From turners@ieca.com Mon Oct 5 11:00:49 2009 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ED00928C23D for ; Mon, 5 Oct 2009 11:00:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.713 X-Spam-Level: X-Spam-Status: No, score=-2.713 tagged_above=-999 required=5 tests=[AWL=-0.114, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JqaHDMWiL1za for ; Mon, 5 Oct 2009 11:00:49 -0700 (PDT) Received: from smtp100.biz.mail.re2.yahoo.com (smtp100.biz.mail.re2.yahoo.com [206.190.52.46]) by core3.amsl.com (Postfix) with SMTP id 98FB828C1CD for ; Mon, 5 Oct 2009 11:00:48 -0700 (PDT) Received: (qmail 95015 invoked from network); 5 Oct 2009 18:02:22 -0000 Received: from unknown (HELO thunderfish.local) (turners@96.241.1.213 with plain) by smtp100.biz.mail.re2.yahoo.com with SMTP; 5 Oct 2009 18:02:21 -0000 X-Yahoo-SMTP: qPTWNAeswBAtDTSn9GKlmmL3C90ke7grn_5n9To- X-YMail-OSG: Nwn5iowVM1l3ub2vF5OSAl1.c9aGG7UK4bU33eXEo9WEdqwIrGGwF94A398w5lvsqhZV2JMW_uK3mQBigP8A5AJ1SzPFpnCg3PgUhReWgGP4bPUjhXvNp5UCFCq.ppxtnomh6itft3oHic3OzTwo4Bm4YqwQxl1L_c_COmSlmLQv_eVgaT5QmKwSarx4I6Ng75X3mKxbxkQ4J4AYpBX63laBR0OIXVizeYlyEohwGPNu0Q8IU5A10EYiveowRE6mNWvlmBq0GM8myipKZ50NLAHEyJixfcMpKFn1cye7yDEVE3N9ubkeWa4RGY2XQj4EydAlGQpmlwYXV9eEU_urBLY8aIfEKi_vPIYZvIdI95fQsJkaIjQVBXxIIxjw2z2zQvjbL1SqHfbjafbnOYhz X-Yahoo-Newman-Property: ymail-3 Message-ID: <4ACA34AD.3070900@ieca.com> Date: Mon, 05 Oct 2009 14:02:21 -0400 From: Sean Turner User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) MIME-Version: 1.0 To: smime@ietf.org Content-Type: multipart/mixed; boundary="------------030200060305060906000600" Subject: [smime] Possible Work Item: draft-turner-additional-cms-ri-choices-00.txt X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 05 Oct 2009 18:00:50 -0000 This is a multi-part message in MIME format. --------------030200060305060906000600 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Russ and I have posted the following individual draft. I would like the working group to consider adopting it as a WG item. spt --------------030200060305060906000600 Content-Type: message/rfc822; name="I-D ACTION:draft-turner-additional-cms-ri-choices-00.txt.eml" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename*0="I-D ACTION:draft-turner-additional-cms-ri-choices-00.txt.eml" X-Account-Key: account2 X-Mozilla-Keys: X-Apparently-To: turners@ieca.com via 216.252.120.71; Mon, 05 Oct 2009 10:47:25 -0700 X-YMailISG: NtbLkUAWLDuUJRiAu4Isk3pfo36jYOjjoLm7sA3GNM9tLSU4nrm1Qr3ap8kdKjRIeXa9GOSsgHA67FxGoUjitFzTCtCRPIYYjWgs1jMECpFPLBVLlRk0VO62sHcooSdaL3S_mLTwyPWuXta6ndtasjFgG8nW83NiLSDSsDRX0se5IczenKh60G5nzoLsSb1yirqvWwWpG1ViZTHdxIRfguAb0Jiry3jvDr9ukL2AeUtpPeNk.YCGbyfFof_3hPX7NHjSlr_rRjL12i_y3DxdUT4nuZh3DBUoIRLyvpSctDy2CuFzQ3n7qXuA9UrkMNfJQEG_O5Spp94TwbW9nv.qsL2zFFBS5t8bA1HAsnfgJS_QQsPaQO1S9lhXZKyzmqca.J_mkXEDaJ0nhH93EPE4NxI7HZT.4KWc16OXJMfiJ3GcPg0- X-Originating-IP: [64.170.98.32] Authentication-Results: mta106.biz.mail.re3.yahoo.com from=ietf.org; domainkeys=neutral (no sig); from=ietf.org; dkim=neutral (no sig) Received: from 64.170.98.32 (EHLO mail.ietf.org) (64.170.98.32) by mta106.biz.mail.re3.yahoo.com with SMTP; Mon, 05 Oct 2009 10:47:25 -0700 Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4AE6028C20B; Mon, 5 Oct 2009 10:45:08 -0700 (PDT) X-Original-To: i-d-announce@ietf.org Delivered-To: i-d-announce@core3.amsl.com Received: by core3.amsl.com (Postfix, from userid 0) id 8544028C204; Mon, 5 Oct 2009 10:45:02 -0700 (PDT) From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org Subject: I-D ACTION:draft-turner-additional-cms-ri-choices-00.txt Content-Type: Multipart/Mixed; Boundary="NextPart" Mime-Version: 1.0 Message-Id: <20091005174503.8544028C204@core3.amsl.com> Date: Mon, 5 Oct 2009 10:45:02 -0700 (PDT) X-BeenThere: i-d-announce@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: internet-drafts@ietf.org List-Id: Internet Draft Announcements only List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: i-d-announce-bounces@ietf.org Errors-To: i-d-announce-bounces@ietf.org --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. Title : Additional CMS Revocation Information Choices Author(s) : R. Housley, S. Turner Filename : draft-turner-additional-cms-ri-choices-00.txt Pages : 8 Date : 2009-10-5 The Cryptographic Message Syntax (CMS) allows revocation information to be conveyed as part of the SignedData, EnvelopedData, AuthenticatedData, and AuthEnvelopedData content types. The preferred format for revocation information is the Certificate Revocation List (CRL), but an extension mechanism supports other revocation information choices. This document defines two additional revocation information formats for Online Certificate Status Protocol (OCSP) responses and Server-Based Certificate Validation Protocol (SCVP). A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-turner-additional-cms-ri-choices-00.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-turner-additional-cms-ri-choices-00.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2009-10-5103820.I-D@ietf.org> --NextPart Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ I-D-Announce mailing list I-D-Announce@ietf.org https://www.ietf.org/mailman/listinfo/i-d-announce Internet-Draft directories: http://www.ietf.org/shadow.html or ftp://ftp.ietf.org/ietf/1shadow-sites.txt --NextPart-- --------------030200060305060906000600-- From Nick.Pope@thales-esecurity.com Tue Oct 6 03:36:53 2009 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 13A4628C170 for ; Tue, 6 Oct 2009 03:36:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.152 X-Spam-Level: X-Spam-Status: No, score=-4.152 tagged_above=-999 required=5 tests=[AWL=1.894, BAYES_00=-2.599, HELO_MISMATCH_COM=0.553, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TIfRIu1QQt4T for ; Tue, 6 Oct 2009 03:36:52 -0700 (PDT) Received: from balder-227.proper.com (Balder-227.Proper.COM [192.245.12.227]) by core3.amsl.com (Postfix) with ESMTP id DB6AC28C194 for ; Tue, 6 Oct 2009 03:36:51 -0700 (PDT) Received: from UKCRN08.crn.thales-esecurity.com (mail.thales-esecurity.com [193.112.44.3]) by balder-227.proper.com (8.14.2/8.14.2) with ESMTP id n96AcMwD097096 for ; Tue, 6 Oct 2009 03:38:28 -0700 (MST) (envelope-from Nick.Pope@thales-esecurity.com) Received: by ukcrn08.crn.thales-esecurity.com with Internet Mail Service (5.5.2653.19) id ; Tue, 6 Oct 2009 11:37:27 +0100 Message-ID: <6FC9E49ED3472043A38619BFA97F37B5044CC21C@ukcrn08.crn.thales-esecurity.com> From: "Pope, Nick" To: ietf-smime@imc.org Date: Tue, 6 Oct 2009 11:37:15 +0100 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: multipart/mixed; boundary="----_=_NextPart_000_01CA4670.BABCBEF6" Subject: [smime] Feedback on visible signatures in PDF X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 06 Oct 2009 10:36:53 -0000 This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_000_01CA4670.BABCBEF6 Content-Type: text/plain All, Within ETSI STF 364 on PDF Advanced Electronic Signatures we are reviewing requirements relating to visible representation of signatures within PDF and would very much welcome feedback on the questions raised in the attached document to assist in setting the direction of our work. Response is requested by 12 November so that these can be discussed at our next face to face meeting. You can send responses to me by email at: nick.pope@thales-esecurity.com Regards Nick Pope Co-Lead STF 364 Consider the environment before printing this mail. "Thales e-Security Limited is incorporated in England and Wales with company registration number 2518805. Its registered office is located at 2 Dashwood Lang Road, The Bourne Business Park, Addlestone, Nr. Weybridge, Surrey KT15 2NX. The information contained in this e-mail is confidential. It may also be privileged. It is only intended for the stated addressee(s) and access to it by any other person is unauthorised. If you are not an addressee or the intended addressee, you must not disclose, copy, circulate or in any other way use or rely on the information contained in this e-mail. Such unauthorised use may be unlawful. If you have received this e-mail in error please delete it (and all copies) from your system, please also inform us immediately on +44 (0)1844 201800 or email postmaster@thales-esecurity.com. Commercial matters detailed or referred to in this e-mail are subject to a written contract signed for and on behalf of Thales e-Security Limited". ------_=_NextPart_000_01CA4670.BABCBEF6 Content-Type: application/octet-stream; name="ETSI-STF364-VisualSignatruesQuestionaire.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="ETSI-STF364-VisualSignatruesQuestionaire.pdf" JVBERi0xLjUNJeLjz9MNCjEzMyAwIG9iag08PC9MaW5lYXJpemVkIDEvTCA0MjM1Ny9PIDEzNS9F IDcwNjIvTiAyL1QgNDE5OTMvSCBbIDQ3NiAyMDRdPj4NZW5kb2JqDSAgICAgICAgICAgICAgICAg DQoxNDUgMCBvYmoNPDwvRGVjb2RlUGFybXM8PC9Db2x1bW5zIDQvUHJlZGljdG9yIDEyPj4vRmls dGVyL0ZsYXRlRGVjb2RlL0lEWzxGNjRGQTYzQzUyMTc2MkI1MzVEMzBFQjJGM0MyRjBCQj48QTY1 NEZFRjYzRDZENzU0NUIyODkxNzE4MzkzMTI3REU+XS9JbmRleFsxMzMgMjNdL0luZm8gMTMyIDAg Ui9MZW5ndGggNjkvUHJldiA0MTk5NC9Sb290IDEzNCAwIFIvU2l6ZSAxNTYvVHlwZS9YUmVmL1db MSAyIDFdPj5zdHJlYW0NCmjeYmJkEGBgYmCaASQYWUGEHZBgPgUiNoEk8kCsXhArE8TqBLHCQKy1 QOK5LAMTI4MIkMXAwEgM8Z8x5AdAgAEAAw8JDQ0KZW5kc3RyZWFtDWVuZG9iag1zdGFydHhyZWYN CjANCiUlRU9GDQogICAgICAgDQoxNTUgMCBvYmoNPDwvQyAxMDUvRmlsdGVyL0ZsYXRlRGVjb2Rl L0kgMTI4L0wgODkvTGVuZ3RoIDExMS9TIDUwPj5zdHJlYW0NCmjeYmBg4GBgYHrIwMTAIP6SgZ8B AfiBYixAyNHAwBhgksC4ACgGZABJTgaGRSCaC4i5QUoZ7YBiyXqTuWrWTZfYfiCkAWwADwPD6kCQ LBD3QJQvEQPSQKvYrcHiLAvA9jDsTYYoY/QHCDAAUtgP+Q0KZW5kc3RyZWFtDWVuZG9iag0xMzQg MCBvYmoNPDwvTGFzdE1vZGlmaWVkKEQ6MjAwOTEwMDQyMTA4MTApL01hcmtJbmZvPDwvTGV0dGVy c3BhY2VGbGFncyAwL01hcmtlZCB0cnVlPj4vTWV0YWRhdGEgMTMgMCBSL1BhZ2VMYWJlbHMgMTI5 IDAgUi9QYWdlTGF5b3V0L09uZUNvbHVtbi9QYWdlcyAxMzEgMCBSL1BpZWNlSW5mbzw8L01hcmtl ZFBERjw8L0xhc3RNb2RpZmllZChEOjIwMDkxMDA0MjEwODEwKT4+Pj4vU3RydWN0VHJlZVJvb3Qg MjYgMCBSL1R5cGUvQ2F0YWxvZz4+DWVuZG9iag0xMzUgMCBvYmoNPDwvQ29udGVudHNbMTM3IDAg UiAxMzggMCBSIDEzOSAwIFIgMTQwIDAgUiAxNDEgMCBSIDE0MiAwIFIgMTQzIDAgUiAxNDQgMCBS XS9Dcm9wQm94WzAgMCA1OTUuMjIgODQyXS9NZWRpYUJveFswIDAgNTk1LjIyIDg0Ml0vUGFyZW50 IDEzMSAwIFIvUmVzb3VyY2VzPDwvRXh0R1N0YXRlPDwvR1MwIDE0NiAwIFI+Pi9Gb250PDwvVFQw IDE0OCAwIFIvVFQxIDE1MCAwIFIvVFQyIDE1MiAwIFIvVFQzIDE1NCAwIFI+Pi9Qcm9jU2V0Wy9Q REYvVGV4dF0+Pi9Sb3RhdGUgMC9TdHJ1Y3RQYXJlbnRzIDAvVGFicy9TL1R5cGUvUGFnZT4+DWVu ZG9iag0xMzYgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0ZpcnN0IDczL0xlbmd0aCA2MTgv TiA5L1R5cGUvT2JqU3RtPj5zdHJlYW0NCmjepFTbbtswDP0VPm4PmS62JRkoCiRdsw1Yu6IO1gFD H7RUSww4dmCrWPv3I2U7iYt2XR0IBimSIin58IhYAQcRa1AkDEijUaagjQCRcEiNQYm6kGSQIKIk RiUCoZMEFdykysDJCft2Bb9t0ThULkCwbNptswvgH7hki8etY+cP/lPmrXes2rb+01M8O22WrvRg UsHO7Pazy1drD4Jzzj661jWRQrF5YVcNRDGbV6WfzaqHn5MEi08irkFiNB3Rt8E7t5u8eHy3yDeu gUv3B66rjS3fB9+l3TgWPOgI9qvsYhFcma+dX67ZZVVvbBFMN203MTbzxdsiX07LVeGAs8y7zXcw 3c0olJqt862vavbj4BLhijPbOIp5pvB5uazu8nLFbvJyWjb5bj/P68afrW0NkXxSIPw0Dtfsq+1C 0MCy+1+emlnU9y50tWsNc9/5dfNT4k8driiKwkc6eUknKbWBBN/0pY8WSYrrc8VxDCkiRUsJSlGD QRMCkkQFnXe1Wp13Gnl5OEEaxbf2FPPtI/mgDtU+lJS3763tqdf0MzcJtzbp4Jahk06njPxNizLi qdtDQKc8+QegRQ9oeQBopRIEtEx2gFYDQE/r3BYHMA778eA1bwRvX24kZNMhZDHkPxCrze2xJJEM SUKqcSQxmVXF3auPrV94bBGp46iiLz/u8RPxhC+kGMUXfMcWe67YM8JQ7ydteJ7mnGZtzxIhlyF0 6AM2aXmAt5ywYxP+LCOEucW4wAid3DEC7nuWImnIjra+zxCL1aMndpRHT7Mk5GnVI0/w16f5WJSN mukjsRWNHuy/AgwAhsVlmg0KZW5kc3RyZWFtDWVuZG9iag0xMzcgMCBvYmoNPDwvRmlsdGVyL0Zs YXRlRGVjb2RlL0xlbmd0aCA2MTk+PnN0cmVhbQ0KSIlsVFtv2jAUfs+vOI/2tITYuYFUVVoLnTqp EhJ+W/fgJW7wmibIccq6X79jQxK29gkjcb7rOdyIYLGFq6vFw+39GmK4vr5Z30Kw+LqLoe6DhRAx MBBPQRzFcZyBKCEcn0dgHEdi95HlUQFFkUY8jxMQL8F3slbSQNk1jZI1zcmg+s9Af4hvwebBMcys bGSNHXzsgGMIWcSQYx0QoOLXuxk+zTgxbNbF3Lj4hPxir2AjdvewO6hSywYoj4mgBSOShoz0z3DX mVJB18J2fQc0y8iX6lW2papOOj1ePkPn3vIqyorMqayQY9Oo0pqu1SXsaEE0DTmpW2kHo3p4JFu6 KhB0s4MQduIOkjx9pKD7GZ/N0hMvPTwTnP07knIwRrUYoW3eoOnw0T3rtgbd2g7sHr8rqNQLXRHZ VvBEU9LRMCXmxHLSzn205xe6yCJenEyQ3uKYNJX+I63GMLoneNW9/tkoUN6ey/+/mLnXSrzxXk+O 7V5akEbBQRrrgKbR5cS/PLn0Ai5MVrrWFkuqunJAR86Nam0fYWscq8TMjrpp4NDItwtf3KOxJEqT sRLZgup7nHWVmw5daPQ0GB/MQBmxDt+ojypmJzgW5asRDmSJc1a/aqvRIeYz5oUoc2T4mwtZ5yp5 FuFpTCaJmrflIjTdTinxedl8TasIDZ6F9LpSflFdQi90eY7n45NK3p9U6MFmMR+eVfrPWS3nvvl0 Vjdv03pcmDgq8JVh+hbvrjbysNclNoCexy7nxJM5cf8/wlmUFlPi/VDuQeI2qd+4TbjS2tnFo81J PS7ZsRuaygkZZNO4jYC/AgwALC1Ecw0KZW5kc3RyZWFtDWVuZG9iag0xMzggMCBvYmoNPDwvRmls dGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA1NTE+PnN0cmVhbQ0KSImUlEGPmzAQhe/5FXO0K0EwIYRI q63aTQ+ttFIPSD2kPTjgbNxl7SyYpfn3nTEJoSk99BQCnjfzvjeQf5lFYRRFGeQFBHQZJ5B3EMQi TFYQiFAsIS9nW1arY60avmTKOHAWJBzaF75m0oA7KJCFA7sH/iM/K8aDoiBB1ugno80TSFNCZ9uq hJ2CSptnVXo5Azz/2ZeuqNRXZlS6ZapShastT5nhgukCSAz/SdfWKgQeL1h+UCfw85xGQyTXIVKS yt+hk8IaJ7UBbfa2fuEZymhrQO5si84O0gH160X8JFQpEvotZwznMOcJfHtvCK3IprGFlk6Vg48R gthrLMJkfZaBTrsDQizVXhtEUNmiH0ObRpfqBkZwuaRkVqQySobwl7bwaWA4IfQAPj0+wGz+Fe7u 5o8PnzewhPv7jxu8dzWFOJjvdHs2Hc7+6SOKB4rfeJYwxQPBznHKIy6IJ4BITujj2PpFsUaBrScz ift4gUKwiBIXiMzsbVXZjpbltVUNUWn+ZWo1bUp851O2ssvpeZ4LwL3c40jZYnnJhGrwUXR5NOE9 DkV6Pr9lGwsn28KzsR3NXqvXVteK3HgwxjWIwVuinaNb6pd/Td50o3eV8ovmvLHg2m3UbBFm8dDt ZvGa9zxI2TSW9d9Ygjj1YsPisHgakoj+i9IICPuAGRIQ2ck+Tfwq6DfttKKa3qIYLPrvgojC5PJq NbgrA5qRT98RfgswAO99PSkNCmVuZHN0cmVhbQ1lbmRvYmoNMTM5IDAgb2JqDTw8L0ZpbHRlci9G bGF0ZURlY29kZS9MZW5ndGggNTgyPj5zdHJlYW0NCkiJhJNRb9owFIXf+RX30Z4gjR0SsqrqtJVW 2qRKlRppD3QPbmLAW2oz21nU/vpdJ5AgRjUJQXByTu4997u39zcwuXiAq6uL+5uvS2AMrq+/LPEw hqIE/GphxpJoPsefiKVQVBOSPFFa/Jzcnmr5QXtRFAwYFOtJHOVJGmxQBkGEt+LDrTiOk/CW2eGy BR6xbP/8inzfCg/CSvBbCVb+bpSVLzQnks4Y0d7B2lhwXuhK2ErRH8W3SW/Futr3Vy2syJvwymjA T7BCSwFmDX+UU8+1BKc2WvjGSveJzjKsMzj9011yJpnkKBU4m8l8UIVy0rHdNBgUH7DNAkt6LO5A VVJ7tVaywippRiT2V9emVXoDyjmakoYyIrFta0IMoLTySnTVdpbZ4M76MOMoyQ5h1lChp6IzTlzZ dHbdH4OnGn3dNMTTblW5xWBk67rkRe0MONNstv7ynVzSM7n0b/5fNtlB2dXMedCzKD3SfX6HtMUZ 0np1nJ7ixo9wy8f881BojGAPuBV0kRPbOI/BBk4woQGRPuShwTzi8aCTtSy9pewjMVqVPU2o9SHd pjuXnfwE/dNp5VGyGDwv4VHpEtE0A/BQmbJ5QUQC9uFUeJyZa3BewsHD8o7mnExxkjASMR/7nfer nEVpPga8IiIQ1i2SsM/KW2FfYWPFDhtAFBACN7rxsWIe3Bgf414R2Anrw1qFFduJjXzinNM0IY7O CZRGe6mPdjQ5WQWGl/l+dH4aTBA/5UAb+KVNi2iK1+Aepgp/BRgAJ84y4g0KZW5kc3RyZWFtDWVu ZG9iag0xNDAgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA1NDY+PnN0cmVhbQ0K SIlkk0GP2yAQhe/5FXMEaYMMMVnn2GsvvUTqIbsHYpOYyoUU8Kb592VwYpz0Yo2wePPNm0fFqqra wL6FdZVKLmF/hbUQjG8krDnDg25FvrQ3J9OqaJwFd4LYa/gywRwHDcGcraL7XysUqETREqjFBatr qFDlQOLoNXwQFWC05s+o4eTdb9oQcEnQw0WdNdDP/fdVFqj4C1fSaoScxEjrbNQ2flC49tpCJrwZ ewZlYaapZwUscTLJxHYx2YHoQbfRO2vaaRJkZPDDd8Yqf4POtSMiplYwtSyAfJepdqxq7lARjG2H sUOOpUcIlK+IBq80bFc/5pibQpvI1XBVtwBLO5G6YZV4oj5qQCpF15x0GsbL5AKKZQ+euGOv4luS jr0bM32WlsUbeZ+jkfKxqnMPKgTXGhV1B1cTezT2YRbdEkPXgiTPqJzKczqzlJM8yxuUPv+l696o pMvq1MK6CFa3OgTlzXCD6Mf09fridZjtKMz8HbUO83zL5QHlNflJmx3R6A/uLZiuEJWMTv6Kmr1v 7utIMcxyqX2IcHJ+2mPOf/o3k5SpsMQdZZEylLHR5bv3oD4/mzkQU0RLQjln4rEFouE5Hc4mS2aE 8jywxFRhtKebKR+t13l3x9vicSDBIvEZI+1Dikxey5dITvYn+qTjxphc1C8WLPLD2Y7PL/25zyKN DKjckm8hx+mvwtPLkAKDN7LpV+djn8b8hH8CDAB0Vk8wDQplbmRzdHJlYW0NZW5kb2JqDTE0MSAw IG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDU3OD4+c3RyZWFtDQpIiWxUTW/bMAy9 91fwKAGLIylx4gxFgaXtYQMKDJjRy9aDY8uJhkQabDlZ/v1IyYndNRfb+uB7j4+k8293IhFCLCAv YUKfcg75CSZSJiuJr0SmkFd3P9lRN6Y2ZeGNs9Dottt7KAsLzvIF259ho6Ey7R9aFGd8aj6RrAJj gb/lPUt2ZaHPE8hlMhMpiMjgdxo6jGx1g2FeN3VRanC4U/M5gwIqV3YHvmLaejgafcJ7jgJ8ayo9 opkFmh58lIKrgThKh+B/PUk77Uy5C5sROwvYpg2pYB66SiACP788wt30O9zfT18evz6BzODhYf2E m4LYRDBtNrAx4Pnvj1GrS1RwQVGoTEYi2foXvxWoxCVwmucSJOR1JJbRvUiHZ6o/Ix/UYLcifSK5 er3uzL4ydgtcCfbKZ0tm+ESx1mz2Gn6YrS1813CJXkMd3u4Az3td+riwpnx/K3iE9GJEnw70KdEr laTLi4DPgTlH548msuoAH6BbnkY9keFDbUOfLoPlEXRUZCpiQb13BtfAaGWdD6UvsO7G1q7hk2V/ +4o+SI7wUtEURIdD4xcb1/nQMGO5wQkqwE3bEWQ2v+RN2bQdNl3R9s14IA0IjWoHIfMBI86jShP1 rpmxQz0WsDPtTldgi9C8lCn0bU6qcELqBkt3WZuBYfV/qlmSLa79QUO95QhW6sbHudefcC/A4QhG 7cMZzkxLo0gjeTsPKeN/JdKMEgnTRxCoO2i02wR4OmdfeJoxiP8dwh3Swqbgb/BPgAEAJLBFKg0K ZW5kc3RyZWFtDWVuZG9iag0xNDIgMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA1 Mjc+PnN0cmVhbQ0KSIlsk82SoyAUhff9FHcJUyMlRIk+wszaXc8sjJKE7gRTgN2Vtx8u+DuVjYWI 3z333EPz+y1neZ6X0HQQVwKab+BHVvAScmj6t3diFdxpRTTNBLlcPRilenAD7imacQJ31RoHfoAv ZfX5Cf6qgP5tJnaB7AyXvEB4NtEzzsIzVugGa1XnjXIOhjO4sbuCNufBYo3W68HA6QldLPlorTaX Df+48MUhiq+YlLN27VEXCpp49cS7tNqENvox0pLwPbdeuTzpjuCNbMQ6fTFUEmVpdpDkjxCClgVx oHtlvPZPKiVh8MvAEE5ZtKtXdlNFrFWS9ZxVPKknQXk/BKd/bhpI6rVxoQDQ5iNSOF8px0gR7Fgs A8S/v7SjJc6Qk9NNgboFv+2A0uNeB8vnS9gzlAefRrud42GpkUefM1GwstzNEZMRg3BKkWmRZz+D z+MDvrW/xkacurfBm86t8GjwOwmz34xqM/qYNQwZpmObvHnl22xVKlelEsHND0zCDsqAipw0V+12 jHiIZpIs6qOC5e2JnY1O9S9jkuJXs6KanUcvbtp8Qmv6mN+aPNDaYOyLTJ5tPAGvOhEpghH+XwTD aDXOFKOYhhaq7jtZ8RWBFrwd3db7fQJDzOs1O6FXSYLpo+0UDDaw8T1cV6ta/yodvEZKzbicICQ1 O8uco6e7mN/0j0yJOrJqc8PgnwADAPs9Q7UNCmVuZHN0cmVhbQ1lbmRvYmoNMTQzIDAgb2JqDTw8 L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggNjE0Pj5zdHJlYW0NCkiJbFRNb6MwFLznV7yjOWBs E/JRVT1suodstVIPSFsp3YMDhnib2JExovn3+wwNRG0vyDLP8+bNjL0jja6N9K1T0Gl/AO/axqsS tKmsO0UrIr22hgJEf/Nfs5+/NzBLnuH+Pvm92T6C4PDw8OMRNxnkBeCngziFmFOeQV7OCET5v6+n xPVUkucCOOTVLGaUMfyBKJxmNwib1+hbjPQGIx0w2HCaZVlgcu0+9QgtGA9FfTeeBrqMzufX+q3x yhnl4YVmbA3P7f6oC3hSF9iayskmwPUgYgQJyw52BHUrUMWIr4mKYk4gho1yXle6kF7B9iRrdddr iHzYDZ/5CJUuA5RYUDHQ2SF/viT5QTdwdvZsG9WAhGCKkqaBKF4RNGlwZiDTTxT3EKOCO6JNcWxL bWrQgUYDTVscQAawppDGoN2Htve6h/o84TqA8gVdLK46GZhSgwQkFPZ0luYCR1tbjI638IICxqNe 6SQ67yl+wN2QLCa1kJgpwR+UUzifQqaNLbQMseyQZYgptlQ3c4+m8vV68GMEo9ALGMWCkc66t0Gu Ka4oFlt9zIV1ReucMv54gdaUynXyAvsLfDPIpDUev5kDacPz0/YFvcvIn2g1J9g0aF87254pvJKD 9+e75BMNnlKMwofvSdd10WJJqFa+ohZTtSJ1osukdLLycdiNz296cmsKUVgimqBMZFe497gXd3A4 XpBaxYxT/+5fo3CxRTZkbNKTi2G2jLJPJtn2WMIeLQGMY6P3RzW+GI1tXYF5qLDNl0zyOR1FHl4W VJSHoONdELAWdAk8S2kqQv1pBv8FGADYBjfsDQplbmRzdHJlYW0NZW5kb2JqDTE0NCAwIG9iag08 PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDUwND4+c3RyZWFtDQpIiXyTwY7bIBCG73mKOYK0 JuDYjlOt9tDNHlpppT34lvbAYpJQeSEyJFHfvgN2Yldd9YYt5pufj0GsWSkq4NC0CyKDcRb2rgcJ F+PNe6fBm4OV4dxrBrT5tVg2TQ4Cmv0CS1Ssu4IQrCg2IyPtenl9hsXyDR4fl6/P37aQF/D09HUb fzYNH+qzlWCbqoRMMFH+p7S8lWaccZ7nsa1g87rtD/ppZTVrKmahBeNlOY87OxS24Ku4KXUTm3g+ jscb9+/Im/MmajL2AG4/aKJr0tEsJ5MtKjZEf6E/m++zE8+MrVhxAwLNOWmOGk4jOWIn/7rTKnFS HnGPVhSj+lrcSKF3llbEqBQDV+newFhvWvzSELDLncWLFGdcXSHLS5aLSeuOxNaRicDWqfMHrYmm mSA2QFxLmlXkNxzlRWPeTh9kB+9a9mjmYdYmv0fmyaaoWV3f9PuzOoL0mLE1CscPpcaQ8nTq3QV5 SYXSfZDGpqtKnMlCXGL0kTmNhOrk2eux3NnQSxUe4HrUFkwA4+HUSaVbzNu5O7a+Y/NBbpUGdLR7 xWQywEDGxyBqvDUkHWP8D7ohpy4dwVkPe1oQRwXBh2RnKsopdznkrv5+Ajsiz8GNcgUJmPCie7Mf wYBWlPaewQD9Z+LXt4mfRi1bffrCXpoF/BFgAObhCdcNCmVuZHN0cmVhbQ1lbmRvYmoNMSAwIG9i ag08PC9Bbm5vdHMgMTcgMCBSL0NvbnRlbnRzIDIgMCBSL0Nyb3BCb3hbMCAwIDU5NS4yMiA4NDJd L01lZGlhQm94WzAgMCA1OTUuMjIgODQyXS9QYXJlbnQgMTMxIDAgUi9SZXNvdXJjZXM8PC9Db2xv clNwYWNlPDwvQ1MwIDIxIDAgUj4+L0V4dEdTdGF0ZTw8L0dTMCAxNDYgMCBSPj4vRm9udDw8L0My XzAgMjUgMCBSL1RUMCAxNDggMCBSL1RUMSAxNTAgMCBSL1RUMiAxNTIgMCBSL1RUMyAyNCAwIFI+ Pi9Qcm9jU2V0Wy9QREYvVGV4dF0+Pi9Sb3RhdGUgMC9TdHJ1Y3RQYXJlbnRzIDEvVGFicy9TL1R5 cGUvUGFnZT4+DWVuZG9iag0yIDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMTY2 MD4+c3RyZWFtDQpIiZxX247bNhB991fwkSoqrkjdgyDtZjcJUiBtUAtpgWxRaGWuzcYruaJsd/P1 naEulL1yVPQl4cLkcObMmXOo19ni6iN5+fLqw837W+KRV69e396QxdW7pUfWenGVZR7hJHtYuB7z PC8hWUG4gI0e/hcHLCYx/CsizyfZ44K+uXOc7K/Fmw8YxAbmQ+As421AD0N5LA1CiJWtFpTgQfhd dL+zMOx++kyXTshp47iC5uUqr1fkoLS630qi1brMm33t8JRKss2fqn3j/JH9NMocE4dc4TZTgw/L I+EB8+Ih/AuyrB4djLDXkhS5lpoc1XZLavn33omoqk3MNmVznDOeDsclyYl2gnGC6qtcdemQh6om 7XmEMB4yweWRuCJkIiYuRAzbcM1GElXCKUwpb1RVkuphqFhuZWGjBUM0kZrEBPMsbE1dlaoYQIKq XJON/Cd/dBK62w6BOB8C4dJUmAhb4fekqYjJ54skXYJQceVwOkrT5jUK11XpsySxVdKiKptclYDS UTUbVRKZa7V9AsSLal0q5IIJJFrGsdDvaPI1RxTunwDzg5JHWSM4mJEBpj92jjKUE/jnuKyqYv8o y4YRR3g02yhNFBaz2yqA6jI2WEwaheOeGfbkpUaYVvIBCiONNLEAoW3eSCekmgyQQeoWq9ByE6NT 2+fT/p1i0uaDBwT0POlLwyYDBUd5HDd50/MpsXwy97fMEW1RJoztUI/pOYkIwLRSegfsxu5tZC0Z GXLzLfCmGh6zIBqAvy4t92TbOEiuHzoTuSpNd/H2NsUuwgjs671uapWXZF0dZF1iOOm4nGIn20Pn +iN6/bEj7PqjWsmUaPn9IddKCGejTOjbabULLqpdkl4Sux46szKj7LGI97jdLpcENFCcaOD7spH1 Q15Ax6G5qIDAY04/OX5CFe4DIjkx3To+KNRyLJR6QiK9c5YLXPbi/IJ8rKtdpaHjumnv12STH6BX UpZkV1erfQE/Gh5YjLsYo951rf3levl+SaCs38m72nFjWu13RgnMr3dC+J+cSNBO85YD9yCLB9VT Zwij1qrJt5Py046I16dwi2YyRFvK+qAQP5z/Tw7noiVSrXFIOPOMWpayOVb1F6xuuOAZzRPm94ZA dR9W73e7qm5UuYZsT6FJWNz7D3SnqOUzoR9Gymo8LhHVmPETx7ACjwMgQvqbmXkzZ3nhuFHLGxgu SKpBnTOtg/sgrUEHeNpVYgy+czZ0QFXL0YwZtnVZ2sNtljbJlMVjg7TqMdDnB8xrelzDqXGFtwIP 52Y2OplZMTGz76ZnNr4ws9z66eTQPmMaC4Kh7o+1Kk33J58rU1Now4nehvk3nynGfJ+Ao9I8isBm FLZp7CD4gLEmEhmLgL5H4AVkyoW4YbTbXj1iWcuCHMODX0NledEQeYDxV9aBe2uF8Oh0YLCWOZfn E0nXV4kusEPgoCJg6C7fgccbS9vAVbrIS3w15Gt4PYDvhCG9dsKYjioZ2WPrbCb6qJA+uvF/TK9s ekfTz1qFfjp6DDybRp4y7g0tyiHfuunlqV+PLzpuVLEZZrPRvcu1YUZZKvitqcHqQHzwhSS1Jneg LaAMkYdFJ5Tk9+CAdw5M/fQgJf/H99L+UPbdhR3cm9/C57eI+S3+/JbBbc9ojMsjgXOf6a9S76oS xwXYA45FNHYCrKhltNrCc+nFGMHlDvYNNwxydHUDn0WFbj9/CHCxXLiWz173YcHTng0wCV/YrtrJ H+Gds5XalVoW+1o1T04UUlbANA93vskWQkQsTUgQgTkEcG1klJhFIMKLh8Xr7DyvyHZ3PdaR0480 P/GB/kEMgfqvtGkg4xPt7GoaRhRdR4ypQ0hRuVuZr8gye0v8KJiOOkHBy71MRyrs2w9PHkemJg/h MWWZFQAUk0CkLOkKM50Gpwvh2Q3vRlAgeIHQ0qy1WctWc2/En2Ow4NsEADdNe4mO/qrVeb/XZSG6 X+FBYjxgdJ5Fwr94tFWhqEVyiIJSCt+VYH/S4fBdAI+0Bh4f+JdHV5MZXoodmYdIwHzoXpvh/dN5 hu3taZx8o0LIsjPwvhrKxVSgi0W2ZmlL/Lk69Mr/eG9qrScrC5hI/1tiNrYAd4FX8rl/nvJehDHy fkSPadKJQcxcjoRCikffkEcxr2xiXtnEvLKJYH5LOL8lmt8Sz29J5rfM+4Y/7xv+PLr+PLr+PLr+ PLr+PLr+BXRBzf8VYABCds4JDQplbmRzdHJlYW0NZW5kb2JqDTMgMCBvYmoNPDwvQWx0ZXJuYXRl L0RldmljZVJHQi9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDI1OTcvTiAzPj5zdHJlYW0NCmje nJZ3VFTXFofPvXd6oc0w0hl6ky4wgPQuIB0EURhmBhjKAMMMTWyIqEBEEREBRZCggAGjoUisiGIh KKhgD0gQUGIwiqioZEbWSnx5ee/l5ffHvd/aZ+9z99l7n7UuACRPHy4vBZYCIJkn4Ad6ONNXhUfQ sf0ABniAAaYAMFnpqb5B7sFAJC83F3q6yAn8i94MAUj8vmXo6U+ng/9P0qxUvgAAyF/E5mxOOkvE +SJOyhSkiu0zIqbGJIoZRomZL0pQxHJijlvkpZ99FtlRzOxkHlvE4pxT2clsMfeIeHuGkCNixEfE BRlcTqaIb4tYM0mYzBXxW3FsMoeZDgCKJLYLOKx4EZuImMQPDnQR8XIAcKS4LzjmCxZwsgTiQ7mk pGbzuXHxArouS49uam3NoHtyMpM4AoGhP5OVyOSz6S4pyalMXjYAi2f+LBlxbemiIluaWltaGpoZ mX5RqP+6+Dcl7u0ivQr43DOI1veH7a/8UuoAYMyKarPrD1vMfgA6tgIgd/8Pm+YhACRFfWu/8cV5 aOJ5iRcIUm2MjTMzM424HJaRuKC/6386/A198T0j8Xa/l4fuyollCpMEdHHdWClJKUI+PT2VyeLQ Df88xP848K/zWBrIieXwOTxRRKhoyri8OFG7eWyugJvCo3N5/6mJ/zDsT1qca5Eo9Z8ANcoISN2g AuTnPoCiEAESeVDc9d/75oMPBeKbF6Y6sTj3nwX9+65wifiRzo37HOcSGExnCfkZi2viawnQgAAk ARXIAxWgAXSBITADVsAWOAI3sAL4gWAQDtYCFogHyYAPMkEu2AwKQBHYBfaCSlAD6kEjaAEnQAc4 DS6Ay+A6uAnugAdgBIyD52AGvAHzEARhITJEgeQhVUgLMoDMIAZkD7lBPlAgFA5FQ3EQDxJCudAW qAgqhSqhWqgR+hY6BV2ArkID0D1oFJqCfoXewwhMgqmwMqwNG8MM2An2hoPhNXAcnAbnwPnwTrgC roOPwe3wBfg6fAcegZ/DswhAiAgNUUMMEQbigvghEUgswkc2IIVIOVKHtCBdSC9yCxlBppF3KAyK gqKjDFG2KE9UCIqFSkNtQBWjKlFHUe2oHtQt1ChqBvUJTUYroQ3QNmgv9Cp0HDoTXYAuRzeg29CX 0HfQ4+g3GAyGhtHBWGE8MeGYBMw6TDHmAKYVcx4zgBnDzGKxWHmsAdYO64dlYgXYAux+7DHsOewg dhz7FkfEqeLMcO64CBwPl4crxzXhzuIGcRO4ebwUXgtvg/fDs/HZ+BJ8Pb4LfwM/jp8nSBN0CHaE YEICYTOhgtBCuER4SHhFJBLVidbEACKXuIlYQTxOvEIcJb4jyZD0SS6kSJKQtJN0hHSedI/0ikwm a5MdyRFkAXknuZF8kfyY/FaCImEk4SXBltgoUSXRLjEo8UISL6kl6SS5VjJHslzypOQNyWkpvJS2 lIsUU2qDVJXUKalhqVlpirSptJ90snSxdJP0VelJGayMtoybDFsmX+awzEWZMQpC0aC4UFiULZR6 yiXKOBVD1aF6UROoRdRvqP3UGVkZ2WWyobJZslWyZ2RHaAhNm+ZFS6KV0E7QhmjvlygvcVrCWbJj ScuSwSVzcopyjnIcuUK5Vrk7cu/l6fJu8onyu+U75B8poBT0FQIUMhUOKlxSmFakKtoqshQLFU8o 3leClfSVApXWKR1W6lOaVVZR9lBOVd6vfFF5WoWm4qiSoFKmclZlSpWiaq/KVS1TPaf6jC5Ld6In 0SvoPfQZNSU1TzWhWq1av9q8uo56iHqeeqv6Iw2CBkMjVqNMo1tjRlNV01czV7NZ874WXouhFa+1 T6tXa05bRztMe5t2h/akjpyOl06OTrPOQ12yroNumm6d7m09jB5DL1HvgN5NfVjfQj9ev0r/hgFs YGnANThgMLAUvdR6KW9p3dJhQ5Khk2GGYbPhqBHNyMcoz6jD6IWxpnGE8W7jXuNPJhYmSSb1Jg9M ZUxXmOaZdpn+aqZvxjKrMrttTjZ3N99o3mn+cpnBMs6yg8vuWlAsfC22WXRbfLS0suRbtlhOWWla RVtVWw0zqAx/RjHjijXa2tl6o/Vp63c2ljYCmxM2v9ga2ibaNtlOLtdZzllev3zMTt2OaVdrN2JP t4+2P2Q/4qDmwHSoc3jiqOHIdmxwnHDSc0pwOub0wtnEme/c5jznYuOy3uW8K+Lq4Vro2u8m4xbi Vun22F3dPc692X3Gw8Jjncd5T7Snt+duz2EvZS+WV6PXzAqrFetX9HiTvIO8K72f+Oj78H26fGHf Fb57fB+u1FrJW9nhB/y8/Pb4PfLX8U/z/z4AE+AfUBXwNNA0MDewN4gSFBXUFPQm2Dm4JPhBiG6I MKQ7VDI0MrQxdC7MNaw0bGSV8ar1q66HK4RzwzsjsBGhEQ0Rs6vdVu9dPR5pEVkQObRGZ03Wmqtr FdYmrT0TJRnFjDoZjY4Oi26K/sD0Y9YxZ2O8YqpjZlgurH2s52xHdhl7imPHKeVMxNrFlsZOxtnF 7YmbineIL4+f5rpwK7kvEzwTahLmEv0SjyQuJIUltSbjkqOTT/FkeIm8nhSVlKyUgVSD1ILUkTSb tL1pM3xvfkM6lL4mvVNAFf1M9Ql1hVuFoxn2GVUZbzNDM09mSWfxsvqy9bN3ZE/kuOd8vQ61jrWu O1ctd3Pu6Hqn9bUboA0xG7o3amzM3zi+yWPT0c2EzYmbf8gzySvNe70lbEtXvnL+pvyxrR5bmwsk CvgFw9tst9VsR23nbu/fYb5j/45PhezCa0UmReVFH4pZxde+Mv2q4quFnbE7+0ssSw7uwuzi7Rra 7bD7aKl0aU7p2B7fPe1l9LLCstd7o/ZeLV9WXrOPsE+4b6TCp6Jzv+b+Xfs/VMZX3qlyrmqtVqre UT13gH1g8KDjwZYa5ZqimveHuIfu1nrUttdp15UfxhzOOPy0PrS+92vG140NCg1FDR+P8I6MHA08 2tNo1djYpNRU0gw3C5unjkUeu/mN6zedLYYtta201qLj4Ljw+LNvo78dOuF9ovsk42TLd1rfVbdR 2grbofbs9pmO+I6RzvDOgVMrTnV32Xa1fW/0/ZHTaqerzsieKTlLOJt/duFczrnZ86nnpy/EXRjr jup+cHHVxds9AT39l7wvXbnsfvlir1PvuSt2V05ftbl66hrjWsd1y+vtfRZ9bT9Y/NDWb9nffsPq RudN65tdA8sHzg46DF645Xrr8m2v29fvrLwzMBQydHc4cnjkLvvu5L2key/vZ9yff7DpIfph4SOp R+WPlR7X/aj3Y+uI5ciZUdfRvidBTx6Mscae/5T+04fx/Kfkp+UTqhONk2aTp6fcp24+W/1s/Hnq 8/npgp+lf65+ofviu18cf+mbWTUz/pL/cuHX4lfyr468Xva6e9Z/9vGb5Dfzc4Vv5d8efcd41/s+ 7P3EfOYH7IeKj3ofuz55f3q4kLyw8JsAAwD3hPP7DQplbmRzdHJlYW0NZW5kb2JqDTQgMCBvYmoN PDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAxND4+c3RyZWFtDQpo3mpgGEQAIMAARw0AgQ0K ZW5kc3RyZWFtDWVuZG9iag01IDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggODY3 MC9MZW5ndGgxIDIzNzc2Pj5zdHJlYW0NCmje7JsHeFTV1vfXPmdKSEiDJAQCzIQhFEOvERBCGoTQ QjKQUDPpoZsCiASjiEAERcWCSrNjACdjISgqeLH3fu/1qqBerwXsqChk3v85axbG6PX1++73Ps/3 Pg+T/Ob/32uX0/bZe8UHSRFRCNWRTgOm5PQftLC8sgmRg6CgaFm1877r9p8iUp2JrMGlS8sWff/9 pLZEtl5EbTqVLbyoNLeybCpR2o9ok1Je4in+oGd0MtHse9B/WDkCoftCRhGFp6HcvXxR9Yq+JUc/ QbmcKPLyhUuKPGS9TCPKQJvI9Ys8K5b2Unoo+q9He+diz6KSq+Z8N5toxhEiy+GllSVL/Z99fBRV xzFcCOkWu9pMVgqybrUOxhl0ZdVfoSs0CiIt3KppmkXXLDtJ+zKZnBdT4DMpx+kkBH622KiZ1BH7 dq2Hk2iHUafvt4YZR8cdIft2oubrqOVnKs2nKtyvOrqCNtF19Di9Q4W0Bm4r7aS7aDd56TA9S2/T /8NP80XWRdRW3082ak/k/8l/ovku0IQz/SVyHUrtLc5fIv4I/xetYl80X+ePaG6ytaNgs2+o9hqi 36oz/p+0MUbZP8woa+vgw80eX9u3N9/XfHere5BNM2kWzaY5VEAeXH8xlVMF7swCWkiLaLFZWoy6 MnyXojQPrYrQyvC/tFpCS0ElVVMNLcPPUviqQMmou9As19By/Kygi2glXUyrqDbwvdyMrELNSrO8 AqymS/BkLqXLTCfKkTV0Oa3FU1tH62nDH5Y2nHX1dCVtxHO+iq7+t37Tr0qb8XMNXYv5sIWupxvo JsyLW+jWVtEbzfjNtB1z7i6z7npEdpjOqD1IT9GDtI/uo4fMe1mEu8Z3RO5LqXkPl+IerMIVrmlx xnz/lp+9W6tx7ca11QeudAXil7XosSxwH42Wa9CSR+HnYIxS2+pObMY1sP/lirh0vXn9v0Rb3pU/ isr9uLXFnbnFLBmudfTf+RtoG97AXfg27qrhboNnt8P0LePbz7bdaZZvpzvoTjyLu00nypG74O+m e/Bu30sNtAc/v/iWjnUf7TWfnJcayUf30wN4kg/Rfmoy439U93vx+wNx39nIAXqYHsEMeYwOYaV5 Aj8SeRSxxwPRI2aMy0/QX1A2WnHpKXoaK9Rz9Dy9QC/Tkyi9ZH4/g9Ir9Bq9Tm+rULhX6VN8nwGU PK543tw5s2fNzM9z5+ZMy546ZfKkiVkTMsePy0hPS00Zmzxm9AWjRo44P2n4sKH9+/Xt06tHQndX N0dsVGREeGhIcJsgu82KlVhRn3RXRoHT26PAa+nhGj++r1F2eRDwtAgUeJ0IZfy6jddZYDZz/rpl MlqWtmqZzC2Tz7ZUEc5RNKpvH2e6y+l9Mc3lbFIzs/PgN6W58p3eE6afZHpLD7MQikJ8PHo402PL 05xeVeBM92YsK69PL0jDeI0hwamu1JLgvn2oMTgENgTO28u1tFH1Gq1Mo/VKH9GIfSjUOKxXT0j3 FHunZuelp8XFx+ebMUo1x/LaUr12cyxnhXHOdKWzsc+h+o1NEVRYkNi22FXsmZ3n1T3oVK+n19ev 80Ymenu70ry9V34Ui0su8fZxpaV7E10YLGva2QMorzUhwuWsP0k4edeJ47+OeAIRW0LESTKscYln bxPqxRPODWeI64uPN87lyqZkKkTBW5edx2UnFcb5KLl/Yr5XKzBqDklNtNuoqZOas90LXPHGo0ov CPwuK4/11hU6+/bB3Td/E/CLeqdX71FQWFRuqKek3pWWxvctN8+bnAaT7Alca3rjgP5o7ynARVQY tyE7z9vftdQb5UrhBgg4jWdQkZNndgl080alepHoBHp5+6enGeflTK8vSOMTNMZyZecdoMH+o41D nHH3D6YhlG+chzcmFQ+lR3p9XnGp11EQV4z5WerMi4v3Jufj9uW78kryjafkivD2PorDxZtHNHvh 2lq1lsbGldsTgpx5WpyebzwtBJwZ+HKljEJFBB6XWTSeaMooZ56KI2mGowRaGO5X46CgJ6SON6p0 o2vq+Lj4/Hj+/MEpxQXOyZrgDWoxVgQCZ8+Jj/NvT41bGyfU25lektbiBH81qDVwgoHRfv88NeNe BA6MHkHG4xwvVXoC3lzENAxjhoynGOv00lRnnqvEle/CHEqemmdcm3GvzeeblePKyp6ZZz7twCzJ /VWJ65O45KV4VEtBS8UczEiMk8dqlseZ5bPF8a2qM6XaWR/kysqpNwZ3BQYkJ94gXLStR6bnyqR2 Q/BqZmB1c2V4XM4IZ0a9p8lfV1jfmJxcvzS9oHyEMYYrs7jelZM3Ks4812l5tXErjUO1oyyVlZvS tw/WnpRGl1qf3Zis1ufMzDsQgax2fW6eT1NaakFKfmN31OUdQN6bbEY1I2oEjYLTKBgjTUMhyGwf dwCZfZ1ZazEDZrmoSZEZC5KYoqImjWMREtMQs3As2YwZHzyk2HLcYiy36c5i4/Gsyi+vL8g3Xi6K waPEr/Iq12jyaq7RjUqztfUGu0pSvCGuFCM+xoiP4bjNiNsxMVSMws0x1qT6AhfWKUyoPIpTPBV1 Y0hnk9+fmxf/YtyJ/HhMtdlgZp63TSLWfmvCBLQbZ1CA8DhvXZHHOA9y5xl97QmZRfmYtjIgmmR6 22CENoER0CLD7GNMR3QqwrPBAzT716Hgrcv35icaB82ryDenc4SXxrtG4LHzmNYexoH659e3cw0y 3028CsEJ6wxpg3OjnDyOxKGIg+XzTbK3xZkXuVBVVODE3bZQUQ6mOq+lwXEcKcGSaOlRYhIcF6gk 47L0hJDQYG+bfhgQv4YP6We8ktYEe34+n7xZWhdogGNHeENwRj1a3MpAB9wdVGUa54LfdThVo+lh Y5jsJprmWoGVxThpcyQ7qr2hCZkeLP7cPwQRV5J0DjLWiJDAGEc4ajeuvC3uu56Q2+S/23VRfItP 3z4uY3MwJibFHcDEpvz61gHvrMS+fYJaR0PNcH19UOjvd+D7FRR6Vo2gMx27Bhrib2j+OzJ48umB zRvbPGREWn4sHkvYLyX1MiK7yPVnscX5XzCwzKQ9ljTy/C7HUXecbrT4Kc5A/4T2gPSAZgQoAvPA pYH4Hn0v7bG2pVmtsZzGeMCKv5I1C+3RLP4J0F7Q88FAMBVMARcj3hX0tFyLdpvIrm3y77b0Qn+g zzG5VC8M+KXU2TKX9tjextjn/Q52MJGK/lumMLYvqcjSDccC1kL4PHgmx1Bc37gA0SD2bPljCm+J tRvd+2ex1FM3e1e6oDWWnjQAY3X9DY/TyACdTP2OIv4s1tn+DwwsFtqlP0+Lfg9LCe0C8y3LaZCB Xoe2dTgXVmeAPqA3SAnEd+lT0e8yWvgbViC+gjZatlGyOk671HF/HrQjdDzoCdxgGrgQ8UgQa4mj XdpoIm20f6P+LMYG2lGTddrHAf8Vzu1N2mWzYfxrzrIVrDB9KbiXSv9bHmYwTqn+JI4FLI3wJ+CZ dFOnUCbjPwm+P1vOp856vr+ZFfNxE+0Atwb0RlAT8L9BP0PxttE0vDX6CzRMX4Nn1poKSgsQZOqb NLsVXX8nZmLrz1iG0Fa8PzMDTAYzpGxfQjNt7wLFoG2BZSOYD4aQR/+Z5vwZtAspwXYzJQS9SQmW BvhbAn5UK6a0IhC3LWvFhlYE4r9q3wbHSG0x9ppf6iwnGGt7SrD3ogT9CA1tjXmtv2WrZYh/ryXV f0q9RWvVW/7F0HDoTOAElSAPlCEeCbbqh2itpSutV5/53wxQpN+OeACjDThP62xqlvqZOmtnaKut 2DjWr5hs6m3+baYm4Xn8mim/iY1ibC+Yz07GKdCeo62M/xR0sR5P2Qzmbbz/jJSt+xiMtVV9jfb7 KF47Agw9SD0sH1O8pebPgXsdb8/C/P7bnwPnuQVcFdArwCSwIeC3tETfRt2sTTS0NfpyrEk7qNtv 6E35AeymJlGl7qFifQXm6h5K0/5JC7XJpo7XmmicOkzdtRvxjD6lhaqIPGqR/68oL1RzsZ5NR9uP TdLNfuijvocOoBT1IbmMPtpacuhfUh9tNfa4K8ihDacULRfrWQ3YYuzaZ4KITn+iTf9tDOdH+jxg xk7vAGWtYttAhfKjfDO4DdxjxktAgd4d451ELAOUmfGdYLXeE+VMMP/sGLV6W5TDQaQZ2wN2a9eg /01gpxn7FHygIcfQngAPou1hcAw5h5l9nJ4GBqqXkIe8BV5icC2TDHBtl0NXapeYukz9QJdrAyVf 8W8wchA9B/vr5TSCc4jmp409jfOF5u3G3sz5QjP+TPBPM/OA66m77Pe4xzm8h/tjzD7Yt/UG5Ca8 D2O/bF5sqK09jon91Ea02TqV5lqnNp/iPdFfY+yF2s/mHuPivaz5VWNt5X2r+Q3LA1TK+1bzo9ij cs396BhFyr6jr6O5vJf4Rxp9zD1kFmWZ+4G5bjffZqgVd8pY1615tM7YXyyN/jLs/R6TZLyngzAf r8XeNwDt7sQcBdozWAMmos5gLNajFWTTBtEWbZD/OFgJws115QFcXyn0Rsx1jSbpOt4dWRMWUi9L O1qG/vl4/rP1jqRb3LQ5QC2IsQ4jt3UkuXHd7ay7aYv1Wio20DaYzzIY98p41sM0K914lu6Y935a bGA+z0m013yeSwMswzPqSXqL3NFjK8cxnqMsq5FfBQjkg1ONXO9svvUh6bafwNucN9r1X/I4yyl+ zkaeKrkXrpNpwrqwhZ+1tTPanASVVG37BmN0hf+cwm2x0GRQSHMsHiq0B8FfiPzOj/7fIHfDxDbn xhd0m5knRQXoieddR2Et8qE+1hXYg+tohmUD6jbQDeD6QI7jNvIXXOsuAzxbZc6XFYGcZDeYH5gr Rt4lecQ2zNltyLn74zqCeb5YrkKfCrT7iRbZXMh30lGeRx2saxD7BHxEC/SvkL8Mgvdjf59HDksR wBuIPVyZcez/llTcF2NuvYl1/UgAeMyJTOR5HYx9ouUejvFHIyfIsuRg7uUgp8rBnsZ7YKWxr+kP oS+wRFOMTaP21gqaZxmHfaxXYK8aCM77ZT8zcwxjn+lIwcZeF1ibY/XXqJulGXGs3ZiLWy2DzT00 xfoGbbU2ozyBgq25iD0BrsTc3oRzewr+eUqy5PhPGXsznnesvhjXFgBz9U4D7RYVrN1CjxvoD9Ja MNfkPcztAjoBGvViWom9YB7m8XnGnAaPGPPbegXdgNhGIy6KZ7QeJIoGYonaQ1QNDolaOiLn64j3 IaB6B1La+9gT7lP1+mm1D+UQlPtqVdhDgH4a+SSwj6brW4LYKf00HT77zi2itWClVo1rqqaZ2uU0 HdRoyVhXkxGfQF5Q9u/aYaztYDlYAZZZvLTAcgHygdM0H1ygjtCV+lC60oo9yYq9yf4DwL5hH8Vq 20v3GeDvzzrrHTTGuocm4XoJfcdY7sc8CsP9OI33IczMnfLgD4AJKOdAF+FeJMIP0b/FXr0D7+9j +PtxB9rtQJ4WT5lBg7FWnMb6/iHmeCR1sWyhedrzWJePUyHIxvzopr8NHUardR9ytmFYD4ZhbofR eLAPVIIy4AQlYAEoAtNMUnFvNlFH/VKsg1VYD/dQD70c57Ef9yCT+mNuZOkHaRrOZyrYBEpAIRgB ysxz3oH5swPzFW1+c369/vT5Dfi988P7MV79iBzCS1naXhqrvUMJ2l2YI+/TLOzLg7RjiL+PPOUz yoZma6/QDHWQCkDef9JX20ZJ6iQN1KbRKC0T83ICRWkZ6JNNA7Qk6qbNwFiTMPafbdfoz9LbU5p1 HsBeau0Q0H4gBzxLk03KaJx1P7gNvEg9rbWUDp+Ovd3I58YHTabxiM22P4vndRr7+mmaCApAIpgb 8PkA7xCeFde7wXRjPls/pT4WKw21vU4VePYe7QTyv9MUZOQbRh5g7Jm2EqzFuTTLEkMT8M7dDG4A z5qE0X32MDVCNHgy3WxLwt9updTL10Z3NmmXP9AmVk2AWSPmMjGXiqkTc4mY1WJqxawSc7GYlWIu ErNCzHIxy8TUiKkWUyXmQjFLxSwRs1jMIjELxSwQM19MhZhyMWViSsWUiCkWUySmUIxHTIGYeWLm ipkjZraYWWJmiskXkydmhpjpYtxicsXkiJkmJlvMVDFTxEwWM0nMRDFZYiaIyRQzXsw4MRli0sWk iUkVkyJmrJhkMWPEjBZzgZhRYkaKGSHmfDFJYoaLGSZmqJghYgaLGSRmoJgBYvqL6Semr5g+YhLF nCemt5heYnqK6SEmQUx3MS4x3cTEi3GKcYjpKqaLmM5i4sR0EtNRTKyYDmJixESLiRLTXkw7MZFi IsSEiwkTEyqmrZgQMcFi2ogJEmMXYxNjFWMRo4vRxCgxFDDKL6ZZzBkxp8X8LOYnMafE/CjmBzHf izkp5jsx34r5RszXYr4S86WYL8ScEHNczOdiPhPzqZhPxPxLzMdi/inmIzEfivlAzDExR8W8L+Y9 Me+K+YeYd8T8XczfxPxVzNti3hLzppg3xLwu5jUxr4p5RczLYl4S86KYF8Q8L+Y5Mc+KeUbM02Ke EvOkmCNi/iLmCTGHxRwS87iYx8Q8KuagmEfEPCzmgJgmMfvFPCTmQTEPiLlfjE9MoxivmPvE7BOz V8weMQ1i7hWzW8w9Yu4Wc5eYO8XcIeZ2MbeJ2SVmp5gdYraL2SbmVjG3iLlZzFYxN4m5UcwNYq4X s0XMdWKuFXONmM1irhZzlZhNYjaKuVJMvZgNYtaLWSfmCjFrxUjaoyTtUZL2KEl7lKQ9StIeJWmP krRHSdqjJO1RkvYoSXuUpD1K0h4laY+StEdJ2qMk7VGVYiT/UZL/KMl/lOQ/SvIfJfmPkvxHSf6j JP9Rkv8oyX+U5D9K8h8l+Y+S/EdJ/qMk/1GS/yjJf5TkP0ryHyX5j5L8R0n+oyT/UZL/KMl/lOQ/ SvIfJfmPkvxHSf6jJO1RkvYoSXuUZDtKsh0l2Y6SbEdJtqMk21GS7SjJdpRkOyr1fsMga/Z1He1A zuzrGg25jEuX+rqOgNRx6RKW1b6ubSG1XFrFcjHLSpaLfF3GQlb4uqRClrMsY6nhumouVbFUcvBC X5cUyFKWJSyLuckiloUsC3yd0yHzWSpYylnKWEp9ndMgJVwqZiliKWTxsBSwzGOZy/3mcGk2yyyW mSz5LHksM1ims7hZcllyWKaxZLNMZZnCMpllEstEliyWCb64TEgmy3hf3ATIOJYMX1wWJN0XNxGS xpLKksJ1Y7lfMssY7jea5QKWUdxyJMsI7n4+SxLLcJZhLEN5sCEsg3mUQSwDWQbwYP1Z+nG/vix9 WBJZzmPpzdKLpScP3YMlgcfszuJi6cZDx7M4uZ+DpStLF5bOLHEsnXydJkM6ssT6Ok2BdGCJ4WA0 SxQH27O0Y4nkugiWcA6GsYSytOW6EJZgljZcF8RiZ7H5Ok6FWH0dsyEWFp2DGpcUC5mi/CzNZhN1 hkunWX5m+YnrTnHpR5YfWL5nOemLzYV854vNgXzLpW9Yvmb5iuu+5NIXLCdYjnPd5yyfcfBTlk9Y /sXyMTf5J5c+4tKHXPqA5RjLUa57n+U9Dr7L8g+Wd1j+zk3+xqW/srzt6zAD8pavw3TImyxvcPB1 ltdYXmV5hZu8zPISB19keYHleZbnuMmzLM9w8GmWp1ieZDnC8hdu+QSXDrMcYnmc6x5jeZSDB1ke YXmY5QBLE7fcz6WHWB5keYDlfl/MGIjPFzML0sjiZbmPZR/LXpY9LA0s9/pisF6r3TzKPSx3c91d LHey3MFyO8ttLLtYdrLs4MG28yjbWG7lultYbmbZynITd7iRSzewXM+yheuu41GuZbmG6zazXM1y Fcsmlo3c8kou1bNsYFnPso7lCl+0B7LWF10IuZxljS+6FHIZy6W+aDekzheNxVhd4oseBlnNUsvd V3G/i1lW+qKLIRdx9xUsy1mWsdSwVLNU8dCV3P1ClqW+6CLIEh5sMbdcxLKQZQHLfJYK7lfOUsZn VsrdS1iKuWURSyGLh6WAZR7LXL7oOXxms1lm8UXP5KHz+UB5LDP4dKfzgdw8Si5LDss0lmxfVDJk qi/KOMIUX5QxvSf7otZAJvmi+kImcpMslgm+KOQFKpNL41nGcTDDF7Uaku6LWgdJ80VdAkn1RdVB UnztMiBjWZJZxrCM9rXD/q4u4NIoX2Q+ZCTLCF+kMTXOZ0nyRY6DDPdF5kGG+SJnQoZy3RCWwb7I PpBB3HKgL9K4sAG+SOPd7M/Sj7v35SP0YUnkwc5j6c2D9WLpydKDJcEXadyl7iwuHrMbjxnPgzl5 FAdLV+7XhaUzSxxLJ5aOvog5kFhfxFxIB1/EPEgMSzRLFEt7lnbcIZI7RHAwnCWMJZSlLbcM4ZbB HGzDEsRiZ7FxSyu3tHBQZ9FYFAsl+8MLHQbN4UWOM+HFjtPwP4OfwCnEfkTsB/A9OAm+Q/xb8A3q vkb5K/Al+AKcQPw4+Bx1n6H8KfgE/At8HFbm+GdYueMj8CH4ABxD7Cj0ffAeeBflf0DfAX8HfwN/ DV3geDt0oOMt6JuhCx1vhPZwvA5eg381NNHxCngZvIT6FxF7IXSR43n45+CfhX8mdL7j6dAKx1Oh 5Y4nQ8scR9D3LxjvCXAYJPsP4ftx8Bh4tO2FjoNtKx2PtK1yPNy22nEANIH9iD8EHkTdA6i7HzEf aARecF/IRY59ISsde0NWOfaE1DoaQlY77gW7wT3gbnAXuDOkr+MO6O3gNvTZBd0ZssCxA347/DZw K/wtGOtmjLUVY92E2I3gBnA92AKuA9ei3zUYb3PwZMfVwVMcVwWXOTYF3+nYGHy3Y62e4LhcT3Ks UUmOy9x17ksb6tyXuGvdqxtq3SG1KqQ2rjar9uLahtp3apMn2YJXuVe6L25Y6b7Ivdy9omG5e1lD jdtSE1VTXaN/V6MaalRajRpQozSqiahx1uhtq92V7qqGSjdVTq2sq/RWWkZ6K49WalSpgpv8h+6v jOuaAU1eVRkakXGhe4l7acMS9+LSRe75OK2KpDJ3eUOZuzSp2F3SUOwuSip0e5IK3POS5rjnNsxx z06a6Z7VMNOdn5TnnoH205Ny3e6GXHdOUrZ7WkO2e0rSZPdkxCclZbknNmS5JySNd2c2jHePS8pw p+OSqXNEZ2dnPcI4gcmdcSYUp1IGxCXHHY37Ks5Ccd64Q3F6u/BOjk5a7/COKnVKR7Wk4yUdr+6o h8e+HKslx/bukxHe4eUO73f4soOlfXKH3v0yKCYixhmjRxvXFjMpN8PUMWmsA4ea1zopxtUjIzxa hUc7orV0R7SiyKORX0Xq0Y9HvByhhYer8HB/uJYcjubhYY4wzfjyh+nJYQOHZ4SHOkI148sfqsck hyJijNiz7dTcjPAQR4jmHhMyJURLDhmTmpEc0ndABunKqRSpCIgehLYPqGhHhn5QGf941kpKbW7M zUlMzGoKomlZ3qCps7xqvTchx/hOzp7pta33knvmrLxGpa7Kb1Raaq43yvgH9WZ57aZN1CUly9sl J8+n79zZJSU/y1tn+ORk0/sNT2iSnzi3qqYqMbF6Lr7mVlUnmr8oqRqjlGgEjd+qapSNnxqzTIl/ +OFmkHlV+FQHYtWJ/6s/6n/36f//8Gkk4/8DGevXLqdibQ24DFwK6sAlYDWoBavAxWAluAisAMvB MlADqkEVuBAsBUvAYrAILAQLwHxQAcpBGSgFJaAYFIFC4DH/UUWxNg/MBXPAbDALzAT5IA/MANOB G+SCHDANZIOpYAqYDCaBiSALTACZYDwYBzJAOkgDqSAFjAXJYAwYDS4Ao8BIMAKcD5LAcDAMDAVD wGAwCAwEA0B/0A/0BX1AIjgP9Aa9QE/QAySA7sAFuoF44AQO0BV0AZ1BHOgEOoJY0AHEgGgQBdqD diASRIBwEAZCQVsQAoJBGxAE7MAGrMAy1o9vHWhAAaJihZhqBmfAafAz+AmcAj+CH8D34CT4DnwL vgFfg6/Al+ALcAIcB5+Dz8Cn4BPwL/Ax+Cf4CHwIPgDHwFHwPngPvAv+Ad4Bfwd/A38Fb4O3wJvg DfA6eA28Cl4BL4OXwIvgBfA8eA48C54BT4OnwJPgCPgLeAIcBofA4+Ax8Cg4CB4BD4MDoAnsBw+B B8ED4H7gA43AC+4D+8BesAc0gHvBbnAPuBvcBe4Ed4DbwW1gF9gJdoDtYBu4FdwCbgZbwU3gRnAD uB5sAdeBa8E1YDO4GlwFNoGN4EpQDzaA9WAduAKspeKxdQrvv8L7r/D+K7z/Cu+/wvuv8P4rvP8K 77/C+6/w/iu8/wrvv8L7r/D+K7z/Cu+/wvuvKgHWAIU1QGENUFgDFNYAhTVAYQ1QWAMU1gCFNUBh DVBYAxTWAIU1QGENUFgDFNYAhTVAYQ1QWAMU1gCFNUBhDVBYAxTWAIU1QGENUFgDFNYAhTVAYQ1Q WAMU3n+F91/h/Vd49xXefYV3X+HdV3j3Fd59hXdf4d1XePcV3v1zO8F/9Mk/dwv+o0/svLlGhknN Vfpr1jDSyU7n0ySaTLMOUijmdAyNUA8+GJ2WFtTX/hjmq0ZOzPggpKSpyeEWLXR/p05jXPuH2jbp kZn4w/2BMfZNWMvHnHnvzEv9z7x3ot35/U+o/u8ee+9YxNcvRZ7ff/CxN44NHKAi4yNNosI0uz3K 5urWTxvas8ewwYMHjdaGDunh6hammbEhw4aP1gcP6qrpURIZrRllpb92eqY+5YxNW+0aM32wtWun 8KhQm1XrHNuu76iEiJxZCaP6dbHrdptuDbL3Gp7SLWthere/2yO7RMd0aRcU1K5LTHSXSPuZd6xh P31jDfs51bLw5y26beTsMd31m4KDNIvN1tQ1tuN5I+Mzp4e3j7CEtI+IjAmyt4ts2ytt9pkrojsb Y3SOjuaxjH8tHvi/2VLOcY5znOMc5zjHOc5xjnOc4xznOMc5zvE/DYXRPnzr5n+QKTa/DW+nn1BS gf9QM0jNDXidwtTmgLfAbw94G/yegLdTrXrYGMXSBpHO2vCA1yhMywl4HXFPwFvgawPeBr8VXsHj fLQHAx7no3ek3eSkQTQAP8PgJlEFFVElLaEqUErViKXCVdJS89uDSAXcYuqHmrG0ED9OmoZYGZWj rsoslUBL0HoZvovRMhX9FqJNIWIVaFFhtiuBVqOX0dKJFk5oCcYxaqvNqNHbCW8ctxilRdBKWoDY krN9fr+29P/oWowzWmyOZZyNk9woVZjnYBw/B85jlqrMYy5GtH/gDJa0uIIilGpQW21epdG6327n oAEDhjknVRRVLqlaUlrtTF1SuXRJpae6Ysnifs6xCxc6p1WUlVdXOaeVVJVULisp7pcybkrqxIzE VM/CisLKij8qBcRZUeUsqaguL6l0epyVJWUVVdUllSXFzupKT3HJIk/lAucSo6ZFsfT3z8dZsdiJ YZzuxRXV6J9T7akuqXJ6Fhf3xwBLzAMULalZXF1ZUVLVj1JoHE3B7ZxIGZTY6gFPMx9jDSLGA/mj lv+3decm7f/gpDX/MzJWDg/txRqxB2gUgc4lRK5YdRnWFvMfhZCyOl47v273vPBRJ6ljkLlMPfL5 qhcMPdxzfPrpgc1VbR6yb0fRWKfMdey/BBgAoS28RA0KZW5kc3RyZWFtDWVuZG9iag02IDAgb2Jq DTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMjE2Pj5zdHJlYW0NCmjeVFAxbsMwDNz1Co4t Mkh2MxoGimTxkLSI3e6KRLsCakqg5cG/j+Q6CTqQBI883JHy0BwbchHkJ3vTYoTekWWc/MwG4YqD IyhKsM7ErVuzGXUAmcjtMkUcG+o9VJWQlzScIi/w0nVFsVOvID/YIjsaErQvv74T0s4h/OKIFEFB XYPFXsjDSYezHhHkH/OJdktAKNe+2NS9xSlog6xpQKiUUm/1vSDZ//M769qbH83iuf2uapG2Nzzz 8lUPI2ZmTh7X01cj2YIjfHwn+JDVcoibAAMAc7Nq0Q0KZW5kc3RyZWFtDWVuZG9iag03IDAgb2Jq DTw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMTMyNzMvTGVuZ3RoMSAzMTE1Nj4+c3RyZWFt DQpo3uybd3hU1br/37X3npmQOgmpBDIThhRIIBAghCIZ0giEACEZSKhpVKmBACJgFBAMoKhYUBGw axAng0js6MHe+/HYwHbUI/aGQuZ+135nAaLnXJ/n/v743ee5IZ/5fte711qz99qrvDnXS4KIwqiZ dBo/riIre/6cxnZE3gU19QtqF6fOSV9JtAQx7VD98mXOe648eJxIDCOyBM9aPHvBTz+VhRJZS4g6 dZk9/7xZhzsdryMqiidKjJ0zs7bhw7QYN9F5q9FfzhwEwvaFoG1EA8o95ixYtrL3zCOfobyJKHL9 /EX1tVQcshtf3RflTQtqVy5OF3oY2k9FfefC2gUzc96eAr/sWiLjscWLli7DfeNn2Up5fXHjzMX+ Lz49QpSMe+oRQrphE9vIQkGWHZb+uOskVv1lulijINIiLJqmGbpm7Cbtazc5z6fAT1mF00kI/GZY qYPEYduNWqqTaJe8ph+0hMtvk99su5Go40o682c8zaOlGM9mupi20pX0KL1DdbQObgftptvoTvLS Y/QMvUX/D386zrMsoFD9IFmpM5H/V/+xjttAO+70dORKlDobztMRv93/1Vmxrzqu9Ns72q1RFGy2 DdNeRfR7cdL/q5Yny/4cWdY2wkeYLb613dhxT8ftZ41BOU2mKTSVplEN1eL5G2gOzcXInEvzaQEt NEsLcW02PmehNAO16lFL+tO1FtFi0EjLqImW499i+KWBkry2xCw30Qr8W0nn0So6n1bTmsDnCjOy GldWmeWVYC1dgDdzIV1kOqUcWUfraQPe2kbaRJf8x9Ilp1wLbaYteM+X0mX/1m/9XWkb/l1OV2A+ bKer6Gq6FvPierrhrOg1Zvw6uhFz7jbz2lWI7DKdvPoQPUkHaB/dQ/eZY1mPUeMRUeMyyxzDxRiD 1XjCdWfcMY/filOjtRbPLp+tJfCkKxG/6IwWywPjKGuuQ03uhd+D7GXNWSOxDc/A/vQTcekq8/lP R88clf8UVeNxwxkjc71Zku7s6L/zV9NOrMA9+JSjKt1N8Ox2mf7M+I2n6u42yzfTLXQr3sXtplPK kdvgb6c7sLbvolbai3+n/ZmOdR/dbb45L7WRj/bTvXiT99FBajfj/+nan8X3B+K+U5H76QF6EDPk ETqEneZx/FORhxF7NBA9bMa4/Dj9DWVZi0tP0lPYoZ6l5+h5eomeQOlF8/NplF6mV+k1ekuEwb1C n+PzJCD3yIYZ06dNnTK5uspTWTGhfPy4sWVjSkePKhlZXFRYkD/CnTf8nGFDhwzOHZQzMKtP78z0 1JQeru6O+OhIe0RYSHCnIJvVgp1YUGaRq7jG6U2t8RqprpKS3rLsqkWg9oxAjdeJUPHv63idNWY1 5+9rulFz1lk13VzTfaqmsDuH0bDemc4il9P7QqHL2S4ml1fBby10VTu9x0xfZnoj1SyEoZCcjBbO ovg5hU6vqHEWeYuXz2kpqilEf20hwQWugpnBvTOpLTgENgTOm+5a3CbShwvTaOlFQ9pwDoXJr/Xq KUW1Dd7x5VVFhYnJydVmjArMvrzWAq/N7Ms5V94zbXa2ZR5q2dJup7qajNAGV0Pt1CqvXotGLXpR S8tGb2SGt6er0Ntz1cfxeOSZ3kxXYZE3w4XOSiec+gLhtaTYXc6WHwk37zr25e8jtYGINcX+I0kr H/HUMOG68oR7wx3i+ZKT5b1sbndTHQre5vIqLjupLtFH7qyMaq9WI68cUldiPPJKs7pyqnmNK1m+ qqKawO/yOfHe5jpn70yMvvmbgl9cd3r11Jq6+jlSa2e2uAoLedwqq7zuQhh3beBZi9r6ZqF+bQ0e Yq4chvIqb5ZrsTfalc8VEHDKdzC3ospsEmjmjS7wIhEKtPJmFRXK+3IWtdQU8g3KvlzlVfdTf/+R tgHOxP39aQBVy/vwxhbgpaQWtVQ1zPI6ahIbMD9nOasSk73uagxftatqZrV8Sy67t+cRfF2y+Y1m KzzbWbVVZfnktpQgZ5WWqFfLt4WAsxgfrvxhuGDH6zKL8o3mD3NWiURS1fAtgRrS/a4fFPSUghJ5 SZdNC0oSk6uT+ec/3FJi4J4sKd6gM/qyI3Dqnvh7/u2tcW15Qz2dRTMLz7jB33VqCdxgoLc/v09N jkXgi9EiSL7OEnVJT8HKRUxDN2ZIvsV4p5fGO6tcM13VLswh9/gq+WxyrM33W1rhKi2fXGW+7cAs qfxdia/ncslLybisCloB5mBxRqJ6rWZ5pFk+VSw56/IoddnZEuQqrWiRnbsCHZITKwgPbU0dVbs5 N2oAlmYxdjdXca3LaXcWt9S2+5vrWtrc7pbFRTVzhsg+XKMaWlwVVcMSzXudULUmcZX8qigqFaWV +b0zsffkt7nEpvI2t9hUMbnqfjuy2k2VVT5NaAU1+dVtPXCt6n7kvW4zqsmoDMqCUxZkTxNQCDLr J96PTL/ZvGqYAbNc3y7IjAWpmKD6do1jdhXTEDM45jZj8gcvKX4OhhjbbZGzQb6e1dVzWmqq5eKi WLxK/AqvcA0nr+Ya3iY0a6g32DUz3xviypfxPBnP47hVxm2YGCJWYHDkntRS48I+hQlVRYmCp6Iu u3S2+/2VVckvJB6rTsZUmwomV3k7ZWDvt6SMRr2RkhqER3qb62vlfZCnSra1pYyqr8a0VR2iyihv J/TQKdADahSbbeR0RKN6vBu8QLN9Mwre5mpvdYb80qq51eZ0tnupxDUEr537tKTKL8qqbolyZZtr E0shOGWjlE64N6qo4kgiiviyah4kWyjuvN6FS/U1Toy2QfUVmOq8lwYncmQmtkQjdaZJcGLgIsnH 0lNCwoK9nfqgQ/xKH9JHLklLiq26mm/eLG0MVMB3270huKPUM4Yy0ACjg0uj5L3gdyNuVVZ9THZT 3k4TXCuxs8ibNnuy4bI3LGVULTZ/bh+CiCtXNQ6Se0RIoI/DHLXJJw/FuOsple3+213nJZ/x0zvT JQ8HOTEp8X5MbKpuOTvgnZLROzPo7GiYGW5pCQr78wY8XkFhp1QGnUU4NVARf2Pz35HBY0/069jS 6T4ZOfPHqDXCT5fES4jsIddfxZrof15iTKa9RiHV/ilf4tqXdI3hp0SJ/hntBUUBLQ5QD2aACwPx vfrdtNcSSlPOxjiB/oAFfyVrBu3VDP9oaDp0MOgHxoNx4HzEk0CacQXqbSWbttV/p5GO9kCfZnKh Xhfwi6mrMZ32Wt9C373+BBsYQ/X/LeMY69dUb3THdwFLHXwVPFMhFc83MkAMiD9V/pQizsTSne76 qxgt1N2WROecjZFGfdFX0h94lIYG6GLqD2T/q1im+j+UGAbt0Z+jBX+GMZP2gHnGCsqW6M2o24x7 YXUGyAQ9QX4gvkcfj3YX0fw/sBLxlbTF2Elu8SXtEV/6q6AJ0BKQBjxgAliCeCSINxJpjzacSBvu 36I/g76BdsRko/ZpwH+De3uD9lit6P/yU+wAK00/C9xFs/5bHmDQzyz9CXwXMNrgj8EzRaaOo1GM /0fw06lyNXXVq/0drJiPW2kXuCGg14CmgP8D+klKtg6nQWejP085+jq8s7OZS4UBgkx9g6aeRdKf xEysWYwxgHZg/UwOMBZMUmXbIppsfQ8IBnVrjC1gHhhAtfpvNO2voC2hFOt1lBL0BqUYrfDXB/yw sxh3FoG4dflZXHIWgfjv6nfCdxSc0fe609eMY4ylM6XY0ilFP0wDz8Z81j+ywxjgv9so8B8Xb9IG 8aZ/ITQCOhk4QSOoArMRjwQ79EO0wUiiTeIL/xsB6vWbEQ8g64BeWldTS8Vv1FU7STusDfK7fsdY U2/y7zQ1F+/j94z7Q2wYY33efHeqnxrtWdrB+I9DF+rJVM5g3ib7T6qyZR+DvnaIb1F/HyVrh4HU hyjV+JSSjaa/BsY62VaK+f32XwP3uR1cGtCLQRm4JOC3n4m+k7pb2mng2egrsCftou5/oCdVB7CZ mkuNei016CsxV/dSofYJzdfGmlqitdNI8Rj10K7BO/qc5ot6qhUL/H9Heb6Yjv1sIup+alJktkMb 8RO0L+WLj8gl22gbyKF/TZnaWpxxF5NDG0T5WiX2syawXZ7aJ4OITnymTfxjDPdH+gxgxk7sArPP iu0Ec4Uf5evATeAOMz4T1Og90N+PiBWD2WZ8N1irp6E8Csw71ccaPRTlCBBpxvaCO7XL0f5asNuM fQ4+1JBjaI+DA6j7GDiKnMPMPk5MAP3Ei8hD3gQvMniWMgmebT10lXaBqcvFz7Re66fyFf8lMgfR K3C+rqchnEN0PCXPNM4XOm6UZzPnCx34M8E/wcwDrqIe6rzHGFfwGe6PNdvg3NZbkZvwOYzzsmOh VGtnfCfOUyvRNst4mm4Z33Gcz0R/kzwLtd/MM8bFZ1nHK3Jv5XOr43XjXprF51bHwzijKs3z6ChF qnNH30jT+SzxD5VtzDNkCpWa54G5b3fcJNWCkZL7uqWKNsrzxWjzz8bZX2vixjrNxny8AmdfX9S7 FXMUaE9jDxiDa5IR2I9WklXLpu1atv9LsApEmPvKvXi+WdBrMNc1KtN1rB21J8yndCOKlqN9Nd7/ VD2BdMND2wKsAbGWHPJYhpIHzx1luZO2W66gBol2ifkugzFW8l3naBa65hQ9MO/9tFBivs8yutt8 n4sDLMc7SiP9jNyx1joH3/EslVpkfhUgkA+Ol7neqXzrI9Ktv4K3OG+06afzOOM4v2eZp6rcC8/J tGNf2M7v2tIVdX4EjbTM+h36SIL/F0VY46FuUEfTjFqqswXBL0F+50f775C7YWKbc+MrusnMk6ID pOF9N1P4GflQpmUlzuBmmmRcgmuX0NXgqkCO45H5C551jwTvVpjzZWUgJ7kTzAvMFZl3qTxiJ+bs TuTcWXiOYJ4vxqVoMxf1fqUFVhfynSKUZ1CcZR1in4GP6Vz9G+Qv2fB+nO8zyGHUA6xAnOHCjOP8 NwowLnJuvYF9/XAAeMyJUcjz4uQ5ceYZjv6HIycoNSow9yqQU1XgTOMzsFGea/p9aAuMGIq1atTZ MpdmGCNxjqUHzqp+oNfp88zMMeQ5k0DB8qwL7M3x+qvU3ehAHHs35uIOo795huZbXqcdlg6UR1Ow pRKxx8FmzO2tuLcn4Z+jXKPCf1yezXjf8fpCPFsAzNVbJdr1Ili7nh6V6AdoA5hu8j7mdg0dA216 A63CWTAD87iXnNPgQTm/LRfT1YhtkXGleEebQIbSQCxDu4+WgUNKjQTkfAlYDwHV40hoH+BMuEe0 6CfEPpRDUO6tLcUZAvQTyCeBbThddSaIHddP0GOn1twC2gBWacvwTMtosraeJoImzY191Y34aPKC 2f+uHvq6EawAK8Fyw0vnGucgHzhB88A54jBt1gfSZgvOJAvOJtvPAOeGbRir9W66R4K/P5stt1Ce ZS+V4XkJbfOM/ZhH4RiPE1gP4WbuVAV/PxiNcgV0AcYiA36A/j3O6l1Yv4/g78ddqLcLeVoyjQrq j73iBPb3jzDHI6mbsZ1maM9hX/6S6kA55kd3/S1oDq3VfcjZcrAf5GBuh1MJ2AcawWzgBDPBuaAe TDApwNhspQT9QuyDS7Ef7qVUfQ7u4yDGYBRlYW6U6g/RBNzPeLAVzAR1YAiYbd7zLsyfXZivqPOH +0v/y/fX98/uD+ujRPyCHMJLpdrdNEJ7h1K02zBHPqApOJeztaOIf4A85Qsqh5ZrL9Mk8RDVgKr/ SVttJ+WKH6mfNoGGaaMwL0dTtFaMNuXUV8ul7tok9FWGvv9qvTZ/qd6ZCi0zAM5SS1xA+4AK8AyN NZlNIy0HwU3gBUqzrKEi+CKc7TKfKwkaSyWITbU9g/d1Auf6CRoDakAGmB7w1QBrCO+Kr3vARDmf LZ9TpmGhgdbXaC7efa12DPnfCQqS+YbMA+SZaZ2JvbiSphixNBpr7jpwNXjGJJzusYWLIUqDx9J1 1lz87TaL0n2ddGe7tv7eTvFiNMw6ZS5S5kJlmpW5QJm1yqxRZrUy5yuzSpnzlFmpzApllivTpMwy ZZYqs0SZxcosUmahMguUma/MucrMU2auMnOUma3MLGVmKtOgTL0ydcrUKlOjzAxlpiszTZmpykxR ZrIy1cpUKTNJmYnKeJSpVKZCmQnKlCszXplxyoxVpkyZMcqUKjNamVHKlCgzUpliZYqUKVSmQJl8 ZUYo41YmT5nhypyjzDBlhiozRJnByuQqM0iZHGUGKjNAmf7KZCvTT5m+ymQp00eZ3spkKpOhTC9l eiqTrkyaMqnKpCjTQxmXMt2VSVbGqYxDmSRluinTVZlEZbook6BMvDJxysQqE6NMtDKdlYlSJlIZ uzIRyoQrE6ZMqDIhygQr00mZIGVsyliVsShjKKMroykjlKGAEX5lOpQ5qcwJZX5T5ldljivzizI/ K/OTMj8q84My3yvznTLfKvONMl8r85Uyx5T5Upl/KfOFMp8r85ky/1TmU2U+UeZjZT5S5kNljipz RJkPlHlfmfeUeVeZd5T5hzJvK/N3Zd5S5k1l3lDmdWVeU+ZVZV5R5mVlXlLmRWVeUOZ5ZZ5T5lll nlHmaWWeUuZJZZ5Q5rAyf1PmcWUeU+aQMo8q84gyDyvzkDIPKvOAMvcr067MQWXuU+aAMvcqs18Z nzJtyniVuUeZfcrcrcxeZVqVuUuZO5W5Q5nblblNmVuVuUWZm5W5SZk9yuxWZpcyNyqzU5kblLle meuU2aHMtcpco8zVylylzHZlrlTmCmUuV2abMpcpc6kyW5XZosxmZVqUuUSZTcpsVOZiZTYoo9Ie odIeodIeodIeodIeodIeodIeodIeodIeodIeodIeodIeodIeodIeodIeodIeodIeodIe0aiMyn+E yn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+E yn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+Eyn+ESnuESnuESnuEynaEynaEynaEynaE ynaEynaEynaEynaEynZEwX5pkDX7koY7kDP7kmIgF3HpQl/SEEgzly5gWetLCoWs4dJqlvNZVrGc 5+s2ArLS160AsoJlOUsTX1vGpaUsjRxc4uuWD1nMsohlIVdZwDKf5Vxf1yLIPJa5LHNYZrPM8nUt hMzkUgNLPUsdSy1LDcsMluncbhqXprJMYZnMUs1SxTKJZSKLh6WSpYJlAks5y3iWcSxjWcpYxrCU soz2JY6CjGIp8SWOhoxkKfYllkKKfIljIIUsBSz5fG0Et3Oz5HG74SznsAzjmkNZhnDzwSy5LINY clgGcmcDWPpzL9ks/Vj6cmdZLH24XW+WTJYMll4sPVnSWdK461SWFO6zB4uLpTt3nczi5HYOliSW bixdWRJZuvi6jIUksMT7uoyDxLHEcjCGJZqDnVmiWCL5mp0lgoPhLGEsoXwthCWYpRNfC2KxsVh9 CeMhFl9COcRg0TmocUmwkCnCz9JhVhEnuXSC5TeWX/nacS79wvIzy08sP/riKyE/+OIrIN9z6TuW b1m+4Wtfc+krlmMsX/K1f7F8wcHPWT5j+SfLp1zlEy59zKWPuPQhy1GWI3ztA5b3Ofgey7ss77D8 g6u8zaW/s7zli5sEedMXNxHyBsvrHHyN5VWWV1he5iovsbzIwRdYnmd5juVZrvIMy9McfIrlSZYn WA6z/I1rPs6lx1gOsTzK1x5heZiDD7E8yPIAy/0s7VzzIJfuYznAci/Lfl9sHsTni50CaWPxstzD so/lbpa9LK0sd/lisV+LO7mXO1hu52u3sdzKcgvLzSw3sexh2c2yizu7kXvZyXIDX7ue5TqWHSzX coNruHQ1y1Us2/naldzLFSyX87VtLJexXMqylWUL19zMpRaWS1g2sWxkudgXUwvZ4Iupg6xnWeeL mQW5iOVCX4wH0uyLwWYsLvDF5EDWsqzh5qu53fksq3wxDZDzuPlKlhUsy1maWJaxLOWuG7n5EpbF vph6yCLubCHXXMAyn+Vclnksc7ndHJbZfGezuPlMlgauWc9Sx1LLUsMyg2U6P/Q0vrOpLFP4oSdz 19X8RVUsk/h2J/IXebiXSpYKlgks5b5oN2S8L1p+wzhftJzeY33R6yBlvujekDFcpZRltC8aeYEY xaUSlpEcLPZFr4UU+aI3Qgp90RdACnzRzZB8X1QxZASLmyWPZbgvCue7OIdLw3yR1ZChLEN8kXJq DGbJ9UWOhAzyRVZBcnyRkyED+doAlv6+yExINtfs54uUD9bXFynXZhZLH27em78hkyWDO+vF0pM7 S2dJY0llSfFFylHqweLiPrtzn8ncmZN7cbAkcbtuLF1ZElm6sCT47NMg8T77dEiczz4DEssSwxLN 0pklihtEcgM7ByNYwlnCWEK5ZgjXDOZgJ5YgFhuLlWtauKbBQZ1FYxEs5PZH1DkkHRH1jpMRDY4T 8L+BX8FxxH5B7GfwE/gR/ID49+A7XPsW5W/A1+ArcAzxL8G/cO0LlD8Hn4F/gk/DZzs+CZ/j+Bh8 BD4ERxE7Av0AvA/eQ/ld6DvgH+Bt8Pewcx1vhfVzvAl9I2y+4/WwVMdr4FX4V8IyHC+Dl8CLuP4C Ys+HLXA8B/8s/DPwT4fNczwVNtfxZNgcxxNhsx2H0fZv6O9x8Bhw+w/h81HwCHg4dInjodBGx4Oh Sx0PhC5z3A/awUHE7wMHcO1eXNuPmA+0AS+4J+Q8x76QVY67Q1Y79oascbSGrHXcBe4Ed4DbwW3g 1pDejlugN4Ob0GYPdHfIuY5d8DfC7wQ3wF+Pvq5DXzvQ17WIXQOuBleB7eBKcAXaXY7+tgWPdVwW PM5xafBsx9bgWx1bgm93bNBTHOv1XMc6keu4yNPsubC12XOBZ41nbesaT8gaEbImcU3pmvPXtK55 Z427zBq82rPKc37rKs95nhWela0rPMtbmzxGU3TTsib9hybR2iQKm0TfJqFRk73J2aSHLvM0epa2 NnqocXxjc6O30RjqbTzSqFGjCG73H9rfmJhUDHWvbgyzFy/xLPIsbl3kWThrgWcebmtu7mzPnNbZ nlm5DZ6ZrQ2e+tw6T21ujWdG7jTP9NZpnqm5kz1TWid7qnOrPJNQf2JupcfTWumpyC33TGgt94zL HesZi3hZbqlnTGupZ3RuiWdUa4lnZG6xpwiPTF3tXZ1ddbu8gbFdcSeUKPL7JroTjyR+k2hQojfx UKIeFdHF0UXrGZEgCsYliEUJFyRclqBHxL8Ur7nje2YWR8S9FPdB3NdxRmd3XM8+xRRrj3XG6jHy 2WLLKotNzStk7TfQfNayWFdqcUSMiIhxxGhFjhhBkUciv4nUYx61v2TXIiJERIQ/QnNHoHpEuCNc kx/+cN0d3m9QcUSYI0yTH/4wPdYdhojsMS10fGVxRIgjRPPkhYwL0dwheQXF7pDefYtJF04hSNgh ehDq3itiHMX6Q0L+x7MWEmJbW2VFRkZpexBNKPUGjZ/iFZu8KRXy010+2Wvd5CXP5ClVbUJcWt0m tIJKb7T8D+rN8oatW6lbfqm3W0WVT9+9u1t+dam3WXq32/R+6QlVqjOmL21ampGxbDo+pi9dlmH+ oiSaZClDBuXv0mUoy39NZpky/uMPV4PMWIqfZYHYsoz/1T/if/ft///w00by/w9khF9bTw3aOnAR uBA0gwvAWrAGrAbng1XgPLASrADLQRNYBpaCJWAxWAQWggVgPjgXzANzwRwwG8wCM0EDqAd1oNb8 jyoatBlgOpgGpoIpYDKoBlVgEpgIPKASVIAJoByMB+PAWFAGxoBSMBqMAiVgJCgGRaAQFIB8MAK4 QR4YDs4Bw8BQMAQMBrlgEMgBA8EA0B9kg36gL8gCfUBvkAkyQC/QE6SDNJAKUkAP4ALdQTJwAgdI At1AV5AIuoAEEA/iQCyIAdGgM4gCkcAOIkA4CAOhIAQEg04gCNiAFViAMcKPTx1oQACiBoGY6AAn wQnwG/gVHAe/gJ/BT+BH8AP4HnwHvgXfgK/BV+AY+BL8C3wBPgefgX+CT8En4GPwEfgQHAVHwAfg ffAeeBe8A/4B3gZ/B2+BN8Eb4HXwGngVvAJeBi+BF8EL4HnwHHgWPAOeBk+BJ8ET4DD4G3gcPAYO gUfBI+Bh8BB4EDwA7gft4CC4DxwA94L9wAfagBfcA/aBu8Fe0AruAneCO8Dt4DZwK7gF3AxuAnvA brAL3Ah2ghvA9eA6sANcC64BV4OrwHZwJbgCXA62gcvApWAr2AI2gxZwCdgENoKLwQZqGNEssP4F 1r/A+hdY/wLrX2D9C6x/gfUvsP4F1r/A+hdY/wLrX2D9C6x/gfUvsP4F1r9oBNgDBPYAgT1AYA8Q 2AME9gCBPUBgDxDYAwT2AIE9QGAPENgDBPYAgT1AYA8Q2AME9gCBPUBgDxDYAwT2AIE9QGAPENgD BPYAgT1AYA8Q2AME9gCBPUBgDxBY/wLrX2D9C6x9gbUvsPYF1r7A2hdY+wJrX2DtC6x9gbX/fyfB /+in+v+G4H/0Ez9juswwqWOp/qolnHSy0WAqo7E05SEKw5yOpSHiwIGYwsKg3rZHMF81cmLGByEl LXBHGFrYwS5d8lwHB1q36pGj8If7vXm2rdjL806+f/LFrJPvH4sanHVMZL139P2j9m9fjByc1f/o 60f79RWRyZEm0eGazRZtdXXvow1MS83p3z97uDZwQKqre7hmxgbkDBqu989O0vRoFRmuybLQXz0x WR930qqtdeVN7G9J6hIRHWa1aF3jo3oPS7FXTEkZ1qebTbdZdUuQLX1QfvfS+UXd/2GL7BYT2y0q KCiqW2xMt0jbyXcs4b9+Zwn/rcCY/9t23Tp0al4P/drgIM2wWtuT4hN6DU0eNTGis90I6WyPjA2y RUWGphdOPXlxTFfZR9eYGO7rZBnS9L3+X421lkg6hzbsT4uIiG73f7bfLspMjQhomKnf7A8NlEOk apHupKTgPn2y41E9Oz5CfqBitj1UOlTJllXslJQ7IbhPRJqR0L08wWOtpLy8vKi4wXki6/Wj5pvM juxvD7is/v36psgRk0OWJlJT01yxsTGRagwjB8iRTtLiRJIe1z81FQEe1RhjbVhMl7BBXdJcrpiO Oc4RXTVNC+rsiI93RAVldpnQLc3RLVIM6ZaT3S9eaAJXEmKdUUEjozEeId2y07Qjg9cMLbl69Inv bWE2iwUfxl3p3YPjejpOPj2gvmZa1rjWcdojttBOhtEp1EaYTHLUQjDvcqiQLncn2ftEDgrCIw+y R8iP0DAxZpAclkFyHAa1a/0P9nSj2DMvUg4jnKkRAQ0z9Sc5vJGB4Y2U/4eIrn3s7SLovsVu4XbH ndMuQg4kl8d5LB45hHKGTjs2WGQFhu71DDZRgwcHxlAOod5Hd7l+N37J2bFxSXqMnMAYxM6xsWJA alpqKmrJOWyEWKN7JHVJjg4xVsT0Hl45dGmnzskJCcnRQT3jROd+I7qULh2b5sqfOtg5oHd69LLw oI6TheMT8vpffkdhfb6jS1BoEEYIE6DfgEl5rpNvB4XK0URwX5rDooflTlxUMGL2uCHR4RnDxvbr +KhHN33DmLlxNmvHmOSh4zGqO/zH9DcsS6iXnI0H8vJEcHJOYGByAgOVExggWb43wi7G5LSLX9yJ MRlRqJThRI0MOeYZcvQz5NvIaNeC3Z0oJjhnYLJh6dsuLPeljk4sto8ZDNtmKaO8Y+Zwxg0+NSN5 OmZjIKcJNZIxpwcxMOcieYXbBvTR5Lq3RcbGyiHU3+hfv21axqji4rSgqMQYTDGrrbMzPgHzLb20 pCS9bvOk9H0xAya6ncPdRWmFqwuGVw1KEP9senB9cWTqkJ4LMWaGgTGz5JqjiY+Tn/TMddnHrvM2 FV3UcE5Ur/zsjh0Vk4bVn48Rq8GI3WBZQKnY/Ta7HXlDRUjiYDtGYXAwxmOw3S4/MAqD5aAMfhCp KFGW/4gcyazASs8KTMWswArPCoxwlhy44M7JxSGD0xKN8F7yf8aLHz2gXRj7w8ssYzAJj5nDlqfm oFrPctzUDBw40Go9vf/Fxp0aPT3V3C1jopM0OWqD9BtskV2j5QY1cseU+i2T0rPrLp8xbp3bFu2Q Y9fptoI1hXkYKYzciORz3MVpCWqgVpRNLFvXVrfswfUjiwq0ELWCTxZhjOpWuwsvmokxK+gnV+00 jNYO/VnKoAG0z90rKycvZ1GO3lnOms5ODEHnzsmZcvvKlKOVKYcx0y7nWGa7OH6gMOOWDC0Dg3RA zqoBRjsPI/QrOWxmOcTUz8yJacjxS07OfKrZ2GZohwzxsiEMo2vWu6mj47+oCV8croV3+qIr5t/J 16cd4/W8pPFYYDCz38uYdpTXc1ZGhjkRra7kwGCZAxgdbj3zYIlJyzEH1KbvSEs46UsqXlz+X+xb e3BTV3o/515J9yVLurp6y5avbFmyLCzJNraRDfY1fmD5gcGsgaQYsLFIRIxNZEMSIFnCZjOThE6y KWmnSWZDZ7ZJmSFLaFheobNpJ9v80cLkj5bpzLY7YTrbzWZLu+3ksU0Wu9+59wgMwZTtdLfTrq/9 3fO4517p/M7vex1J2kQ2ZeUkC8uwnNS08WFt+o1Cy8qHj+3Y9dL22tfZxx5ZtaWtAgxlLNz/6Mak O+DmbH5niWK3Sn6f0rb/3P7Z8092d828slk5fDQ5kGsmCH5z/gu83pxCbhRGR862Vw5VTleyHuoj PFRX9bailx8ShnkowzyUWZ53IOktRW5Do930Lje96i5qths0+4xYrsGdZEv/tN+R1Wl35VqCokQZ l1hIuBsMU4h/joIrBt7hNt6p+n2qwhV1UVnW2pIg4uclomYSzz7FGQrH4XRLTTwDQn4V/ofzX5g/ AM6sQx9rQacD3qBC2BF1SFY8EPOR855h3KPQWSh0Fgo19AqdO5Qfk9kqxFyFQh6ohkL1ItFSkRBN JA8VdbaJwLaz6zQZD65ri9HHxuhjY/SxMfrYGDWLsXcgw6xHDmz50/6+yDls0Uo6+tp6aldkawf8 Azps4HYzGaKzRX3NUJ8B4Q11HkRz9W2xBWgS62bh5Lt0ULzdTU26czbMotv8AUAOUCu8a1lXMjPT zQPy3rDCeZZ1JjOzXcUFsThLvZ4yBzfwfHbFfV1pR+36/jWRTfuy5TcWhqnMbO2KbB65/tziPexT vCSwrCDxj4wMBVId1XVdNcqqnc8MGCvIHoMVrEdHNbuxguTUvhzX3GGVfm6s0u2rSZxMSCL2VCLL JRGjKpHVk8jCSXD9LNKgiUIOgr5Y21fjj2SL0DszBPYizI5b0K66Z2jd7DEDUyfvS2bTbQe/CuIf DN5/YCB8Ezr74N2AAoC2E62+H+zijwAhBcXQn2il7XFc7cRxGUdLcNSKozyOcriGxXEGh6jTCFHA QtQKhqgVDFHAQsT4hVIiFl3EE7sIXC5iZ13ET7sIZq4LjIjQ/Ltn7WhwDyyTn3wWZO+rPIcZ6pYB slEKWcqwhkTTiwe+LbQuOuKiS2F/1DLzZmH6j6eaMjMnZqBs/m6wbddQNt8VDrbvGurd1aXiH0+d f7p/9ROnC1D2QXkwe3g8s3zb4cG+w2OZ5VsPk5hk7ij7t4ANiUkOkZgk3CRSloiUJWLRYol09iKh i9dthCN6YOIjl43I5I7xSNYxtGg8cqdw5A4cWTwceXFrdVeHFllAFpc76OTiA4Pra8efJeFIgx6O 9MS69ne23dccwD/dd/EbaxwVyyvn2opRiOmnwBmWBfY8VtMWdw88dXJv95MTK5V4Z93cyxs2r5w4 SJi0HdB6laL1tBYEuMqlBFGYhGgthma6kUuQWKQGNRi0aaB0aqBWsoHSrIEC2qDHIu6qrLQqUW5y JEksEuhbQWIRx6B5aLFY5BbMGmUbu5Av3sbFYxGBqFm5i4v39WZjBKL6Hd/aVt3TvaaGpE+uUpn7 Sjwyd7qIFL4Uz1TaizGJXNUa312Ebu5TIygxAjkISnTrxLwBiDWgHaf3NOKonZLKTqduL5LLTlln J+RyIg0cLCJOAhGWoQBwrkoTEn1Ru1vNuonV0c09Tr0HQFwt2psiGAZFFiGRhXmDsQg87y2LuP3p xpbK281MVUdLpqwkHCmzmljMjntCsiAIvCs50Hz9ra8amm80dcXsLC+Kgi1IPOr6+WvMZZhxFl3W rKn+9v6h/q/3n+w3d9AJdlAEOigpOsinWwptO2gpkRL/vVYeqY/UW4OEYkFCsSAx0UFi34PE5gQv 4M+IkdFEaCCrBv1W8pFWFJ7Xbj1pZazJf2gWfyavk7fLe2S2WW6WPSt/2BE0x/s8HxnKCDBekzOZ VGrUcc2hm6TEgmQrlboZg1BwTUViGbsCSQttW9wLwAeyWZjLDVsPr01v6k57RJNF4qRE+8YVNV31 wZi2bmS9FosPHxiO9LbE3RzLspxoESqasqkaLe6u1oZHNmgxbOuehPX2+l2RciXg4IJq0FnZVBVd Xl1ekWjbuLJxLLvM6nQ7rHaPQ/Y7OI/fo1SmS2ON1WpFzcqvkbUIz/8rs9v0JmpBW07HkVxZSzGv pWtRS9eilipkLWVlLSGh1VtSe62yt6zkmre3DnTxFGeY7UuEdg00G7j0Xr2ekJoMpukhGcDRcEP7 3EY4ayGJqqcY3jK7eYcaT3p7JrSyJ+xOM1/CP14M3X7CQyLutP+keY03UurizYLZ9DtlFQ6bYKmC 9JSxqRElIHNXiun6FU4OKBF1ThzdJoiC2eYj8z5K8ib2IsQEL0LWtBxLMcKgGGFQjCTyMd1IxRx6 yIX/44yhaeUUlXKKCpS/0HWTVAgs5UVlLaccJV/U0wSlNhuTzP4sBGbmm8kT0c+ivbpBqTsmTzdz Tt1ENTXfTKNe5Zxlbm+ZbBn8fd31cy7VB6rKe1O96bYD3ZA+geY6hRsRwSMja1c+8Mw4U1HUzuuf DG3rrNo8wuwt9hB8KiBmOgD4LEP/eB5VzoM3I4FuOU/OVeU4ZFRC2EPn6aal62b4q5fOG/sZ8z/X mslmCEQVMo45cLUZV1RDx6oKHKnAYVJtD+NIGKt6r4ojKo7Z8b4wDp+b/0ATZHdvWAWthdZHmgBU DJOMjbTISoTJ861wY7g6G5YCWckwgICvjipKjOqRQ8L4xyR+MHCHdiKh7+dhwz3E8AIXoXibFbqR dwAzLDN3yVQSqA6Fqv0209xlk5lsJXnLKhXBNGdiv2QgWw56QzLHvmYSRCv3y+OSjWdNvE1kN1md AgupBQMn4XrAamX+SbDyLMNLOtrgNQ8C2hE0fB4FYSaNBKkgjgexT082fDhqa7IxMQEHiAlrCWD/ Cihb/bg86xeVrNhvGkL9NMhvh6kmjEmSyYZZg0XNSjQaw9HlNEzHDYqekntcHNPwqKWuPqDKjOWg 4GDnvs87IqFQhUswY8z+wiJXqKUR2TL3PYdstrpsOGNyiuwWt89mZnl7yfUkc0WRzKBXTvD/vaBX 75vDEEkmIF/y3xZGVhXDyFpig6vszOD2WrwgQCRZkYvooEslXPKR2jtMLUJINcyPSs2TSuMElSoi lB+dgRI4Q34XpwmiitJIQywJzTSB7G6IQyKDdCbZ9USLGUTndL8AFRGJtcuC5KtM9g1VUJwyb9QN mezExMIbNHFcHV0YvSd0lBePRU0LQgoT+35q91tP7n9jZyI9+dahA1C+ZQsmVg6mR3at8oQ6cr0r RlZV+wTm2Zc+OzW26fjnx45+rpcnxl7eN9LsX3fk4uS3/upQS6Rza+GbwJfvIsS+ZvaiJPqxFomE cKQMR0pxZRBHAjjix4QuXhzXsXeqAFuazLSEwJ3GiECL4tSexymgcWrZ4hTQODVocbKHawv5yE0+ iZwlmYT8xtbl37wNz5SJeza2NIv979KtTIAe7jgmY1lxnsPtb1cOxyE74k6RXeBr9e3XL+nelByX Eu8lGv5Nr/5ARxYZSmocukEMF/ENy5zFEtXdSHMVzTZlXUdfs4gl3PUtnFWyWIQSHtu+ULzAUosk 4BqT1elzgim0fMzbBHMX8ZecI6A4A7LA/t1Loqkk5JV9Dqvl+6zJhE2cZPnyeUEOEO0sANqvAqfb IH8siTfhRAjHy3A0hDUCq5fAqmEPYbFH3/n1EJg8QMMzDVXwhzIU68wF5utIMsCRACxNIjmkvCKj qhkgX/JMg8eS3OCAPKC6iJARe6SgIIbsauISoaNOQB2jUXw7OMRcNdIUgBLSQreLGI4LE5BeNQt2 4XqjzW3nWNFu/XJTPuMsbVy3fNVYts7KSZyJMfO+1vseat36u6NJz5qnpy8xDbxdMvc5SxWBc4Q8 rpDXW4LFLS8+Op5IDLZUVFRX8M6QG4IMmztS6Wvcsr+77cDzJwtXBGeQ5ATDYBNeB/zSaDX6M02J J3GNGcdNOM7imiiOiriL4KgSHLtwHQ8srNNxLNtfhzN12bp8HZuow3XnmGWQN9lsKtqDiCZ/+Lah wx+eJqFdKyEs3NpKWOckt+9txU2tPa07W9lIK249xyQ0W6oKYuR/V1Wu6ZOaDb5zmD/FGYpufNwz elV3CxAwj2YAZWjUF4HWkSZqbro9wGteuMEZMt2ahTaxr7vS6w8c35NY37HMJQATeal61XDD2HOb lzGNR7dP/t59sfpd3ymsf3yLFpNPVqze3t6xpbXUv+L+1f1HmAtfO/Hacw+2Sg6nszzgCdjMdqe9 /4nXt5SnW3ce2bDxlX098cHdz/5Rz6GTk+nU0ERj63hXFTGWxoFXL8ntwjz6Py/s5SVZkv9fYkb3 LpbkrcLt+e0VfvzXK2IEIalncbGO/2pS8oIhtr9AyH76VpG1exPnit+cKJvvXVx/ubi4X1iSJVmS JVmSJVmSJfnfF89nCPkmEPJ/Z3EJepbk/5IghvwQDg4XYkmNCSEL+dYDot2/zoP9Z/Ya+y+39Hx6 zzd30/L+uw/DdpAADtHWKC334n34cfwMfg4fwS/gl/H38Lt6//to6bh5mNAxOEeQCjUTqkcZtBYN o3E0gXIoj6bQNNqDCmgGzaK9aB96bH4eRqdvG7VbH/XwwlHsRfbi/OeIR2+iM+g8+gTz2Ib9sEpl OIo13IfX3jP52P9yhI18FkHHTdy4h0NfQKv4KvV4K62zyIZfoHUT1L9N6xaon6B1Dj2OLxBtMQnk mUwzrWNUyrxC6wyyMWdpnYX+H9C6CepXad0C9eu0Du+H9aPjgHQ9IJhGTVAbBPR2AL7TgN002gn4 qagTagXAk5zHoCcPtSmUhCsdaBL+VEA+jx5AD8K1Gb2VgzIHo/fBeQJGdsJ9kzBmHPryMCKvjyMr NQt3kZEqjFChzMFz8vq65fTWBPTO6q9LVnY3lAX0EPRN37jnzld3/kpzUXVmqfTdqGgEWnn9PZDX 3wC1Mb01o7/mFPSm6DuYXjCDHdDaC1dn9VmS0cnjan063aQO5ncUpmemd86qndOFPdOFsdn89FRS 7ZicVIfzDzw4O6MO52ZyhX25ieTqNUOda3sSnWOT+fFC/m4tWqj5GTWXn30wV1DH1ELugfzMbK6Q m1BnC2MTud1jhYfUaXJlQXPnnd+Pmp9S4THqyFR+Fu7fMDs2m5tRx6YmUvCAaf0FdkzvnZot5HMz yd8IbVajNWgInrMW9aDEbSQa1qmyF3rIot9t5H/32m8taakjNo2BreTQCRAGOeDmHEKVPnwY7In+ Q3aEzeWHfng1vM2+8lPk53Uz9c7PDv41Kf881tv9y7q5GeEM921oCkWP/58CDAAcMWiDDQplbmRz dHJlYW0NZW5kb2JqDTggMCBvYmoNPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0ZpcnN0IDI0L0xlbmd0 aCAzMzYvTiA0L1R5cGUvT2JqU3RtPj5zdHJlYW0NCmjevJFPa8JAEMW/yhyVIrO7JkZBBJMQG2gV jNSC5LDqNi7kH5sVmm/f3aSltj30UOhxZ34z+9486gEBOoUp0BkwlwIj4Iw9ODBmGtt0PsdlcxKl Bs8lGMRhIjQ4toUBr++FzC4aKCEEQ9FzI2bAKOdZAw5GVal9v3o9jBxvAiM6c4Ay6sDMZWnXjHgh 83YQ8FwelRz2NZkLBm73iX2veSHQX22Ch+juHezqiVZCny64rlTB86607wU5Rk+sDXpallkugGCi RfEEU4K7thYdavUqWetK4fONj8XCWPZ5Iyzz/Vfrv23Mqrh8qQy3UWehZJkN4rOxLnU7xK3IZKNV O1ieq6MYYnKt61wU9jJmt92wq1Zx+Mhr/BjCcN+f8KssG4s9QXI9aivajFrAGmCfNnB/GJuwJmna Kb8N69d8xuwvAXk/A1r/S0BvAgwAlLzZ2w0KZW5kc3RyZWFtDWVuZG9iag05IDAgb2JqDTw8L0Zp bHRlci9GbGF0ZURlY29kZS9GaXJzdCAzMi9MZW5ndGggMzg4L04gNS9UeXBlL09ialN0bT4+c3Ry ZWFtDQpo3oSS207DMAyGX8WXILSmdZJ2RVPFVhhMmgDtoF1Uu+jaiEXbkinNLnh70uyEQAJZceLm d+1+LkYQAiJECSCFiFNABhjGgBw4RSjIKM8HZSNqoE45WfZ6pN9K3ZkMpi6aOpt97gUZaFMLQxYQ ZtkpKEKnC5dkCIy8kBGZiMoWiHGQdoHFbktioN04iIB1MUgYW5KpNYfKvpdGKAtIpoeVbV8+lmpz LNNXStss85Xnk1G7bnal3Fp9r2S1CfZ6Lx7sutyKpiMaUR2MtJ9BpXe3Pqn9lqFWlgye3/LX4V1e buXKSPKkKl1L9UEWUvVVIy/xUJrG5uvSuB5Jm/komsrIvdXGgfIcxuVJEWF06XhmDsI37J0vuZC1 XTcFDxM4r/Cb/Yz/spjF5yxG/9FyN8ujZ4778RliejolaervOCannQNlKdA0AkqPMePotYzT5W+K 4yvFlo1Qdalse9sUUep/mivdUe3m6gbSebmCci4kMz1349O1gNgzvVDLsi8BBgBBtLhpDQplbmRz dHJlYW0NZW5kb2JqDTEwIDAgb2JqDTw8L0ZpbHRlci9GbGF0ZURlY29kZS9GaXJzdCA4MTcvTGVu Z3RoIDE1NTYvTiAxMDAvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN7MWF1PYzcQ/Sv+A+31+NtShQRs kSjsghaqPiAeAtyl6bIJuoRq+fc943FCSDYhrvpQieDYnjlnvuy5NyYorUxUpI0ySZFNymTlsWK1 8sEpSyomDEblTMpaRcZjdBClpKzHGDEPily2ygLJO8wBFSgomzG6pJzGmKzCFkWAO4PRZ+WAF7NT DngJSg54KWrlgJe1Vw542UEOeBn4+Go05DyM1sCDKYZgt4f1FDG3yhjY5R3GgLlXxmrMA0Zs+ogx Yw43HchhgnEpqQA8D+cC8HzEHHjBYA68EDAHXiTMgRehHICXNObASzAOIibBvgC8DPvggsmwj0Oj YV80GGEf/ixBL3Jg4Vz0iCw2I0IFBRURd8vyCK3l9YwR60kj5FhPHHqsJ+A5Xgeeh1+cIZ+zSsAL CGICXkC+EvAikgIXbYRwAl5CgjPwEpzilGakPgMvQ45TmGEMp0QT1pECjSDngBF8Gakj4OOro8w1 gVRy3WjkzASuI0JSyZWCchZ5YnedBTFpzjNXCieWvSANWE+oCQ1c7xmHayCzOpADlxtxNcB/gpyL sInwcVw8hIS4CFcJfC4h7URATkgSofZcyiwM5GwAiG2XkQ8iIGc4QAYVrhEMMoQvTGEMKgq2kOHS 4iKGpidEF1WPIoOnv/zSHT6Mnp4+jh753Gj1uTvhk8NfzkdDP5ldDn3Ph+jtyqf+++ykf1G2+zx9 6FkbB4xFLl8e++5iNjzfFrnP0+lsbw8sp8dXOF2Q4GLBcN19mg7fRg9KVovMyRUKgUWQ2jI4GUQv BRmiDMXG4hGPWWSyyORYN0lGrWWkqqRtnfs6D3Vu6jwLh6g70Y6i7EQ3iqoTTSeEroqIuhc9LyhW DPVC4QXF10UB8wLmBcwLmBewIGBBwIKgBEEJghIEJQhKEJQgKEFQYnWFJAXnuA5K1i66i/5WEvXp +dvTleaLsoSCr0r+YviyZKUi9GGYPh6OHruj8f3z0He/Tu4m01mPlOLfEVK+NBtG3/ruw/jv7njy MJ70F3+OUCBVT0qgO+/Onme82V08jibdGxGU0vhrP32e1b3nm6fbYfy4mD72w/LC5dk+Poc8HvMX /ndUV47mK6jdg+n3YtTvk7t+WFDv7bVXYJLIZolslrBlQcmCkrfUaBaUnN9Wqp5XrnlbsdrVcaVy da14nZYr+PrKytzm5Up2ta7NckE7QXb/sq6tKFj7v6vycrFU8yhgdnbzF9rp6211dvAb7h8+DeJL d36vqB6L0/Hka6n4/XpRAQvXcz0LfIDSqooUdVHCuThGgU1mSv+su7PudPRSK/m23/8y64eyXqYH /Zfp0Mt8NhpmS3pcr/sP4/uJ7JT50vYfw3g2ntx/nN713elweTM3d36bk2fP7KqZi8ov8gvbGPxD fzsdRrPxdHI4fZgOV2BR9XO9IlAC+BbqRGkQJr0WypuHuk/Yj3lL3F6Drcx7MT5BDzrnJ42NdI73 w250/n26wHB2M13kfbMbXXqPbkk2N8iSbhGmFmHTImxbhGOLcEvkqCV0piV0piV0piV0piV0xrUI +xbh0CLckkHTkkHTkkHbkkHbkkHbkkHbkkHbkkHbkkEb3r/SpOm/3mu4zg6mdy8VSh7Y0fjqI4Jc btz85CGYxY//o35nw/aG9xOlTS3vZHErz92FXXMHzdzBuNVBee6QZlEcTG8dPFk0mnUOWzvavPVt 4KhPZNL/mCPRKse8d65yLLJ6OH9yll67lF3rt9+ETdKmSdo2Sbsmad8kHd6XljbNr8FrUq+dPBWR 94BykQrbgEo7JhPfQSqNmF/Wt0GZImN2znhbWqgtL+R3CTWFYrPe6lfJB+WdmdNOzCU5FLcxl4bP v7DseipoF+bS7PmXnG3MtsjYnZndTsy+oNJW5pIR0jszx52iravEgn7DHbh4XRULrouGWb0GFz6s 37X1/XcpxBuZ6gsz2Vcmv87kNjOZBVPczlRf2Sm8MqV1po39I8/7x/yk/JDoEFhgqz8b1ANTyMxa H1kcuR+QuQXZj1r+4l23/oJRLxzhcSs8V/Uand+Cc8zrrR2suFF/PKmX7Dr8PwIMAE5ieqgNCmVu ZHN0cmVhbQ1lbmRvYmoNMTEgMCBvYmoNPDwvRXh0ZW5kcyAxMCAwIFIvRmlsdGVyL0ZsYXRlRGVj b2RlL0ZpcnN0IDIwL0xlbmd0aCA4Ny9OIDMvVHlwZS9PYmpTdG0+PnN0cmVhbQ0KaN4yNDJTMFAw NDJXMDEDUhYK5uYKNjb6jgrGpkDxIH3vaEtDEAOsBEjH6gcAmSZguWB9H087O6BqbwVLI7AISM4M JueUn1IJkzaAS5uiSgMEGACZ/hvaDQplbmRzdHJlYW0NZW5kb2JqDTEyIDAgb2JqDTw8L0ZpbHRl ci9GbGF0ZURlY29kZS9GaXJzdCAxMy9MZW5ndGggNDYvTiAyL1R5cGUvT2JqU3RtPj5zdHJlYW0N CmjeMjSyVDBQMDQ2UDAyULCx0fcrzS2OhggYKATF2tkBxYL1XezsAAIMALoRCVANCmVuZHN0cmVh bQ1lbmRvYmoNMTMgMCBvYmoNPDwvTGVuZ3RoIDQyNTkvU3VidHlwZS9YTUwvVHlwZS9NZXRhZGF0 YT4+c3RyZWFtDQo8P3hwYWNrZXQgYmVnaW49Iu+7vyIgaWQ9Ilc1TTBNcENlaGlIenJlU3pOVGN6 a2M5ZCI/Pgo8eDp4bXBtZXRhIHhtbG5zOng9ImFkb2JlOm5zOm1ldGEvIiB4OnhtcHRrPSJBZG9i ZSBYTVAgQ29yZSA0LjIuMS1jMDQzIDUyLjM3MjcyOCwgMjAwOS8wMS8xOC0xNTowODowNCAgICAg ICAgIj4KICAgPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIy LXJkZi1zeW50YXgtbnMjIj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIKICAg ICAgICAgICAgeG1sbnM6eG1wPSJodHRwOi8vbnMuYWRvYmUuY29tL3hhcC8xLjAvIj4KICAgICAg ICAgPHhtcDpDcmVhdGVEYXRlPjIwMDktMTAtMDRUMjE6MDc6NTErMDE6MDA8L3htcDpDcmVhdGVE YXRlPgogICAgICAgICA8eG1wOkNyZWF0b3JUb29sPkFjcm9iYXQgUERGTWFrZXIgOS4xIGZvciBX b3JkPC94bXA6Q3JlYXRvclRvb2w+CiAgICAgICAgIDx4bXA6TW9kaWZ5RGF0ZT4yMDA5LTEwLTA0 VDIxOjA4OjEwKzAxOjAwPC94bXA6TW9kaWZ5RGF0ZT4KICAgICAgICAgPHhtcDpNZXRhZGF0YURh dGU+MjAwOS0xMC0wNFQyMTowODoxMCswMTowMDwveG1wOk1ldGFkYXRhRGF0ZT4KICAgICAgPC9y ZGY6RGVzY3JpcHRpb24+CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAgICAg ICAgICAgIHhtbG5zOnBkZj0iaHR0cDovL25zLmFkb2JlLmNvbS9wZGYvMS4zLyI+CiAgICAgICAg IDxwZGY6UHJvZHVjZXI+QWNyb2JhdCBEaXN0aWxsZXIgOS4wLjAgKFdpbmRvd3MpPC9wZGY6UHJv ZHVjZXI+CiAgICAgICAgIDxwZGY6S2V5d29yZHMvPgogICAgICA8L3JkZjpEZXNjcmlwdGlvbj4K ICAgICAgPHJkZjpEZXNjcmlwdGlvbiByZGY6YWJvdXQ9IiIKICAgICAgICAgICAgeG1sbnM6ZGM9 Imh0dHA6Ly9wdXJsLm9yZy9kYy9lbGVtZW50cy8xLjEvIj4KICAgICAgICAgPGRjOmZvcm1hdD5h cHBsaWNhdGlvbi9wZGY8L2RjOmZvcm1hdD4KICAgICAgICAgPGRjOmNyZWF0b3I+CiAgICAgICAg ICAgIDxyZGY6U2VxPgogICAgICAgICAgICAgICA8cmRmOmxpPkFsZXhhbmRlciBGdW5rPC9yZGY6 bGk+CiAgICAgICAgICAgIDwvcmRmOlNlcT4KICAgICAgICAgPC9kYzpjcmVhdG9yPgogICAgICAg ICA8ZGM6dGl0bGU+CiAgICAgICAgICAgIDxyZGY6QWx0PgogICAgICAgICAgICAgICA8cmRmOmxp IHhtbDpsYW5nPSJ4LWRlZmF1bHQiPkRlYXIgY29sbGVhZ3Vlcyw8L3JkZjpsaT4KICAgICAgICAg ICAgPC9yZGY6QWx0PgogICAgICAgICA8L2RjOnRpdGxlPgogICAgICAgICA8ZGM6ZGVzY3JpcHRp b24+CiAgICAgICAgICAgIDxyZGY6QWx0PgogICAgICAgICAgICAgICA8cmRmOmxpIHhtbDpsYW5n PSJ4LWRlZmF1bHQiLz4KICAgICAgICAgICAgPC9yZGY6QWx0PgogICAgICAgICA8L2RjOmRlc2Ny aXB0aW9uPgogICAgICA8L3JkZjpEZXNjcmlwdGlvbj4KICAgICAgPHJkZjpEZXNjcmlwdGlvbiBy ZGY6YWJvdXQ9IiIKICAgICAgICAgICAgeG1sbnM6eG1wTU09Imh0dHA6Ly9ucy5hZG9iZS5jb20v eGFwLzEuMC9tbS8iPgogICAgICAgICA8eG1wTU06RG9jdW1lbnRJRD51dWlkOjBmNWY0NjFmLTE2 ODItNDNhMC04NTFmLTg2YzRmNmMwZjc2NTwveG1wTU06RG9jdW1lbnRJRD4KICAgICAgICAgPHht cE1NOkluc3RhbmNlSUQ+dXVpZDozYzllNjU0My1kMzIzLTRhM2ItYjJlNS04NzRhNDRlNjNhYjk8 L3htcE1NOkluc3RhbmNlSUQ+CiAgICAgICAgIDx4bXBNTTpzdWJqZWN0PgogICAgICAgICAgICA8 cmRmOlNlcT4KICAgICAgICAgICAgICAgPHJkZjpsaT4xMTwvcmRmOmxpPgogICAgICAgICAgICA8 L3JkZjpTZXE+CiAgICAgICAgIDwveG1wTU06c3ViamVjdD4KICAgICAgPC9yZGY6RGVzY3JpcHRp b24+CiAgICAgIDxyZGY6RGVzY3JpcHRpb24gcmRmOmFib3V0PSIiCiAgICAgICAgICAgIHhtbG5z OnBkZng9Imh0dHA6Ly9ucy5hZG9iZS5jb20vcGRmeC8xLjMvIj4KICAgICAgICAgPHBkZng6Q29t cGFueT5icmVtZW4gb25saW5lIHNlcnZpY2VzIEdtYkggJmFtcDsgQ28uIEtHPC9wZGZ4OkNvbXBh bnk+CiAgICAgICAgIDxwZGZ4OkNvbW1lbnRzLz4KICAgICAgICAgPHBkZng6U291cmNlTW9kaWZp ZWQ+RDoyMDA5MTAwNDIwMDYyNzwvcGRmeDpTb3VyY2VNb2RpZmllZD4KICAgICAgPC9yZGY6RGVz Y3JpcHRpb24+CiAgIDwvcmRmOlJERj4KPC94OnhtcG1ldGE+CiAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAK ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIAogICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgCiAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIAogICAgICAgICAgICAgICAgICAgICAgICAgICAKPD94cGFja2V0IGVuZD0idyI/Pg0KZW5k c3RyZWFtDWVuZG9iag0xNCAwIG9iag08PC9GaWx0ZXIvRmxhdGVEZWNvZGUvRmlyc3QgNi9MZW5n dGggNTYvTiAxL1R5cGUvT2JqU3RtPj5zdHJlYW0NCmjeMjQ2VDBQsLHRd84vzStRMNL3zkwpjjY0 NgWKBimA5IJi9UMqC1L1AxLTU4vt7AACDAA49w1UDQplbmRzdHJlYW0NZW5kb2JqDTE1IDAgb2Jq DTw8L0ZpbHRlci9GbGF0ZURlY29kZS9GaXJzdCA2L0xlbmd0aCAyNDEvTiAxL1R5cGUvT2JqU3Rt Pj5zdHJlYW0NCmjeZI5bSwMxEEb/yjzZLMruZL3USimULq1QCgWFvvQlm0w1djcjuVj7702LqODb x3A4Z+R1DQjjcTVN8ZW9mHb0qZwhD/Pk9kU1474nF4M4z3fljqL1lE/ArrOOIJD/sJoCLPr2ES5g xiUsF5n2pKJl16hIonmoEUcS8aaWOLyVlygHiINv6pTVnlsVYd3MV2qf66NSwo49bNibolrS8ZDH 6YsVm//Ke4k/yrVnkzT9Ohsbou26sxRLhK3YWGf4ELZFUT1x8pqy1O4smb9WxLt6mIHUvpGOufxs Y5e7pDxozj71kihcFZPJlwADANq0Y9UNCmVuZHN0cmVhbQ1lbmRvYmoNMTYgMCBvYmoNPDwvRGVj b2RlUGFybXM8PC9Db2x1bW5zIDQvUHJlZGljdG9yIDEyPj4vRmlsdGVyL0ZsYXRlRGVjb2RlL0lE WzxGNjRGQTYzQzUyMTc2MkI1MzVEMzBFQjJGM0MyRjBCQj48QTY1NEZFRjYzRDZENzU0NUIyODkx NzE4MzkzMTI3REU+XS9JbmZvIDEzMiAwIFIvTGVuZ3RoIDEwNC9Sb290IDEzNCAwIFIvU2l6ZSAx MzMvVHlwZS9YUmVmL1dbMSAyIDFdPj5zdHJlYW0NCmjeYmIAAiZG6WkMTAyMJkCC/RCQ4G4GEgxB QELJCCQhCyRM9IAE0zoQ8QhIsJWDJI6AiB4gIfgRpGMqSNYfaF7MPxCXgRGFYPyLKQaR+INDYpQY tgTjXFTuPxiL6T+IywAQYAA4MBAcDQplbmRzdHJlYW0NZW5kb2JqDXN0YXJ0eHJlZg0KMTE2DQol JUVPRg0K ------_=_NextPart_000_01CA4670.BABCBEF6-- From A.Hoenes@TR-Sys.de Wed Oct 7 14:25:35 2009 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6BD8B3A68D9; Wed, 7 Oct 2009 14:25:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 2.261 X-Spam-Level: ** X-Spam-Status: No, score=2.261 tagged_above=-999 required=5 tests=[AWL=1.010, BAYES_00=-2.599, CHARSET_FARAWAY_HEADER=3.2, HELO_EQ_DE=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hZFDyppTr0A7; Wed, 7 Oct 2009 14:25:34 -0700 (PDT) Received: from TR-Sys.de (gateway.tr-sys.de [213.178.172.147]) by core3.amsl.com (Postfix) with ESMTP id A81FA3A6835; Wed, 7 Oct 2009 14:25:33 -0700 (PDT) Received: from ZEUS.TR-Sys.de by w. with ESMTP ($Revision: 1.37.109.26 $/16.3.2) id AA194770787; Wed, 7 Oct 2009 23:26:27 +0200 Received: (from ah@localhost) by z.TR-Sys.de (8.9.3 (PHNE_25183)/8.7.3) id XAA09031; Wed, 7 Oct 2009 23:26:25 +0200 (MESZ) From: Alfred =?hp-roman8?B?SM5uZXM=?= Message-Id: <200910072126.XAA09031@TR-Sys.de> To: smime@ietf.org, pkix@ietf.org Date: Wed, 7 Oct 2009 23:26:25 +0200 (MESZ) X-Mailer: ELM [$Revision: 1.17.214.3 $] Mime-Version: 1.0 Content-Type: text/plain; charset=hp-roman8 Content-Transfer-Encoding: 7bit X-Mailman-Approved-At: Wed, 07 Oct 2009 14:41:28 -0700 Subject: [smime] [rt.amsl.com #19953] Resolved: Spam on moved WG lists archives (fwd) X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 07 Oct 2009 21:25:35 -0000 Many thanks to the IETF Secretariat IT staff for installing the spam protection measures (that already had been in force for other "ietf.org" based lists) for the wg lists recently moved to "at ietf.org" as well, and for cleaning up the moved list archives! Alfred. ----- Forwarded message from Glen via RT ----- > From: "Glen via RT" > Rt-Originator: glen@amsl.com > To: ah@TR-Sys.de > Message-Id: > Date: Wed, 07 Oct 2009 13:38:32 -0700 > Subject: [rt.amsl.com #19953] Resolved: Spam on moved WG lists archives > Rt-Ticket: rt.amsl.com #19953 > > We believe that this resolves your issue, and this ticket has > therefore been marked as closed in our system. If the issue is not > resolved to your satisfaction, or if you have additional questions, > please reply to this message using the above trouble ticket number, > and your ticket will be automatically reopened. ----- End of forwarded message from Glen via RT ----- From ah@tr-sys.de Thu Oct 8 02:49:36 2009 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F1CD13A6A66; Thu, 8 Oct 2009 02:49:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.711 X-Spam-Level: X-Spam-Status: No, score=-0.711 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, CHARSET_FARAWAY_HEADER=3.2, DATE_IN_PAST_12_24=0.992, MIME_8BIT_HEADER=0.3, MIME_QP_LONG_LINE=1.396, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jjq465aHOV5g; Thu, 8 Oct 2009 02:49:35 -0700 (PDT) Received: from mail89.messagelabs.com (mail89.messagelabs.com [194.106.220.3]) by core3.amsl.com (Postfix) with SMTP id 536D23A6A59; Thu, 8 Oct 2009 02:49:34 -0700 (PDT) X-VirusChecked: Checked X-Env-Sender: ah@tr-sys.de X-Msg-Ref: server-14.tower-89.messagelabs.com!1254995475!7000198!1 X-StarScan-Version: 6.1.3; banners=.,-,- X-Originating-IP: [195.92.40.48] Received: (qmail 18104 invoked from network); 8 Oct 2009 09:51:15 -0000 Received: from gateway-201.energis.gsi.gov.uk (HELO mx.hosting-e.gsi.gov.uk) (195.92.40.48) by server-14.tower-89.messagelabs.com with SMTP; 8 Oct 2009 09:51:15 -0000 X-VirusChecked: Checked X-Env-Sender: pkix-bounces@ietf.org X-Msg-Ref: server-3.tower-185.messagelabs.com!1254950845!40815362!1 X-StarScan-Version: 6.1.3; banners=-,-,gchq.gsi.gov.uk X-Originating-IP: [64.170.98.32] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjQuMTcwLjk4LjMyID0+IDIwNDIwMg==\n X-Original-To: pkix@core3.amsl.com Delivered-To: pkix@core3.amsl.com X-Virus-Scanned: amavisd-new at amsl.com From: Alfred =?hp-roman8?B?SM5uZXM=?= Message-ID: <200910072126.XAA09031@TR-Sys.de> To: smime@ietf.org, pkix@ietf.org Date: Wed, 7 Oct 2009 23:26:25 +0200 X-Mailer: ELM [$Revision: 1.17.214.3 $] MIME-Version: 1.0 X-BeenThere: pkix@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Sender: Errors-To: pkix-bounces@ietf.org X-OriginalArrivalTime: 07 Oct 2009 21:27:28.0736 (UTC) FILETIME=[F8BD2E00:01CA4794] Content-Transfer-Encoding: quoted-printable Subject: [smime] [pkix] [rt.amsl.com #19953] Resolved: Spam on moved WG lists archives (fwd) X-BeenThere: smime@ietf.org List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 08 Oct 2009 09:49:36 -0000 Many=20thanks=20to=20the=20IETF=20Secretariat=20IT=20staff=20for=20install= ing=20the spam=20protection=20measures=20(that=20already=20had=20been=20in=20force=20= for other=20"ietf.org"=20based=20lists)=20for=20the=20wg=20lists=20recently=20= moved to=20"at=20ietf.org"=20as=20well,=20and=20for=20cleaning=20up=20the=20move= d=20list archives! =20=20Alfred. -----=20Forwarded=20message=20from=20Glen=20via=20RT=20----- >=20From:=20"Glen=20via=20RT"=20 >=20Rt-Originator:=20glen@amsl.com >=20To:=20ah@TR-Sys.de >=20Message-Id:=20 >=20Date:=20Wed,=2007=20Oct=202009=2013:38:32=20-0700 >=20Subject:=20[rt.amsl.com=20#19953]=20Resolved:=20Spam=20on=20moved=20WG= =20lists=20archives=20>=20Rt-Ticket:=20rt.amsl.com=20#19953 > >=20We=20believe=20that=20this=20resolves=20your=20issue,=20and=20this=20t= icket=20has >=20therefore=20been=20marked=20as=20closed=20in=20our=20system.=20=20If=20= the=20issue=20is=20not >=20resolved=20to=20your=20satisfaction,=20or=20if=20you=20have=20addition= al=20questions, >=20please=20reply=20to=20this=20message=20using=20the=20above=20trouble=20= ticket=20number, >=20and=20your=20ticket=20will=20be=20automatically=20reopened. -----=20End=20of=20forwarded=20message=20from=20Glen=20via=20RT=20----- _______________________________________________ pkix=20mailing=20list pkix@ietf.org https://www.ietf.org/mailman/listinfo/pkix This=20email=20was=20received=20from=20the=20INTERNET=20and=20scanned=20by= =20the=20Government=20Secure=20Intranet=20anti-virus=20service=20supplied=20= by=20Cable&Wireless=20in=20partnership=20with=20MessageLabs.=20(CCTM=20Cer= tificate=20Number=202009/09/0052.)=20In=20case=20of=20problems,=20please=20= call=20your=20organisation=92s=20IT=20Helpdesk.=20 Communications=20via=20the=20GSi=20may=20be=20automatically=20logged,=20mo= nitored=20and/or=20recorded=20for=20legal=20purposes. **************************************************************************= ** Communications=20with=20GCHQ=20may=20be=20monitored=20and/or=20recorded=20= for=20system=20efficiency=20and=20other=20lawful=20purposes.=20Any=20views= =20or=20 opinions=20expressed=20in=20this=20e-mail=20do=20not=20necessarily=20refle= ct=20GCHQ=20 policy.=20=20This=20email,=20and=20any=20attachments,=20is=20intended=20fo= r=20the=20 attention=20of=20the=20addressee(s)=20only.=20Its=20unauthorised=20use,=20= disclosure,=20storage=20or=20copying=20is=20not=20permitted.=20=20If=20you= =20are=20not=20the intended=20recipient,=20please=20notify=20postmaster@gchq.gsi.gov.uk.=20=20= This=20information=20is=20exempt=20from=20disclosure=20under=20the=20Freed= om=20of=20 Information=20Act=202000=20and=20may=20be=20subject=20to=20exemption=20und= er other=20UK=20information=20legislation.=20Refer=20disclosure=20requests=20= to=20 GCHQ=20on=2001242=20221491=20ext=2030306=20(non-secure)=20or=20email infoleg@gchq.gsi.gov.uk **************************************************************************= ** ______________________________________________________________________ This=20email=20has=20been=20scanned=20by=20the=20MessageLabs=20Email=20Sec= urity=20System. For=20more=20information=20please=20visit=20http://www.messagelabs.com/ema= il=20 ______________________________________________________________________ From A.Hoenes@TR-Sys.de Fri Oct 9 06:02:27 2009 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D8A413A6A74 for ; Fri, 9 Oct 2009 06:02:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.244 X-Spam-Level: * X-Spam-Status: No, score=1.244 tagged_above=-999 required=5 tests=[AWL=1.993, BAYES_00=-2.599, CHARSET_FARAWAY_HEADER=3.2, GB_I_INVITATION=-2, HELO_EQ_DE=0.35, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SBMm3ajdHfny for ; Fri, 9 Oct 2009 06:02:26 -0700 (PDT) Received: from TR-Sys.de (gateway.tr-sys.de [213.178.172.147]) by core3.amsl.com (Postfix) with ESMTP id B6AA23A6A77 for ; Fri, 9 Oct 2009 06:02:25 -0700 (PDT) Received: from ZEUS.TR-Sys.de by w. with ESMTP ($Revision: 1.37.109.26 $/16.3.2) id AA204183406; Fri, 9 Oct 2009 15:03:26 +0200 Received: (from ah@localhost) by z.TR-Sys.de (8.9.3 (PHNE_25183)/8.7.3) id PAA13132; Fri, 9 Oct 2009 15:03:20 +0200 (MESZ) From: Alfred =?hp-roman8?B?SM5uZXM=?= Message-Id: <200910091303.PAA13132@TR-Sys.de> To: turners@ieca.com, housley@vigilsec.com Date: Fri, 9 Oct 2009 15:03:19 +0200 (MESZ) X-Mailer: ELM [$Revision: 1.17.214.3 $] Mime-Version: 1.0 Content-Type: text/plain; charset=hp-roman8 Content-Transfer-Encoding: 8bit Cc: smime@ietf.org Subject: [smime] draft-turner-additional-cms-ri-choices-00 X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2009 13:02:27 -0000 Hello, following Sean's kind invitation, I have taken a closer look at draft-turner-additional-cms-ri-choices-00. It has been observed that CRLs in many deployments are increasing in size to an extent making their use unmanageable in various messaging scenarios. The IETF has standardized two protocols providing certificate verification information. To make responses obtained via these protocols available for inclusion in CMS messages in an interoperable manner, standardized conventions are needed, and this draft aims at providing these. As such, this is a useful addition to the CMS framework. I support adopting this straightforward document, which should not need much discussion, and it should b possible to ship it quickly to the IESG for publication as a Standards Track RFC. Editorials: (1) Section 4 -- a typo, and an enhancement request (1a) Typo in the 1st line: s/unprotect/unprotected/ (1b) Because of the commonality and the related flaw later on in the draft, I suggest to add to the text in Section 4 a clause like: | SCVP responses use the type CVResponse, identified by the OID | id-ct-scvp-certValResponse, which both are defined in [SCVP]. After this addition, some subsequent text might be shortened. (This is a MAY !) (2) Section 4.2 and Appendix A.1 -- inconsistency Apparently, there has been a shift in the design; now the idea is to assign new OIDs all under the id-ri branch, and not to 'recycle' id-ct-scvp-certValResponse immediately for Unprotected SCVP Responses. However, this shift has not been completed consistently in the draft text; the next detail most likely is a result of this incomplete change. In Section 4.2, the first paragraph and the subsequent definition do not match and this inconsistency leads to an inappropriate citation: To carry an unprotected SCVP response, the otherRevInfoFormat is set | to id-ct-scvp-certValResponse, which has the following ASN.1 ^^^^^^^^^^^^^^^^^^^^^^^ | definition [SCVP]: ^^^^^^^ ! id-ri-unprotected-scvp-response OBJECT IDENTIFIER ::= { id-ri TBD } ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Following the naming style in 4.1.*, this should perhaps read: To carry an unprotected SCVP response, the otherRevInfoFormat is set | to id-ri-unprotected-scvp-response, which has the following ASN.1 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ | definition: id-ri-unprotected-scvp-response OBJECT IDENTIFIER ::= { id-ri TBD } Note: It would indeed have made some sense to keep id-ct-scvp-certValResponse for this purpose, but the uniform use of id-ri would be lost this way. Even worse, the last OID definition in A.1 does not match Section 4.2 either, introducing yet another name, which does not appear anywhere else in the draft: | id-ri-scvp-certValResponse OBJECT IDENTIFIER ::= { id-ri TBD } ^^^^^^^^^^^^^^^^^^^^^^^^^^ I strongly propose to use id-ri-unprotected-scvp-response as well. Note: A.2 indeed uses, consistent with the definition in 4.2 (but not the prose, as shown above): | id-ri-unprotected-scvp-response OBJECT IDENTIFIER ::= { id-ri TBD } ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Please ensure consistency of the OID names. (3) Appendix A -- comment The draft says: Appendix A.1 provides the normative ASN.1 definitions for the structures described in this specification using ASN.1 as defined in [X.680] for compilers that support the 1988 ASN.1. Appendix A.2 provides informative ASN.1 definitions for the structures described in this specification using ASN.1 as defined in [X.680], [X.681], [X.682], and [X.683] for compilers that support the 2002 ASN.1. This appendix contains the same information as Appendix A.1 in a more recent (and precise) ASN.1 notation, however Appendix A.1 takes precedence in case of conflict. That's a really nice description. Should the WG adopt this text as boilerplate for future documents -- as long as we still hesitate to fully shift to the 'new' ASN.1 ? Kind regards, Alfred HÎnes. -- +------------------------+--------------------------------------------+ | TR-Sys Alfred Hoenes | Alfred Hoenes Dipl.-Math., Dipl.-Phys. | | Gerlinger Strasse 12 | Phone: (+49)7156/9635-0, Fax: -18 | | D-71254 Ditzingen | E-Mail: ah@TR-Sys.de | +------------------------+--------------------------------------------+ From turners@ieca.com Fri Oct 9 07:29:16 2009 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 180B13A6A57 for ; Fri, 9 Oct 2009 07:29:16 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.558 X-Spam-Level: X-Spam-Status: No, score=-3.558 tagged_above=-999 required=5 tests=[AWL=0.741, BAYES_00=-2.599, GB_I_INVITATION=-2, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jWqWYPDB1Byo for ; Fri, 9 Oct 2009 07:29:15 -0700 (PDT) Received: from smtp104.biz.mail.re2.yahoo.com (smtp104.biz.mail.re2.yahoo.com [206.190.52.173]) by core3.amsl.com (Postfix) with SMTP id 9DF4A28C18F for ; Fri, 9 Oct 2009 07:28:59 -0700 (PDT) Received: (qmail 8023 invoked from network); 9 Oct 2009 14:30:42 -0000 Received: from unknown (HELO thunderfish.local) (turners@96.241.5.100 with plain) by smtp104.biz.mail.re2.yahoo.com with SMTP; 9 Oct 2009 14:30:42 -0000 X-Yahoo-SMTP: qPTWNAeswBAtDTSn9GKlmmL3C90ke7grn_5n9To- X-YMail-OSG: S3UWRDYVM1lxzrQBaZOw0vW4g00c7D2qhRjEG0JddwrnMAqO58Agw6f8Gt4X8TbZaaVUg4RAAQqlxLhlO9jNSs6U.uA9qk9GCvvhv3bFdWYHCC8MRlyOLjPWC1vsqKaV0WdRJPxN7GudXl6fiebZ2a3NlCAzkml2FB6VZYQMNX3aa8A02ZuxWRSwn22rKBmdDKjc_zLHR6IULpBupdaL41D6lGOCEn24oOJeMRlMOgfB.Yo3ycjqc7VEf2It3oFMzlDrHuHgJMX3R8brd2rn1_pU7EF3oL.o.zY5CJ1NZX3hRJak558l5B8H8X_CVRfl_u5lVz3NDF.NEqkJ_w-- X-Yahoo-Newman-Property: ymail-3 Message-ID: <4ACF4911.4000904@ieca.com> Date: Fri, 09 Oct 2009 10:30:41 -0400 From: Sean Turner User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) MIME-Version: 1.0 To: =?UTF-8?B?QWxmcmVkIO+/vQ==?= References: <200910091303.PAA13132@TR-Sys.de> In-Reply-To: <200910091303.PAA13132@TR-Sys.de> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Cc: smime@ietf.org Subject: Re: [smime] draft-turner-additional-cms-ri-choices-00 X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2009 14:29:16 -0000 Alfred, Thanks again for the review. spt Alfred � wrote: > Hello, > following Sean's kind invitation, I have taken a closer look at > draft-turner-additional-cms-ri-choices-00. > > It has been observed that CRLs in many deployments are increasing > in size to an extent making their use unmanageable in various > messaging scenarios. The IETF has standardized two protocols > providing certificate verification information. > To make responses obtained via these protocols available for > inclusion in CMS messages in an interoperable manner, standardized > conventions are needed, and this draft aims at providing these. > > As such, this is a useful addition to the CMS framework. > I support adopting this straightforward document, which should not > need much discussion, and it should b possible to ship it quickly > to the IESG for publication as a Standards Track RFC. > > > Editorials: > > > (1) Section 4 -- a typo, and an enhancement request > > (1a) > Typo in the 1st line: s/unprotect/unprotected/ Fixed. > (1b) > Because of the commonality and the related flaw later on in the draft, > I suggest to add to the text in Section 4 a clause like: > > | SCVP responses use the type CVResponse, identified by the OID > | id-ct-scvp-certValResponse, which both are defined in [SCVP]. > > After this addition, some subsequent text might be shortened. > (This is a MAY !) I can see what you're driving at, but I have to admit that I like that all the text for authenticated, unauthenticated, and unprotected are in their own sections. This way if somebody just jumps to that section it's all there. > (2) Section 4.2 and Appendix A.1 -- inconsistency > > Apparently, there has been a shift in the design; now the idea is > to assign new OIDs all under the id-ri branch, and not to 'recycle' > id-ct-scvp-certValResponse immediately for Unprotected SCVP Responses. > > However, this shift has not been completed consistently in the draft > text; the next detail most likely is a result of this incomplete > change. > > In Section 4.2, the first paragraph and the subsequent definition > do not match and this inconsistency leads to an inappropriate > citation: > > To carry an unprotected SCVP response, the otherRevInfoFormat is set > | to id-ct-scvp-certValResponse, which has the following ASN.1 > ^^^^^^^^^^^^^^^^^^^^^^^ > | definition [SCVP]: > ^^^^^^^ > ! id-ri-unprotected-scvp-response OBJECT IDENTIFIER ::= { id-ri TBD } > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > Following the naming style in 4.1.*, this should perhaps read: > > To carry an unprotected SCVP response, the otherRevInfoFormat is set > | to id-ri-unprotected-scvp-response, which has the following ASN.1 > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > | definition: > > id-ri-unprotected-scvp-response OBJECT IDENTIFIER ::= { id-ri TBD } Yes it should. Fixed. > Note: > It would indeed have made some sense to keep > id-ct-scvp-certValResponse for this purpose, > but the uniform use of id-ri would be lost this way. > > Even worse, the last OID definition in A.1 does not match > Section 4.2 either, introducing yet another name, which does > not appear anywhere else in the draft: > > | id-ri-scvp-certValResponse OBJECT IDENTIFIER ::= { id-ri TBD } > ^^^^^^^^^^^^^^^^^^^^^^^^^^ > > I strongly propose to use id-ri-unprotected-scvp-response as well. Fixed. > Note: > A.2 indeed uses, consistent with the definition in 4.2 (but not > the prose, as shown above): > > | id-ri-unprotected-scvp-response OBJECT IDENTIFIER ::= { id-ri TBD } > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > Please ensure consistency of the OID names. All aligned. > (3) Appendix A -- comment > > The draft says: > > Appendix A.1 provides the normative ASN.1 definitions for the > structures described in this specification using ASN.1 as defined in > [X.680] for compilers that support the 1988 ASN.1. > > Appendix A.2 provides informative ASN.1 definitions for the > structures described in this specification using ASN.1 as defined in > [X.680], [X.681], [X.682], and [X.683] for compilers that support the > 2002 ASN.1. This appendix contains the same information as Appendix > A.1 in a more recent (and precise) ASN.1 notation, however Appendix > A.1 takes precedence in case of conflict. > > That's a really nice description. > Should the WG adopt this text as boilerplate for future documents -- > as long as we still hesitate to fully shift to the 'new' ASN.1 ? Technically, the WG hasn't adopted this as a WG item. I do think that until the new ASN.1 IDs are published that we have to have this boilerplate. I've copied it from other IDs in this WG and others that have both ASN.1 versions. From rybar@nbusr.sk Wed Oct 21 03:09:44 2009 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 327013A67F8 for ; Wed, 21 Oct 2009 03:09:44 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.352 X-Spam-Level: * X-Spam-Status: No, score=1.352 tagged_above=-999 required=5 tests=[AWL=0.555, BAYES_05=-1.11, HELO_EQ_SK=1.35, HOST_EQ_SK=0.555, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6O-6fSc1+peq for ; Wed, 21 Oct 2009 03:09:43 -0700 (PDT) Received: from mail.nbusr.sk (mail.nbusr.sk [84.245.65.227]) by core3.amsl.com (Postfix) with ESMTP id 77EAA3A67DF for ; Wed, 21 Oct 2009 03:09:40 -0700 (PDT) From: "Peter Rybar" To: smime@ietf.org Date: Wed, 21 Oct 2009 12:10:21 +0200 Message-ID: <200910211009.n9LA9lkb016103@mail.nbusr.sk> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_002B_01CA5247.76764AE0" X-Mailer: Microsoft Office Outlook, Build 11.0.6353 Thread-Index: AcpRXKfyyU3/hl/9dkWptEJRifJH1QAvtWXgAAbDbdA= X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512 X-NAI-Spam-Score: 0 X-NAI-Spam-Report: 1 Rules triggered * 0 -- RV3387 -- BODY: Version number Subject: [smime] FW: [pkix] I-D Action:draft-ietf-pkix-rfc3161-update-07.txt X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Oct 2009 10:09:44 -0000 This is a multi-part message in MIME format. ------=_NextPart_000_002B_01CA5247.76764AE0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable From: Peter Rybar [mailto:rybar@nbusr.sk]=20 Sent: Wednesday, October 21, 2009 11:41 AM To: 'pkix@ietf.org' Cc: 'ietf-smime@ietf.org'; 'ESI@list.etsi.org'; 'peterryb@gmail.com' Subject: RE: [pkix] I-D Action:draft-ietf-pkix-rfc3161-update-07.txt =20 Dear all, The pkix-bounces@ietf.org timestamp discussion about allowing to use = ESSCertIDv2 (defined in RFC 5035) together with presently used mandatory = ESSCertID(SHA1) in timestamp causes a confusion. =20 For example at one important meeting, an expert from one EU country = presented that he was incorrectly informed that the usage of ESSCertID = or ESSCertIDv2 is useful only for solving of the hypothetical attack = which is not possible in reality and mentioned that it was the opinion = of IETF and ETSI experts. =20 According to such incorrect information from unknown UK IETF or ETSI = expert, the one national decision of the usage of ESSCertID or = ESSCertIDv2 presented ESSCertID or ESSCertIDv2 as not useful as = mandatory to be included in Qualified Electronic Signatures or AdES = based on Qualified Certificates.=20 =20 For that reason I would like to remind that at least two easy realizable = attacks are possible: Anybody can use any editor tools for substitution attack e.g. = http://lipingshare.com/Asn1Editor/ which is really smart. =20 1. Attacker (timestamp or electronic document signer) asks two trusted = CA for issuing of two certificates with the same key. 2. Attacker asks one CA for revocation of one certificate. 3. If ESSCertID or ESSCertIDv2 is not used, the attacker is able to = substitute the signer certificate in timestamp (or signature). 4. The electronic signature is therefore not useable as trusted evidence = in some actions. =20 1. Attacker (timestamp or electronic document signer) asks two trusted = CA for issuing of two certificates with the same key but the second = certificate is asked and issued after the expiration of the first = certificate issued for the same key. 2. If ESSCertID or ESSCertIDv2 is not used, the attacker is able to = substitute the signer certificate in timestamp (or signature). 3. The electronic signature is therefore not useable as trusted evidence = in some actions. =20 If a certificate is used only as a carrier of public key and the = certificate validity is not important, then also ESSCertID or = ESSCertIDv2 is not important but in any other situation when the = validity has a significant impact on some actions, ESSCertID or = ESSCertIDv2 must be used.=20 Another possibility for solving such attacks is to have mandatory rules = for CA and registration authorities: The CA must issue a certificate only for the key which was newly = generated by CA or registration operators before the certificate = creation.=20 =20 Regards,=20 Peter Rybar =20 tel.: +421 2 6869 2163 mob.: +421 902 891 155 fax: +421 2 6869 1701 e-mail: peter.rybar@nbusr.sk e-mail: peterryb@gmail.com =20 =20 =20 _____ =20 From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of = Stefan Santesson Sent: Tuesday, October 20, 2009 10:10 AM To: denis.pinkas@bull.net; pkix Subject: Re: [pkix] I-D Action:draft-ietf-pkix-rfc3161-update-07.txt =20 =20 ------=_NextPart_000_002B_01CA5247.76764AE0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: quoted-printable Re: [pkix] I-D = Action:draft-ietf-pkix-rfc3161-update-07.txt

From: = Peter Rybar [mailto:rybar@nbusr.sk]
Sent: Wednesday, October = 21, 2009 11:41 AM
To: 'pkix@ietf.org'
Cc: = 'ietf-smime@ietf.org'; 'ESI@list.etsi.org'; 'peterryb@gmail.com'
Subject: RE: [pkix] I-D Action:draft-ietf-pkix-rfc3161-update-07.txt

=

 

Dear = all,

The = pkix-bounces@ietf.org timestamp = discussion about allowing to use ESSCertIDv2 (defined in RFC 5035) together with = presently used mandatory ESSCertID(SHA1) in timestamp causes a = confusion.

 

For example at one = important meeting, an expert from one EU country presented that he was incorrectly informed that the usage of ESSCertID or ESSCertIDv2 is useful only for = solving of the hypothetical attack which is not possible in reality and = mentioned that it was the opinion of IETF and ETSI = experts.

 

According to such = incorrect information from unknown UK IETF or ETSI expert, the one national = decision of the usage of ESSCertID or ESSCertIDv2 presented ESSCertID or ESSCertIDv2 = as not useful as mandatory to be included in Qualified Electronic Signatures or = AdES based on Qualified Certificates.

 

For that reason I = would like to remind that at least two easy realizable attacks are = possible:

Anybody can use any = editor tools for substitution attack e.g. http://lipingshare.com/Asn1Ed= itor/ which is really = smart.

 

1. Attacker = (timestamp or electronic document signer) asks two trusted CA for issuing of two = certificates with the same key.

2. Attacker asks = one CA for revocation of one certificate.

3. If ESSCertID or ESSCertIDv2 is not used, the attacker is able to substitute the signer certificate in timestamp (or signature).

4. The electronic = signature is therefore not useable as trusted evidence in some = actions.

 

1. Attacker = (timestamp or electronic document signer) asks two trusted CA for issuing of two = certificates with the same key but the second certificate is asked and issued after = the expiration of the first certificate issued for the same = key.

2. If ESSCertID or ESSCertIDv2 is not used, the attacker is able to substitute the signer certificate in timestamp (or signature).

3. The electronic = signature is therefore not useable as trusted evidence in some = actions.

 

If a certificate is = used only as a carrier of public key and the certificate validity is not = important, then also ESSCertID or ESSCertIDv2 is not important but in any other = situation when the validity has a significant impact on some actions, ESSCertID or ESSCertIDv2 must be used.

Another possibility = for solving such attacks is to have mandatory rules for CA and registration authorities:

The CA must issue a certificate only for the key which was newly generated by CA or = registration operators before the certificate creation.

 

Regards, =

Peter Rybar

 

tel.: +421 2 6869 2163

mob.: +421 902 891 155

fax:  +421 2 6869 1701

e-mail: peter.rybar@nbusr.sk=

e-mail: peterryb@gmail.com<= span lang=3DEN-US>

 

 

 =

From: pkix-bounces@ietf.org [mailto:pkix-bounces@ietf.org] On Behalf Of Stefan Santesson
Sent: Tuesday, October = 20, 2009 10:10 AM
To: = denis.pinkas@bull.net; pkix
Subject: Re: [pkix] I-D Action:draft-ietf-pkix-rfc3161-update-07.txt

 

 

------=_NextPart_000_002B_01CA5247.76764AE0-- From rybar@nbusr.sk Thu Oct 22 03:15:03 2009 Return-Path: X-Original-To: smime@core3.amsl.com Delivered-To: smime@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D3A293A68C5; Thu, 22 Oct 2009 03:15:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.629 X-Spam-Level: * X-Spam-Status: No, score=1.629 tagged_above=-999 required=5 tests=[AWL=-0.277, BAYES_50=0.001, HELO_EQ_SK=1.35, HOST_EQ_SK=0.555] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tPqYnh9UIgNd; Thu, 22 Oct 2009 03:15:03 -0700 (PDT) Received: from mail.nbusr.sk (mail.nbusr.sk [84.245.65.227]) by core3.amsl.com (Postfix) with ESMTP id 5FC5B3A67A1; Thu, 22 Oct 2009 03:15:01 -0700 (PDT) From: "Peter Rybar" To: pkix@ietf.org Date: Thu, 22 Oct 2009 12:15:35 +0200 Message-ID: <200910221015.n9MAF1D0025323@mail.nbusr.sk> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Office Outlook, Build 11.0.6353 Thread-Index: AcpRXKfyyU3/hl/9dkWptEJRifJH1QAvtWXgAAy7+AwALCJMYA== In-Reply-To: X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512 X-NAI-Spam-Score: 0 X-NAI-Spam-Report: 1 Rules triggered * 0 -- RV3387 -- BODY: Version number Cc: peterryb@gmail.com, ESI@list.etsi.org, smime@ietf.org Subject: Re: [smime] [pkix] I-D Action:draft-ietf-pkix-rfc3161-update-07.txt X-BeenThere: smime@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: SMIME Working Group List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Oct 2009 10:15:03 -0000 Stefan, >Secondly, the issue is not whether to use ESSCertID or not.=20 >The Issue discussed in PKIX is the security considerations for using a = hash stronger than SHA-1. Yes, exactly I agree that discussion is about the impact of upgrade from = ESSCertID to ESSCertIDv2. And for that reason this specific issue must = be described carefully not to confuse people that the whole usage of = ESSCertID/v2 is unimportant. CMS signature (RFC 5652) when the ESSCertID/v2 is not used is open for = many substitution attacks which are realizable with and also without a = Malicious trusted CA. Generally speaking if ESSCertID/v2 is not used in CMS, then the right = public key for verification of signature must be selected according to = test if the digital signature is correctly verified. Without ESSCertID/v2 the connection of signer=E2=80=99s attributes with = the public key is not protected and for that reason any kind of public = key carries can be used e.g. certificates X509 v1...v5, PGP... Such = unprotected connection of the signer=E2=80=99s attributes with the = signer=E2=80=99s public key by CMS signer signature could cause many = attacks. Two attacks which I have described are realized by trusted CA = which is not Malicious. The number of possible attacks if the connection = is not protected is endless. I have not mentioned e.g. the attack on = identity in certificates where the certificates may be issued for = different purposes with different identity values for the same public = key. Another attack could be if the relying system accepts more than one = CA and the attribute certificate connected with certificate issued in = one CA can be accepted also if issued in the second CA, then by = substitution attack you can achieve a granted access to some systems. When the qualified certificates are used, then you can simply break the = nonrepudiation of QES. If you have sent the same signature with the = different certificate issued for the same public key to different = organization, the legal action can be realized in a different way. If = those organizations are not able to compare the QES signature, then = nobody can detect such attack. =20 I agree that the registration process could be a big hole if the = registration person under some pressure/whish of external powerful group = issues a qualified certificate with the identity of someone else for = people from the powerful group, then the effect of QES acceptance in = legal actions like selling the house could be catastrophic, but it must = be solved pursuant to rules of the registration authority. Regards,=20 Peter Rybar =20 tel.: +421 2 6869 2163 fax: +421 2 6869 1701 e-mail: peter.rybar@nbusr.sk=20 e-mail: peterryb@gmail.com http://elpi2.szm.com/