollover) that were not treated as comprehensively as we believed at the time.
 
I would gladly support Option A if I thought it would produce a document that
could produce interoperable implementations in a timely manner, but I just don't see it.  Our
experience with implementations of RFC 2560 has been decidedly mixed, and those
implementations weren't particularly agile.  I don't think a minor edit of 2560 will meet the
need, so restarting will from 2560 will either produce a document that falls short or will take
a lot more effort than Stefan believes.

No document is ever perfect, but I think that the -04 needs very little work to be publishable.
I believe that most of the new text in the document is needed to answer errors of omission
in 2560 (which is why I think restarting from 2560 will be less efficient than you expect.)
As I recall, Santosh has some issues that he thinks could be addressed efficiently (and has 
offered to help).  Denis has asked for a lot more work, but I think he is in the rough (and option
A won't change that.)  Based on that analysis, I suggest option B as most efficent.

The most important thing, though, is not whether we choose A or B.  It is getting a document 
published that fills in the gaps in RFC 2560 in a reasonable timeframe.  One path forward might
be to double-check the email list and compile the set of problems to be addressed.  I would
start with David's slides for presentation at the meetings since he usually listed the
issues he was addressing.  Modify the list if it is too long or incomplete, then compare.  If the list
has all been addressed in -04 we are done.  If not, consider which will take more work.

My 2 cents.

Tim Polk

________________________________________
From: Polk, William T.
Sent: Tuesday, July 31, 2012 7:46 PM
To: Stephen Kent; pkix
Subject: RE: [pkix] 2560bis

B.

________________________________________
From: pkix-bounces@ietf.org [pkix-bounces@ietf.org] On Behalf Of Stephen Kent [kent@bbn.com]
Sent: Sunday, July 29, 2012 1:13 PM
To: pkix
Subject: [pkix] 2560bis

Folks,

Recent messages exchanges point to significant disagreement about the
future direction
for this doc. At the March meeting Stefan presented a proposal for how
to move
ahead, as outlined in his slides. As noted in the minutes, the audience
(at the mic)
included one indication of support for this streamlined approach, and
one expression
of concern. Not a lot of interest.

Work on this doc has dragged on for 2 years now. In October of 2011
Santosh argued that
version -04 of the doc was, in his opinion, a step backwards, adding
more confusion to
RFC 2560 vs. clarifying it. Stefan agreed (in a message in March of
2012), and
thus he created the current, stripped-down version of the doc (-05)
which was published
recently.

Given the mixed response to this version, it's not clear that the WG
members who are interested
in OCSP clarifications are in agreement on how to proceed.

So, let's begin a straw poll on the topic.  Here are the options I am
offering:

     A - continue to work with the -05 version as the basis for an RFC
     B - revert to the -04 version as the basis for an RFC
     C - don't publish a clarifications document for OCSP
     D - the respondent volunteers to work on a new version of 2560bis

Please send your replies to the list starting now. The straw poll will close
in two weeks, on August 12. While there are many other, legitimate
comments one could
offer, I am interested only in replies to this multiple choice straw
poll (i.e., no
essay replies :-) )

Thanks,

Steve


_______________________________________________
pkix mailing list
pkix@ietf.org
https://www.ietf.org/mailman/listinfo/pkix

From stefan@aaa-sec.com  Tue Jul 31 18:47:22 2012
Return-Path: <stefan@aaa-sec.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E991D11E8184 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 18:47:22 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -102.949
X-Spam-Level: 
X-Spam-Status: No, score=-102.949 tagged_above=-999 required=5 tests=[AWL=0.300, BAYES_00=-2.599, HELO_EQ_SE=0.35, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QkGIVqCxGEo0 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 18:47:22 -0700 (PDT)
Received: from s87.loopia.se (s87.loopia.se [194.9.95.113]) by ietfa.amsl.com (Postfix) with ESMTP id AB8E911E8198 for <pkix@ietf.org>; Tue, 31 Jul 2012 18:47:21 -0700 (PDT)
Received: from s87.loopia.se (localhost [127.0.0.1]) by s87.loopia.se (Postfix) with ESMTP id 8E13C1E375BC for <pkix@ietf.org>; Wed,  1 Aug 2012 03:47:19 +0200 (CEST)
X-Virus-Scanned: amavisd-new at outgoing-smtp.loopia.se
Received: from s87.loopia.se ([127.0.0.1]) by s87.loopia.se (s87.loopia.se [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 0Obt-v-B-Fmc for <pkix@ietf.org>; Wed,  1 Aug 2012 03:47:19 +0200 (CEST)
Received: from s328.loopia.se (new-s34.loopia.se [194.9.94.94]) by s87.loopia.se (Postfix) with ESMTP id 475A81E375B8 for <pkix@ietf.org>; Wed,  1 Aug 2012 03:47:19 +0200 (CEST)
Received: (qmail 72127 invoked from network); 1 Aug 2012 01:47:18 -0000
Received: from gw.aaa-sec.ideon.se (HELO [192.168.1.213]) (stefan@fiddler.nu@[85.235.7.89]) (envelope-sender <stefan@aaa-sec.com>) by s328.loopia.se (qmail-ldap-1.03) with DES-CBC3-SHA encrypted SMTP for <mmyers@fastq.com>; 1 Aug 2012 01:47:18 -0000
User-Agent: Microsoft-MacOutlook/14.2.3.120616
Date: Tue, 31 Jul 2012 18:46:57 -0700
From: Stefan Santesson <stefan@aaa-sec.com>
To: Michael Myers <mmyers@fastq.com>, pkix PKIX <pkix@ietf.org>
Message-ID: <CC3DD7AF.4A22D%stefan@aaa-sec.com>
Thread-Topic: [pkix] 2560bis
In-Reply-To: <953A4538-4301-4EB5-8D74-4601660264EC@fastq.com>
Mime-version: 1.0
Content-type: text/plain; charset="US-ASCII"
Content-transfer-encoding: 7bit
Cc: "Polk, William T." <william.polk@nist.gov>
Subject: Re: [pkix] 2560bis
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Aug 2012 01:47:23 -0000

Mike,

Hoping that your mail reaches the list, else my reply, containing your
message below will.

On your essay:
I agre and I hope nothing in draft 05 lead you to think that you need to
use the same key to sign the response that was used to issue the cert.
However, for authorized responders, the key used to sign the cert
SHOULD/MUST be the same key that was used to sign the cert to the
authorized responder.
Atleast, this is the only option that clients need to support.

/Stefan 

On 12-07-31 6:42 PM, "Michael Myers" <mmyers@fastq.com> wrote:

>Vote:  I change my vote to option A.
>
>Notice:  I assume I'm writing to just the three of you since I still
>can't get a fix on why my posts to PKIX bounce.  I am at this very
>moment working with my ISP on the issue. But to the extent you are
>consolidating WG positions for a consensus on a path forward, there's
>mine.
>
>Essay:  The key that signs the response need not be the key that
>signed the cert.  That capability MUST be maintained to enable an
>effective distribution of authority.  I know well the original
>language is at times ambiguous, the reasons for which have likely been
>overcome by events.
>
>Mike



From mrex@sap.com  Tue Jul 31 18:53:18 2012
Return-Path: <mrex@sap.com>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 290A611E80E9 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 18:53:18 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -10.19
X-Spam-Level: 
X-Spam-Status: No, score=-10.19 tagged_above=-999 required=5 tests=[AWL=0.059,  BAYES_00=-2.599, HELO_EQ_DE=0.35, RCVD_IN_DNSWL_HI=-8]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ol8l6VS2fuv8 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 18:53:17 -0700 (PDT)
Received: from smtpde01.sap-ag.de (smtpde01.sap-ag.de [155.56.68.170]) by ietfa.amsl.com (Postfix) with ESMTP id 4727111E80DB for <pkix@ietf.org>; Tue, 31 Jul 2012 18:53:17 -0700 (PDT)
Received: from mail.sap.corp by smtpde01.sap-ag.de (26) with ESMTP id q711rAsU013604 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 1 Aug 2012 03:53:10 +0200 (MEST)
In-Reply-To: <D7A0423E5E193F40BE6E94126930C4930B9F70E731@MBCLUSTER.xchange.nist.gov>
To: "Polk, William T." <william.polk@nist.gov>
Date: Wed, 1 Aug 2012 03:53:10 +0200 (CEST)
X-Mailer: ELM [version 2.4ME+ PL125 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="US-ASCII"
Message-Id: <20120801015310.9095A1A106@ld9781.wdf.sap.corp>
From: mrex@sap.com (Martin Rex)
X-SAP: out
Cc: pkix <pkix@ietf.org>
Subject: Re: [pkix] 2560bis (essay version)
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: mrex@sap.com
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Aug 2012 01:53:18 -0000

Polk, William T. wrote:
>  
> I would gladly support Option A if I thought it would produce a document
> that could produce interoperable implementations in a timely manner,
> but I just don't see it.

I do.  Documenting only the differences and pointing out its values
has caused much greater adoption in the installed base of TLS for
changes such as secure renegotiation (rfc5746) or the SSL Beast
countermeasure through 1/(n-1) initial record splitting than
what you can see about adoption of TLSv1.1 over the last 6 years.


>
> Our experience with implementations of
> RFC 2560 has been decidedly mixed, and those implementations weren't
> particularly agile.  I don't think a minor edit of 2560 will meet the
> need, so restarting will from 2560 will either produce a document that
> falls short or will take a lot more effort than Stefan believes.


This sounds like you're asking for _changing_ the existing protocol
by publishing a new spec with different or additional requirements.



On quick glance, the most significant "improvement" of -04 over rfc2560
seems to be the examples in Appendix E.  Carrying them over into -05
should be simple and straightforward.

What seems to be badly lacking in Appendix E of -04 is the requirements
of which certs MUST be included in the OCSP response for each of the
example CA/OCSP architecture/hierarchy, except for Figure 1 (where
no cert is necessary).

What should be spelled out explicitly is that some of the depicted
architectures require an RP to be able to (a) build a certification
path (something that is *NOT* required for PKIX/rfc5280), and
in some cases (b) being able to distinguish certs with different
public keys from the same CA (=same issuer name) based on other
characteristics than issuer name (probably SubjectKeyIdentifier).
The latter is also *NOT* required for RPs by rfc5280 (the certificate
path validation algorithm in rfc5280 6.1 is entirely ignorant of
SubjectKeyIdentifiers).


Revocation checking of the OCSP signer sounds like a very bad idea,
because it implies recursion.  There really ought to be a requirement
that implementations (of CA and OCSP software) MUST support short-lived
OCSP signer certs that obviate cert revocation checking of a _seperate_
OCSP signer cert entirely for the RP so that consumers of the technology
can configure&obtain interop with RPs that do not support such recursion.


Looking at 2.3.6 Response Verification of -04,
the ordering of checks should IMHO rather be (1), (4), (5), (3), (2)
based on the current numbering of the items, i.e. one should only
perform public key crypto operation with a key that has
been verified as being trustworthy, similar to how the certificate
path validation in rfc5280 6.1 works.


-Martin

From ppatterson@carillon.ca  Tue Jul 31 19:11:21 2012
Return-Path: <ppatterson@carillon.ca>
X-Original-To: pkix@ietfa.amsl.com
Delivered-To: pkix@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 10B0311E81A6 for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 19:11:21 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.98
X-Spam-Level: 
X-Spam-Status: No, score=-1.98 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_SORBS_WEB=0.619]
Received: from mail.ietf.org ([12.22.58.30]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id x61W+63lwVss for <pkix@ietfa.amsl.com>; Tue, 31 Jul 2012 19:11:16 -0700 (PDT)
Received: from mail.carillon.ca (mail.carillon.ca [207.115.107.18]) by ietfa.amsl.com (Postfix) with ESMTP id 78E7F11E81A1 for <pkix@ietf.org>; Tue, 31 Jul 2012 19:11:16 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by mail.carillon.ca (Postfix) with ESMTP id 04E39A808EA; Tue, 31 Jul 2012 22:11:24 -0400 (EDT)
X-Virus-Scanned: Debian amavisd-new at rhea-new.carillon.ca
Received: from mail.carillon.ca ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hqYfm-QuDWr4; Tue, 31 Jul 2012 22:11:22 -0400 (EDT)
Received: from [172.20.10.4] (unknown [74.198.151.70]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (No client certificate requested) by mail.carillon.ca (Postfix) with ESMTPSA id 2CE9AA808A2; Tue, 31 Jul 2012 22:11:20 -0400 (EDT)
Mime-Version: 1.0 (Apple Message framework v1084)
Content-Type: text/plain; charset=us-ascii
From: Patrick Patterson <ppatterson@carillon.ca>
In-Reply-To: <501847DC.5030509@ieca.com>
Date: Tue, 31 Jul 2012 22:11:11 -0400
Content-Transfer-Encoding: quoted-printable
Message-Id: <D439B1FC-670E-4583-ABF9-4031EAB3EEF1@carillon.ca>
References: <CC3D68F8.4A14F%stefan@aaa-sec.com> <501847DC.5030509@ieca.com>
To: Sean Turner <turners@ieca.com>
X-Mailer: Apple Mail (2.1084)
Cc: "pkix@ietf.org" <pkix@ietf.org>
Subject: Re: [pkix] Updated claimSigning EKU Internet Draft
X-BeenThere: pkix@ietf.org
X-Mailman-Version: 2.1.12
Precedence: list
List-Id: PKIX Working Group <pkix.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/pkix>, <mailto:pkix-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/pkix>
List-Post: <mailto:pkix@ietf.org>
List-Help: <mailto:pkix-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/pkix>, <mailto:pkix-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 01 Aug 2012 02:11:21 -0000

Hi Sean,

We're currently working the definition of "claim" that we're going to =
use and have come up with:

"A signed claim is a set of attributes bound to a particular subject =
using a digital signature in a way that relying parties can make access =
or authorization decisions. =20

The presence of the claimSigning EKU indicates that a CA has approved =
the certificate holder to sign claims for use within a specific =
community of interest (e.g., a Federation) according to the rules of =
that community. In other words, the holder of a certificate that asserts =
the claimSigning EKU can bind attributes to a subject for processing by =
a relying party "

What do people think about that?

We'll be further augmenting this definition with clearer examples, but =
the original one for use by an IDP is still my main target (Matt has his =
own which will be made clear in the updated draft :). We'll also be =
addressing a bit why the current status quo may not work for everyone =
(and may not continue to work for anyone if all certificates issued by =
major CAs that assert digSig and nonRep start having mandatory populated =
EKU values).

I'll talk to Stefan tomorrow, but I'm leaning towards withdrawing our =
spot on the Agenda tomorrow, until we can come up with a Draft that =
addresses the concerns posted. (There's also the matter that Matt's not =
here, and I've got to leave before PKIX tomorrow :(  )

Cheers,

Patrick.

On 2012-07-31, at 5:02 PM, Sean Turner wrote:

> I'm confused how a vague definition of a claim lines up with the need =
for a specific EKU (from Patrick's earlier message):
>=20
>  Unfortunately, due to recent events regarding the abuse
>  of certificates asserting Key Usage values of
>  digitalSignature and nonRepudiation, a number of policy
>  authorities are mandating strict EKU values in all
>  certificates asserting these key usage values, and
>  mandating by policy that the anyEKU OID not be present.
>=20
> You need a specific EKU to indicate you can sign a nebulous thing. =
What's the client going to check to know whether it's signing a claim or =
not?
>=20
> spt
>=20
> On 7/31/12 10:55 AM, Stefan Santesson wrote:
>> David,
>>=20
>> A broad definition of "Claim" may be appropriate, but there need to =
be one.
>> Absent a definition, the EKU becomes somewhat pointless as usage
>> declaration.
>>=20
>> /Stefan
>>=20
>>=20
>>=20
>>=20
>> On 12-07-31 10:37 AM, "David A. Cooper" <david.cooper@nist.gov> =
wrote:
>>=20
>>> Stefan,
>>>=20
>>> Based on earlier discussions that I've had with some of the editors =
of
>>> this document, I believe that the reason the draft isn't entirely =
clear
>>> about what might constitute a "Claim" is that there is a desire for =
the
>>> definition of this OID to be somewhat generic so that in the future,
>>> when a key purpose OID is needed to indicate that the subject is
>>> authorized to sign "claims," this OID can be used rather than having =
to
>>> define a new OID for each specific application.
>>>=20
>>> As an example, there are some signed CMS objects on PIV Cards. The =
CMS
>>> objects contain such things as biometric data of the cardholder =
and/or a
>>> unique identifier that has been assigned to the card.  In FIPS 201, =
a
>>> key purpose OID was defined, id-PIV-content-signing, and there is a
>>> requirement that the signer of the CMS objects on the PIV Card must =
have
>>> a certificate that asserts the id-PIV-content-signing key purpose =
OID.
>>> When PIV-Interoperable cards were defined (similar to PIV Cards, but =
not
>>> issued by the U.S. Federal government), a new key purpose OID needed =
to
>>> be defined for the signers of the CMS objects on those cards,
>>> id-fpki-pivi-content-signing.  It was noted that if there were a =
generic
>>> "claim signing" OID, then that OID could be used for both PIV and =
PIV-I
>>> Cards in addition to other cards that don't qualify as either PIV or
>>> PIV-I.  We even received a comment on the current draft of FIPS 201
>>> =
(http://csrc.nist.gov/publications/drafts/fips201-2/draft-fips-201-2_comme=

>>> nts_disposition-for-2011-draft.pdf)
>>> asking that FIPS 201 specify the use of the claimSigning OID being
>>> discussed in the PKIX WG rather than (or in addition to) the
>>> id-PIV-content-signing OID.
>>>=20
>>> Dave
>>>=20
>>> On 07/30/2012 03:04 PM, Stefan Santesson wrote:
>>>> I have a number of issues/questions regarding this draft (still).
>>>>=20
>>>> 1) Definition of "Claim"
>>>> This EKU is said to state that the subject is appropriate to sign
>>>> "claims", but the draft does not make an effort to define what a =
claim
>>>> is.
>>>> It provides the examples SAML assertions and Attribute Assertions, =
but
>>>> does not state what else could be regarded as a claim.
>>>> Thus this EKU could be used for virtually anything in absence of a =
clear
>>>> definition.
>>>>=20
>>>> 2) Explain when this EKU is needed, relative to metadata and
>>>> pre-configured trust.
>>>> The only examples are SAML. In SAML it is common to either =
preconfigure
>>>> trust in assertion signers, removing the need for an EKU, or by =
placing
>>>> the cert in signed metadata also removing the need for an EKU. What =
are
>>>> the particular use-case where you would neither use metadata, nor
>>>> pre-configured trust?
>>>> A clarification of this would help the reader to understand when =
this
>>>> EKU
>>>> is appropriate.
>>>>=20
>>>> 3) Discussion about assurance levels and policy OIDs.
>>>> When would you convey information about assurance level of an =
assertion
>>>> in
>>>> a certificate policy of the signing certificate?
>>>> Information about assurance level is provided in SAML requests and
>>>> responses.
>>>> Information about what assurance level the IdP is trusted to =
provide
>>>> (certified for) is normally provided in signed metadata (SAML) or =
may be
>>>> implicit in the case of pre-configured trust.
>>>> When would it be appropriate to solve this using cert policies?
>>>> Is there any deployed examples of this?
>>>>=20
>>>>=20
>>>> /Stefan
>>=20
>>=20
>> _______________________________________________
>> pkix mailing list
>> pkix@ietf.org
>> https://www.ietf.org/mailman/listinfo/pkix
>>=20
> _______________________________________________
> pkix mailing list
> pkix@ietf.org
> https://www.ietf.org/mailman/listinfo/pkix

---
Patrick Patterson
President and Chief PKI Architect
Carillon Information Security Inc.
http://www.carillon.ca

tel: +1 514 485 0789
mobile: +1 514 994 8699
fax: +1 450 424 9559





