pki-ca-10.5.18-24.el7_9>t  DH`pc{$ƨf2Q۩6Ȋ bdgqJ+CG9U%ODPR4tFLez~ݴa,?Ԥ e3)H\]NQOs:,5ᨰIk@]ǫ0@V\o״OV:,7?d   E        , J P Xii i i Di p-i rixXieiri8@ d  (I8P9:dGxiHiIiX,Y0\Di]i^bdefltiuivP wix8iCpki-ca10.5.1824.el7_9Certificate System - Certificate AuthorityThe Certificate Authority (CA) is a required PKI subsystem which issues, renews, revokes, and publishes certificates as well as compiling and publishing Certificate Revocation Lists (CRLs). The Certificate Authority can be configured as a self-signing Certificate Authority, where it is the root CA, or it can act as a subordinate CA, where it obtains its own signing certificate from a public CA. This package is one of the top-level java-based Tomcat PKI subsystems provided by the PKI Core used by the Certificate System. ================================== || ABOUT "CERTIFICATE SYSTEM" || ================================== Certificate System (CS) is an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments. PKI Core contains ALL top-level java-based Tomcat PKI components: * pki-symkey * pki-base * pki-base-python2 (alias for pki-base) * pki-base-python3 * pki-base-java * pki-tools * pki-server * pki-ca * pki-kra * pki-ocsp * pki-tks * pki-tps * pki-javadoc which comprise the following corresponding PKI subsystems: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) Python clients need only install the pki-base package. This package contains the python REST client packages and the client upgrade framework. Java clients should install the pki-base-java package. This package contains the legacy and REST Java client packages. These clients should also consider installing the pki-tools package, which contain native and Java-based PKI tools and utilities. Certificate Server instances require the fundamental classes and modules in pki-base and pki-base-java, as well as the utilities in pki-tools. The main server classes are in pki-server, with subsystem specific Java classes and resources in pki-ca, pki-kra, pki-ocsp etc. Finally, if Certificate System is being deployed as an individual or set of standalone rather than embedded server(s)/service(s), it is strongly recommended (though not explicitly required) to include at least one PKI Theme package: * dogtag-pki-theme (Dogtag Certificate System deployments) * dogtag-pki-server-theme * redhat-pki-server-theme (Red Hat Certificate System deployments) * redhat-pki-server-theme * customized pki theme (Customized Certificate System deployments) * -pki-server-theme NOTE: As a convenience for standalone deployments, top-level meta packages may be provided which bind a particular theme to these certificate server packages.c:x86-02.bsys.centos.org%'CCentOSGPLv2CentOS BuildSystem System Environment/Daemonshttp://pki.fedoraproject.org/linuxnoarch=m+1l[#tR#1J6 _ S }F}F+ g%~~[G7(b)[J2 O,", +Bf PEGl]P'n,1{{% *S*L$,kI,A,:+A+3u9 #%##"vS "`./9/]   Q q >#E/#+{B/'m)H nrtknvpyi  *L*?5%C%c*m;c=O? 9%9RU][  T \71 0VCCF6CQ& "Y"\><bc q-  dF r- ~->E,g>aB 1"?%I7Px]%A큤AA큤AA큤A큤AA큤A큤AAA큤A큤AAA큤A큤A큤A큤A큤A큤A큤A큤c:r^2c:ec:`c:`c:c:`c:`^2^2^2^2c:^2^2c:c:^2^2^2^2^2^2^2^2^2^2c:^2c:^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2c:`^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2c:`c:`^2^2^2^2^2^2c:^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2c:c:c:^2^2^2c:^2^2^2^2^2^2^2^2^2^2^2c:c:c:^2^2^2c:^2^2^2^2^2^2^2^2^2^2^2^2^2^2c:^2^2^2c:`^2c:`c:`c:`^2^2c:`^2^2^2c:`c:`c:`c:`c:`c:`c:`c:`c:`^2^2c:a^2c:`^2^2^2^2^2^2^2c:a^2^2c:`^2^2^2^2^2^2^2c:`^2^2^2^2^2^2c:^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2c:^2^2^2^2^2c:`^2^2^2^2^2^2^2c:`^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2c:^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2c:`^2^2^2^2c:`^2^2^2^2^2^2^2c:^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^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.jar/usr/share/java/pki/pki-certsrv.jar/usr/share/java/pki/pki-cms.jar/usr/share/java/pki/pki-cmsbundle.jar/usr/share/java/pki/pki-cmscore.jar/usr/share/java/pki/pki-cmsutil.jar/usr/share/java/pki/pki-nsutil.jar/usr/share/pki/server/webapps/pki/admin/consolerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpki-core-10.5.18-24.el7_9.src.rpmpki-ca    java-1.8.0-openjdk-headlesspki-serverrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)systemd-unitssystemd-unitssystemd-unitsrpmlib(PayloadIsXz)10.5.18-24.el7_93.0.4-14.6.0-14.0-15.2-14.11.3cY!@cD @cob@bf@a*@as@aA@a`@``e@`6?`%@_$_@_@^V@^@^@^U@^=@^@^]]@]@]]v>]R@] u@\\@\f\T4\R@\\U@\[@[{[l,[`O@[U@[>@[d@[@[o[@ZUZ@Z@ZZxG@Zg#Z.s@Z@Z ZYYY@Y@Y@YoIYlYGY>@Y5GY-^Y$$@Y"Y@Y#@X@XX@XO@X*XRXOX!@X&X2@WWҤ@WίW#W:WWt@W{@Wu WgWV@WV@WV@WV@WV@WV@W 10.5.18-24Dogtag Team 10.5.18-23Dogtag Team 10.5.18-22Dogtag Team 10.5.18-21Dogtag Team 10.5.18-20Dogtag Team 10.5.18-19Dogtag Team 10.5.18-18Dogtag Team 10.5.18-17Dogtag Team 10.5.18-16Dogtag Team 10.5.18-15Dogtag Team 10.5.18-14Dogtag Team 10.5.18-13Dogtag Team 10.5.18-12Dogtag Team 10.5.18-11Dogtag Team 10.5.18-10Dogtag Team 10.5.18-9Dogtag Team 10.5.18-8Dogtag Team 10.5.18-7Dogtag Team 10.5.18-6Dogtag Team 10.5.18-5Dogtag Team 10.5.18-4Dogtag Team 10.5.18-3Dogtag Team 10.5.18-2Dogtag Team 10.5.18-1Dogtag Team 10.5.17-6Dogtag Team 10.5.17-5Dogtag Team 10.5.17-4Dogtag Team 10.5.17-3Dogtag Team 10.5.17-2Dogtag Team 10.5.17-1Dogtag Team 10.5.16-3Dogtag Team 10.5.16-2Dogtag Team 10.5.16-1Dogtag Team 10.5.9-13Dogtag Team 10.5.9-12Dogtag Team 10.5.9-11Dogtag Team 10.5.9-10Dogtag Team 10.5.9-9Dogtag Team 10.5.9-8Dogtag Team 10.5.9-7Dogtag Team 10.5.9-6Dogtag Team 10.5.9-5Dogtag Team 10.5.9-4Dogtag Team 10.5.9-3Dogtag Team 10.5.9-2Dogtag Team 10.5.9-1Dogtag Team 10.5.1-13.1Dogtag Team 10.5.1-13Dogtag Team 10.5.1-12Dogtag Team 10.5.1-11Dogtag Team 10.5.1-10Dogtag Team 10.5.1-9Dogtag Team 10.5.1-8Dogtag Team 10.5.1-7Dogtag Team 10.5.1-6Dogtag Team 10.5.1-5Dogtag Team 10.5.1-4Troy Dawson - 10.5.1-3Dogtag Team 10.5.1-2Dogtag Team 10.5.1-1Dogtag Team 10.5.0-1Dogtag Team 10.4.1-15Dogtag Team 10.4.1-14Dogtag Team 10.4.1-13Dogtag Team 10.4.1-12Dogtag Team 10.4.1-11Dogtag Team 10.4.1-10Dogtag Team 10.4.1-9Dogtag Team 10.4.1-8Dogtag Team 10.4.1-7Dogtag Team 10.4.1-6Dogtag Team 10.4.1-5Dogtag Team 10.4.1-4Dogtag Team 10.4.1-3Dogtag Team 10.4.1-2Dogtag Team 10.4.1-1Dogtag Team 10.4.0-1Dogtag Team 10.3.3-18Dogtag Team 10.3.3-17Dogtag Team 10.3.3-16Dogtag Team 10.3.3-15Dogtag Team 10.3.3-14Dogtag Team 10.3.3-13Dogtag Team 10.3.3-12Dogtag Team 10.3.3-11Dogtag Team 10.3.3-10Dogtag Team 10.3.3-9Dogtag Team 10.3.3-8Dogtag Team 10.3.3-7Dogtag Team 10.3.3-6Dogtag Team 10.3.3-5Dogtag Team 10.3.3-3Dogtag Team 10.3.3-2Dogtag Team 10.3.3-1Dogtag Team 10.3.3-0.1Dogtag Team 10.3.2-5Dogtag Team 10.3.2-4Dogtag Team 10.3.2-3Dogtag Team 10.3.2-2Dogtag Team 10.3.2-1Dogtag Team 10.3.2-0.1Dogtag Team 10.3.1-1Dogtag Team 10.3.0-1Dogtag Team 10.3.0.b1-1Dogtag Team 10.3.0.a2-2Dogtag Team 10.3.0.a2-1Dogtag Team 10.3.0.a1-2Dogtag Team 10.3.0.a1-1Dogtag Team 10.3.0-0.5Dogtag Team 10.3.0-0.4Dogtag Team 10.3.0-0.3Dogtag Team 10.3.0-0.2Dogtag Team 10.3.0-0.1Dogtag Team 10.2.7-0.3Tomas Radej - 10.2.7-0.2Dogtag Team 10.2.7-0.1Dogtag Team 10.2.6-1Dogtag Team 10.2.6-0.3Dogtag Team 10.2.6-0.2Dogtag Team 10.2.6-0.1Dogtag Team 10.2.5-1Dogtag Team 10.2.5-0.2Dogtag Team 10.2.5-0.1Dogtag Team 10.2.4-1Dogtag Team 10.2.4-0.2Dogtag Team 10.2.4-0.1Dogtag Team 10.2.3-1Dogtag Team 10.2.3-0.1Dogtag Team 10.3.0-0.1Dogtag Team 10.2.3-0.1Dogtag Team 10.2.2-1Dogtag Team 10.2.2-0.1Dogtag Team 10.2.1-1Matthew Harmsen - 10.2.1-0.4Ade Lee 10.2.1-0.3Christina Fu 10.2.1-0.2Dogtag Team 10.2.1-0.1Ade Lee 10.2.0-3Matthew Harmsen - 10.2.0-2Dogtag Team 10.2.0-1Matthew Harmsen - 10.2.0-0.10Matthew Harmsen - 10.2.0-0.9Matthew Harmsen - 10.2.0-0.8Fedora Release Engineering - 10.2.0-0.5Jack Magne - 10.2.0-0.7Matthew Harmsen - 10.2.0-0.6Matthew Harmsen - 10.2.0-0.5Ade Lee - 10.2.0-0.4Fedora Release Engineering - 10.2.0-0.3Michael Simacek - 10.2.0-0.2Dogtag Team 10.2.0-0.1Ade Lee 10.1.0-1Ade Lee 10.1.0-0.14Ade Lee 10.1.0-0.13Ade Lee 10.1.0-0.12Ade Lee 10.1.0-0.11Endi S. Dewata 10.1.0-0.10Abhishek Koneru 10.1.0.0.9Abhishek Koneru 10.1.0.0.8Endi S. Dewata 10.1.0-0.7Endi S. Dewata 10.1.0-0.6Endi S. Dewata 10.1.0-0.5Ade Lee 10.1.0-0.4Endi S. Dewata 10.1.0-0.3Matthew Harmsen 10.1.0-0.2Ade Lee 10.1.0-0.1Endi S. Dewata 10.0.2-5Ade Lee 10.0.2-4Ade Lee 10.0.2-3Endi S. Dewata 10.0.2-2Ade Lee 10.0.2-1Ade Lee 10.0.2-0.8Endi S. Dewata 10.0.2-0.7Endi S. Dewata 10.0.2-0.6Ade Lee 10.0.2-0.5Endi S. Dewata 10.0.2-0.4Endi S. Dewata 10.0.2-0.3Endi S. Dewata 10.0.2-0.2Endi S. Dewata 10.0.2-0.1Endi S. Dewata 10.0.1-9Ade Lee 10.0.1-8Endi S. Dewata 10.0.1-7Matthew Harmsen 10.0.1-6Endi S. Dewata 10.0.1-5Endi S. Dewata 10.0.1-4Matthew Harmsen 10.0.1-3Matthew Harmsen 10.0.1-2Ade Lee 10.0.1-1Matthew Harmsen 10.0.0-5Matthew Harmsen 10.0.0-4Ade Lee 10.0.0-3Ade Lee 10.0.0-2Ade Lee 10.0.0-1Matthew Harmsen 10.0.0-0.56.b3Endi S. Dewata 10.0.0-0.55.b3Endi S. Dewata 10.0.0-0.54.b3Ade Lee 10.0.0-0.53.b3Ade Lee 10.0.0-0.52.b3Endi S. Dewata 10.0.0-0.51.b2Endi S. Dewata 10.0.0-0.50.b2Matthew Harmsen 10.0.0-0.49.b2Ade Lee 10.0.0-0.48.b2Matthew Harmsen 10.0.0-0.47.b1Ade Lee 10.0.0-0.46.b1Ade Lee 10.0.0-0.45.b1Ade Lee 10.0.0-0.44.b1Ade Lee 10.0.0-0.43.b1Ade Lee 10.0.0-0.42.b1Ade Lee 10.0.0-0.41.b1Ade Lee 10.0.0-0.40.b1Endi S. Dewata 10.0.0-0.40.a2Endi S. Dewata 10.0.0-0.39.a2Ade Lee 10.0.0-0.38.a2Endi S. Dewata 10.0.0-0.37.a2Ade Lee 10.0.0-0.36.a2Endi S. Dewata 10.0.0-0.36.a1Endi S. Dewata 10.0.0-0.35.a1Endi S. Dewata 10.0.0-0.34.a1Ade Lee 10.0.0-0.33.a1Matthew Harmsen 10.0.0-0.32.a1Endi S. Dewata 10.0.0-0.31.a1Endi S. Dewata 10.0.0-0.30.a1Endi S. Dewata 10.0.0-0.29.a1Endi S. Dewata 10.0.0-0.28.a1Endi S. Dewata 10.0.0-0.27.a1Endi S. Dewata 10.0.0-0.26.a1Endi S. Dewata 10.0.0-0.25.a1Endi S. Dewata 10.0.0-0.24.a1Matthew Harmsen 10.0.0-0.23.a1Endi S. Dewata 10.0.0-0.22.a1Endi S. Dewata 10.0.0-0.21.a1Matthew Harmsen 10.0.0-0.20.a1Matthew Harmsen 10.0.0-0.19.a1Matthew Harmsen 10.0.0-0.18.a1Endi S. Dewata 10.0.0-0.17.a1Matthew Harmsen 10.0.0-0.16.a1Ade Lee 10.0.0-0.15.a1Christina Fu 10.0.0-0.14.a1Endi S. Dewata 10.0.0-0.13.a1Endi S. Dewata 10.0.0-0.12.a1Ade Lee 10.0.0-0.11.a1Matthew Harmsen 10.0.0-0.10.a1Matthew Harmsen 10.0.0-0.9.a1Jack Magne 10.0.0-0.8.a1Matthew Harmsen 10.0.0-0.7.a1Endi S. Dewata 10.0.0-0.6.a1Ade Lee 10.0.0-0.5.a1Endi S. Dewata 10.0.0-0.4.a1Matthew Harmsen 10.0.0-0.3.a1Matthew Harmsen 10.0.0-0.2.a1Nathan Kinder 10.0.0-0.1.a1Ade Lee 9.0.16-3Endi S. Dewata 9.0.16-2Matthew Harmsen 9.0.16-1Matthew Harmsen 9.0.15-1Matthew Harmsen 9.0.14-1Ade Lee 9.0.13-1Matthew Harmsen 9.0.12-1Matthew Harmsen 9.0.11-1Matthew Harmsen 9.0.10-1Matthew Harmsen 9.0.9-1Matthew Harmsen 9.0.8-2Matthew Harmsen 9.0.8-1Matthew Harmsen 9.0.7-1Matthew Harmsen 9.0.6-2Matthew Harmsen 9.0.6-1Matthew Harmsen 9.0.5-2Matthew Harmsen 9.0.5-1Matthew Harmsen 9.0.4-1Matthew Harmsen 9.0.3-2Matthew Harmsen 9.0.3-1Matthew Harmsen 9.0.2-1Matthew Harmsen 9.0.1-3Matthew Harmsen 9.0.1-2Matthew Harmsen 9.0.1-1Matthew Harmsen 9.0.0-3Matthew Harmsen 9.0.0-2Matthew Harmsen 9.0.0-1- ########################################################################## - # RHEL 7.9 (Batch Update 19): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen) - ########################################################################## - # RHCS 9.7 (Batch Update 19): - ########################################################################## - Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [certificate_system_9.7.z] (ckelley, mharmsen)- ########################################################################## - # RHEL 7.9 (Batch Update 18): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen) - Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley) - ########################################################################## - # RHCS 9.7 (Batch Update 18): - ########################################################################## - Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [certificate_system_9.7.z] (ckelley, mharmsen) - Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)- ########################################################################## - # RHEL 7.9 (Batch Update 17): - ########################################################################## - Bugzilla Bug #2107329 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [rhel-7.9.z] (ckelley, mharmsen) - Bugzilla Bug #2111514 - CVE-2022-2393 pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field [rhel-7.9] (cfu, ckelley) - ########################################################################## - # RHCS 9.7 (Batch Update 17): - ########################################################################## - Bugzilla Bug #2107325 - CVE-2022-2414 pki-core: access to external entities when parsing XML can lead to XXE [certificate_system_9.7.z] (ckelley, mharmsen) - Bugzilla Bug #2111493 - CVE-2022-2393 pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field [rhcs_9.7] (cfu, ckelley)- ########################################################################## - # RHEL 7.9 (Batch Update 15): - ########################################################################## - Bugzilla Bug #2074722 - user password and pkcs12 password exposure when debug level set to maximum [RHEL 7.9.z] (cfu) - Bugzilla Bug #2082717 - SCEP manual approval failure (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)- ########################################################################## - # RHEL 7.9 (Batch Update 14): - ########################################################################## - Bugzilla Bug #2074722 - user password and pkcs12 password exposure when debug level set to maximum [RHEL 7.9.z] (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)- ########################################################################## - # RHEL 7.9 (Batch Update 11): - ########################################################################## - Bugzilla Bug 1998597 - TPS RA Separation Issues (cfu) - Bugzilla Bug 2008319 - PKISpawn with ECC Signing Algorithms fail in FIPS Mode (cfu) - Bugzilla Bug 2018608 - Invalid certificates with creation of subCA (pkispawn single step) [rhel-7.9.0.z] (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)- ########################################################################## - # RHEL 7.9 (Batch Update 10): - ########################################################################## - Bugzillla Bug 1978345 - End Entity's List Certificates Page Back/Forward Buttons are Broken (ckelley, jonahon.d.parrish@mail.mil, mharmsen) - Bugzilla Bug 2008707 - pkispawn bails out too easily for things that could have been worked around after installation [RHEL 7.9.z] (cfu) - Bugzilla Bug 2016773 - Directory authentication plugin requires directory admin password just for user authentication (rhel-7.9.z) (awnuk@purestorage.com, jmagne) - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)- ########################################################################## - # RHEL 7.9 (Batch Update 9): - ########################################################################## - Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx response from CA REST API: 500 [ftweedal, ckelley] - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)- ########################################################################## - # RHEL 7.9 (Batch Update 8): - ########################################################################## - Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu] - Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx response from CA REST API: 500 [ftweedale, ckelley] - ########################################################################## - # RHCS 9.7 (Batch Update 8): - ########################################################################## - Bugzilla Bug 1959937 - TPS Allowing Token Transactions while the CA is Down [cfu] - Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile Separation [cfu]- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission per LDAP group without immediate issuance [rhel-7.9.z] (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1911472 - Revoke via REST API not working when Agent certificate not issued by CA [rhel-7.9.z] (cfu) - Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version String.java.io.FileNotFoundException (ckelley) - Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching PIN_RESET=YES to NO [rhel-7.9.z] (jmagne) - Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne) - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base build (jmagne) - Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot be processed (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)- Change variable 'TPS' to 'tps' - ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates profiles, audit for IPA (edewata) - ########################################################################## - # Backported CVEs (ascheel): - ########################################################################## - Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token parameters in TPS resulting in stored XSS [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site scripting (XSS) in the pki-tps web Activity tab [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile creation [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site Scripting in 'path length' constraint field in CA's Agent page [rhel-7.9.z] (dmoluguw, ascheel) - Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site scripting in getcookies?url= endpoint in CA [rhel-7.9.z] (dmoluguw, ascheel) - Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab [rhel-7.9.z] (ascheel) - Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne) - ########################################################################## - Update to jquery v3.4.1 (ascheel) - Update to jquery-i18n-properties v1.2.7 (ascheel) - Update to backbone v1.4.0 (ascheel) - Upgrade to underscore v1.9.2 (ascheel) - Update to patternfly v3.59.3 (ascheel) - Update to jQuery v3.5.1 (ascheel) - Upgrade to bootstrap v3.4.1 (ascheel) - Link in new Bootstrap CSS file (ascheel) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates profiles, audit for IPA (edewata) - ########################################################################## - # Backported CVEs (ascheel): - ########################################################################## - Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token parameters in TPS resulting in stored XSS [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site scripting (XSS) in the pki-tps web Activity tab [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile creation [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site Scripting in 'path length' constraint field in CA's Agent page [rhel-7.9.z] (dmoluguw, ascheel) - Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site scripting in getcookies?url= endpoint in CA [rhel-7.9.z] (dmoluguw, ascheel) - Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab [rhel-7.9.z] (ascheel) - Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne) - ########################################################################## - Update to jquery v3.4.1 (ascheel) - Update to jquery-i18n-properties v1.2.7 (ascheel) - Update to backbone v1.4.0 (ascheel) - Upgrade to underscore v1.9.2 (ascheel) - Update to patternfly v3.59.3 (ascheel) - Update to jQuery v3.5.1 (ascheel) - Upgrade to bootstrap v3.4.1 (ascheel) - Link in new Bootstrap CSS file (ascheel) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)- Bugzilla Bug #1883639 - additional support on upgrade for audit cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user- Patch for CMCResponse tool - Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)- Patch for CMC Credential Error, RSA PSS typo, and new profile for directory-authentication-based Server-Side keygen - ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug #1710109 - add RSA PSS support (jmagne) - Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- Updated jss dependencies - Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE additional support and touch-up (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new- Updated jss dependencies - ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu) - Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)- Bugzilla Bug #1710109 - add RSA PSS support - fix IPA installer (jmagne)- Updated jss dependencies - ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug #1774174 - Rebase pki-core from 10.5.17 to 10.5.18 (RHEL) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and - # Bugzilla Bug #1774181 - Update RHCS version of CA, KRA, OCSP, and TKS so- ########################################################################## - # RHEL 7.8: - ########################################################################## - Bugzilla Bug #1723008 - ECC Key recovery failure with CKR_TEMPLATE_INCONSISTENT (cfu) - Bugzilla Bug #1774282 - pki-server-nuxwdog template has pid file name with non-breakable space char encoded instead of 0x20 space char (ascheel) - ########################################################################## - # RHCS 9.6: - ########################################################################## - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.8: - ########################################################################## - Bugzilla Bug #1523330 - CC: missing audit event for CS acting as TLS client (cfu) - ########################################################################## - # RHCS 9.6: - ########################################################################## - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- Include 'pistool' in the 'pki-tools' package- ########################################################################## - # RHEL 7.8: - ########################################################################## - Bugzilla Bug #1445479 - KRATool does not support netkeyKeyRecovery attribute (dmoluguw) - Bugzilla Bug #1534013 - Attempting to add new keys using a PUT KEY APDU to a token that is loaded only with the default/factory keys (Key Version Number 0xFF) returns an APDU with error code 0x6A88. (jmagne) - Bugzilla Bug #1709585 - PKI (test support) for PKCS#11 standard AES KeyWrap for HSM support (cfu, ftweedal) - Bugzilla Bug #1748766 - number range depletion when multiple clones created from same master (ftweedal) - ########################################################################## - # RHCS 9.6: - ########################################################################## - # Bugzilla Bug #1520258 - TPS token search fails to find entries , LDAP filter - # Bugzilla Bug #1535671 - RFE to have the users be able to use the- ########################################################################## - # RHEL 7.8: - ########################################################################## - Bugzilla Bug #1523330 - CC: missing audit event for CS acting as TLS client (cfu) - Bugzilla Bug #1597727 - CA - Unable to change a certificate’s revocation reason from superceded to key_compromised (rhcs-maint) - ########################################################################## - # RHCS 9.6: - ########################################################################## - # Bugzilla Bug #1470410 - TPS doesn't update revocation status when - # Bugzilla Bug #1470433 - Add supported transitions to TPS (rhcs-maint) - # Bugzilla Bug #1585722 - TMS - PKISocketFactory – Modify Logging to Allow - # Bugzilla Bug #1642577 - TPS – Revoked Encryption Certificates Marked as- Updated jss, nuxwdog, and tomcatjss dependencies - ########################################################################## - # RHEL 7.8: - ########################################################################## - Bugzilla Bug #1733586 - Rebase pki-core from 10.5.16 to 10.5.17 (RHEL) - ########################################################################## - # RHCS 9.6: - ########################################################################## - # Bugzilla Bug #1718418 - Update RHCS version of CA, KRA, OCSP, and TKS so - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.7: - ########################################################################## - Bugzilla Bug #1638379 - PKI startup initialization process should not depend on LDAP operational attributes [ftweedal] - ########################################################################## - # RHCS 9.5: - ########################################################################## - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.7: - ########################################################################## - Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing Certificate Request [ftweedal] - ########################################################################## - # RHCS 9.5: - ########################################################################## - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- Updated jss dependencies - ########################################################################## - # RHEL 7.7: - ########################################################################## - Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) - ########################################################################## - # RHCS 9.5: - ########################################################################## - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- Updated jss dependencies - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1671245 - CC: unable to verify cert before import [rhel-7.6.z] [manpage] (ascheel) - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL) [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)- Updated jss dependencies - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1671245 - CC: unable to verify cert before import [rhel-7.6.z] (ascheel) - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL) [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)- Updated jss dependencies - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1671245 - CC: unable to verify cert before import [rhel-7.6.z] (ascheel) - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL) [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout configuration [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA, - # Added Batch Update Information to Product Version (mharmsen)- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification if enableOCSP is true [rhel-7.6.z] (jmagne) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z] (dmoluguw) - Bugzilla Bug #1645263 - Auth plugins leave passwords in the access log and audit log using REST [rhel-7.6.z] (dmoluguw) - Bugzilla Bug #1645429 - pkispawn fails due to name collision with /var/log/pki/ [rhel-7.6.z] (dmoluguw) - Bugzilla Bug #1655951 - CC: tools supporting CMC requests output keyID needs to be captured in file [rhel-7.6.z] (cfu) - Bugzilla Bug #1656297 - Unable to install with admin-generated keys [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,- Require "tomcatjss >= 7.2.1-8" as a build and runtime requirement - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1632116 - CC: missing audit event for CS acting as TLS client [rhel-7.6.z] (cfu) - Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be removed from the default ciphers list [rhel-7.6.z] (cfu) - Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu) - Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen) - Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth [rhel-7.6.z] (cfu) - Bugzilla Bug #1636490 - Installation of CA using an existing CA fails [rhel-7.6.z] (edewata) - Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for a password [rhel-7.6.z] (edewata) - Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra, pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne) - Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when there is no space on the disk to write logs [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,- Updated nuxwdog dependencies - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #673182 - ECC keys not supported for signing audit logs (cfu) - Bugzilla Bug #1593805 - Better understanding of NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu) - Bugzilla Bug #1601071 - Certificate generation happens with partial attributes in CMCRequest file (cfu) - Bugzilla Bug #1601569 - CC: Enable all config audit events (cfu) - Bugzilla Bug #1608375 - CMC Revocations throws exception with same reqIssuer & certissuer (cfu) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0 with latest version (abokovoy) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1548203 - pki console configurations that involves ldap passwords leave the plain text password in signed audit logs (cfu) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1494591 - keyGen fails when only Identity- Re-spin alpha builds- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden by CSR encoding (cfu) - Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a certificate (ftweedal) - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in SharedToken scenario's (cfu) - Bugzilla Bug #1550742 - Address ECC profile overrides (cfu) - Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu) - Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu) - Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request authenticated through SharedToken (cfu) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a certifcate (ftweedal) - Bugzilla Bug #1544843 - ExternalCA: Installation failed during csr generation with ecc (rrelyea, gkapoor) - Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest upstream 10.5.x (RHEL) (mharmsen) - Bugzilla Bug #1580394 - CMC CRMF requests result in InvalidKeyFormatException when signing algorithm is ECC (cfu) - Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access (ftweedal, cfu) - Bugzilla Bug #1585866 - CRMFPopClient tool - should allow option to do no key archival (cfu) - Bugzilla Bug #1588655 - Cert validation for installation with external CA cert (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- Rebuild due to build system database problem- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry in a certifcate [rhel-7.5.z] (ftweedal) - Bugzilla Bug #1585945 - CMC CRMF requests result in InvalidKeyFormatException when signing algorithm is ECC [rhel-7.5.z] (cfu) - Bugzilla Bug #1587826 - ExternalCA: Installation failed during csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor) - Bugzilla Bug #1588944 - Cert validation for installation with external CA cert [rhel-7.5.z] (edewata) - Bugzilla Bug #1588945 - CRMFPopClient tool - should allow option to do no key archival (cfu) - Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access [rhel-7.5.z] (ftweedal, cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- Updated "jss" build and runtime requirements (mharmsen) - ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest, CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu) - Bugzilla Bug #1572548 - IPA install with external-CA is failing when FIPS mode enabled. [rhel-7.5.z] (edewata) - Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE [rhel-7.5.z] (cfu) - Bugzilla Bug #1575521 - subsystem -> subsystem SSL handshake issue with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu) - Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs improvement [rhel-7.5.z] (jmagne) - Bugzilla Bug #1581135 - SAN in internal SSL server certificate in pkispawn configuration step [rhel-7.5.z] (cfu) - Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong input class_id [rhel-7.5.z] (cfu) - Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System 9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for standard conformance [rhel-7.5.z] (cfu) - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1560233 - libtps does not directly depend on libz- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1550581 - CMCAuth throws org.mozilla.jss.crypto.TokenException: Unable to insert certificate into temporary database [rhel-7.5.z] (cfu) - Bugzilla Bug #1551067 - [MAN] Add --skip-configuration and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata) - Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers [rhel-7.5.z] (cheimes, mharmsen) - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry in a certifcate [rhel-7.5.z] (ftweedal) - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for standard conformance [rhel-7.5.z] (cfu) - Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu) - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu) - Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal) - Bugzilla Bug #1558919 - Not able to generate certificate request with ECC using pki client-cert-request [rhel-7.5.z] (akahat) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1560233 - libtps does not directly depend on libz- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event set (RHEL) (edewata) - Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata) - Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM and FIPS (edewata) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1542210 - pki console configurations that involves ldap passwords leave the plain text password in debug logs (jmagne) - Bugzilla Bug #1543242 - Regression in lightweight CA key replication (ftweedal) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event set (RHEL) (edewata) - Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and audit event logging at startup (jmagne) - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA instance (alee) - Bugzilla Bug #1525306 - CC: missing CMC request and response record (cfu) - Bugzilla Bug #1532933 - Installing subsystems with external CMC certificates in HSM environment shows import error (edewata) - Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm (edewata) - Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers permitted in fips mode (mharmsen) - Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED outcomes. (edewata) - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in SharedToken scenario's (cfu) - Bugzilla Bug #1541526 - CMC: Revocation works with an unknown revRequest.issuer (cfu) - Bugzilla Bug #1541853 - ProfileService: config values with backslashes have backslashes removed (ftweedal) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the- Updated jss, nuxwdog, and openssl dependencies - ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in few cases (ftweedal) - Bugzilla Bug #1428021 - CC: shared token storage and retrieval mechanism (cfu) - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause error (cfu) - Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog (alee) - Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during pkispawn (alee) - Bugzilla Bug #1520526 - p12 admin certificate is missing when certificate is signed Externally (edewata) - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA instance (alee) - Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to missing nextupdate field (ftweedal) - Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen) - Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords in several different files after installation completes (alee) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - Bugzilla Bug #1466066 - CC: Secure removal of secret data storage (jmagne) - Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to setup with CMC signed certificates (cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- dogtagpki Pagure Issue #2853 - Cleanup spec file conditionals- Patch applying check-ins since 10.5.1-1- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- #Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0- #Require "jss >= 4.4.0-8" as a build and runtime requirement - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332 - # Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions) - # Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error - # Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from - # Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS) - # Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin - # dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data: - ########################################################################## - # RHCS 9.2: - ########################################################################## - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271 - # Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and - # Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin- Resolves: rhbz #1463350 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1463350 - Access banner validation (edewata)- # Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing - # Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause - # Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert - # Bugzilla Bug #1463350 - Access banner validation (edewata) - # Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal - # Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen) - # Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with - # Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option - # Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03 - # Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system- # Resolves: rhbz #1469432 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1469432 - CMC plugin default change - # Resolves CVE-2017-7537 - # Fixes BZ #1470948- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1458043 - Key recovery on token fails with invalid public key error on KRA (alee) - Bugzilla Bug #1460764 - CC: CMC: check HTTPS client authentication cert against CMC signer (cfu) - Bugzilla Bug #1461533 - Unable to find keys in the p12 file after deleting the any of the subsystem certs from it (ftweedal)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret) using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne) - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing certificate requests (cfu) - Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC revocation non-signing cert requests (cfu) - Bugzilla Bug #1458047 - change the way aes clients refer to aes keysets (alee) - Bugzilla Bug #1458055 - dont reuse IVs in the CMC code (alee) - Bugzilla Bug #1460028 - In keywrap mode, key recovery on KRA with HSM causes KRA to crash (ftweedal)- Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement - Require "tomcatjss >= 7.2.1-4" as a build and runtime requirement - ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS enabled system (edewata) - Bugzilla Bug #1447144 - CA brought down during separate KRA instance creation (edewata) - Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure ACCESS_SESSION_ESTABLISH_FAILURE (edewata) - Bugzilla Bug #1454450 - SubCA installation failure with 2 step installation in fips enabled mode (edewata) - Bugzilla Bug #1456597 - Certificate import using pki client-cert-import is asking for password when already provided (edewata) - Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes) - Bugzilla Bug #1458043 - Key recovery using externalReg fails with java null pointer exception on KRA (alee) - Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter (edewata) - Bugzilla Bug #1458429 - client-cert-import --ca-cert should import CA cert with trust bits "CT,C,C" (edewata) - ########################################################################## - # RHCS 9.2: - ########################################################################## - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret) using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne) - Bugzilla Bug #1445519 - CA Server installation with HSM fails (jmagne) - Bugzilla Bug #1452617 - Unable to create IPA Sub CA (ftweedal) - Bugzilla Bug #1454471 - Enabling all subsystems on startup (edewata) - Bugzilla Bug #1455617 - Key recovery on token fails because key record is not marked encrypted (alee)- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error (mharmsen)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal non-signing cert requests (cfu) - Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed) CMC with identity proof (cfu) - Bugzilla Bug #1447144 - CA brought down during separate KRA instance creation (mharmsen) - Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata) - Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne) - Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen) - Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in ConnectorServlet. (edewata) - Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata) - Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED audit event. (edewata)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1386303 - cannot extract generated private key from KRA when HSM is used. (alee) - Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes) - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause error (cfu) - Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from the KRA (ftweedal) - Bugzilla Bug #1448204 - pkispawn of clone install fails with InvalidBERException (ftweedal) - Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on thales hsm (alee) - Updated "jss" build and runtime requirements (mharmsen) - ########################################################################## - # RHCS 9.2: - ########################################################################## - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)- ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in conjuction with FreeIPA (ftweedal) - Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the startTime parameter is not working as expected. (jmagne) - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing certificate requests (cfu) - Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal) - Bugzilla Bug #1445088 - profile modification cannot remove existing config parameters (ftweedal) - Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption) (RHEL) (alee) - Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when pki CLI terminates SSL connection (edewata) - Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption) (RHCS) (alee)- ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1282504 - Installing pki-server in container reports scriptlet failed, exit status 1 (jpazdziora) - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS enabled system (edewata) - Bugzilla Bug #1410650 - [RFE] Add SCP03 support for sc 7 g & d cards (RHEL) (jmagne) - Bugzilla Bug #1437591 - cli authentication using expired cert throws an exception (edewata) - Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a request (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1274086 - [RFE] Add SCP03 support for sc 7 g & d cards (RHCS) (jmagne) - ############################################################################ - # Common Criteria - ############################################################################ - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures (edewata) - Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata) - Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature implementation (cfu)- Require "nss >= 3.28.3" as a build and runtime requirement - Require "jss >= 4.4.0-4" as a build and runtime requirement - Require "tomcatjss >= 7.2.1-3" as a build and runtime requirement - dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find failure (edewata) - ############################################################################ - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4 - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.4.x - ############################################################################ - # RHEL 7.4: - ############################################################################ - ############################################################################ - # RHCS 9.2: - ############################################################################ - ############################################################################ - # Common Criteria - ############################################################################ - Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature implementation (cfu) - Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption cert requests (cfu) - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures (edewata) - Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance protection cert mechanism (cfu)- Require "jss >= 4.4.0-1" as a build and runtime requirement - Require "tomcatjss >= 7.2.1-1" as a build and runtime requirement - ############################################################################ - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4 - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.4.x - ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1222557 - ECDSA Certificates Generated by Certificate System 8.1 fail NIST validation test with parameter field. (cfu) - Bugzilla Bug #1238684 - Generting Symmetric key fails with key-generate when --usages verify (vakwetu) - Bugzilla Bug #1246635 - user-cert-add --serial CLI request to secure port with remote CA shows authentication failure (edewata) - Bugzilla Bug #1249400 - CA EE: Submit caUserCert request without uid does not show proper error message (vakwetu) - Bugzilla Bug #1305993 - Add profile component that copies CN to SAN (ftweedal) - Bugzilla Bug #1316653 - pki ca-cert-request-submit fails presumably because of missing authentication even if it should not require any (edewata) - Bugzilla Bug #1325071 - add options to enable/disable cert or crl publishing. (vakwetu) - Bugzilla Bug #1330800 - Failed to start pki-tomcatd Service ("ipa-cacert-manage renew" failed?) (edewata) - Bugzilla Bug #1368410 - Misleading Logging for HSM (edewata) - Bugzilla Bug #1372052 - Unable to search certificate requests using the latest request ID (edewata) - Bugzilla Bug #1375347 - Typo in comment line of UserPwdDirAuthentication.java (edewata) - Bugzilla Bug #1376226 - IPA replica-prepare failed with error "Profile caIPAserviceCert Not Found" (ftweedal) - Bugzilla Bug #1376488 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - Bugzilla Bug #1378275 - two-step externally-signed CA installation fails due to missing AuthorityID (ftweedal) - Bugzilla Bug #1378277 - Spurious host authority entries created (ftweedal) - Bugzilla Bug #1378527 - Miscellaneous Minor Changes (edewata) - Bugzilla Bug #1381084 - KRA installation failed against externally-signed CA with partial certificate chain (edewata) - Bugzilla Bug #1382066 - Problems with FIPS mode (edewata) - Bugzilla Bug #1386371 - Remove xenroll.dll from pki-core (mharmsen) - Bugzilla Bug #1386424 - Fix packaging duplicates of classes in multiple jar files (edewata) - Bugzilla Bug #1391737 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (RHEL 7) (edewata) - Bugzilla Bug #1392068 - [RFE] add express archivals and retrievals from KRA (vakwetu) - Bugzilla Bug #1395817 - Unable to install subordinate CA with HSM in FIPS mode (edewata) - Bugzilla Bug #1397200 - pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config (jmagne) - Bugzilla Bug #1399862 - Dogtag 10.3.9 Man Pages (edewata) - Bugzilla Bug #1404881 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - Bugzilla Bug #1405654 - Token memory not wiped after key deletion (RHEL) (jmagne) - Bugzilla Bug #1409946 - Request ID undefined for CA signing certificate (vakwetu) - Bugzilla Bug #1409949 - CA Certificate Issuance Date displayed on CA website incorrect (vakwetu) - Bugzilla Bug #1410650 - [RFE] Add SCP03 support (RHEL) (jmagne) - Bugzilla Bug #1411428 - Unable to create a CA clone in FIPS (edewata) - Bugzilla Bug #1412211 - Unable to set up KRA in FIPS (edewata) - Bugzilla Bug #1412681 - update to 7.3 IPA with otpd bugfixes, tomcat will not finish start, hangs (ftweedal) - Bugzilla Bug #1413132 - pki-tomcat for 10+ minutes before generating cert (edewata) - Bugzilla Bug #1413136 - Problem with default AJP hostname in IPv6 environment. (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1 (cfu) - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne) - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed tokens (jmagne) - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working when a token is physically damaged and a temporary token is issued (jmagne) - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches (cfu) - Bugzilla Bug #1381635 - Token format with external reg fails when op.format.externalRegAddToToken.revokeCert=true (cfu) - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when set on a token (jmagne) - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (RHCS 9) (edewata) - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (RHCS) (jmagne) - Bugzilla Bug #1404900 - Dogtag 10.3.9 logging properties (edewata) - Bugzilla Bug #1405655 - Token memory not wiped after key deletion (RHCS) (jmagne) - ############################################################################- ## RHEL 7.3.z Batch Update 4 - Bugzilla Bug #1429492 - Add profile component that copies CN to SAN (ftweedal)- ## RHCS 9.1.z Batch Update 3 - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - ## RHEL 7.3.z Batch Update 3 - Bugzilla Bug #1417063 - ECDSA Certificates Generated by Certificate System 8.1 fail NIST validation test with parameter field. (cfu) - Bugzilla Bug #1417064 - Unable to search certificate requests using the latest request ID (edewata) - Bugzilla Bug #1417065 - CA Certificate Issuance Date displayed on CA website incorrect (alee) - Bugzilla Bug #1417066 - update to 7.3 IPA with otpd bugfixes, tomcat will not finish start, hangs (ftweedal) - Bugzilla Bug #1417067 - pki-tomcat for 10+ minutes before generating cert (edewata) - Bugzilla Bug #1417190 - Problem with default AJP hostname in IPv6 environment. (edewata)- Separate original patches into RHEL and RHCS portions - ## RHEL 7.3.z Batch Update 2 - Bugzilla Bug #1404176 - logging properties and man pages (edewata) - Bugzilla Bug #1405328 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - ## RHCS 9.1.z Batch Update 2 - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - Bugzilla Bug #1404900 - RHCS logging properties (edewata)- ## RHEL 7.3.z Batch Update 2 - Bugzilla Bug #1404173 - user-cert-add --serial CLI request to secure port with remote CA shows authentication failure (edewata) - Bugzilla Bug #1404175 - pki ca-cert-request-submit fails presumably because of missing authentication even if it should not require any (edewata) - Bugzilla Bug #1404178 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI [pki-base] (edewata) - Bugzilla Bug #1404172 - Unable to install subordinate CA with HSM in FIPS mode (edewata) - Bugzilla Bug #1403689 - pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config (jmagne) - Bugzilla Bug #1404176 - logging properties and man pages (edewata) - ## RHCS 9.1.z Batch Update 2 - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI [pki-tps] (edewata) - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne)- Marked the following RHCS 9.1.z bug: Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel when TPS and TKS security db is on fips mode. (jmagne) as a duplicate of RHEL 7.3.z bug: Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) and moved the patch from the RHCS 9.1.z bug to the RHEL 7.3.z bug.- ## RHEL 7.3.z Batch Update 1 - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) (added KRA key recovery via CLI in FIPS mode) - ## RHCS 9.1.z Batch Update 1 - Reverted patches associated with Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (edewata)- ## RHEL 7.3.z Batch Update 1 - Bugzilla Bug #1390318 - CA EE: Submit caUserCert request without uid does not show proper error message (alee) - Bugzilla Bug #1390319 - Failed to start pki-tomcatd Service ("ipa-cacert-manage renew" failed?) (edewata) - Bugzilla Bug #1390320 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - Bugzilla Bug #1390321 - two-step externally-signed CA installation fails due to missing AuthorityID (ftweedal) - Bugzilla Bug #1390322 - Spurious host authority entries created (ftweedal) - Bugzilla Bug #1390324 - KRA installation failed against externally-signed CA with partial certificate chain (edewata) - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) - Bugzilla Bug #1390311 - Fix packaging duplicates of classes in multiple jar files (edewata) - Bugzilla Bug #1390325 - Typo in comment line of UserPwdDirAuthentication.java (edewata) - ## RHCS 9.1.z Batch Update 1 - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1" (cfu) - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed tokens (jmagne) - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working when a token is physically damaged and a temporary token is issued (jmagne) - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches - Bugzilla Bug #1381635 - Token format with external reg fails when op.format.externalRegAddToToken.revokeCert=true (cfu) - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when set on a token (jmagne) - Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel when TPS and TKS security db is on fips mode. (jmagne) - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (edewata)- PKI TRAC Ticket #1527 - TPS Enrollment always goes to "ca1" (cfu) - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - PKI TRAC Ticket #2478 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - PKI TRAC Ticket #2483 - Unable to read an encrypted email using renewed tokens (jmagne) - PKI TRAC Ticket #2496 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches (cfu) - PKI TRAC Ticket #2505 - Fix packaging duplicates of classes in multiple jar files (edewata)- Revert Patch: PKI TRAC Ticket #2449 - Unable to create system certificates in different tokens (edewata) - Resolves: rhbz #1374054 - ipa-replica-install fails setting up certificate - Restores: rhbz #1319557 - pkispawn KRA instance is failing server - Removes from Errata: rhbz #1372041 - Unable to create system certificates in different tokens- PKI TRAC Ticket #1638 - Lightweight CAs: revoke certificate on CA deletion (ftweedal) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (edewata) - PKI TRAC Ticket #2443 - Prevent deletion of host CA's keys if LWCA entry deleted (ftweedal) - PKI TRAC Ticket #2444 - Authority entry without entryUSN is skipped even if USN plugin enabled (ftweedal) - PKI TRAC Ticket #2446 - pkispawn: make subject_dn defaults unique per instance name (for shared HSM) (cfu) - PKI TRAC Ticket #2447 - CertRequestInfo has incorrect URLs (vakwetu) - PKI TRAC Ticket #2449 - Unable to create system certificates in different tokens (edewata)- PKI TRAC Ticket #1578 - Authentication Instance Id PinDirEnrollment with authType value as SslclientAuth is not working (jmagne) - PKI TRAC TIcket #2414 - pki pkcs12-cert-del shows a successfully deleted message when a wrong nickname is provided (gkapoor) - PKI TRAC Ticket #2423 - pki_ca_signing_token when not specified does not fallback to pki_token_name value (edewata) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (akasurde) - ticket remains open - PKI TRAC Ticket #2439 - Outdated deployment descriptors in upgraded server(edewata)- PKI TRAC Ticket #690 - [MAN] pki-tools man pages (mharmsen) - CMCEnroll - PKI TRAC Ticket #833 - pki user-mod fullName="" gives an error message "PKIException: LDAP error (21): error result" (edewata) - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade. (cheimes, edewata, mharmsen) - PKI TRAC Ticket #2432 - Kra-selftest behavior is not as expected (edewata) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (edewata, mharmsen) - PKI TRAC Ticket #2437 - TPS UI: while adding certs for users from TPSUI pem format with/without header works while pkcs7 with header is not allowed (edewata) - PKI TRAC Ticket #2440 - Optional CA signing CSR for migration (edewata)- Bugzilla Bug #1366465 - Errata TPS upgrade test fails- PKI TRAC Ticket #978 - TPS connector man page: add revocation routing info (cfu) - PKI TRAC Ticket #1285 - [MAN] Apply 'generateCRMFRequest() removed from Firefox' workarounds to appropriate 'pki' man page (jmagne) - PKI TRAC Ticket #2246 - [MAN] Man Page: AuditVerify (cfu) - PKI TRAC Ticket #2381 - Throws exception while providing invalid module. (edewata) - PKI TRAC Ticket #2383 - CLI :: pki client-cert-request --extractable should accept only boolean value (edewata) - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter beyond CA signing cert in case of external or existing CA (cfu) - PKI TRAC Ticket #2399 - Dogtag 10.3.5: Miscellaneous Enhancements (akasurde, alee, cheimes, edewata, jmagne, mharmsen) - PKI TRAC Ticket #2401 - pkispawn calls dnsdomainname even if it does not rpm-require hostname (mharmsen) - PKI TRAC Ticket #2402 - Conflict in file ownership in pki-base and pki-server (cheimes) - PKI TRAC Ticket #2403 - Deployment problem with RESTEasy 3.0.17 (edewata) - PKI TRAC Ticket #2406 - Make starting CRL Number configurable (jmagne) - PKI TRAC Ticket #2412 - pki client-cert-import --trust option does not apply the specified trust bits (alee) - PKI TRAC Ticket #2418 - [TPS] Some template substitution didn't happen during installation (alee) - PKI TRAC Ticket #2420 - CA subsystem OSCP responder fails when LWCAs are not used (ftweedal) - PKI TRAC Ticket #2421 - Incorrect SELinux contexts Installation/Configuration (edewata) - PKI TRAC Ticket #2424 - ipa-ca-install fails on replica when IPA server is converted from CA-less to CA-full (edewata) - PKI TRAC Ticket #2428 - broken request links for CA's system certs in agent request viewing (cfu) - PKI TRAC Ticket #2430 - CA Agent certificate list is not sorted by serial number in migration case (jmagne) - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade. (mharmsen) - PKI TRAC Ticket #2433 - Lightweight CA GET /chain returns bogus PEM data (ftweedal)- PKI TRAC Ticket #691 - [MAN] pki-server man pages (mharmsen) - PKI TRAC Ticket #1114 - [MAN] Generting Symmetric key fails with key-generate when --usages verify is passed (jmagne) - PKI TRAC Ticket #1306 - [RFE] Add granularity to token termination in TPS (cfu) - PKI TRAC Ticket #1308 - [RFE] Provide ability to perform off-card key generation for non-encryption token keys (cfu) - PKI TRAC Ticket #1405 - [MAN] Add additional HSM details to 'pki_default.cfg' & 'pkispawn' man pages (mharmsen) - PKI TRAC Ticket #1607 - [MAN] man pkispawn has inadequate description for shared vs non shared tomcat instance installation (mharmsen) - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - PKI TRAC Ticket #1711 - CLI :: pki-server ca-cert-request-find throws IOError (edewata, ftweedal) - PKI TRAC Ticket #2285 - freeipa fails to start correctly after pki-core update on upgraded system (ftweedal) - PKI TRAC Ticket #2311 - When pki_token_name=Internal, consider normalizing it to "internal" (mharmsen) - PKI TRAC Ticket #2349 - Separated TPS does not automatically receive shared secret from remote TKS (jmagne) - PKI TRAC Ticket #2364 - CLI :: pki-server ca-cert-request-show throws attribute error (ftweedal) - PKI TRAC Ticket #2368 - pki-server subsystem subcommands throws error with --help option (edewata) - PKI TRAC Ticket #2374 - KRA cloning overwrites CA signing certificate trust flags (edewata) - PKI TRAC Ticket #2380 - Pki-server instance commands throws exception while specifying invalid parameters. (edewata) - PKI TRAC Ticket #2384 - CA installation with HSM prompts for HSM password during silent installation (edewata) - PKI TRAC Ticket #2385 - Upgraded CA lacks ca.sslserver.certreq in CS.cfg (ftweedal) - PKI TRAC Ticket #2387 - Add config for default OCSP URI if none given (ftweedal) - PKI TRAC Ticket #2388 - CA creation responds 500 if certificate issuance fails (ftweedal) - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter beyond CA signing cert in case of external or existing CA (cfu) - PKI TRAC Ticket #2390 - Dogtag 10.3.4: Miscellaneous Enhancements (akasurde, edewata)- PKI TRAC Ticket #2373 - Fedora 25: RestEasy 3.0.6 ==> 3.0.17 breaks pki-core (ftweedal)- Updated release number to 10.3.3-1- Updated version number to 10.3.3-0.1- Provided cleaner runtime dependency separation- Updated tomcatjss version dependencies- Updated 'java', 'java-headless', and 'java-devel' dependencies to 1:1.8.0.- Updated tomcat version dependencies- Updated version number to 10.3.2-1- Updated version number to 10.3.2-0.1- Updated version number to 10.3.1-1 (to allow upgrade from 10.3.0.b1)- Updated version number to 10.3.0-1- Build for F24 beta- PKI TRAC Ticket #2255 - PKCS #12 backup does not contain trust attributes.- Updated build for F24 alpha- PKI TRAC Ticket #1625 - Allow multiple ACLs of same name (union of rules) [ftweedal] - PKI TRAC Ticket #2237 - Add CRL dist points extension to OIDMap unconditionally [edewata] - PKI TRAC Ticket #1803 - Removed unnecessary URL encoding for admin cert request. [edewata] - PKI TRAC Ticket #1742 - Added support for cloning 3rd-party CA certificates. [edewata] - PKI TRAC Ticket #1482 - Added TPS token filter dialog. [edewata] - PKI TRAC Ticket #1808 - Fixed illegal token state transition via TEMP_LOST. [edewata]- Build for F24 alpha- PKI Trac Ticket #1399 - Move java components out of pki-base- PKI TRAC Ticket #1850 - Rename DRMTool --> KRATool- PKI TRAC Ticket #1714 - mod_revocator and mod_nss dependency for tps should be removed- PKI TRAC Ticket #1623 - Runtime dependency on python-nss is missing- Updated version number to 10.3.0-0.1- Added dep on tomcat-servlet-3.1-api [Fedora 23 and later] or dep on tomcat-servlet-3.0-api [Fedora 22 and later] to pki-tools - Updated dep on tomcatjss [Fedora 23 and later]- Updated dep on policycoreutils-python-utils [Fedora 23 and later]- Updated version number to 10.2.7-0.1- Update release number for release build- Remove setup directory and remaining Perl dependencies- Remove ExcludeArch directive- Updated version number to 10.2.6-0.1- Update release number for release build- Resolves rhbz #1230970 - Errata TPS tests for rpm verification failed- Updated version number to 10.2.5-0.1- Update release number for release build- Updated nuxwdog and tomcatjss requirements (alee)- Updated version number to 10.2.4-0.1 - Added nuxwdog systemd files- Update release number for release build- Reverted version number back to 10.2.3-0.1 - Added support for Tomcat 8.- Updated version number to 10.3.0-0.1- Updated version number to 10.2.3-0.1- Update release number for release build- Updated version number to 10.2.2-0.1 - Moved web application deployment locations. - Updated Resteasy and Jackson dependencies. - Added missing python-lxml build dependency.- Update release number for release build- PKI TRAC Ticket #1187 - mod_perl should be removed from requirements for 10.2 - PKI TRAC Ticket #1205 - Outdated selinux-policy dependency. - Removed perl(XML::LibXML), perl-Crypt-SSLeay, and perl-Mozilla-LDAP runtime dependencies- Change resteasy dependencies for F22+- Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by default and upgrade (cfu) - PKI Trac Ticket #1211 - New release overwrites old source tarball (mharmsen) - up the release number to 0.2- Updated version number to 10.2.1-0.1. - Added CLIs to simplify generating user certificates - Added enhancements to KRA Python API - Added a man page for pki ca-profile commands. - Added python api docs- Disable pylint dependency for RHEL builds - Added jakarta-commons-httpclient requirements - Added tomcat version for RHEL build - Added resteasy-base-client for RHEL build- PKI TRAC Ticket #1130 - Add RHEL/CentOS conditionals to spec- Update release number for release build- PKI TRAC Ticket #1017 - Rename pki-tps-tomcat to pki-tps- Merged jmagne@redhat.com's spec file changes from the stand-alone 'pki-tps-client' package needed to build/run the native 'tpsclient' command line utility into this 'pki-core' spec file under the 'tps' package. - Original tps libararies must be built to support this native utility. - Modifies tps package from 'noarch' into 'architecture-specific' package- PKI TRAC Ticket #1127 - Remove 'pki-ra', 'pki-setup', and 'pki-silent' packages . . .- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Respin to include the applet files with the rpm install. No change to spec file needed.- Bugzilla Bug #1120045 - pki-core: Switch to java-headless (build)requires -- drop dependency on java-atk-wrapper - Removed 'java-atk-wrapper' dependency from 'pki-server'- PKI TRAC Ticket #832 - Remove legacy 'systemctl' files . . .- Update rawhide build- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Use Requires: java-headless rebuild (#1067528)- Added option to build without server packages. - Replaced Jettison with Jackson. - Added python-nss build requirement - Bugzilla Bug #1057959 - pkispawn requires policycoreutils-python - TRAC Ticket #840 - pkispawn requires policycoreutils-python - Updated requirements for resteasy - Added template files for archive, retrieve and generate key requests to the client package.- Trac Ticket 788 - Clean up spec files - Update release number for release build - Updated requirements for resteasy- Change release number for beta build- Updated requirements for tomcat- Removed additional /var/run, /var/lock references.- Removed delivery of /var/lock and /var/run directories for fedora 20.- Moved Tomcat-based TPS into pki-core.- Listed new packages required during build, due to issues reported by pylint. - Packages added: python-requests, python-ldap, libselinux-python, policycoreutils-python- Added pylint scan to the build process.- Added man pages for upgrade tools.- Cleaned up the code to install man pages.- Reorganized deployment tools.- Bugzilla Bug 973224 - resteasy-base must be split into subpackages to simplify dependencies- Updated dependencies to Java 1.7.- TRAC Ticket 606 - add restart / start at boot info to pkispawn man page - TRAC Ticket 610 - Document limitation in using GUI install - TRAC Ticket 629 - Package ownership of '/usr/share/pki/etc/' directory- Change release number for 10.1 development- Fixed incorrect JNI_JAR_DIR.- TRAC Ticket 605 Junit internal function used in TestRunner, breaks F19 build- TRAC Ticket 604 Added fallback methods for pkispawn tests- Added default pki.conf in /usr/share/pki/etc - Create upgrade tracker on install and remove it on uninstall- Change release number for official release.- Added %pretrans script for f19 - Added java-atk-wrapper dependency- Added pki-server-upgrade script and pki.server module. - Call upgrade scripts in %post for pki-base and pki-server.- Added dependency on commons-io.- Add /var/log/pki and /var/lib/pki directories- Run pki-upgrade on post server installation.- Added dependency on python-lxml.- Added pki-upgrade script.- Updated version number to 10.0.2-0.1.- Renamed base/deploy to base/server. - Moved pki.conf into pki-base. - Removed redundant pki/server folder declaration.- Removed jython dependency- Added minimum python-requests version.- Bugzilla Bug #919476 - pkispawn crashes due to dangling symlink to jss4.jar- Added dependency on python-requests. - Reorganized Python module packaging.- Added dependency on python-ldap.- TRAC Ticket #517 - Clean up theme dependencies - TRAC Ticket #518 - Remove UI dependencies from pkispawn . . .- Removed runtime dependency on 'pki-server-theme' to resolve Bugzilla Bug #916134 - unresolved dependency in pki-server: pki-server-theme- TRAC Ticket 214 - Missing error description for duplicate user - TRAC Ticket 213 - Add nonces for cert revocation - TRAC Ticket 367 - pkidestroy does not remove connector - TRAC Ticket #430 - License for 3rd party code - Bugzilla Bug 839426 - [RFE] ECC CRL support for OCSP - Fix spec file to allow f17 to work with latest tomcatjss - TRAC Ticket 466 - Increase root CA validity to 20 years - TRAC Ticket 469 - Fix tomcatjss issue in spec files - TRAC Ticket 468 - pkispawn throws exception - TRAC Ticket 191 - Mapping HTTP Exceptions to HTTP error codes - TRAC Ticket 271 - Dogtag 10: Fix 'status' command in 'pkidaemon' . . . - TRAC Ticket 437 - Make admin cert p12 file location configurable - TRAC Ticket 393 - pkispawn fails when selinux is disabled - Punctuation and formatting changes in man pages - Revert to using default config file for pkidestroy - Hardcode setting of resteasy-lib for instance - TRAC Ticket 436 - Interpolation for pki_subsystem - TRAC Ticket 433 - Interpolation for paths - TRAC Ticket 435 - Identical instance id and instance name - TRAC Ticket 406 - Replace file dependencies with package dependencies- TRAC Ticket #430 - License for 3rd party code- TRAC Ticket #469 - Dogtag 10: Fix tomcatjss issue in pki-core.spec and dogtag-pki.spec . . . - TRAC Ticket #468 - pkispawn throws exception- Replaced file dependencies with package dependencies- Updated man pages- Update to official release for rc1- TRAC Ticket #315 - Man pages for pkispawn/pkidestroy. - Added place-holders for 'pki.1' and 'pki_default.cfg.5' man pages.- Added system-wide configuration /etc/pki/pki.conf. - Removed redundant lines in %files.- Moved default deployment configuration to /etc/pki.- Cleaned up spec file to provide only support rhel 7+, f17+ - Added resteasy-base dependency for rhel 7 - Update cmake version- Update release to b3- Removed dependency on CA, KRA, OCSP, TKS theme packages.- Renamed pki-common-theme to pki-server-theme.- TRAC Ticket #395 - Dogtag 10: Add a Tomcat 7 runtime requirement to 'pki-server'- Update release to b2- TRAC Ticket #350 - Dogtag 10: Remove version numbers from PKI jar files . . .- Added Obsoletes for pki-selinux- Remove build of pki-selinux for f18, use system policy instead- Update required tomcatjss version - Added net-tools dependency- Update selinux-policy version to fix error from latest policy changes- Fix typo in selinux policy versions- Added build requires for correct version of selinux-policy-devel- Update release to b1- Merged pki-silent into pki-server.- Renamed "shared" folder to "server".- Added required selinux versions for new policy.- Added Provides to packages replacing obsolete packages.- Update release to a2- Modified CMake to use RPM version number- Added VERSION file- Merged pki-setup into pki-server- Added Conflicts for IPA 2.X - Added build requires for zip to work around mock problem- TRAC Ticket #312 - Dogtag 10: Automatically restart any running instances upon RPM "update" . . . - TRAC Ticket #317 - Dogtag 10: Move "pkispawn"/"pkidestroy" from /usr/bin to /usr/sbin . . .- Fixed pki-server to include everything in shared dir.- Added build dependency on redhat-rpm-config.- Merged Javadoc packages.- Added pki-tomcat.jar.- Moved webapp creation code into pkispawn.- Split pki-client.jar into pki-certsrv.jar and pki-tools.jar.- Merged pki-native-tools and pki-java-tools into pki-tools. - Modified pki-server to depend on pki-tools.- Split pki-common into pki-base and pki-server. - Merged pki-util into pki-base. - Merged pki-deploy into pki-server.- Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 17 - Changed Dogtag 10 build-time and runtime requirements for 'pki-deploy' - Altered PKI Package Dependency Chain (top-to-bottom): pki-ca, pki-kra, pki-ocsp, pki-tks --> pki-deploy --> pki-common- Added pki-client.jar.- Merged pki-jndi-realm.jar into pki-cmscore.jar.- PKI TRAC Task #254 - Dogtag 10: Fix spec file to build successfully via mock on Fedora 17 . . .- Moved 'pki-jndi-real.jar' link from 'tomcat6' to 'tomcat' (Tomcat 7)- Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 18- Added CLI for REST services- Integration of Tomcat 7 - Addition of centralized 'pki-tomcatd' systemd functionality to the PKI Deployment strategy - Removal of 'pki_flavor' attribute- BZ 813075 - selinux denial for file size access- Bug 745278 - [RFE] ECC encryption keys cannot be archived- Replaced candlepin-deps with resteasy- Added option to build without Javadoc- BZ 802396 - Change location of TOMCAT_LOG to match tomcat6 changes - Corrected patch selected for selinux f17 rules- Corrected 'junit' dependency check- Initial attempt at PKI deployment framework described in 'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'.- Added support for pki-jndi-realm in tomcat6 in pki-common and pki-kra. - Ticket #69.- For 'mock' purposes, removed platform-specific logic from around the 'patch' files so that ALL 'patch' files will be included in the SRPM.- Removed dependency on OSUtil.- 'pki-selinux' - Added platform-dependent patches for SELinux component - Bugzilla Bug #739708 - Selinux fix for ephemeral ports (F16) - Bugzilla Bug #795966 - pki-selinux policy is kind of a mess (F17)- Added dependency on Apache Commons Codec.- Add '-DSYSTEMD_LIB_INSTALL_DIR' override flag to 'cmake' to address changes in fundamental path structure in Fedora 17 - 'pki-setup' - Hard-code Perl dependencies to protect against bugs such as Bugzilla Bug #772699 - Adapt perl and python fileattrs to changed file 5.10 magics - 'pki-selinux' - Bugzilla Bug #795966 - pki-selinux policy is kind of a mess- Integrated 'pki-kra' into 'pki-core' - Integrated 'pki-ocsp' into 'pki-core' - Integrated 'pki-tks' into 'pki-core' - Bugzilla Bug #788787 - added 'junit'/'junit4' build-time requirements- Updated package version number- Added resteasy-jettison-provider-2.3-RC1.jar to pki-setup- Added JUnit tests- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token (cfu) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the in-place upgrade( CS 8.0->8.1) (cfu) - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #746367 - Typo in the profile name. (jmagne) - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token (cfu) - Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17 (rawhide) . . . (mharmsen) - Bugzilla Bug #749945 - Installation error reported during CA, DRM, OCSP, and TKS package installation . . . (mharmsen) - 'pki-silent'- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen) - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-setup' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - Bugzilla Bug #737192 - Need script to upgrade proxy configuration (alee) - 'pki-symkey' - Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode (hsm+NSS). (jmagne) - 'pki-native-tools' - Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk) - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-util' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - Bugzilla Bug #737218 - Incorrect request attribute name matching ignores request attributes during request parsing. (awnuk) - Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode (hsm+NSS). (jmagne) - 'pki-selinux' - Bugzilla Bug #739708 - pki-selinux lacks rules in F16 (alee) - 'pki-ca' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-silent' - Bugzilla Bug #739201 - pkisilent does not take arch into account as Java packages migrated to arch-dependent directories (mharmsen)- 'pki-setup' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-symkey' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-java-tools' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-common' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-silent' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .- 'pki-setup' - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-ca' - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-common' - Bugzilla Bug #699809 - Convert CS to use systemd (alee)- 'pki-setup' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-symkey' - 'pki-native-tools' - Bugzilla Bug #717643 - Fopen without NULL check and other Coverity issues (awnuk) - Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk) - 'pki-util' - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #700522 - pki tomcat6 instances currently running unconfined, allow server to come up when selinux disabled (alee) - Bugzilla Bug #731741 - some CS.cfg nickname parameters not updated correctly when subsystem cloned (using hsm) (alee) - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-selinux' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-ca' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-silent'- 'pki-setup' - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee) - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #724861 - DRMTool: fix duplicate "dn:" records by renumbering "cn=" (mharmsen) - 'pki-common' - Bugzilla Bug #717041 - Improve escaping of some enrollment inputs like (jmagne, awnuk) - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee) - Bugzilla Bug #708075 - Clone installation does not work over NAT (alee) - Bugzilla Bug #726785 - If replication fails while setting up a clone it will wait forever (alee) - Bugzilla Bug #728332 - xml output has changed on cert requests (awnuk) - Bugzilla Bug #700505 - pki tomcat6 instances currently running unconfined (alee) - 'pki-selinux' - Bugzilla Bug #700505 - pki tomcat6 instances currently running unconfined (alee) - 'pki-ca' - Bugzilla Bug #728605 - RFE: increase default validity from 6mo to 2yrs in IPA profile (awnuk) - 'pki-silent' - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee)- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #719007 - Key Constraint keyParameter being ignored using an ECC CA to generate ECC certs from CRMF. (jmagne) - Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding for any component value which is equal to its default value (alee) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #720510 - Console: Adding a certificate into nethsm throws Token not found error. (jmagne) - Bugzilla Bug #719007 - Key Constraint keyParameter being ignored using an ECC CA to generate ECC certs from CRMF. (jmagne) - Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding for any component value which is equal to its default value (alee) - Bugzilla Bug #722989 - Registering an agent when a subsystem is created - does not log AUTHZ_SUCCESS event. (alee) - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #719113 - Add client usage flag to caIPAserviceCert (awnuk) - 'pki-silent'- Updated release of 'jss' - Updated release of 'tomcatjss' for Fedora 15 - 'pki-setup' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser (jdennis) - Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-symkey' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-native-tools' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #717765 - TPS configuration: logging into security domain from tps does not work with clientauth=want. (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-util' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-java-tools' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (config file and record processing) (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (tweaks) (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-common' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs throws 'Invalid protocol' for OCSP subsystems (alee) - Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee) - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages (alee) - Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk) - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages (jmagne) - Bugzilla Bug #698885 - Race conditions during IPA installation (alee) - Bugzilla Bug #704792 - CC_LAB_EVAL: CA agent interface: SubjectID=$Unidentified$ fails audit evaluation (jmagne) - Bugzilla Bug #705914 - SCEP mishandles nicknames when processing subsequent SCEP requests. (awnuk) - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added. (jmagne) - Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs for modify/add (alee) - Bugzilla Bug #707416 - additional audit messages for GetCookie (alee) - Bugzilla Bug #707607 - Published certificate summary has list of non-published certificates with succeeded status (jmagne) - Bugzilla Bug #717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated for tps and ca on server shutdown (jmagne) - Bugzilla Bug #697939 - DRM signed audit log message - operation should be read instead of modify (jmagne) - Bugzilla Bug #718427 - When audit log is full, server continue to function. (alee) - Bugzilla Bug #718607 - CC_LAB_EVAL: No AUTH message is generated in CA's signedaudit log when a directory based user enrollment is performed (jmagne) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-selinux' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #720503 - RA and TPS require additional SELinux permissions to run in "Enforcing" mode (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-ca' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser (jdennis) - Bugzilla Bug #699837 - service command is not fully backwards compatible with Dogtag pki subsystems (mharmsen) - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. (jmagne) - Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs for modify/add (alee) - Bugzilla Bug #716269 - make ra authenticated profiles non-visible on ee pages (alee) - Bugzilla Bug #718621 - CC_LAB_EVAL: PRIVATE_KEY_ARCHIVE_REQUEST occurs for a revocation invoked by EE user (awnuk) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-silent' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Added 'DRMTool.cfg' configuration file to inventory - 'pki-common' - 'pki-selinux' - 'pki-ca' - 'pki-silent'- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #532548 - Tool to do DRM re-key - 'pki-common' - 'pki-selinux' - 'pki-ca' - 'pki-silent'- 'pki-setup' - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser - Bugzilla Bug #694569 - parameter used by pkiremove not updated - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs throws 'Invalid protocol' for OCSP subsystems - Bugzilla Bug #694569 - parameter used by pkiremove not updated - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages - Bugzilla Bug #694143 - CA Agent not returning specified request - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages - Bugzilla Bug #698885 - Race conditions during IPA installation - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser - Bugzilla Bug #699837 - service command is not fully backwards compatible with Dogtag pki subsystems - 'pki-silent'- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.- Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta) - Bugzilla Bug #693327 - Missing requires: tomcatjss - 'pki-setup' - Bugzilla Bug #690626 - pkiremove removes the registry entry for all instances on a machine - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port throws file not found exception. - 'pki-common' - Bugzilla Bug #692990 - Audit log messages needed to match CC doc: DRM Recovery audit log messages - 'pki-selinux' - 'pki-ca' - 'pki-silent'- Bugzilla Bug #693327 - Missing requires: tomcatjss- Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta) - Require "jss >= 4.2.6-15" as a build and runtime requirement - Require "tomcatjss >= 2.1.1" as a build and runtime requirement for Fedora 15 and later platforms - 'pki-setup' - Bugzilla Bug #688287 - Add "deprecation" notice regarding using "shared ports" in pkicreate -help . . . - Bugzilla Bug #688251 - Dogtag installation under IPA takes too much time - SELinux policy compilation - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #689501 - ExtJoiner tool fails to join the multiple extensions - 'pki-common' - Bugzilla Bug #683581 - CA configuration with ECC(Default EC curve-nistp521) CA fails with 'signing operation failed' - Bugzilla Bug #689662 - ocsp publishing needs to be re-enabled on the EE port - 'pki-selinux' - Bugzilla Bug #684871 - ldaps selinux link change - 'pki-ca' - Bugzilla Bug #683581 - CA configuration with ECC(Default EC curve-nistp521) CA fails with 'signing operation failed' - Bugzilla Bug #684381 - CS.cfg specifies incorrect type of comments - Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port throws file not found exception.(profile and CS.cfg only) - 'pki-silent'- Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha) - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA instance - Bugzilla Bug #675742 - Profile caIPAserviceCert Not Found - 'pki-setup' - Bugzilla Bug #678157 - uninitialized variable warnings from Perl - Bugzilla Bug #679574 - Velocity fails to load all dependent classes - Bugzilla Bug #680420 - xml-commons-apis.jar dependency - Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's classpath - Bugzilla Bug #673508 - CS8 64 bit pkicreate script uses wrong library name for SafeNet LunaSA - 'pki-common' - Bugzilla Bug #673638 - Installation within IPA hangs - Bugzilla Bug #678715 - netstat loop fixes needed - Bugzilla Bug #673609 - CC: authorize() call needs to be added to getStats servlet - 'pki-selinux' - Bugzilla Bug #674195: SELinux error message thrown during token enrollment - 'pki-ca' - Bugzilla Bug #673638 - Installation within IPA hangs - Bugzilla Bug #673609 - CC: authorize() call needs to be added to getStats servlet - Bugzilla Bug #676330 - init script cannot start service - 'pki-silent' - Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's classpath- 'pki-common' - Bugzilla Bug #676051 - IPA installation failing - Fails to create CA instance - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA instance- 'pki-common' - Bugzilla Bug #674894 - ipactl restart : an annoy output line - Bugzilla Bug #675179 - ipactl restart : an annoy output line- Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes - 'pki-setup' - Bugzilla Bug #673638 - Installation within IPA hangs - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package - 'pki-common' - Bugzilla Bug #672291 - CA is not publishing certificates issued using "Manual User Dual-Use Certificate Enrollment" - Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error. - Bugzilla Bug #504056 - Completed SCEP requests are assigned to the "begin" state instead of "complete". - Bugzilla Bug #504055 - SCEP requests are not properly populated - Bugzilla Bug #564207 - Searches for completed requests in the agent interface returns zero entries - Bugzilla Bug #672291 - CA is not publishing certificates issued using "Manual User Dual-Use Certificate Enrollment" - - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package - Bugzilla Bug #672920 - CA console: adding policy to a profile throws 'Duplicate policy' error in some cases. - Bugzilla Bug #673199 - init script returns control before web apps have started - Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI subsystem instances - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #504013 - sscep request is rejected due to authentication error if submitted through one time pin router certificate enrollment. - Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing information - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation - Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI subsystem instances - 'pki-silent' - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package- Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files in /var/run and /var/lock- 'pki-symkey' - Bugzilla Bug #671265 - pki-symkey jar version incorrect - 'pki-common' - Bugzilla Bug #564207 - Searches for completed requests in the agent interface returns zero entries- Allow 'pki-native-tools' to be installed independently of 'pki-setup' - Removed explicit 'pki-setup' requirement from 'pki-ca' (since it already requires 'pki-common') - 'pki-setup' - Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group - Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP and TKS. - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from OpenLDAP instead of the Mozldap - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13 - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*, pkicreate fails Fedora 14 and above - Bugzilla Bug #23346 - Two conflicting ACL list definitions in source repository - Bugzilla Bug #656733 - Standardize jar install location and jar names - 'pki-symkey' - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #644056 - CS build contains warnings - 'pki-native-tools' - template change - Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from OpenLDAP instead of the Mozldap - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #644056 - CS build contains warnings - 'pki-util' - Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical cannot be set to true - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #635033 - At installation wizard selecting key types other than CA's signing cert will fail - Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and CS interface - Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse ASN.1 encoding/decoding is broken - Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1 encoding/decoding is incomplete - Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1 encoding/decoding is incomplete - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #658188 - remove remaining references to tomcat5 - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #223319 - Certificate Status inconsistency between token db and CA - Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory During CRL Generation - 'pki-java-tools' - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1 - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to 5000 bytes - Bugzilla Bug #656733 - Standardize jar install location and jar names - 'pki-common' - Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review - Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable started before configuration completed - Bugzilla Bug #620925 - CC: auditor needs to be able to download audit logs in the java subsystems - Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5 policy mappings (seem hardcoded) - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #548699 - subCA's admin certificate should be generated by itself - Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA - Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile caAgentServerCert (null cert_request) - Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited number of times - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #629677 - TPS: token enrollment fails. - Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN in a SCEP request - Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection pools not reliable - improve connections or discovery - Bugzilla Bug #629769 - password decryption logs plain text password - Bugzilla Bug #583823 - CC: Auditing issues found as result of CC - interface review - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #586700 - OCSP Server throws fatal error while using OCSP console for renewing SSL Server certificate. - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #607380 - CC: Make sure Java Console can configure all security relevant config items - Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be generated on TKS instead of TPS. - Bugzilla Bug #489342 - com.netscape.cms.servlet.common.CMCOutputTemplate.java doesn't support EC - Bugzilla Bug #630121 - OCSP responder lacking option to delete or disable a CA that it serves - Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1 - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #635033 - At installation wizard selecting key types other than CA's signing cert will fail - Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated for SCEP signing and encryption. - Bugzilla Bug #223336 - ECC: unable to clone a ECC CA - Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned by Reason Code - onlySomeReasons ? - Bugzilla Bug #637330 - CC feature: Key Management - provide signature verification functions (JAVA subsystems) - Bugzilla Bug #223313 - should do random generated IV param for symmetric keys - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory - Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on ECC curve names (not on key sizes). - Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple Certificates from the Same Request - Bugzilla Bug #648757 - expose and use updated cert verification function in JSS - Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection of signature algorithm; and for ECC curves - Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing e.c. support - Bugzilla Bug #651040 - cloning shoud not include sslserver - Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to CS.cfg files imcomplete when the cert is stored on a hsm - Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . . - Bugzilla Bug #651916 - kra and ocsp are using incorrect ports to talk to CA and complete configuration in DonePanel - Bugzilla Bug #642359 - CC Feature - need to verify certificate when it is added - Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires auditing - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #499494 - change CA defaults to SHA2 - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets as expected - Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for validity - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1 - Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA. - Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an error to TPS even if certificate in question is already revoked. - Bugzilla Bug #663546 - Disable the functionalities that are not exposed in the console - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #658188 - remove remaining references to tomcat5 - Bugzilla Bug #649343 - Publishing queue should recover from CA crash. - Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and pkiCA, obsolete 2252 and 2256 - Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added - Bugzilla Bug #642741 - CS build uses deprecated functions - Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error - Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time interface is no longer available through console - 'pki-selinux' - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer - selinux changes - 'pki-ca' - Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review - Bugzilla Bug #620925 - CC: auditor needs to be able to download audit logs in the java subsystems - Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA - Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of CC interface doc review - Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with admin privilege throws error "You are not authorized to perform this operation". - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #583823 - CC: Auditing issues found as result of CC - interface review - Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws 'Internal Server Error'. - Bugzilla Bug #586700 - OCSP Server throws fatal error while using OCSP console for renewing SSL Server certificate. - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be generated on TKS instead of TPS. - Bugzilla Bug #630121 - OCSP responder lacking option to delete or disable a CA that it serves - Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1 - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned by Reason Code - onlySomeReasons ? - Bugzilla Bug #637330 - CC feature: Key Management - provide signature verification functions (JAVA subsystems) - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on ECC curve names (not on key sizes). - Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple Certificates from the Same Request - Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection of signature algorithm; and for ECC curves - Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA release -- DRM and TKS do not seem to have CRL checking enabled - Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help correctly set up CC environment - Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in certificates (RFC 4262) - Bugzilla Bug #651916 - kra and ocsp are using incorrect ports to talk to CA and complete configuration in DonePanel - Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object signing support in RHCS - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #499494 - change CA defaults to SHA2 - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets as expected - Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for validity - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke certs in TPS - Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature - Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA. - Bugzilla Bug #649343 - Publishing queue should recover from CA crash. - Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and pkiCA, obsolete 2252 and 2256 - Bugzilla Bug #223346 - Two conflicting ACL list definitions in source repository - Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added - Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key usage - Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time interface is no longer available through console - Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory During CRL Generation - 'pki-silent' - Bugzilla Bug #627309 - pkisilent subca configuration fails. - Bugzilla Bug #640091 - pkisilent panels need to match with changed java subsystems - Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM Clone. - Bugzilla Bug #643053 - pkisilent DRM configuration fails - Bugzilla Bug #583754 - pki-silent needs an option to configure signing algorithm for CA certificates - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module Panel up to before Security Domain Panel - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #588323 - Failed to enable cipher 0xc001 - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves, signing algorithm - Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords with special characters - Bugzilla Bug #642741 - CS build uses deprecated functions- Bugzilla Bug #668839 - Review Request: pki-core - Removed empty "pre" from "pki-ca" - Consolidated directory ownership - Corrected file ownership within subpackages - Removed all versioning from NSS and NSPR packages- Bugzilla Bug #668839 - Review Request: pki-core - Added component versioning comments - Updated JSS from "4.2.6-10" to "4.2.6-12" - Modified installation section to preserve timestamps - Removed sectional comments- Initial revision. (kwright@redhat.com & mharmsen@redhat.com)  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghi10.5.18-24.el7_9    pki-ca-10.5.18LICENSEpki-ca.jarcaconfCS.cfgCatalinalocalhostca.xmlacl.ldifacl.propertiesauth-method.propertiescaAuditSigningCert.profilecaCert.profilecaOCSPCert.profilecrlcaissuer.ldifcrlcaissuertasks.ldifdb.ldifeccAdminCert.profileeccServerCert.profileeccSubsystemCert.profileflatfile.txtindex.ldifindextasks.ldifjk2.manifestjk2.propertiesjkconf.ant.xmljkconfig.manifestproxy.confregistry.cfgrsaAdminCert.profilersaServerCert.profilersaSubsystemCert.profileserver-minimal.xmlserverCert.profile.exampleWithSANserverCert.profile.exampleWithSANpatternshm.manifesttomcat-jk2.manifesttomcat-users.xmluriworkermap.propertiesvlv.ldifvlvtasks.ldifworkers.propertiesworkers.properties.minimalworkers2.propertiesworkers2.properties.minimalemailsExpiredUnpublishJobExpiredUnpublishJobItemcertIssued_CAcertIssued_CA.htmlcertIssued_RAcertIssued_RA.htmlcertRequestRejected.htmlcertRevoked_CAcertRevoked_CA.htmlcertRevoked_RAcertRevoked_RA.htmleuJob1.htmleuJob1Item.htmlpublishCerts.htmlpublishCertsItem.htmlreqInQueue_CAreqInQueue_CA.htmlreqInQueue_RAreqInQueue_RA.htmlriq1Item.htmlriq1Summary.htmlrnJob1.txtrnJob1Item.txtrnJob1Summary.txtprofilescaAdminCert.cfgDomainController.cfgECAdminCert.cfgcaAdminCert.cfgcaAgentFileSigning.cfgcaAgentServerCert.cfgcaAuditSigningCert.cfgcaCACert.cfgcaCMCECUserCert.cfgcaCMCECserverCert.cfgcaCMCECsubsystemCert.cfgcaCMCUserCert.cfgcaCMCauditSigningCert.cfgcaCMCcaCert.cfgcaCMCkraStorageCert.cfgcaCMCkraTransportCert.cfgcaCMCocspCert.cfgcaCMCserverCert.cfgcaCMCsubsystemCert.cfgcaCrossSignedCACert.cfgcaDirBasedDualCert.cfgcaDirPinUserCert.cfgcaDirUserCert.cfgcaDirUserRenewal.cfgcaDualCert.cfgcaDualRAuserCert.cfgcaECAdminCert.cfgcaECAgentServerCert.cfgcaECDirPinUserCert.cfgcaECDirUserCert.cfgcaECDualCert.cfgcaECFullCMCSharedTokenCert.cfgcaECFullCMCUserCert.cfgcaECFullCMCUserSignedCert.cfgcaECInternalAuthServerCert.cfgcaECInternalAuthSubsystemCert.cfgcaECServerCert.cfgcaECSimpleCMCUserCert.cfgcaECSubsystemCert.cfgcaECUserCert.cfgcaEncECUserCert.cfgcaEncUserCert.cfgcaFullCMCSharedTokenCert.cfgcaFullCMCUserCert.cfgcaFullCMCUserSignedCert.cfgcaIPAserviceCert.cfgcaInstallCACert.cfgcaInternalAuthAuditSigningCert.cfgcaInternalAuthDRMstorageCert.cfgcaInternalAuthOCSPCert.cfgcaInternalAuthServerCert.cfgcaInternalAuthSubsystemCert.cfgcaInternalAuthTransportCert.cfgcaJarSigningCert.cfgcaManualRenewal.cfgcaOCSPCert.cfgcaOtherCert.cfgcaRACert.cfgcaRARouterCert.cfgcaRAagentCert.cfgcaRAserverCert.cfgcaRouterCert.cfgcaSSLClientSelfRenewal.cfgcaServerCert.cfgcaServerKeygen_DirUserCert.cfgcaServerKeygen_UserCert.cfgcaSignedLogCert.cfgcaSigningECUserCert.cfgcaSigningUserCert.cfgcaSimpleCMCUserCert.cfgcaStorageCert.cfgcaSubsystemCert.cfgcaTPSCert.cfgcaTempTokenDeviceKeyEnrollment.cfgcaTempTokenUserEncryptionKeyEnrollment.cfgcaTempTokenUserSigningKeyEnrollment.cfgcaTokenDeviceKeyEnrollment.cfgcaTokenMSLoginEnrollment.cfgcaTokenUserAuthKeyRenewal.cfgcaTokenUserDelegateAuthKeyEnrollment.cfgcaTokenUserDelegateSigningKeyEnrollment.cfgcaTokenUserEncryptionKeyEnrollment.cfgcaTokenUserEncryptionKeyRenewal.cfgcaTokenUserSigningKeyEnrollment.cfgcaTokenUserSigningKeyRenewal.cfgcaTransportCert.cfgcaUUIDdeviceCert.cfgcaUserCert.cfgcaUserSMIMEcapCert.cfgsetupregistry_instancewebappsROOTWEB-INFweb.xmlindex.jspca404.html500.htmlGenUnexpectedError.templateWEB-INFlibpki-ca.jarpki-certsrv.jarpki-cms.jarpki-cmsbundle.jarpki-cmscore.jarpki-cmsutil.jarpki-nsutil.jarvelocity.propertiesweb.xmladminGenUnexpectedError.templatecaEnrollSuccess.templateImportAdminCert.templateImportCert.templateadminEnroll.htmlsecuritydomainlogin.templatesendCookie.templatecms-funcs.jsconsolehelpfun.jsindex.jspagentGenError.templateGenPending.templateGenRejected.templateGenSuccess.templateGenSvcPending.templateGenUnauthorized.templateGenUnexpectedError.templatecaEnrollSuccess.templateImportCert.templateListRequests.htmlProfileApprove.templateProfileList.templateProfileProcess.templateProfileReview.templateProfileSelect.templateSrchCert.htmlSrchRequests.htmlSrchRevokeCert.htmlUpdateDir.htmlbulkissuance.templatecloneRedirect.templateconfirmRevocation.templatedisplayBySerial.templatedisplayBySerial2.templatedisplayCRL.templatedisplayCertFromRequest.templateerror.templateframeCRL.htmlframeDir.htmlframeDisplayCRL.htmlframeList.htmlframeListReq.htmlframeOCSP.htmlframeProfile.htmlframeRevoke.htmlframeSearch.htmlframeSrchRequests.htmlframeStats.htmlgetOCSPInfo.templategetStats.templateindex.jspmenuCRL.htmlmenuDir.htmlmenuDisplayCRL.htmlmenuList.htmlmenuListReq.htmlmenuOCSP.htmlmenuProfile.htmlmenuRevoke.htmlmenuSearch.htmlmenuSrchRequests.htmlmenuStats.htmlmonitor.htmlmonitor.templatenotImplemented.htmlprocessCertReq.templateprocessReq.templatequeryBySerial.htmlqueryCert.htmlqueryCert.templatequeryReq.templatereasonToRevoke.templaterevocationResult.templaterevokeBySerial.templaterevokeCert.htmlsrchCert.templatetoDisplayCRL.templatetoUpdateCRL.templatetop.htmlunrevocationResult.templateupdateCRL.htmlupdateCRL.templateupdateDir.templatecms-funcs.jsfuncs.jsheader.templatehelpfun.jsindex.jspindex.templateports.templateeeGenError.templateGenPending.templateGenRejected.templateGenSuccess.templateGenSvcPending.templateGenUnauthorized.templateGenUnexpectedError.templatecaAIMEnroll.htmlCMCEnrollment.htmlCMCRevReq.htmlCertBasedDualEnroll.htmlCertBasedEncryptionEnroll.htmlCertBasedSingleEnroll.htmlChallengeRevoke1.htmlDirPinUserEnroll.htmlDirUserEnroll.htmlDisplayCRL.htmlEnrollSuccess.templateGetCAChain.htmlImportAdminCert.templateImportCert.templateKeyRecovery.htmlManCAEnroll.htmlManObjSignEnroll.htmlManRAEnroll.htmlManServerEnroll.htmlManUserEnroll.htmlOCSPResponder.htmlObjSignPKCS10Enroll.htmlPortalEnrollment.htmlProfileList.templateProfileSelect.templateProfileSubmit.htmlProfileSubmit.templateRenewalSuccess.templateRevocationSuccess.templateUserRenewal.htmlUserRevocation.htmlbench2k.htmlblank.htmlcheckRequest.htmldisplayBySerial.templatedisplayBySerial2.templatedisplayCRL.templatedisplayCaCert.templatedisplayCertFromRequest.templateenrollMenu.htmlindex.jsppolicyEnrollmentindex.jspprofileMenu.htmlretrievalMenu.htmlrevocationMenu.htmlprofileEnrollmentindex.jspprofileMenu.htmlretrievalMenu.htmlrevocationMenu.htmlprofileMenu.htmlqueryBySerial.htmlqueryCert.htmlqueryCert.templatereasonToRevoke.templaterecoveryMenu.htmlremoteAuthConfig.templaterenewalMenu.htmlrequestStatus.templateretrievalMenu.htmlrevocationMenu.htmlrevocationResult.templatesrchCert.htmlsrchCert.templatetabs.htmltoDisplayCRL.templateunrevocationResult.templatecms-funcs.jshelpfun.jsindex.jspindex.jspservices.template/usr/share/doc//usr/share/doc/pki-ca-10.5.18//usr/share/java/pki//usr/share/pki//usr/share/pki/ca//usr/share/pki/ca/conf//usr/share/pki/ca/conf/Catalina//usr/share/pki/ca/conf/Catalina/localhost//usr/share/pki/ca/emails//usr/share/pki/ca/profiles//usr/share/pki/ca/profiles/ca//usr/share/pki/ca/setup//usr/share/pki/ca/webapps//usr/share/pki/ca/webapps/ROOT//usr/share/pki/ca/webapps/ROOT/WEB-INF//usr/share/pki/ca/webapps/ca//usr/share/pki/ca/webapps/ca/WEB-INF//usr/share/pki/ca/webapps/ca/WEB-INF/lib//usr/share/pki/ca/webapps/ca/admin//usr/share/pki/ca/webapps/ca/admin/ca//usr/share/pki/ca/webapps/ca/agent//usr/share/pki/ca/webapps/ca/agent/ca//usr/share/pki/ca/webapps/ca/ee//usr/share/pki/ca/webapps/ca/ee/ca//usr/share/pki/ca/webapps/ca/ee/ca/policyEnrollment//usr/share/pki/ca/webapps/ca/ee/ca/profileEnrollment/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m32 -march=x86-64 -mtune=generic -mfpmath=sse -fasynchronous-unwind-tablescpioxz2i686-redhat-linux-gnu       directoryASCII textASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract)ASCII text, with very long linesXML 1.0 document textexported SGML document, ASCII textC++ source, ASCII textHTML document, ASCII textXML 1.0 document, ASCII textHTML document, ASCII text, with very long lines?7zXZ !#,] b2u jӫ`(2 oZe;aTpzJ{x==9 5by|{:nTP4XL&:~}0ؕX-S{.ztm>aؤ嘢b%_Y6x9oioBKQ>gfmюm?SzO@a͓ 8Jh3-[DFB"MbS~^hM̚EE|]j[bj 8=Jm2hlA 7J! |=UѧP [SuNF 0ѽޞ-yT$zJJtv n6VEݏNDpNh E2P׉9ƍmgh|QrE%R;gNe|CּLaJ[1rだUaBh*LjwB=7c$ᝨ}c9&_`~߂AY~gj Ϭ;Z֔+GEqw>^lzSFžK3:yY+Kǣa3-H}.@Rr"P*`@._;- 7l/"wPحb+8zd@a?_H  7,12vLLQ෇AN\7XBkn;QY+tx *& ;g y H k4D_ K0aC>o]!+7p 1^C~u2=ylG^Miq*bo(`%SB|[uF5:? S!õV_Lr9D?ɛCH 11eSJBPe5rViηؔhO/s99G$KE&d ^Ձh??< Mxpi.Y.BWb|6DOJѣef{&.6;N4]LwjQ^x$^زֆfH=-(ԆThUͩ2| ݦrC1&Rfw!i-W,39$M,1bNJ%^'8>|Czn5߯9%WvvNէ|_Tt~э%X!׺Cr~xB$p,qY p1j{7k9,/[%yDzrirl FP;kU)H#* UG+ 뜈~^p5ivX$kIri v)$9P#˜͹ ٻS5gAB'V 7>a)_KUqRj2:&-n;NwQ[k,G*#YW$R!;={A`BX!pNaZi-ˮ/U!eX:| v oq ۗ>1f8e"̘(ǘykЭ= @ɡ'נr8 3ߟ'}ڝ,=5p:S5 G%;ja8&՝%o7jܺ+~$r*~@<ġgi5jk+F-hǹ0XWZD൐ (~*&' te (HS=?'POu_;&MRHd`ɇg$[-&, s'95%)Ֆ8Gh6ā}'Z|f 3d^n|\suqy CxXS WM"˻Z$> >Vvz4WZg&M=}Oͪ^V#3đ >nnI~}KMG[lpŃYZuݪU7"I׀@p][C6 N@M$uk'W}oWy'?#=ߑ ^«{] UfFD3p{5mLө_CU] S-H1i,BJqC iY,32Om v>IC 3bByeX$*t9MWa>Ͷe] 4 +wpH˥L3o>mi˯4ցN@">[U*kSMav%Ә0r#LoRF x}mWWO`@~' NMV[8Z,Iij6y0ѽ{˔yC&L gGQ;5OӮ%_B{Iu}oOMcA](Q V橯%Q ^d)@Dۭ[J^`* `b,slBa(N.d#׃n}w P8GyLbZ詨ߚΔ}jg eIF:JNr_gHa{DtHjU8H:IBo+N+ s2G}i3PI%"ia+cMdǨף6 *-hEn 7g48K6ɋb>kA29,u4-fbbF$ 2uddfw;Y 'GWIm=x@sByǫ% 9Puunzx'9ldk=l;UdjdMnv'K5GGis܅~'&k^1nGMG• CęKD#I<$)s̲<f:bҲ3NOѬS'3%$TeUےzLd!Z`Gr TP:AnיUS!A!u<!Q&`F@kʹʹ36PK9oh\uzƆj ?NWbv˧Ф_7ܷ4- }Tm\~+d}]&1F-z_DR _ X21X n"͞ԡå6h|탏/X/m:I@uCAhq`GwtnLjgQA(rH cB֝$C6ۄ HԏFC )8sJ@c5tebiz ƻ*ct,bx =?<'bxX /Xxeۭ) )mVJhNV4yܦ"럍8P&SJеR |ehu6u'Is *w 0އ Ey8#}! y$Hv 9yH(-}TG2Ye WOIKC)'Kn,dYNܠ5N8.rv(I^0M ~uOrY֝>><  Uk0]ngZUkPc@!<v<,|o< /~%zk|O琨 0d!sqkJaK_H5;ݯӄOl; ICǸ ׮=P꬙B/p69^esopґ5N]Sm$ՉDkkc)rٛG$? ]P`q"zUgo0..tNXJ/m8)ϩSGzm _"dԵY _aoL[w: 3Л>X,{/ tWw}{IS͈ſL*5֗s`񸵋^I P1FRa[*θSʜ{~ln&%. B%j "jܧi3~M@J1oA\w ^wn.YQ/^ 6jaN6&`˓?T(6y#_<G\W]AdgHu<'[Q{C6x̹ 4~u0 6`;lm[o@eZQ{ݐ@kXw$, f@n7HF``2J]z:QgG`1 4s!MT_V,hL__ F1|N CmUc+ &zCe_nn۝E@{[Ľj=wbu"+X\[ CRb5Toa҅b[lK Nxיs-{TuaKv >1 =7{wǶmt7jTak`@R[5ͶjO0ټX|(MߛVt}mTP/Wʍ}*wT@!oʊ^t2Eu+]N+ol4'NѬbUPkHhl_} NAϘc촺1 #hx)sD\ n =_lbw^ik,тǏ3С)4 n֊k:T$iԶuT%#WfKɑww Hj3+[hhA w?iߦ(Yj6 ;r~,/8'HoBs]}Tm FwpI:5 ׃Pzc="W:ͩ2 |6(ʴ]00Q4:+{{Gl0 yJE1Dh+6F(8 T0PvRmOr,exJvm֙9;pE |BL[<AVFHrPG)TdJCOϓn(U\ɭ,j5jjcyjE>xƼkm'Қ蛌9Bc0a%[Jo)K"#/M0=7X92d6- A0 tEcOx4K ~֤ {ۥD Q8E?H0c|Yx<(,7;^Ç}k;q @%I|8~OoI=Bl7С|k)SӅE.םi8'{5_<YQI& >y@9WjǪ$yCHq_Hc\rN-S8Y9Jse]]肀WmTeY6xuҵfNn+.|%JJ,4Հ Ur!ւqU)2}HX)g],)mCE*bHRw2, vKS i505 'dt?uF=G;wl 9XLK&Tڹ!b;)eahyrKBsL|;[D̈E@p#Y%izBe4W-!:6{rxO9JWO謒'4g |j&څ> hϨtL ;6faGqyVBTXvC_.i lz"dpC|54oD3* …&`3ЙDEMޭ*Z x>8;E>,Hɲh?}\gS7Ŀ0ŲrOug(=zP2`Yu(߶d`!" YS35\$׸zk'wIєyQ5D[I>fSS؜Kr`g*&nف[6()(@yWZ8%y-X9gjK5T}*y!$8w5~3[92;0b@#:8fWr9\1 hh+f^f[=3=Iz*lGH`,G;e*NRzGOUr$6nUQFi Ev!QZz6)jrca2)ͬlˈ֌߸qy- jY_ xBK t睏3qLmsv = ǜYH(8L83Po,N32HjF x0wdb-l+iv.,J_ dWZ.zXQ)WQgDm "SGjB!IQíGqg>ysG^[gFp?PX^iY I7X>"bj-eq迕 ~uk66&h)o:EGMQQioEA]rLl +Ž3 oymp%3Ԇu\-ҫ|;0^KȍUZ^hFiZAuhNIvóxĭ ]:>`0J{0u=~L:r:6%>m$!>|Xn+K(Zx8޿8.O$%0p$u2v!{.3Kn;sFE4(a)۴7.or[Xnc;6!;l %k3#~2Y tez W%UHqXG-&N+&o, bWG(|=-L2,6=$OZt{c\5#g\G6пkX5xznbqobro&⇑VQ& قpQ pR*;E%!Nΰ!dkz<떂6Wݫ4zo@C~Tqte>:VP1/]AVYP@\jB?>#O %u(ՎlPGcf.q`-/2yM$ gB =1TԾk'.+\xov9CqCS˫1 vQ c*J i t{ E"ČE 䞡ڼtmќqmFKQ=q5Ņ&\yz1HO-|f~x;B ">;a2RT5TFI_j7/䩭5lj;@7YmH>[.`"*Q9 r;G%UqT!A1͝.ހ?yApc"-pDB䵪cWQM(p2/%xB7ӟaKoRcJ{2Z79(k3rwԤWY֟zxр[X(*8ztaJMJi՛èi2]ϓ7ޤKv/zIBzAL]4;I;>k:Z8ٓu?A FRr*%ЄKeMBSb(fRhgz?]nnn>X?!>m`Fg3P~^%3΍|=(ya}_\ $>imY1 " x!fL|YlЖ7DOm c6( W ʷo8p/rG`YE Z򰶊17;߳;_ȞƍR5.VT?{}X!T+Yׇ m-n}t]iqFT^Edux-8Kkw1,Ԡ̝_uCf2?Yvd)d &X><<VjxHV):#~ L~ʲ;S^2QDqpvaMɈZ2XpJGq@|]=k_]8cK|עTk_ܔ|:n4 yxǿ*Mr^w9`=Ən! !JUArW91)s_Fp2$þ oAL6sVYh$oXhl(A 9ln7A#4 X,Iu |]:Toѫ+ %m΋`дIZ5@O[^#L>c[zsrACpWO_]u bѨ]d%h"L㜅⇝w$*jf e`,\4toV?7؟Z ;bo<҇ htTcyrkdO.Dg:]ȸy+=B3:ן? ߛMZVޓYh*d~M29.kk&c(KߡRʹdYMl?2uΨaש$m-'F$ L䑡8Dgd`"ނas{zPxn{n >6nj1hꭤ&0kMw\ 4_rc5B UC{bBͨHE m'v@yZ}Z[]zBh4DÇφ  d(?`kF3 r 'Aw=VqCMQ*Eؙs- WIh7MR}]-q8v$Dg<΄ϳN$1%l4F%R<@' 3hP@n?Q+ ZXt8%hUœwsFP ^.$7r84fm' P]luMm|bBBeNIr$"d|H5`s0/q6|Mz5zu@Pb'Jxun`##tm9 \(:N 't2N.6ienM^+9Iʍy#Y2|P?9\Re%(/K|v$GwEXNKErM>CMl%A=>u#Х jow^ŏw7_eȲ6zc$ IfȊɄzjαg'Z.M@&/Fٙw17fEx;;ҥkk(qGGǗ(+À ]on*ERm~!lKԃ.m/I/ߥ^"Rlsٻ6zh HFk)ђ2ya8 sL7k˃35KID/ 61هNO7e,/ۈ׮OڥQ T8<՝V>S8~H3,G$9iK ǯ$kY*{=}+<*tGj2FNpBAP h%L OYd;iTQ/ irm8;/ UNOd=,hB ۵ġj>64N 7̝ rŠ7HԈ ^JɇuW! O۷\bY6^k-!F" w(XП/QF0a{m_A]2j> *l2ԑZS>,6]-G\%蜐"`zhy fڱUq4xy=йr2W7#IIw}kx>R:.gAJ*+˲m}Aqk%N=7mTpVZӘ0/1 K T$U)&qog/ ήL3N ޼$=Y0k>󮸮\a`)9\BhcUvs30uh2i.0m?Obĺrl i1OVѶsT=RI 4EL ϭ.!$edpGw@h3^-OSn{h;cxݭlof;l9Ȟ%艈oeq('0ӄ”{)`~T2$yr&W]rʆJqs^vˌRUqfHP~B+#QS52Zhssk3TiH *bq]2Z2kG=u#Y 3&Θ߫&Zv>6AK)6@II[Opk=̨H|E5XN<$fqס&K WWlIM_&,^(k<9<-DIA, nNZDS cBklmPt5p lUV:B|{AUOf-TA`sU$LX,ie? bgUϏt,'fV\`6Mz\ K6 '/.sp]T-9M/Bb:-wQQ}_;D;@t:Ý9!n7u~mHNס,RMڌOú3 2Yx=4[6PkQ~Q3 *$r4ZŋwJe뵣jf&(+dgt 3/Z .6qHVuۍw?ѽH{4^/;qpmYFp3ZwGL a>\j$_6rck웠W:\yVs9=FZ; ZsO XZ(ɨȢ׉ <ZTW + iv""jCpg@ŭ=:OcѬV*YA|XJ}U RyfzKƧCѦ5=.`#a"5mRIv|3A e1oУ|q{y c9g1kEM殐7&_v"d8rIP *BټKzUD4ǰ%w l h+L0lg ܑa⤰S=t H}GںˍR. FѦh7CnQoxc8S׋MC}bM;ϣS} 䮘c?F94'K~?Us}j?J? tz_!  ȋPcnt]#Rptb#.wHżU}hZ($Z0/X[J*?\ߞVLaT0)t }+|̒ ;f @}C=[+ BR$u>Ҵ^k2y^Wg[ｓT3hS #T^){@#'$H)ĽdƽDU˿tqk["XC б\U3Ւ3Z\KОLwJKIآ[AUj6Z0=v"o.׊,O)jD"SWzh81N^Xt_~TЂa!*X=8D7]V(<%9yuۊm Nbg5w@{LE~"'Z&ү$iJ'9D?jOY Ј`sә'*#9!+qW+4%/7o$А|&af;P xUs)`FO0L*!GDVO\A}+y8Slee]ph}$ȠZ,',gi`vڊƦaҔ;}k-,&>dfC[+sqF JtPm>;LmFWU m'1/5*2,e (@؆ .>X @l {`2v?wiiה##(P?q!0,j;e~_&֡YߐţkL Rd|R +[o[Qׁq(VX旨ڇݣhMQvgᓃ/ ҁd8air4'(Ϯ?LinN& pIOU:]d>r̎ 1'z7.+4ˊ f[VI]tz~f1z]0Q'+ Yuv,۞_8֥ܔui+z%iVk"Mrи;͢oһ䫚|3䭂aWdWB`oy㛖sLgk"Y}Ȕa֋Зha_S爅q(=x}Ǯ\n LD\yoPǗ[t\d9+28yMMѠ N3;M+VRHڀG/vR({~ʢ]b*MpwMCSVѩѦr^'Ů0ҡMƚR:o͡W1n)We!b*4;h_EN– SstQP{]^E5u2XtG68kVJ-:Ej@bvI5% TĈ.p\&ڰ)5CslohKO(V8Ù)ˉ107} $]7g|+zq#+B^@4o6]GBk{^7.:utAZB]0]iϼ?UNDʑZT0 j'usbG=UDŽŠr{ohUoeo K?/x~5ʶwhF~>.=m)`eu'i,Th#ƽ b5 N 3*0 !FA6t2iK_ i,,<N˽?˚|Dy[.#E`ez7.1*n} 1j`?}+ :v04: CadǩQ26D_ [M囗nhswNhmђON@`Bk<~ѢkoZnW1K` Al1?4ΐCD\UZ~Ⱥ!#TF m*e C#D`[92-t(VgAҕcnU&F\@~iRfTdg/G{;AO^cO:d%Z9a5f{Eѓg3('ggN$y"O/MK]2~  j%~R1eĭ-`x!|-v5J 0e95cӀq9 camS?f7LUo gv/Ga"NK:xM2(WΣishs(}t^O#';&m]b,B!(^@"q5U8@Ǫ~_!$pF2 N [@ L!0m5ɝRnИV$ƒCC"q')@E`N@ RjV;ڦta8nq $9SN^ ^s.X# ΕXaMj 5B5{g X~Y#߂:Ld ӢBr-]/LaLsBZIk} hd۬+~_k|?[b螙( QIj< г5$oug/Zڱ#A[6/-!c֐?NծKR 9y(mE:řk GJMw@s9'L@@%@Su [HC? LY x,s@*(UKs0^ұݒbA]J՜8˾T*LoƸO&9UM\1U8-mCBUbN?[?nh>dxeJBM2Xªmw7YFb#^+܅-:_}_|nQ!x1 90~^9GVt=Z ѱv_" jNlAp… <gEFN;RrWsNQ bɶkR lR&؍_ɭ8c+ЛS 1S[ΗQ1vL&[mú/Msԣ)K-(0dq1,>.ِ +f9xc˪zja$kGvL%cF?gRGRgE:] 7v.}zb 0T*B:"L~P)OZ٪QhVy&o`NyDd7jj_SOyze]cb0hhhL /ο3/ sc%qcFCtEW|=+n.ݫ Zq&k~ kh4.F7a^(!fw 'f|gm!{[^ E{Mc pSTy = 3{Idg~fzD|V[P>Bo܊Ed\oD?lbT\g$$ n/s*薁}Z,jl1 t|h '|[VM> geF#l%VMR}3S2qjĶzq*Τe[u()ՌfS4F$}A5s- ב Zg*QdΰuB=A+chC>/LEmz\"Os"iNfw.Zle=o =$\}!38p|_ ̀PbYnYX JyX$r}p̷D-WIn@7).WzENk=pvO~: AO3 rM^\~?j2tQ 9olK>3=lr1]7~|E AO?-c8Ī|:_Me(HZ,cP y˕+S1ԞÁdzР8\4'6S[\_Xci+?]rUX\HT+秷kQa!]'^ˆn2 6F TٍРm2ӚkL83_٠lE׎;j+弢*Od! Gd4^aqݛ09IYD̪Izk?W؊cHeoXڑɂՕzDgN.)CF "/Q -ja"?͋4X< M8{:XؗfXݳ,M9Vl $7Nvk;C1j| =0>EٞHH#w]YkJs[3P<2|*_4x晼m yzI@sNr2(n `J^pxT5A[J*K5@~ aE3}a[B.UDZ8x lpaׄ1T,oU42^X|h \qŖ<債VZHoM2܍{mnmSUÙl3Iara`;1dV;o:Xěnؾ7{!+YsѷU6i9>Tb!s3+\rC/Ͱh͒F/4\'VL]YeqBf괨cU}^mʢZ ??&Svk!pydixiܟ5?/0 ;O9 >z|.ha W<׉H^e'HI**V3p, FuuFz)YOmpF.s0D9*. UzhwUGW)"ٶ(/[tg!q6ď$U T`׈7Vjo{αխ 4U.*RȀ}}U{m}}[6plG5zc{l7atS1[-|~tl~hQ2]2R|L*$0P~w,z]{׶_ 3DsMQuhkr1l[!փn`IZl"rk="A-hЄRa%΅IN H O,@x"I)8b$+yյ)mD k)MVh*۟%*9ǦC޸1OPUjG#BQ=: j!?ŽvL/XzǙ ORNG8_uzJ(2{!bŠƉd*>D"2I65@MbXU'SQ` `e"K0BJz,iľt[4Jc] dKKRnZ'6tnbI3 A-pa`={-bQ[ԾG3\6NIC]Nѽ8J^;6TΝ~~qvjюC./w^7*[,+]=g4s9q~RsS,S{3lxwSB@)fhѧjkJEeWj/H)lj\Kv^ "v"(Pu翵MIe: YqC韑mg;wtpgV^c|o%ϡ@31{HTpSիUT={xFUmgYZ-rBG{VJfoo,@\}kJ93%0\}I(? $O`ʤU<<,\6YߎY/ػnaQŮ?\vW ꣥e!W̶ ·]|j, bǂD&Gz$ |d T͸cD JB%Ư5:W1Rg%kJT# S?DNZr `BqK`=3)F{:*K)FgBgx^Uh@73y^Q4RfcbLJb*>K Vr:\9ݞٜ#$2+)Wa? l8ZGvHf^7MXEYْbS>{q} _/hQN-TRzh=[1( :O.Β+|pk[AYc@*s&%\\9 P&g vUx2rcp ыrqrDͺ}ѡZ jBZv˭sC"z6+x>QGm}9sw5,7(?ꕴd_V[ldS?c7сTK]~ BI&QA|1MܺCW܄xY>?}yd D@rdf ^d$VմLLM8ЫU nd{Z"!ǰrteg|)職Gܪ_JsB{PLow]Z.[f@%7zN iB4M䮃V\aIZN :iH ";;mH?Q'2Go\`E˝dܲ)lnu4|MTڪ{.jDe)yق&;o"/qb/1)4N`72WA)g.iϱ +#)Y7!j9HErc"IT9$d+Pg)w'Q^8sO79{{* .l}e wtq>EOTդ^]5dDozj˲=Dl > ;&VBWԯY( P= :7" iՌ5ﮬOsx,t["12W}(j’mcp58d̞U%YXQNr;2uZ3g&V23mIvz5z 3@9/[:xBۏHz y'$ŔhhkҴ eҹ X blyj^%Fk؈Q; 50h\Q†IXYZ1TBE;9Ws^ۜ\׷,Excayt&VbZ6FR1}`ҙy D!h#75!^~zEKwJTP0&1GE(6lD_WSr[qR@ˇ];/|>(Uzs hla%xjbo 2یV ^n?S]3!l7.)%0-.mF❓Yg sKd8Vv]ogNL-s9\ZէRbgMݻ!R/&G"$b.Ac(j׳՗nA{%F|vml2${6zj#^}p] =!:_@F5XOTlԻ p7., X4 >Hï{  R8uKe|uj= P4sAZXS.,݌7Fq^`s>Ph1f'|\054vX0Of:Zxp[e)刮u;ic8s R դgJ=`aa)&MB|IЧbb'?)-IT|>"l_d&h:H l|")vVzr,>FZ~oM(7՟E&Tse{%qGXCHR^NH&&~v'4uџMϾ䟱^$G Z#.w|d.KZKV'yZT݋;! ϺP*DjI+;OI]wTUGD MRX籞ݭEzW trd_ʄ5Ť/薪x,st> -hP }t 0Rxܔ܈rmؤW[!(ɭVj+&QX~ 'tkJ!S&]df]:}hol;Pa簱 yĊ([iݔOh[}cznxڊ:Cu;crP:GOVc{ 'G$ YL/G+ÃܕfEGU1"_4LFssxeL|K\2W 뷴?VPL5k_B* N!'/sd#@ qt}Zzאr Htu2rQx}pg~" 0F5!lK[}u2;HP\cCU+vzbd5{0DB&r޿Ч4exK`3H"LT>ӎ4mWͥn6*&hqF5@IA-Fш1C9oW_7I> IB`PMX,3ڒ%4êj<ùt$]:qfPNs± AEZ ƙ.#rE ߺW= yVhTuM/Q)ay~*0?%&ZVʠmk_7Hfmu O4_l /](;g|USUE$[ge<I^p YCPoDUKe݉doaЍ<.ª(-IqowP$ś`37M|l?b9"-"f?1Q &,9fwwV{ yV\eÞ;NY@CPSH]Q {fj }@7DGWE<[[Tҁ s+6M|# :;a1VB#ZqM:%6@BFE;Bܝ8Rx"ݣ~ ^FJ> y)& HE7b,AbM ~M ؒBb|r-32*AK>U,^ gZr\H ,>W,yGM56\Y51݌B˹~BPv}!?]:;O= XufHΥ+7괎mOv,ΛKR(*(u*D[#fqD -S(>Vuwjє^ψ˗wCmgah'^$U#0I&;)|%1LKJ4#?Yz1p&[8NbZPڅn0Hr|1,B^aX#@EDn[PVeB\} <5 "VR*GʭăQ4Hþ}HmU dSt(DKvo$ќ񐱐S?ފƋcu{K e#MTdhiS 'eGaLגC+tdZ892|eJdkM52bjз<{Fp~ K$hY ܌R=xKb֬f}QrTL8=/E^%V5g*f!? 5(fAp!MI;{LqK4*dZ,}y;VCJ{^W+S̜?Qi+Q f \lF&n$: >WH?ֶj!buZ0Lð{?·80"ֽ&`EnSܙ- SeTkۣY}_Bf4,hp*ɏ uU-?]hH]MdS_L0ld8^3FAYt YSf+nhJ_Ɩ>QCO3H#p jqCa@J HDV| gIOׇ21ta%q;6V*? G6gR$c!@H54@BK^ 72+1|ZD$}zfvhS&(+l%ƗO+3G;~&Hw8suk쉴3z`[n~%tz]ytsVH` rڣY!fl'0p23+TLM_QډWB tPIE\ F眭MmK3U)< ON_%M]N/Y636:R°yNZ?;䮱<@""n5C nj{Vgv~'/'h\<䒧P*@c8o*4`So S ZC^6nowLZ4P{)ezsЦ7ѣsdJ3㼃rv'ow*+1, 8{Jj=+k_$bņzCĦQuzT5儁8OV`\2SY%M7\,"Iov" I.ZbtZ}׼(?&PB5+Xؒ+A,iL:D׋+j4KaTN"..BM4B RuQ#PA ;y\_7˟Hx+W5 "O}> iD`Q`XH[nsV4s$`+gs8z]`ȗ5F6LeL8_6 01VĜ7hj}SD( מz<44.s+\h Z5@e`IM&#Y |vaSB cDZc$v㣈ޝRf^.bcׇJkm&npj@jmU$7'ixW\ZQEfn#0%:+h"{dϡW YX]>el&6;@.lb|3QoönKW=#$P#l -tg#ɻ#Țn94^ o Dur x+}:#SO 5^!N? hLa}`L05-o0Im_&2A@E$c zb|V"މZZo#iC)L}!V]9 JCpC1kO1l뵒X? .9DT7.$^ y'_0.+Ær^b 2$.kM*E&sm/8~3穳#1q #M ]_pi ;_Q" ৶Gé%3an;`S]AjcF l4|eu]*m%=f|_ʉ=r$JeϡN?=T;[ &[_3cl n$ܴ-\i CPrQa7tb9ivg dqi+1qV)LL_SH`^rۀ|O ʿ2qrb(݄}2Y &^.WMD'Nc XQ6zC!Y lP1E_ە/Ot R!BK~PGG<_/[wÈBoeӭo#]L"T*HOeoʳ؝lܚ2 U,\2n<Gm_ 댛 r H !9۳ũ>bb >'0`6ľЦv9XD%op.]exs(7Ʒ3C\c8vAwpkI?6(+qqB]^\HGBc3' M04َ 5/+}O %&M!%.00[`b 9YC| %N҆܃ /n|ɂ6Mssw!, ТkSW|FDqg-sC3qϚ" -t:mwQH}hWڕ o("į).N4Fi()"Uс u:E&XI@h8 >MWp)oGL@\݈))(5!W7N,? au>Z9%}XxVN>o}5۹ Mg5Z@J+P:X˩2o[ h Dbv6wŢHWWW99['[`yOAwbMnFH 3qxøL{&?i]a7i0iHMLw'B;mj#k碉Z@V}E*4=FFD\G*T}k))IW{<6R8^|"J0U q Be{ئvy 7=BTn }QF(|lO5 x'm+.iGGC˼^uGYʉC٦VIG zY2ɨ.*>6J7>:%wNpIA*"(Gz}yLtQtb7aXyQԪM}o>xUe"D: ~7Hh3yC@mN c2Kхe9#|@>YP{XK!.lfLe)͜pѥ^r˓mJ9bcԨ}:{bU~g+t/e.ImV]vQ;G50W~@שּׂd* Kuo¢B;ɋ~#)o6˺p+Z|t!##>+ćdi)=7 :,sɴqH(XNq|P:/Yi?PPvާxMZL[׸cD`Gz.K͎ MXxW X K^NÛNf9[X4&4Ɣڱf@n&\$NT8) ulؾ#jP4\H||Å6ź]GHV<7f2-=آ5,Q\袅nq&TQ2K?8 H]6@N>Mx"BW?3wYA: y[&&GD2=!jDB: Ia(: SB!v+zstTTxTvba4kC$Z{v &!`?x;+df|"#y(LoR ͊6Nǧf跳 6r v׫2'.Ҍ-)՗C!@@\/vjB.n2;;sTM-#{*d=J!ViX"<ߋiɑ>Dx46tzz@ɑԵ4'uMV6뛿k\fR Q\,uLU/wrn_'Й uU{1v2"%C-5t/ K[4O<̎K͏"vʶo,m,D腓8lz4AJԠ oa.6;C0ՏQRX᧓>VՈExe=,-+OSX1E5rYӼ&2l [B C4jh$]Aݧ$isMԳJ/,͞Sgy26OѴWFp_~GkUe9f|tjpa< En+ǿ|-w1h|+#OmLÙ8pjDŽ̦dA1@#(nYz&@135PTVl+ůÄpVvͻ U,"ÇV=҅}^{ƾ9@ѼLHjϏpw`?r7\nƖCY |PfEj}iXKY|cԲ,1>r Ey7qdqzK@Tg3 ([>{?9h4 ')#f<KR@1eO^뢗nɮP+\j,b]Q[=|l綻C53eDs)ɗtnoeBmS.ZruuVLj\V"d"YW{,Cv,ڝG7yg*E4/弗}O5LZ %q[OlV}~?ƀHvĂD* As@{%#3qZ|QOrNZ!;?ž`pR?){wnKFE&HJF+RE4>la7Uފq.[kG@DiHʔEGZЛd+ﶏۏ~J$]#߭ГYHhM@bs}G S#H%ruHt/)u-7+ΤڽX AwP5R+C A?g c:xW8F@׈WnlxSy&˗ !bRQ\G؍m`¦eqyΏ0C-^!%zHC1|:0!!B$E1OմTA"&A~r#K#@]zM8XxH=Ӆû:݌fg$ّHHk|c[&Nh#bԬ~ "~/٤]o+i|t03|'=> u- j<8j2\KYC@dbԎʾ>GRaGj^wA d6q_2\#ݲ@SR/>.Aٺ( k?4|;M/p jzO!6ONJ~uY4aA>DPlh&eSe~롱yq}I~QZ Ao[cj1(Lu;ah9gUK* $1h#X.S{S{:)(ԆubJ K^v(rKfVEy+zft7;FS 9r?&/Q3Һyz,lM8wi !z>b𜆩pJ;Qņ%j^WW.teq#5 }B?K_C\N2Qz(nّX$^Yk^8Y`3v>1 d f.hp~߯R,щV\X14$:fӝ"9Do mjP .Q8X"XKX%UEKn/^\~8+"?,wm"Kl E'r < `dj3lRZgb8=፠@y.~}FCp .G{6^) ֕W(f^v~qj$zKU)\>*>lZz Av2dp(FNbՍGшJ .V] }{ &3M ')HSIkrh+-D\lSF?(5R0Qժ?2D}r8ȹ|.'ӣrF+̤''0HТC/i|{ zظ܊ޛ5f?Qaz5e8Ɗ@/>dhz&8~~CbUߞDA-El%PiUN2@EcsuG@iM!|c/V\!(ERܪu#G{K!,F&먰tQDLc^^:]xՀ`SiN#Mp}X^\'NMܒ%viI^-$g 4۩~`ƦTtO-qEVֲn@ L_M=7\3bW|WCMr{κ{KZ#@RQ` +H|BoKCCeƶy9*d77lB`#}9IU1FQܰ󸱄 sJ:ǿ>% F3 61_6Zq;38g:"՘d7m|MK HYR:Z Y2ۚqXYuW}~MWר=iⷣ*{}}O޵ Ov)i}e&a I?f܌R=VYyb%UQ1Nbq,*E˂َ{n)}g,#18#Nv2>x;} %ՙX~۟ ͻ0X3Y<ۗ$?|*y'I`~+j Ñ =Ka`8G<Ҭ~Z( LM9$< -CXō/Kx%")B=|-/);L\Gƃz?6Y-((lEnHG+lb@|9ëVFdc'Ό aK~Z }L@4Q>YȵGT|=JjZLY N U4R[eL07[s C} ZHE0b {zSwH7qӬ ")ڷz=7]}$5췧LYr_U:v5.ٟN?`ߙ5*+7׾@T`ԧ*.qSxʾ%_&V95a,DYFԃHPVbZl>-3~@Ę꾆F NlN%Fk.aP:ER⁘B&_qo'6:,˽jTԺ=Jpf=+"yFW=9TaWnsӢ%5y&C ϣ'Ϛ58q? /f4dȳ1f\WSomA|#60YNBf#{xH:)f `Ӂ%PrI':idsaD/)ND04E!Wڹdie9f'gP8L[7P6K:Ȩ٠ &hΟByϖv- A;#t{ٕ.DBg eCA g0)w:ބA *,`zA- T".o0`?(yM1sj NZ{ ǙE>,x*7l@Ҷ޽XX[PLg"ͳk5Ū&2ePՆwRet?+zL@Sp2<6A8qd:XѧI=[)ačb ]H/l)4\-CX/˞xRR kq0V&/V6YX#(9P5#ti5bpá88HU|<_0.Hڗ\U>d%8X .7M"KgIOj}B xYH6/lhWn>x /f'5A6,͈~$hmvt i?LeU{&%*nEYd]灱~/a~ п%WgZi#vzY4ʹ3HA&o2;isy?፨+<l`wD) :*֊]-jr]3 ]Hus33 e w[q`7aqwCI{xOҠWp0n fql00IAN>ݾ>!ڂΣ$a4b,'+L? %&8iζajS|tp2~$\ ewitF6fpk_O"֥ mtQVU?wDX~=ktSӼ2 +^a+F\HF続ڢ'7k@2fLV*YrN-!Y{Yv|3AҊg4K]\$\Z}H]ȨK-YlԮ7="s1f4fZ管nkj:CJ씝 |15YaGb[+<Qh8ߐX,--G7|7 V{ڊ|qІ 0aXbxX5=~$yxx' Wۃioj Ş^t| {wTX'|@!%e7%l|2[o0_uMȉ&C|pڻay݊sʎڮ3-C^રwd߷oo&VP fdFGj_j[Ν8zbi죮^izof?؛NYv?5b<[#wY8rrt4ZAs'?  yZi'`YG̅V(+YkQpR=[(Q,=+jBl?KPވ*UiQ7ύ&Aե/m19[+Osrj0}piFN|8`X&oh5:q}M`Ra"[dݮz.-c*5s=u 92ZSF|\ߩ7Wej}(uKd1 N?];[WE`SW) yWT ]ǎ0+M_€ "Y鿣p)Mņ] ~6"% l 4ZnEp_C g<~)jS.&wA aܙ37 R24Zn) gBSWwg7 qQə.XoJo_Tgڹ孑/ _<p'/I=D6 Mu򲁾@Y.~]x2wF2&6=3 5agOp=X b=ʴVxmBd14lmUmР&(8̣oޖigtS{Vi;t-_5J-h:- ɂ_ XStIi!ǁsFVCkvdrQ >lbӀ E#l%[ *1mU *@T!]Y@0A!/912['&f2s86Y @"d-d_dDq0rH ݲW=E*OcE] =yhvY7R2 m>&b:U@Jn7hK*P͕ :HDshom񺦋I7ÄKNWiW_K:aH,#6 O]CtرZ^H bkY{.bjt+3֧Zd8]qy7J?^X e8 QލVLehؕG¥*IjWvgJ$  =<"eMI^z huzyTR,\Uv~6*+vJYN24i3.est!8>S&8o))P4˝$LKe}=L;W\S6_S5:7%Ԅz|X?'}U7Ѯ^k+=1~ъe'njKS)ewdfZE+a\;guҬ@-}jݚvmbsh8oĹH:bBoP1_G2B b꠱Fjt4V.GBտ۳MNj&]W| }܈MS*%"Z: M;/6~LJVУbNP# H/ޓ>,e벓 DJS)>b0nט{XE<(YCgvT&ad=h]e8alqX҇{j䌿H&&6  JE/ VQNa V i>k2x%j}r%=Am!:5[&-]7-~%D<bmhda-ldoS`fZW^N~>{A/aB~r{pz8!GI`D\63 ~,*ߋ Wu|Z=ڝLW7B(1޿?/)PF. U3 к`;!ʃã"tw>R4%q]+Ys=enmf)N(HC)Vnˮc[TKlddV\l Se,7O 0-it:3o[.%4ƴEZlAA/`,.arHD~\<",UO`y_ƨ#8)͔XMzW-/b<[ g?8Gp~F(:We=ѸD4'{kvodk`?R8V]tu7 r U|T ;="q;ΩVbFJEM~Z5n4&`fM{Ӄ7h_n"\}ӗQ` NT37VRtʤ-p8@lU:sa(oAQ>hT@vki a3J0`M/nɟv8肍N؝:%-OEWՍ}]iKf:p~Uoru1vmB``YI_}e "%2yl¼ f/*70m:[Uh &MPȁOW+V&SS6j*us}$fOߙ$VbzʗD1ddaycSQe*ߧCEDV-׺kx.OsQ.#I$ n <~h&Q%_yIԇ&vGqJV1U}7O,k熶fvLi*K?rJ s<{HmSXは]&ԉP6cEF_}ҦMKo#ڕ|iv7;Ȅ0)e<+ƛ[|vW]{| ү bƗka(Uufk-N3u,c| d9_9T!%N$n^H'_gq& qvC젆7HrGXe⦷F(N6擺B>,í6pr~ZHՈY˚\D KeB':ˍ2L֑pZ3D!`'-^v;Aj8_@JZ{ ̎VwV]q4M)\sR+k ">xnN~9~Y- q0Ƕ녴!ʄ"ee` k( KdǁM6vIlǞo++lmֵjw`:I+ԶqIImͯv a"aq\EX*ʦ3)O.<]bl&ޢi'Yfװ\{Յo_RIBЮvɽP14׫iR+Yλgc;rЁPxK!a鸄 {Ü=iqOǝ'\lȗ?O"/69-,>Q?Jmgϕ[@ oaS3[ҡ-i׭^G{*8@`6^8MU7%Zf'*"y$lْcܷTЭVwh_*:;/|lqXoG]S xwC%2r+ 71dz}2J#AW:񫼫J*$wW*=l_ ɚ^1Y]uBqm~Yx1NyG*P#OEk'8++`]O>-MElu=荂7lc=./~Sbϖ[N?IiR ~X_|VK9+þ>Dig] *79@ X͗VôZN.ooL "`HpjNFC#m @W@4x8C}y0@4-tKj1te.\\Qc d:!?uF<.:n>wjbLmZRdnxpB%mhq /͖2 V`/d; a1ePpؽ qp/rr* cp3L=l&1PW'ts&KES8@ΚYXi"ԙe^?2E:T`vFsyD8}h?xUzҚ̋)=^Hg.\huxm(Vv,ڕ}Zod⊙_Wo Vdt9 gϝ/ˢj?HH]X`W~b&׳]Sت"@ p/\H@BŹ1u!SWS/·a VϽ}0KV&Sm@Jr;I/3&ne/ѓ+ѩŝ?5zTp]@nm4O/)gAdFմ>]ՙFvͿ5x߰LwDJjjʫ~JknOO:beavQ!9\ƘX%W,^c+X!gh(5O @ܞe @3% W!S8+Y> *iGL ( է[<e-Hֽ(#RHmm;]$™4+&{1Ћ+d[%3Ifzt-jצAX`- yl(y%B 4|zk^kqU?YMk涑LHMӣA %o-j=+7X^S X79flnL{G?f YaYIqX ܨR6[/7;Š#1H!F#9"͒rصh v'ٶ9At .)Ƴ,"4?/*$DQ$wR->)r,{osӬ*68Z 8$X65eᛜ:}Qr>h-vfyv_/}ǁ{o=OLRgn)0n?gjVfJjR !b&џ^± :fuKK b<#l [:lїΖ8yVml j K3m`b/}\T=yE7YNFZT1/;rՙٽq,&~2U!ƢHd9N9h~Y:0)[@jS]U?oHdDo!c͑T#\AH]=]y ^QN疏l c8UfAGv 'Չ !+E7ltuλ2NL& o,}Q{= Hh/=@[͕Z.ՠ[So|psy:zدKhwX6M7Q1v^'WV,*t{AyYאҔ:b;<G00Al/>ExX7ͯ|\QQn;҅u+$xav_"Wmd ?[m;C΅5J,>r0 ӝs]5lOUO>P3ČJL&(t[)Yl]t:H\)&Wf&i)H(kfie+kQo| -2וn^ui>u=3ES3)~ b `8ԫi i[@c3")%sVR &J6S:c7]+U,Jb}2:yѫlF&agpѱ̽jDN$lJsJV8 `d_"SѴU;%{ƧZuz]5p͓ qGygg^cBu /PTh(kugm7LO{qjʇDc 5p25qv+88㾳,m$( b 7^y2BM} ?=חJo! X=78'P㩋T' '+|6}.D5Xz^Ei:/iWJy|Z:V*[k8Qq炐l RY䒷 {Հa?T#D"ZLo9ˍF|s*,l/V=7qjj#2sӀ^uqggа6m1i{ ܽ ub4ן9HOTKPic@1KOe'plR]s|uC_;=t[^Ve^ }뀸Ϧt-27Q+z9:Qk7IU$ĈZgĬ[`]iF5 xEOUMنoVܿ<&D4fAOP=̧ N5 ;IT8vE%ȥ*gĘ:snmV'#EД`&&EZ`+%C2@9"xVV[Qxn S >W^Bi`y:@(1WG׀)N *bqP-Zq ~>C͐5})5(IJʅn?+.VXnO<񃘶Z`> nZ{u].h'D>:mYXϵR`}k1@M\7;E[&1ΪBҏ:Fis_MU^; -~0+,7L#n2V;*`\HOڞ2ZDlr!<ˣ6<Qs&%+ zs$ |$Vh{*RQʖ-~ ^JQ oE7 zD$,o+ZY*Oa?6N*^3-uȕx>kQggc"LK>ǼW-Snx 4\>I#KP@&a{Ij߮ *LT~+g-A<vіi^'=r2~hU )?̀-G =g@BwW0J OՊv gtX2<,Zc@|dow6#xpM`,k2zUPBik0* 08\BV~A`&QZl2x9k(qdmmk璱jA]A7m47[#=Pad@-tQZ4 /g5V`iOa:֠*x:0.l8i$dx&Z4+n䨟9J~ Ze;IyS&* jȺ mG@[o8La3^}٦NJihӢ{z*,(W.hȚb-WT>6'' ǚ 4<:;)$DwfD:nUŕ@E3S:lyu5aTEߥ2S&y1+W|O dI=e9Pc1&w:--=Y=)!Dc`J#떆| ZJd I2fɈnv6ӅRl!ј*Kn=5SO6k8ďeϩ0)YG #\}ȃ(] x0ۮM"ZuNj\M#4J.ٍz9/U_8cTݜ $^U"x‹!\B >@?|lN@ʾdhr=7fQ['ݚ"`I.ܸs' [ S;^{jU+=LBCN(4~d;n'A{9QL4d#y`prk. 9=?w0>>=MC</N,M:eMCU( w:kŽ5"x]D8>Y%2cgw3L9u$ah /!3CK^[[:TT 5%O~hG| mJUh 0=>8  {w_ ŇJ ]F/x'-zhtKdeI,}f}2r\b:lR1+']1#sq5XR^d s\zK$T R`3.Q@5S9eOƈN.1ཾ.Nm_=x\:4Lg#0u l+lg}*j5ս3C!Rp!COwj8ЮKL]W.}9{vmB81#Pl צ+jLM^m6.CZ__Nii;;ľl-$;M |һ@u䋕qWBǟ6g&~BTl+bU:鏅PQV{X6zƞxѪN~^#d7/٢H30}6]A8`L"*C҇'X'rS8_'uW >U3Atڂ- #yg)0bcBnoϪJ"ұ+Io<0 YJdb~tSmJbFʧ OC>zֶ 㷄 BhrL&:wX\Tm)p4ZV7@+~u6˨w3"EҰ`*kKD LC@ڤW@O(m} ZG漒"L.XpWn. dkGGJtA& a6dk}H ܞjfNwnAka~>uml::'h)vǺkz>k;K)&.]jgQ@nQp۟N[fUoAky3GW_gw9V޳)zpEVdVPk1Ү/KGIܻe-P$a1Q{$˧Ht<',@*uk'RT{z?ϥ /"%=G:gV-HogL6L17WXm+TtZ|MmBAI%pQk*.1 T7,LY ]E^ 9OtgMl 6;@0x%۬ Mn7Rl؝V,>P&y;6y=`? 8 㔵%vd0G߻%ISsaնԓhqұL[υ[ wtk!&,YWofeYPI_xUXSwwk5 ׯ7Y􄿬ݽjYe^yXFtPڱ.O>M26?FDy-F! .Ԯ^31A!%=ܞ#` Xtad63೏ qiÇ_5JD`X&5<Լ,\Vѭ^#pT)+f3 iV\%0KGL֎#!e/4 +lT^0a)"x 9lF_f;$?FSPd][Grw?M+ ,s P=$KYX=]N吡kdsչ(dLSzAKKv}yj.'=]ն<ÀwBۻϭgC6<0V@rӟ'NSD< x$3a'Eb͠sCL႔>|Z.ȪS]l߽'p?rx޲a\Kbn3 m%;|cC/Z״LiDe"0ZU' yoͧ+gh=SwLDd֋11~ujsx-WNhS`-1x<O0t0MZEFng!Z>p>U+$߱,;v̤u$EBԞtmެ굒@-<1=惏1%Dٛ is0pbN6x Nj Ȼi^T( [0o[rxny߮mf-y M֘lRrft+M+,-og5#eyt&t2d.3"^rf`fzwzsxӯ{WtzDM@i`$H+)W\=&zAOc/V"nG1?*a\XړI ThHw2U+" ЃJ̠F=&p$j&G-=Ծ@G2r'gzk,5ߵ}0m w'^+M Ǻ4eVx%5R* ]Zu[1“6T9f, d^{$djώgh#⥣~_<Ƹ K?:#}Uu&meI{iCUσz߂fXUQ.Na2J9(Y4L8,y\R/ŵ0k3*wчXWske=dFR lduoCj.{RVzMzԍh]{`?…:9Ec4S0 j{\OU_m" 2\m!f=ۭ(֛, R*u!P FgsE8;NonU_-( e?kR} Q\\R LTcPnʧwQ 2~e2h]ZSћ_! &LjE"ߨ3Hz~\1f*醧HUa!jObFXo=xI~QUg9i +*xRd5Vo>1}sD<>EH|/MF`nk?fE\7:6ptj`w,&~m4ZNﺖv Ey*L Ֆ>0S>IbNOޔ:LN9%r@(D%(aiF`S|E9A\a[\<-,c9kЗh52X|Kzg+՝Ŵ| tnp\^+\rZQNIF^c %EĜDm>s>+qF!3j ?="d|mM~u^ <,58__UbS#W.ԏz#1>N羰H$V`X[HVgi{4,tD 2 CbyCnX>,Ǣ -訌JT| zϙ|Y)F9S]e0!+Ëӈ}1M)`i 0ĀL=ȷy~%r=}Bi!81+.Ke_zex6O)"u(ρ4 *8qהy0|ύ +G#t Xf7 ՙ()Xeuzii)ק^%zY2GÞSWw|IW>`xWߧ=ggeBZew=%$} >XX6A&2JAZPBu4q sW{MOS#8; SV&FS1%$Oo;M%J7Osv`'hp0'tn8\ !MV@H"TX̷|p [ @3| |U UY0LM@y>zmMpK%ɧeYFtnȜCa0CE)c$SQ=쭇qཫɳَaRW:}ќWc0 qvlo6һ ,Add@4VZ5=u7wDVIF7"hɞ67NĴKx9 [4nem a߬5?kG+JJYBBA{ "\UWN|w.-@ ~7x_hvZԄFN1&q MԂֶH">%IUgqiz1X^4h5$W{) ]ȅj8Re~&0A[Ny,߉#͘B-;[yCxg|tZlSC)Jm~oj1yΔªiCIwWt&_"v"mx" KϨUGIbad6mopl۬k |\7.[gY^ 'wHsRo̐AIoW;Y@UN7i?Om]x4ꁿU28G dXHR>JY\dHm x *y{L[0v8v1TG5cBeN"b1=}?7ko }lX__82O=\b{z<nPúhu3V!QaY\Qe~V STl䲤0'5>zP/=@;m0OGzd)}3 z$GƒЦڪaz LCE#vtKĺ5"' L39x^NZ]?>M'2Ձ]ra \dGm>]MRP۸0#g{.oT3Endcr@lI_!oY-1$D<+劶ypj@&\A&QE'fTv;#&/Y4F% 5K٦Ņk z͑<4Pm쇟ӦDj d3y<gG @ts]lg%Ruw9⭐};-ɱJUXd;~vh֔An? :F#}?S"HE-H̋Yvm .^\Rv54kҏ︿k/<BqR?s#?JZtVG?yqF: Wo7)R1+JSd! w9!OFغ\ݦ,?GJHDrWǑ[NJi )q pRӯxkN*lglЊLH< Tg%&<1ׅaƭbX2mdGlC3Vͥx`RiɼELF{֧z|<:@K4-w: +DW_/JA(uk'I^,x;ܾ?z4# Xb~%4!T63n0b<)@ImCxl:4 3eegZzzf eٛa&ioD$j-5\ m_WDIڤ NȠ&O, 3/֮K\x+e;.Q, u_Eho0;8iοfO~^2>J7DuP[F1I]G[VAҶReDj7Ne: ׭2wX;6dgۿUЏ`ҩk<РՃ-q>jSgpF,1sq"VYrkiQsNDhCЇfDэ.r3 @KߨAeJWfl.kizA>xR; y (6k:{9=YM#%(d,/)uBZyvVc (~gHCi2/1Wi[F>QjY2wDݒHa8 d; &:d\aMʍŢ $ >ZY@ٻx$fuo*t [|P[='GX 7:$(8W]Y*|RI|B]I6Kh>:g/P*g.j>Dxd5f`; kEhY9Q<,O{t<|دs<( rOI󸓈e4j#>S O[_ !-Ĭf6^5@x*ӗ1'cs 3YnƱ8|4ʹˋ4zJaʢxapM{M D :v7J&:.sZpYڨG(.އ_2)dHNA0i:}|R޻[4 zf&x~fMҔ.lw Rۚ)؜焭n]8vڅ~́kT80{VclM^64n4 ܧkA*ـDS!c9۲`"Zzq3*1W?٫^V 0D_#<(@` =^V[f=1y-I%A4x2 tWm.)Z3Y.jgpe+5QeThlnyaroni쮤Tu4TWF 5y9xIyA-FvTN H0?ׁ<|x>M3-񡴎kfe,sSXiT'ZZ]_D&6C=`^2ËG82f<(n] I?2ׄ3wC @]:jv1"[6a]$jWքm_htbAM1NԁI9G?zITw,|XךߔlTLԹ?%SS5S$ɦg۲ !VZQR>H?"Uy&Ԯ(}H6e+';L60U}gF◧8C)%0 ]Rinj梨F 3)2UP`q?./rNt9oa^.8%gЎ4E>$ycx5x%Bo/etO)t᡻xPTWt 8H4 %X0Am­I!EfinۙL$;JU0wSatyHKx dYc LOiܬˋ7+V"0xvooADϠ[H XI5􉦔y\׭a^.|/&⋯ɔՕ3u,!eHĪSĥ߯F# :CUDٸX_#s0楤CV<"do$dAXZl_Rg&ڃ'V]oW |Q͑A*p~[s\sAe QI %+?CN%1WgmRb1^m~K"eÚ[|C M^_t 9,p*=g@Js!8oSlO<ɾFmX'IHVgy%wp, ﾋ4$O%_pҞ˴k:u}͢H^<"\{&nS ۯW3U/89E4wL|z9eŻE]U˚XIح 0z.6eI/ lBUbP:̓=ӧFu_Za0{(8rk>lEQŶd>ҏ2XϤ4JdC:>)*50I{AIJ^_4d.TĢ $ǁ*#J.rFuHwTvF|Fkd>&L[ZZ24*#+~MԺV!^*K-hqw/Q!+[-d~ު#3Ҍfgi]z2^>Q;{ 2z]Fe΋ )ݓHsAT|/TPyL,׶TƠB ޼উLߔ9i׎7->fa{5"TsKCŲ֚\3tq[l`z!F>_i0wa?.JaVD`#;2sW[VBk9\^=-֑L= (9\Xp;uA;uM:WH?>X½؝ h 2!1}vX+|nm6(;ǚKLx7g뺉]x"M:QwɃUEצoӔm^ѝLbJ *fqi]XpZiA ڃ4^irqI hprx7-g!sZ>y罕 /^Zn M&<Oh4K&[T9|qRy408}p"K#aJTi,PH,?$buͺcdnlf!sP6/Jr<?~ٗBsUUdgJ B=ȿx&+5}l?Fݏ.mI^uU+6XLIŀ~rdokc(Y 0>IU]xtmޢvh D"joh v#p"XKg^(q=()sRog7$ .~6Q%hՏ@,na+*|Jenz#~ChJϿIE8n_l">Tp0{ !#Mh%__w]FQ?J 4Wvfm +eϓW"$#q+jKF_*SP 5sL4T^;?&Ntf0$h/4i T]!GH&§Kk ۠l!Ӊ k:pov8pLw|âИ(&֬#ruC 5hܔ M51](K[)}x'+'\{4߀1/8[t& ɭN 6^^K'D`$-]bE5Uj{mkGX$S8=dj>*."r ҼZFߗt2 ]OzhUe/ Njcp"OJekjY' oNc#77Qt\-̀1I;*u4٘RlkC;Ua2 Q/Ѕ 0 Zސ3'JnHi~KOO|m3q0z0Z…ٝ^AV{r6@{}֯i :bi[/ <0R#cPⳄ"|CFM,At*^̦,:o D֨p5h`oY BOjv5e1%s!n SlJvnL]vkGT8h+2C,d6y0whõ$݂>h0,/G[¬j 7 /[5ہ^Y_䝇iaQ/I`Zp{I< WEw]4 վZ{zd岾 q +{{=mKk9qʵlMמeGQs>p'Br7KD>=M@2 X\|6aSwao7@v ".$4_":Z FkI=TtN틬NJ׶]G!_y.e~6Mۼ*e=L7AQyq?Z-,ħs6m5ɗ|=MB\ NCh=u:*Q\_=(/OCǙ* E'7RNBISan -s(-2 ~XrIDakg„KOR;^oU~Uhier:C-b%o!U/H@:K_Tgk@"R pg7[UE]ʤ*'ɚs."Asi=,q?Yv{>n`szR{bm=mH&:{yV2"M+A9eK?DhN;f[s$p:vY6Ӵ@-3⤁dZ0]1X_ Vl;)P ,ͼ`f-1d]n;f}{' ў*hx4&>a{pS;4R[3رUE(یc 1Q,*Q!7fyZa@hXݘl=2%CjfC+Z=mJzO nmUcsDw]xz\$ޖg/nQ芪![؞X}l\]?X|R^d'LlIN򴳌jiԹEo|aa\XoQ1/f'-tO rS%r)lvj#̿TOgAA>(4Cfc(;)\n^1u6`+I+o5^}pNʒA{_OhKN̈fuwFFvpcO R͉6)|uwAQkY侨`$:./S(G/4.ؙy8 ߄7^_slD8yRc+kNO9:htBi #nd%al+PՂh]4D+exUar~A^Ui |G1.sax)(\QU5#1e=g+.X~1}?CG>b IȞ.5b]6/65,5A!OE )F~ UY"h:WDuWs n Jbt H)ĵ۶VOU}UyCFdSˈ>I74RXyKXt;VluwUWd z'peNX^ Z6[Tm3WauC'=GT~,N wł}&g'YS\ Ҡ96u'q@(zPE{ lAȨȨbsOZfR;^hv啎@֕.^F1OGz $sĦh\6mh|מ(tOK=n.frx']!_݂OLH⬞V5~hy_àNFLR؈;m`>`ĐVAO-Qv|K3Q;x6 Az%rOw;S 4$ӑ_)Ok@3M݃iE 9 Ώj|Q،F8\ֹ̚ GޣD4TgF*C@a20]3 ); h^r'P/~5(5z$R%m?[-߳]c5KO~g+ .=Q˸;bsյm&RώgC|P9]7eՖ<9iպ9JW6~i5`_M8LLRMa~ǕY`\q\f>lz;PcLL!8,AϭDjq\#<9ЩT猞,92Yʚ 0 >J-¨v '!B8˨дpbsZJߏ+dD0 b)qHk7| رڄ b>&~$ 0NG&Kt?=+҅ F]؅Ja I{1$(:4R=+T!1Kf?Ma$̣U{" It%? *̭+O'm2e %^dmj2 ;J^HWrIғ̪6V?/oMyX~XC,}8?Gs'GA]g!p9Q&]Ųe%py1oj ^e(RX]T-V9~{{Ŝ6 ,( T%AO7 ByU_x:+VDC+pׇhMʵwp2+f`İ] mq};=5LjlMjVfl:{O_D{. ?1Z_ч3Dֲ*?k}UPia غ`/)6:ڢ<]f0AZ|T)(xݾ4&=M]%f9^.ZRV rI¡!R:FؤHΓ*>-l; $&fL}كes}m,g>!7tnPTRs$79T|:^35L©>PlTw N\UMek+tȶq-TXvƫ@wfʃ`_nU`O]Fɋ _\a!:;:{Eq}Q^,gWA}Ub N%3ϏKA_ecu<29S=M!T?ʵAd5T?>1`o[ODa,jfjTSx$ۯDjDt/f>]ҩo]M#7D{ gAFo`xqhqc8qߖ|hE(>nZk.=Ow ]A&9;چeZ fp\lFWN΂8P}Ȳ2 ibtt' NmN~P+ۄdN4x"'PȈRľJx8Tc*iL>-"zIjn#3&,Syu3[і(c0aR9y2k)hۍ:I XVoPWMx3zbc.2 d:1 Li"_Вe5gϔǪzsWs gN4"4oi][ϽU7& BJ?FT}c(Ln*}zRfGQ,J7x5On WeJ J'omr  !D tZqL 0Y(ˏ8,)gyqyU;ᤲ[ZO֒d$lf7Wus_*?)t`[ق^DŨ|i'<:5QuTM~aQ´@w&1F-P`3J.L`r5H-vѐ~P~~l3D?8n(i:֛(3/H =3o+u!;a̭E@%ckyUQcgmuuw.wBVKCn!v3ywk !T*ɡQ]y\5N&J)" ނ3x}@3ldۃW[gt& # 5G\#L؍>%_jm?29eQfv z?ȨSsނ=:pj/T(WNqPz[y[5 dO'zl3Ҟ}0آ$8K,)n$UoPfSZ]g*1 J^^Y pi+CƋ*$xwYWRGI/&$<&)?IOiCZVkw* -v'#ZKFCg^VWO.ވ 8(@ӂKs5eV͕&_t z84\( ImTQok1ek:N7*HdV/0HbgGyktPs5LuK};wt 4H rЩ.%9$_̅n[ ZEncix(#';T }/o>C0r8[O )@Ź0d𬎱Ew0FٙZ=-4M[0¾Ӷ7LI&<gs{`g΋l$~?$+[CgQfT` n?3yV0-f%FFߏ&9* !O]e$nu8$؉`|R:E8KM ?>\2:ʆljjy wZZ{@j3wVYȤ>s#҉.8Mxefs ?{@[ǡGZ&*>K>|F΅&/a\N$V dz3JdtA6RVE)F~V^Ea4% %I:mQ۞3p wxaCdy0-얝r4LHWOzO `Rtr մlgf634޶\/pR hDDz!5a^,%fq^F\B8a?ؓ , 5. j=.( ([H~33aI`|q{bgI3 NkrH$TZկ+Sj*?}!PP5OSĶ,PpH0aYzr*?d;S>Fi*C唧^x;UI4 |.ƸjnW(J>Ҿ@h)*F 6e1RzCVq ~dަǯzv6aXF{;{䃉8X1j;uYtd;3pY1Mߢ!J-Oކl{_%H pvpF3#IWW+p><~c84ۭ<4qYZxmXܐ{90% :5XD2< YiAԈn!9[z5M6ZBVlmq{?*KSL.Jb|g+RpFV"E-z&ujPBʑ-"FuI/zxԾ-#Y{CA6]\ZQ[<9wR q|f^,h}Ǜ !P Z&+^Cf*Dy&UHXkUѬS@z-o(|)<|WZrf WV:yOHTWTaO(-'ڠD4?V6c>;6eV E*d 푆ab{q%ݺ<}^,|eD|@j=u֟m-d-I)Q-prz(LZ FHG֞iE6@⁳l]y6ccqB2͐!l v%]k_GdoX-%P$cnhrAh/@6P$Eɑʧ/0CGNDŵauŷM14./,H)be% 8\5}, Gf ^p|>@"HMtFA!֯F~!X#ifIX'0>  B>ClъG1)VВ XBuT}c0 hW? }}tr{^ 9-.p&Ԁ^`QkIi+@hUj Ydnk+T.T2/05VTӈ!P(By>"i}ӕxUi@ E-42duIy%Z .dn\"?'%yMmm޶R cvwFoHB&;@ݔ䤜`h}_rGq2CaP*a<*̃):gg'D6Hf5Wsɻ~M}RAipRA'BV^ϫ݁R8YEp3~Qw\SVy֌Eak#~|XMGzoQbCM> Ώ2-spIAX[ju- EE^GҴI&nʡTfUdņ9z|OmE`<øn,q%dTFD!o^DFQ?X]CU9DU=rf˷ꗗ@tRSDOVt=tq:IJӞkYFC ;"0L_=DpT[]Ԓv&9dp1T"*izߡ8=LZe 1OV  x34$'N^so~!7 1y htG>DAk̙/]jeĮWn_Zo[r ]HW+X-czf<ӯ̓Yߖ=BGL \`;Ma(I:<.[U] ^HA(hWLYZFn暇wÇ\KUՃ~X4S[a+Q0V~GYS~Ϻ<ƹG!2ÈBвtC):i75utWYaJ Hì @ù [  T؁ym 0jG %Lֆ!7PˉVu.Y`OY dԄ[ 4oEmiNsgYHKsrD 1àx|Qrbͣ"G#JQ  Ѵ<{aQa bzܔ`fr# |_%①L`.$rx ?,XboQaki-N:Cf*(NMO2!$:CT^R^cppܦ)B(9 %ZW^552ZcN¿I#d(7H%vCA/ =5F5iN&S5kEwЊt~!I Um. ш4p{E $][ᆱdK֓~g=5>uV A:IH]#;봮NRjwnu38*Ľb*4ISk AX{CֱԻҽ2C+ qZu3/;ϱXsOm>ELH@Q &[<> uXeI0K涻(gʈ$4=,(xk qE¹,yn̋. l7PR=TVU7C5JotnhJZU#/J SȝN-rpY>}4QUNu[Ͷ_99~ܲGZCZ 95 2. Q=2_9~,xҽ%)nhp*֍'L$7N,7\Tv=ߒ+"%HCO7w+fv[zM[-ů:Ŷ*y7Bq,ž3aJW [vHCU] .'#=|*CJeTWDڒEdM5Ǽ/Ȯ):/m#DV!7 \J"l=S P`3k=& 0C_zyk!) -OWtQ;n-$cp0A7uۆuO NONK#:bA7-WBH >pvnmwqu/AS0L.ﴛt8) ddd'>3*s/CM()dJ33`ꡅ^S$ѕ?r[S 1#$J5tlU8rնy;1hh]q;,OȎZRQgF*~-ZPF@JE(RAMvaxgE`o/?^a0'Rvf,p}P%@:|P;u!`ˁLn/gIZ7.ءax!&v<⬠ڋ0*304q:Sw43_o& lF?ߋ#Wz|ocU4 rxaI٭-S$t'on5p\wX$A}[8LhV˵ ILLM-třP>\i[UB 1 p)^6]g<2m["4okSҠy{ pj\i5wݣ2n)/6?FEk0cf?>($lFZ-Znd[c bM <@n%c+G nf ,Bw鍗02/EAzEZdS.:25^>u$L䣨VK6f4-y⹄ݙo9_Ny(.YJ9o-z/zwݚ"h3ZCA6~۹hW`,J`@ϵi<.uS*0!uԏ\ 3wS ~qeEo4$kQq9Jbл;K F%9"^SkiA! ;ԛ 5/e060;m4S<.d-0M^mX:z`!:_ s]\h\Bu |؎ qoatݪ2qu NZ{Fp<:pϯ[-+P$ ϋלv.s'y4uz-*O4s3'clΎ%i=BΑOgc5Z3j8J@nBo0yBev{_AX50cLRW֗- r{ =pH2g l|2&h[=5cQ^ F;)PPi/9Fj/ɧm:>H3W;NtKSglOX(P91:"VvVB& /7=bFױ.G)ll 2f/n;%u.ݽ8S\2|Er| !9-^Ê죭˳e@UCQ[6u 0U#nu> 29xCSāp$k"J|ifی[';Ը}\;u/A6`qWe>k rwĬfc6D?Ok2C)S0t?H1=J@FD7V9)PoWDJ,m0@tօM( g g &IlI%>ԸA\u̱R4ᅚT?xxlPL2m#afhl3(=B;@tU!P`x͆_mͽMlgs]s+CD2dgN( JE!nC/(1Vt.gרw0>lb3ݞZal֟$F'VzʊH| [+لO+׍G Ż48BL7#HхjRZiZ}p#C%59Ul$s{XNvֺh1<"#L2DjM{aRmMEEc?(C˧}뾘ijLh(DdZ*ҩ)<w2*w1aF>3v"$l" Υ \!4GlHLLO !qJH${rS)Uu̙s(~}0$_B 8C8y,F+*xVܷҏD5[ƂXnFm)^i^*0L;h0 }̈:vεo{lp^}ՊiwX !$4f/ w"qFΑ9@0}s .5<0[ qTH|@(fY )_jl\Xb{G^nh5&Th=8"@+?R %W ;Ů%͘g+lMz8=5d#E8K9.ψZI/iog}Q"MOe2z :bfWkWj+jL2# lW!X\;]̑Q͍X2VNcC,[tzy@^R.מW7c(b"S:_h(PL2Fd%) Cc.FFRqlO z#?ZHqI1B$'|c|iZ1@J|;q/Ppk#v\#9ד(3~>Zڛx5)/bQ(}CtZz)Q:u3 l`ݸaׂO4'cƌR+Ëf}INoCp/^$ JBVP/̑z=fy{1nGDvO5ت΍цVX~W*Z5&}TX`$71ٸpQ Ƽ`N9agdhL ڱ,Uq( r,QzLvw̏ CH|f lFx>>B7bmŶ9S(QÌ^$wC9l\4H bg   vTGyuKf19{`߯`x G#hsPFlTΞr.@dž-@~tSSKCG|i"wt#WwD"Gh:RXi/c@x"+JWrNfxiu#eUX[RぁB7a俹t;\nNr1h2 y9C@GjPz'km~T \Z V$kk+f%Bg㚓%ߎW>9 C1M]BjzEyV䓵4kS|ݍ|Dbڧs fP7! Н054\8]|J-.E7MЎ7|-M5%(̫#K 5#$d@;sJd8>tdPTO6byE<ƉYcJ zù  Ƕ1VlZB%t( ⬤vT^\٣4 .GJIz/]=MieYybً}c1}qeThJҨGL׾3XH8_&PF(qwAT4^ljd(@`!*;ykt \GEe}Vqif L% UR˗7裎~Ƣ)m"b &s }W4[ (npti%VG앺0JA?u;n+n 0,jzd$Ɋ m@SBC k;n+B . 8܀<{`jly*"t_nH rZG`i{݇G׺ &f䫘shK &mFm Qғx31Y=FPh~yS 1AfPkׯ/0$PSYD:a3_yp3lܦNALuwƯ(Gv794:c!vPLهDn;k:<9|&vte4ɱw-}2ܯ}~SquoOEI p_ZwQ̒{` %('D}b[;II_>q#18uLq%KjլDeRc3ɝ}Ĵ6j7⚍=s}%<j i GdQeH}~E8w+&@Wx_*["M}k07$? \a0P6Z[aAEK;1~Moax&&,;x;/v'ub@!Ȼ!V|S4/UoTb'GXZoʝ f?J=+/sC?LT5u1ph Ⳅ~@z9nС_Ҩwe'o!gH,ET1d=(Z#&S8u/B:P~Q!H*7iU^b<{1A$֍@ݞM'-g%8V CGWxX.[X5RZ PI_'n['XOdفz3V dR VIx[^v0V.B@`'oCm{aV<oĻ6.W Wױnkc`u++(Z< u{Wg9=~HDS2+#6~)ą7ܤnĕwG nHY3!.%Zh!ŎyG{aoN׊i̕ ~my'i\hpj:tUR1&xcrI=6A-8$;NŸ,x3nn~0 KFI6(Z*\b|a58,vYGiAQ0ƀZns [Iqz#>DIB*V8vS.slS-Ed)3$UXa)Y)%УP}e.M Gs^A:Ǎ,.yj]?C@$rkӰt96w K8e2]&臫@`g|tBL@t0Ykê4B$pq W>~)CV{nҊ<|N&S.Z$w8č=[%~[5יSt3<>=4ĤgJ$ Ӝ8fTTrpN& zNh1t+]ZUZ(=9‰(ִ:HȍH=6PnV01Vs2R^k?o 5iJ`1Ur~n`E}W*yH<ӓRۀyf,v洮$4dԖ`n>O̳74y:Գ~xy;trgЬA{kT.-ǔQ \R9jϰ!ո:ӡoKD7f,  G;}- ޵Ot$7U \,A|Z52 YwMY, <$ݫ!둝FR Z+*1m-d*9^I಴UsIƇ65ln:xE h!^ ~/H9y14P>Gq/ʪT+,g&6rlӾ7{I&-985f (@*r@7r+YDbbqCHvVgX;)Mis\9'd0P87uQ":ƽhԫ.sM^"eEmX}o9!EK"4S>!M-E݄Y>Cu";r4<2kR.gQ9n ^,e8|rf8owL5:7r!k=qo:tı7 T 1\,K؂lZ{mRD\`)eVQ\j( e\+SS?< _0Ue<E{E>"z pFP!'/AB7oObOe骩ix~I㗼=k)& o(sϧIA;bmǔ/z(̦/ƺ8+?BstRjFGNo1M!z+Z _5ܵ$Z3t(1ϭKPXcrwS%6*al@$ǵ8vNbSOB!,Tb5|BM.Bm! gzJX/ZB ˮ_`=rnMc4/ mxd%^g;p2XPHFM8wK )ÐbOOBkWN3&Pbi8# ؔrƏ{N,\TT2R]+,sJ췽5Aіd(YhIx!孷ZjznF A@M J23߹y=[l?(:gw*#! j󠙉G+NИB8[{9!G/0sr@M!5Gʖc!$8U 倍 րŮĮ*$zB#,N;]lPDCS@tiFN~j ek'tb.4Mw%(<4*ߕ`_0cIiɾIi0UCvX/?cNb椪`sy8ٗ͟n"PSEd{,=W$q؉ D?AxsTfL7MyDaH?20QseZ9r #ISȺMx9z?˴hE|,˜m2;iHx5A+ y1 ?9p=>!Վ,d x^b WSvlsrR3f<4^{,WY:I Ū<9? iqQׄ_4Y"ǦVP3f 3S!Uc-u/{=h^%-3髂ҋciec_ɒ_P+6gLܱkPy=3rI |ȀtqT)>ŊoU?fa[ZZi(Kp_Ba4?I4v*lJ[Nh޻+E1֭> ѹOP[??H.Ad$|FV]4{t.{OC"m,~w=9*7^CE}M^1;(@/ o Sһ+=9U:iYEm \x5 ҬE.C"2ݻgG^Q@I KMZ 15&Vgs8*L;m$Yf ̇q\%ڤÇ:$G&b/e7HHL~=99LC7fK$na=hz vh|Y>AN>K.}^ḎtSn`Q*%$څ>-%6[|rh(~xˆ陶:㺩3y[C>c4j]{ēhV@Da"M\PQ2/)t1ٖuY 7~;MY$%̊zJTQ,`!.&lu ĉ*#TC "t^-򷉛u`f=ᙼ]C5|*P8#ݛb|P1L* 7=T[ ZT!uX\*A_ ?cd>E1B!eBv _|ĸ=bii $f>RC0GO4[!ΐ$0d`8gD1 (g$bom)7as:7Kaj\׉f"ϝdj ը?|*e0C~\d ƚh%1jOu9͊] ގ:ɹ@,Hn7Hc M8Luy s199;U1YOkU\Ev mBy[ ش?+?n, u}ymȆ2c1kSZpk"5ge0g{jO<Ț%NTa`n<[&ɟʵem=; 8\CGh>#EČ5P^&0|r)[l7w{ItQ`EFIAA_g*>)o% ij,#C|-ߒ)7<7:0I1ۻ` WnYY\`WmPfA\"@4dN*O ohu/N=9S IH͇J667dkRٙI1[:kCçJ|c0nxyRK7WXa0oWP=\]c1 -ÇB IFќ+KILQc{r;n ,؞͹"0X!sUvHk&d鋁ae0swc^$N^f mtd5jn'KQš{=]F o\&s)!F ?[#]W/jϩ]n"鶄(ȴqB/bW߄I8Du&O'b SGLV?FF_J\*HjX`FƶC@amL10](`xÄ/Fx@EsU_yRkBdk I ]v- ;\ E |fbtgSh(LbᶄI@ቷ{/gZM~꿚wj2i{|uK`t0ZEfM`*^҅&axR8:1DlP}SAx\D"3ٞk=ؐ-T[fJ@1u6)7c0@Q?K<ξȑ6Dj[į~Voc~%wbw2{ʀIgS8,fsѮ`g=5a)ÌObrվBVgC)E&dӞ{{%vY(SR  lT(ƖE=K0VKs?\Ӵ^VV$ƾ7D?rK@ZǝxBuJQܓͦ՜݇8:{~ u|^#6|]J(Z1t/bPejhԳikf^PIhR;ݬL; xnkQ%X}G"zWzy)U{g]zW8LxaH(3:k@Ya qDs:rF*A& m 7lp2_=m23IK0 |L&{Qpثn,2XK({ vC@Z&GU~Έ[m e&g[St`U*ϯbfzyiA+ B٨X5T,L$L5@\CMZ 9#z7MseY9HYf(9F)k9p].8HdG ٰ:'[Ȧe_h!3,r-&fA0ĕvjlLWǼ/XV"V~yg_Lu=:0^xPIKx-eP}$3 MJzR5UA{ T>PxSTXN(Qh6W$kꐫ!?ԑ+8v&BC/{;5&F=h{uB_Q#4z뽶X#b-}M^='g)/'G+Quz]R^%R& RaPQ+WWaJ 媷tI@ޣ8]CVbI1X(<_gv8n)qx'[ :Qki򶤉,g@nByf#(CWFYlDFfy9=v_Qy,ks=Shu=EVt(f:a P#<+^gZVJ11fm: :K1ZLGxh SPx/|sQfRy.$$Ј9idDnx!Vp7êVi N,n-~-JQ9?L}+*\ G ~{l~oϜ(쏮c0S_p˄ڲ02 aEۃvP=WZ;͖Mm_ ,.5΃gܾ$i}`'#yyaک,M1s&\%Vg{?ٴe~5)ev2lǶmn8=~]`jI[H4PT";U\=K0& K-v*p"[606lO; x " u&VL&q@N@%yh]:z2ƄU!,5Ye e Xf kjZ{RFr AHR>4Rnm?X"<():eHVB @`k .Nбzf6曄OoitUM%sB@Ɂ% iL/OS\nR52\`?Z#sC#`Qý\V (u3 Ģh*(HJ<.E[\E-4!SތCѭM̿KR:GF*RD1;b%1k5P>J xb00B-&?mPS (<\|=!)+)ʺ ֜;C/UR` ;~ꔓhE)d^,Y9SY; f(`Z$_lbG.CNk98C&Ao]Af$Ul:/XU_Q<%}AeN1gҒ9y.R-vVnJ඙EO< eA>6Z/"$XT n5WE,D=/o^nH\TNA4b Qy,p9ؙZwrUJWƪZdIqs&#̶R EҰlQCF, 5RTQˆ$/Ycg#e$%>oMV&vB/Rӈf yJzAvƿnT{=|U;|_0UYVǏx,SiHS|F ~gpm̈́[r\X3:Ă:PvXe fT*#(A^3I cت e"iH ) f\^E8oDHH=e\oLy&1eè'7`lѱ[c5k"g_:GBRz8z#Xt1-M+-S[{AYgKQB)l?R\Zu-`~ .D\ IڈB0RJɁɃS`ʸ&bH |S^f#A4Oa{V;xGQb->yVl[~{‘HIzF4䁴(Sr;FX0ozs_BsBhxK~'53OLuutLm]I8E'%ARgUcV-!v(Fr T̈O7@ej %Y%dKᕷe:(.,H*)ߴDlMNb, 2j#2NFԳ{ 4yM1| \OD0ՕHK@ PǃgsL6amkYwRzm^~k\˳'L(mwV*v&=s^6,qYG/3,hUzhyffw8Mʯ'3z`ݩ~-Yt ^|^MgMzN(Z,_=",pKec0a/cո^rK1Jů^X1 i&~4[0Z&Dj 0N [^`lρQ4!/n*˓gf1s׉a$|SpSg,,I   ^4Pu4 k2yodOG#*>{% vy!r =689dA:4F'uzrs,Qkܫ??@]L|݁@hE($|nEbq"~LBC-Ӣ A8C:G(3SM`4n5qϙ# ͊ʴr= ;nK+ƥ'H[(z 񕪵"R)_VsçjKTJp Ia;mM f .c¦P7H (5kkU0kGH>D1KLmsaScԮFCG]UYp)DnuCR?<ɻX:Jut^ h~Q^ [JI; {dǜv1s HR'F>ih%5{{j[aç);M#fDv5׈}@^?\V<00pn.2,&"8r(!c2vLU$҉ oOYv_?goM Hp$l/njksbn&UV?goiзs}4OX#l8>=lQA53?([.5{+{|Q;8p! 9Ec> uBF?_˿Ec}μQo 1qkZ>frɠ p*4rM^ $pcKsI}/*AyMs, r䀀by|f?ZUݰN*NN[ї8{Q r1߶Vy=Ҕ<"OhDEZw9d /$>:Xz J;ܬ\梖[:xQz+qzLmBWR b9ھeӮ0\]!1 }ղ-+,oLوbڼYNir,6swuX)]HCqi'9 ۉΜh. ՔUύ7pNI2W_T2=i $8T}&d2C-C'+>)#bLػjӪ8Tt,zß,bY @&h3ΖjsP,&xr!!#G4[YjwhL515ؙ)#s-v ˣC4E xDjtV xQ?nMs17์&]/^%lN|;X<1.`%%`VLV.hyfku+$\;gQTz#]:nTuH:O#4 41qY+HLC wtn@Pt=Uد`o*K(QH3=m"K2dºpk'GWh!lqsT D[g_C]1'\t]dZAq:Va`p\LwIB _O"XT/ 7l?MW=o;lceH&< hz摊J+Ljo8dr[3"0=$5e#A*E >yj'+&a/ h()PkbV|Dܷԕ.EsyKo$)}BW~}rZ㹋|"&qjdi6>0z`RؽcxK83Cg V I5O_>AKTB(1bxx I܊]U@2BD~du%vKK̻cooֹIw,33$v'-$( |yN]N)* '1S oN-r7<+f>TYu̶Ȼ~ׂ 91^ـE):TbHT#<D.9Lя+]H1[YJjlꦸbG4&1nKgA.^\cw P~(G cbXcٷoVIr\D}4nJE1~E،Y<3bgB붓lSimsZa!!zY"3 WWC.V\~*Rh6Eyw/:s[~"nqg*L)ejU Wش1&j,PqЧ{ ɉ QvS;GA[4})~ u2d!1 H'v7Cg LOEVYkud*mJkV< «ab3k+5i|u 76ljP, F R3(g n3W+汈]=.ł׼?U>b?[ QsƧTnx9Y5mjBv9 kz5B: ]Fҩ26\|BtV9W=՟>d ]4k"VJ WP%W90@6))^b/U̬^^`0"G~_,vdXRY7.{S&Y^_~ I`ȉY@E(X4ufN87ctڴ G CkEGfНfU"V/w}?haTd%@ˮa#(4ͮ\BuwasѦ9퐕}0HӨ:$V$Yu${7HJFAx/,1q~P3ӑ>egQx7Q[1$ؕ`jcN 2[.bHijmjn*T@^9tO6M|/olBy`|.SJ<[ PC.H$Vt>=:\ŐTu6A/KA4{2]0I=՚"xMhMm' NBADS*Qb)[x=6Tq0F}%|Brra"FnL. %[aช#ZJhpa~Z4z>i-= 6,/b/{fp8n\*˹Q7\3?F}hKp<k9ĻŤe" Y5Hr\xDc(. D6N7ZsJzvjUaQ7 h=R1F|ju?q)?amtKPnI>e!#bמjh!h3@I)tI(R>g)CK<_4cp9V`Y_c^@0r7*Iэ>%zxXha]=ub<1Jan[$ #Bkx') dzd`h3?I٦bE)6a\}S#={P ]]ڙ c' voK %Tc )2kQ>lTi.C(>IH~,%-q0G۹5=6 8T݌cwoD2B wsD`&z8qWyX11tt^ەm"-U{ÖˆnY{o .^risB 8z$kmi@㖖W&"r 'Q>ݶ;͊?^jJ{/{I(k=:0u` sLҥJ3v=`$ij[c6!ч`9ZSʖlb=3ޚMk W[EE1]mł!$8A/@qG")EIE^og% -z[9P2˨A`B%V}" Щ֔ˋ\5#{a_#;=ʅ!{F^ f ;=9\:}(2m=28~メ=l1R]4C©uov|a'T5a%rjwz6ZXE4SN۸+iܱE5jFr˒-tJLv?"ĥX $=v҇ cc߅eeO(Oefn Ww]W9Ps1@,*V8U0tpPz&ϺȤ8L@cA@+~zeC[.Z}ÏZVx ^YaFXDmήoi|⋕* ǹ:93Kc nH*Msf^43^ꠦiZD JW;nrlۺk|qq,|4֢cީuxeU#(l"-I+Lj%I? @ݶsf5p;p- Tmp D<ξ"X$҅RIw=sҮ/mTiK(E؞8.#5WWƇU~d~'C*ssoǨ>8T̯SO?"s' yx@VK? 2>Ez*ۄ{?[Ctg?_z!2]x]_E^ >@_͂83b]&T*;Oݑdw!%lE8)S KWA[rS)d`.ϩ,Jdx޺lZ} [H:F#9Ei\ac31Py'a,q#lwŬu#Z鏔 .;wb鶞*Ņ^H?IyOvsKͮW%7S3M՟I 25<1\_A;8D!vW4U߭hv%3(ǫW`]+I3*xTNxJY`a }^l`(DX|\)̬Oݢ]KDuLwLp`ih#(ly鳁VٹQU-4$NkAC O2,r`7EmP!cFtׯ^biߋv"_ۛ, W‹C8Nކ(zKb0 w9KN"WCLQDam`m{313Wx*q}es>pS7oBΐ`DD?u}g*/kY~iE܋׻U}%Z;g)%đ y+rc\O.pXZ>U1~Uf֨?""]$(WZ]mJB}6CbiZ{ҨLDmxprBZ/5_;wSj)'zOOf.cY`SE8]|ba$ _JxjʰюcZjoig$VK!È4;H/) +~U$o,PIlا-~ r 8#N5J+oCqrn3gcpXy%k6qgu';Hb9`YtaGpM.'QzOɼpH`(7_ճi1Ixׯ)0&]E1uRoBb0J(1DaE:MY3fΧW4a܀Yx "`2H{ Zi ~1=9i#:9QQchPp dv;AȌ=GZs}-vHxn -şhY,Dx6j1x< cߚwiH١s4s%Va֖Qc"ܡz^mj2%(ؗ&NBugmla$شPRRe ̖BsMZPDSd46$;g6&qÁ$<<9QyfN l\̑7 3m~Q'H4t:zi<9_ t,N_ 'wl4^%"76s=pQ3N Y0G 8jKWl@,2G7ʗ\^Soˊ!d‚q.tBtyN>s/0sM ޾3Y]aW Y`V/;Y:/Tk=ĭMx]TPFI3hVwYt%izwp\5٠{~tLC`Q2|wT[RdUٓȀHJ"7|m^h#!(r?MsV)ĝw d`5Qe+1k7$HBH/ |]մer}ڸzb/^z߉Cyn ϳ]"5ˉmuvD1Nnt\OZ8. 9#MX# 4i,={V}dgu @jNesީç Q<5xb(kyG{e%GY acjW\ۜ1hB`\(J07SU] P GV% d\7`NxO=3R%Bc!;_PWR7D qzUkcbbFO`:sVc4f++T63X|9U$xgFF~5nC}KIlZT\|uTDtS)½`$\t >. iuxIh< ry:KLU#EcPwem0w0gĄ, י-`稳&[Zk9 EnHLE֗Wy@W%fǦ8Z+F H9'g )ڒ(]ӂ\~e!iH=VЋҭs,Q-\5%9V,8 ]ݻ{V؛U/nҲx[rF?!ztq'Q,qJ2 *FBw4G>=Õ^d%pF-|ȊxWHUc[U ~81%cxDB&ГU Rba91 demA O^ [2nށRʮFc@p2^:h3ƻaJߞV.,I{|ٸK0M4TfNz0묦rd]TJ햿}|̞5$Xvx,80 8wOgA(R=wu <>B#n|6 ?ӽ6ʢ;QKyAю8r,씩S쁑}J'G5۬9pKFV<<["@@D<&jǐQkcrtӌi00^^M9!QV\P '`yg"P1a X=KaҶ  c?sp+BQYZ< <Е[_}-eêpv] wx dr7dYDz4yM@N@jZ?Ood>?Yo6/ :p8c@z}6,/:z/" _w[vl ꨥjV &m1APCJl33\5 ?%]{V'ܰ/q@F iW[1^=.lWhO+AZbA҆ u'GUk 8NwUtc,/rƪ5$XN!f(46^I='eh˚2I\1wx}wƬg;H򘋈yֹ֭N28r3R" C 0r;$(X,_LaOb j0b/eԒoxE~ ma#nT\m"$12i1JFfuęX[ BA(>csC7Nz kbB~һQAɷh$0Czڷ S[0&Sx__TeIt;o ?OmxUBdJZ8VϛyYӛM9 `W1G33}zߝB:,WitЯׇ"qN%rl_8Jg4htpg>,aAoyl -^3]'uw$&`n澿d9Jd 1]lccan3Laba]KªBC"&IOF"w=n9WS˲,j <A-}uNoumͶ:zq)Nň GV$yF[}_BF~Я9fM0}޻?O=Jd/}Ru`kYCOxy/tC]xIok"HVNzl8Ð[ ҹ7 Kbb䑚+zR=\IDɬ`{+;Iq;wtkg\\9KOQm36!4FfkcSO nAa$/,=]MrT _G|'wBe}~c$~aai*oT+KaC.[sJ<7}}C$|GY I5?NU#A{4=詰NԺ 7 &׼{"w@.+DS> |' :b-?P$k,ut1%EG1-yǓdS@Q8z 7Tnr:aox:uZ(A/JPk)eisqϷL1.UaAw+.b!gzcmAzt_)j15o& %"̫$uz %A5>ie>(Yåf+aҲ,&!+ՌX? !l B3lgZxj p=46I$`5XDQ2I%ϣ{OA/z$ 5p!o=uS[.KhF~8JG{wHIG`5Z& 2An1ӇOiTAKJV[+KBz`V"[<Ӯb㮅4Ye)מn<4Ż_flKC ŧ:"}Ш::cQb[qƽݻL|bny[/Q h! &\5dTCS8evxuc Rv\ '-gi֖8Jbeu.To1iR?s0 3@y%QݐnX.CkiSyCV<( ~>`U),KXactnI1HvxKڿvFXd&DBځRe[6q>+<>wo-UiZF *?{9JZ "g[r hP.]4 6J5+=ܶ!`mrTE{z7AڱZU/2GLꎯX9liK Bwfuڪ /P&E74O.gl*U*XQ02qN5 /'íNKk&NSzzXcx0Bw*`#UrVdb`4RLᰰMl,C%KdKMO7˖)$r~b \%{7"7dU[; 5Ug,x+? Jl_>o ͥ*ILL;B 3Kc a_=*%TOxҡ@:SsLR1$):b%H#z3܃%RD %C[A;G'^47Ւf !MP_Oma /$l2ԁЉUgoNEw$ĴVRZǾ6ݙO=*i/Cji-M:ؓcMj;0%[ȃ.MA|WH]:YPxS^``'D|6ٲ}C:i .vG/2gC4sCˍyhvd'0]5yR@7c1hf 2Nѫ-{%S@{Z1}$T e5!){XWjU)d2&:f;59a $cF^8{ GI3A8 ̓PÊL+~MMcDCr4W7ȉX\%Juv QB(;6&yŅk0(fsL A4dҒ)=Xu?`t@vZB}goF ݄e+ /qW]y3LȻ"ip(PҵXQ|f1![Q|eC'X5oS^r|҅I4͵%3ݝwLYL)6$P:,?(\$73. S\U|{ѪBz!:(y)/Ofh~i=j Yyc'mR9uƄnG3^O~33NOA"nijN̄ #տۿo% -€d6&K $*LwhP)(q87Sn]|MiͦШD0z?f^(F^w1 YDFS㋗$?m&%=&Ha;d`qbbdW{vWƅA#L+?:Tzg[ޕ. 3 { ;@mlRly 1]DIv~".p[K$MS.J+$gȫ*y&lGBp{e&x<3ZZѲQ Z:Y?|^Nw7^^OYƉpD!H!^mPo; Fiֺc@"_~7F ;؊ aA%3b|bkE X~Mrl~6i V\;Pz5@I6BMѿ=]׆%j¿xSM,2O<`2/PCSiӱfҥI˄ajSG mh%]"j S {i<{6UHȱ2'XVϝJ J~>ū;ʅܳGO*+T -p`8i2c(_hH^:P&Q}[RȎhvF;\=ô0?Ryҝ},T7B7or3uM)Ƽtٟ"E})![QqoH)4Z@tnۗ)4ZԚp~a "DoUyջ86'>[[g>6`*z 5EP; 3RA1znD}r) /k8uWLsmds?}P/R aj%%h uqч;d&rJޥ2) gM3_g7E'KHZ{P`leZ>$;\ǫ[3a shzLY"?U=bsIknĉ>[4Ϻ'(u-IokSSG{ə#nȃßݽw@;q )]uv(&z5 )tdּb+`rް #pr}TMҍA_0eA \<s~K~\N'~-腪Ry)+ӍZdduVΔvB { n :xR  RJļѼ˵X]}H!P0z Vhygw.'{s)Qj5Z`G^`].X7 >R'QՈ+/]fA '1y;Z^w R=lNyivp. nk/HQūo7x8Kxf!1\d,Ll R~է;$4o6Cn+0!n |> &l*Z!2.v-Vd!}@0{:Z`x;M(te6@ ɽ6qtM@!ibt&e[e4@-q  ՑAf=#d %NYzI.5m^kst%wcY, Gb%{DODQ\Sꒂԕ}9]1GGqws bfd.l]KyιSoWJ.M״ǐRU,Y@ d_3ygPKcXLt&7c-PTn QE q(hCf<W8I3ItWd6ˆ%ݡq6ǖ+> WYv 0@cIJQTI;/'p6La(K^ZW{Z%qmJ􉃆2'(ɥP+(PЌv%р&xvxlP pO*hYp{SH W<`v]Xup(mU{:a4Bǚ=4X[^d:ߚwx4vqb}7A1$bF[-ޕVq" w3 J f!S6YCHI? JC@+5x dȈg\6µ#6;IFU9yFޅ&+T=anCHQ&Y -:H.A@(ł74PwvNV~ Dn^ovGTsTT-ͻ̞zRV<%' ,>]? P6YFW"*l;]/鵛|C$dMnz|f$rtJ~FZ 85EMFP0RŧE%4'-b7D^9v3ܟT*7Y7U2T !urw/(,Ny^r=>n5;1v0\zJl{eI@ezRe1x`󼕯8%bt?S=/и{A8w4'qGqf6ŸG"!W%x"~~")+۹]js/}QRGlq\ :"Ja_MR1%~؛( pF5 s95\W/ENXOSbyqY>6 ØϻoX/-ۏ}q@/ {dRRlm%yetEw㱨53&puõ%24&Io6O*AVڞްsAcw=hZߚwS_6tL?7i!6T-;?MAwB$*GOЦ~DD ʥQ 8{G=xYǫP6W6S8p2Y!R~ARL7q,y&qLwWw332RGZ;"|E5Ǘi;M%6KbKYUR=(:%R D%5]～h`agĕ~njp2ܙkxމ!Z;%ݹEPT)7vV=͖]йjbD3ɕl)+/$K{<\+c3I[Xc{0@4@Hpnlo1 :#gxӡ&oթLj8J|^MR YBCdI Y`L-7 bPFbwv ^>њ8G9̼MX6L"ԢRAK HaӢ'J s6grފJCxͱR#w߼ .7.ekbdN.j.lM<`lK ky뜲`JNmLsȷ68M! *ϖ'J@ƬpM}TAnqY]Ŋ3$_E<ZhKfvȇn8z?Hu&8~լ}sK+d?r+͵"oeѓomtYA3v=/笕xL]AF13QQ b"-B"H91cAv{KXU=f>z=7 I&}~h$Vk L0{iٿjA}P駂aZwBF, Cvڝ>9daĮSJQ5ucBIxx2NNG%e߇mhnE;$9Coz(|Z޷~'>wC/RQT/,,S奱:@C:Jțg"EyFw˰9AoO^'V3EYsO ]Q6MDML޹os.||5!IZA0y/Β%&6sH(aR6/nإkHM8<T'rh8Vɐ&<{MN?7{x-Tq<,a&ʤ'N!IƁ5FUyg_[ u ԩ,jR=Մi14 w,jEqUi#;SA*Y! `CR*4 ʻ+-?p]3_RpZ=`/Yn\B5"/J †zvplQrV34z|#|B}:r5G vzhUI[DEΤSۍ ڵqCoD $Zr:B|^,U~:d<:Ute~N= 䥎ͫ~I*=u2`KI&?3T69lM#`HdsBeVAt'KG\KHqoVğ&$.s X ԡR}ٗ$a4% Jq%K*Y$ǧVQW0}e),K1գ327!@a`/M(iFctT/|)EKR я%؊ Zwhi_>rƯ&8}ϝmxEo ~5!G0\4Uj~[ crllL@㸕gt1c.L'LgL)=eM~:vGK8s쑲V\?(>X"&2GkםpL zZZGčք']!`0@&dPɹcD}Z-P70Ve+O<):mÆ͐fڷ8R7ؾVp(䌖9 @8x#k_r|Ia3M NR0N!Iߠj ܍d]@ rFK6A9. z2M%).v̾g~IςZ1 eK gubB첀iy!$dM@)5`X_E>ljcԌ')&[T r &B;YB٪G;޾3^IC#e4[D6Qin8n.qx|oCg jnt(!Z9oMY~{I֐#>!2.e?ʶا=`0_Ӕ*y!w,:^v8ͨӤvAu:0.RF_ni M=L7F(|[QzfIA9/q1#r(cKř`H&zJCYjȊuAVPd4k^NPJSÊҵ~{fh=ɓ Ćs'4m {lH.]up<Dqɀ@BBO59ljE`מFG!cYcSk)͚m-t"))z Hc~j:!]72|ZopEmz>p#V'fI/S!FvWM!ueӨBB]N,ʼ`o&|CP8RCIutD<[fPfYt kh 4uޑkRDװ4LjrIxH_}`ku#Ĕ/E4oP&}+K En*\mB_8m@-fLM/\}?H/$K m~E$vY"oda^VY ZAnH<@ ,s F# LXU>K;JAWRO>Nk<;8뎅2\(b};>.Fb幮؄83uyg:U,`~sz Пr1aЮB?Z>(;XQf7~J`iVʑ(ufq`FdρDϘUhĂwN*E׈u8 `IOms1pm"o ? ]D\`%>sv(t l =[zBԂӚ~xv;1e,[Y94cߏqp%UHNH5r 0A&f[NJYbb.p_4]x|Dšha ȩM`UGtq_y8 {u~iw(?sn0{ڥE / )xa|s}3TMo@M&0C܃= u "/_*Aو5lS؛jzF w}PǩBF.4{i- vEړB̊3}Q-\ OF_|渮n6=ȉ v^g>>Wkӆc̡I"kð}e/vO-S{^%GNJ!;d&`p3J~_=~AADze"F s8[8ʦ|v5\o/6y4 Xp14.x<(P7*zBB Ob[" u?! X8朴e;Pd6I'kR!u?_^> 0 Lti _ >!#Sqx vN]S GIJՎ(EwCTlSNA|x7u=2Z r>׷Z9.YNd`g ka|)َ30(>⢇-Tw%f_/v\,vёjۜҠϳ^<ξ%Ka=i%;2%UH_d0 I/v. \%kQ/ أ 1㯓]XzSt8켡n@!|Z.0<-yQjsܜ Q U2XZ`nWD~lH 69\M{x3AuqrW !;Q3Ia(b'#g]Y<o*5O4DF䊅5ߝ*^|U8nyI[:ticZ:&Sm2:naPߺf*V{s9?v5-}cK}\XpN6wuFςORd*Oڑ7G\d[}(,7Dvg2^B{SOvTC\(f=>le^&X9vݨ'o)+ 55%ʣ"Z\qP<$#]! >@.g(xBV\޷l<6wE* ֓R"=%{7k$VQ iaDvr‚0w P?Gƍe][S?2Bވ/sYr"fR20QlicZ?=Ҫ>)_0."A rNZh*VzC:.BHa>79wש/I{f”TgR-cyY~P|Vp{5`IJ+]s?*}"yPg/r a_P$_1'qQ c/Jǻ: !ߺ2m )4‘,Z pOaX Pr5"u5鲍pNN;@Qi'@ɓE:33 ӈh%T҆ ˙^! .4x< e[cedJ;62R12${:q]DѲG&ce~avϟK ʷZ5$~W[5K:B}r`8IhtJf[4rLed9vvFLJVDF O}x.Ei;#EO2@V$kTѴ%Z;)L#2o7PUgl(lRP5`(9Nh&NƵүGO*l67mV90R1BdPCUKl~~h;@ q}vruz7]niЦnBc-),Fc&AqZc:{tuCC%>Z:= y0*D0{R.39(p˿g\4.rͽ=0t:ۛ|kWO|4l (%dž>NlfaǖU)U;s?f>T)yNOq Z {duaJ Npv}xz3UyLLe~@Ƴ 9uMgnd{p Mڮ>fOWdx-I] m2OD8=ֿnROR͍i3c9})4=j{gR ^,fl #D*u#KFeؼ }[u#x3:r-]C%СYEy M xE徯iwK3\vDhUexr, 8$.FH"5V.Xgb CL?p#kȵ,"ժ/[|ڡ# /erWAhb??ĪZS"mëY<0\Jjd7[g<˱Ѩh۾rh޼ޠjVTـqi o9Ra.Nzv&_t,~ܯe.""ބ]ƭ["K Â`F!_3%|%#1d{e~4T EqzT.qE[`S D'nH+ޝTxE>D E94r]D:zGDTySo3\"z:X܂ δe1T7Vn]p`JXG9dN_ h @t rw6M65QV?1e"!@ ~Gl[W:j?p{U9hڎLʼn̉0#3Me[cҀ\VOk ,)]j8"T\GYt#`,{f"x)z׏+}jӪi dRHZ`$tO&rlÛj_k1sXqrGy,;_/+݁aT,@5Mi‹;}lk)zو'HsDvt^ ?'O?W[&xCo`ҋrϲ ^0`qd؁`nf)6־H|^>zBsMzE4mA# 4"]ƒi2}1)]E;ZR;-#oc6 U X.x`ss4fQL 8W;:Sl :騰[l@K?ǵ<7PCrS6&_K1 w 0e3cuMoC2>Bci%ΐ{rv86L$V`몎7DRs1fϣ.ˆ.zOYFȹ<9=$&T$ђeŦ2p}#WwωXf`Ѳit!*1ForXg垭Q\x*u qaɬ9V>6*P^b'Yl<-ow 6n8*HC2߮],qn9$ v0=bkb@*a4oN|qlQ"miQ a ]9v6{ e[{L%ƠvˈM٠Gg1z*+K,؝8qi#nwX OO!'K(f'#svޟ9yd%-%ȴݲOOÌz|l y^ru.q=rQt74YXZ(To6fK6GmXD?hfdK.Aͅ KY+1%p*rۊ) ,ńS ِ۪1T `+vb~ךN[39M2ۛ^Gr/H)Xא].C2I #YM)l|)+jrRsTym7EP獪ިtU7!YB؟q)׽!RMT̵ڜqk!m#T{ OFwut``sk?urXfwWnlI4!>La *4ReD -;(i\T°.'hl*XDC|1K*oprF`] q((xj}7AD SEJJ4 `Dhr*4PYŒ}t%(.h(v?`zDm|yaQ%J+ OAw1U;l5APͧ`4jsᛉXho> 2so.cn-?n(7ie,658Xdo+j z*U9ڦ48myv"|BsUT RFN? yJ@pZfb:FmT"~Aw cWqA*P*Pxx8>ϵ׆YC^J8)/Kn.`ՑŃ"1 iqVۢQV)4gBO6kRЫ,IZ udlVn:NW" LOQ)I#L2e 9KoXQ',&"J }?K92yLԇ1N YLxJ$|`,SZqk>iji#*bM7E=zHؔ呐mq>[twj>u dR$Yݫ&ejAn: ( ~}.{.bVȽV)\\4hRdIPly$㘄N* HZV.Vld=UTػ)5+bRn*E };<1r"|V8>(flݦufiH?I*й|{;e6~tᠵnՆ@|TtB6=MHK[~C%j5t+6Rzl72.OpD$`.}?]h4-`TUI.68!ʨ~/["m~QG0q"w 9ft.Hxhh( _˩$ qS3==YQe} .aӽMA aV%$1Z/\ `ہI]-l7R6W@AA$y|n5kwYc۰>,8rK҄,!5ƋAL+tZ_Jr^SF|c\Wῢ,c[8}捸^fPwI6;A%/w}+ hC׌ zw5!=l% MW{fgZoX;Ije$d %ɦǵԁrpxZEhӌ\܂x#Zz \,W@#0ngT 3eo$8/9aH Sp6lz@q> ݣE?mL<,7{E(/ZJ\.p9np vU7ೠ6$gU ,'q4@HW%{.]zyDy= `Qouy6Ә](Qv7 nZZxB "A-UaB?1.KctH2L c#b3hDNHOeg*-[9=Rk}懽b!^hkA Ba2ZUỵU6}OS×g+(ߜ&e}S#\^:94pjR& [4[MgNߘ,k D)გ &l򁾶{:[(~")06|&n|l !cvp$GGwH. hA1t# Bo%wqƌ0.G %O8SbWdRZ '*;h끒qU6ȧ# HM/_hoо3hgu @ChqL&3,\bOL-۞0÷} PP=g :yDE~MbvOh&q;',}`/گ*)ݸtaW)|f&|O i*=b ߔV v㉾QX_Q@d_anm9A F.,@<$i0bU@6<ufc<}me)Bj20&h5bU.ioQD-^:^U؂)9xR/6كW[ YNhףs_`\*U HA~4W5o3S=+#%(E2aDCn3,J1*밴D9A∼s kd S,䇏Cʭ|+bŻNXq:ƒmKds=sĝPNabuzZyRCޜ dbHI cbWTCyb-Ha&NM2"3 l=){ 0bp-{X&lY%)/Gsw21 'KpX u6?l敳S$"ZWȈp1;4 !nis ~/P#_Uɫ1gAuQ>uZ)Lܶc!4 #|8>,W /;bb"1;H)8Uw񙤒8+T7'RE$<>KJyxV.IiX@_}z>篜h\+lI5B鲰u`~A\#??k.|܏LLޢx!E2 @ - &@p1^cydUށHuN;?x[ B-ad@2q759q8)0 w\?pI34jY@?,Kn6n91^(tB1#`ե =RO h 6x#@x077@ ǞkVngX>uuYxЦ%㰷ĉ3*7>nm֐KW"g޿J"T8K,m/$:#8rc?Z7?m x0JC `'ioGܲE>Z,]&gbS$$K&/1_oz"SOلV*kN ʻib Fˌ# f@PSNei)RQy1A+xw^mN zC,@e H,[ˎ2vJA}wF"v̖wϕT!d^1 ="# G%Qت;g=zAKX7|hgR;J'DCDUFEP# Yص( u0fS4\!kV@  ΒoA;h{:}R.TRzdž*7;lrt~ATT I3&DepYͧ#I|/D+3{p焈 ~f\ԇ60\$sϡ ϫY>өy|ʨI|fDXH=Ko?{/OнBԿ76 hxF Z0wBb5ܰ䢪RHj84EZYS)G[p@=lڸ{@f."KܟK쐩"lzۑ;C1!l1_d;F [C}[\f;ˌ'̴94~ܠ&h[,31|cvy u"|"snPO@ w\s_ט8?ĺxsOM+jPO:P'K6.tԅ=1HƬe)WP:&6]PsE8K oˮ$?t +|;(nOdhDŽHYD䷠sD`.O?D /A18 hokٕvJ;$3Tofnëp_Ӂs!)+(s튞(6*:Wlj[hpM0j9!X~jB?!of~z?V TYFD`B1c5R65C v}Mvp0G}栮0r: uM:U[z%d[SpO6gHsn|PQ@gOg fsmhPByH^􌷦\-#zi~jvEL*- "s&ď!Lj >=Kѿi\,zzk)oا3~=&Szb;_7 }vEO/.jiˣ_x/N^( M{l 2T[p4\ck !7+X @M۪N n]/ǎiT3+Q-ڋNt?F{\v.\ jrQˎD?l`26r?33IH\&AJ׫D{6~7!crגm5BͲ#W )j qO7ei)H@cpa<3ɪN#T<`lʦyOi>G}\ەw_-ᙄSn}E++^+ߖ{5X 4 ^hm &يC-(kBZg[4Sf}#r!E^A'd^=T2YB>([!_/Jm4􇗘4'j ^X{)~_WL0v-@<",M&"f;>xzzeYH/3ni&-@⅀BҎ̢a:Q![IGÆw0Zբ1 {kl 4+ŏ-q vU-ҳ.^RIW៑KԜjlC 9ᣛݙzC`zJy,pHCCtGeca 4SRb]{F.ʙ6n}",nE=i;wVT9%JӦW7!v߈|q !lud4T=^+\LQ1dMJlxQP=7xdR\oWD /l,ašIx^\ fƥdɄ޽Y^ V%]WG90aTJG"eԒEנumZlu?ck;i{+sen$&[RQF8k-6:EA`h8^w1Fe8n@ 鋙;&I=KJjGH1_ޜ u~S()Kή j}|0:#ˑrХ :=sm͠׮-Ln{@ S%ΈRzg932NE9,~ΐ((ljl,S!MG\ kx 2d# j ֺHĵ\:G>͹L&u| vQ P(7]2(|QcQ.hZN9ٙG;ObwtyyKa%hc>Ƌd,.s*H [0΀Ǟ2TLg}d`3˨qbuxx55-Jq$)_=+I,]0>95&WKHi3{i1/Sa_>ǖ^e{uGaə^.fФO=+9/:i {g9#$/&>ݚ,sz ?LJ-CgJzߔ1;(.,O!$yg#tg2n(;ԀSUUJTzV5U\cF%s'64W!xWup{L@81)M$-<0H4V~6-a:K>\cݻhyґUaڃ6lB?э/>Lu90ȇV ґ?Fd~DMHr+a̋Q[JhFկ 7(&z턚 $-7lqeKHTA֛c?u^-rp6 `!"RH, BbscIv;4h{;d6PxEη^ÄY] 4od$>p l]i)N:8P]U!!:FJ*`jcқ4`.gqeGf=8'3~[ނDF{bt|-| `8ԗ$ S(/";ZzQ[+dpg,vTDnyfna γ#iZsFHf*?-'|%Zd;s4SYl3VyJo^-q!Ƙ["/ qg?5 Gr=`R.ʉؓeV_*Y@)Կςu=u9N59 (vl`:"ڏK]8rjwGR$5IςX},R韲`L!-xQOؒt"/u{76T6]|Z-AJAH;4({n`Y=={g S)&:2&pZaтy'O| cM: 7cKLe]TNXܚLŰ侭 'vkz*>Dť7h|}ǐ*˰i/_@#t@\P U%#rUՖoձȌ?3}c:Xu۸F-u31HGR1޶"@=*SWp͉IHyeg=iĢ<U-5mcC92"5O`L q>c}b L*"Xnt!%1u N1xXd%o:uwM~uk_guoPI-8 X vsܝ@>% rKqW`tHM_Ģ!]=d֗[EP YeS|iMfNd$`!-[^| 6aqk-I>ȡ=zAHAOCjX}xǢ Q3t$Q&7>&=8&:sԾYzyGpg`.oYS}!U.[%P$ Қ6pʔ8 y~ a]%֫.tT}>#M@], Bہl4KYa o߿0U,@,cm*X; ͌E^r DMJgN7vj(襀5 0DƳ_FZYЀz2ҰAvlJ+V`kDM;drXorI?ݤާ0Z-\XЋcVY읖 _L`[j-{" ՗F;&NQ` 2KMdR-q c7L#]z7-& FP0.WrYLȒnuԕמjUF2zmoY0L1Y@^d KgZg(;)fC 8ƴm|pߠ~Yڵ>oj8"1q} (]6+ }UkF/Р0;%6L;BP$eio:WU]?l")|/R!K-x?ae'чIx?uQlK YѧscM]`Zjh(C@w h$wϦg սJC8خ⿖oRęt(9Pѩ!^v-)0_{&u,pBj%[8M͍RnP/^EeY Qesud"6#=;-aɺ#`]oSyWφRî}rdWhI(rjX\bnjԞ2jEExic)f&|G7]g;AE!R|>ț1t-̍mW?r]3 tt&c Hp&S<-)>-UfMs zOؤbj@'xԌ]UEuLMPc÷7'̍<wcDf %Y#b"ʤ}M׹N!Ac󩛊\!sdb*̽ qġe=JHOw>z]`{ _Yrlؿp )s-;M&- (mSNi; R'zd|ݻ/f=-$^aj*و'lTj $KH_[Wo# \BqY|hB,:3+zeڇ^F}8dK|]Y*>^zqS3+jbW8|* \| A'\v~nN{n ny8K\A9qQ ds9$Zi@eMMXGR^F,}WMl 2k*E-FW}24")MvpGqN'؂ŒYV.?Ad!TԒuuuo? XCzN_CO;"2%:d#mm 'Y.hHtv:wK0oغwQ?@j)VQL@ lR )q)H꾒mzx]<Ъcarȴ#^9՜E2Y]ߕǙtP}C)w1CP}^u?{Nś/RHF(vgq Vn7?[ !(t* &[Wv:ûc)y ?Bvef )6:<5_-X$$lgE:)`lwF >hQ 1g"k}7”|Ȳf.!x, b,FM>q {{ G/Wi&?O9xR=AYCјt ;ٚY[-wI:wRta'#WYo(e尦=x08&いoYٴ#ϫxX[ˋ-:١ܧz/]%6qqN* HRMXp|\6jȄ`b" = !8t"ɯ*3T,5.$tf1C,% B x zLGZxȧ,j}ӛ L a?)m߮xxoCfǷ:@-3=ur%=,# H)Y;Z}5pš4fk$SSe%fFX2>je=I]eC\z ;sty"~p"mQ-^x_?D"ë.QX4µ˂} q{s5rӷc'%i$s`٪8qRiqvϧ&E ~~+ϥbsjCCQ=qbvhLI-,ar&N ʼnK ޏݐ2#!O"ԱZ08p|r" )HhkvI/cXqɽۻ3r;K{|ek=Aem6@h|ɆriSos u|a=+LCmΎ{]VPL:l5pAiBVF<`49àǤoEt}S"}1#^Q%R so_G[*οw|z^ey[Rv;:;'GR|0h:6{8C~ fOCok !>`3׉/cÔ̋!>O(_ ˙;ֱ/zʫ,RdD%+r"vpӑ ߋ-OcVULE|6Қ:SV@ݚS< p^8 Ux^vϚA^<g`՚xm2r]sߘer! oJjfFrӼԠ sky'VۜHyZہwq4HhDžqU'ԙzLzS'WL3zJe_''74P$,<ڳvC!}[ A61)LߖˎU Pd0 s"GT} r>(Vbf"Đߪ>:v6anoJ@*8<]*UO`o'-& PyD'ouVU-Upc~$ y]jHb޳=TZ 8ԙ7wi(Gϫ@v}ܡo=j**4O_.Di n-SU_H7|+(w@'p/;><9@٪pE.Ƃ.l'ؑ'ցf/g/WZdv\n!c_WakԜ@|-,L;'aT7q :qh ΄ЋJ u;޻fg oۯ0:TtvdU#7q4pNE),Ux ~5o=;B|iCzwh8XC*YgFq2.l {P<{ߨ>)L ?[$aS|Ȁoy7]W p6E.ØܧejO8ǿ#EBbgBROuI Pd82 K/]-xQMDNIפʑ4&j Uѧ}pLߊX:M~-Qm狅B_Εe.p Չ6C oNGqIRHmO_ @*-@6¹8G7 <=|HB$j"fQI8}Z=.)[X1t4cpL 91%aWk֫WY/3-eG9Xz)jYZ΍$oɠEswi]O'(0~k+!TQq Z Rz_fw/,ٶI,9\b^H/էߤ ''"BHn$N{rJ_=}cnΏJ5t˿W!]/jTVC`,ؑ>2詵4?R" |B!V BGv?קջE&ծ;á8N JL$>7>*DTΝOvS殙M6팗INm! 6v`uqQq=vV*"2!ah)%gPⰲwk-]L+ާX9ʕrUt0"~wR]F{CAqeY<06Qd m2+#[$J,uL}@[)1_#dC% |@AδQY0 1֮Kgo n撷 msfPA9|Fp>j7t\qd '2!F %q$ZYHxJ&rMGjőÖaopM 딭A.7ꕕC:捧giDuMa)gIt˩,)`?/ ir\5֏U$J zzenvfv(?;xWFc)e_Hүe=[k5RQĜm6m5菩C)sN 4[el@gC{P]Ukmy?T;8G#"062S)}X >}x2aWNE@`$oKԣl^6xH* č` %;q5> ONd%a3G\ ~QB`c֔+4obz?y{bHu=P6ëCtc#"-WfREV< \sêH{ XzSԏCxY }SS PB "f2w}GF qY bC5Dlruj?mpuh3gg(|&HRɞg:Xb3[cp9Z&3 %;^Xg_.>OL8ZL.:#r}=C0ە??UwB} fVMp 3{6v&C`hOC+,nDpN릦oX!;_l" TVb+a)l_d9n_&CBT?0Ψ;al~c"_:r[@`Z" ÔBY|3կaub/Ϣrϖ_eU R@w |ۿK* A!@5/r]Ѕ36GbE5Zgc NzjPɉo#Ynm stpUrb1|YCj~ ʑh*/nԇ\ =b>(hi+ QXLZJh7Ϩt/DU=bJk|CdX1\M8q~byr"NR9ၭMp=VQR@tFR lX@<m ,,.3'컲zK.گemPD7i}x!E2JVoR4Kgz 6+Kr\L`5vmET 0VU r1U}{=ԇ^"ݻx+sMi>D^ /Dw]lD41ƚ CGhF|C^n̿^B"J^eK6yEV.(CФHxX=H&u5'\9-a'r= g1@(zosv>2 [ "" 1;?:؈qy5] Q`@EDȨz5yGi .ze % 2i=[H)2Yಹs0-V~U>cVz$hFK0k/Zu~38ǙҹOo΢*WQظ`&Ej/*$t/#>(AԬZǫVG$ԍIv9SmU[}v].2+0"] m% yl eU a{ ;.ѹ,gd]_LL(iMS`G6RB^ʸ󞢗%ߣ+U;C)>^cNlP>9:!3gya?$c8FȡXgd,"[O"YrU*o)p|Ur|BAABcf.:޻{f#M( v6BJP`ȓo:54NB<5cE&i\3LV [0$ Z$(LG{u ~xQυP)L3C-hEL2'dLpڞΌ{e9 iɓ _˺, {9waIz9+k`߸z&K @lTΞ^>,Іpe`"cyF{zJV.BX >+.]aROzT2+?"衡:J8b>稄IYz8ðd2 QϓhA3Cݝȧn|H: -K`{4ࣦA]38_ʪgq'#&mz-x»dx~eu([ߎoz D< kS><%Ovg[~{=%q皒<_m^{eqL )CkȬaҴ S^D2,4k{ 5믲:"LMp#lҺJZ!![78iApU"8y-4ד{ȷX<}±Y>y+Qů"3,|dt4ɋ\.)362-jt).+ ͱiG{ bg8dfcVsilCf<Jqٹ]q;BʔFjٳnt}CCwni+F^m{H7xpӥTgW8tO!݉E-|Ŵcf(3~nDi}@̐' P'= 76d-Q*[ui3s|TSi,^#rITY>'E|8UwAQ>= ^8Ny)|,d+~B["}H|V<Xv!ѭF oU{nFtڈ;2 dUf  4w3R'a =~?L*h A]=X[YLOd2A3bvrg}{q}!h-]9i +Q(VP>Q8'ٺ.^|֯HBk>qׄakLK(.L[d#46e+!35ȹ{x 2ueQ@Êxk-c6~g(gm^;@;ҬR h |SYWqXjƗM^ن,AomD"ԗCPX-kXwG۠&6$ORo=,E}4)q/P^@B&]r8G1k/.Ҵ "yq):._b喖Ў ;3cma䶍{ӄLV=j  tԞ!LʈZB'T `. nYk*uԒ-Tl]KqDLUM?=7c L܌d@_+ xv0RD)$ ,]n3^zivD DזT1- .3%>ZiHZto@IC(5u3 ZϽ# ;{dQ4aK>;3߭0[8RjI( /W9|!3Hci0K7$q=Apmhӭx7Xw6 Up'6 x[tk8Q*5*^3j%讗Wz)J Zडwf!&|0dБMO"H:xY}ȍD5}()_}e5&$S4q_}x{58VzEPJ_W/5| ]+4s+hl,mt+^[Kqz؅_WQik TFc/U]L$CW 6rA[^Li9-܁ŢaR>ZGH"]n|F&KqCӑ#Z&A/Xv&KzOO RO@x){e Iqi] hwL#Nc}cw Ҕ6FcLM><}("2iWqtX`sq _ؑ#EZp6X‘ eZ-ɡt`d>Dp، Ez=\)AsW;NpeMB%f6ؘk}rijp-d4KY;VJd4x\j1@CiU@'pe;.ǖc9yWvnNv>hʃ_a=i Z]zt]z_q>FX7- I}Nm*&d Yqn:G-35_XՙMbL46 KyR4+i o'\kRPDEɃX&h %Z~NL7-QrE}^ 50.xYck !+;LxA'0+"^EO"?rkI!l eSdd!PCeHVi'zz s{~D {d/81YEx69ªa_3 FM_m݋P-oŘMCF˸,Ա1NN/g0_hn-D۷&CyK8[,+(vim>0f N7*aJ̓K+gUM 0VlNfYy\9wu+W=G ƀC,R$fr]ds.VWǩN`N`_3UWܮeOMO׌bie0I&+ p"9JSX&veUst4h!aK4hCTIaS5G%>o~ݪ2WZz%n# xŁN/௩Xn,LQ_/*ܟ$P.N}!w*Yjj(B1t15U[I %Nt?dA#֮gME.m7CZH (rI6z%_P2XkB%{4J0v?m^l?bLk mkfPM+Ϳt(lIpQ-2qmY^\"1y(ÉLQ{J2d|hv D >N9Q'O#w髫.#t@SΟxH)yoGUg UoOVW^uWZ*fƁ͌˷cЂb#g^I۠<;*b]#!hjʃR6F~ߑmuW@BfFk )wҾP ;n1gV4cffcAhēUd.n"-&auF t8LwqA:wJvVBIUݏ= YZ+k2as%YhXȠyASOXCQv)'i?`6_6^,O|V0(Y_-$w0\p̙H"Ɏ9 wdNӏs>B?y%j_Sr"7Fa{:g]`J#̗fAh/ 6tזc #3PĂY<'>eΪyAZ>hv08U]73P7n$>04[9_@pǥ™k梨"A`7,r=N e2($.a:0gro]I~Ab|i˺ow=t䍰"T#ԤZv8AD ޻/Acxϖ?{ɾ_0@[_+ M'.(V6Ƅ=;j8Y?YۓwEMƘl^Z3+f`8>Y i[YVe]a0 'NSBl{{/VS M4W%m9{BgtsE rWY2)oQ'c*)0$c;G_7GXC!рc%(iٰ`ާEpܹµE0æX1$֊PJ;`!o.TӍye dv8^TP2YB)ՑvMvt̕rh4>FjDw)g܎&lTv=X4/Xz(G$BI)&,ժ~&RC/BV]Ctѽ.!yk)#bwYV`̗uX4q1V0nۋü*8|D( cemUb'߼UOcam_%Sz3 f}4R>Ap S\NbPm"E_6y|s߉~X'BBUeP I]FSDwGܶ0\wK04eQ+d[39a5i؊/3L iM?d?^xv4)iM={#*=,w"^t-I|TG/)dE:?sU PWP5=1Л揗'f ɕ8ꘃB{MԬ`{L2VOᐖ;ӡ*NεzCŴE |>Ic|ѩ]Q0Nv%TI3 &>@ʤP(:YRd}:A%9oـ ݞZIa2@0Yh\t`lvx5`>`a KC_-dh˻>T V5=johx 5'Y6,Lb$(RKi=sG) 2:Ģ&[] mY!6,luɒ7>dIY+Jd6ta`o'W[nxե0qPZv%ZҭQMQ/5U*s^h9zdn`% 6˘pn_"b \"5Wgr: ƙ$A;%L,=BR5JgD-[<N&u^1 *}sWg]#> J3+:xf6/jL]DZ3lHu7=ľy,*HXHϤ,H褏uنȂwdI}ު_y_Hy~JA^wrڻb=?d#1IR`OS/+W>μȿs` գXPx ։YNQgO鮽_ {``kU*RV vɨřDn@Oy9P#0*ӓQB3:@SPŷ'rml鞥jM8Vs+$>r͎I/@~}ql1^lQIGoꆧf/v8A/.Q!lM#Ҭyt6yE?Wb0F~-x\avz-+݁"Ydw1WM{֒x. (b#(@<SU }LN*(@*vJFd.TK"O%n i%oaY[4x ^!hsKc7EN}ZHς^viJi 0$ѯ:y*[ad+L}xg2#gkp(ӻj3V)vRDZ1a[ZX޶{by8RϢAaOE?K.n&`S蔘_: wL~aoFW卉m9oؐśn=0p-Y3fWоvIE}O:GA_~NH4vGIapw&<9Bj]3y/JTs|q7'.$-JǷωHM<b:fRp/XFޔ5Oh3-Ӟ4I~|R\$dB_Zd ӂԠeV9,]t{HD%vxC^EBԻJDh5]R*!C+Ѥ,U?sml;?𞢳X nR{/< t?J"uTA75ql xiB KTƥh|I FvJ[k!PR?£8;fGη2u~"b,JeD|&E[cs=9ۙVےxtb mA;cCҢQҍӒfp t3O,KU`$׌;Dx4v3W:(b dԳC'I>FYK`aF#[F&-ZX-0eD7Ǹz@@Shm_ܨ' QXbxAm =h~ cZ*'oZ}q"jz(TJ Z?f5TսHR%,79/]e=;yX`ƷBHtHw5)Mu]3@.r:^!2 F3ꐼ|(V>wYD("P%LyVC- ( }U^+Tq VH@qRk/߽Kpa֞/*ׇʗ JJ8ah\? ZkV%h[h:ƻR=n#x#b%lGyxoQX_4abvff>"qK||w.lYo'<Y{s*|4kP[>A*usC}m:On+Seu|ԅD=h\`>j5g0wOHS6_><pG$#B>`r޲_G9ⱶY/꼥2S:9OGO+E]bj3{wNGU((y4} 3y,2ůHڕ(5|mbfSAL3@\Ia2+Qx1332NH'6}r࢙:Pi@aq7n8rhqee% X͢11r-y(%zٕ,T8}{a}&`ȉqա8M2%;oJώawK KUU$g(]nz1O-É"?Ltwyt=q+D.[~`=?[=n]JcTF/2tD]A ao8HuҒ'se<VfUD)F3_MWL+.}pNrY *SnPs v}s3Y4 zj499d_/=I|)|4J@ʼn>?9ghڔ{p (W6:~zs>ǭFp46o\.Xxyt6wo.e^wKmeDUƅ_Xͦ^VrDym~`UV-R'D@08gi5!f,7)!ulaXT"Cl|kC!YAe+p1!$N! uW?5M[ ˳ӒvC(b_*M4C9AôEp_H]aJDޱ]E\LSP;*rpי6r_[VvOvtyu8~t6( ֞H ypiww 1Wt(ɫ9}~4Dt3OqȊJ/C3B8L\1-ɞz42Īٵ /Apf7Tj"-b8YIw~ %yyXyM*}h]9S7fax@6Lg!/b-UZ#TD5Nl l79)Crh-]fn#tO#42jZä8ԃ;ۣW^"DEqwj :9 \WU^M<1Q~Kܕq$V :gqPL߼D*f7WaÚ0 7C4yMĻֆD X}R۟نz⾎|~hLa do.(MHtU4\*%:'#eȚр G6).rP]ޟ+5r6_V*q;U .VR ۮx8:8ގpGnOPLgX(hr $s?|kÿiE8SrH#Ʉ'4TJLMio9ziUsgћbQu3|2Z:Y^Gӕ7fJ8x|-ٞ}z#fMbD.WzOCWI rV01WɃk8#-s}@ͯHwjӼ_֋W 1 ĻAx Vj Ll| bt$1E}WfTG}]rlj~P]mURŮGݦ*gVdc".%JZ1BLNRzp0/#Z%i[ZĘ @3($h('}^LbMQ'Pldp؉ȹ="ƶCzrZ% > C hO5>#{b'+:&M}2ág3l FD>4/+NX𗅔!&H&:<8+\l2oȹ-)"4FＢ="ԀT?0 -yrqG벖 oR1nbOǝ 8"!(3i smZ"bN}QuR!r tL{0ogpL, C@#2"4KS&- Nr'[F'lLI4j=W]O.K.x~úп^$m.@] m{ȥqYKǒsKvr%7}ZMY0SʊQ?N% ?0@ԅl +{ 2JG^2Q~fZt r,!=w=ؔu@[>1ypt!LpuYcT\D3N$Kqvf5E8r|bf= ¬^0،' d0TkON bX3+)6'$ӌ+BT+tj ,mxy`JkFUY\ ț ݏgNӾܔ_J| 2IIzDw;w`E6BX]y=cT J\Q8oy`c/zR]W~nUh@߲hCѓYL[Ee'i{kIUL]ÿc<;8+{\z(e[{@J'ߌ07 Vsm*F3iY-(˶ePΖDE#GD VEX 5Z SYo.-akCthgPܺs$v@ZL C֯nD%ny.u=z lp> ,Ŷ.ɒXu}M%;8rNg?TBU遗9pSVaKcg/IH*z7lПYQ foKCwKS^DU/bi\)P]`AԒoap-V'JSVxkd).`d(f@hiy\P=By#iEao֐B`xXaW]sh.B- loRHٙ Inoyhd{Ry.|<2f% eB{9KL_G=FHc9eJY QtTL+ՅX&n^Y]o:'9,X/,'##ݯ,} a6@̔3pM[ y6;R3#E.> u{EHCKދ*-qł.qNWW341j$\e^J.ɎiSyZ`)\(KukTX܎ijˍDiz͒9}d!iV9$eRn\E5j3F _˂ A@EH"5 w#i;1 3SoA>-c?TO}$]|4e 2zDKg[TJ&6$ӱ-U@mnntcmPmԤML!,۾ N^J7.z'\#4:Q@ Rz;Wtߒ|&5cm9сgyE.s92Sh3)f5IlgY}$iB ~𷁰誂6"~ƫEnEʞ}>KFY.sq{5dgM^s?~W-AYc,ŧIjC :PKLfqjs숣Ft? 6ϒH_!íbWsԜ`2BYӬ$U=9ik}Tt%3)s'o k)Bֲ Ls[M\g6ۗ-EC*He>0hм2f 3{F~z\ė^X``[A/= ]D/}$QâTI8qH+Tk9gdŘ2_(S*wbVf<`lZwkg:>a NOQ Ql9=V!4' v<𠐭RN &9ʾ LApA66UԞU"4e%AwCp;O?d6W9h%6Lk&S'3 T;>+0"<2hPH9vRT,joFA[ <<>䵋H穧I d/jrN7MIh!ϴ I"$N p,8_9?)B|$|znJlS)'z=;G\_fNk ZZbdP_N2j^Sl \凃_~Q'7C}T6iH nuSuVAPeWN\lW0s@^0TN6uܽ%O>m\f<-W?oap(8Vfdt#e\PF$\etͰz:ԘY-:jZUx+w3O8%ADkLu<.$XS֎@euR@g/G/ԏ8?g.9q¤E1 M|8!ăz+S+B& YOgnccYv x!~5p0ɵ"#G%k Ơ규, v̆zp ؊vں Kr2S*/սy`N"?3M(and%aa"klQ۬18Hb'Rv=]~[t-J3z"{TC\or˾He"COsX74ϰfwyF8%4&CzJuh(ӫdи"`#QRv\ ?֊v#F@|יq=\d/#~nxtG0ݴ}pmQË́l0BC9(ej{]O:z8yeTV1N(.h,1ݩ6$gNZmvl*Q]~d4)I4{RīCPws`orY\ 1)+ NU,kUiva=`ƂB0~nfq!FŊ0^;,KeSޞqF3X'2C DRU29ۊuG7%jZСrEM/_\vgvl'C٢!a'R/aB}xde؏kI~TQ:.ib0?Цm#k}d Qco<ϒ 1*W%qϜTPCy؟"AsZpވ#5MC_cLrl?1G:3+vKb]qAgNwHܵXyw?1@" /@y}jYaqekBr18GdIQt˝>0XĢ eqc|F* ְhoе 87|(x 1dx;Ὴql!(mʿ+W*[N#'qc%Uu䭫rp#xp;mkQ9FyΌA83L Ws u(9hhOBL˵{G)\sX0fʰ7$xTqb*jyGAw c'>Б~ݑH@^>H1) TX j\MhGF*(h|YC+yjFګIl* 6QW}E5JU* sKĐ$iY l$vcF;w!I1 @ᮻ}JfQQ\-B`n.+oQdkg/i@4_c|<:Z >a6gDس@tOtRTTjD 8t:܅~ihz,𐤫(IT&g,4ݘPl=YO%8YqPXbs[u[uZJڷ e{83,:?3F:))1t7F5ڹ#uۜ %Ryzp\hMj6Fy0zӌ =DDU!t:#KlM\z9CyNA@S&S1`T`AqH gY٤ߦ1n3?ܡ2IђEoa3]ihNs3] l8>=R( P`Nթx3; _>cT=<2b6LլX{\}n<{ܥb;"T+YD˝xs4!D`I.,AckX&n#_ywÊgiSpVߴwScZ-WyKq/@Fvi^k \13_pde)˵.aRs{82IF.rhPAR4m8Xy-ޏyI/3}\Z"T2U94ZݮFASKV~`C $ JUGxOZKeknX{K#||5Խn>LA+\`ٓn2}3:yQyDzb ,<_NrG*:l `J̀VK&ka =Q݉._j 9t!__6S7bvTHdj^#maͨz:me.Ⰵ*q1Pαɟ JZ{藓WLdwL)i/o.mz/84y;zRb%"R隉k\0s\gzDm~^2^Y ; \:r"ݎQS GR& sY0D]!W\|uh`_C3ʽs2y OͬaP@Yqva(}J4֖9ZWƟd\ ՓhH*L4rهn1e1}7A]~>Be_Dl n  ?M0L7y(to`C:0~ 5Tt[-4F/6)ǨCi u [DYh( +Vdm/eowBcJ!GH>nCmV. M~u?8ִBș*AJjG AÁ=NL+~z@Ш>\kBL•R0ѩS30Y>aoFy yx-V XhǯEL1V5U2]k6^0`>*@M(ƶe6AtjOz^ vƸ?4J'0zk",/u6t/x^w9ij^Ӑi^]9oxGoؘ?`Ҫ!Wz+O؁w0 B nO&">Mb@@֚^^<3U=ɟ[5+'65]+EC"?#2Kբ(v6gɿ⫾:bvv ,bs"qY Jkp[D+M}onY8D\ 7W=J=8]́ji1>B7MZA{SgYxd5|9f݂]"jGʯEf',Ƒz|k74aPVUN0]z佱>S~_J;QiZ֝34U!"maԄz&-ZN!lutQ͍?EZǠѨ6z]CV!SLQ@~Օ&δ@-9ܷx))+d=mua#9:&G5;} qseJq(RqlK 3 ?Gԁ(DC|o2Ӥho={Ǧ?!6&e2髉;1}ѠX$5oFwHr0>!t]{{WXi[UI;e!M-ýodN 4s]NZ-ʙ脀ou,wEisϊ qa ]y|FB؁(~B.LHԺQFA<Ч{>y LN~$ţkUf~h87~¤^lrn ՝{d.p;8;fwn' ˞KRQEQuVlq\k:_@ȪbD-lùex+T/Vx5SSb-\kMl }Ry9d*|S+65؀4WzBic݋Q=+ >p2mmyC?GolHkݛnjoRlY҅upeXD88[P2 'RotzR1WmfPdaAykoLeU~{*&}r9\>WQ3VR\x0b)E;/I~r@Y$VLp N|2 T#Z2\_;gS/Dg_FQ_B?dJX ?LZDEmg^ ]-5 =pY-u$pkTl#IB2%.^9يx)]uvSE:V"b; %۽ oXzSѦMאgcuv~c&rp.NKwqbHq}#ɽ=,WˑPa@E"` d%P/]h#$W6fW>v֑Ż?f%~to? %Qai3LY% Bc9_}nE&MXB&4VWa%/f <m3 5WqD7]y%ޞU"bI -*fx7Lyv˃`m̄$,)q25aC <,KfK}Z$ {]q6"Q/ 1k;V2pGUfgԽ]'I?A)ij 5(worS71}lNj~4Fe@ʌk,BbISdRj=EM!Uk(GȕTrj[7:{iY {)|~^gyr03w]v't4+dw0:D$0陮 ܫ K 'E62exew<'K2J>`KKkeNT x^pc)1px^kp'')TL㐒 n}+Dd1Xi V*uL@b~ߒ}g--GZRwƙyi/1/&QrZkν STþ>TG[:>|:CL0ӪabpF@4;"Kю~b]?v)hh1gV2,YQR戊P?T ,@skh6"!bArMD;fey!š~s̸1+71:򵏇Uh@ l ?nJ-.ֆ}?cE>)jLO~A}h@R<s[`\ԸZYQV((u]S|vyޣsn6;kv?$@"?DSHYEZc~3BDj[OXJ܄[&SON ׍I;~K%i:l0PS/Kw9[!=~;ONA'ELtD۟+Nj\tĜeVs: jۻ^ H )舒Pe~(!Mg>ݯtCد"A.ѹNRԑcWR#D+kH{L+hh;#VsUtPV}@zX>{_ܾ; 򏹧=E_ʥam3 ?[-;큪 ]"K:`d9i,_!Ye+o3NX_WGdP-&;zp4MKI*B wezbQQ0=;wVqag8ۓ@ =NChm"fO|}#8/@ip Hn40Pf92WJ<ɻ~Ցm ^K˥zM'-lOɂaiGk'}G"Z^S:@V^ ,Z N2ӛ&ڜ:7DJ .悮m>nhU:Վǰ<: ^4G0BȪ62Q/%Scar'sCER3i(sba3>H T,q{EMRQ:@ǯd#bD&y5O"u im@א N oE![-|^'|XD=l: .Y#am9O8SL<RD?;'X*?EP%#wuh4;`@ <).)Bn!I6՛]x"UトAXp Cxd%Ͼy2,޲[6dhch DUnYB}0<0m&dMmMu(=*mv2X44b/KYߝƊcWѫ778ՠQ*cxeH"[w ^Zcx6=&):ڳ,[Pek!;@$ W_tu:G$ꌄBpPn4Ɠ62s˭®0E0x$p:ɗurJT:㘢l6{̅-%3꡼3b.ka&9,PUwcϾc|vhݠ篁AJ(N5|n)hQ\]WpGRROgaݲ_|OwNz}lo 1J GDΦSm0fX% }<} ٝ_fESMx޶S($R üׇ|]p2|/EƘ/8%eFK8:~`֐eNMb5x$@sW &p7z}.Bmm{6˪NJhb3% Xr_&a &Ƃ>.Ⴆ՟W7)95\uIdP(=kM>Wz{n.GB⡝FNh<[skEj3kLZBxkI' o{UKX'e]S8sP@Wi s*;Q̻4sHAErc<%`48L[XB|xݞ$5 H;Ssq`zMRnIiq剰`JMJn2 F$M'\U `fp-Cd@F?穸 vo̅r [p1ƽh`R갉# Ed:I1͈P3lhNk#!L8-1~ޛ@[ӊ=$ZD NA9A,56lFK$i䊻 ͽ"ȄW--KDq09y7F=OF'i:w\WёHNŁ<Oaqb̩M#V3C! hZ+X?+Xi6̩ D+l Z׵T?t75!pmkMRg' 7F*MH˅ba38W )Oa>Q#R%mCn_݉`തW(S?ȟ4t ~OKTقQ# RԨ rp2 2 $H(Q/3=b`@hM<# j$RׂNb_0O<?56l@cҡaPͮ"2?>:Rǒ}.X d )IzEOsYb 5ǫFbj&ĊvQ:j^{ 8h&y4Tb z9QOq/Fhh f7EUE^f\4F!'WG8?U焔9Dx /!'>uZ$ӉceH\xDɠ}w] TbE" d#ٵ''@845!V!#˔*aε՛VXiU=*ns'ONj21}`}@y(a W$:V_13/X=0Vaй3-  "{4Dmƞn/F.K`r\2X.`M@D@BIť@TG|Z.HNZf:8D˗!*hF|3N/6P=7ڜԽj  p/r˅˖w)y}EhH? Ax)gᱚڶcG Β`aQM\=r:f/f^l'."ˮ? vYD q0&$I.x6ד4#}[tUz!p \Jކ 1Y7D0 ȑWy: 玗kX54#TGFD٧Ʈ|=N  (/X[Kf1]wM\"0nخ"$(7hA^yKޮeVx3j2G h?-1j)QbY-7 _NXo+sU̦(O4|_C n Ў>ȩc<*٠3.Bri䊶"?@GԻ~r%_P 3zͮL 5Y((s~so3ƣ|KRbq*C@g7Ұ+0TB])s'Tk( RGۡ; &?Ihx牲lEbw KF'|k찅|kI1xqۧV=GC+EQZT)ghX꽲-Ee Vp@p8V C YA'FQ 0.x3Fs]٬ GYVO_ۣ5z hvY v=& ߾ɰ:Ω8]"TQOjbݬ5#La\r"A{@KI bP]" ̣Ɗ!W2ݰ՛g!6 ݸyG|g" a/'=>`/S]1׸j?'Vm4M+"!Ea~ۅ%"ݏ5oő 6rsB,8+]g'"j)isR_3l:|n2sh{Ҕ -\`JJBt I/s 3$K= /Fv=ԘGr^Q}զe[/hcJ(wɜ8~kj77ZϚ0oDr"^׺Ez@ARo"N󎿄..T~:]xiJtw-*XYr8LDM4ux`DT6C5J$p|x;qP Md==^"b-]a,Ʃo4֍1[7§'NE;%EU)[^Ès'U^m +\6nCvI^rooW2pԸ%\C 4|"z ;uBm)dA^7o:: 5NP')dܞ[1`9Wxם6l"65G"UdTv ̆O3*9QwmH~ q0'"ylu赑&F$Өg)E 't,2r|_s"oHY E,_|V?DTPuqRry:*2ۇzzr׮Zkc[Xt 8[,%ujKӵS)Hrl%&. *\`M#GG"IOuH;ǃq=ͫX C~J\F;NevHv<6+++BRp CBW3sXo1J2×OYICgG0"j3ΏL楒AUy|3T%#eHlUwƣ2~r,Ed߅[Y,7̴GwփB~hx9 5L*7mϝ?X3%^wNA5 > 4s:z@" r%`AJzW. i\A1\xo0nkȲ "tAɼJm='D|M;7#1BfA3im} ~Pic%سsAGQ}H#3=%7\O'ts57ЏjT׀gΠf#T#`H1jܡ>.b Vǫ2TVEB>7(Za8WN5U\#ޜ79U$̄;se?jss'?jY`|?AZc!QOdXgx1[(v:`爗 zDn!+ $>GǍŇ3* 6xA9M˞Fs2 O3*9+@;.TuNQIP_Ǚ(&.0'pNպW/e~rsotjzμƿiźN.VOL}2=>O? N9pGZ|}V,,,z$?ց$7@{Bm%qdRy?Ova3p "|EMƒe%ۯa);Ǥm NC P "a0_VBƿ3ϴBQuEhb]Aoa2#;^&9rX%A1!#k в^x& H-t#wxȿ,$z0q˰?,]+~WdawyF2vx kk_OQd,it{Z%!rB_nr{j,+ZNIc@`E}p:qJ.,9dotPV|8Zi<ͮot`"A)3pqeƆfjV%SD$~.B )P%IJ9AG+V|lZ9dMcyiPopΥoW1.>i=7qڍoHfu,Η", 8@>!:Fh|J$WHԘ#h@QX$hgkfMkhOqN>6j` jꮩj8F%h?8(ETTnNPEǙo؉qwk9͂/ɈEoRXh5Zp&~'[[YEC%>ة% -f M3@13W>cF8ћʏ;ܱv;拏5 {f og]!"^Uתņ}u"v/}"l ] DE]WI80*X2QOdέG2jŁuC]Xxf*ږ2g.N/!ێwLp HCQyZĬF;*?(8m*#DW{H'U \vE~WGk{1ηR7 YP46SsޗA1tPݾ@* 5h92լRۣUC"{aȱ,z($ y[Lu6{[:˷KZ \iX :3k]@Ieɍ[_h|ۑbL,_vѐ"j6S6 2l*eb,)olV@"8揕VPƿ5ߘ8Y;$ՍtL9>Sĵu΍,#ϋ*w2>_ r6CI3)Jcğm4t 0:7NuXO&t(Ѩkc\A /B]O#"VZ|siYWviyUJpd Q71dy71{#ucYB\{hā剨`+~pFZ@rVvDwRTk +s|O Kb+[}ntO[ @vhS0Y_ I"61Qzӣ6N~$=ũ~0"D8((ɐHWY}4td fCMhߜ`uq1 ̈S[m4g+w,Rex#;ۖ.6+Bae cΒnY~/칞y -T|Zk>fY$4MۨcabJ<ڽ"P*ˏ)\)^|Q:y3ĉ>O2}+ ܖ6rٹ.t:QϊI)|? .<ch}25P)4g %tʽD]d.No6U$w:q/-ɬ(xU{i_廫{V6Rz $mA<WNDla4qӵIX6`?DC>SQrRl(>\};B7YÓBRO"=& 6/@ J =[&[}: H$V>,"-eNu,^(*h7j|Q I' JeOtx3r=BTJ6*u?T}99e^w$WlEJً0(FuRFC/NJj O# WE9>v܁Y^Z.U3UXE=2lP d~o;ZaJw [eǖH4%y u 3;Flte/b13uoMtLms'=*&%rP֗2[o=xbǫk+T8\ZFÈ38,^~$Nqp+$@=]qWQ)8rDU|'G!vo hB$ dJ(q^C0 &I-o2xa38YPʏa~ 9 D.{Z&= -XkzetIHlaPn"p)rI{!9+rD4&]v,m£,;lYm\@rVhg v]caIVY"`poyIm"Xgc%(ă841e܇G ;hhmnkS1LVz0 !̹W1/ͯGݖVLދZA>v;4TP1o}ŦNc:;!V5js4ԺfB7 "jng , ȳlNrA ۢe'B5d- ֽVt%F\k,n o% ?x/4O,YE.>o"TеVӧH݅5<@EOצ\RR s\(`'f*%h`bFz[vmBYymIKE/ɗY|3ƹ1@;3_5[4)rh~# v!z*c(ҍQ>`|fL%V M _JJԩ l6(l@?ak>r9C|Zf~%[]-P%lb sP]A+p`^s>YtB`jkғüG˪mH$|?nRqqĠS 4EaJ(8Z~ em1!*çqܢd7b/ޫ#G\ N:>Xgiz)rzh=;|v%c VO myZE)$3- =0f/prP<'S~ vr ``Pp(n05c_?)pgc.ddz^sTB!>߫C,GwC0uc!4֝JXCQ~z2슲?(_u|_9__ӛhkBCf.8hZ^#Ƌ*Txi 3R~@#0Wn,߅NmCű"e=\8GZSMw {6c׆_e͞_gbDW:$le]k'! D2M ~z(c`HcCFqƐ Ě棆o3x9a ~C֤e0 Kd'=:ydZX!X:WJ`aFގ+Kз"z&'gM >4<@VӌѷDD :e˶KB`,ksӟ FK]z7bo1UU)Y NHK ly$㚣6k:9* RG5IV#1݈;(!Q1Lh<ǴN/G5I\{ȽXiK'Z ũhX8 i[8Z(MMJ:VlI [AҬHٗGl?cB\m+ VFX0QCncd0_O>[>-ML` eC_@.cpZ;mݝi72s7$v?X8Y348\D pkJ=اI} ]pWZ޹H QTf=9'ȏ^A_MZ-1筘@R?xlob tr6U3HG5Z<ӗcU/}`dӴ΄ޚ/\m)6y;&NB5:Q7eCtggo/)֛`I7L\P~QhJ}n> $D9[ Kj(ǔ\ۊt2 .u,q1lir!&phTf8"(fR;By.uGQ1tZ m8B|\_ʶ8K*8JlMwDLmJFšط&%c'Lf~r# 5>%( :w҇[MOw֛)BhihmgQZܿq?@q7S՘܀Mr `;ՎZ=t>Umgϵ_(e²"H<,sT2\Ԧd- +ۇ {)on^]=UN9(^5mtV>MVȢF4DR۳ӧ]TڕW 䎶GmIXqǧNxd-gAL4S˼YzJ~W)UPÌ ;C;2l [ {thAʣ;iܝuf&m:.48N&޿_}PeR`ܺ#~DY\x fAQ:OύU=6wBnAyf0Nt(3JRC`>F42g4`lnXc]&-]^^^*_wĥ7DK,ܧ)1ƮEȿsR=TR VKiI<38aЖSqa'F ^_ O'Fp|r.+#ܰ〵0|hyG\V F+F6@RC))LxV뙍Hy7@x&5$%=vR}74Sҧh]*^lHuk52D`Kriq5l2?0{[etpilZoPXNVvjr^?:Fp>%?>zη :[I~^lgX%RB1Dȋuf1, 0cXˎ-Ȩt9xKe!LǨw91h|_sga)tuUb3L{Qo_O015];Yʞ2KkIRXN&&X;pARӰpĂ@l'H5pb{V" ժX ď[\=>FR|]I-v+9-Ќkt>IYf]d u:I:iuYXv(H tg;6rNI|<k N ~ )ԋy>VyjnT9IvF'7"MA*HQ3EpԜu4N%SJ iٞmcJ'Z=ǶEv)/6*=?o]j&qp=E&rq*/x8h߱'{|#P])^OFaS&(&s{kz_q݇֯Q1^j"ƒV[L`Hʯ%N8* R]7Y;? -^S蚗^}J^Os-"fg;uڻ[3NBWƩ&ĕs`Z{j=|_}7tL/"nNŵ&ŔF^ f!~к K|c53ܼpt(bG7B1_G$(%w,$ȪBo5R'=^Ղ> v:OWij7k48ثq2-; ElʪTr|쾩C8,yp*l;R%&U$&l\>~:dz xf/.qd5S2Sh 26 jkwVůp|}4dW6p:VmZ}D QKH:\`-+cG|?fiMf'X[G.@O#]SRfZXieo'ȉ=l g _(Ϫي҉K-qb@2҈~'-F¥SDAh{;럍tM Đe?Q9mz] )&;^&')u'Kt{{`Ӱ2Ix>sȜ锈`VjyC) yt>3K@vq_~▛ pJ#ٚ*e]86̎`֭ 8XkbJvL8K_'hdIoLS43RՉq֋~[X\όIN@w?<-k?.PI= -ή'i"1zsَ._-`(+dd)< 5M>V\`XB/}堬q:J{ɳBD1TlK| [| [>n!pUbT^ QXI@O8!J9A Q[bKJ-kl^PK*ۦç^ΝDI  rO's%WvɴyU1=Kέ|8ʤS4ǁ=b!xeRO|BL$zoV!؜S !z aIjV/|[Xr7 zFB3hG#b=fG?[9?=Ԉ;I Wkn9/+^ X\g\~yzܓ'!C 2OאSyEt9NXK6r>,WC賒[g{PI D |R\}4H]0Bb {I;,FQRw2OYsaϸ.鎮͖))W%]K2 ܚ[萉V_q$O,:|8e>Y*0MWDRX<)CŧF% $-x.]_o#, Ѵ5P s4(7]M A)kW-Q#_/(XmTP ݽ>O+(I *@ɸO3.Aֹq)SmjhbvԽf q1@'41̣WĮFWQ6D[[P=4#wP>=#gZYF جS-YM-ms!i={BvuBzu *ﱿ5[PYkx5r[qIP7&|<2uT@.x8N0 j:I5M D;/-لy >d<\۲u ε,F;k`t4YT[ϑ2 I\)(,Mܠ pD^M+{dlEhIBA_x3͑*3=M Ƴ^u$(>D I#Z 򛔶;JMd{Á-z |ezb ԁG$ I0Wwc OX/I\ L;8 SwˡYs'Z3E>eN=˲^u8cR {Ҫ &LXb2&*=?k[gN1h%,}M=7_ۈ)5 j|-2YW ',)P8 ?l#< s\CiH~q@Ix紪?e{h%,j=g:,%,-3 x4]K846;tpc晅P9N"J @b"f"?&Mŋn7QXlڃD1P:Fx56aym ]M^Ks\P.c m2Ya ώc*p{U[C:Vךy*1#hhH#uY'1)پ R׮ІWȥ;DCP>JC!n/,q3V1K]a[X{Տ8̐S1^k2*OYf,(o7M76 ƺdz,;8j"bg;MDzSPk[O{DȨ19DP! sBBtI^Ɏ87s ^p|/n_eS&v`ڋݑw}:=M]ށbWAc.ȺYI:ZA`g$؈!ϘEؿփ~kr(+XB@^iMg&Z]"8/\ @zϓ6tCT/v[hf7e~:lWTgZ/Q'Jzz=_V)47G?޾D8؆9Q1Tu fE;55] }.J\;4`J~9-r4FUn~g~B \/%zx6yOL#V&ŃrrNjq`{l}6 SQL%jwz[zڠgCixz"cŗ9oW'r;%~V)w.L~ӻ2,6=Ʋ`U{[EŠL*1ek;ts~>!xF*ud06q b!?aN+诜ɵS.j$-kg.IFz=,-w5%~,߃RVe9u|Pi"ZúKš8hsos߅Qr) ZOP/bep.@_ ^x &$d M警'\äq@*2H{wS!v O mUjqVE䧔?U."v'}ʛkزV™:8zԕ5fhʯU-ZcD]_;oAĎ\]1{0χ-i౴F=xx+KMDupvX[mSTqjo9@_o*T4kbDIJ GQ&ހ#Xf@~rM j$#YR)b )H,hӵj3ڞ7aH6,mXf4Om!cn#FB:} ؿ.d͔3PC֊%Җqʥ5뤑PqZVV]M^Z*?'>gdԮyh'gؚlElBdB5ʇIO V5<,C׋cXШ#.w^:)"[DZaP.]eiw5sW*PrÈ#!ݙ yCYR}7&E3>@}=3뻀fkV$8uѠX@!OQ m5?jE7RXyI=!qxJkgkq(\9_b}t%~|&.ZhY}֜Y"p9-FH! \ɏd8{n\<a+r|݇M Vh9K] ȟԘ@ijRRa|nzuΕm-Pk E"BfnWT`x'TGWM}k$i͝F ı3̜N]$cqߣHNU%&oxqo([h"DEɵr,3a[T'F3OQ_Gl `x ۍs,)Z9lAf;/f4&d|k~Sr9{Ȳ" w̮8*ɮBcSkPjLGa]x#2kW&yb6!_k#T{N163lOy֞l=bN8Brگt9y%Ou>k! 1Ҟ acϵѕ\VyU'yv0s tr~K<Nȗ= O07bsCUIv-C8HO+]%ȿr}Wgd$8~Ys? FV`Y״~xg9R5i4~S 7ҳlS]>o^+E՚!Tu38JV9sWX rB>Ů57|C [/lKt='8/pݧp6|߆Jqc2~|O.fHMGvER 1p+xҊq:SJ< .AMm2VQM=QPI&1Gw[TSS͐Zu}$ͯ8p*Ы}P][7݅0/q3+Yk_ŠBͩa Y|p{S2:f쿉JDfEJ&^e㈩^|þ[:gnll e[a&G`I`WGC2|L5VˇI<<5jX:Em@, Ufw BY='.4mFz¯Ve Eh’g*y'ppf+Yc€ 0ۉLbpR@:0{LlwEufZ .TPpUvǼ@J?կ)тu ]/}f{BxKή\DDʦu fTi b ҽ.G)J&՛i ]R[ !) awKAE_[ݒ0~}Ϟ¬ƓJj1>Me3:%"ǃdci8=Ytzn'X[ *:HYUTyYCbP  3uI684^vv*P/d3=rC"3yQ>WmHn0 HuQҭ#+S)J؆'y2B*/q58qCcp& iC<ǨO]= 5-u83@̗<œ4P"]/5OA$iz*ub*;aA<<1Pp *[ ᷌H{@J뙘}#Os~4!x"1޼d@ JF0Of1+ۡ"dV !2sGJ'UHbʪ$szIJaǝ(J^^ 7j%)|E:;+L_:b)tnra)ʥ"yDL1ota |6phAKtHuc;͢W gT.޲zW=U<.rJv<޺FaEaHySpIUSK6<:E )_p[5ŴE% |3tG˂8VcIy+ӜĮηpIP F6G@ g`bg| v}I+}zHuXDT 6<ãC\bw4]E<icU͆eFC%]l.Mg vVű%G*eY@pOEOiS/+a-jIuPF.YVNr"r`>5YJ tLAi9yF;t܇q9E"*,17Z hYm+)Z9yǃ $!fGvp=̡ g {fDdbҖP+GAÆ8BF}ZusSş8Hr&kM:ʠS]v\UGf&%2YthHV/)%aT<$ەLcЌ(o J1@-΃0+NDďC7$]͵u7;s]O۽W+p.Ѡ}DWKB٥JH7ӎm^jef+X?"1ef_1 fM5'Xf(~<4ه t橍>怘Rl f(D𪱄K  +pGgo<^w!&%_'s8׈z:SY|(mV.v4aou@<.`iM畍pHҰ~S_ clrMjzwaIYD^ʨ$t#UٗyiO&7W6+c@@E\D&/LWLh;_Wxߖ܀^b(uI-cvv.MOoR)J́Wy95웦[1dpP^v.8+^.hܮV>@|7XHj _Y M= a\o`R{rKsГCf+6Ĺ9hӻ"I? (ɀfsJn( i[.}8iU?\5cЖ$P~ٯ!|䦙 qUۇ=le [Z~OTn# ;mc7O qrEbٷhaSh'OUDW A^KN2;R) ϻh./!!܅c 2CO?@IwVK2Ovӵڱ-3ʼnBޞ.cTmjo^,1Iش5s#MUy 8?v&y~ZLςo(!)=USv;"GS"fDMT,9\F~) ᤛE!uqguLO`;4Uk[L b ϯș1O8 IȽJ/K!p4G2rBuLp#N.!8ϥwѢp"u[}*kͭȼP|=!+z9K}KOq0qh TA95(yh1REr+j\`CUk.`TS&e!9"ytk 65"]EHYQ { sv]STe5V1p++a}?ggv?ei:cXe4ԣ |R T!A* 6s2됷-7u"7rxWQM D:!eˢ/@v8()J=W7@dD*}ƍԋ-!gB񍖱XST:3[qL t%^`]Jn֠אjOv";ȼPK9̺T4D'ϠP)nH&j‡~,%H ǝJ.1lkOz/.PXDǦB@AHԟȋ @9k*mK >+HscnQ" )#@cGAPx&Xʃ)BnюcsZH#>o>voKv ?My Aczb1saSV'YxO_RUJdPm=˲M}0AO PZCp0O~vsn7r=ʦ`!ĭ-fivRZ[ΟN^h֗F Cab*zf'i1H 9u--ăq#~ ՝<&qf[_5e{a8VPuZ .dr6U`$l ]s8#-0X[j@ 坫مƑ!Wr&V0RqK&UjaC珕: }*e3ЅQh Ʒ:H%s#Ho| @mz%XEQ] ͕{ Vz3O\l&u6 BQEmG2Ah24ۥ&Pz&%8GxcmESw4UQېX9 L2 o?*G=OKJa Zi2!4ّP. Q7iqۨmӒtP[#%[M8q&Ȯ-'yDy{bYzG cQǤAXa"vի?Uh"o0ٶeo*}ՅSF䌹nmaU _CJ\l q)dl;FO9JGߛp@VCJWުý5li?-<[TT2Hk'i1` A*}PShIf3Ҭwi [`9+:+ hß6f wh7"saÙ$%-]dnG WP%@7小 ”mǕ3ө+7 Kb|C_ 3JW.rԍ]c+ ٬)x*q8G8N4T&@z~v+W)=EN]Cm@ru8=$i(_e'=o]>%*RȧzP$ɉv?w}+^Or3}7jl磧*-E| g>q"?5uj<1src3m2j %c=8 vi-0=S}?6ZGHJ׫'N+m4~|A61r@iV#NB$zmQoW4?6̧qu`茔P n` 2M6_9f1o.2y}4jV|*~V[:fqJQߔ[|NYoj0]笆Bg֪dfE=6pBo5(ahy4YRdﱬO~xiBTeN"FcT9g,t5Hvr>:H=ٓ0H=33'vܨ%͂3Wg[w9S^uLgl<%R?)Ȫ(xcpdwMNŦwTAi]շ& Kq{z;<ڲ˭&e_%MIV;MU?̯qb}zo~n}~BadQ4-1X ^է0Ccls@ &$6ȮM~cIo-,(ĂAF~de3:҅,BM/]^n";1_t9L $/ߥ|R3 P1~c!qVS9Xt-_ @ O+ھt{1%/}5|"6K(w.28_'#v}4PQv`m'h3bE5؃8}ȔW8]Q^<\( O[ ;C˙Ry]3g:Rxo]cZS ;7~@8:Q"\v v=n)\- e?t{닝h4}(e?0ji5F19VP#[^IhԋFKve*޼u?$RiB CC ?1|k@Tn8U=>GOc~3_ wp~ck+wdT-?xz0ҋl4^j@K!(;LgV0R>d1M y^A°',ïD7ZWɗ y |[ j׸PR_::op8w h}3#FM̸Ch>Ɠ"t=Xwe<3ѧN ó)A@okg:IetfiH/h1DRǣ5/{+c߽-5?TwPf44KLm)<<zpfa훼i2|8j׵DU~wc!jKu) P Ea*V5H "&#DԔqGTMFgLx2ƋOe>$MR&X_VPHQ,r.R}2_hy%^|z0یdRXrj]b?l6EG>#y+ŶoE@Ut+ӆDGNNgXpOx|X=~5*# EVBUir ə zɯGe5RG(t %VNR ʻx@Dnu9}Do ܳ/I9v͙0G8P׃fTb(|~ Y8:.nfY,oXfe;]"A@eYaBsS PŃ7m* eUՌgJLګΙ]\Shr9Sc8[7#Ey3Y<z0ZtrhUV sWmF_XaJ<%р'K܍ @swߓ,۱9~MkA{N!*'[-̹A\=Su2:hpP,?{jL4o>FWL,c;p$^]Y,J u=n;dҹ6赯;@jy,,~Cn,GX N*YCxmqJE|ȍuI>습d`ᙩC6sPLx+;%޲jAuy4saE̊^ F8>]BNۋWo6('F sEH^n gFM"*`Y0q4 z֢bvlxFƝ~@\Yv)]-~Ilq5O.[LO e$=wj[[ W0'W_MVۿ~]v[)mD"&U_ d=@%R7"nc\(/bmC !yM1XO _3$iqu?_ψRCð \]&v#ue͒1(^^g1Qv-BnZsd߰ζukeحZ~T+ }/U zAi;c'zbӕloQy+ʁG ^:{hb,9F Vq}0R?2e+qQUv.F:oy$FF]ݞ%+Y)F K BMN/R}*Q7Kh/NGh]`,vT\}q)jFyTqx>7t;ng.t)!W0Nl71!A6qsbSaAҤpLc^*?Kg.] \IyLѩ"z];e)${mYWvF.ls5t * Q|#G̀'cMЅRO?H*\oE;k\Rka]Y01l~b\ޘ@O4( {W8eg-rF~QGn#R* `5H:zI8C~ۡ0SƬ~ꆦPb&"r;);AMZ C;|kDS.S\1FPIT+_~;˅w0ؙ NbV=IXwfcWAvCЋPA\E_K3L]sfQ)pqܦLgr+i\/jֹFgi6)~{ Vjmj"[ c p}+==ʉ GԠtK$.NbTf"рCNKGO'Z\jW 5u^jˁh39MK( SJ#NzE(0M@IwioZǽ(jIbQsy8#˂9r4WY3w=`)_?EңʐT &;.%Gٱ- :lL-hδpePEN-뇆`j EzVh}t ]sAS6! E9+F<жb]\ f9:}Z'U%`a.x>P6 ~jp+x7 cIyYXj^08pk; ).EbvwjRBʗ6P( ݠ(媲g o1K+MJNPhq4;\ SߓK`-@9'k\sG;ʪe=L|Fj!DPlwQjz=+ۍXT`Үx=hdw:T;G}͆ik? }Aog7ώ|+bVC[h0M.Gx ʞ%ʭ uKP^EZ*1vV,_Ma+l]^aaO7/K `*T&H-*yd?F2f0Dr !Thӛ$;v<΋RC&;ǡXE|]ѐW+x(G*N$&וzyFZJ+İqMnb¬ts`nAw(J"VPV 9&x^;SHXx@hb<ʫdo<;72̈́U~m`B .^Y/" =eaƙ"g_lMڧ·=H83™Krp79_MhQ1#-ԪK+,;.)%9KUY{eF{۴9<  ?2Xco{q :CC: _-t1gիGdn_#)xn&j!ou4c8䱑69'1.5@O Lv^`^,WH,zbtɇt_~Cb doyEWG>duw6V U 7i"sۻILL<4ga> ]m@(0=" ?#؎3hJmfw3WF:ej|)W{G1MT=@luGkS?QʼCМFsJkNT.dx5鼙 >XDCn87SHЮߦJ* ɡ9 /0.QY[eYl --Dhdx)SF^ CSƈ@"zn}8ocG:AGĝ3b48SɣUq*ЮxeKxj{ӨݲGM#vYU j)+l%a'Su&(Eӽ'?M{Yf!Gm޺ޣ.8I>7P76;zk SF<1g/A_ݮ0T P-|OlC&ث*m7ޯ+"FC#蜊iVRFFiK) 2ޥ>i#8*^p^`iU?⼩'N<2Yʁ;4Sua'*2bXt PpxHFF5x DzwF7.P0J172 .5*3̮롭 y7"Xfֵ3ʽ\A)qf)$pA(P,Lofs_L xw(T-ԥh7WStB08Qg&tWtM:T5ԙTf)1:G"E^)C JlWm[ba[ʻ[2'ޅt\\Ƒq7jh7c=,2}Ь ЉUZ`gA2NQ)./2-f -yN^ES`6!sDa-jVl<;i&D=$%:d5whQՎ"84L,ZBy,c/cåhM,|^:ɞev T f|InF5 DC 6ZZgemƐ@w X"iQ%=Hrfa\b8z36)NA!Yğ ZBLS̔g\i ~]h1guP TaoXΖ[.eEl S5\-0;5ōw-<_s׎xhަP:ф k[G@^Cߪ ܵ*D+E3eZ!+l] !XgD/:NY5?T T6~-ю6n,prR60s^`ÒUʞoᎇS[M"9zKO֭R g[FӺgA,kV >T!K!ݙ7ڙS*Ӑ9h)q l\-්Aa8"X37jLz$Ur(Z.g%twWF*Qc^ X5(3r3di1u շlw(F3";q05T~ï>]W2@"U,Hi) @HFaC LvuܶN& IE|IMf QJLS6]; YB5",Ml;/ HZxޓīdeƶ{p!G lnKrsv:9< XNP\Mx~lBHRS-_2r HsDJ)Yx bb}\x}G9aگ=ŭ|z7!ORGhC,9Ǭ Ҭ$=I -FK1UTy.lbLۺI BUཻ ێv"ځ/_7NKyoIπoˊ6bV^>&l8̝м7dZ&*eѽjNZy+$/ ߟS2D v߅Bj<->{1X//l;Z_ o;.Ԫ&+(xð^xߙХk:f YءNqCqo6scx (n>!%~uV8ܒ  0fgR]:W8 +BkӅB Uu^B.# vР$@0-$ ĥoIy00Ikis,~H c[lFkz+S/o)@,S'Zp1%FoȬna0'53W-ĸ[EV}c?Q$yT= d2B\`dX1¥I He:R u aYhW #W^!;S@ֹV-aE,8,"o=!5<8/:dW.R8nqL`τJy04,U޻6_N@#3Y|% Wkeʝwݼ>E wT(%}=.QQq9?Kq$ǠE Ւ gz")vjF xO3`;t,rȦ=;p@7|`Ȫut GL&T|Hl[ рy DY+_7C7nn"~x39{o,~)z-vؿE\JX1ސT^aze U,UQc&Y2vahUl:_B Xh=gS:WrTSPl=Lܾ9e)H,56ZHQˠ}T'@ x=(zlm \w6f2j6,1,7 ?' vI]Ą‰)@| =Q2.%6i+sGd[/^Dd -v#>|' H |Mtɾc!S{t&.i#oU@]( B^C%/id?>cfr ܾC|oL= gχԽKNe j ,Zk8Xˁыc3b {6!/zϩ٪L,Ty噰iG}'}JF@~Ua!_w/B994?m-Rq62FR^k֞Z#ЉI22ЗE+IniYȖ3$vT>{nQdWCFֈIUI2D}H ϵyy*[ü;p%`Z(bI\kp83h۲ 'dCSҚ6!fWp3``ql9'r7 z?Mj0G=@_QW sGV$_@MG3K~@ L]/vJ]UϒnXCfgšM,߂O'9,m]q=|Tj-(eOhl`OA'c@.NiE4 .8gVcLgHcn}2}$_wI"ϣȷ]AզDuU,$:VYWi2<0"Qhc.%XC&B5"*紴+w8pok#TWs<Xj0,_rSrW; f"qJ ђTRV9`tlIJ:_eF[lTlQtZ`Qmoϱ% ` C#cT@lnf@T\[ fz(2ɟe^J,7Dx, Uikȃ#N &ZA"QZs5ԯ?.OcO{ {mم3s#[ 8WUqvivP#@NxZ| q~W oiܔ>ʟ"GVr'Vyte56Z[t]#>jqsxQ5+,R=CDF{S!&lj)2u|igNJ65Ș8<"~ ZS#W[EtYƀ^zw0-|X!NT-K@9x#'|0:H+iUW'z ]`>Ͳ'a҈cM!n`*<*ڥRo(Q^ <$59FdIzR<2]ym1]İ{Uf [!&F(D!)-H09-iH8|8`Q `icZ7ܨ]S*Xs0}MUej7u0{!iuf,5z{ 1EgyoлB=~+{xE\8Y !14"<_}D [܍ Ƅ;;O l*9)զ<,#uz Y@1%Eԛ(NjeԭuO"Y?n7Z|7r'+|iTJF&l7D3"Q8.cĺ{8s< \c_G𕹐zgI{9p p䠭Q% W!NCTGijvhYjm' n-jF)R~6h.i]a oCQ8 誱nYSQҪs牢71ER9O&~gPo@{`h"p 3]hU,#; $Ís,+@_Gص])3Hs(a(b(*i:oHohKGSƦ871W.'9gRP48ȴزP{$;|ngǦvJzj򊟝y(ٍ:y&f|ccUY1ҭьˤ0ٰh/lW>(MPy2*/Дo_,FN}12TKqra/3!:8˳tvr0ƚcwSV̏Jc.%(þP/ TjDHч%D6U,fin:OE,{F lq[\з싛#5[uyT 2%}»/(¿:V`3]XU,VSʉsa/( b1S: Zl&%Jԁb/ԶoNmQɪ Vٿ=BMծ\oi2Ad.P a6{ˆGYfP(djb?u ֢z5;A`ͤQo2܀HSJ& kNԉ&e㬺'P-KF5?B>%}꜓˹4[PSʹew-;s '܈O`Ӭ΢_.;x5P)߼旰aU@: G+1MӀI>Ew_^Uv$K+'1%)?ƣK y,>j)VނTYW_ >yfY5{70@ZzT`Ӆ0c-#.>%% [h4oO)Y!Ui2@<s0z2&XdI!(;LdƧL㺟MCr>r1Z0yIM][Obcew;Ѧ ċ+$W.7Tjtb"9l /L_Gtn_3,(?W~cX8 ;,Mx[hA]85pQ+,sR_7g>qQ &*1笻Ju~sNVB12 k*7?ލgtMUQ5' 9>Xa1z8_{{ ͸%t[uUR8ޑ5G]FiY&96+6Ccg{_Ҵ,xd7k/LHfxp;(8{ EkxUSRrGTM*5Ɂ`a30gS>a"}BS34匰MBnR:_ٰ~Zgn)AsGa \/PTv9Jn7[oMzVc$-fQ|0\ҍWk6Ӣtff;ͽޕah{\ :p 5sy>bMG2,A ˲&f}4J4D^@Pz]BmĐ8z$%8 gd^;g{uLuDIP6)iAgrZ uN1ŭ;SϪӭ5had7%0[N7AldY[Aq]%YS@KFTzϞy'C }y@Qfm x>6$ώdj%f'I.e*7nNo[TԐk/Kk۴FV_\|YD;SXur9eHxZ1b^fOyb 48}b)ڐ\jgٙ6w.IIw`j]FC Ҍ?Z^?n;1,3'=d٤Knf''VӲ]}T"ХCyXxwx7uN,#EkR+WL әc[>Ɯó`kRtԙo:QW8~zl&ŝȟK@dPoZr㰫sF;)/[ q-W YwC;+ms>nR~iF8V+4_X<m@A43U};. 3T%텯,H#oxv} !ǿ=~VfaĒ3 ד4b ڄ>lK"Oȩ>K``l̻k:+H+5]CQzaeex{Ga+:~on7G;rdC'ʌ0yΰTuHC~с/0Qw{Qu9p>Lc5$$N)Dwȍ^b9 >"oql ;?%#֋%Rf6V3Oq8b ^ elLu<#:5 5  Ԗw 20qqI< 0=ޮ % dwv\D]O<.S "M[`j{]nV "߮ŀUŌFFmv9])j /ϷFzjk!mJT?֞EҖrz3L_ Y0J:ǿ!.?o\ߋsف4#f5.,hd'jcmLMNn>%73WCXe~N2"KͲVPJ!𒬏Aj ÿvJw]p[`+̐ 2Q'${H.vOڢj+V34 @=G+2Nf<˖Ko:1F:sJHJ I9S~ J>W0N \?nlW]! 3XA4CD"xן(!qH9zq:q6&n4uHd<`X92TG$:͠d9X͊ي >d`R@a&RNS M%YVp4p6/9VH='ڒ\x5{+Z"ʟZxI;ڹdw{nsd+X}KK <`&QRN#smP l]`yWb2ud`)䖋 L92hD@bTAK\I?$b"@j@X2*}7St#*e˘yƐ+a8Df@P$ғIJ3FuY<ҎM4 ]f+MU4h&KL!s "2Lſ%Ur5U/:u[wf*Z0pv=@~<; 7H~z0 `u7 B~TFMu\!\R årG5 m4>n+I7g=LF& Loa.C4w>kz u A3٬HeƁ>>)P_D"QTO\]Z֖7V~o?+}^O)'{2Zkw!Vjw aR.;6^1×䯹B/- 5Ւa(|r_=q$Or5-|awa!ԙqZ=|:nhףx K;RGsy" ڪu3 uhZCw]H\pN*8;Qφ-euqM.Mfqx2r] Q&}h 7|0\G(7}V_$:'2id{s9#w`$G]m()zz|YࡈFfCH] րTI$OXy'nAEYjTC@{Gצt'Eٗ@KD&8>meCûuPĐzpN_3&ooYW܉fNE ?:oP1BÈfA0}C}ڢ;=s:i=j^ : U_:COhz!W5n|@> 0$3T,X%x"I? >v ;.n3/?Nܸ?YA|0Q8q˶j|\V'(^NA g(lMd{q.bU9+[f[n,񜖷)#: |>u~DVQ 3 QqU( ! 78;ҬX; 7{Dkλ`kԢw$ ͧM;  _j*xc nWKwtik+&) Lp^jZUQe{( qOθ957CByĕ\q.F3l >7`s,-Mv׏%C(Q-"^x=: fv rSX#HH׊G`N̏G3AU,ÕY?W0HMGXL'3' ߌb ~Q.) q@׆`5t>dK\*(*DLC2vm4ԓwk=SBK&/C6˲NapqlvlXvzˑx6t>t562B;π/0wzVeЉŊk2qbmu6.1̬c L7SN$ eN ڶ'X%…USv[Tt+%d86!ߍ2&y~w0"i'4SFjs}J-FV3;mWᎻǟKSOFg+\G3G¯~o ^"^g$TD$ d5n*OqVM\[~ƵqTCDuRKyL9=t+NӽJN&Ls=Bf*ڻԬW Zk4 :P.Yt{/ʁ^m,@Yz*XmWݮ%YbeO+F̃oPqZHs)aBOeڻ Qs0[>qa_ð;  ]6@YwIO@p-^M l#2[d3i>Ä A=20CW,69'o}< ضî|FSb 0­qPXUGx+-%cQq昀}$$"׈5YN7Fe\xE[Fe9#1bm-)"Mf}.7eйF*@u^@k“jf'pBSG %צ.O7ҫ#+T*mWȁnB9umLS̤LHJS:y$SڽW;VcJ?z.dB+Tqg!H葼\d;faR#@\z=lm7l]q3};`cVlJr$Be3!M^0iKGSŴP?q"<+LV׷Ib2Vw4 J~G׼ 0 5^SH䶗zfDe;k^9\'fhګ+9djqqun^FP~0QoR{t> WWP FQ͚ "-v^Ke[ģ@1Ng/cS'eZ9U *.Ŏ$A+Tm9 b]3pNnSb}j'+zzrO r>!An9<#3c4Gd@Xe:}\bP&ކFs1 s[O2|_[4)b :b)׻<ܱ+z|-+ʊˇ^vJ穤3jܗ~N`N96oݓ]H=өj]6F- [>]NiQf ЬENl >HQ}˜0(cd{R^+f^&e'JSLklKpn;q0c5%a%Ջs}^4jYTl8"vM@rָ* "^+ 21؃kO(vl7mIqBci6/o<+pbm@<}±V݌¢QN-Nk&*\tc9lZKZF6slseZ3*p9~*DP0T r@mJl$0T9xxmS2&ad= x8({rt zxOQr73%Ҕ`\%+iʐigT+w& !Rg[Jz.~.`#PvKPBi~.Th:bC}X;i6ib6DyXw W=-*>L]|d>L,\i]V"r* F >ل<gR)Xs7#t#coiB|Z=0Vt=N!ݱc [NΗzkݭTX+͓Ø e<9B7G]I;[?2bf݇ndY'fFx3 tjr "TbP\lbV1XTuh8<&Nv:4j%9`B'r;#sR*e򾥴c`fc}3 8rGրY+@箵lS3 E5 E}t*skPnՆ.<<"`u*ꭕQBٱ̍I$ů9+  gߊR: (uU\du\q׽~N?8C!1!wpa(sj/ F|1%JkN|ךKB7E`BZxnדr]/`VU^ 3!;*9M]&f,fHahJwwХgI=M̯S,becZK3noy&\%^[p= "< HP{h@ASfZ/L!Ńޤt|DPVih|'u |k eOof)~󰓁q!Sog"_Dn^ |%JT,r~d0Yd 77 0ΓӒ TDD0vZPL:5 ҕ""){ 2!iٖu dA~ۭ-`n(u[r&TMTBaN(^`4uMg2+T5| 6m-PqrS&hvؿjG\+( 'ќ96 V-&͑'N0~*9 _a:1ޝ27~/T.zOjꨈ+{^=ƪu)huOiw k#YG{'_Hp޵ӴfYo2yA7CrPW^ XyM.R UxV"x䏅Ɋ{D^.CŻ249M,9h-?*DGXLZۦ['JqwoDfx4nY9E[*(k: _$dKQEu0$-Gyڦa쉎,ΨpB5 ԮNճHaTqto[옱iZF,P[5+#b=wOmKaCb6Y!o$Ӓ ݼ=,sviӏ@*-9a\ v>Qp90T8ͺ@AjxTvVnkf0սsB#Zg}=*+GƂ\ 'ZE\q]̒ހ~f>,q4y^56:N? NGc8#/(qm:_B(1>Wj ޶'TvM0L{t٥pp ;HvXkT4"ؖo5yS yIPI ܛfԑcz_dž\-@fcҐ}DBw,};?=1.j_6;5 4.nۀu+#Yvvx2_}SUCb(+Y~dfOEn u|ZSc.'ߦmH/iQO#[M@ ]io3s"O=Z}3 T{D2>S/k( B.ΖLygL LfѐE,ڽ~6qMXc]hVڛ֙d˖WT0΅(x>O)9BVgs!" BhJ@WtA]ט!5Sa49Yt:YL!:n9kKlnħaCQUw!*S!Wzwt0 >gf,eޞ`ˉ3~2B<'&bŶeRǷIP)P?d@ ۪i-XGyRd,7+;qj`A?ˬ- z>.}.iTMR\cl`d^yN&7X&}, 髟ܡӁes[2xG.kfwz7N!e$pW)l۲rcjm@ok'J2J<U`#d= ƫXAϾ}gp[dh&Zz-in-QfzeKB{¦ƅ/f$@|bX$bὖd: [PreF ɾ4^⥣ϐmQ8OFTX%NW/pG@.Zۂ#قH# jWz,>snʕD,k ;`q\^q x[2 CaSŐ7-'l>IN-P5ZItCԄ앲oaa {;46`1`HdXBd.\ŁMB(%N:FF2Fvj؏:BTUp^3uJ0S=="w܇dN%8w6xK0wLeW3U/[*%[pRh_/'vPД [ :i;1s*/,vKXwclF۫۹;f_1,|.B&"B6\ o 2+}46'xC ߵ((!I6z <6^5D'#=ޒ,#Bjg*,r&M!׶,MO*wG0"f_h`*Y̧*KL̊ӭzNC3Z q,heRP[HJu"?[dg g?# 6ya,0źY{Z{*ýat&͌,/=ISΤѺtDzY^ACo99I+ Ѓ/\8RcfNHg3/:/-vJܹ2ԣa8.z4s_@IwC&?F%_EDܵU=9(.y^ hCN4Jw+; *ggHȝU; 4TK[cr ҜwFs6TAbF3*E3:i? wcZ:<3;P L9%+h. snKڃ\.=giEܶ|z0tE5$5}/"Q<+t~EcJ-#Ыo;?'6=} uH6b^iJbPIuK%>sZ uHtaEMa*;orex3rhs?3]H\I8eUL\sQC0c_2c.#O\.Nj dW%Jr p܂/wa>'\l፹5,PJϼ}~aRR9F湂Jr6Vff}ٚނ~لQ8V #ȩ p =FRq?eM,!pt}>&<)-ߝOl`286uD6#X^Zlby=UOe etܻ!W}p)ZR lཪ,s“%rЏh@G~;.. rr'~y+mD3MWg9*j"]u[ϾoIІ9EZ >1?jqemDM :Y-9dړ9Dd"PKi|x@4;' Rg(-3<]LAiw 6@Wm]8gVrRs,~ eiEY]5cŅX#ˇWH|[mu=}淌)g!O9 Ζ[XRhMI/%agmVQ  ~{u1^}o'GU ]B VΏPݗ{yH"2UUt'OsB"ߝI3l?늅jc4UjeC XA ε 84gZXnKK7t7SW4. ~Xh㸢ߋXUHtDگJ`(gBD,p55LDҚ;ּ*>.2E_xF;nQ[/W[ Yo .`zMx?fly=v(ϋ &nƉ^ÍY&z؇K{MX,T(xp4B/ F~IᏂ :C% \o@-RHkb oI}I|.WloCfsJ\h |P[nOBշs5J63Ys90s3Nΐ6_q7ZLmԭ q{m)pV< U{^XVptRX%YU}929 7?( .0 b-,7j$@ѩx3tj>G`UP|IR4\܂-g y%)ŠicEۨ5S|b(dj"nv*:%n,8v2#"6_j~iwwz~zJrIPAE[rJٶxNX//q~W<F ^Ȯpߵ5F bϫ%6d P40<+̮6wvW`(8ˠ"h39D7OuJl6!Fsh"AXRDUc/ }У7VnΊI,[IȚ^I$QE0fC2?B+n θ XZk4֎taыCxV? ;:`>&qp 5]+nB0-IC&;BlϪf pDf$]I ޚ("ҶZ*00%'sٝ3cn<4zGV)#v'aFh=ϱq׋?\C DOGқ~4+?4х4@IkX#} zq讙 鍅#.X+2*R*ɿ 1& Į]?dSepz<+qv+ Vlpez^5n;{rٸpj` 4Zi־t5΋6O ˜S.J$+d>9}Iˌ- _~eZQx>и,#Dw$@G;0 }Pv i㟄?ʣq!ڶ>Bվ4;&(Zp̴' X.#L%00f|y'Rٱ`nhZw P×cOkyu^qӗi6 W:ZZ8~cd3m\зO&6v0ᮆ]avb !Z*]ʯZcT" xVit#8vt{ا\ pNkrΚ증؉KbG fM> ,53}$+ SPHꝀSdr0/Hgv?$p:~"i"W؂Cc))nw=5r zg8=Mg`[^a!wv:4Ke&gHP7.fщz73be}fsԧ1ZW>V']ji1tG7+Cj {S@u\)M,֟pcSpo!dfc":K& RlU{>ܫc8r$vF{)_[W (5#藅\qbڸW!(wyYy5J;p/h'B4Gg}S^k2c2_O2ebi괡\RM{a̤V.!6ӝP5`,QC 6쒬P;NDݝ.Y s襂|q/* /}DY҄2Jb[23׉ng+*.Z d9O\$;Ċb*9T8^~7Iv{9IgLoFZ /-ԪZeBGN'Q}s41'5 *{dZ2=_1|283)e/~Fe2cIPyL}\uX ÝɌ#BJT ('{: zxk3pLT}Q߃76EoEMj|D2 _0b>^omk (F=3`)^,]oGxtYo3{}-k7ػCZ~ h@ݿ<05s1f;UHR/rt%6]Ol тIP#ƥNE[JfZSO`rRأn:&A湟#B4kps55[sL۝nB[J*D<)Y&.*#X3<9{“n+Jz1q'3  ]rg&!8[| Vpl?8g?Hָd>[0D/V^{>y۪LbM C(UqmQӀd=pyV"&ezγQ֙)Hl&d[Ա{򡚺jA.>B+8I.V[z.]{}qh_pvls,9`4S z@4nwWKMJzdWlUpbd͇{s$,j ʡn-rf4P4lz"֔P ~i9R?d70:}57ͧ`fB' lV S|'Y<%%Eonjwl3й@7vcA´0c"'|yD_yN?]Cln$25 GTwUm_Rts$\-I^&Mߩ5b Qj=2 ; D\[:9rbЧ]#m}Kg<͂RYP.9duTGPl99wuu=p}EQ b?S/>. BYVsXD㷆N,m۲0~p.3$ꨴ>랓Y/8p^RTR)3T׾+qlF0Mw:X6 /BHq'1 ~uX##gxy)Aw LZ#QN%j~Lɕ:VGSG +7@}lVF]] pLc[չAS3Ja Y_^DLll%5qA"i4 nQϫ}Mb=jЮir_{jcw3-!2% 3m: f¬ch9:X24fX܃W O8h4+iݢdEK7f+(f7>ϗ 6K̥;Fk4ϼ&>5iL&qK]uȏs a)h4ɂi=jQS?rPBnH.^3a׀"5bkBJBe6oYLb(TN3:h4=u\%| S30)\S0,6ߋE%I_ 9<>1w{OQl8B)CSUq.F(zͲ3ΝD2k+H PyH3t?a|?ӭ1Zc90@\道] NY2 ghQV#@U J0ڣ_tBKV?ܶ-]qN^0dZ# ::yZyċ(j=wG^q{5^$xfL,Yxwll4n )vXLifg1< JL$m`R끸!eǜKm-ܦaM_ҷԚZz x3/8ݩ}ǖ}t}(8;_S$2iH8A(G4̞~>;DA~((T]}%G?8AU 3Hb 0}kdžW>ڿgqyhev^teceok^N/)! R2KSlǟZAT5 D1ɉw()oJu%I =)2ڳA2) TUB!aYj He5-if ('V[g="HwDhFzd+E()9R;ȱ 1?Nf6;ϽL~Cv(Ohiʅ)$"W )._Th'b}QW!5 {?N jp%|D$ixX\Sq7T'v2GEWVxJ,ALiT4]"l6h9m f$uLdYUEaφ&+1*M ^^9zI]XEv\K `= Q)tߒDT 0 %%€wֺc"5x;1vBDlK5cI0Iޒv7qԳ :594vկ@2 Cu˔ݎtQY=eGgKa!zԚDp :$B]ʫ$},qAP280rzL> b{f_|5dƐ-nЪ_ϴ:ho+pCY! >sbCYl!r<@Nyş/Ix C>Y, *-b{Veڤ-~{{sO>wn0r.I:M?:jT7I[ 3ܛyf'BƀvF)L y?S"Cq"j<5E$$c{n0> [0Z-w5/0М:Kp-g*R]"D@&wuko.uJL1ۯSos>ey񋟩&!FW|'8$޾]Z:91{JlhcR]Ɖ!ڔxaj(V[w"ٰ0دX\; 7LdTarEX*~t>ɲgQƜ!0o[G! c @{ҝgOUȚr{)f]w!T cz[Ss9YsG~5xJw7YeJ5!ǽ Lbp  ?rf>ѭm()Xq; 04ø3luR9Z4`x,dbРiM[4tI9J cu8g'$G6OOvX8V~9:DoV`wn*54߄MvxդT2fJ-p!|h2hBm>xEɇBrw:Ĩ5-c*r, ש5rl!G)྄V}gF0Btt Pߙ IbV᧿oOڇ"&RN[6j9R4 ${hzp9Ĕ] +\jr@?xCۅ:4Ksłԫ .XX5;ݘR,Aba $O_2og CEу*Іc2w ! "=FɳD ? @w8*O >zi[>&/8OkG74K 0e6/C׮yq}ɱwj-ѣk uLk9UCd{hx|7`PL h18'hoФ /;yƉwvCƈ7t;/?qs*M<՞O`I5 7*cW.音 |i4] 9]>9'娦Gg H8"ý'SDf!NϰdI4n Kiߛǝq&fY8>ӪU:M;KPc9wR1aŞҥ^}dCuCm&@ ,UXfrb?ަωJ 2ԬظRÏNr̓N*B?qUpVɁxb\BU_W@z%kTᏟɗ522R 9.? z3Exw]zGo٦-] 41c2]h؛S棐g &5^+O[8k8-A5z5 b? In*$12/>&!ojt#g9΍B,;8总- i}% ݞ5튂(E0ۂ Uk{BTe7lSB~ 8y3aEdw`v{D2|85`ܔt\40aZ!S,q4TQ -U-нy_g;-5qAvgVP[ѱħJQ7VEDu̷ZFW5 uYxvvBe[Mêx:pAT\% a<_f/}\ RD.YcD5ˋ ;.4J_ ^h2VGiW%w+02੦ȥ1 lI@"Kö6v۵QSh#j^4` d)PrC! S=hڈ})%0|dN'"KMMΤoiT\aZ#yWyS4S' Hiiθ4JF_͎}dh-Lr087W:z^v ?,.cuǰwM{oW3 }^D|Ea܊'GVzagE٘S6W Ucף-G`ݵJ@s((o13N/᧖2Ar\A!g2ʮY ŝUi'"&4 iTu1Jz^}öǙ:Jx!>={imv5htqcNk9 >P"]:{:ck@Vf:9q2JH8˻\[j{ k< /u'@`FHw谪}SoFG  ,%Z{LdYkLXf>8fX+$6*tAgm;Mj+lJ-ΡKԚsmYeu [2IO<6Ziuo޵CafiQtA)ƻr%1&TRMploG-Q㧵? ܽR{Lu__I`-uߡSt)Ӈ`cTo'2AGv* $v>Q2f2Y,xxNj[VqU !_GT!^GlVJrTݓ%K -wN18 k*T <.> tļmg=RJWx~ BL3 .|rŴǜkJ`_/, a/)ǘ͜m(txC3) S@0B1oJ]Ғ|]28Ivo A i>6N0:+|b$`WT^Wv@-Jkݾ2Rn^wNVUov*eo)0/1imcq w90(,]PPbs|([>BJ8ELyN+NNI 7hH ݏ 3MjS(2'mM߾J?8?{'mYi[%;)Uay'pMaQyyk26m=lTbs>2g_`f,}3OPangTNu$"iKQޒnj'ӗ}k$xVI\&Aŝ~A=[x Z9/%xcge!ȰmvYA<>K))n9-ӟRB).44CzAq|*ʱ1E M ^ڰ${f1C|.g8ysDGpQǎ؟>DXwyNO!!UqT28bPdށ"#uY_^8,+'ZAZ'ɾL`b 8^‹5 ih )b*冘>W dX+ +4ͭBQ^T}To#|~j\xu&ͅk/%}`S$c=ڏFHa;\IlouF(|#_ձ.yT06uFz%(IžtQg֦k+&nzClϯ<:ֆN 7~ l=>}xn0bLR1]͘ȓ)S!b4*M=GNI#*ǽIVwS^:#X'Y'X 5M!Fŕ ԟ[cPimAy~d9e7c MO4N/$yzd`] czPa{q1~ϴ@k,F?K1_V^ZpO59'Q%c2?ǣpw]Xu.zfx 93 ҧ-Zo(s61n?u &zPjPz…r9ϱZpW7ĚsGg#C1[tXB/i0ߘLW}Q6K]͔c炆/#ʾ F:"92WW m ~ L#aQLro;ِ:;"7+:T$qC2Ӆ68sCx2 fEs\rʽ(q2bwB};R|jЯ;E^7*jWiѷz77^n7>a;mI܀5H06@PuC.Jۍ.bgC;=Yin<)}P9`ي\*ï~cEȊ)5=2[!iS\yTmV%biBڻRe'wnKةL%kW}RahcaT.^SgA4 n~HG'Sˆn?Yep7d;PsN߈ķ5ueۅɻ|hcTq, }fT|IX $zB2U M@0iI%ut FO Ȥ>\! _fܲ^<]%S##*2@3ITpL0(\DqT є;uUPI[fY6A2&~Ex?Nˤe ꬠt5/_<9º]k<LclEM];d1NC7FRqOh~?-3sÎXMbpl|B!׮;eV ۹؅Ƭ%'lxx Q߲'/8p@q5"p F!}Om x~_y埲; Y?-ZY%AiT@V0>2]Uxw eYAzV[LYtDsJURbvW\}=Mmnę_ _r~:Up+M^:Zj 3dJ#[]ժou{3n`-`$ɸEKI "alE QL?:CV;DY&A䬗:V D(Kèb[PC|fOjvF3 Rd3U5@O nG&aww%L1$M~ 'x4 n{x@ZXS#) }9Խ2ocd6@|V z &J oi{ÞؤS|fVb uҩBH^5@=٭- 8pD䳵k @ ^" &6ѻȖKspLnwI&ԙdo0{۔::,r<@QU9}CxYk7* )/dp;/ fe=8+MS,RzQp4 Lhh&cuQz+ٍ_-|&6Yb3p/ OJ+tr3:!>碀ꓖ>V&(({͹ȝxB5 a/w_sXz 2YTARGzDGSaxGuY3 xk] L^|Ac:`ͬ~e kPO >kVԚK޲,) 7;9 П9DS0C Wn}jE|J~Hb%lqw~r-TP='Kn|0Pi GvbxuԌ꼫#w$_ܐpt}. xH>(3˷aSfRa5 10玶H#c4]"S*?s &;9Nj:i dJ@hVHXB+ +,9T>y*OJo| |]ϕ23ȕj2DI5jU욾7 #;ȒHQ{qpAfvS +=0 #e9Iɶ, zd ̭ IG';dK3>`T 06De6]g Tp9G9mlKxKXXokdFq󶪍ZrVAvֻ%/T,Gp-sAI5vX#f絰ԩ쥠}_9E=°a'8IXoc^y{mׯ][E84M"3i6mj| T\Eaɘ;k8tQ2{ $bv2O&Z`L|?hqUdm2zT[rC$vs+Sv,lLN8j_@[:'cE~/?F\QXm^qw58-pƔ ?Ǩf z**ݧ&!W1NƩH9ڤ 6-G:on7i iCiQ[Jw9h$,Wо0B b$Op~Ot#fԬ1* %J?eJzlև#=;=kqَ}-<εCMeȆ*aVhSR GjQ=N{K8~=ԴiGl n()_Eb$jn]?u>'CxE=00\5v+15#(UnF@u~>D^uM%zmܯp/G %p;/2-bS'PLƶ:0tKRw9^VEI<)}SRXPC BiR|)zN0`)0zx֒<dntn1uv7%vAWIn8_N&"joJUx}8oDnz˚i@t! "%$VA.koVMOXe$M Q^`Q 5_JdȃPRn5 mS0;̈*WY7vZD:Χ1%鑜(?\hڿOHN$Ѯ YBVƤb`yu^%&@ @s֡E<%AN)VS{_Vr$/iq1^\e(LvuS%Z# jWsew#ҡou)$* Ɠ;TC@2()ǣde·'-s[t(I'ўٳm&$zV=H)Z묿Bf@; ޒHx9xs!hl\m =teҶ1{MMS̪+ȐNCo=<2?vU3ݸ7K*'&~gN|2S`-Neq%.Sf?삧! `Wq5g՝^Ԉp8Cd%)Ue8^#Tl:?kp-W,JiaSg:6d5; ӏ[n,pTIuG_x Gf75;]|e:t~4^ Q #8,iTv [KYFzmfz6 x5#sDJ!p :v}h:%<;6̮41XGּՔŃs^9vr`́ApSO1vPf{E|cd-;a^cE K=sx6hd XL< F  `V\Pp-S ?^EEG\1.#MoԺ␯Z1"LR'^d44+ma+8SJP3Fy͗`!~AzL"5r%H+0 #Oĸr|`;Mum69J;_l7!@FD L~lDz'2|{5%}a h~V#+! p"RK}Cg݄$)b Vb (:ykA`0@yU=5ZoB :t˿n/&O1犦&}տ\!b$^@Oeo֢;?/Tm{JƁ!38VLV d㔅&M\9,No=l'ީr5dwgT2s94ls JrE&^!^`H'⊳!2ۡH5X.ۮ˴uIixJJ[% /敀WSfz~|7]̦&% ;;Eɟ\vŎtVަQ3E\cGVQmsȵti VbڇĀ oP'5n󴲣6.&gQFiYw~njm+>R]x.˯`3n}dJ|+ kuЫ>)QHp9X\ov?QNi^-U!4.HhF# X1XVCj$ڳ8vDs; d⃒5<43fz#_[Rc, 16=D]9lcb/VqxxF:/Zd\?*spLM7%BɕuV7, `vo?󶤵)%{[?=ѪW3(ə-izr[>&*:*FCRaJ`WK%,y89۽LcdOMT;rm`G<&ҿ7!<ꥈ6*Uֆ 9*#h-8l7YF@ ٨&Yh?J! q6M`JwJHY_c7{EO6q{/=jŀXKChJ춫4@W֓Y:j ai>H ݗ?Oo[_觱DV$6-W3u^QW[vR~/8rVNNjZ#m?`E1GT)co%j"s C3gܺ@;`)Gwv4>"31˟'z΁~K6~jvP XQ[?yRP{ʴ=Ђ.Su2V;Q4y\oK_gHb=/}*Gy#7*c=p:~!5w3oh㓦=5mS>ީ tF܃4xKJ ]-[ UxBV3s08_(x!p'Yi+Peg)#xv73oD6Spۻ;|.ܺ?w9'&-7⑗&Q w dm)[ֺ{2 `7@ / ιo<>2הnx G#:^/CtCߺv- AjRp,ڮa?fW4X t߽ W%^fiF~@cӬG@Euli=趯 ;:̬ 8'd s"޼Jl3y} _ǃtNKvuſ&W1d\N8)|ؙӈ^Qr"F֩jCE;Q gbH$BK(h WxdNKǑ*Tbs9J=45Gi4A8:B]] 6s *BSPS& ۭ;n+djV]W!ej9q *ޱ AoF42Sl|88 kiIz]67ih2hyRK3W4.!?x4٫e J%H/@ަ S0`EƬ'Fʉk'@IZMaՁ`P,7sSaζoW~}La4DJ$^{8JT7γ‚~+__;qڗ2TŻEqiwXT )f* ܟ.׾|E` T>tޟ_-k ;AD4s[N]30yڌj;;L1Cz*GfTiz ]VtxnAZ R,}H~ zb1{:ڦAPSu9Sz[YftP ^ (s:zE3}h9W§֩x A ?ƕ|~6kfB]aPɊed0ltN 2VHȀUnihP_PƵ$@:rɇRecۆXm{?-r"{-FC ` ls߯Pk*L_jsX\ Vv!]b I5|)ґWZs&g" ;(>}gl Aƈp)oEZ׈4UoU]]K97oCaB1 WyT֟VB:`gKA"{54|:uR482":^:b[4թibK ?E9ǤkL; E5Z29T$" _f T^"ŷO7ܵ<8 Cͪ~(ll2;$x}Rڴ9hBK7qW,Q(` r뎚 $f*֏Ec֛|OWE RpN][} Wd=(zJ1ݔwFqin{ȂTc`)#AdZ_jNVh:^uՂ؅F3$GeE;[l)-H.Y(͖---`ElnO 'pᇞ/(j nɰ䇅}r5&bD֍Ao2kNßA7PMmZEg3[Xs5(!'!d)UGGoQ "ΜW}YDP ZJ5J3X]q/BZE`x6qF5ۨ\ 5qtTψ#Be{o`h>uK"qp %?F?jyYf}Ӑﵓ,N"tXＧF[$MB<-;Ϛi͋[%?I-*>!@,$u);o;:O1 6G/|^zr)7J M6#^ HH[EEitdU{rBI>=>aWojc$_URBlSV{U<Oz:i{o]Ɠņ}%eV5 }4J|f{S+]7:܁CЁv&r9_S6VJ?71rӤ6d}O[6n6qcK˂#~!tp=fncN{CtjEe l!23Z{ !2S:'峟2Vľ]r?oJd6տP_*08c'LPyFeDw"tegcw_(ꐇG뚀P ȷ2z{}갑S2nK>O9۬NgM?VLC%^%*U `}c_&ږNlAUUInjkLm&] LGH٫kPJusb@ۼ8Uyɰzf=X{(Zqc5Է<"1\ z" H ]15l@5 ɺcj"JEymiD򊻕D7d_/%(Z!<I0^c%X)B)Wm QUtB$Bh1I]2@<h_huiȒ WߠtaldݩvG?T%cy)06>,1=,F>j(TޑAi9*ǭ?[C)_0xyoٲ5 }dݷjo% QU Њ#2 ︉fӑ{κ̞kHG8]|^E˵7;ŊmuU)jL!;%ueS"^Ĕp8"IjޔJa0M5_g+I0E\OשS9EEԚvv? #O I/=#ҞyGsp ] hp3V, +~MW::#Hz ?g'BYg=8쁛Zү=agOv0wxŦD_`Q#hǢ3%Ւrd޶KA!vV_b@ Tx,gf]y%x qD Pc=* fI9h*0 =4T,IC:,#ǺqE;FiX8e8c:]K;lLvXv}l&=0_{*GThgР^t2 rk )'ĤJE)OxuCJd6eT??dI.y7何%v V#ot9 wgziN@K.12/MVHZk'Z'7?.)AAw|\snc1uuܵ"t "L0˔X[.S}+)FauaWAlMǟ$FF ܧ#@Ma+oDE'M0"7#68rM L~︸rx2T@\ɵ3x H V w{Iy2V&e5 W{6Dp ۝c@S aZ`V^qįUO)( &ouq(}\ Ws !ǣ} τZ7*?w+5zBkP**N'e՝`JqӟmXK^xhgnTMy@=8?[+oTs_ԓ3}JI.t ܔ<ײ:t ?:Cڴqc`[$wk<2l6e^\l[]J<$ }S(,Yg(:Ew_t2Ss H DV0$U|NRf9Ov |)C$4pϕF{m\hߢ=H0_]*zP"2[P1]TR{޷N#%N`pi|B h?jO3$R]rY 34kr;`fà5G%"=mjT٭N&L}+{|:Љc͓U:a{ͮY;.:@#y,m? MSgjM Nu\C0E%^KÄ1uXtkz-F3?7";MxIj{?LnO'ꨜNhj0"j|6=DyCCLp 9D}x-/w4 5r12y<vh Ncg|8a﫧G# v&sMQv'<3ݒzmխP1 erhv800,xR5L y}>=x‚NJ.RcP4̃|tUbл{kx] uTV^ C4OxøFp5aj.'B4SxvdwaTha#?$M4Uogွk0dޢw}Cw,Ψ[:!rWA}!6W5j qZ0iF#/7A&Ojp8f.K˛7?K;s{]ȁB$Ջc+hR R]b ?>{7ٍ]w9TNEXwMd>1 OŌZ8"s Y;&'z. I*M z8}P@z_![H 9W&GkJEKVeQAµnS#5zb[].^m\:A`ĹXO v k$'q`YKxFQAo j:CG u1 eDc_Dp# Ճ$a]td4Ǡ'?8q;}Tp~rNIvjxMZ5X'' 6""5D |́ 珀+n{p 䐬8Oo7GPDZC`ogKdu& jS5Q,(CPI iS-a2(?yB/y: 2͓W?eTRyjxx4B~=IPL17@8 ^&#/L-,A]54ewv&k*Ͱ`kFg7=)cZeqeB”>|b) J 6m,羼f/0Ffvwlt kwIdlW~ ' F$!…eSuYE_k=v`9׃/pqBTs+ܬo:hFvC}eu˰ Ϙւr+(uKPI]]>~7FeK͑fǺCqF7 Gr|TUkws6`s|Z޼O{2ur S 5ozmh3a ɧhk,S*w#o .gv-eOiN:;`Lʸ'8\'\ḠfRFAOM4ȺEh oҵMxZX^*"ăC@]qL(YƢ^αc6`ҚHP4> .\#TIशo19yޜ~Zl4h*EN5Vjq"9lཻQ@WpR&)3j5hyrrs࣡-a@Qͨ ;(ԉ,Rs}iS~a$m"rA6;g wn#4ήndVz6h o=SFzi+I},f8}?7nƥkm-1\?0=,}qH~a_3Ί19YSV -5CfF0!(YTrٺB5S=/x~Ͻ?9syS $ڈg"%y$GC\)-ʥ0(G`=41!,x Z+ą0࿫#L4 #ٺXCh>?):Frۢ>3;n}%O,K͏.,Iӣ)ePJK |xgq]Bhoꔍw&=0A6\]ЕPi (Zgh VYbon!b0 wgJ V]+E&6e~O< Bn5r}C(ߴSbBqi̓"sL2\LHT:=]6)\V'ꖔbR@$,Vĵ㐊{[xHԔｧ 15y8hkTSuϣ}6m$rqMLgvfN}M>,52'bD bsPgCL-' d:u)QPy$1ZɐAY$Jv统ak+ Nlǖkc&iƼ\x@M'A[Uh;R;"8O᫮88TJxvCh2 as~)Lu,{$j8lHL_҆Ա6Dm4:Fpב<|cRJ )F hu6 '^x$,/%Wx "B$Ct YhYTK2m;KˢTQh9?Є]KsK{PD)p-_(&ΐ!jUp}CgoylvPe($D\$=uBh[ڱuS0ӕnП3Ll)γSuISs?yuL"k<V>rD]?fSޢcT uyז=U {mߋt$@9T'ˁsh>,R F_^}+qN2~-$rO8l\A }&WL_]qՇNM!֬! sP+jј`"p"SdjN@~Gb`jv Pxs@.WO*PsOum[g -6s̗z'*-UzjY|(F,)&L/0Lz]q{ ٤mIߦs"zc0 Tp#;_ETѬ_Hy|}: yhiFWr۽1/#o c#į΂jMvȲb;ؖ4xn\6/J=ܦ -խS M !C0]u5J0S\\r`1FY ஄xZZ*Dm:d\Si(AgbF jWdRPz=8u[|َ+?g&>3{<2u}| MΜN,]y"I~mM)ht}IKtCyil榸ӽ h5bH8к:GK72W+j|fx@O.Mj&0 jlYi(Ժeh-G  IgTo) W8&*N]"yS=k\ 6)٪p[_ǀ}asEJC7;O7e)@x AֈQ~XW RŞs U%(3]*P[AL}-Ե痁75*/A0'H'%-; Kdz!ήgڞ=ՒL cd!:ƄQj Y'G?f?s0#ܐÅw2.kyUYC Z eCATLtkOI#"bA)"sþK\ LVC*~jکD<ۤ# $H3e%i#(/Xvґ*,0ҚSWн)2a}R^:aqv^zt\{6 SPa4~Q~g/t4 @#t6Jܓ'p2ȗ@ s9IM!;u:kNM"aR P wZEH2#^w3fNPN)Xs*L(ޙQT̫;7[}oAjz0q9Gt* Prt*l~ ʋD *jHH솖N2m\Z0)E4 E8ז*Edؒ,}7'AO[^-8+ PIb;jmNR,vx!< - "E)3]8ZQ8R] V4-'O M>a5l0*)% ئӍDD;5g6Ak̥:XUy61TCT(c)AqBs[-Xe/v}j/s)LL(Kn.GHLhӸUiggo#/0 ( + -o.I!۫?aK#0A;P'*o?ˉR9Ù]ƀhl"O8X^:]Z.a P}|^:`:֛XXvSMhS{eX=|C'נpH !['<_ՌړTe l x[ͪ!br ׏&@Xszs?5#T ^9f*u@%$c0_]ά4F:*NMVzo{VqVh>{6Gt**茧 WZV1PO<_7w 0bzT(뒂=vޏ8֒=`\e+ꛊ 5,6Ll0PajOj;_ގJF#FͰ{N_$ҙZnx8m$~#(ǑF}q%( û9уB>ia āN a_ E3"eYgL9f ]-:ʂ+Q[G']UR-MqȎXsfLt4m橃,A]gb囶=8ry.H:+o) MŞ8Bc9:Τ+72Ƴ2~♅TPU)r7EU^aZ05xw~-EIYJ\e]RD}yWjCa0յcs(A|ȅ[;W/\G!գn6+{D{h^_V31̢C*yNԅ\zfO6/(5H*T5bG۲y"^ռT)kN%*+3Ӫv 3=Cœiv@,zQh-;hcYL,SÀѷ1U7| 0{c%|#ҿ%w5wPȊZV&ỳh*03YT背ʯ׊ ob{iOwm`JxٗQ/A}XE# ~_GbvDԈ"mdQv֨["L-oGAJe^hW@Kz#~ uN p^{Ra'Et aˈ(uݯ+WcqX ( PIoxS>B[ĪR"LtyL;[\lhiSCk^4kЗ!TG$h8YNJ(Ed[SOC;ptL֪yn奍/(o/y1~6?>i$ 7n)<;B>U/7 ;0"0y>ᩃ*W\1I̱U KS6o%wu'Zc)=O7stuĊEʮ60RpL*r+k񷺪'QJ|NpUf%"c!3l h &ym:M\AEc8]:427\Թ2ɈDር+ )dfZ3u7J;㽀(#W߃vX%mYI­8 (]t9mş]"+p쫠ֿ` 䱊JYAW̊xKjms  #E¿rg2~E'Qζujĩ5Q@<,&hƎHRssVUTMܻܚ v8n!>y0 ~OtCD-853glQt9VbѬBN=H0K6gkE*W i7u%ʤ1Sb\jN A(|d*06HsWr 2d;[ԈqiTa,%YOxmjRdLZ@%y xȘ(r\qrKʥkYEe%^xfp|c0X: 0kPchðĴVc>~]d!XnZ1pGM#-F&V`[}{/ _.6ʀDte~36FI=@i_}n Vyޅ65#2OgZc`f up\7-h8>_q%@11jiT:SSU*1Mu{[|o.B@R`Opt:; Ĺ" i,UgWe5*abG*}+.JYzFMfRZt+o@ݗROZϛ"iضSG/4 htj.s̵Fj0ܠ(v ]&t!%0Y[E@ uFH#BHfssҫNo}d1&܉TaiR;wir[C!% m)c1<6H9ЧLR*녁ǻN**Z)@yS8GQ֝2jl)O8^٭-9o yhTg[Ԍg`ntq|Iy.V(˰%~IkSC!4vO-Q<15KJ(XP@2{L"CDB} Hۂiu`:~vc&$xw<o5 k4kfɔ!&2nm}ɽ~o!oPa O ޳qO{Tؗ*ȳtA;Bv5jHR c q;$kKI`#%BiCD=oW 6` xu^%VD %v]7tS_&{{hdՌ!ٕ![@ZJ@6y#DͿt]6^&Z;ۧ>*(S/3?#踖h8JFidFG^daa' dzlqrQ\h:&AG)sH{|jG 8ZT&5 5ȷb (6yBM/Z\Gýj {9-t V>/nxCeӡ}˅QկCܥï26 L!2^8.;}#Kl<N9td<4?!r]yz 1dFMPyi(55R6 퍜NlD^QQPK׋NFLls^OR,i6S'uaC;^'c`%_9)%UQiRx+fh9}rau $AH z?r m#=I7$nGxXК@re*7jh4oJm׊^DbQ+*uƒTtyg|s'yХa5 Vʣ o2J#TЧQ?*߃4[P%MwIr6+8T#HB-9gtep!W|=xV>lⳉy|^y*5+x^COHEŒ81weZ|m&|/a8oafㅽKQ#;d$Y2zdOr:v ",7 H9o|!Ʒ/9tS@% 5hZo'Zl~~MؼPcܓ9uDYJHːdGH,O?o{م!eJ=mSo#u^2GJ0j,c E&hPtYECDJ-N [힍h'giw&yY-^yH@sOYANs:GBL0M]k0`K珐꿎T᠄o.0#@$|AНrkZLRGì(Tn?$ڏs̰![ׯY!ڹQ/W+ un.9t'zLH1hm\|^?CM;fy 3,|~SY{3YqZF{l馕. weYIcqicG FpE%p1N_AN/$p3\e&fZ^J ~݅H:S6@hw͚zLx!IL:azA)0 YdKe:"%`tf ?8l[4Xm:5L,qv; *%`67XTJvr/u%4X6If<?bxlԴFw`c l<]̄!3r-)XFuLk(*c[z ⡎:f{qpmX.i`Zi _OZ#G^ǞM<%_ =䙗`Fر "*O!w 6w*׀Ҥ8$`b uc2aqDa$a1_ng,=ZdGƓykWD[ "QL9b4IuVzoNt^rFY[7U~{d/YǷ1c/fj]Zҽ@vbc+e]M$ll7.dˆm:oΞՍ:aqGLIm0a@TӉcoM;Ö~f bJn a9p{͛Z2كW7f/=AbLw%Kp Fx1^R8 x7 ^έv$=' .e){ >ײL1 VN7 Ή qꓚ$?f X́H;J?V5@_ef I w f$9 #Ϣ6x! " v"rnlTsKӖ btJkjv;$kH_ʰ0rI`v\ʉ\g=j?p ܙLU6ҘsS '9++UNYBd `B`4RVwt񲡚r{D*?Q1Jq׾n5.\Ě ѽ}t =>f.ʀ>ː>_DVw|<9ugdqA^z#l#JD՗c{\%Wِ<O,2]pbG7qJؖT5F]xj'K7O׊|j|WrÝ/_I]m,m=cRpp-$ yV+_u۬ Ϟ+!k>yLJ Tu}±<7sǥ/"~W%/E['Bf|[GjGă3S#,⧐&ς W ҄1'ET31b^B\0guRM2rum$l6Sřsl?̕˅r=(e FBq8ֶr9+8ʍD.׶'F "7YBc׋]xY'8{ȅd8RoG)m'">([8nC^w-TLܹQ0R 5` Ɨ`+p*wb|[~ږElJNdxXcbA1*#K XqUa'Fc% RG!~t="c@ߠV&Jˠ;)j u%KyvWj4(,39,m^]`!W65}#0HT{wO|*w mUk`OSz)BU$R)RSRϵx0fDbb.:g `GHU> ~7q)i׍ز+;$SҧZ NW(uQFrqZ5L$".!X[.J >͖C8+ *Y5S\G_ 7#m»\r`7f J m]&MVH0Մ#FTQ%iJ+/q&R O~,:͘i S]eW|ɋ7/]ĤLvS(\q{HT*UvNP ޯgtηII,&1;ȶT~&KQ[eI1lDNڴE9T۰|>Rki7frHoDo48^ .W6.@WJܔ ~kf9 HQ C!ӓŏ&vsHԞb `ӎU8mT'PKVY򣛵>0kj\;tC(H۹G>5ZpWXةJpC*] z=7٨`Mr]wp߿ )+(V3zÑBhܲ4ϓ7tRuXFmh9QF9Uf]O@?@ H'aB/dѨan@ *2(r 1HDORL·qTXx[LǨzxSPu1=;_ efkG9^F WX}Sq "uDdcCH|hbqU$}ͬcK: BWB׏l#)j9{35PώY`6.gf։̴eqp{:ٴ'rv]+B`k ٙ8Rv'f0Ӆ|O1nEE-Y TE~7>Z}X囝ALOY'%DadcV<;[ۍF,;Nlyh[>A $4FQp=Ƶ +]m lQȸia7?!*'_]|>[]clAXhZv{ _nEQ[z:ݗ 2I4wDV2n5ԟHN+XSm//x=EGlj l({#XK.83%_ Ve7QjQ!2f?m x!}0+$ 'RK*iU5;swBk]3n~(568LS;'](<4 5 "Rh6G&m3# hyb+[u _Ra89O5m]t69+ Ak.̩̣JZwۧJ.spUU(i}7  WgWz]`LŐ|RbJT89=V'B;i^iH<wpe6d<yIESaI42uWn?D |ӀCuإdqg<}0'uQQ~~h+Ud] t41r6l\&u${MpGg2/ },KbuPGڳXlNeX-/Qz ay#jºsCmGEMz mp>!{_݀yeVv8"p 0d~aaьu zYc7"Iש~dlwTAY=0`xAGVCj V[szǦctk~=k^>˼ e)j5R _描\3ȘN1BSyMZMƽgþ ڋ`"~x%dP%_2{7P&bڱDȩ U`/Eיsm!gYP蝅%Hܝi=o Sn?0c 䨚wx[9M.hO̰ry# +0moŵ&x:eS;fM2 !/28sG~&HX[A6i\GJISL;k` ?cTkClF{5Ĭ Vdjo\-@l!cKˢٗĐ/a\a@tT".<nc!>e[(,]?SF5MP!ɡԟ0Egc@6D|*n a1_461`blK,SɖF1 7^sLQǛz``d)X}R{5{~Ҝn؀~P80_b>E'u-$ghMȘvۂer5(C_57S0r7j C,`ǹ",+h**cA 1yb nl%1Q'uY/9Cye]tPx˼+4 }1F:#|xTîCw:.=/I`zo6uB 5xs>h]nϰq՗pYuFyQޞ[ڕJ;|.F _w+^=O+oivF(C?t) ӽSZВ058D@pLz+43Ft'b-Ļ}jhZۡO vx%y mW6(Zf#F'lA1ȔIx~;}N@W*ek"*jlOW2~|YN(v 3.pҋAMGd m0bX~9h!,t*_QXn|sOMʎKڎi "œdM@|#O936匩.H8LzUBZ|4SV3Bm?R5gG (A$`ԂaDa$7~)PJaX P\ެ* ՗T1G,"E 'BMxDQy`!e t\c.G|NdFygvzw>;*%k'Їag$A 1Bj FK ʼnzrͿ҇y${t`2M|P+D@@SxCUERPVܞ[Uw ж7*Sa$ciܔC=t4֮ڦߍ§'w%C;{f)Zk٭hAeO6Vnf̾Da*0a/aÁ'OcT0e(Amlnj=ToTT u#\zH`[:vsX$T:ЪD*w}2v_\0\uGB@}̪_hfzP!Ȁ.$m܋Y]"zE闎qӄm0?[-Oȴ_*TuAjh܆lHp7a3*ܨY"N5JkW&tt@*uw+ʀP2kz]EBD |\Cxn&Ƒ@ܴy 2#^X[p?[yF{W{Ra_$@u} {AR.hL'!2p FuDpwbP4Mv*m&3/X6&)j!\ ?%̨5=}-@6~x4(!8 0&%8'b'`H_qnuAWjyϨ&%^-(I3-cIEM=,GMorPg'G:a~kIpՠ*d4/oő}D Ϝ@`ل2mv|+5W2zJyNc\QYR,}ҧoƹʱ ɓ^C^3XAo 2]p{~?hYxپ 6\!5m6<#t ~uȮpubDLjKm%xW!z.:tk`*s;L'Ztl+ P#WgST@O!O74؝- -X2l wW|_7̘*[og6s}OX$tO~@8&љ`_^ho.L~5{UAdA߭J$E:O("W5fnځ //e!R|d [~VJk8H|IJN)NS or]^RfH`JsebjyYUY'D`};?PP6O[GpmIBI[K~/>B5e:h}f==]Q)jcU B]@#!鲂U&Wz{JsnϧYTG b'jB syb= "Dd6&lꗞ.Q"tE늅$S-R okSbĭ.`3v )Aw>HՀfrmb\^..isa lsuk9 V0`h *na کS&͇>%A@Ksܓ&p1Z2zDJk#3Nz`@]!8.hIX//( Wn< D? ]Q9,\\*-ahs!O bmy}9`32ؼN:v0+-1Uxnw=@۝xx3`z*2nR5g %R| ]竃4/AQ)޵<<%If#i˘*}g ⛶V8RA ]YM*wJJ ~"M]Tˀ0!R_d> aޟԮj:'@嫕THz!'HoJ,wU; j <2% O{B`q?g%9.04=36pnH,8z;'L}]B1FË!q4jDУweHW@Q 7Ttlzv J޶޿TG|u$Sg쁸~MxoB#PX9x؞2pTpRHNRZר7oYo%>tLnS@J};Tn ؿW Y6lz6%ڽ$zs^hzw4!. :AWMe%*W;Gzop,И'^EJ B@t#H70ĂrJbY0XᲑaszбLǒ?u$p0J,aq1r C$loJ|}35k U6tP0,{m+֛(!|4br Etg.y $˦o>aRtDG:vZCv^w"~:h+?3ߢ z( $M6٠NAyz:#I鳞nÙrlHr./Iذu{&:qa45!1u"ŹXlxYGs;z,K,ŇKF c1 { _nus1@P+7LY?:=*؜)'ĝ+A b]RғHդ+]3wɚc0 Ys$,?1bhnꮴO8s$TAe<|#-* srg8l$>6sFzEm&& +H/\62I &ckh; e >Td?%>Sr`hxˇM2ݟS?K{DRvj~QɻmJ5t)j`nO/Bq=n+$0}"?Gmx8c'dg'ʿu p ȁu 4yΠ1gy3eeJ3Hp(N>h;R!ds1C@4t4%/RFǕΏ?a]RFK]#fhwG}Vy7,h%t$An>]iJ[' s:ah[h8DHNm0Rh?zWH<*2J '8C(kLE FdltǻʮIHLʨm Ѩ}sG oR#mlu m~p8q9C=H@g"]BȟoW?>Մ2*04jӤt<=gS~JZob'V"Sp{:U_@R#J2HPJ%XQRVQȦ L`X˙39P2@^ւ0/+ŃԀb)&5MHx aÌb,0\j@ZJ`>~|W/Umxot cۿ;dX]YTN0AGr!+ӓ;H۝z|EleEպpYoOcyVU'`pn4o(2u([ʲ $ +(|, R`HE<=x^şEc3FM#1uܯ,|a.Q-D_wݬ>fp^~;'MAfqz?cZ~h鹷 OݟSڅb NV 0nW6XӜJt@,]Ou<`J#xtq $TB.o"Qᎍ">L.=Wݩ;=.+5!uvG0m)%*КzB,zH5~J9 Wn(ΰ=F>ZLLl0:sjPJ1 u+Əc}S'qwn7%a(,et5Lgz1 N.A=m{ltk阸)o\᜸b,'wXTu7 :x K,_}谀byPyAⶓ62nw[82uh+'z0bCna{Nc6?p9c?cذlҖ,%&z~^|*0q_BU 8L@@2Cv!nq9'팿lN3[uQCIUk$F+LBwoeLˁ/!RGL7I3P1 Sz7/% ×Jr_h;ɒtBV Aa &fƂ*(hN4x<h)v1ce%AlzKcnMs<5lw)k$&dYp"= θzXF4W:bwHIp[ASs=xrvsZ#A&Z/]ݑ/JԱx}d`h ޠa6(u՜L5J>Gr3[c0m3cyNˀtdɿEB gW("y3L^,s# 4hH6x'Ul|t, c ,o˻HE~v|ԎKjXh?0Κ3m]3h"Qf鉪|w][8K%VY&|@Dry X q~اYۗ@c'oσ85YHL?c}ޗ%ZRY۱<Ӎ>\N8 :ў\.«JB]Xut%͡ %u]A8NjKXeTʊV{rd;t(zJލ?KDy\>H-QJ䮕1g3te IwJ<)|h?8LQ+>̄M)%ʻۿjmLz:Phx2ξbUf lT\Dʅv~ SH9k={(N_,)V,"*vvue!IIB[ /ɢi~b=֜4;!uovO2)Pkp᭚# ǁkk\19 pwH rb7 Q IKxa'E7b3KX1Eߌ{LEg.)[Cb~@k_g xFǺ4{ϟuJnwYj`ԑfEID]}p u̻[n};N' >EL.;touF!Ě_ӿ +ku _ӵ{]^m$Σ}19hj xXy+M"IcoXD3Oo^$M~Uzj93.w|F!Pj8&Kuo"Ba&7(j7X~U^}gW3fΜTl֭Qaɨpb>bWbLvsBA1_8sffc}JZ T +n<"v[~]EA«} Cb49{uJDuj?)+'Cw2r=-w\Av:oznjxp/&t:b9"]^ϑuHoF.ē/y8T&)dr gF|l`y ͸=tc*]Ptw\=,CGMAԸUE|f2厤q.[6Nu #۵.VYv˓<]sϲ$٘95m5@Lx~HT"3TaKv^n(k K|?1yc/:QB=Ob{-xq_8J]mZ[¥oz4.0 -@;R1>v`zϪm ri'S^)'V D\1-Fo0@[g q1RW]͵͔>%Y7 BAd9*5\Kۙ7/ߴ? VIdB5 s67K8N`~T^J.)*}ߣ$^3Ԑy,d &}'XMRtuEsj s_$ITż:C).$Dx+H1],h&F,u<;#EwWJYyD5_ K'ʠk5v d"dUȢ_yr6o+ w<܈C5hDOUqcDCʕoĒGA@*h^{}>m1<_87wcM$دm< qX6Ew[H`M＞efK;[5f(DZ=8b:bFUrzV=$'L2 y|~u pAeRӱ7w @䔍7kH,eqE]Txi>`^Gke|g߿|Wo+΁MnTDMJG*>Hx9(Hep5rVw'ϐtAp@0lzy{/tueӊMrzvBu-e5\6٬Y$<)(9VU1O-rׂSX,$yv&zZqA)l> Q]uPF1r?\I,G qV DOs|cGE-/&Sgr $Pp9sz_;N_#?F/ }\p}R\|E܀ 9ॴlڪ*& }_H~ϣ="*ϯtݨ%o}JN':H~gAHUA=snuIY̑ħ ɴ%qԭ)BAmԞB;;I%2S}WCm殂O%}" p d0$&x,W*D 4VTgjdd'`#$F]0Dᥭ%2AUl%;`p"v}y#R`վ-2>Q0 C]w[3-XW5:@anF+T,Pk< }yUfm 6,|`ǎcLq|7Il D:\x8 kټOv5XfeP*W3E7@1 R& ?j3NvC}cujs!! 5MoOT>[{l/C,9%97БrE>Sg1kZ/P$+E-=y(gW ptFgR1Ja8G{USK,ߔΩļ%D^-xr%8<ɡ >R6ڔ`M.1\Xp24^r#^orY,^cǦ3Jj, lR,>Q,$?uf6wvj޾-ы{lB32ڤAÍ3QijENm?:~ڿxX=]fHɭMC +A?F=[h|xl6%ǣl죜Buq}вVIx`\Ibv3lQd3bHJ|10HYnĺE@*5[,wBG}ԁA uy&`06%p1 h%|⛵,,wHB&ado:ܹAuh^{FٓL]N8/'5ɿ$^eSc2M7'ڱj@Jifv3}T63兔g#|z Zm*Ӏ`-O22yl8JؓAq.}BV @1r`"'lNOwݨM#NFw lՄ:`~nsur<aw"Q5Q Тz^`wMDHJԮ"0gSL(R Kd!ԁcn"~${(͠_I=@}: i^ryLP6E ;9qP$ZgnY?{J(A4jxi)>3ؠ$&m}$xx fT0xv6K1o" Gg9%3 @i꽶ιZG8SN^2ٳbt-W8:d3qOPrLjzڣZ1*`;'U-I?%7wrw;JL/7G~ݮx%%-/*#NBLOLR CZkqW)cmb lYOUjO5MIX*907EXfZDru =_İyN8=,'4{hC<# 6A Z䟧 &]Q%O| ORaJ2W0>^c/>œ>l+7&),i!z{}p,quL]yub:Yo us`|bț‰һ!}Ψ@-mc}7^?uѡ>mA  k&Hg cMo< rַ>MsSeX\f7lϚ3pGdwxav ?|Dyr(7}X1ƒT!)X^ qbKЖ6r wdFSdl d5h4L8'ZvE0KX );fEH8=Cᤱ1M( $$n6t#PS^&*)ȑ yr޽:fKl&_{~^SU ?S̿k`e/VƂ/w5+`YnUsɺFQI*N!QՇ9q$+`4@fWD?:l@D9*R,ҧ"Ȫi Z6]|@oXHP; HibDFe7'SFS ;ط \O,GLuVXNxDVZW@ FX>sC/Iy3ŭąm lіkڮuET1DN= 'xj6xq'XY=<GD~|7CG5ޚt}*Q4m ّ'X8@ۅń=X饈XwS5D7L'PD)'&E~TJJ| ҭ~3wˉIn7Y&pU:k+ck R`(E K"}$^mH 0FKS%ϥ<|vvNwh?MCJ7qP|xX5wH8M(rs@g.⦊2b/nyrEFskL_Y*{xjtQܹ7n3e[m^Y]`Bs<_(vWsZ3$R,Gᒏ0ls7+/v2 PIe #(%q'Y)1[k|ν5TS SۂXAV[ܖie "*AU#fv>jI=|`Ri6כyfwpv\> c?.ܰ@Mq&#(,TC$, Y/?`&4/hZ9twړ-pLr.~07ݠNg>Ş(B= b:6g@**5`w>FWGdqPNB,Z\VcqgUj 6d7jol8͂wt_Wzܬ $Zzy,I擿qN%3Er,R+!AV(G--SEvHr7)/4${p{-6ZQ6gʨ&z9LcG%>|+dE+pKGgՖ9\5ɘFVsρMP;"3{.!㩣W;別q$ᚨe?,]΄Wwwd2$ L% \_!ϖ y&?[3M{R͍NVYG%tz"2t4dqP]gs%b+']d=-TfR3NXzJ&TCeMKD5&yh0ʶk~"Q 87\ur5Cg@vPZ3{=kqTC!uL..7s-wXWlj0rqс_y<6l\RN!ӮZ5' ?Q$S {˫=7/\$ $ cK9:ȥρ3 C:GL)7q:#B"nd Ӷ};v\@0+=PO0Ϋݐ{Q-hti?R )Zn|`O K{3(ۀ#H;){Uݥ׺+OkcSL7w7 mY1di,<ʲ.pM,S#F}kQuylk=8.*H}mn8=V3s- =KM TEzjcb&G+tr%d'6}#(j—"٫lO =G{ll{1e S1^)6.I UY+L"j׬1;q:e*<Š} AQޠ}4,f&3#-.RWp$i{vWȁWj6^RQ=&$ce$E?u8iE1mc*Hq,bo+IlbzVSmE!!$rzđn1M:+K܏7nmtAT#a>̼D\ ̈́75ɼ}yq5[OGy{6Dz B+,G])%])O6faћ1Z#ָ_=A|'X|'My]eͻ'XȀK*L.9äIOr5NPd[4@M YMۻHe,:Vs֩{lƍ ȝNy]2 v2*eτ3MC.3[9W:lE xyMHƸ!z_8ے@T";j 3<+g32HYHm.SM%RY~yr9CdSvc_L$6/`5`(w(.+<Cz"ƘgH 0+'dף#?^׾$Lq:r`|aCr!rirI&Q'Q:0- 83Q**A+OAƎ3F Wp~Ew ܸ/2mDXm0O8o\vBYT=)x%v!~<BD!Pj-3| f Dƙm}~BJz4Y,aWH*'T3%#ơ|שX?Ij5#@d@ҫ w!og4Kɉ=l+ۆ;X7X.A6>,49}%8XFQ$2?1V  w4,3Zs4%.w%$+@T4H2o{SePF/4d V{_LϘk5yF>yv軣 :aau_ uS*{ %llЦOYL%ߣjԥ mּXEm-؛7 > [VvsN4:R F 32 p~z qjSCN9Yi9cmy:JYKeQ./<x,ԕ*ܩ|wL=T4 aQ';#^hi&àь]>ְR=3$ F.eI ORi/ymd)`0Gcq"2%q# f1RW:}k;4C?8 aJWYҪꅃƧk4+:›ťLTaH.W>´v[e($2~DӒG>F0#)q:aw~5GV?!F:hf !xY;c.{8ꪄ͈XN{偕s}T:aWEG`4R`lc1ӠܨXAKGVI/b/E'aJFSV!H"ma-܍c͝\6yjPXй{{LJD8II[!(ݰo9AJ<anteBaeg㔛)Ҡ4Go^yvvG"[Zvi6o;ÏAENqԶm֗E ÈZ(;Vhp&.+3(%;v01HI71 NQCf`ʘ8Is fWS-t߫;r *|2%1`GDo>'a Upߑ˫t(x!GiR<I/_O}?vі XBbl3IS8HN4d36_Wowjzt WSC7gg@w%"w7EGv9~ZI8L ƹ nB&":lÆ&˒f=HR2܉dz 嬻:a cIko'E u0…<+pU!E-`H]}PW$sP_fAY'}/XO_6o8 EķRvt4;vm4AݞwntہߵCBI/N `#5,6r,K/dg" nyx22Qإ;)ȉܘtwe.[{Z:R(s.dGUw!P\fnK)n :<_EBܧ#Q^$$%{ԟѿN7[oX9=SW,Vh@D3ݰuUHAf cתI38D%o#뻁z{\5&\G8E_oj?P . Q_eLjSXTC.^dm2gAkqB4I)![Cs a݂0jjH72fةq: ˪)xfqľmE_"p}K\S礠!| FaABdSn˗kT%OĻ|8g`nNz5-S<̟([dyg!aBvHv(V܆{Ul.G rUo@y35Y}!tgX^F{sRLGD"Wʬb7c?bZ Cd5w(\P)}{p^T\^`/cML]A)e%s;^Y'݋쇟`9YQczH63=*(LX$w{v՘G-"PB. }2JqUF׫]*CQt|6g4O~pZb2E0F`E°҉_ӣ3.DO ,Bϧ%Kŋu/ydO; 4Z4$%we"iJ7~g"= rlK+oZk0ۿ;%El הnkvШ(d֍QB*2I7qp~ ̖4 !.ޡ6-W ? #TxvG#O}&Xk#jbyZ%pw^[>ag=SX{2g~Ϭeմˁ kEHw\ۖ:wZoj"F:2l&7MʻR[J=ITn9%I))XJo`)96)juKp-T▿"Id>r+\]fl5JI)1dhJƓ=Ma/::% ^jMAvڟ}#xrJm`8SlW [|;Ѐ F#NI,=+duE (B{xBQ{@ 9TE~bbvIo~+6ţPofW$; yTQ6#X2 yzU暏S=X6íxiZKstPۭk/N"i51I1IkevL(Ä"0 +ح4>Z|Ώ>&Ož[kٛpɜCq hFބbkp2m3aƙ*&D.cek~e^p0fj݅13,^Cެ]K%rҡ>=U#7t~k^CZ+X4F9tmuOABlm:r!R-> "G@+:y{nvife='j5R OHG͔I'v5Tkb¿`d5. 3d0q/FWN~%; !a+SK 17GRʹvfw%w,G*Zf!ޡv= u Eőds<8!k .RDNdWڥ>]#D$֬V>kOp|ogwcS[%(ꄗa,|yY ްG`M10>*@сǬ$DV;Ӭs:,fcS_dOΰYwl~2|,4۫8E{Of6IZ>x \Str/S8=`BkٵЯm)"*Y9 :쥾.T K avHAq6&zZNK0^Wf (kV+gUBtHpyr=_1 $_cm,u?͋`.S'R䶓~{I*gqL<Tr<7B ZB[9QpF$ ,\ e&KXNmM M,7GpcLif'UN|M#4\@]gZ"Eb QϤsܲj*mzDbYHP Xwc?b*Tw-'n]iy.YWx6hGITEyTT ./j< D=k^9)aщt@k{s~45:_M(aYY;3֬G@ZE 8/+#X\tumM<K"yߛC~gMs\)c excmYf[ݯK`D{^h q epCVJmh ਀B[*uh -:KsLR&¬g2vrjX|8Bj椂#;E*yRymj1NWA7 泿 9267 =y}ge Mi`7;"!fzE$qV -I˦>VE'ׅGq`c!Cg9C:iEl&(\J\`c__oEQ=VxxL}!Hv VSoR@DxO.uڃnjr29bzH$pfMh4ڛO$w`/.s.i`IaUG/(AHrVLnNYv{5T)U"NDv?z[`.)P-[hSs}s u- + EQm* EPy*̞4C&]Qs԰7o0V #)i4JCu ktFe=9  K w9ݝ:Jm>p;fY8#OG,6Ƥ]fV`˫?SnT*=Xψcy'`c~V##$1ci]1J.cJ-:N I^?(CW&R>w~>?(SPQHһlݗs0GL('{E +kFG$ 7tj3(: 'ZLY4k&}j$P4 IgLX#FX"'5-Gj-X 2$&@qs/ 5[%U6x"~ÖG᠗ժ}N?J~".AlzaK_ܳGHSr-|nBJp7UpWBQ_Bb||ԑBJ@I'ce K~Hgoa$B`OdU.~]KGO-FgOvb&&S CW-vO%AǙ nrKfdu ]n&Fb~q`6Ćbg#xQBrX% 5?Rz&jQ )`2_C"m DXEB6#; q4 c[h>Kؖԉ2NY[bIQ JQ t|y3-ͿΕC^(P__>ۖj<ꖎtPRu'87A t+_ 0X7;RR_G,b"SsnώP{TV5~(|G٦qRmA'zF̣p9ce5wnT>yyPldՠ!['/xˉ_A@2T@VHG3P+|&&⠥{|JU?{rK 1\_˲!5cRZ1Pt[ob{p4$󛻸dUtLE3@1Nxo n9e\uukA=,uф\,'^[`P-/%Kv#U |B:n?W5^/'1ldԋb:\*_Y4ԺqR3Eo!j 릴/ޢE+ $PB&4_ AD_=YnrXXF{J=T#V^bI(?\h/n/iCFulsD w3tR+[Ю\p J(]?h~ϲK*p*E1 څ72]_1:Y:֠Y(eprn|~^XUn +Df+a T4{MmWŭjq6;49c"%^ϐdhG_u`}K}[~P׈Bao7),a籁|(s$+Lc L= ttb}`s[MgG("e0s {Q3T?`˗0]aXQV%/ S z9=ºsK ]ax+ٲzmcѷ^4Y҃#߂|վEBϗn/ad?py t5 W=Į f_p/Z6\,nD&AQ;1;c &4_ ?i캙f4íҹǻ0|Z?SyNpGs3 bh=*/^l~NЬk\w7!ߣAO O{Q[07U^@fIsu<8TgG7*H_,khe{m_ւ@.Y83LqkZ|puk#m#3,(yskvK$&aglC4@$>QO6if__UqTPBc69wZM dȤY:(qy%`dm6hK?c&izThc`ap)ջHt0ׯխ``{l":6C,gA3jhq2׾Y&{$g3o{ XJۺwUtU&0vz#6Ta ٥N *u%_D:qC`2] *@,#nf;\xs0}$bT5R^h 6 jJr4idusFwy B6 Ijͦͩ^%_#"l7j-Jti|,591ON0!B\Ijݦ%" Զ7 ^{xF&t3ybZ_šsv դɿh͕2 E.憕If?D"\XYǟJfXY^t&LMKa&j%*rOg,H ! ƺ1++uvw ^pL#zH}1Xh6,#R$l6%NZ2wi!5X4ye2( RG[?91V2ij>iV41ѢHkr=) t#~>N̅ԻC{`p=KO/g4#,mu "AA@` jʊRFC A<> )]tQ "=@<{5 TK(I[>J\\Xњ>?2?)YR'ѭp>1e- GrM{|b.|s&!Wy`{a/bNt&dol۔J,$XCqz+7T3ªbhὕ1yoR;"tdiv M'$5IZAU]fY,pk$nƬ@} ?hZh \FƇ?YI_2Y\|KmމL͋})41n/)w=VYǝ|[srʋG\$3.!Y,܅04/-{_)iB pjpA~Xmu2jHL0˝gS vjR3oթSV9D9VߏcA,^G+;/I \~/lR zjSՠFU1fjo-)UQFy"L0Χr߷?Tp\!z˟tiP^*>ަK%$9ΨN)ʓv AhAF Crh(|KBA[tJ.i(p!RJ/fp/ VbwXm׺R!2Sj&TQ6=^5;/\ō{*F#`qnQǝffas[Yu\w^='G@]gMed݆#od{euK7eef+oB23wVY:gʌePꃘ\<G;^> 0Q>\Z1r"o d a2b# 7<[ҳ^t wQ>4o2Kᧅ0HjV$;~LDmɀFjPOxZNCJ;0hK˯2RJMbѱZU_D< 54e2B5)Y'YyY}=A/ܼ>d2fQ:}\nqBRPcxr?eGϩI WkTVQ,^֏MV[[)l&I$A{JֈN2(<=eRvjY}f %M;b5# L- K/#%eyhbeTrH6DNs:,r_ԙ2HhKA]?\8WڠK3ךjmB=4)uw\T3,4zVe*5er\< ƿUIer}hZ6lk㨉 a[G,@2b5T':oB!@~wXȦ(Cx89GD6 ޞ]D_QʼZXƺVi*5jT= #U;#二w X#ehghPV:PBf\r8$+fǶT8R0)`퉳7^(״h2f(b+D TNa8w? Tl&Kc-z5HͅTԠ@nΑ'dxOD#<>)莀:./:#W<"E^=HtSSiFȨ;-tÖBK*D{e]8|C7J;FKD JFQ=U?Cx5Pco֟nնmt%TTU 7%Jťw1嵜goRF6o F*:d޹~XH ѾRw3"PN@8L8%&uuh@[ZguiՑ[s}^-P[d`d)F,pK&ԫ-ыB!H(BѪz@@e{Ng'ьJc!"FK:b>Pá銘;r^s=Uk j}Ok6#gV…?HASPK;qjj6o'} Seҟc@a| p׃H2yIÕ{i~dIRyR[BV JVz"ݔ㥜- EF_9Q_.P*Aߴ|b+~-R[KqRiR=`VYm_ȪY*~@G>ZY ƛW l!G^F[s,jN˰ejgX$2!,޿m׏M/i>^b?ٱÌ`"ڍ0_Vn~i'(fކ4?cm祊 qN;_͸ *tW# ;v$,FޛM}65&[G2d|nVxQ|Pfr;@>@WLiqߍ2ƱQW Mk 1w^-m7'@c]s,T׵ }TݜtuL5;*Tz>CHs 'Jc_32x5fy:v137%[LGGY7}*,XBǜy&v@㽨krj{l]Q;Lnj6j3K%&6מ_!i)# {2H(2/Y{gIsaFoUF|{gFs7mx!dCts.PYx:((},?DeOҞUbrorlB3㩱]cY2;M vS#bNV|wHm#QUYͯYf;w"L EN-CA[y1|}˜U5@3򲭞1;D{Z߷K~= uJEa7蠔]3;+w+?q[$pBqH*@;UWѽSi@?11;x:CMz~(XQ] c\>%ju5@nz %4nPpHskJVL1 өJ%*5!3WR8 X~oX u|dw0fHFbgG3|cN9ÆDž-Tjʇ՟zALLQ?(ϓv ]u5-lsb D hNE?l7P$_P8"m@R%h/d&~~XB¦iO2_63~+k)b |K7UyzB]6Ny& ꂩ-`y'Z63FZ9;P CCͳ6K[䶫@*PT:H)z"LiG˥lwڽB-7Y腜TqY*l_.%WQ~48:O>ȮX" o'j_۸SpX1!402C\A?:\tzW]5Om6: x%oRA x~W-06AZc)e^ g6Q)Pd\s|>q-z<0`7>YlBBaDda(agC5^bE00Xy(劍Sl+lˏz5PZ ]4{e]bvv2JQHq~02R32(صp)5k-@PF=< B΄|r/qrQ-̇Oc9*d s!y–ڼ;XӌFX0[n&2F|Vv(+8s<!vzUÕdxgi`"X=f*Ȃ7gɽԀ#0û~^З{&}i|4]ϺAK {~,n~HF(WYA7$_d QVlt?4)XƗ+%Wz"ӿAQ?&Q阴aj:9;q^z7;qygkBsU#3ܠs^Qۣv*6Y°炛G劐;_ZʤЖ ҒeSm;DBRZƦ[c?:]umn/x֊yZpkx BtM\|l*FNAʽi5N148LvMv 曤otp;2g>U !98%w4sqi2;^  ԗPp݅'J.{wX!Jģr,t\3v'{-i Hd#`:],tbEBٖiIRrdS^]|̧*$G ȟVnEYarfHnaHzW ^){C,[ee=$ A90;"VH~r''pJ1-r 9j2N.+KoڹB$5 F|F)͛<و?kU<>cz ddR`gVu,bBN6̠E,&> Ͽ:Uomtw#*%Gu}V&HoAq<4{Io4dvٿ&K6'<)nZr"͒x$YB%Ar:,w}aPўfѺE͑?o0S< 8 dx WMF~;t:H;|ٜ weGL"-qG3 \km+[׾[O;7mʱviZa`*1|YM/"'|E!0.κ"j1!hC&SIX)߮ɫDUD^6l>e5q4S ߴAWL^\}e巠Сu(+Wt60r" 2 ʤ%C:͇"sP1GkE)Bs>q<7H ltV"'r>_^eEw4Gk:Oc04sbbSݫ %yJ|=q4os4r[͟}\:@5m$OLWKbVYu[b`m'(ϪZ^V[cOxg,JUS={hK&vNg@K ôұ3RYvϻi13hx(LU0xk<=g׉7 Cu!QWBD_X3PܺBBv_ 8#P$/nvK B:ܝ։E0|_ƜS%qBB>PXV'N5ߊ+sN/"{Ȼ9sooA2S}Y'p~^IHYE(粤y0hlIMW˪z9V)G^ MBq:>E1|՟VUnTU—+ ;,OVzSS@Im|gr SWn]UphĞ<Ȏ .'XwKWMrU$ `M~~NQS*)&=pG_|C{.H|+-6BBlҮKe9pA^;]ݨGm_%u& \%@uDy0S.ءE,SyX.㸻|Cu+@ʢ'Ryڈ(֕3\ǖcE&kB<X<Vb')$ + 4:G}U" إqI:W:WP>9M \bynfBq -GSLАT:1L!Z)J=Mn*SHBpJ[$ZD8dҥX֫YqU9{QZuPk>#bDPztΣ4.qNҵWOZ;M'=ڊ="f^vd!j4\ ghP:(wg\P P›Ա F8ga p-?w| hs +#~ 65csf!IeU*uQkCxp|4Ҷ+:屬 -OzY$WJ$+f7j, )[G 1[a\>`s40Xj߫|XX'RڊO짘t {Ɏmzd0p(+x XQƎxN}aG|+G&}Qmn?ԤhكX.#,FZ^›Pid1P&!8F'U KU>4JV|6|bO8'dh,ʜ#DbVdOo{o@`^sDw "C#.tƌJK }S%fRݟ,D3CY вo2;&d],m #SW-Ns!jOleRXKi}Wb: YZ