) (bmo#1614183)
* Fix a compilation error for ‘getFIPSEnv’ "defined but not used"
(bmo#1614786)
* Send DTLS version numbers in DTLS 1.3 supported_versions extension
to avoid an incompatibility. (bmo#1615208)
* SECU_ReadDERFromFile calls strstr on a string that isn't guaranteed
to be null-terminated (bmo#1538980)
* Correct a warning for comparison of integers of different signs:
'int' and 'unsigned long' in security/nss/lib/freebl/ecl/ecp_25519.c:88
(bmo#1561337)
* Add test for mp_int clamping (bmo#1609751)
* Don't attempt to read the fips_enabled flag on the machine unless
NSS was built with FIPS enabled (bmo#1582169)
* Fix a null pointer dereference in BLAKE2B_Update (bmo#1431940)
* Fix compiler warning in secsign.c (bmo#1617387)
* Fix a OpenBSD/arm64 compilation error: unused variable 'getauxval'
(bmo#1618400)
* Fix a crash on unaligned CMACContext.aes.keySchedule when using
AES-NI intrinsics (bmo#1610687)
- update to NSS 3.50
* Verified primitives from HACL* were updated, bringing performance
improvements for several platforms.
Note that Intel processors with SSE4 but without AVX are currently
unable to use the improved ChaCha20/Poly1305 due to a build issue;
such platforms will fall-back to less optimized algorithms.
See bmo#1609569 for details
* Updated DTLS 1.3 implementation to Draft-30.
See bmo#1599514 for details.
* Added NIST SP800-108 KBKDF - PKCS#11 implementation.
See bmo#1599603 for details.
* Several bugfixes and minor changes
- Disable LTO on %arm as LTO fails on neon errors
- update to NSS 3.49.2
Fixed bugs:
* Fix compilation problems with NEON-specific code in freebl
(bmo#1608327)
* Fix a taskcluster issue with Python 2 / Python 3 (bmo#1608895)
- update to NSS 3.49.1
3.49.1
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49.1_release_notes
* Cache the most recent PBKDF2 password hash, to speed up repeated
SDR operations, important with the increased KDF iteration counts (bmo#1606992)
3.49
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.49_release_notes
* The legacy DBM database, libnssdbm, is no longer built by default
when using gyp builds (bmo#1594933)
* several bugfixes
- update to NSS 3.48
https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.48_release_notes
Notable Changes
* TLS 1.3 is the default maximum TLS version (bmo#1573118)
* TLS extended master secret is enabled by default, where possible
(bmo#1575411)
* The master password PBE now uses 10,000 iterations by default when
using the default sql (key4.db) storage (bmo#1562671)
Certificate Authority Changes
* Added Entrust Root Certification Authority - G4 Cert (bmo#1591178)
Bugfixes
- requires NSPR 4.24 - nss-fips-aes-keywrap-post.patch: Add AES Keywrap POST.
- nss-fips-constructor-self-tests.patch: Accept EACCES in lieu
of ENOENT when trying to access /proc/sys/crypto/fips_enabled
(bsc#1170908). - nss-fips-constructor-self-tests.patch: Add Softoken POSTs for
new DSA and ECDSA hash-and-sign update functinos. - nss-fips-combined-hash-sign-dsa-ecdsa.patch: Add pairwise
consistency check for CKM_SHA224_RSA_PKCS. Remove ditto checks
for CKM_RSA_PKCS, CKM_DSA and CKM_ECDSA, since these are served
by the new CKM_SHA224_RSA_PKCS, CKM_DSA_SHA224, CKM_ECDSA_SHA224
checks.
- nss-fips-constructor-self-tests.patch: Replace bad attempt at
unconditional nssdbm checksumming with a dlopen(), so it can be
located consistently and perform its own self-tests. - Add nss-fix-dh-pkcs-derive-inverted-logic.patch. This fixes an
instance of inverted logic due to a boolean being mistaken for
a SECStatus, which caused key derivation to fail when the caller
provided a valid subprime. - Add nss-fips-combined-hash-sign-dsa-ecdsa.patch. This implements
API mechanisms for performing DSA and ECDSA hash-and-sign
in a single call, which will be required in future FIPS cycles. - nss-fips-constructor-self-tests.patch: Always perform nssdbm
checksumming on softoken load, even if nssdbm itself is not
loaded. - nss-fips-detect-fips-mode-fixes.patch: Use secure_getenv() to
avoid PR_GetEnvSecure() being called when NSPR is unavailable,
resulting in an abort (bsc#1168669). - Added patches related to FIPS certification:
* nss-fips-use-getrandom.patch: Use getrandom() to obtain entropy
where possible.
* nss-fips-dsa-kat.patch: Make DSA KAT FIPS compliant.
* nss-fips-pairwise-consistency-check.patch: Use FIPS compliant
hash when validating keypair.
* nss-fips-rsa-keygen-strictness.patch: Enforce FIPS requirements
on RSA key generation.
* nss-fips-cavs-keywrap.patch,
nss-fips-cavs-kas-ffc.patch,
nss-fips-cavs-kas-ecc.patch,
nss-fips-cavs-general.patch,
nss-fips-cavs-dsa-fixes.patch,
nss-fips-cavs-rsa-fixes.patch: Miscellaneous fixes to CAVS
tests.
* nss-fips-gcm-ctr.patch: Enforce FIPS limits on how much data
can be processed without rekeying.
* nss-fips-constructor-self-tests.patch: Run self tests on
library initialization in FIPS mode.
* nss-fips-approved-crypto-non-ec.patch: Disable non-compliant
algorithms in FIPS mode (hashes and the SEED cipher).
* nss-fips-zeroization.patch: Clear various temporary variables
after use.
* nss-fips-tls-allow-md5-prf.patch: Allow MD5 to be used in TLS
PRF.
* nss-fips-use-strong-random-pool.patch: Preferentially gather
entropy from /dev/random over /dev/urandom.
* nss-fips-detect-fips-mode-fixes.patch: Allow enabling FIPS mode
consistently with NSS_FIPS environment variable.
* nss-unit-test-fixes.patch: Fix argument parsing bug in
lowhashtest. - update to NSS 3.47.1
* CVE-2019-11745 - EncryptUpdate should use maxout, not block size
(boo#1158527)
* Fix a crash that could be caused by client certificates during startup
(bmo#1590495, bsc#1158527)
* Fix compile-time warnings from uninitialized variables in a perl script
(bmo#1589810)
- update to NSS 3.47
* Support AES HW acceleration on ARMv8 (bmo#1152625)
* Allow per-socket run-time ordering of the cipher suites presented
in ClientHello (bmo#1267894)
* Add CMAC to FreeBL and PKCS #11 libraries (bmo#1570501)
- update to NSS 3.46.1
* The following CA certificates were Removed:
expired Class 2 Primary root certificate
expired UTN-USERFirst-Client root certificate
expired Deutsche Telekom Root CA 2 root certificate
Swisscom Root CA 2 root certificate
* Significant improvements to AES-GCM performance on ARM
* Soft token MAC verification not constant time (bmo#1582343)
* Remove arbitrary HKDF output limit by allocating space as needed
(bmo#1577953)
- update to NSS 3.46
* CVE-2019-17006 - Add length checks for cryptographic primitives
(bmo#1539788, bsc#1159819)
* The following CA certificates were Removed:
expired Class 2 Primary root certificate
expired UTN-USERFirst-Client root certificate
expired Deutsche Telekom Root CA 2 root certificate
Swisscom Root CA 2 root certificate
* Significant improvements to AES-GCM performance on ARM - update to NSS 3.45 (bsc#1141322)
* New function in pk11pub.h: PK11_FindRawCertsWithSubject
* The following CA certificates were Removed:
CN = Certinomis - Root CA (bmo#1552374)
* Implement Delegated Credentials (draft-ietf-tls-subcerts)
(bmo#1540403)
This adds a new experimental function SSL_DelegateCredential
Note: In 3.45, selfserv does not yet support delegated
credentials (See bmo#1548360).
Note: In 3.45 the SSLChannelInfo is left unmodified,
while an upcoming change in 3.46 will set
SSLChannelInfo.authKeyBits to that of the delegated
credential for better policy enforcement
(See bmo#1563078).
* Replace ARM32 Curve25519 implementation with one from
fiat-crypto (bmo#1550579)
* Support static linking on Windows (bmo#1551129)
* Expose a function PK11_FindRawCertsWithSubject for finding
certificates with a given subject on a given slot
(bmo#1552262)
* Add IPSEC IKE support to softoken (bmo#1546229)
* Add support for the Elbrus lcc compiler (<=1.23)
(bmo#1554616)
* Expose an external clock for SSL (bmo#1543874)
This adds new experimental functions: SSL_SetTimeFunc,
SSL_CreateAntiReplayContext, SSL_SetAntiReplayContext, and
SSL_ReleaseAntiReplayContext.
The experimental function SSL_InitAntiReplay is removed.
* Various changes in response to the ongoing FIPS review
(bmo#1546477)
Note: The source package size has increased substantially
due to the new FIPS test vectors. This will likely
prompt follow-on work, but please accept our
apologies in the meantime. - update to NSS 3.44.1
* (3.44.1) now required by Firefox 68.0
New Functionality:
* Add IPSEC IKE support to softoken (bmo#1546229)
* Many new FIPS test cases (Note: This has increased the source
archive by approximately 50 megabytes for this release.)
Bugs fixed:
* Optimize away unneeded loop in mpi.c (bmo#1554336)
* More thorough input checking (bmo#1515342)
* Don't unnecessarily strip leading 0's from key material during
PKCS11 import (bmo#1540541)
* Add a SSLKEYLOGFILE enable/disable flag at build.sh
(bmo#1515236)
* Fix SECKEY_ConvertToPublicKey handling of non-RSA keys
(bmo#1473806)
* Updates to testing for FIPS validation (bmo#1546477)
* Prohibit use of RSASSA-PKCS1-v1_5 algorithms in TLS 1.3
(bmo#1552208)
* Unbreak build on GCC < 4.3 big-endian (bmo#1551041)
- Activate -fPIE -pie during the compile - update to NSS 3.44
* (3.44) required by Firefox 68.0
New functionality
* Support XDG basedir specification (bmo#818686)
* HASH_GetHashOidTagByHashType - convert type HASH_HashType to
type SECOidTag
* SSL_SendCertificateRequest - allow server to request
post-handshake client authentication. To use this both peers
need to enable the SSL_ENABLE_POST_HANDSHAKE_AUTH option.
Notable changes
* The following CA certificates were added:
CN = emSign Root CA - G1
CN = emSign ECC Root CA - G3
CN = emSign Root CA - C1
CN = emSign ECC Root CA - C3
CN = Hongkong Post Root CA 3
Bugs fixed:
* CVE-2018-18508 (bmo#1507135, bmo#1507174)
Add additional null checks to several CMS functions to fix a
rare CMS crash.
* Improve Gyp build system handling (bmo#1528669, bmo#1529308)
* Reject invalid CH.legacy_version in TLS 1.3 (bmo#1490006)
* A fix for Solaris where Firefox 60 core dumps during start when
using profile from version 52 (bmo#1513913)
* Improve NSS S/MIME tests for Thunderbird (bmo#1529950, bmo#1521174)
* If Docker isn't installed, try running a local clang-format as a
fallback (bmo#1530134)
* Enable FIPS mode automatically if the system FIPS mode flag is
set (bmo#1531267)
* Add a -J option to the strsclnt command to specify
sigschemes (bmo#1528262)
* Add manual for nss-policy-check (bmo#1513909)
* Fix a deref after a null check in SECKEY_SetPublicValue (bmo#1531074)
* Properly handle ESNI with HRR (bmo#1517714)
* Expose HKDF-Expand-Label with mechanism (bmo#1529813)
* Align TLS 1.3 HKDF trace levels (bmo#1535122)
* Use getentropy on compatible versions of FreeBSD. (bmo#1530102) - update to NSS 3.41.1
* (3.41) required by Firefox 65.0
New functionality
* Implemented EKU handling for IPsec IKE. (bmo#1252891)
* Enable half-closed states for TLS. (bmo#1423043)
* Enabled the following ciphersuites by default: (bmo#1493215)
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
TLS_RSA_WITH_AES_256_GCM_SHA384
Notable changes
* The following CA certificates were added:
CN = Certigna Root CA
CN = GTS Root R1
CN = GTS Root R2
CN = GTS Root R3
CN = GTS Root R4
CN = UCA Global G2 Root
CN = UCA Extended Validation Root
* The following CA certificates were removed:
CN = AC Raíz Certicámara S.A.
CN = Certplus Root CA G1
CN = Certplus Root CA G2
CN = OpenTrust Root CA G1
CN = OpenTrust Root CA G2
CN = OpenTrust Root CA G3
Bugs fixed
* Reject empty supported_signature_algorithms in Certificate
Request in TLS 1.2 (bmo#1412829)
* Cache side-channel variant of the Bleichenbacher attack (bmo#1485864)
(CVE-2018-12404)
* Resend the same ticket in ClientHello after HelloRetryRequest (bmo#1481271)
* Set session_id for external resumption tokens (bmo#1493769)
* Reject CCS after handshake is complete in TLS 1.3 (bmo#1507179)
* Add additional null checks to several CMS functions to fix a rare
CMS crash. (bmo#1507135, bmo#1507174) (3.41.1)
- removed obsolete patches
nss-disable-ocsp-test.patch - hmac packages inadvertently removed in last update: re-added.
(bnc#1121207)
- Added "Suggest:" for libfreebl3 and libsoftokn3 respective -hmac
packages to avoid dependency issues during updates
(bsc#1090767, bsc#1121045) - update to NSS 3.40.1
* required by Firefox 64.0
* patch release fixes CVE-2018-12404
Notable bug fixes
* FFDHE key exchange sometimes fails with decryption failure (bmo#1478698)
New functionality
* The draft-00 version of encrypted SNI support is implemented
* tstclnt now takes -N option to specify encrypted SNI key
Notable changes
* The mozilla::pkix library has been ported from Mozilla PSM to NSS.
This is a C++ library for building certification paths.
mozilla::pkix APIs are not exposed in the libraries NSS builds.
* It is easier to build NSS on Windows in mozilla-build environments
* The following CA certificates were Removed:
CN = Visa eCommerce Root - update to NSS 3.39
* required by Firefox 63.0
Notable bug fixes
* NSS responded to an SSLv2-compatible ClientHello with a
ServerHello that had an all-zero random (CVE-2018-12384) (bmo#1483128)
New functionality
* The tstclnt and selfserv utilities added support for configuring
the enabled TLS signature schemes using the -J parameter.
* NSS will use RSA-PSS keys to authenticate in TLS. Support for
these keys is disabled by default but can be enabled using
SSL_SignatureSchemePrefSet().
* certutil added the ability to delete an orphan private key from
an NSS key database.
* Added the nss-policy-check utility, which can be used to check
an NSS policy configuration for problems.
* A PKCS#11 URI can be used as an identifier for a PKCS#11 token.
Notable changes
* The TLS 1.3 implementation uses the final version number from
RFC 8446.
* Previous versions of NSS accepted an RSA PKCS#1 v1.5 signature
where the DigestInfo structure was missing the NULL parameter.
Starting with version 3.39, NSS requires the encoding to contain
the NULL parameter.
* The tstclnt and selfserv test utilities no longer accept the -z
parameter, as support for TLS compression was removed in a
previous NSS version.
* The CA certificates list was updated to version 2.26.
* The following CA certificates were Added:
- OU = GlobalSign Root CA - R6
- CN = OISTE WISeKey Global Root GC CA
* The following CA certificate was Removed:
- CN = ComSign
* The following CA certificates had the Websites trust bit disabled:
- CN = Certplus Root CA G1
- CN = Certplus Root CA G2
- CN = OpenTrust Root CA G1
- CN = OpenTrust Root CA G2
- CN = OpenTrust Root CA G3
- enable PIE support for the included binaries
- update to NSS 3.38
* required by Firefox 62.0
New Functionality
* Added support for the TLS Record Size Limit Extension
* When creating a certificate request (CSR) using certutil -R, an
existing orphan private key can be reused. Parameter -k may be
used to specify the ID of an existing orphan key. The available
orphan key IDs can be displayed using command certutil -K.
* When using certutil -O to print the chain for a given certificate
nickname, the new parameter --simple-self-signed may be provided,
which can avoid ambiguous output in some scenarios.
New Functions
* SECITEM_MakeItem - Allocate and make an item with the requested contents
(secitem.h)
New Macros
* SSL_RECORD_SIZE_LIMIT - used to control the TLS Record Size Limit
Extension (in ssl.h)
Notable Changes
* Fixed CVE-2018-0495 (bmo#1464971)
* Various security fixes in the ASN.1 code
* NSS automatically enables caching for SQL database storage on
Linux, if it is located on a network filesystem that's known to
benefit from caching.
* When repeatedly importing the same certificate into an SQL database,
the existing nickname will be kept.
- update to NSS 3.37.3
* required by Firefox 61.0
Notable changes:
* The TLS 1.3 implementation was updated to Draft 28.
* Added HACL* Poly1305 32-bit
* The code to support the NPN protocol has been fully removed.
* NSS allows servers now to register ALPN handling callbacks to
select a protocol.
* NSS supports opening SQL databases in read-only mode.
* On Linux, some build configurations can use glibc's function
getentropy(), which uses the kernel's getrandom() function.
* The CA list was updated to version 2.24, which removed the
following CA certificates:
- CN = S-TRUST Universal Root CA
- CN = TC TrustCenter Class 3 CA II
- CN = TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
* Fix build on armv6/armv7 and other platforms (bmo#1459739)
- Set USE_64 on riscv64 - update to NSS 3.36.4
* required for Firefox 60.0.2 (bsc#1096515)
* Fix crash on macOS related to authentication tokens, e.g. PK11or
WebAuthn. (bmo#1461731)
Bugfixes from 3.36.2
* Connecting to a server that was recently upgraded to TLS 1.3
would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
* Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch) - update to NSS 3.36.1
Notable changes
* In NSS version 3.35 the iteration count in optimized builds,
which is used for password based encryption algorithm related to
encrypted PKCS#7 or PKCS#12 data, was increased to one million
iterations. That change had caused an interoperability regression
with operating systems that are limited to 600 K iterations.
NSS 3.36.1 has been changed to use the same 600 K limit.
Bugs fixed
* Certain smartcard operations could result in a deadlock. - update to NSS 3.36
New functionality
* Experimental APIs for TLS session cache handling
Notable Changes
* Replaces existing vectorized ChaCha20 code with verified
HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
upstream fix - update to NSS 3.35
New functionality
* TLS 1.3 support has been updated to draft -23. This includes a
large number of changes since 3.34, which supported only draft
- 18. See below for details.
New Types
* SSLHandshakeType - The type of a TLS handshake message.
* For the SSLSignatureScheme enum, the enumerated values
ssl_sig_rsa_pss_sha* are deprecated in response to a change in
TLS 1.3. Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
Note that this release does not include support for the latter.
Notable Changes
* Previously, NSS used the DBM file format by default. Starting
with version 3.35, NSS uses the SQL file format by default.
Additional information can be found on this Fedora Linux project
page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
* Added formally verified implementations of non-vectorized Chacha20
and non-vectorized Poly1305 64-bit.
* For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
the iteration count for the password based encryption algorithm
has been increased to one million iterations. Note that debug builds
will use a lower count, for better performance in test environments.
* NSS 3.30 had introduced a regression, preventing NSS from reading
some AES encrypted data, produced by older versions of NSS.
NSS 3.35 fixes this regression and restores the ability to read
affected data.
* The following CA certificates were Removed:
OU = Security Communication EV RootCA1
CN = CA Disig Root R1
CN = DST ACES CA X6
Subject CN = VeriSign Class 3 Secure Server CA - G2
* The Websites (TLS/SSL) trust bit was turned off for the following
CA certificates:
CN = Chambers of Commerce Root
CN = Global Chambersign Root
* TLS servers are able to handle a ClientHello statelessly, if the
client supports TLS 1.3. If the server sends a HelloRetryRequest,
it is possible to discard the server socket, and make a new socket
to handle any subsequent ClientHello. This better enables stateless
server operation. (This feature is added in support of QUIC, but it
also has utility for DTLS 1.3 servers.)
* The tstclnt utility now supports DTLS, using the -P option. Note that
a DTLS server is also provided in tstclnt.
* TLS compression is no longer possible with NSS. The option can be
enabled, but NSS will no longer negotiate compression.
* The signatures of functions SSL_OptionSet, SSL_OptionGet,
SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
to take a PRIntn argument rather than PRBool. This makes it clearer,
that options can have values other than 0 or 1. Note this does
not affect ABI compatibility, because PRBool is a typedef for PRIntn. - update to NSS 3.34.1
Changes in 3.34:
Notable changes
* The following CA certificates were Added:
GDCA TrustAUTH R5 ROOT
SSL.com Root Certification Authority RSA
SSL.com Root Certification Authority ECC
SSL.com EV Root Certification Authority RSA R2
SSL.com EV Root Certification Authority ECC
TrustCor RootCert CA-1
TrustCor RootCert CA-2
TrustCor ECA-1
* The following CA certificates were Removed:
Certum CA, O=Unizeto Sp. z o.o.
StartCom Certification Authority
StartCom Certification Authority G2
TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3
ACEDICOM Root
Certinomis - Autorité Racine
TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
PSCProcert
CA 沃通根证书, O=WoSign CA Limited
Certification Authority of WoSign
Certification Authority of WoSign G2
CA WoSign ECC Root
* libfreebl no longer requires SSE2 instructions
New functionality
* When listing an NSS database using certutil -L, but the database
hasn't yet been initialized with any non-empty or empty password,
the text "Database needs user init" will be included in the listing.
* When using certutil to set an inacceptable password in FIPS mode,
a correct explanation of acceptable passwords will be printed.
* SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
* SSLChannelInfo has two new fields (bmo#1396525):
SSLNamedGroup originalKeaGroup holds the key exchange group of
the original handshake when the session was resumed.
PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
otherwise.
* RSA-PSS signatures are now supported on certificates. Certificates
with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
signature on a certificate using the --pss-sign argument to certutil.
Changes in 3.34.1:
* The following CA certificate was Re-Added. It was removed in NSS
3.34, but has been re-added with only the Email trust bit set.
(bmo#1418678):
libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
* Removed entries from certdata.txt for actively distrusted
certificates that have expired (bmo#1409872)
* The version of the CA list was set to 2.20. - Escape the usage of %{VERSION} when calling out to rpm.
RPM 4.14 has %{VERSION} defined as 'the main packages version'. - update to NSS 3.33
Notable changes
* TLS compression is no longer supported. API calls that attempt
to enable compression are accepted without failure. However,
TLS compression will remain disabled.
* This version of NSS uses a formally verified implementation of
Curve25519 on 64-bit systems.
* The compile time flag DISABLE_ECC has been removed.
* When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
are not performed anymore.
* Various minor improvements and correctness fixes.
New functionality
* When listing an NSS database using certutil -L, but the database
hasn't yet been initialized with any non-empty or empty password,
the text "Database needs user init" will be included in the listing.
* When using certutil to set an inacceptable password in FIPS mode,
a correct explanation of acceptable passwords will be printed.
New functions
* CERT_FindCertByIssuerAndSNCX - a variation of existing function
CERT_FindCertByIssuerAndSN that accepts an additional password
context parameter.
* CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
function CERT_FindCertByNicknameOrEmailAddr that accepts an
additional password context parameter.
* CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
accepts an additional password context parameter.
* NSS_SecureMemcmpZero - check if a memory region is all zero in
constant time.
* PORT_ZAllocAligned - allocate aligned memory.
* PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
* SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
to avoid implicit execution of SSE2 methods if compiled for i586
(bmo-1400603.patch, boo#1061204) - update to NSS 3.32.1
* no upstream changelog/releasenote provided - update to NSS 3.32
Notable changes
* Various minor improvements and correctness fixes.
* The Code Signing trust bit was turned off for all included root certificates.
* The Websites (TLS/SSL) trust bit was turned off for the following
root certificates:
AddTrust Class 1 CA Root
Swisscom Root CA 2
* The following CA certificates were Removed:
AddTrust Public CA Root
AddTrust Qualified CA Root
China Internet Network Information Center EV Certificates Root
CNNIC ROOT
ComSign Secured CA
GeoTrust Global CA 2
Secure Certificate Services
Swisscom Root CA 1
Swisscom Root EV CA 2
Trusted Certificate Services
UTN-USERFirst-Hardware
UTN-USERFirst-Object
- requires NSPR 4.16 - update to NSS 3.31.1
* Potential deadlock when using an external PKCS#11 token (bmo#1381784) - update to NSS 3.31
New functionality
* Allow certificates to be specified by RFC7512 PKCS#11 URIs.
* Allow querying a certificate object for its temporary or permanent
storage status in a thread safe way.
New functions
* CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
certificate in a thread safe way.
* CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
certificate in a thread safe way.
* PK11_FindCertFromURI - find a certificate identified by the given URI.
* PK11_FindCertsFromURI - find a list of certificates identified by the given
URI.
* PK11_GetModuleURI - retrieve the URI of the given module.
* PK11_GetTokenURI - retrieve the URI of a token based on the given slot
information.
* PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
* PK11URI_DestroyURI - destroy a PK11URI object.
* PK11URI_FormatURI - format a PK11URI object to a string.
* PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
* PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
* PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
New macros
* Several new macros that start with PK11URI_PATTR_ for path attributes defined
in RFC7512.
* Several new macros that start with PK11URI_QATTR_ for query attributes defined
in RFC7512.
Notable changes
* The APIs that set a TLS version range have been changed to trim the requested
range to the overlap with a systemwide crypto policy, if configured.
SSL_VersionRangeGetSupported can be used to query the overlap between the
library's supported range of TLS versions and the systemwide policy.
* Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
failure if the requested version range wasn't fully allowed by the systemwide
crypto policy. They have been changed to return success, if at least one TLS
version overlaps between the requested range and the systemwide policy. An
application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
query the TLS version range that was effectively activated.
* Corrected the encoding of Domain Name Constraints extensions created by
certutil.
* NSS supports a clean seeding mechanism for *NIX systems now using only
/dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
time.
* CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch - update to NSS 3.30.2
New Functionality
* In the PKCS#11 root CA module (nssckbi), CAs with positive trust
are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
set to true. Applications that need to distinguish them from other
other root CAs, may use the exported function PK11_HasAttributeSet.
* Support for callback functions that can be used to monitor SSL/TLS
alerts that are sent or received.
New Functions
* CERT_CompareAVA - performs a comparison of two CERTAVA structures,
and returns a SECComparison result.
* PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
given slot has a specific boolean attribute set.
* SSL_AlertReceivedCallback - register a callback function, that will
be called whenever an SSL/TLS alert is received
* SSL_AlertSentCallback - register a callback function, that will be
called whenever an SSL/TLS alert is sent
* SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
for use in wrapping session ticket keys, used by the server. This
function currently only accepts an RSA public/private key pair.
New Macros
* PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
cipher family identifiers corresponding to the PKCS#5 v2.1 AES
based encryption schemes used in the PKCS#12 support in NSS
* CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
attribute, that should be set to true, if a CA is present because
of it's acceptance according to the Mozilla CA Policy
Notable Changes
* The TLS server code has been enhanced to support session tickets
when no RSA certificate (e.g. only an ECDSA certificate) is configured.
* RSA-PSS signatures produced by key pairs with a modulus bit length
that is not a multiple of 8 are now supported.
* The pk12util tool now supports importing and exporting data encrypted
in the AES based schemes defined in PKCS#5 v2.1.
Root CA updates
* The following CA certificates were Removed
- O = Japanese Government, OU = ApplicationCA
- CN = WellsSecure Public Root Certificate Authority
- CN = TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
- CN = Microsec e-Szigno Root
* The following CA certificates were Added
- CN = D-TRUST Root CA 3 2013
- CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
* The version number of the updated root CA list has been set to 2.14
(bmo#1350859)
* Domain name constraints for one of the new CAs have been added to the
NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch - update to NSS 3.29.5
* Rare crashes in the base 64 decoder and encoder were fixed.
(bmo#1344380)
* A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
(boo#1015499, bmo#1320695) (nss-bmo1320695.patch) - update to NSS 3.29.3
* enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
This build option was removed.
- required for Firefox 53 - Add nss-fix-hash.patch to fix hash computation (and build with
GCC 7 which complains about shifts of boolean values). - update to NSS 3.28.3
* This is a patch release to fix binary compatibility issues.
NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
in violation with the NSS compatibility promise.
ECParams, which is part of the public API of the freebl/softokn
parts of NSS, had been changed to include an additional attribute.
That size increase caused crashes or malfunctioning with applications
that use that data structure directly, or indirectly through
ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
or potentially other data structures that reference ECParams.
The change has been reverted to the original state in bug
bmo#1334108.
SECKEYECPublicKey had been extended with a new attribute, named
"encoding". If an application passed type SECKEYECPublicKey to NSS
(as part of SECKEYPublicKey), the NSS library read the uninitialized
attribute. With this NSS release SECKEYECPublicKey.encoding is
deprecated. NSS no longer reads the attribute, and will always
set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR >= 4.13.1 - update to NSS 3.28.2
This is a stability and compatibility release. Below is a summary of
the changes.
* Fixed a NSS 3.28 regression in the signature scheme flexibility that
causes connectivity issues between iOS 8 clients and NSS servers
with ECDSA certificates (bmo#1334114)
* Fixed a possible crash on some Windows systems (bmo#1323150)
* Fixed a compatibility issue with TLS clients that do not provide a
list of supported key exchange groups (bmo#1330612) - update to NSS 3.28.1
No new functionality is introduced in this release. This is a patch release to
update the list of root CA certificates and address a minor TLS compatibility
issue that some applications experienced with NSS 3.28.
* The following CA certificates were Removed
CN = Buypass Class 2 CA 1
CN = Root CA Generalitat Valenciana
OU = RSA Security 2048 V3
* The following CA certificates were Added
OU = AC RAIZ FNMT-RCM
CN = Amazon Root CA 1
CN = Amazon Root CA 2
CN = Amazon Root CA 3
CN = Amazon Root CA 4
CN = LuxTrust Global Root 2
CN = Symantec Class 1 Public Primary Certification Authority - G4
CN = Symantec Class 1 Public Primary Certification Authority - G6
CN = Symantec Class 2 Public Primary Certification Authority - G4
CN = Symantec Class 2 Public Primary Certification Authority - G6
* The version number of the updated root CA list has been set to 2.11
* A misleading assertion/alert has been removed when NSS tries to flush data
to the peer but the connection was already reset.
- update to NSS 3.28
New functionality:
* NSS includes support for TLS 1.3 draft -18. This includes a number
of improvements to TLS 1.3:
- The signed certificate timestamp, used in certificate
transparency, is supported in TLS 1.3.
- Key exporters for TLS 1.3 are supported. This includes the early
key exporter, which can be used if 0-RTT is enabled. Note that
there is a difference between TLS 1.3 and key exporters in older
versions of TLS. TLS 1.3 does not distinguish between an empty
context and no context.
- The TLS 1.3 (draft) protocol can be enabled, by defining
NSS_ENABLE_TLS_1_3=1 when building NSS.
- NSS includes support for the X25519 key exchange algorithm,
which is supported and enabled by default in all versions of TLS.
New Functions:
* SSL_ExportEarlyKeyingMaterial
* SSL_SendAdditionalKeyShares
* SSL_SignatureSchemePrefSet
* SSL_SignatureSchemePrefGet
Notable Changes:
* NSS can no longer be compiled with support for additional elliptic curves.
This was previously possible by replacing certain NSS source files.
* NSS will now detect the presence of tokens that support additional
elliptic curves and enable those curves for use in TLS.
Note that this detection has a one-off performance cost, which can be
avoided by using the SSL_NamedGroupConfig function to limit supported
groups to those that NSS provides.
* PKCS#11 bypass for TLS is no longer supported and has been removed.
* Support for "export" grade SSL/TLS cipher suites has been removed.
* NSS now uses the signature schemes definition in TLS 1.3.
This also affects TLS 1.2. NSS will now only generate signatures with the
combinations of hash and signature scheme that are defined in TLS 1.3,
even when negotiating TLS 1.2.
- This means that SHA-256 will only be used with P-256 ECDSA certificates,
SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
compatibility reasons.
- New functions to configure signature schemes are provided:
SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
now deprecated.
- NSS will now no longer assume that default signature schemes are
supported by a peer if there was no commonly supported signature scheme.
* NSS will now check if RSA-PSS signing is supported by the token that holds
the private key prior to using it for TLS.
* The certificate validation code contains checks to no longer trust
certificates that are issued by old WoSign and StartCom CAs after
October 21, 2016. This is equivalent to the behavior that Mozilla will
release with Firefox 51.
- update to NSS 3.27.2
* SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
* nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
boo#1021636 - update to NSS 3.26.2
* required for Firefox 50.0
Changes in 3.26
New Functionality:
* the selfserv test utility has been enhanced to support ALPN
(HTTP/1.1) and 0-RTT
* added support for the System-wide crypto policy available on
Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
* introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
of NSS without the libpkix library
Notable Changes:
* The following CA certificate was Added
CN = ISRG Root X1
* NPN is disabled and ALPN is enabled by default
* the NSS test suite now completes with the experimental TLS 1.3
code enabled
* several test improvements and additions, including a NIST known answer test
Changes in 3.26.2
* MD5 signature algorithms sent by the server in CertificateRequest
messages are now properly ignored. Previously, with rare server
configurations, an MD5 signature algorithm might have been selected
for client authentication and caused the client to abort the
connection soon after. - update to NSS 3.25
New functionality:
* Implemented DHE key agreement for TLS 1.3
* Added support for ChaCha with TLS 1.3
* Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
* In previous versions, when using client authentication with TLS 1.2,
NSS only supported certificate_verify messages that used the same
signature hash algorithm as used by the PRF. This limitation has
been removed.
* Several functions have been added to the public API of the
NSS Cryptoki Framework.
New functions:
* NSSCKFWSlot_GetSlotID
* NSSCKFWSession_GetFWSlot
* NSSCKFWInstance_DestroySessionHandle
* NSSCKFWInstance_FindSessionHandle
Notable changes:
* An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
* Regression fix: NSS no longer reports a failure if an application
attempts to disable the SSLv2 protocol.
* The list of trusted CA certificates has been updated to version 2.8
* The following CA certificate was Removed
Sonera Class1 CA
* The following CA certificates were Added
Hellenic Academic and Research Institutions RootCA 2015
Hellenic Academic and Research Institutions ECC RootCA 2015
Certplus Root CA G1
Certplus Root CA G2
OpenTrust Root CA G1
OpenTrust Root CA G2
OpenTrust Root CA G3 - fix build on certain toolchains (nss-uninitialized.patch)
jarfile.c:805:13: error: 'it' may be used uninitialized in this
function [-Werror=maybe-uninitialized] - also sign libfreeblpriv3.so to allow FIPS mode again (boo#992236) - update to NSS 3.24
New functionality:
* NSS softoken has been updated with the latest National Institute
of Standards and Technology (NIST) guidance (as of 2015):
- Software integrity checks and POST functions are executed on
shared library load. These checks have been disabled by default,
as they can cause a performance regression. To enable these
checks, you must define symbol NSS_FORCE_FIPS when building NSS.
- Counter mode and Galois/Counter Mode (GCM) have checks to
prevent counter overflow.
- Additional CSPs are zeroed in the code.
- NSS softoken uses new guidance for how many Rabin-Miller tests
are needed to verify a prime based on prime size.
* NSS softoken has also been updated to allow NSS to run in FIPS
Level 1 (no password). This mode is triggered by setting the
database password to the empty string. In FIPS mode, you may move
from Level 1 to Level 2 (by setting an appropriate password),
but not the reverse.
* A SSL_ConfigServerCert function has been added for configuring
SSL/TLS server sockets with a certificate and private key. Use
this new function in place of SSL_ConfigSecureServer,
SSL_ConfigSecureServerWithCertChain, SSL_SetStapledOCSPResponses,
and SSL_SetSignedCertTimestamps. SSL_ConfigServerCert automatically
determines the certificate type from the certificate and private key.
The caller is no longer required to use SSLKEAType explicitly to
select a "slot" into which the certificate is configured (which
incorrectly identifies a key agreement type rather than a certificate).
Separate functions for configuring Online Certificate Status Protocol
(OCSP) responses or Signed Certificate Timestamps are not needed,
since these can be added to the optional SSLExtraServerCertData struct
provided to SSL_ConfigServerCert. Also, partial support for RSA
Probabilistic Signature Scheme (RSA-PSS) certificates has been added.
Although these certificates can be configured, they will not be
used by NSS in this version.
New functions
* SSL_ConfigServerCert - Configures an SSL/TLS socket with a
certificate, private key, and other information.
* PORT_InitCheapArena - Initializes an arena that was created on
the stack. (See PORTCheapArenaPool.=
* PORT_DestroyCheapArena - Destroys an arena that was created on
the stack. (See PORTCheapArenaPool.)
New types
* SSLExtraServerCertData - Optionally passed as an argument to
SSL_ConfigServerCert. This struct contains supplementary information
about a certificate, such as the intended type of the certificate,
stapled OCSP responses, or Signed Certificate Timestamps (used for
certificate transparency).
* PORTCheapArenaPool - A stack-allocated arena pool, to be used for
temporary arena allocations.
New macros
* CKM_TLS12_MAC
* SEC_OID_TLS_ECDHE_PSK - This OID governs the use of the
TLS_ECDHE_PSK_WITH_AES_128_GCM_SHA256 cipher suite, which is used
only for session resumption in TLS 1.3.
Notable changes:
* Deprecate the following functions. (Applications should instead use the new
SSL_ConfigServerCert function.):
- SSL_SetStapledOCSPResponses
- SSL_SetSignedCertTimestamps
- SSL_ConfigSecureServer
- SSL_ConfigSecureServerWithCertChain
* Deprecate the NSS_FindCertKEAType function, as it reports a misleading
value for certificates that might be used for signing rather than
key exchange.
* Update SSLAuthType to define a larger number of authentication key types.
* Deprecate the member attribute authAlgorithm of type SSLCipherSuiteInfo.
Instead, applications should use the newly added attribute authType.
* Rename ssl_auth_rsa to ssl_auth_rsa_decrypt.
* Add a shared library (libfreeblpriv3) on Linux platforms that
define FREEBL_LOWHASH.
* Remove most code related to SSL v2, including the ability to actively
send a SSLv2-compatible client hello. However, the server-side
implementation of the SSL/TLS protocol still supports processing
of received v2-compatible client hello messages.
* Disable (by default) NSS support in optimized builds for logging SSL/TLS
key material to a logfile if the SSLKEYLOGFILE environment variable
is set. To enable the functionality in optimized builds, you must define
the symbol NSS_ALLOW_SSLKEYLOGFILE when building NSS.
* Update NSS to protect it against the Cachebleed attack.
* Disable support for DTLS compression.
* Improve support for TLS 1.3. This includes support for DTLS 1.3.
Note that TLS 1.3 support is experimental and not suitable for
production use.
- removed obsolete nss-bmo1236011.patch - update to NSS 3.23
New functionality:
* ChaCha20/Poly1305 cipher and TLS cipher suites now supported
* Experimental-only support TLS 1.3 1-RTT mode (draft-11).
This code is not ready for production use.
New functions:
* SSL_SetDowngradeCheckVersion - Set maximum version for new
ServerRandom anti-downgrade mechanism. Clients that perform a
version downgrade (which is generally a very bad idea) call this
with the highest version number that they possibly support.
This gives them access to the version downgrade protection from
TLS 1.3.
Notable changes:
* The copy of SQLite shipped with NSS has been updated to version
3.10.2
* The list of TLS extensions sent in the TLS handshake has been
reordered to increase compatibility of the Extended Master Secret
with with servers
* The build time environment variable NSS_ENABLE_ZLIB has been
renamed to NSS_SSL_ENABLE_ZLIB
* The build time environment variable NSS_DISABLE_CHACHAPOLY was
added, which can be used to prevent compilation of the
ChaCha20/Poly1305 code.
* The following CA certificates were Removed
- Staat der Nederlanden Root CA
- NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
- NetLock Kozjegyzoi (Class A) Tanusitvanykiado
- NetLock Uzleti (Class B) Tanusitvanykiado
- NetLock Expressz (Class C) Tanusitvanykiado
- VeriSign Class 1 Public PCA – G2
- VeriSign Class 3 Public PCA
- VeriSign Class 3 Public PCA – G2
- CA Disig
* The following CA certificates were Added
+ SZAFIR ROOT CA2
+ Certum Trusted Network CA 2
* The following CA certificate had the Email trust bit turned on
+ Actalis Authentication Root CA
Security fixes:
* CVE-2016-2834: Memory safety bugs (boo#983639)
MFSA-2016-61 bmo#1206283 bmo#1221620 bmo#1241034 bmo#1241037
- removed obsolete nss_gcc6_change.patch - add nss_gcc6_change.patch - update to NSS 3.22.3
* required for Firefox 46.0
* Increase compatibility of TLS extended master secret,
don't send an empty TLS extension last in the handshake
(bmo#1243641)
* Fixed a heap-based buffer overflow related to the parsing of
certain ASN.1 structures. An attacker could create a specially-crafted
certificate which, when parsed by NSS, would cause a crash or
execution of arbitrary code with the permissions of the user.
(CVE-2016-1950, bmo#1245528) - update to NSS 3.22.2
New functionality:
* RSA-PSS signatures are now supported (bmo#1215295)
* Pseudorandom functions based on hashes other than SHA-1 are now supported
* Enforce an External Policy on NSS from a config file (bmo#1009429)
New functions:
* PK11_SignWithMechanism - an extended version PK11_Sign()
* PK11_VerifyWithMechanism - an extended version of PK11_Verify()
* SSL_PeerSignedCertTimestamps - Get signed_certificate_timestamp
TLS extension data
* SSL_SetSignedCertTimestamps - Set signed_certificate_timestamp
TLS extension data
New types:
* ssl_signed_cert_timestamp_xtn is added to SSLExtensionType
* Constants for several object IDs are added to SECOidTag
New macros:
* SSL_ENABLE_SIGNED_CERT_TIMESTAMPS
* NSS_USE_ALG_IN_SSL
* NSS_USE_POLICY_IN_SSL
* NSS_RSA_MIN_KEY_SIZE
* NSS_DH_MIN_KEY_SIZE
* NSS_DSA_MIN_KEY_SIZE
* NSS_TLS_VERSION_MIN_POLICY
* NSS_TLS_VERSION_MAX_POLICY
* NSS_DTLS_VERSION_MIN_POLICY
* NSS_DTLS_VERSION_MAX_POLICY
* CKP_PKCS5_PBKD2_HMAC_SHA224
* CKP_PKCS5_PBKD2_HMAC_SHA256
* CKP_PKCS5_PBKD2_HMAC_SHA384
* CKP_PKCS5_PBKD2_HMAC_SHA512
* CKP_PKCS5_PBKD2_HMAC_GOSTR3411 - (not supported)
* CKP_PKCS5_PBKD2_HMAC_SHA512_224 - (not supported)
* CKP_PKCS5_PBKD2_HMAC_SHA512_256 - (not supported)
Notable changes:
* NSS C++ tests are built by default, requiring a C++11 compiler.
Set the NSS_DISABLE_GTESTS variable to 1 to disable building these tests.
* NSS has been changed to use the PR_GetEnvSecure function that
was made available in NSPR 4.12 - update to NSS 3.21.1 (bmo#969894)
* required for Firefox 45.0
* MFSA 2016-35/CVE-2016-1950 (bmo#1245528)
Buffer overflow during ASN.1 decoding in NSS
* MFSA 2016-36/CVE-2016-1979 (bmo#1185033)
Use-after-free during processing of DER encoded keys in NSS - update to NSS 3.21
* required for Firefox 44.0
New functionality:
* certutil now supports a --rename option to change a nickname (bmo#1142209)
* TLS extended master secret extension (RFC 7627) is supported (bmo#1117022)
* New info functions added for use during mid-handshake callbacks (bmo#1084669)
New Functions:
* NSS_OptionSet - sets NSS global options
* NSS_OptionGet - gets the current value of NSS global options
* SECMOD_CreateModuleEx - Create a new SECMODModule structure from module name
string, module parameters string, NSS specific parameters string, and NSS
configuration parameter string. The module represented by the module
structure is not loaded. The difference with SECMOD_CreateModule is the new
function handles NSS configuration parameter strings.
* SSL_GetPreliminaryChannelInfo - obtains information about a TLS channel prior
to the handshake being completed, for use with the callbacks that are invoked
during the handshake
* SSL_SignaturePrefSet - configures the enabled signature and hash algorithms
for TLS
* SSL_SignaturePrefGet - retrieves the currently configured signature and hash
algorithms
* SSL_SignatureMaxCount - obtains the maximum number signature algorithms that
can be configured with SSL_SignaturePrefSet
* NSSUTIL_ArgParseModuleSpecEx - takes a module spec and breaks it into shared
library string, module name string, module parameters string, NSS specific
parameters string, and NSS configuration parameter strings. The returned
strings must be freed by the caller. The difference with
NSS_ArgParseModuleSpec is the new function handles NSS configuration
parameter strings.
* NSSUTIL_MkModuleSpecEx - take a shared library string, module name string,
module parameters string, NSS specific parameters string, and NSS
configuration parameter string and returns a module string which the caller
must free when it is done. The difference with NSS_MkModuleSpec is the new
function handles NSS configuration parameter strings.
New Types:
* CK_TLS12_MASTER_KEY_DERIVE_PARAMS{_PTR} - parameters {or pointer} for
CKM_TLS12_MASTER_KEY_DERIVE
* CK_TLS12_KEY_MAT_PARAMS{_PTR} - parameters {or pointer} for
CKM_TLS12_KEY_AND_MAC_DERIVE
* CK_TLS_KDF_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_KDF
* CK_TLS_MAC_PARAMS{_PTR} - parameters {or pointer} for CKM_TLS_MAC
* SSLHashType - identifies a hash function
* SSLSignatureAndHashAlg - identifies a signature and hash function
* SSLPreliminaryChannelInfo - provides information about the session state
prior to handshake completion
New Macros:
* NSS_RSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
get the minimum RSA key size
* NSS_DH_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
get the minimum DH key size
* NSS_DSA_MIN_KEY_SIZE - used with NSS_OptionSet and NSS_OptionGet to set or
get the minimum DSA key size
* CKM_TLS12_MASTER_KEY_DERIVE - derives TLS 1.2 master secret
* CKM_TLS12_KEY_AND_MAC_DERIVE - derives TLS 1.2 traffic key and IV
* CKM_TLS12_MASTER_KEY_DERIVE_DH - derives TLS 1.2 master secret for DH (and
ECDH) cipher suites
* CKM_TLS12_KEY_SAFE_DERIVE and CKM_TLS_KDF are identifiers for additional
PKCS#12 mechanisms for TLS 1.2 that are currently unused in NSS.
* CKM_TLS_MAC - computes TLS Finished MAC
* NSS_USE_ALG_IN_SSL_KX - policy flag indicating that keys are used in TLS key
exchange
* SSL_ERROR_RX_SHORT_DTLS_READ - error code for failure to include a complete
DTLS record in a UDP packet
* SSL_ERROR_NO_SUPPORTED_SIGNATURE_ALGORITHM - error code for when no valid
signature and hash algorithm is available
* SSL_ERROR_UNSUPPORTED_SIGNATURE_ALGORITHM - error code for when an
unsupported signature and hash algorithm is configured
* SSL_ERROR_MISSING_EXTENDED_MASTER_SECRET - error code for when the extended
master secret is missing after having been negotiated
* SSL_ERROR_UNEXPECTED_EXTENDED_MASTER_SECRET - error code for receiving an
extended master secret when previously not negotiated
* SSL_ENABLE_EXTENDED_MASTER_SECRET - configuration to enable the TLS extended
master secret extension (RFC 7627)
* ssl_preinfo_version - used with SSLPreliminaryChannelInfo to indicate that a
TLS version has been selected
* ssl_preinfo_cipher_suite - used with SSLPreliminaryChannelInfo to indicate
that a TLS cipher suite has been selected
* ssl_preinfo_all - used with SSLPreliminaryChannelInfo to indicate that all
preliminary information has been set
Notable Changes:
* NSS now builds with elliptic curve ciphers enabled by default (bmo#1205688)
* NSS now builds with warnings as errors (bmo#1182667)
* The following CA certificates were Removed
- CN = VeriSign Class 4 Public Primary Certification Authority - G3
- CN = UTN-USERFirst-Network Applications
- CN = TC TrustCenter Universal CA III
- CN = A-Trust-nQual-03
- CN = USERTrust Legacy Secure Server CA
- Friendly Name: Digital Signature Trust Co. Global CA 1
- Friendly Name: Digital Signature Trust Co. Global CA 3
- CN = UTN - DATACorp SGC
- O = TÜRKTRUST Bilgi İletişim ve Bilişim Güvenliği Hizmetleri A.Ş. (c) Kasım 2005
* The following CA certificate had the Websites trust bit turned off
- OU = Equifax Secure Certificate Authority
* The following CA certificates were Added
- CN = Certification Authority of WoSign G2
- CN = CA WoSign ECC Root
- CN = OISTE WISeKey Global Root GB CA
- increased the minimum level of possible mixed installations
(softokn3, freebl3) to 3.21
- added nss-bmo1236011.patch to fix compiler error (bmo#1236011)
- disabled testsuite as it currently breaks (bmo#1236340) - update to NSS 3.20.2 (bnc#959888)
* MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
server signature - update to NSS 3.20.1 (bnc#952810)
* requires NSPR 4.10.10
* MFSA 2015-133/CVE-2015-7181/CVE-2015-7182 (bmo#1192028, bmo#1202868)
memory corruption issues - Install the static libfreebl.a that is needed in order to link
Sun elliptical curves provider in Java 7. - update to NSS 3.20
New functionality:
* The TLS library has been extended to support DHE ciphersuites in
server applications.
New Functions:
* SSL_DHEGroupPrefSet - Configure the set of allowed/enabled DHE group
parameters that can be used by NSS for a server socket.
* SSL_EnableWeakDHEPrimeGroup - Enable the use of weak DHE group
parameters that are smaller than the library default's minimum size.
New Types:
* SSLDHEGroupType - Enumerates the set of DHE parameters embedded in
NSS that can be used with function SSL_DHEGroupPrefSet.
New Macros:
* SSL_ENABLE_SERVER_DHE - A socket option user to enable or disable
DHE ciphersuites for a server socket.
Notable Changes:
* For backwards compatibility reasons, the server side implementation
of the TLS library keeps all DHE ciphersuites disabled by default.
They can be enabled with the new socket option SSL_ENABLE_SERVER_DHE
and the SSL_OptionSet or the SSL_OptionSetDefault API.
* The server side implementation of the TLS implementation does not
support session tickets when using a DHE ciphersuite (see bmo#1174677).
* Support for the following ciphersuites has been added:
- TLS_DHE_DSS_WITH_AES_128_GCM_SHA256
- TLS_DHE_DSS_WITH_AES_128_CBC_SHA256
- TLS_DHE_DSS_WITH_AES_256_CBC_SHA256
* By default, the server side TLS implementation will use DHE
parameters with a size of 2048 bits when using DHE ciphersuites.
* NSS embeds fixed DHE parameters sized 2048, 3072, 4096, 6144 and
8192 bits, which were copied from version 08 of the Internet-Draft
"Negotiated Finite Field Diffie-Hellman Ephemeral Parameters for
TLS", Appendix A.
* A new API SSL_DHEGroupPrefSet has been added to NSS, which allows a
server application to select one or multiple of the embedded DHE
parameters as the preferred parameters. The current implementation of
NSS will always use the first entry in the array that is passed as a
parameter to the SSL_DHEGroupPrefSet API. In future versions of the
TLS implementation, a TLS client might signal a preference for
certain DHE parameters, and the NSS TLS server side implementation
might select a matching entry from the set of parameters that have
been configured as preferred on the server side.
* NSS optionally supports the use of weak DHE parameters with DHE
ciphersuites to support legacy clients. In order to enable this
support, the new API SSL_EnableWeakDHEPrimeGroup must be used. Each
time this API is called for the first time in a process, a fresh set
of weak DHE parameters will be randomly created, which may take a
long amount of time. Please refer to the comments in the header file
that declares the SSL_EnableWeakDHEPrimeGroup API for additional
details.
* The size of the default PQG parameters used by certutil when
creating DSA keys has been increased to use 2048 bit parameters.
* The selfserv utility has been enhanced to support the new DHE features.
* NSS no longer supports C compilers that predate the ANSI C standard (C89). - update to NSS 3.19.3; certstore updates only
* The following CA certificates were removed
- Buypass Class 3 CA 1
- TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
- SG TRUST SERVICES RACINE
- TC TrustCenter Universal CA I
- TC TrustCenter Class 2 CA II
* The following CA certificate had the Websites trust bit turned off
- ComSign Secured CA
* The following CA certificates were added
- TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H5
- TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
- Certinomis - Root CA
* The version number of the updated root CA list has been set to 2.5 - Install blapi.h and algmac.h that are needed in order to build
Sun elliptical curves provider in Java 7 - as the .chk files are contained in libfreebl3 and libsoftokn
directly, provide the -hmac alias names to help :42 building. - update to 3.19.2
* required for Firefox 39.0
* No new functionality is introduced in this release. This release
addresses a backwards compatibility issue with the NSS 3.19.1
release.
* In NSS 3.19.1, the minimum key sizes that the freebl cryptographic
implementation (part of the softoken cryptographic module used
by default by NSS) was willing to generate or use was increased
- for RSA keys, to 512 bits, and for DH keys, 1023 bits. This
was done as part of a security fix for Bug 1138554 / CVE-2015-4000.
Applications that requested or attempted to use keys smaller
then the minimum size would fail. However, this change in behaviour
unintentionally broke existing NSS applications that need to
generate or use such keys, via APIs such as
SECKEY_CreateRSAPrivateKey or SECKEY_CreateDHPrivateKey. - update to 3.19.1
No new functionality is introduced in this release. This patch
release includes a fix for the recently published logjam attack.
Notable Changes:
* The minimum strength of keys that libssl will accept for
finite field algorithms (RSA, Diffie-Hellman, and DSA) have
been increased to 1023 bits (bmo#1138554).
(MFSA 2015-70/CVE-2015-4000)
* NSS reports the bit length of keys more accurately. Thus,
the SECKEY_PublicKeyStrength and SECKEY_PublicKeyStrengthInBits
functions could report smaller values for values that have
leading zero values. This affects the key strength values that
are reported by SSL_GetChannelInfo.
* NSS incorrectly permits skipping of ServerKeyExchange
(bmo#1086145) (MFSA 2015-71/CVE-2015-2721) - update to 3.19
* Firefox target release 39
New functionality:
* For some certificates, such as root CA certificates, that don't
embed any constraints, NSS might impose additional constraints,
such as name constraints. A new API has been added that allows
to lookup imposed constraints.
* It is possible to override the directory in which the NSS build
system will look for the sqlite library.
New Functions:
* CERT_GetImposedNameConstraints
Notable Changes:
* The SSL 3 protocol has been disabled by default.
* NSS now more strictly validates TLS extensions and will fail a
handshake that contains malformed extensions.
* Fixed a bug related to the ordering of TLS handshake messages.
* In TLS 1.2 handshakes, NSS advertises support for the SHA512
hash algorithm, in order to be compatible with TLS servers
that use certificates with a SHA512 signature. - update to 3.18.1
* Firefox target release 38
* No new functionality is introduced in this release.
Notable Changes:
* The following CA certificate had the Websites and Code Signing
trust bits restored to their original state to allow more time
to develop a better transition strategy for affected sites:
- OU = Equifax Secure Certificate Authority
* The following CA certificate was removed:
- CN = e-Guven Kok Elektronik Sertifika Hizmet Saglayicisi
* The following intermediate CA certificate has been added as
actively distrusted because it was mis-used to issue certificates
for domain names the holder did not own or control:
- CN=MCSHOLDING TEST, O=MCSHOLDING, C=EG
* The version number of the updated root CA list has been set
to 2.4 - update to 3.18
* Firefox target release 38
New functionality:
* When importing certificates and keys from a PKCS#12 source,
it's now possible to override the nicknames, prior to importing
them into the NSS database, using new API
SEC_PKCS12DecoderRenameCertNicknames.
* The tstclnt test utility program has new command-line options
- C, -D, -b and -R.
Use -C one, two or three times to print information about the
certificates received from a server, and information about the
locally found and trusted issuer certificates, to diagnose
server side configuration issues. It is possible to run tstclnt
without providing a database (-D). A PKCS#11 library that
contains root CA certificates can be loaded by tstclnt, which
may either be the nssckbi library provided by NSS (-b) or
another compatible library (-R).
New Functions:
* SEC_CheckCrlTimes
* SEC_GetCrlTimes
* SEC_PKCS12DecoderRenameCertNicknames
New Types:
* SEC_PKCS12NicknameRenameCallback
Notable Changes:
* The highest TLS protocol version enabled by default has been
increased from TLS 1.0 to TLS 1.2. Similarly, the highest DTLS
protocol version enabled by default has been increased from
DTLS 1.0 to DTLS 1.2.
* The default key size used by certutil when creating an RSA key
pair has been increased from 1024 bits to 2048 bits.
* The following CA certificates had the Websites and Code Signing
trust bits turned off:
- Equifax Secure Certificate Authority
- Equifax Secure Global eBusiness CA-1
- TC TrustCenter Class 3 CA II
* The following CA certificates were added:
- Staat der Nederlanden Root CA - G3
- Staat der Nederlanden EV Root CA
- IdenTrust Commercial Root CA 1
- IdenTrust Public Sector Root CA 1
- S-TRUST Universal Root CA
- Entrust Root Certification Authority - G2
- Entrust Root Certification Authority - EC1
- CFCA EV ROOT
* The version number of the updated root CA list has been set
to 2.3
- add the changes file as source so the .src.rpm builds (used for
fake build time) - update to 3.17.4
* Firefox target release 36
Notable Changes:
* bmo#1084986: If an SSL/TLS connection fails, because client and
server don't have any common protocol version enabled,
NSS has been changed to report error code
SSL_ERROR_UNSUPPORTED_VERSION (instead of reporting
SSL_ERROR_NO_CYPHER_OVERLAP).
* bmo#1112461: libpkix was fixed to prefer the newest certificate,
if multiple certificates match.
* bmo#1094492: fixed a memory corruption issue during failure of
keypair generation.
* bmo#1113632: fixed a failure to reload a PKCS#11 module in FIPS
mode.
* bmo#1119983: fixed interoperability of NSS server code with a
LibreSSL client. - update to 3.17.3
New functionality:
* Support for TLS_FALLBACK_SCSV has been added to the ssltap and
tstclnt utilities
Notable Changes:
* The QuickDER decoder now decodes lengths robustly
(CVE-2014-1569)
* The following 1024-bit CA certificates were removed:
- GTE CyberTrust Global Root
- Thawte Server CA
- Thawte Premium Server CA
- America Online Root Certification Authority 1
- America Online Root Certification Authority 2
* The following CA certificates had the Websites and Code Signing
trust bits turned off:
- Class 3 Public Primary Certification Authority - G2
- Equifax Secure eBusiness CA-1
* The following CA certificates were added:
- COMODO RSA Certification Authority
- USERTrust RSA Certification Authority
- USERTrust ECC Certification Authority
- GlobalSign ECC Root CA - R4
- GlobalSign ECC Root CA - R5
* the version number of the updated root CA list has been set
to 2.2 - update to 3.17.2
Bugfix release
* bmo#1049435 - Importing an RSA private key fails if p < q
* bmo#1057161 - NSS hangs with 100% CPU on invalid EC key
* bmo#1078669 - certutil crashes when using the --certVersion parameter /sbin/ldconfig /sbin/ldconfig sheep73 1661488997 3.79.1-150400.3.10.2 3.79.1-150400.3.10.2 libnss3.so libnssutil3.so libsmime3.so libssl3.so /usr/lib64/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:25598/SUSE_SLE-15-SP4_Update/6a6052362933b78904a8d658aab8377c-mozilla-nss.SUSE_SLE-15-SP4_Update cpio xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1f0f7d907c84de24a38c21b37f233f331ae3d3b7, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1fed4d516d8d2d11771b0eb8739c2f1e9b3cc988, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=42dcf278833000fedb09fc398f48a1950f04e796, stripped ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=9fa240109ef3c8e6e781032b68b77203aaed093e, stripped U q U - DP P P !P "P (P -P 3P 7P 8P ;P P P P P P P P P P P P P
P P P P
P P P P P P P P P P P P P P P #P $P %P &P 'P )P *P +P ,P .P /P 0P 1P 2P 4P 5P 6P 9P :P R R R R R R +R 0R 4R *R ,R /R 2R 1R 5R 3R -R )R (R 6R 7R R P @P AP BP CP DP EP FP GP HP IP JP KP LP MP NP OP ?R 9R R R R R R 6R 7R R 8R P XP YP ZP [P \P ]P ^P _P `P aP bP QP SP RP TP UP VP WP PR R R R R *R )R
R R #R !R R R R %R &R R R R R R
R (R 6R 7R R P mP nP yP zP dP eP gP fP hP iP jP kP lP oP pP qP rP sP tP uP vP wP xP {P cR R R R R 9R +R 5R *R 1R .R 3R )R R
R R R R R R "R R R R $R %R R R &R R R R R R R R R R
R (R 6R R 8R _ R邿==
utf-8 22e78bf7afe70f36958342e89db3f07e6fe254a5ef1b75d49813995603c4d747 ? 7zXZ
! t/]
crv9w_ @ 6Jk+@Q@SK̭x ek`߹ o& btQT9k+p|]oKD;לNBfiP9p)xG Hb QB5cfB-tn Wc](E(ڹul,p\@7N#'*1~}ԠNЉYٻ 1xk%>NYND;oO ]a`MxE09H㎩ԙw^ Xb+F<(ntz=~pug3d>l^ CȆA2ޫL8a{9Mӄ
[O-2FV 6BY%!j+AB9?-]e`nxyq|
ҪpK i3I* U_֚e\'zTU6-`Pw;>sUQ"@ľ _'
kΰ?UiHd.64xɵ9^?XJ
PWX,OبA+?[a7ԱB&jF8Uf P2!*6+1pvqx՝ 9ʂ?wW3jFFiaTy5)s:lRVheRkV M J@dZ q˶ͤꓣ4~ >YD@. 4}2gqw^v%NJW[n &݀w\@RkOgIVD2_ZlQ,>ew՞H ɗ\+JD
KyCU $\qvTQ'IQm-d^笼^+v8#a qyCuahOOaaD4J\ฺjV)R#75kHiG
8 _7]&P|@t~>khÁ[l_.<.X}ꇴvT]1ihƣ2
("fh +Mya3D/ڍFkz
HT!^q^[nM_;46Ҹw.kz$ E
d_M"SٵRĸ:y@:zOz4?$!ߌ;OR?a֕ {Xa ]GJtS o;Mqʏrb
E<65{R\ anɍL- z<
8jP'w&7LT? 2}`i.IAW &"X>ab:S sL5>6|ua>=DL!u M,b ZH[Ks h@K%ŤXL줯N<(BmKaCV̄/\:a-uCaa0+<w)
AYGH6 !
Rv*esc3q,A˯ % pL '
iP3q{ݑcDG+٣|S'/=͇LK_D^O xJg5RnlT&hJ ,$c`gzU-7{6*{ުD}:zM:*-~eU;bхDY @W}>+VbEP\Uwzd~>ϯ&Bb+J-WάdN^ƫznV1\ bV2Mq2{[ 5@<7Z/߂xMzUq {Š)p
3K3ێF -t a}'VYmxǥ>b$X~&_?ʹ*xQ HʹiQ
$*w "}%lA;\3ޯ&b[ i"n<ހo3j foW&A aE;x<65rjr剦KqvFN;\ى4_p/,q5R $: QFcxMHy|EU
.˚GR hHZ7?SH˒FSe o,㐞hp P)ޜj=ۛ bc Zm~vѼKO*{h>_Z`| ?="ET? ɪ#m_9mY=@8q Ɣ7[%UlW]]J&9JJ<~D#B͠8
&Rp Qžeu%UF)XfD>HΡ |Fm!#OE)S $ Gpdp6\qV?dF:S@s:0_CWg70KױB,qS> ]F}*7Az?TpBboT\uT Pe{CA@]T1i 4} ) S6fK
(ik3`f[c:
lGip-'|-Qlu
z K`gq|D9|lh.GnW3y*oλzj$D!b5tur1
l UJX;CD? cpGvC˩դ|CLVŕ%& bi7/hcyƩJ Z(( -
dA mqbNPewloY9X
t1եilyy-nGӝ@ܪ/?)8qls {!0ʔ^yCSjժZ.
{\ґ*5OF`"!=F|V!3QVT GSWx}SaPOB^u'%P %%
a a2+| Ke.Du &J
C؍hLwAr江3k# Qgi^$k $@dw}ʢ.g<^IB*@h#= )~k.og}4 6n W@N +`n04" T:o%+)<,A (n۳wGϼXQ.]'ѹ Z*x9` W4( Flpe9x- f hm};Kq*(6VK/Ucʏ:Pe\$L
v~6e.6Q 4/0ɬ5wηk=^- m+^DAFi|F=i5ƫUըT;W!{]quRx -
hGW +X8{hZR"L,U`Y۽{
4Nrl:~AU"ըFRx1yc 5.3mWU_Xmd}ќ,aijERH "],u9Zar7(4nBM!P_6rThte or3a|2˷ i; ,=|+-E4pcnW
\d` \ }
$yD #'jJ_. RHGh
D-F" ?8F? sf3ϔ7 "FDI!`}Z|2CDl'xB&1E\$Wn]oC
t}QOXz?=;zP&1u\t1_N/E\D( [<͎!DbsD :1kdB.R2A& tsNooZ?n_ m? -,Xvܧ\&P0$wg)zey4J ɫ3҅ O2S2X=#r8.`ܱu TQ LJ^kdmM0UPA0D*3;'BjWiux m
R6j䁔rb/I [5Q% n~tPaOlc
&{xhSV822(k}Dt
c
~d$#o8-:]E(ur
T`W4f3GPd7X2ԙ[R/u`\ ~屛˹U=)ͼp>>>z.Vv* E"f̞ z6Rs < pWP{
{QU}i(3sy eƝ=-86L*ȑqGOAm+m9@q%֯)7G:E/vo9"D Bjq`3 6SR*. - !^ IHUt0Umzm&Y&`?mhpYwiv"QQVnbF; $$j
܀ȾL%"'Ҍjbw}>Ӧ 9aW̌
lpM,="g <6eqt+b(Zj&ߪUS$vi7*PܱQ託F-js?C?<زQt[ӿIx/KBh|cCuWc:hYB痃 $h;_j5-me{B0(axy
!w"zd,j5sl1v")f`^O ȉ4S -d8%ѥk#"6JÂQ + D˽ i J\1l[M[% Bi92Ϩ##<գ@85ߧ/n=*3.h܃bf
ˍJRiy, yRˢ^KݰX,${rZ-xg3j1@YaId$<5
V,WvPtd뽭P.V#r#G_:t~(["k
ئRS7 I"GD0Q}
7I?@,Uikh䶔{ai)W'P R ;`"=V T<#*6]-ѱ̉{ 2+ҽOh%櫭faۦD&^ ܽo az`P(VdɅ +g'? b%7 MgSެJm`> /:> $䙫.]:)ڃ9 E;e_C k0Įp %? H}(0 9Jq` A0@O*MW `C
㲾vBG1= Jdo4ݍ >zaL_os,&;v#뿱 %?pl& ?RͧÇe_O#ǗMR4dRqb0Ӕ PTmSh5ҴJ3UhC}x1béSq}J-Vd(} X%Kpt:D
?}@\ˤj?X~*afD2Ý&OK߇I_O>SoqBsc㖄4
H{o)+f}Ѯt7%ea~xNQbރ1;.'C`ńC:Qb0Z_+Uq+)
`pVSR)uĈ!W[rg3pPtA&ˈdBqV2<_0Ae8rTl3Zc֨xo7¥C\rS%D<zLF!M Y4j: ~:~yfň=bSWHIal#~\h!قRLC%Llw]bjr-Hx
,Pؼ@E6udʄ"f`s^(48#bLnWvv !1a#Sj
]$^*%?O@nIwnukq/ڦPt- yṄ+RBR]?˃ģEF $u 7F9j@V4)L
~}6I7pİ}z*A+X[se`3{%nr:zJAwgsг0ys
{ 7"laWHAM
5BIڊl*_dH:e]4:,G}Vpqphc)H7Yznv-*3/48@5 7} |dľn [ oe Iw'S >ܪspzM|1w7!Q[k5Wx =I^\hi jxѐf ';a*$ҷDP*4lTUyW
wWq kqRvԽ<4K^R&HMdΠpdEt8#o pWC}D V<Ah>BtV akŪt+.|YI{@K-QM :W5J)X`;.5w͈%_ 1Uu-X:{, h~C3c}Q 8(^i)dc( 6~AZoU+O+^ .
E\*Yrլ7qg\
0llG;l˚: ǕڞflҤk.ng5V0^t~']F7.S)zMF obgvC^}}zw=X-K|<EgEce`ry1l}vs17s|2uHwṠXַpB WqhDxN3MQQ$A 7cSVV)8Mqyxy L-{9`cw09/LϩlW G?`*!ޥ,٨iٚ 2AÚͥۘ^ן(0Ϫ͜#R{F! Y|sy"7E]Jj yaӤQJIwB}?TKu(o@jK 2ptI\-@n7WƑTVO1?lW5d
n
& hF]xYX s#~_Cw<ӔC7 ӘJԋ1hn^;T2@e _ϵ }0W|O
`rVob \_6{ `Y1Nk 3 $) ~ )=q yDKձ;s-
da/OAy W#Z.8xȝؾjޯt0lS[6$C &sfC}}ۻJJu3A;Ç;_p%$NyXD>v ^vH w ot ReϐM@^D~,! sPw ̂c>}~OUT:9:4\ew:\ 녞UhIמS ى;`KI:ᛵoq^cA~Nvcu95X
d3\S!ՔV 3A㹄2WOxb bW,,P2`?7uSYYZ_MݶOu=l4z: 17lSWd ti>&a߆U M36ZHH55
+(cƘ`*gH 屻YW,Az K3vX3y? R!HO_fG }Z>܌Y|NɺSt{^ʙsd1E CKʳX]Bր䑔xh zYaXnY@9(l$?wv~ %pdō _2TXHfenr3h R7>.f1u1 k@:_y'2*ߧy0 >%H xMJkgx}v1AܞP!@Y
\w8{T}Q'VdzShi
]q^Ւ"+1c+ (F ƈIh6'{V
,!Oa`8ÿcNJ6I;Υ:_Td2 P
\cJg1tNVd1W#R +MLό)6ڗf;E5,{/#:p [P1TeC5ifb58Pº{Ҋs]l#kxO& AWmŚ;F{ 8ژ&Ƨ[q̶̘p==OK+Jö s7 _JX."oϻKp'e' aZj/c a\^a[7~Q¨(
e|cӍ`@ݔ
%k\ڥRʮvm)YiB0,x1Xz1hc
Z 7x$wSnf\ U[~ᡄvYP]ኋ .XpOG5| 6J QTy,7aLfT=)v Lt:YyLv ISTì(&97PZN
~~D` a:Y/\pE,Sub
EJ88~ ~9a,aSܹq즆@nl哀kd.KB斉T|.9L1ytyy nWb}
{ϖ+cw(++cLz8Qz/zX*#=V UT_}OH09Nvա18i Bqۅ穉H~b: `v`A\? FܒҒ\$:X+t]Ya!tWhguJknEXMJbwmof|buZO!CqR5jSÕx UR6
5(opUtd|EQpb&F|͉itD?ScZ2f P4j,
nE/D6n_Ñ:B
c\6$?V VPkC5i/:fjcg 8=ڙ E
E)=J1 GL2Tӯ. め8;,ڤ d2g$ܒO@edy
=uBt$:s]d_ 2F;IBޱ4ö4MKAo ~3sK6ǩ[*+Ѫ{q{{1ZW+i{ƝDκÆdhW핖e_*V > g^2
ަmU uhK'SfuAbYt
Z ![RCk{5Uɓ `@úIoyPZ~= ɦG1Tqr T#p̣s JA;c-g ~FNR%N
3< XħOqk>KS7~ X\@Р=9N"
-}f-9eț ^ͮvY@̃~0KO3"jTU_z|PThƑgbL<*3f3i+& d4}F }
i=Ej:
`Wzk<V\o}x<*/RRYQW>)\W 8ѯBgI⇊U;ً,lEnu3+ 'aJ &w^|/)$izMi?j[:,w{Q%
R746 r.s$H|9ꖗ l7m:5)HyA3abL\(58fܳ 1/'A|a6(`
\gHN #=uF/brtFK(Wy}|?=\ UOAQjxtƦ
fk˗ <9ss}GBRP"3HN%l
0x2F{9vZ QG*8X1]xIaHBXq oַv8JdC@⧎bp]w\ [iލn(` (cDŨ6<\X}tNJ
Ids|4;6-c,U'n}|4wBʤu,z{<#\Ĕt J g'um߷fR+^pQJ,qUp :L{/>3X6D5D} .1
%-XYĈ Po@08%
J3 uӡg(\%|وI`Iٱ'ǦEs7JuGI{IcʴyWǔs8:IC}@>
k.gUVO*pOKy~Id-r7+yv/V\dm%issƄ+apcq!$%) A -F.o~;K^x:]sJD٫'+*xkДz|+kdMb &F4,rdUMg|>UY5-t7Cx22 n9DKFC; A7Mf ky8X{xm& aB&wWQz/um=`Z9 tQo VC^M
YN &W@Oz=kAWX,
Mriykҝ'Bsy PxUn2"^1k`v]d}>N{PX3!*C⌧1َA329 d!@b"ĦjN!sva? Ő] c2ros!vq{= ʢy9R
8qӵd-)Nϵfvnh !O -MIlFń'EKA싰(>mt-o/zql #`o"dMW)]$iW+*Jk YV~`X\.Ru!RX.mQPZIA/ y<9wB(hAZ?\03bM\n_kQj'ӈcϏv=H¼y?gY^4]+ }L4O>!<ʡ
AEo D\*Ey [">I\y( V` y ;_EZ\J'B7o\gXW9{N*6 EC0O@ IHJaǬ$U1GUI?aYpxjr,5p4
i% G0NZ aoΘY;xF]ZwBZWN Zj'4
{L-Qi|;w4.;=㥱fZC
;91ԯ V4U6]gY2l\g:=#\vR,7Ce0umb#-݈)aQ+fLy`2ߔ@Bg֍?;u_QX FaC#i^Rƅ) ${jfEA;\YJnP
QX"d_DOWӢzBH`TcKk,Sԯu+2. "ol5 /,&EXaͰCk
p"N 2Ҩb_·?m70/l;Z,4;BH#f b&>:J' k+&GP sV dSXtr qȄUzop;Y|fdV r^
5Gab 27N1&sSYaa!NF ~ad:f__ɂ|A2ԃ' sߒ
ͷS&y
r.:tBBӘg3
-WkJt4 F=A[ A 2G ^)]'F aqQM"Tbp:,ilҠI BGAp .HܾͿ ӹ;B^Px]>7V|PP$)
Ots5gfla:[fh +fGm#y`{ cn}ʈKPEި BN`gԾV#`tS`cRKD0 <"kL%4-h qI@^k`N;i }Kr;- HhA3JA/`镹`IzVV۫4 }g+.:*N Lx3& _O[@guoj"'Q.`4N+ZҊ\F W#
3C23>UX ߝj[*@֗BJSL] Uw\Jf'8FDcۨo
Te DJ~
5e]A0
_?8ī3cr£Ύ!3un\ V̘?^db+O7u/9vpξCr=Ltq۔^lEPЁs1v`X%z\kq3{4);]ew5f +Hl ~=-w 0/ 8q'\^gbdx@=yM-6?&|_;`+q?߭ϻ] +&NZq֯YU,C 6`Ef|y
Ԋ1.|T (XD|@CdsĦkoWSV&~vvO.s XԚqҊ#&F
ͮFltr$iQFXbSࣘW4NapLG,v;˷pd ;_ ȞJPbCN/
+8e$"jt7, 41:]{*, )[}0~R/d5\S*7 cbmZF X 35,( e:Ύ)gy%xRV0%ʗ
ks9H
&hCn0l7/>!Z%z9ǘR(bUf4"M~GE~N_l N. 1`z6Ϯ?(m0'>:n.NAOS)G >z"P=1ŨϳBC\r̐"au*>74KO:M,֠ٲL)mѼ~&p[ܽ3M,xj|K[HqsjYY)weSa]C7.cSWj? ]*E \tZoE\t 0ҡ;V$fIR0q{X1{c iD>f &Z{A',@fWLՓnm ӵ^b-=mh'^OH\9Ι#zO:L@M 5E@(sRCbԢ[ozBz$ 9e 12eؕ"Tz8KkOm"TDZ9)@dBLB RC{ E·g a#^#^\6b;}G1=%+}dU
ѷۨr^G:' F`DTcOze5 T ސQpb
ΰD'"ȯ\Uк#r_m_@:_NG
ݢ 0r9*{ww; 0G#i}-p4}iȊC"`> pz莂q`$S@_| y)]c$O7v>0)GRMc-xTO\qUL Zcfw~ @Jx%U¢C(E,!?'@.rd[~=lB|HїYs
N:6'M?6GAէԐB.rX_
K݈LĔ\OyR,c整am9Y$0G%(" ,%%ҋ"u)w:3oO'VYzAg\d0?SľKצ{ r+ _m'H /ݱQ3n
5eDU4n]-4WA5d
]:~+!fϙzW7H=8M7hE= ~wp/i5fQp!M D:2
Tuo u,y
$' R%̰b[5# #hб` OGl4ZԾ /,M?">Zfz*⥜䔞O* ;B>_fC_렒lt]YUMV*?nY@( 4z4%=iq R|MC"KT !(K]6&}F
{tՅ^hMߙ0|ZCt 0 El LڝNaY \8vP# biDW_sy1FF1z] P_+{Z%a iVZlU3r\I Mwf+e:7 I?p,Uh9hSXQ4L.4X #A$
na)O1d浜OJsD@J+h+n'obx2M%2~(ܸ_q9
Ѽ(DF~#I2uiϑ-Vì8W%Dcz2k'* mit==Bw%ѣ hhT=IVz1fNA9nK|NqΨ
)V510 u2)̂%uR_O
%]SϷFI
l(*~KH`[PZ%K/9>O? Dx2uZ z.Hgkt$8 LIL Pav=%?G[-f&A0JPӧ'u ,ppapg*F3 ʻG ہkKD|툖⛶V~ bAu;"`(+ sk7E
L=,[?v i Ӟ {~7~jfq!%Ž?&|ګ!C }֨E9'Χs.վ F^#!5 @|Z؈չ=.IJ7kz+[Kf* {)Pl0>Wlt薉
EBS KeS&9?8:ptJ>vwd!{tlEkha,3Zd3} /1(gy-sefLRw $eT_i\^AGyP_lU o}[|D؝G7DC
J,%?j_{ؕ,>w?xAFIg[ S>ykmVG} Ze. .'a, }&@sī /wJ=$~ΐSVtsd8=̀h 3 &qcDƉ~v_珜ka %T" \!~%ZC@YpЌ >3JE:zn߅ Hy,]%jV̔Pαedv7uc.akmɲk-4eG
| $K& E>B A#H,q`Q,/kQMGƺ$
.l[8t(#BY^SPX[ZJ
;F
s8"Cc`BԔB|Yʺ)&adX数8 4SvEFwzޥ=u(ƀ"'>W?`n]"*9-'?gh 8kl LQ! (_-VE-`B$`VYY %( ,ykj-9-5PN`9,qR+\1(o'$,wl[ؼ4?6Pw=?W!F
p $Jupy(Du+M D/Ε&| ?w0eKiw"lx1r;/FD`1-VOk j)?HbE܋(R7iL8q9%hFw
;yc2ɷȯJnv}C$P
1W>[&ްk" 0i G46o
Igȴ劕崄h O- sU3kES;'@hR.V \)2ٮJ7bѕJLV&+-1UZ{A`Ng 1gz
aء+vWKA/zUv>䌸NY ٜ2γi ;p$ڗdMղuWO+:824m A Z
x^Б] ±ԁa#Ќi\Ůn|yRC̬$xg=VX
w- *Ǖe^zI>9adЏdAE^I|%9X,TAKQwv /K!Kjg^}ʌ!CXʹ鴤tpm
UyNj!sel6抨P[F,?c-pC<xUX |g$(l!ڡ}
MHp lj{ * d: W 骆-X ϫ+39 xMdtD_/=$4T9m [0/xa+tEٙjI;] *,UE
)$(#e}c*{er:y%ۚl꽾dӑZ3fX_ u\C|jmK\Y+O̭Dsp}F!&9:CF7v @_Jʵ3}j`}tHGr ^}jh9(v=}5#*o { |iu2xԺ5ݲ鈜xQF˲KX1Lvz Q
@$x7 *N赻o
x{B8/0! ֖3ih[uC% ^|E4C\b &zb\ԧ!d(F)l.L*
ʝz;,8ƨf/W#Ǹbk
ܯ +
?HGMǬ< iwիxU sIwB,U jp,6FqpPYZ?-D̒
3jG
O~
u#8
!ImbUbPo(Ϲ2Iv*Iqj.
Z9CCeɌ2U
;C2\n)?4]
SÍ~IrCӦl Ȁ(w 6z&ziOTg Z9ECl{ i!`5RQ7 ή@ʡ!sc]v2ez̙3XRH^6֫((Rt `#f<̳)HJ!)9 +>de %>9JP8 e2TC}L
P ӡZϢOսa ɻ֎ vϖ7/QdDV?Jrm-9 F@֚[Es!N3FVtHcohJg3*Eя;@ - r#BE%FH'߮65P-lA;\deH.
R ޥl\Z>$w 5Ulގ}LVcu48Jfd34 'L/g*̨MaB|[1c1N,`'dSgQ#Ę?zK'sb\p^KV^$eX5+s0|8;0MY$/_KBrLq
].sP[| [{"hb -ח(qebTmmD>o u$p s!ZCe8vAX` PCSs)2U _gZs4 F%6Vj*!d\~7N5JeQ×o8fT G `C{J ;/axګ1\A[\3ܺ6p&&3K@/NmX {$7|-x-
[kq )Q꽒 wi_
8D9MY= -#bWέ?-U'zAYgUDxw " S݄x$I7*AHZ2&Z,Nyي ᙋAZ-5瓳X|E-9XھBqNDžJ=Vzxz3EZE ,r):o1?Q
ab/IF rfdW,b;(/֛ rS?0Z+G AF6?8C;0AǕ;0C 6҅`;or p4- hQgxn0a\6d@2C,gI0 o(ުgK
tXϤ QHLT*:z??z~oSTN<=RV"XP Oɠ&iLJpi-D{9/L~IpO@f7:|/=^T 7Zߑ
)wFlfsAR4N" "d=%c(Bz[HVeQM>7FYιC)<}4|&)< qO AZLZ2Ӂ:۲R92
lof sBf^}WzG|$K {h2Hx
&b 'uSK4v*!̸}_ך@:`LV 40 +W *&qJV9de|9Oͅ=ʅySǾQ D`4 'DwHԘiɴx!_>s]7^M .bwJl:6.Nb?18ā \SLR7,">^u5,:,O;<@ G!.]#/(ͻQlT
cnjx0Y-k>S@Qw!z\H JYYʂ4j_F>ͤj3F_.9ugõN+LX%a_^^~A!wru(0
!y
%iKJ7yo-ǥzɅnL&[2&Xvg'9Ļk|DhKtf ]&iz{(jrq^F, }ퟪ5yhL4
[%S?KGL[t 1 &jW1y28ͯ&kx b:vv@҆ɽ>T|uͫ" xƞ
`Zٚ/"'
&B8քisM.P'nƢJq~xGJ>[ PQ.37LX6}+(۷#b&AB ~oeaY^zjěhDKRwz&e{BhփR]MKg2͌sJr-o1 '_ E Q)Bж!EWk!h]%P&\]mp 1*GCAoVvVQ:`sxvkF mpn59>y]!?١Xp?n{´GY հq:z 4>ay2|lKe@xnL6eZT6f>f`% FfnhoD
{w1Z9-c+p$4&z swO8;Ȫ8Vk9dA;y"R /Bы}UL1s!@Y{ǘ,%p
9ᢞ
YdQ9+- ?)"'z*?=7C߃e^v#1 ӃohyXLM1hxa@FVX0}[!; Z Nn v?x5^63d
܄\EeEaű4p^E#KC
0[3ָR>Î.ӄ0!A]0żfȱŵ zT 2N;Fm]E okY?Moᆡ KFdƟqb{2 BrG mf$pd4EN_{Z;IHlߐ/2bg(2b'< @A_l^E6G&.eLf/~?~òAL Y#'aB 0#/cGTL:9.YG7ǡƴu Ůxb 6?KȔl-hO>L*z8*&Dϳ/ʍeM`ƃ bE +B/*,}g&E+2%6cѱ:d8h]xY~eP"a|O*i2oЗ]``~?"US G^JZ($ǭn1&E>:`X)Np#_'fN| ;l{PS/
YpMaJFƳ ۬5"Zo d=G6=[T!>cڡ뼸![,#_ 8( 0"oAPSR[7BLKUr O^qآxN7G **mf5 -.&'ѻe}uџ̈́x>w-ɟfZ0r¿SFnyZȠc1Q0o
}saԂ!!kkFi* ahd2ܜS{R76AWĆדsBO)5^ 0ːCRG!PUMW# ht%EYQ7
j# !V٦?/aPlx J":H% O`%ydzn"vte)Ʀ : J4 Hq}5;C@$s@IdjX!-w V0Dv;SphW" ܑl0 dGPtH ;U,vZ*W,ֈt6vQ9A+74 ~m2q}^&+P;uBݜ?^@yury=Ճ.tX>fTg΅ÓeV,=pfÍ*B ~aj}=Eph6dd~gjH~xEezT[(wFL RHť
2n JfG@@B
`-mL)?Rv0,.wɔl $>A5b RZ@^@<Ƕ6p7nC
Q;M2҉oKn`g +q}4
)J([" q(w[D?*[=ŋg(uE{ zG; ENVm3=ҤxsZK %cӚ_6I.;a:AS7`ho1h=} I2xL&D%)28$O"!Y s͕mlk`}f<ϝ멭Y Pf6L҆j`*UD f 땷~ ic̫|̄'ᗊҸQ
2N\=
\p\א$WK
4nw ,y?T'bu}dH}1&z+pi@8m<F{q]EЊn^),Fi#xV|pzA1AkĪlׅ':eM0賜IfKY3? 8%5vOvdYׇ55z,L&E/
69V_ъb:K>mN+xۨ-XP[/ !S:GS,7/LQ~i~>
M Jлq 9¸&p+X6 ϗI] Z>P;?6zt[l]Iv1}i~p9:f6C3] ,<;jG93Q ) h^WnCdmᯀм
tTᒟ,B/Pxƺc' tU<̢g{@ z,"
rZW>. 9 +hgϳTSJV!\Sм YK^B~J[ ` 1 ɏa/IX.&1YN)5dSKl%]'pq `ݹBq+ QOǻ$kQk/W#ĺlַ['=`@
hݵ"0cas1ytx|{^"BIUvM(Y eݘ2-pZԔ[
Ďhb|RLԬř 5dfM`]
a9ɳrZDMt>5
RuBHj؏ƚ\$q˯ ׆겟lT+X1WS* iэ/Aס pwXa)@=Җ-oQ7 HWhws
N`NEq K]lpg 7G I!<~^&kxٴqRButrquV~y H5BF<3X1ؗ={KE P7v5si /TN#q Iż'Nc%PwP,oK^&Z .Cn:_P~ Wʢ&rk C& 5fz=[ olTStbJ@^Y lp9nJyZX<)6
sO_ёKT'~r.wpX~\k^YL` {z^n:( b SX릫fI"Pڍr|9,h}jG]Z
oZd-쿇CkJ44\ yf [@1מ[|biЌ)^B# ftzy_#R\q)MmIA E\*ؗ^,EmQ̱wu7xF /Hl*ǭaK^C
3, A&`hy:L# & =}~ \
PtUvы6&{KH4D>b`Dl`/Q
($`OK3X^E7*ho*& 2d#F !T E R%_ pTS)Uْ| eCv .v]dzk Ս$)Ǿn
=5Ҁi`7b{ԁ$/%>eu_Zn\kO
2EKizbwO
&|L]4` cyh'3C{b :GܧMMݹ8-$Ѣ1:i 졜<{Jj̕^cPG^%> ;n-nېmCa2C];.!$IW|gG^^ZbR"5K8cm+Ek@~=I%*_>aT $˾1x~|N)
gL'2y4RŚ^E.$` ]5:!PYWG n^ZP> n W'Z]to"+*R$KyK̘>A]`fDïP1n$ɦ6>e B|Wyoj;EȋLo}B`PK|:y](ysi O(4K~="țk1{_>0mM>P2J7}jP@`}{;y^O{ hDwvZA·{GnP$] K_bծk[`Vl9NXU/oҷҷ⊴;0|A,3&yߊ+,ñ waezZ: 2?sY,:ş-Ii44A)x! f"O=88d;ckܚarG4LUQfV "ϒ% ,Z}Pek[xԒ(}TcBoE8:l
<'4> :_5/
gWHtayNI~c]Fslu@kEtc# -C&MGo&k|\KasK`?
E|DCyG5XLJ10 MP@#*p Y
z<&2n,L;?QVcu#+ >$nm,cr}0z_ /i~ ~Hjrs~EPIѤӮOd7Z
?Ho;DV n!F|gNw_ XpG'66CIC-
JV/ё.JrA$[ 8D+='7$6VXdu "N.cз9܁*x kEZWw _֓4(/QyA a$sΌtB,6JI ]qMf`V~/{6` |gukEBv5!?
6
wf4qC;X\P`ɓ>FxWW})%#sQEqwEk(X hڥ:! mG<:v!zAʛ>| [
C#x/}sتѽep˿,0%urQ,ެ(qƗW84 Nƫ^Ct~
r*SD`31t {&cAR;+g! ˢÕ ,;R- ũx8 F<3g*ź Z:qAO SJB_fͶcdd+^yMP
I5Hdf^
%A ꍸy0Ѱ[ J6;&aհ,&/0;JygUDww#r 3 xZ1\9B\ENGC>iPz8g.|]C/O8Xs^a]-:1 a@'L$A"vI )bŃ#Xw@kKMʸ`]yvB^n
q)i2 Zڦ[y2y qo fÛ|pO ЧzÃ}mfWFV-C!X~юZn,z5Id"2>g*'4AJi]\)Fܟ~__̥S}!nr JJi8 D
u>) H/ Vj,YQ i*)J dKiZ~Dym rğIw#QJۢW"hi9OGz]Mp-RY6DYљhu.'%McTrhpAfߡ2uC'Hћ>Ҍͺ+Rhr=S~6SN\B DZQ5҂!7 ?Mހ%#y;Q[}gW":rWln%Xp傏@R j JDd( Fp˺38>B\?OXn2i B t٥5 3>ӎDdK?p=ɳ=ӴS2Da4[)ɕ
%Ocf
_mp$: 1.tp&jmz%s2
X!8T9|Az!|!F4{87%u13]`-v6CŖmzeL=.[IWɞJٸl<PF A0¶뻋X{rgM}[U;L'2,Rs*l
cx`Y?RL1 ^θɷ#)n2#]ے@ K"%W.$l #>1 ^%숟Lx(y֗ G=L{PjFnici ̞T*BJKbN8J蟰=J9Rq8ß?e7m
b Y]ܴ
@gSG+)µ-sd/GAfς=1=k諶/#)Y t'ͲeGi*mRl>4E,x#
MPft>'-xpݰVg`,&N Js%d0e#V~'wW7o( 5En&ྣ;~,
zс ' ˓{hH ɣ/ oɄ$@ܥZ/>PkdhaMI&mvQBP:Fo?c?ZXapsffluFQ ]ο`x%Tp)'t> 5"sЕ:el{]379N|x.#?4dmnD"6˷~z"OUjs(1 EĦ
:+:!Y>~!59cF[ްC_`p-u
.5uCrv3qȋyKfY E0!{G ,nv5)`+7B X<
i뻰×:u2+ <)]۸0/Ⳏ׳(odok RZ~+N Mky5fAt*݄nT P{hs^XP NH#&~Q93T[Qcbz߆cTȔ | 7x5#] YPC4Wu 1zC\ zx*WjoDWYKӂۡ\x Qeļ69[лuH):7N鈤hpFМ9lnl4ֆ eK"= ?҄4LE+7;^JTVnP4fI1)S Dz9,44qfH;λm^O-Z [_0yȒ XL@Nmv%(˲9VvHs
RwvI Ǣs ؏'V%xQ MXم| t>(נsk'`l3!AYM"2PkoH?k7'%ű_@Qy _38O -p贾z"> `EҲO"iI(=0'^H<R|հ.yKQ$$wDk:;A
^vmUN-Ὗ%&78No&A+15frgw^ј ~2m.+&t yeWHtM ܍rOTV*es a+zJ%&Kꆇ7eK{;i
>ZfA=W:-D]'b%
7~t;wQmO|XC. #xIg E4k-eNs1:[Z`A &A<6v;LӧJpqcj>I<_
Lf
4\/U~>;/e))&%Zv )OXo"m:팠w#rH2 Dt0Ԗ]G?1
{^;U 纣h7x։IuxxSxqWꏀGJ18jeuW%CI3я[q$ԧ ^q
OY ΎG#_UȀ S5FwX{"R{L
91aJb Ub)k={ $$
(f*]Mh{0m[
#lBoP_VebN;b#VCL]«! KBiJƮ{:wt PGkME+B h^ P|P'A
њo a(.`N5콻ȴ ٛzzF`X |u6K=POc.D,R.M X#pטSTv&~9V\j:HxJskt3|GZٵu%-i립 Pӯ9!雍O.ƌݹ?TX2UY7{E鞉KL3qo0˧٦7ITtDZV-%۞Q֞C!gǔcɂS }*[GF,Qg/Gx g pqoe\2 w ֹ,ėgV] U ]B?u{.
buc
I018A'i!Zu_eQaom,lre+G:TU.Y!peխ|$KJ]$6;gཟv-bH|Yyܫa/
A>l[ m] ^+Za5 s
:>hW)?llE74Q[ˣ&"yq RaNmf\ e Z(+m0 WAjEI-!#Vy C 0r
_')?"iKIs ?6aht`2Ic( MY
G;hӻ=ӏJ; [ 87&\:%&kQ#[cJ'CpVw }(QxC;膺BU#WSblYhx0z#RpڲFLZ d`~*%mr"jUp(,xF!E@ȱ/89<D%JX5Ѣ *vJ_
4p*ah
%_Kj^'>Bgr]F
Pf~UiZFI=$K|+4ئ~\^ݽpv[8i 8'lV*4
!k>`Cnѩ*FlWΊ/Y"N tT8$W!i+V]7)&KW|i2Ap~宻eb~g7Wkl hqy}v#¨A\i#Eu2 5 ϑRDYztq15OumǺW1ٍ:ŷl>O;p'Y +\{, >O d( @@͕t|>g00
F bM7c-~1 ' }mN@l ! s29˸\ \Y7MM;/m~25-=38 vhL7?~ں" ̅8tR8˧-hSt
X*sPhg%
w/8]d @1f=A"'z
s_Abc^ I
L,XG5l3Sv&}KdmhĜxN'%7&85ezR1H`,(Sw[)`]g-F{W͒h6Zz܌G; E'C6 ܵj#SN@*n@A3r֮2Uv&G[r.ȗ{Ik#'#bP5 "Iz(@$e者s&7f*P W60'Mg5'^9eǯ8x`2φ`
P;Kݓ<_e9҂}[U CFPgGJOEƸRϵV64+LjU߫Z/OӃ/ygIhD='S}Dc2i M=kIsj/^ Ys`>=>Ϲg ޗ;;^{[ >![
..K|rH솘3 l%e|ȵZﬗd62- c\]ףJBjZ97Sd~ !|7~U]+ W@+F˓/g{ԗ[;@T>=Uk'6yÃKu@0y)4B #ۏAp "t}fߓ#AF)4nc3 = us- 5E} qC\sc@vm0kĵ`miSydeRқDɌznH)5`x5SgL'X"
~b(~Y⼚,
P@vA%H ܜw\J J*T \ z:Qlx& 3]3k),-ZAt(SQ@W-bPqźGYAAJ)5B 6(ӛ
ӈ!,Wj JLora]'Q
:hMvLQʺ"Z& p"Y[a ɕ@y /GCL xMvEd HlFA)w;FHyOyPG# 5*C|$y fEUa5£ޚyjAk&bd& q1V[kW~Dq
瘽s B t6ac,?e:D5Cv20.!W!
(mWҀ
z+-x,jM~\ώ&{p9] <=&F5 L_jP8l 5%f\<
(ҿ6Y`?G9u↴GRHgj@! 9+nNhPd{y&j}; -JQv$+]1_[
ÎHܐXq| 2->~^W atSZNaRQݚ |d )Ʌ֯Ϣ# ]pY:~_|'v4((k9N^2V29Z|E\]]\i!^~jCERm-"5vmaT ˟dGQqXM[zR"QC '7 ã @34+U(Ua/\18JvUr ew &[ʥ۹p$;lӧby,"1TǣI0C&!Oʷ'; vt0f)#~Gʮ ڊr3-g0W8df ˭4tͶ % QڑvzmQHo1uTZ#`ڀweQDۑnn$wjaȒob%C`V%0e6ELv0c}Nُa7ED8` N8خ$'I,Q2?%&T
`§!܀"zFP
KcM)rmbyx bh7+ d !hYlV|,D1Ze)ߗ&r3u; Jrxb +YR?L<0 S`|NtRHY~bn, Q`XJ ZtB2BwMb,fk95jiSea !]c<2Ӈ4C B!tTљ #c/6 hʥK"+湙կqkoBpĖ<.k̻o$J(6Cbґ!.yop~qݘRP(!ȅ8eGpQ?2Ne^`#A'0Ew fb\eُJ,bݯj6^.f 3'Y"IŐsxZ3]/mz"N.UQ&YEj:x=eg1c.m=ŭ$!I p-UNijg[)Ըʧ6T nM=APD?wh\L08Mذkl@y$R> s >
B|@ Rk ^0 ,7>&&tY
WĂwm\v>9d<6
tZTuԊ ìN>v5M ;.?F ob%gV+5yDy>ud+C^ ).D і3Bxr_+6̋##COh%ZL=<*13\a(lzj"e}Cb
u#ѳ2'XSxLX ЊRUt*KWn&`W niBwl@]x(yDzFU NWv:RR*{`qNIC<#(#~4 q J}a 9 %z )FŞ f.+\H3dLf8%UYϪ "HP"$џ *ކv} T4a] j5zPXOQ(uKv u:3ypq Z>dS,b"1Fj?{b |k`H-үW+
ŋ
I&LU~b4 #hį/Tθ,֗0
g[R({shGe}yF8
%H˄"7Xv"31Qg]%
@C52j5 \o% C3 |,/FQvAǦZ}ɔm/&Q %WyZ;r1Ez"!ct[IC\ӀHH@2R7 IWAV'lĪ0r۞d=ؗ˂Bw^Mm\Q]1 }i!?T6a amˆ 5Y#9$dF4H>aڮ[M x/!eᡭvg:h sY&B稪 <] =Ik"R9 ]oôz@f.p 90ፚ@Ԥq i2=)SҰ#ZO-٢J LE}wuIOg9?/;p滀){^{~/
AFzlޝ ǡ*;\(Dp,oR懦l1SlJCXt$MZdl? /!n lz
/5qM8zY!JRԸq@/#B]]2z8L.QUo]3Q h~]Ab?KeFLWDm=ؤӉ]c M &XL|!B\+O=:c>al
O^ +!oA䫨
N|3ܚgϡ~ ސXw VZ ތUJ(x3op %Y7 oط}eL~J{ (~VQ:=ww%:l)y;\9
Mm#C ~:
7nɧ[seA 0fک@|)PH$QqjQ֜. UJ:Y},=Rޙn~O3@-}J$eú7
y V
Dcz Ex ҙ HWvM++Ă~-16 TLS5N.͌Q4
x&Ͱ;cZL_.RcJ\B0p&<ɤa@>es]X0%X] }&ev|Uy&qi8,݃
r+bYhIP bJ̣k<6EH* NaqB Mc龙Ut'zrU NzQ3\MׅdXS;@*_o! .25쌵ݡGˢW땊a
k6tǻŪV-ZuƕOZkQs#ѽ,C2.+^?M⸏݁h*>]A S]ikNt`s%e
#X9#,?
mѮ(#"&W|%% 5=P6ٷvR"~Ќ&
T Zrq kA ;x벯 aXC8&g.VSA4
UÛK:wO uu`.-y+N 'F%(
{ժ%ݺ^٧f2b
l@%;0s%(Pʸc7ϓE\Vf@aXnfhŠq-CJR%r
}ebʁAؙ%ݝ|Rc2"hPY 5< kӢ>Gtt2KȄ7'd];AOS,JZڄ.lX4h*U8NƔ+v 3ܘ ݁5RYi!TyT1i]#DۤUw
QClٓHUH QҖ ue!u
B¾bJC[9xUr3FD(tJF0.lt܉\1ů ?7;0y7t*%]eUׅy)uRfsPGDj
{X$
QF ʠI#ĞoȃS(tI*vYx\fcsN< aEV7;=ݞ4j-W6z"؍{' [/̫瘃0=39iG`$Q DK8LV}r<%
0ʞ<{أDuiKZ𰺷x ͲMulb@^%$tedEsOUtg
.2kYan !+3|$K`hnUK S͊jI,y>*Q yḊaa &]> ͵`~tĶ8#uMfkfCu4՚'nVxK lL5}" *Ohl W|*Xn{T shaeA"\%2,no IʄZ*Pw`c+0l})n=y>K 掺S@_b2yݯO ޝ
vѥ(='D`љ(
.,zL6#_"bU2:ىh3دieK:ǃ
E
#,P1egn9_s{*xyH.%h8Rx ; t*;ƍ߁/DkQ<ܣOOˡT8q%e &LژbnE/g7s$+0v+
I= 2 B
-B7]ܿzN^t|UiQ
& t}NwQVJfrgQ12;(MF8h;wt|0a V Oהgbҕ
^}Fgq\7#O4QE˥ VۘCt=Msۜef/ .HrJHb:j|3FZݮtL^I{ QީtOG Wsa2
ŵOXׄoͶϷ $z8b hw# tJhZN &os.kxp!!_3,8'}dTCweeΩ ]O\L9 ~0`ꠇ pLz}g^7HlmX&AGڶ[9 >6 U|Ջ9
iJ{ ,c?C 7UXzNlR5%༸
I8{6-fkF9b߱c}
M2eq5(ɐ%FX>J6õs>]Un ۱&ReB)1٥Hh1\#-ѓ8G/O*i 9J"LuUiz:Qx,Ys.Ox'jplj DcTx>1u fՋWsrzY47rf" tIq7~*f=z[':L; /?N~P
^"!Y\ֽ/\nsUI/G ` {`T2[{``or1
5iHXLNT n$HNNQ.[[UAA#yZ;ejl
V#_4zU <#te9RX
#5<:ԃeho:%AH8:v/oY[JlbpRX%, 68%]"r`OlF
?/CTmWfi$pc]$wmrXX0=``˯4` +>Dy1Ir:% FDQ7o5QhO3,8HZWTZ ])#l9vr]2N73)CRfTp9М̤] MN8$9bo
@>[!K-s9Y.6"2x |11ܛl{^unؗjo?!3j}bMyHiXȳZM(va a$ܛ"p$b4'5%P̘ΠH}9dYDd8V\U }1mꇨ!QLKΖ A<üt'7.A;ᡇ J] @?|S7A kRs0%ɥڟD
/i.Kz~SN,a= U6k8L۳ $UwP)z2w®EdmM5@?jjb" l}(8Q!l70P7vK{Yn*ײj6ͣ@Z3 Gȹ]ӯU 3X Ǧű$Qmmtk/J!{3|38ꢿ0]56ei^WOS}I6(vŋ[]̪iʆJW`.9-PQ͍)q&Y@9pO:tKlE@h7uzUgmUyԫy/SR"G[CO͘X0Vsfrsgp^z EJ|B?9^H ){6j8(og t hՠ⨄%&LF;K TԱH(p@ \6'gbBG0*N_瀭h&3
!MytD+ [MԡӃLuNj-;nj=1w:xSN[^6Q%3&dpؿ jV:ľ|T`eL}Xez܄2 ߤ a:DÕ`W1{%Z_C|nX}͑-n.j&*Q] J2g@A~@>O J4iwn 7SVkRrj%# WQ Yʣ{w78C
x0ZJԵlVu
/E#TQoL@R:
!cBtSoU!(9>!4i^aʬ"V8^``6$<6|G|' zRy JK>U{8+wY (/OX:Lpڌ R]((k_nUaWA<4yd,B86##= )Ui
edV ?ą2 aACD1b!VuWAJ0 ^FTo mrZ9ADV T9 ԱSvZp-+ # λCUaʣ
14Nh~:!#E7lлVLXt/
k Ϲ-Jۺa {2cYO,+5xJͳD{ICѾE̾t4z9i"Qۧggqf}*mQ#)phyȸ{CrϹINg ^6-l ϻ0U R;|-QVz._*cSt{4YF͌Bu6)G
̊x%J!P_\Rb$?C& Adks]|Bj.!1ąW؊ e |=?\i Ff0%}LbQyepSl=k˹c, ?svzCA3w]#eXdꫜ1(sw(=T0ۂm>
.K |DbQĶceq[yh'0&aw%JilMdxa q_sl&7HX#.}tʫQkȷ$ :$5:/xK=j|yDZ4YaSQP.n7) cD:L".Aޛ!-1^oC\ /l>̳vwFr/ 9;S;G3EQko
LZ0±Rs`߯\jw fymf! a&[t \ *h L8Bܩr7h~ MHF<[D#BN'Cw37HW@mD+e[^-pE
^٥\3@[g[.Dm{4^Q9 ^>nm $AQ$L:2WC0iv }i Eʀvq M2 W~f-fw3X/ݲEq
Q*]exv\o䄒H:g6-aH!
&!I,W^`$[qru ZɖNrhR"rVu/ hU n ;'C3x"x@>o,i!aԯd}Ž_KTv҅Hh>܊=wDٰȁEGq۵#dj5B뫏F2yz5̛/M[:R(St(,%wM'TrhTUkg("6hai$6}i J$ 1Dr$UO̺mwtD.1⩘".pox\x La iwDR77\uUpV Gڂ k,6.Dp[p7:&gYcjAYV| TR&PpyA,
z!\`2ҪLMR#O6-ם (0)[=Jg28>J'0hD^i w*== P.
!`]`('죢Ś-E5դڔ@IqO$9%
NӃE7M#Tڹ ǓQS6M+7ȐBh9oa@qYb 8 sa"H"ŕ#zs%j&bY 5/^L_ZtU:xT2QC\W
_em
/*1z=%it{랆
Jh4
Ñ魽%g+7t Y'
,_#\ 4?`< G?qtŨ~@'8;u>,D9>U1
00W mQrn!)b,/ͫ-ϔo\ !X|v@>ְԤ*^/+*TuV7[h npݛFm!MG$|[3*(i'4xa-t'\ڕM#`}.V1Db8\FY\9ޞ$#ȹCT6kwS蜜Z({0Wｂ
'zK< U|nO%@m: GtpC5N=S:T!$#8 uU v- ކGϜ
'2K?zu/tE5~
kZH+T>8.^~;1HQ@'kqR{< t\G CF
y&/h,ޡK$
w+-%?L <ʥ\jz w͘F-X-NDA.W 6fGgG,}R$՛); *E(}@ WrX3ΉԩO>7T2b!~ #b'*]❞'r
y!?):VM )Qb goapGۂUdaI?45IL!~X-DdŲ
)U!d@Ccң'5P(]T$qqWݛrE(ӡ;[ Y)!4q@X
UD̋>">Y䠗" .1׆SwˢHQ&HJr9P)ܡ=e5Õ[dj|23- Z _f=F֬f}3>jdm2`TA\٠ >5v\RHЫ?0\MI 4uhiXd f<~۵ɏxAT%us ̐B6@M6
6A|J [ |77NIue/~KlY'tLM"X Rù]?E vc\XDϜj⨞
TA6m%ó[xzI7ZLBJ
xy9\[}+)q"Ҵ}' yZ38/kޕmr R3mKmafr/w͆~ztoOo_oBf*cg7iVA &c0{Au71OD4+|yy^"&&>Dn{lI3{(KȤo8QtfgI+PjRM[W?d Q̖{JZ;;-7 [ VR"} A*֢Uku
B sGTOR4'\l;+MC]rK# JXNw^
/G=;cSaط]= B:_nj6@H)#*;x KaV
4emĵ; 2 @=6TX̛ZT9EVrG OWhߊt:DOԞfbFHzeS)ߩpҧ4PڼRyNJ!Jݡ6k(U.*nQŠ %Vi]f:
l C8\:u
iےHI!F ]jfCC, :/2a2LT3xA. ʇEl: s6>[v_EI/R8iS=vpL+FHFzPK(>Eh{㡶_Hoc,w]%SJCa-8^;L8J/ %IN^nX<|)2X{^Ø
7A 5,_E|f9͞I?MUtBRPh]ƦA/4yRzqsT=.ªxoe"g!cd+(yc@qIVflM@-EqdF5>l8EҀ;= w8W1@q ΐ/Uڄ"`YAjO|jcfN3z8j,qbsM'kSsFђ|y?+mz
g2]"[{Y$*i lZ&:An~5':lx;c&Y2v\ې7L<"FlU
к1DNT4`Zŏ[)sJ:r>Uƪ:+ݭru!Ha\}Yd٦"#͒^w*]r~R
q3pE lsV'>:7퇓zl+SPwGKDy{ [P F.5y5rT&W?pEݯ
ȡX7TJܐ1gEe|W3f0Շ%%i0ܑoq]i w,hz=<=/;9@hOmt8MS
A3m6_<} %k"rWllt k MM8`Ϲ/y=-D *\PwQZ( t%3@ra[M,egAE*^؈ r,S MV ZDlY/5i).#=Ij X6?w)M(컺ؓ2)>*m/?M:Mڈ)V2o|9/=o;`dM` /9˭HzuqtP[4|; t՜ 3SNq jeR%(\.\=A5q pN% q=bl"0eX1\"Er/{M <톃Hz;wPU^K7k$Iyh?ډg͚r-Gw#@nen:Aop s4n
tѪ:TdBB>ޚXҁ 囥 mCgg6[;6d_xjKvT}.S6oqs>5
0BүB!%S^
xrP alpZju|4$RF_y*l!)?brn ^,ч3M1-]%!(5܈6q+ _|jJ;24?Yw$p6*[iuLЂw~" @(n 1^b'vDB?v4D!1I
w!94o sgRUCs48n* 8ҕNM]%Se9wg|_%J虝O!oP{06L&>nc2ݦձY_k4(X .%lOdҌe շo ir| $A; ef)p(^+* n3?h
~T'>ܡ0-^ Ny/Aau`?*W4TL|MG~ YMCϠa8/$dO7\BYz>ޙ{c!Dͫ(] )K r{8ƂCz 0C)W.)A6$C-C8C ytO< c4FIVT " TO{B
/Z,g Ũ7-5o%+w8.LB9FkpBn!V|cH>
G4?[e/^T6욼
(@h%EB#AkQ:ׇ/38m%m>^@3uwWH2M6xJhx B#m[9e )m1i1| YBZjPt6ڙJET݁ ŲE OظП)yrp8/Opy lSy} FW$[,Gu\n:؉N`B
^?a~j <]v.ˏe }l]H R֡|YkU*GUX[~nW&ٍfYBI 0!0
: kفl}I
=Ehpn>3ama][ J|l mbv;vy٠ҋj/T ,抰` BfX
6N!??nd3?5|#ouPWZcs
Գ):% ,]b(Ѕ"m/_"cct Tp_Y}[k p0j"{
w9 qa/}ԧ o:\_!n Ǐk[Bbc6~zc,R[6|v =W5k'6o M$/I{_ɑ^%y0i|+S07e_Y]A!8"˳31 k@-EU##JF p4RG.`$)%UoYɞ ڨ^`EFh[pN~S]nPsBUC
y?@x)!5FkBhmp80a<|eLf}]*$FN&C%rr8*eI
J[?
yh$nfT>J` ~ pUZ<+´Ro/1V:jS;10`cs**GE̛倬XHUu뀁S^̈́- >*TX"fN)-JSVjr̬7dRB`2e TAƤh)]ŗ`u^Z_Yj~{TA0aKF V
MnβYCa"|FHm9,CN͜Cy;|TW^HIJ9CgfS~2ȸ9\z
}
&|fQX ;fZ;L MrLjq?.V %S'Di-H
W,۾ϝщ&-X
s䭬$or (
$*1b 7}&r#\A$l$,I$G MH3ZiCyH1?$謰NV5#\Xxs -vb nr^.fs hBN**,Π8\--Y\s FȞN ;Z
䃑ZRe\q۽Хm{V 9{x. |[~-[L| O7CB]/
vs=(qKoM`>>̜*>CZ P5)u Vs *AWU<ўX!"&Z`e15bv9- B#c2 p!)&(߃v,{ ~En^gi{IA?~f2*L{Q02QrK_ޫEB6.]AX嵅{Vy@N FK_}/5 !Qϙ<ډ%ܥC
WGi!!!Ng&a1&&Hk }s%'@?/ s]XoK SͨYM=X:=
5$!6{ @G SGQee3H^[oeg\Q_ qu=\Z_FRBm$E,U;tiR1l&Rdԝ\~a;:!K_qI&;c\mTfW'I^`|O6]TI .|!D }TTb8ho|cH:(`RY;ݧݳOc -0cLkU3E8Zk4 3pnCo$79>Ԅ N $ KjO!5\܉
~r @'^$ -qiT> LbMs|_g5̡Չ%F5h40sճ3d%sai^D&
Vxydj^I_je0&##xW*M7xZ3d
a$lD7WTcgd&=d91\RwtՍ6)1-$D,E>Ol[EL+q@쓢ש
+ U6rtp7hM'v|X<Q۵߬Bj.0$gObb }>|٬ rļlKސB#bkcv3+KW4Zt3e+$@GѹI U2}!$<_SczZ" r*kf9"wrfj~g#[z NbdaU0a&wf̄u7sܲY aAsɂ֝>!T \ >Ԣ߯il*4N^bt tÿJJpzܤbWTx5Gd @muV# &22uX/lyQz[;ze=U&ڰ@dg+Im8Z p~8B p5?r
uS
^c;#G+vtf$I]]FA4.@$
Ƣ bc7~KZ: >= bJ
$Bվ/c`8 ]ty.-*]EBGap'T;h:}uPO*LUX_Ȅj&M'C 볛d#(2;ilYv 0n @VcO;}䯍x 4&6"
+XI{:~\( _
.c/rV 'SL}hVѶTh} }7huooyi)zGzi' mmYֲ,MK҈@ b@?K0JvdKFHCI\^G$oy yxõE>x GIs! Y+z-@1_\1T悢_dN{{`%ث{MjT[˹$Voo翧p0 #{ {hKYn% ovj|P ݶtyDL&0 Zd_Y9Gڨ#x"!x.-!$ "hCR8"qC*0x =< ͬ [w9X GfKMGfxR7tqY]졉m Scf5gOa:y(PxTgnH)lK{9 ffE0
2FHl6VϡSƝdiNq M> j cJ
=T7(ȗ!$HF:}xCeįP_6$˓'wpcz?g,2QouJ E|.BytC*FR!V/UȜ}uK( KCx+3AHi`^9sȤ%|ȋ1j [XIU'KǑNOhYXX#N3u}
7n6oC,wm[!rZȨsLJ
O5P Vdi
d*B0 "ӷ f
E CQ}R r
}0^`
B$ O$k6=^->֥m2>X@cD@4F~Qʭ$G2ok]o$|r$36oGW &?B{ ц@VYm[f~+) n)3IM47:|xQ!&v ) P7%a9n;B@ =
V`Bu$Wț0$ɅXgXsb2A
jXϽK27x&BW$ uor=U#s ͙z}zUK<J{`
yVqnEO}q!]n < rn恁/8y_`4sm 2+h
ЂY?8>?{dZuP`
Zw HCs,h뒚`Sja+m d3~Ɓҷkt:r7E Ro(21=1^ҧCtq k3I'n>'iٻfH%fHWھrWItjd`$46MI2«cɐT}wҶeۋB
;V?o1f4zSB. 2ҫ
ϥ {wl_`?Gq# o &f(
YԴˮ]`$6vO4/7zsM,s9F3AUn)Q&+ w.
YW{]{Y b&ã^݅w5#M\14-3h6L" ,'0,֬$3Y-;u
ŊPȸТP:D5T#G+}G +mw^d(h#;0;S6,ҵ@=q zTBW;wb$n?NZ;?BMZT5*g ?",IߚB8Wu.bA&!,nrEڎ%Iy@kS (DQ+B YIr{Sf%Y|JvΧ![MsRsꃫkKgU_nո
y LL5+$e@
@LB L-& `>5= Uo#G?2 eSDÃ3-V !Nʬ=uha]R(1%m48DŽ^YGIO
\8wTO-N! / $R < l㝐cF7w)sȏ
0b E%lFxaq ǎ+ҿbqfڊ(| P4(ɿ
6 !v'*hg)`(ʌ;?nU<I3jX b%aw#_h!{g:gYQhs0/H l.l
ʮje>.y3ܑ I;4QyƟw =d%G3Hlbhm.DMliuam9(%+q@m yS/UP#}Odc1yHrln e E蔱iC[$@Y 9VS|7
.+H걛/"/5P/kexvG9hpH`6ljDsA6 DQ|Q)#[xs|!x } (-BO
$QZλF6ko> "CJtVhE)mF2;fP㋵qN )_ +Ì 1hqA
[,VAJEl\$Y_BÛ >'aHfHzsK0WC53 %ߦ2 Q]oYIN]:o$6(KÏ"rVv˞Ml -Y;ɸn K[LDe|G
ٕ6NgsowtvN\<?!'@5 4!]m' 0jU_:7
j~XwMYC>v\, y
BT1M " i.8~➜^C-2>;z=V!f`H|ע
^?JN 3C4soeԍUfj 8 )@s\(\*mP>eyF۷Vi
^Wn;d6]vfGkZ!@" zaV[-[_ME9 ąHOO + GSX[o]yI7~ ihb)N-_+PT
8=xif!01iL'5/)ް7RwR
ra"b6mHŅ=m< Tgwp soxXR)6՚9 j4 4\mpp5.Q6@D Q MXuU})dp'«.ekMD+ڐ?m+āsS9'b{ n>Xxm%܊LB 0s^ U3_@ ȋtƋg'`a$߮Ȏ ~ЭWb^Fjչ=bYS*?q%Z)^qqZ6iZ-:ׄ4xhJ҉4.lU=`%B? jXu^wJDB]eE9LUuBnF9N4#\72>#㋶Nؒdn șODUʦidhI+0`; 8oeqL3 ' з0oʰF6oސze6Y2;Uۚ{j~t2 iYO `[*k$]} ϶
fΩ7wmD^n\~:jM˒@a䰎wCDxtJC>!+raAGQ]'DYzm ̄F:T^ anOwh&Apoi4 G_Ž9"+BPOp"]%R5Z{O=ILou9GuC
b}1 eq:`7;!AU 8C/d"q,7ȩrc ;/auϸYa;:xϘ̗I@u%hY2b oE~/Υ;_s HF2ԗRܸ3l5^1 9~@G3B|o͡Z89+OhJ=߅)+;m=;l -U [kgb@&":Úf}|Gܤx" >cKA+sJc篇g?˚ D@ yv0ݕ v5,Po2K}}%cNI]}4s
tuҫ9Ĉ\qފ/ $j.Xp a=1KCKRب =e7iǪ?*̣x5yoz/a<[ ېQ*G|eǃE|xX6z+h,?B^Wɶ#V_RKA- V($ Az9> 2Z&^C K~6L+x2"L籆ᔒWC;`3#a8l'+3huS3 $xu]$5o.8%0;R[gFz}PO~SqA2ZC|>'$t,9Oˬ/;
s1O^ wgN fNLd
gildgFdÒ!X@qVZvG⏛)R_1#\Q(}
.ϫ 9x|x*\_lKM7IyQULwbGLjޏI)ң,{
]?Pެ`ں mf4*: إt;O*rQռw_E\Q9۠ōSfaQ͐oc@okt{qUWvRmmxQ G6"e|] g,X֍Fw \ { |5 >U6~/,"
pLȭ@:wLJnU6^ $Ue0lˆC)q:
|;. ܈?
^i&g]9+D7zۭx̎\A&KV+hnꀗXzІ+qJV6ow5mf0W '+tD>(YH+z&L_7#UB$䧌8sb;}b JλZ;B ӗ^J'"n (
f\^7:)I_!@{Bx&V$V{mȔwgo\KY>R
pYϛ:? tơ!QC?
EX6sQXcf&Sޫc @3VOM* 3x;' Ɉ |Hs=ˀ֓Je[ݍNs^ 'W\@+fd(
6G DŽ?%QS+^rƠ4IMvB&Lxڵ[drߣב%?El'%]I^GpafM)$`ba/Rk.7bXcB方p .K~8ҘT= 6 NւbW 5jQ9 ߣGsşVw8XVkR R mN Gهh-,Iw,>INg']vlt'cOIn3 eLtވvV~~~N
\U֛AG}$u498!
e:yɔ[^l[M$2\aYPTc}L$ґ %Z\.yr1&q^k)X-%id̳ߛWnO͉[N:V_| $XH 5 w.YDn͍T1>iȷZtfD |g48}ϫ,3ůفL|U4,i܍M1F k|A5'(l61yaԨ:l=]!T??"&7$,Jy+"֓
EU=*#7 ?J(̮ܸgkQa@nEX RcX
Z&U'%7:ns XGLx@!Ii. vܒ8!>][ Zѻ y k eQ6" rp)#wC%W|~{y+/M8s-6?.w}1(l[ bqeرɝ`TpXԚ̳R5;z# \K).Za"RmKJVw![n}M-.b~g;k
=VW py aeB _0:nmd Cc<1PY\m#u{ 7Ms)`?TaeV&՟⌫"Ob 2 {̱p& `],@wf }0uqnr3V]{FFn)}qCS: ` C1h|g&m,T1flkd+fA j
s^
~ ͙?"d=<'8W?<a"
NŶ,c y&
_.FR
î
jAU-{M!kg87fq\$h Hxp2d; \41
r [:db@[&; ˷ "nmKǠJz
nlXeӄlS:}HX4=.|L@C\{Vmb
i/KE<M)ӱZ-ކ221Q)o
M?ce6TܶY @ۮ*&O
b-w/ :% x ʾB\{üP 0ovqиA`fF,~I *yS28h^\;(:O8_\hZcڱ|I-J֫ź4' u'cZpS9:1) ="VlEx9 ZkL, X3\Nf;og˟FZkv@!uǵZ_Yrj)n3Gw,( 6F~c 0fL}"[}h7S!02@]4um::AAץLg*V3C c4̀_#:IJ6ATCA|=**랹Nܰ%^4Gi[,G UBR_n -4OAA8[~:W\wXHʮ. ,@9Xe
(F|T ?>:PQE8=enPuЈߐ@M2&K5 KS])vX ƻ$LudesS2Alfeid}{m@}
m)#STNl_)qbvN.F&h*u)Tvb3F 0v.WnW;mRW=g\ 4ko=W־16?j1f!ptR *.x&ۺU( yr$f3F;`ay-ۦ\Y=B 0l߹IKE>vxVDc,,h>~pXbk"|\ _Cî(LĜWA]mtWˌfu՝ <^CPFyhQk%/}:,N4jE
Ѱ?o>3uh&gNJ"ga
lR^lZ*:0-66I߭ +}"utf-+cz3{_64v[3( # ]s&ݗv;ofYi > ],c_k$\o+$TgZ%qEW'[>6&v
q
[wE'!F!{qQHLy N- Z]ke8G^7=&mM^ĊcC67 6zY ǽd o=BMC9SYOmq^T2Dh{5`98Yu-aIcUhf6_
MO(Ϋآ L#~Q'ZV?7q\'|Gi&7,y) ~UȜ }V[TFGk+l, CIH2N#R5B% ?3ctH;/{R(%wЇnx2"F|̛io2zko㵉&s|4>40 I J/O{?Y](uY;9"k 3fvwFS~ 7ck~smB aUD!S j"oPf0Wm ]+}^_= 8(Y`b 4;dg**U_-4I@IO(̶ `_8 /-;hY u%Izk(_v_9(t ^wKF@ {Y;D'BTkaLʭL ijxL|1]ՠ-/ie=@fXʯ
M5 `flP/SiNB]P |0
.8 VXj-q:b}z v`1.ۖ{ϾJM;Z#S^G' ph,X[\1ìL JkSRNjR6jW|K ۟ןr <+&Nr]3DZ"ύA"ޫ /.
#}Ʉ멐/7$ 4j K딞WȮo uΤ|ПDN 0x0/0[Z PWÌUrJc . 8=(SC %y3ĸQ@8%_Rz pCYp[҅
h)|vjRfE]>5=;riv? #-,WrylLY
ƞ&Ey++b
{>C kQፙδZmŬI^qOx#bGTEP Վ;|Gذ7gUs?:wo4%ið-o#mϱ t39=ȉ _]Ief0~Pj(#
vCvQy==DA
'Y٥&"4nԈaD!b{'An5Vw^E_UЖ٩{ m?9Gm Vk~5 X\毯L åm{CEUze1wg.";6Vl60+GPTpT^"*̼՟'18&&IK}+^$n×9iv%!\_ǥ\rc914~һ.Ԗ
g:pjO!7A Glc
̹Sܙ iǀI^|H; <+w|_EF!%`yE^6;۰h xgƃױZ!-+ jÓru1ϴ(7Y]̨QU?cu) %%Fe!>uV e~dˠTr|Qc˾NC,Cҙ吋}^6> "0bgo\ ;վئb-H)3 <@s(.'JD߸#;Ew< &K>qiѣ< :I|}ӭEc !ofǗ=BKz 9}tXEHv{}a )wdc%Eᾟz.p Ƭ6\ wc:bb mZFɷYa cb&BX-yQoPj d; e-лI> M}j_tMRCxg-[q_m8~mDPeؘ5caxHwǗ #
呺;X <EyVn5^E
g / i^j2L7ky ҲMm]4ng
O.Z
+YY9|6P`~-S?4qQ9LiyVԛpBM=`?sjE7
#- nv7wp ?j4L?.njCIc TG09#w2f{Gie,Xo+Y/{eZ!IRr=b[Wt85nGnaZc^8}R@G\ U0/7s$IǔO=(>:9/e9=p\ETj ޱ ;'q8CHx~ Kl5N6x4C-W=(Ē%O$H G% b' ua'"yJT X;Lf"S\iD1 w4awTOwpQ Z6lΪH|YT^4j .iXPzŐ^&MYplF8ϻ-3;ypWOgӱs5SXMIq Bax'4F5FUSoMF=o pJ S Y'#w5=vs:{>Ue22p=iAuZ1s;kuʉe d{'s`7$ݨ/=q|P]ll-KDo&nÞh|UT~ĈRmc-6Қzu«U[S%|a ͔VU7_25I9)j I4\;I =bRS8*3D w!P'fGU7ģm>d/S5,N9dAE i<ɤOf!ҕP}ݥ.r'¸E7[7
`\thLo/{>KCOJ%:y$[/CNo>I{40R zNwB@T(Oxz: ?rA[g,k?ų^" p
]KO%CI0ots> Gv-:*ґ1wh̝ЉQ% (/ o>X=|^ +t:Nyl RFN~kQLlaHFn
*&Z2 dB0&?l#\^=9, ʷI0QRorQ-uيloUWG̹DLUϩGZ>g\3\?.SHj9>T DwM:+Ũ y9!Gf-d]L@|q dPfuM1g-*iC#㰕tfx,;sghMp$!L=J|s}?ݬ/p^N
ڲ%_[02 xXx-p/}+ F1yQzhU>w|Pf5,HM _MY"["e,#;Nqp{L965z $5 ԢY ZK t9#+)5\u VRrb6iKPn~N` jg W6b`7o4:#}.jW|ʙ-Ax LE#˞ hJv+dF"fޝ04!rURӤ"t.CҜVԖv/&Zm.~J>SKuv@tQzeN 30IN4
Rd6/"ꟊ"vX/}|=EBϢVC"& nΩդ 2
4 <o^WP^n5Gba xs| r
z?IY5Vis=m>P xm65-mW? Q+y(f]ΠWz$o'HE/SfIt]#
3ФƑ{s K%Pӳ3#*+oyj<|4ֆu"P R}`=ߚlw{j g/< ưEIt(vR
ז)d7(Ek'jZA2$WX+ׁj8vCى
; #p <%7LOQ,;by烹UXdpJp+Lqc]w`JvU8NL
XbWہ {!h@<"(t3=K6<4J8_1 DU
aD&0~Dh,A6*+Ф%
?&Հ0S Ӛ ǹ+V?-ȵ5^3Fl yt
y\\ NYΝbC $
Z8" ;P :R:k̲@BWʳJf `kq?߇ Ix^¨L^vynQ -L=!S @"sG `M+@E虃cI
pH 18SI>Q{fRG&QNN>>lF&тJkCbYWۤNF_/jbF<ΧNQz (puHR^t]uRL -Q aL[ӧ]TY p?MtZǣ#:wˤbPue5\*"o ML:([Me4'ڏR 9;# rRՁ(Cf < LH Cfe>`MM _X,_ KХ 0C~C'踻;- (ߛah˸ MVD(xt y5Td8QԁrTh4k؆Yͯ',ƻ,,.zT@gem;9n6 ܸHwm ;Hqߵlb废nM ߳ʰ 5ۗ͞ Y -M= U.pʗh!Aݹ/" u؎% ?0a1TƐ_D
$Nq?NNsr9T Ƥ-i[^ȼo߅|k -liu
۪j~NW9fHTxy AJ'l?2{k'> DUIġL_x2P]@/%&$(yYWMSAMw4Y`b^cd)@>01Zީ[%H
@1;-?ꌯ?6_'R K3X;".?f{" ` idŷ%s~ӱ2 ;
I 2*ղ\k]~IςJуR+js~VYP(
R|`biN0vԽ!o7
&ժOVp$|k $ ȓ16M )ηȊ6F=r+ "aLjFZ){J^92V~`VZ.2EF@]C AKlJrH_DZoJhGg?Pt*Y($9QDDNן1! -YQ?R 52#~ؔ
餲m&p/Qciz*_{9:>Ft@OQ5bf~ }8wh 'UIȔRx+u!G~ q e eb"ޓ6 B'L?goD26b{Q RZڞU.eC.m!At+nAtM$
?Q j=Ч }LiS?r"
PcuR| y{`.+@Cra 'st)iҚ@I3(rN`/ (!GStwz-!j@PGN&%ۈuGr^
^BxjZ6 Xȭ]?C@6>>)zssm:؟av.v~A;X1~os*]°!۲E! +
sWݡb#8&x\FZTgfYų* # 0"hoS0Me{tA݇@y3\#_QYlJb J=>*:h4Cb&bϳ^
s8r; AYd&'@ULc3LY7*JO>! <p
Nیi";)Zb?d59ӛɞD/|@ (E?MVfۿ|N84lWf~ GKq6:XX 2'UP
V =t^J+!"eDɠJ (@9<$P=)UA7+͒췙OXtW̳p1ah\G\3lfBAY)y> I⥧>M*K|M͒и2 䮸Gka+.boP>
רYǿ7>\`&ON, XxcW{W.%P⠂# kHk~aGo7D]'6i*M^ c@ F@ OH0_db?Ts$dF:ZHf+[4nټ q&Krg<S |=[s- FB=ޅCsSΖhҠ· Y= SGA=# &cT$EvPaՌr9g^;j [xQ' 0 NaCqMeev6À6n#+2c
yUIې
W))1Km9, @
cK͈f#c7ܖ
|N!_aţ;/ և*f$s
`1y4QR_* :M rnYY[Bzb.5Z])eBnU~R a{~ L=,կ]_{KOg InKg#[(u"7ד3N
Ibs].7z|- =r1S-[=ƱPp$~)@4jH+8zKVvq:>S=29Fo_ ]}Ԝw<;#ҩL%uhvĭ2 5_AMBv9k@ǽQwK X-/zsagr+'bő;|hpJEq b?xثK4.~y?侓j9p |:&K}M"ʕXJrA=VkuMj'*JPOQɌPM]4QpR<0j&ÚQhsdٌrsJq7r'2Q;] |p:x*/tn
Us\ʟڇ2JHjH^{gkv Ӄo1WX+[~/TUҡ 4_GSr17hZot
#I~p{>ϛjºJ)#
o3?ܝti!ZlT LPg T.hWNLB fCMw)iI.oC`{YB5;zYJ8"e>$5id08]PϊC(f2
/n\l\ FJX8ΪJ MΌ!'ba3]u{zʉwVPUgfg#cƨ`=Z-{ ݷpɌxc_58o^5,j;EKn˻$F歟TQ^xUOjW㔀 RR~?H !̲4)YbA#V8/R@̠w *#a;c +tcؾH7}|9vEtyl6lU%TFFa+P4ma+@&w^ ,9ˀק#m1@RŇkr̢NAS^,hh{. 'Bx? >kp`Ev*_"/X ؕϝH9@k:{F
'WQB D1C/ 5+Vjv:rn0al+ 6
#^쒏 aj:yg@ \>'{SQ e$bf{rWDxgO VBqq$#2.dt,eE&-`'M13`#s;!?ur "s /*Ieѣb9Vp&A Ypc#۶?`vE+ NӐ|{~j̛9 ~> HAN5w>0X%Ovn4Aj/z'5 laYH;N xGrl ,j^RC)ة0Y v,&! Wb9''|S:A48E; [ڬrJQ@D9ͺ8?@nSf$ID,w'.֎Ayrһc?`-S{`ef #l"#nj# f.wY̫U.AZ6p%gMADP'Ysu.{/=xyXm3 CaPR8J>on{f{nҘ)M35??~QeizT7KtZ`܊?fسqδ- !)b;6_ Ԅ1ieSHM_Yfc`(,3S_=̖Pű) %tY`6$̎&\qp 7x}K nzV mɅ@* ))QlX 8٧Z8dt3xT㎣|)(U dP8EZH1cn d㎿MqˠHsq8w^ZhqƊ 48qCz7g#ք7~(P6=--|"II$-Γ %gd(u\
)N$~z#{8%5#& _Jl+s 6^%QV1\0ˮBBSENhi?> *-?q}G8䤲Xt-/&ԅw;9T|8n` RI <@Nm{D0*؏Q;њK4.i0\රfF[ެdh) A͇?nC=
7+Fc GǑ/*PՐ1;
L V+SN\'{dJ2N88$Isxu >i%xRm//Ca # s j'Ǜjٷ gmIJ% +r/T:O;CG)_NP& F%Y[gZ6t[W'= rh??r!r LT7e?N
f_
{ă&:p >;4 \4YƓyZeZd2tmlm
2x'?j# "(J P.HA47R`Rp
N|n SRاٖ
hHJIRHLGKc W(I @/yo7ADBxp&@Ʈ%kd+F((Z8- ?eTM}BN˪<-oV;AB o(X ߵqB9%AIş% %rȄ2\rD]~]Hzvj
]1^f [o&zzKt6PԑY
.;jszO՝*E l[o8s ,έrﴤ5f.>ap
"{^v rnka]ԑsSdؖh)7p,Y^c{hK?-0_iXKM&4ط߄6 a<*qO}0nu ߿ųA-A NYc C5,_نBj` 5S+Nݽ\
]@
pX#
l;?hNa?%4|p4CS}!QEѻ),Px Nmff ny5kGMIjB?
[OK% _Zn+
@4teS }zXFŞ 5d>"\g&Dl(
&[ k-#먞Ci kGB#'M,vw&ksG}ӫ1Ո4 &[Qfo9|l]_ A?&`bFΏV4(=_bcRh
jt.GvOv)t27A@y+$k 2pJr(wʣR<$D8(GO$ I
p w4$
RpgĦ`1oibX1 )gvU i> "p,y
ҲI= P&.`,?1 KeG ӯ?35kG7|>t'A} fT#w/{6Ҍ݆eM 8J. lX'%={P7 ; ".?rtjN?r z6yGP!ʵ'P6$;S o/bg|
7c#:@>ƑغfIx0AA>aB3>QAT j`R ~-6(^4{*T)`r@ Z1 _a}pZ9㉰l^?~$r |9c*< K>teD NQF3yB%Э&ȫ#(3ڣN uk) ۻ )_lmL|C*~UT-_n
d_7 "{.:ycA?[Զ:&;$; p9 VJ+ G*^Y 9?XJ Q.$Fnx"(XAOUy\蠚CaaZwdm() AdY. wѝQlӒd39nMnJ3q1FY5$(Yxe~L$hXjW 3o60"GZ
i wh;8{^x-1X7cq kYf SQg*#\<]\F"-7'u3cZ6Nm:KG9`m, Yr幪WWcr@=##yw{${@k BHk :͗01>,c&kU
\,5}֘,]XU 5.ds`>~@:yQ| n Wrjmؓ[WV
VhEMQ"0>U Ks`P/#Z,I|s,1g ުo"Z;hfÌHvBhi;{MVpz2g 纋3u_jq#۵T; PjO Ȁ:Ha#d)R7Lw Krz)C$g p)D\3O sűeI0}Ra+ek0 {.ޒcoa_)~[3.Jxk{iJH:j_'bB+ϯ&VBbJ,
AbA@̥wX^!y2-\e%0q8{x_5N_O/Ґk^I剚ĩ!ᴹ8c] f=F^nTi]Vہ
鬌tA2-Fۿa@]bnr2Ù
/' 98g(Ef|7N
CVet1u y!w5C=C?Jz=&x^lja 4j3D )}Hii^gV f\䑙=e DSo3cL
)k/.`5mH#:9:8"3`
V" 0 1UBxby9=%Ns:'L:
lڢf1gI?dȦ ̡ZMwj
"N#G(x*@Ba _]-wD
1j0U{![DD^f
2fhc#o@"梕ӊ Y/<%0D OY:)'ޚ-FqOSԘ* PHkH;<4I$ųz|ˈc*۸Cd̛I
Wm.
ıf+ 4 M]v#(@yպE={<>qmJ[Fv YEeL;%K 7槡,
ʷ9wGЍOY
ꐋʄ܈6 _lne ,1FJ eM_~6.yta65M]I%h+
p.AP4 HpM8d
k^<5 n=, ߂ )`c8Qisez+
r_^d
ەAq+_$o{;3ɿK@,#@w$"\6r!mp~|JW4J8y='[ ݵR6vI~W5:n Lm*gЊ#qmA
;Ǥ [0Kvin"@y|ꐔk;ܧgʠ܋Z(kk~}4#Mg& p0~1HwpyG2ˊEM lFvz?!/`\1aĵ5
i&vJ3Vߩtx 4IlPVhaxx0=mgS]:5ڭ|>'BױW 7**;MJߥGMu?^ }3Q;
\|:Lj.Вե:B#z!˪ UNT $2Fsy?2"%"I(~z{ K%hQf?HWFk& ߿ ZB 9|!\dWZ<3iЯI9># /<`d_yNTU(q +%2q$ևV(+*d$`
C܀j
b*fW; xC8Dڋ7 #bl|О-] rEB+ifmW^QwW6s wvYN[6TS `L c]IfωЋQyx' \lzi
u }w+еV WP"Ç᠄m]2:%tޔt
BVq@,$}t- ϚML,>9`7`PQwﮗx#ౙGPQrvkϹ2VR
ukCM/ J|akm
xą{& 5
wY I$hPFPxP腽d_WTmm
g{y0\TuKM%+],>_*Al%l g9[$P͎(VԢF<E Vg oPl zh91CQ5y68-Z~ilNr4 7&qmޓ_7eFX$ j$/ʁ/VH*؛{ѽW+8Fzl{t"3ÕJƛ]8Ҹ'\nDQ٠: cČ/@GQP/W:C>MuNU*nL +}]8@mg!:iIMEwO0q_x:Uzi /0O+}?>$mrhZd k3f,hZ$#bxKn[#~%PX;n&
O!J]T_> NӈR62>0 vQT
~AwS v{W7s-4fCԛL%~ q%-@^,ϛ X2lT^-Ow2'fI ՔHN,_QkM /ixy|~eTx !B^ A =، rY g`2ToxG&Fs/C 5ySD7t<ιRS|"Z͌Kg,~*3-sZi(a,G1c L
L?5oZ/D|Uy Lpew[o
|8'3%X,6?pBR aݶV߅+FoEbiMd ѥDI18B;?eS{-E$*
ݎzHYF\\&%i ga U&\QeF ZTNmA"d֛ baiwdedh')*4s]
EPe"W?udžmU|ON4,bbf F^Eː@W~dWKk p; 2.dكIbhL4yZrU7Rd&vMtf^ ՜ Kב2?GƦuhp`jHGZYnOMgmJ7z_d $2Zk} ڐ& 8 Tx/_p/n IoEgeYUDB_ ~"w.Ly ASa,lq
3~Xak:Ȗ$t8վݬȴf9.C;8IfR2m}kPi<+KW5kKˉDnyǬBEɱhD:Ⱥ_ꇭEA [Z$9D{Eɔݺ8b|[!qe7
727J G-itnFp 4|U,^#}z-DpE%xAe=gl QaAt;p 3%.&Oj3hLHʺ 6 /2Zty"{*:
B~x60֨S J4" Y2D
zLū'Նn5A-zZ Oر6 \/@!Ib::*KT]ܖ~1T182 + jS#5Л l9;K#R?¤ETpVl }QE36_$:.3uz:(d vNߵLe̞v*r4ys8 C2 Of@ vzx%Z}np"0jJ x)5 ^>O*g`Ϟ#߄Ђ톬o) N_YR?M }Gͦq~&G}R%Nm~G(-X}:kflrkZ;zڇm2j?H:?0&DZ$z;eY' -e R&ƢACjA%
, g~+`&,Vm(9l yR
I?
uؿy 9ڤD\`
$2R1]dBbNұ:;CU5JN TS'sC$_4A
T ;'dU H ؖaGCm\ ĊYS`W9]jKo
2v{)3߬ 7}K'6r
ҐET6,?.!ʂ̶rZptN)Ե nNYiijX3<C>fRiΞ1G:nPQ/AZ/ %Rږ|eM͓+ jyfC4B. =vfJsOXAV mCMhOU\iU9F&iV(MJh8Z_bSfE
5i-T[u~٭>o*dg1T=ʈ{;S\UPԖ,DƸ P\73$ ,G.wH9Pa)xɝ?l?@59lnR\@(eL(5xU"m/(Vt)u>)RM@YQҙ]` Gl!;$ގ yִ{RĆ F
ϓCq C,v*?\ms:)|Zd>s3 mGy:T
A}. G̤ (: 3jzVɌ覿ALSge;#*BٿJ-P}DB`0ﴫZ9p; $3ם|p "IU
IΩZϦԸus:X_5Oj) KB=q?F ue
ZZ"w+=% ;T{[b @Vvt BB)0(1@`8ylVԤ0FHi8X 9Ç Qb}DtBץNS5Q3\ } 1<v<_1RPmN'& G>)s [L6f2"J;zKGٗ^hD+Al
A'HG^wDia2 )QaF\_>3IkQ0a'7.TZΥ}r"<%Wӊߩd\CJٮgѵP<)~
T ] =@:q^}#$ 0yZ3s TTJ6 "^ŸB7 ZP,(0p1Z..~0[ (:DӗVg٭h@1L]zkb s
J-s* i5Q%wX"wR~z$`vM좪9%1c
kTXta\%Qc
YBUF#{d2[Q
h d`m aWTG"Q#Ck%UEM }sd jem P̓8NWi@k.u82.h<ۢZb`{n%7HZ1ź}Az32E43+S-}"E_ܗ SRoc=9-f].IL!Ν9g.F[E&=Lj,4F/'%W '#ۅ$$+\.ۄEyutlR;AU D q
wW7 =CWoV[7 wxԀ.B+s0Ⱦ
ı mШoS$zb+ hrKΠfdLJ,1~җJZߢ1Ķ< 2 jM(N-R> ζ[EY},,ᦋ&,̵3RK1ro}(Rꍩ)o9Õy:P /S¡0*K5_D! ]
S@mBR4ߍp-ҼZQ)<.ay8ĆCfǸI
f՚ɢ/ w OB7L_X9&7w8偼FJ_^bOaxɗϗ.4 b=PeJmi1|+vV=jr `XNg?wd;E&+?Òt-BuJ%bLCC5
/9Ռװ. ϰXfXRi}^ zߺ7A|wUcqJ
>Yv]P!>~묇p9.g^E0+i{MWP~3,.K0`c {qf)x~Ѹ&r#-.~L /K?W -sVg
Jz'`оy7 ^/,+h@:gO{tF?2a W,uj&&DQu gR], BH7=)Kyv)rvSfKͱ`>r Vos4Ĝj\
,r]?k8@O؇hA61:(A>>z2*(HSQz-Y)k!
/ЃDl8E >80T z}D+}hס
_q7sBEAV=b1^/gw0 m h 9D1ډR%p3x>S 3?Xv$
&FU]۰5(ʰ>=ۖ+}eQ'o
Eҩ8R宼lNn7 mRtM,Mof 6_9QWGÓ_GRgÄ2/Hw>6 yzK
'MX2NByGk(&#Ԍ kQ:dIX֢TH& -BB- {/TO)~jS\(x9Q:tFc: $n}vF$)cadQq=
TƗ]db)n=xQ8xqEsQUUy<)YuvX)QZYdbC
|.@Ew@GL"kp
Anxr? 6H堭l
`
&!8/7RpہmyVb =oe4WZ/ױnj^Zd?{}qVB0-- l
1.>$8dOt߱n#L(6e!ͯ | u21V#Gxq֏eD I *OU @IICC#6f[.LyuVv:3jөNȚifve}f恃8
8b5awI6 d( d:=)wYo\L#3}_]2>(cZ.'ߛ
6l 1/)m C+O" Dg=
Q:ԫ ӋO /X::xm:.ǓĹdPMlz(P1&a @ooW$&m՟ 3iX rF0&EWoQ0T/ l! £Ck907F`OIԃO i5N daMcPj[Jp!)ħ&]b6GFѯy!ӾIOzzDQ:ֻGA^:Q`QvR|m/GqoU;uE !B!=Ghu'!t~m
Ƭƪ?ΛA3[ l1([x淹hu0Z{Objk\S͇%N{5UHD_(ߣ H"@m rͳ5r.D+:ηJP%<3v tA lie*zW! A;t:oO3 Y$[oHT3],֝FR/{]x=FNيS Õ)+t,i"<}la[1s,n !~9Rd
h PfCxꉷ 8r" bs @{BYq
̐m}D^@yv[&d?1bd6xFm>|H}
u+{VzD
|ԴF{ JC|8Q: ~gu` XqTK! y4LOɅ.< SkT0 Dzc(~&2жNN lMNs+H |jvEˎo ǟKMfyM0I(lGP6 n~l-~r ;voV hN@'0rJ`ޅlXpMePWDއVGZob}>.{d$2Jب a(qa@ }5 GP ^T絀FJL I}x:ODG+4 0#d-c&cp$w硾BIk TuŊz#?~ȓlɸ~1]Xfk{}m YO2AW= Ȅx*I_$AO `4&Կ XNV6>R- YZX?
)q[4#vz B XBЭlkƞѶEVd,Lc8i.9tkEqwyLqM>yX37'A&$HOmY͟[[QgX;' ߧ"ٱZhyN%$sUI`9p\[p3NpݱLsJ_R.5 F%+n
\ߕNʋ\ JFEb]U'eDft? B.wX>Bq
ai]K4ho5T1d N>e nf0bIq/H ':÷} 8\2Ud~4 3,^9 DZjr zj?&x oMJEI " _z{gkY&~N'mfKƢzSpq[^KLe֪fqB778"OG*w9Nl Y T-GM&%;25 w?N kmMmqDo 1V#9Ɖs* ZDA 'Ew.+AwoĊS
f} f- ]/: X
Ӝ }=1}ؗ}(?7(XE7~& Tt4,{mތzXyFIzJus!)=aqD |&4LRr] z%
w2K ~m0b{ sSwA *2 #oH%Mca֑˨fs5 VsycfRɯ h[d&⺯ A3wjg&ڦyQaOu;B)=ko KVS3E9t8ɽ۽ hV'}+ؑ6
-z
}{Y#9k-S]K+Pg1EPbsy+61 d^ ٤a.,=aA S@B<ۘ=WY"Z'YXnִKvY..1zfmǨSX>[]pv^e2} -ՒtP1N0DգuIu ;^ǂ ?HV/t[k % l^I
"3n{>slXS} 9 sPMڭ}
3 { ]Ӓ< e Hro?JaA.nؾ]{ `uîN8L5XQSBJ%,q\]N;=DcQ%n\/RaW>[5g=!u/ ZԀ{3zz 5vuB>ӌdV^[]|O>adpvw+::(@nÉ+bBҾ MI%U`=!_z$';@֯5D:'l
-X"J}za%4 %H S5"n;
[P?"`A!7_7 qq/9ƀG´D&ݙGFT] nΰ i(Ͽl3^Wɑi JJ/gJc,N>nSKڡsy^zA fK
{"
4N
4\F?Wi@%+A$iB6yڏ̸E CKG]O;@|CA-TI fdXa;.lL.OnrKfDEjnB<'^:8Ȧ;tRX]t/GS" +`NE1E#-wfؒ
p |a'*N 9 ljetf$u/|Mj!Y7+K c4mVLD31vL߶힣B|.^XPtݾ iҗ$0[ܛ6<>nHox%0oG0 h`PgcWx
,j8$%] ]hs
&p>/1doFc98wyz dCL:7)Xu<8BAA/W3dmG "_Fb&(eΣN1)^r̟pʵJ{3 8 \k)e> 7 ?Չ8W/V& ,K!*!K!øo[aӸOeu^
oBvsٮ",TZgB8ݞ$ʋ] "]n4uN#R\cU%=?w;7(C| 0sg9UTj)VR\:U('As3p]Hם@B1 П#5 v\y/"n: (( B_è# !TAK@
P/f גva"F]$D8I+dsEXHaGۀֻ-iӓ
zl+Jl]4%n z9wR%s-XmICFr_ˆZsz(Yؕ;>fAudW7߷s; `X.!D> Cşp nM? ,E^?_LRM%x 2<~$*XH U϶fC
,wg9 joOh K0tqaxpK+SNrO9/ *BӗjXW\/h M ? @=wNk&o7`èʝwPLY݉M&J/D2t0KRܢ1rۀ<~#Fn1#W~mj EP ,E*:#e$4{ch?,{CU"]x
J kḡ7Ϛ8U9/lB0+AMx" `-HO,^͆UE}B=[\CKW4 Q klߥ1B$MƸ ='CVv崋1
A1Ǯ|(A[!$ NOh26JfӮM8X
ф]Ӻ=3G7v]YhoCu FzZ<`v]48u[duACΩ~xpJ YfOdwQY*v NM FRA
_ `C5=X2y6^H7|~WE/,/ 4I> BtTsBT&kM a#J2dcI@UK&Vr6D5@f;fLxzgd!AL7U8ThHΨԥR{I* LK9NO_fCķf<2x^֫f6HEUW tߍ P,ց`Z KlXXCcQM$Nn ;3#@{cp.$ns3>_A4[]l{\:9Wt,s
q{ԮQJwzҁN6+-i0 [ yVL4`&Z/H9?H%m9NIuDͽY=J<9ϱ2Hu=Oia] _cek~eP) Y;pxh@0_UO)9(0u1_4R
Bep7H 9 w/ \',E0L_ "˦ ,E`pG't͜["-H ۇH}.ԣnSgEk f_3335Z4b ӌ Ř Zhv q?GyU \ +H,.l (, Ma߶ZDl/S
/M807K ƇX UU{KQ櫌Ӥ ^R6uY>Fm/Vm3H]o9ƨ> IxO荵qD)9ȕu,4R"/Zur #H^ αB ȮܮpYa*,qT =+~jW]ЏÊ?8PjJ oOa yfd]bwy9͠oP%Ў]ڃZ=LtvI ߃t:#3O`s c`l~.7G'j]"VRwE fyr9W6V%;\kug6$:W"mcr;翛tvz*ISb7)RT!w7pWsT|
:"HgM[qz9
zq W%
8ַ0XQ !hU3NpTH)΄(+i\[$1ۧ 4D>qT pٴw
ff jS@
_(1
q\:T;u
J-e $p4 S(jRa?؝\D++ h6bVMֽ~Lu@G t>1g5 _ i n8e `e%:91ajȮ?SQA j B c:I$,or!zF+kXꤐV_.tC\}*-m,2ϴX% @Y.@@I3uTsR8`Y M)-]ou4aV*7?=,fW *{; c
}ŦD.N5O}G'(l@ejA6錍+䍷RY|jNZ{"*^Olo*zMl 2"pDu{=(-గg+iED e\vl%ţs= er'Ċt Ð3:dY{ހNQAf율'@,G `"6BH( x*R߂ L*)>wXR*1D.1첨GOTTm T
Tcz-@Wsb
;!zΙdLZO
( vj i(C i<ˌPol6) Y; H.hvtWd7rM]0# $T[«́sfAhdY99&:Zƀy^ ;_+tuLEK=/n!Mw%"P xdO*D xP{v
3u/j;Z3J xߐJ & `[h:t5:wgw=-7`hFF/(
,ΣTڻ .W8gBӑWs"ڪB+> q3o1Ԥ9
^0d2wqr/oGP ,O#r_3ּHAaL`y,'B1 ~XSԗ Գ+Vcҽ\ )!>8-/饭ɐXߌࣹEucTPT'BzS^1ËW4xBtf\Ȧ8diP/OI'swc u sM
W3伥yu,zЪdp`A_{9TܧBj9 i2`7)88{2ICPN08iV.$X~k
ӫ KZy]ML]++t ڟ,y1%6
s*+Ҭ.rدӶ/$['{
oP=o+TA}mֽOѝ4!QD/ =ug&3k| yH<{*W0,LT :míQ.`fH{PEYw9~L|A=/QoxTGϠcљ$=vuөpFG
1Ĉ~~Nf:ojEʖx7ښAhxadk{pDd:tY< =PL9hxŀIP?5nXEfWT)טSFʞd ukQ,Z<MX5Ξy mIVg 2,9Wf)tqP/{״ &uu1 H
4z IV)kpwKȨ$@ S
٣eBh P70\*In dJb ܠ酨|Fcm TpPKcv9? ܢNjeW(zZZMG
l>zg O{'
'H-[?)!þ/@@jaڶ}v`⪁.d0'+Ln͚Ц]f Eo. ]
t?^zV*`Κr47
~!c6q
f/tw
YEm.@|3 r u
֖ܚ֯ )Ya}0JgqU≒78#dH; 8Z [ mww*_n4hNI͟3w^ gC>Z(&^{
6|OpkHnȜAGs nPVqƛ7jozڔ4l9K`D*ƣOFNYM[LIk 5PL'N˔~fL,=DlFTcdOX ,/
z _pYx =jF9fLDlS,,4|f " C)|W]=)e
z1z+F"3dz߂r=,Gc o{xMc#%V?@Ӟ&Fl 1iI#w ^3h͋mf`~:8YGƈF `c6գES8؆BH'Q>f[6S e94y2X! ||~<3<9ΘhwPFJtHU> $ǎ5G>Zԟ:c"] fOpnpOAqD 81Txl
%H _&7|dq&Y̱![qy[2Y~V쎄l21y& pY60aAz\ .WrU6m+e
]|"-#RX= ~y"F X'_:
gLqWFli7IX[ "複-rSKav£\t}һ։z'
,qwY8u|4ek^J42
zkQ.֪?txPemj&2N TzjKX/C1PΝ _6 4Al"7dh02D%uٚowapROobb;xF?}lQ#5F?;x~W
TN:h?M,r*6e(
[ʖz:2ʩ<b8|Up)TIN#f!lJ"{}g1_d"y7me4*udM}(M*[QVR,x `s_ڼd}o;qF S$QHVE}E@)i:o{(uvfm
ycDl 1c9a1q>~)X }!7!淚: ;6 ^ՙ}c/vI'A-z% )J[4عMiW?]̨|>3(JPvv}NT6ERRuʎ 6G$TQsƚ\IMNC?^iOaUh-[m;9Ճ$(vw^܈? o ̃CBۍd lَEVV4c2?Rέ@ `Ma쿄Mu}cBsZ]q)l-u! ށ15H^<0U9C1% IFwI2SYS8,]+* A7F?a v{,4ҁ&Bp: { 7ն^
*}7)tc>09tY,Ƒ,f܉Ò)%ו;m(% u=2,iV
gHEK0JΆ({Ӿ(kvkS:lU v ˙ fA r&-9uy 1W?߈hI̟ z`w#"-m_ :>wi fKd ئW0Q1Ok8/h4&
k`(ZU#e`u|aJ(, yӈF?o@6n }tANkYT&lOEXT'N=;r#ؒѺ8ݯUz ?2N'͕h3
birD㻌fJ-ͺa!?rR^vم]剐c \ԘtvIeN)̺E
*2 g ÿM/թ4 bR c=EmM_j}pELaz+~&~dW78 ,| - Dx=vk Cqpi!*$p.8y[?) bn vhGsTh `'V7g }]4l\K(j7V:+?1
!HX)~NM90.gڙʹ W~%v)zt: BtU e0ϣ5S ֡G.Nl0l{0NXb*?t%5eGfS>:iKjfeӭCե"D)c a {A26Owåsr t#/Ka_%DY\FT9ۦ6A Dq"$7t1Մ.@ojy=KѬ1 5Co~QKpFЌS-*a,sJ,
dmj'ak
8rcR=^HbK,Tx BA?V1n
;K;AG92)Ӧ #4nT2G# BEMqƸ;e{t3y0 7ٖ
?IF@a #8#VNͦ;^ '3wAD-6尚E^JD]uHNuV PZ*TTaӪQDȂN= fCOx"eb!k?goP x1tzV[Q;
tL Ik2Z0$
^{CL-#8䖌bIff;$J""玒tT1T|4~ĥרd|(>z;:>HJo
^w<7
` .ey#sZ Gظ U87L&S{
KޓѨ@KRj743! sևѩY Uhϡ aEӊ!m9ĿjW˱!4 :U c[yDwh4pt 6c~+u#KOs ꂮ [H N`Â=v@CZlc>T̅xpKv%8t8$C(AP8~q0G42@ȅ30C:WC3-Xz
\A uA~US\`C5[a2ߝ
CAXou*.(
2etw\rx2
,u?Di]%< _D.S
.6kѓY:fۍظ˅$4퍝IR!0iB ` Qn+3vXXiӣ0Y䷖usrP NJO>c tPQ2x+WPK3JbF|%{y\s1~WNoU.ۊ(Y퇞ȟoEzh
ԝUւ/ΰJ'>&2XU`t9;
~AUxgdڄQ }cԫ@"EYsۗ͵` ,|m/Dz#RM@YΊ NHz*&ZOd'sR eB͔8E""Bҿi,:c 3RG;k
MN(X
ιe-EOd"f
nylM7,# )h#mbM@7ފfF[ZU+m#@7Ӂ+ZP ]y{[?{z=a:5dSs'hʼmt$#uس; M:8od=K%3Ӷ KV -vTě CjN
z_sI,٬7<Qbݞ1]n3 `ٻ_}~ H$ZRW`7n,Cokz.=ak9עW G:#CF\~7ACF2Ѥ8 `Wz`1 J_ueCKX;mGڵX_Ǚ$ vYmѫkt '$h>\QoߋV2$E2+*Bceuj;oB [i.$6k)2!jҪG +&z8t=]YW z]<&-noxTב1>@Qϰ&|~Q@c$[ +!v昀>C8.R vRHmk o6qH
K ;ޜz{ 1ja`.ElrMCg7XY
A -!&cNKrج7֦=.j }ܴ\S|ߪ Մ%TZ ԑ1Y EM
P[0jUھ.r0n9o;Ƒj(ړ5l;} Ą N:tΛO-)W
}ٚ7 Դiʺ uK! ﺍFRl8 [ߋftcI3DfxIȘ`L? U]y
#&K`>xlbZ1 c4V#
7nZ\_l/d.b:/ Z\V!Q;U J[Z{ŊEa8]; ƢD j l3/7qPrsaQz^
m8eV^GU^F~rٛeqEi]l-6ÃA ;o+cG-˗* {~7Qg&]F-^< *H!6]ML.2Rme`EJÖɻyt=E ɒ~@I(ᨄUex kkDãPlC9 oT?a~zh7
^s$h~m O Α u]]Hjj%1-:DWkv!
" U[P[W(ek2pŎJ5 ?Ђ{z(
I^n3.\fH>`i
,?
m+qkhC H5%=v3j9)PkgUeJ4w%T}hY*H'F x4 (QRkb/\]`P5h->SW7ӓ`76Wڃ
ľQ岛
N j<G u.Mq/bY z]/|ۥ3 gͲ0J7WE ʓþԋݙ5 Og3
jc f r߈le{.]a͖ da5GsQċ6R Fe9RZpO R 9P\+HL#Ѐ7O9gN'OBGPeF:|$ʵ# Zfe0;'.$GaQUq"e
eJ ޛf._*#y̥*Vf{cX\WR/C:ڻIҸ3>80ĕo gϩ>,7jQ&U
(7
D4"J(J5#d+fX@0P!u2 7(Zl
zWET /B_[.,ZhëZۆDMp{kj{<% iN'W/W[:jfm^:֥VU@z-Z~rYӖwB$P"{Fx\۲(|e#̈́ܗb 4o EjlBTIh0%sr PE6 Kn98FwƫS׃lq?P7LPc]-ߋxpG~d&PuG5&?I\籤 > )e=!$udMwDyv#.AU`\&'{NV hG6TIO~`k=-qz| ".|5ά:r[`p PAl☏iEJ +a:t[[ _OREAJݴqU4,c16 k5 &VڰkQw/܇^TʝN"d خ둠g'ҤR$<ri*a?#R#}wGɺ
_y0?NB9ϭ%!|`Sx1W *O
MP}+ou>O95*dE\"%`J rDPg4'l#3=¸^?ki#T1\drl (@> ȼ~-xjÿh R 5UbLw |q\ @3 &PwP&|dS{钴/{XNWKD!
,/_+b<u3Tb.eNHL um^+vmuxa}j ѷPg\0OGd>x}렺tL Э
?i 5L,1%,o-w<$]*AOR3R%fc O/N[V Uеf\\U.T vIS}$$2-R)t=%R 2#;0s9=
y4( , p?IBwmʚs6Oe]Ai_j4!3/Ĉ ,%tF3 !߿) e%O|4:xi7Wբ-=S qt)+Hb<2 ~BQU{FrTm?~6U>'n (be!ltDobw] 0rQ4/wGMŶ*EWS4q 3+մ_@RσOg<$p*5q~y '-89s
z 1 P6Zj',#yYX:t\(ϭ',, JVeMHpn[ C?~{w$ G #4 woBڽ(NdeqZP0.}/c 1{ Ku qBf$>_+IT Xl*
A]N
b"S*改2z)9Ȫ Gu =:%iig!ݓF!Yh`kҭ@|}\]MD:Om+>Lj5PT.\/>NOrmQ x98~ulPZm2r4?sJ֖e]aSKvÿwߩ l,M ,XI56 t!E|ѥ#c {¶A =hT:>KSe0@h^*.fLWG-̨t`S:, lϥ׆cR`Щٶ ( \lZ:(fsoop`a_Z )TBϿ=Pd4]gѷCo^bZ+VOLM予CҬm<'
r _$u&՝ppu) }ik az K#.FhQ8 M̡qeԯa ނ)ecF
v.vy?ۍDD]6XvyWkJ 4Cqoܷ穱!欳34bU8y%++zD*z[ B~1覆c7& 4g#]t4VDS#vP{")uI%G΅J<ږ~|LDDB~T">|a+Cl RdرEk c џ0,b[LUV
OTEp?s-OD?Eqߖ*߮gCei.
3΄|`K8[pQLM#]x%'`(!
Q8Fa[.Z^8[ 0ǥكt85 (&xpu4%E*v s)k}'8r&OOġ멧s>11BC#['J{oL5F3_|%)Nf拴x^T)[{bQi18`"5[ߓh4_̠/9zTM:,RPN?,e 6hÏMg2-m0ؖgDT5 vhCBm iI^`5Υ.6)D]gԥT7 >C
a&mѐA\&zi>0A]uوТyi}/.hцǭ31=A Fz A p8Kc \@AjQ*nWNV.U+{J<ܮ~QK}2u;zTޖInt}I M13nO#bhƼ]' +aq
lWET y-e henΖ84mKլT̕ƁΫ g8*lE -+6m
(n
Yfx௵"V͘u\D
糮 | ;ja7fHڢm ¦ڳKv(e
n(@xۡ _f~Z3VT \"#ECT9y*bI槻 pW0HKfeCs:@ & ~Z1ə-ռ{8Hߍ硕=\pS 6B/ ,: ,9H %IM b>+1C,Rr+V QcrZJ % Wjq"[$19H(mlh3H$:sQ*f0@&e눃#4+ LW 9zWį\IzOw=x`i.^gq[PeFj[3TE\37~Vi$ruu߹LV g7+9$ YZcYlܤv~{R[n7at#1N0 QX[a)J [#@%"w:0*I&kV $~@Bu^_Wl}cdRk]|8U& cj7RldV/:I81p`_ 73@uYt CJG/u xÜ 5.7I-|ן濪ַV|EݳId/29hCGp2EW| \_4vQ^GJssyp[+ Лz3ca y'&_395"ސlVgoh$g!!7mzCUʣ8穿ZGK~m6#,t#͏U\IW
e o٧`)6l).Zer0kC R4E ޛ_);^Ia.袅Io-ĺĎQccan E6g*i4p^ъ(w[ѦX4%D,|fhU>]
I}=n`3*hCZ}cי֢֦vVvMYgqĦP`e@ɋWɏ[7h۽&teo9TXL8Ev6}#Pj/䄀^: ɀޤzt_l\.e3-HyPLf#Tz5<@0G20 X]HBH1%o1ݐr0=> U_ֱnU>݇WQCP堠2+$["zzD SnL}{[A6NĆaHtyI=iJ-V*|YݬCe⨩%R=$:|`/#eU/_.q ⒐:Td^m\¡#+~k`3qoX# D M
M5.H1k@?B0P1k FU'Co>ޫFBد#wQ O\]/St{L@YOf {w.;RN6AE[=oɘDNSZCQp_ 58Le!ۜ?{
5[K֓${yz}(m$o
B#DcMM*73U[} cϔa@
B0zW&L^S0`/,:Zp/hӬŴ^Y9ldz_-tP/N,Dlv*:i˸ڸr.
]/ia.W7.Ω | ](kW&niR]uq:s{e5j>`oi1mWy^=T*1YȌfwA
[GAmS`_Yw ,
E(H;$pF9wC Q^+-XM iW .}ߎD;bw6!J, BR13\ri\m' tVR&Y5b{uiPΟKa&,~-}AgusU CѲDQsɓ 7gE y# zº4T x9Dw?+ (Bs_% D| huLΓǶ[.WjB Lu`D$ a_)M5ɿŸmkhӇ(_".$OBL^0Q2]:x}rC>Z#.I]5X(μ; ǂ'7C;1Gpq&>\ 4슋s=ODD E̳/H%O$C1T=QMڇ5i[ Cwp: @W %Pyةaǎf")Rq͚z\4 6V;EX@%~AV A{G(:xY( d Q
I %ԧBn]e?MP$DX8G5wnd/Ǹx&8 KZ^,DymJʳw qD6] 3S%Sor:D BskbA(ݗ
DL d-6kj;Iu Lֻ̟dA+"r[ or-a*Ϯ*5pH[ qja
od/=d|;) 7ܘ~`M- + of%D+ǩ6P',r#h jW@ꗿK/Di̚G<[ƴuG:\*q<$UtQQߠEq4|6r
Z۵CX>qc5lYH6#/+TA$aݽژsE{xHJ $-: ϨS ڛ xD4%J.8O~n7]#9r \`HFx8uw
%yJ^`M
l:DIٷz/:Ѯ`ڐ[ҽ9χKZf[!T6RŠYU0i9_齺O)rVGGD M+Rv.s;[ DP-U&ލ#[8]RkżFp4ZӰE1 Uk`G
(bD< v倛=IZmɡV]Ӓؙ,bܯA "}ÜtRs Ie $2(SvGi Mf+3N.oK [џ%?H_5L a&a_oG>~Al'^d*$ڟ8R;`^;BMw<~deyn&z_d#[lKxk'QӶKp8w @@~E_
ܺ6G"zbl_wGAۈ1`?BgCOa3l=}TKUOKy 5Ԅ%g`tӼ9#yxטV n ')g=D'mFdI6TG}vG}w!<CX-}V/MM3|'mk?"K{(+.EX\8U*7DŸnuA ͗S "ؒZ{?Hg5. `j#] AٶG?v/f67iC($7$_c$ίf!(+ɠJG2ȟXo%&(osSܰ~sYfc }˒Xx_#qVpvwfgp=W,u[;pǧݱHvs I'8WgIKS8|zM$h(d ɁNJFHn::L4 )0PfL%>vP2b~)"Uh:wrpZ)TAN թ-ZM8 l'Z`kxL J^ oqH^6>3 %
ayscH <$WN6pL)j'v -M#
gIOѱFXa.
Wʣt\^HZDc c5WGҳ/wuh:ەDo>OɅTDzS療Z(ҀM1p#f\yϹ1Jk{B_*cl̋c0 G6.X'Tǰ>Y
%BPϬz&ͰEY*e.+8į.JOlVҐ$:KK,Ԟۼ$H YFkd &3yT2=*lzz: [uBX]4 ) (3C#y Sbb~ e$y I@қjy >3t*Yt"u"T9r2Π5$ 3GㇳO>yN5 Yzp$ İu;-XUM
Z"Y
c-GI9a=?֘ѵyT 5!22*+v<Ќ(9v;m'K#{ԝ q&VQEqK~A9twM֣"(o'X[{tlqA_;Qe?
oznV 2 rn&} IB!'(2t}1QhcfI ۖW3Зh7En FFTlvPsu|ʂޥ%`QtB=ZEV |Ulx&rwUm L})fJB'>2Ι!Y(AX#n:k@=YX}kmȢ Ы pc19?fE3 7w=Eݲ o_C #a|Mrxj}nw
)$`zM~, k v:A4c %-{$p!nz`)O@-yǂ_GLJwǰB[ : g/_{/5EQʰ="8ߢ'1T3(ݱ& hJ!"uVɭ{O{ެ,#mC-&z& {moW+Z5'v[ HƻCliz TRd ;8U|kGYԿeͨ[ĵk˩1*<~P%Eږ3g\m ^d߳YwyT0(
r ޞB"_S{#72{Ms*i s"]ٛMm<S[m@)ס̕5HROԕΖR h`Ac~l#kʾ qKPX
{:L
JisA\a$~8ƣ˵\S Qv T2̣H)`kr5kȜJbwt)ĵ>~ѹ͏NB tR HSZkhOz+IP(zP[db_ ylIMHJ7,`4j Qq;R%:j1SIٯ0$i &!cu"Q*~\! 5 !ޤ;OWҢ1GܛqBv
lᘳ93"bd>'2C=s L,k#Y$pXf^UZwh50|H-F@) %Z:` mEïPKeqrҭAOk;[ |ѿBe $MQ@,56e
-q__tyX*4J]Iӎ]<6%"[_D
'+KzGڨ:*_-]AޏN_ʏSjȚLbD7&zt:Yy RtΓ/i@ hL9VZم8I'ئ 9fŜqD-Ybh\l$5
O^ߚ0Ʌt JVohJZ7D >Ku N.} # G9$A 2Cz?t3|uOSS
Y˝E'hGZ%b[zGJk;( Pg0ҭ?m1>]p_?CEBHCXU=#۬#F* +e80c| DrhVo[+̑znГI+p?-99C Z=~ pveWRtMC<$; Cc~5~
"OfӒ66WI 0 WvoTS]\ U?ȃX =t Wo !J$7` }&\A|n'"N$>B!Z{{(N*M{ HAߺ` td YJ>̭W[3|ύ8S?e#}L7E!0G;)Hn
r,g@*fWӋiCHLΩӦp< H'mp vuinlC ƪcm=3חľ ͲaL؝8:^%["I^ E!>SOb^EC/oNUEC]Mߺou]=\i
3_O1o
_(Bt x;|qeWRm]z]%AȊz0Y# J)ْj1]hRt gyR\1?ut?$0k6ҒS^b?0ۣ<5?. (K | do]kdOκti
?Ic=; c_&jB GPKDMLq 㣔N[v٫a}
ui^jH\kڜK5?/1p7( "r=)g2#+(R5QmUп by%.K| SϣkWQu« !n! g>ByXDӅjc+9CS{Ǹ-E3Ȗ=b6C$C6Ykyر]UӮ%hVe,%Q~rĐi; [&!9Ał;l hcMgXH Gp[P`3X8`yNˑĥP@ -ƒR.g~H{X`HGHn,w8Uf tܩ]2JCc .ЌbG3L4Y0R'(5~WM|ȧ(X|JJ 2-mZDEbyzzOҚJiz6
I+oCY3xBJ`''^/ #)SЀ
[w=Dx0ߙI
|G3܂S0
2HF4U3jhtJKފƱz6k*oV$ H謀p`4WAyڠ0c| fn4VS< 4_%jf' W#%;"7Rd-7hCN0huF_
%K T, b`AUNcغ>jcvxMb_uc|^L RE 1
|V*3?gLafqE&s*KeݦDV.M_KI#b9Ț~K#Y
YL:_mj0l" 2YYJSV
ܺoNWVy.(T k <ёx5ؾxQe^8 =Je
|e"k^'ށ}H6:Ab`]6Iv]WCWٽ9vԠU2db$G0D% TER]3%j NSs8 {qm`&7h}tIlT0 R$b1zT7"
ġ丈;45Ɂ1Xqi
f>к<!zۭ}RXovxw#-ãܬ>T;?2t7Koך ľ5P'}>13}k iD((D暘M]z B7t &h3} ~eޗ$+4M 5(ۥnˋh
ELq "2[ůa E;S2H;[u
wՑJ j`!7;myTgMV8E% ^s6k';6NhkIBƂr[{yp4imJN @× v(^Y*,m >% 0ݨivUUki@םhp ͧOGM+\C$nmc{$tȯV.~w@[PITٲ @Ş8$8yٛ0X1#H4~|%S 85> ? s [юӎ㉽36".j@a7tDK`hd_rQK "z m':Tـ^6%\ %rly::en-X3W4SpW6lg]PkW?˨e6bʯs6ۃr"j'& $Zys#{{ \ z :rM&?P-[Zd;
VjD =?fӱRz'c6DyY9O7 ~tbVHUmዪO$]Vh窙V3
vBy}6zdXYJz=տ=M=w29$\Ok
=~ (q]6p[hIP[M;Wrz50V ' "pZ~Ҡ~ݩIͷUF̾'r 2T,UkP9XˆL>!2 Rw*b7n( Frsa\|%K3iCY7ј3op84hó.B}%hj "ˀL1sZۇ G (Y:rC|F"}Q&jsKL6ED\:%y=k_9Ar563 xXz`Gs>R%HLg[ h?1-.gcC}BB.1$c~@!a+=#G/." 2qF bli[ww"CApy- m<C Pټ;_u,C
zf{ܸ[-9A9Nڦ1l'ձC 1 +M V: g0GǬ)֘F˱&|.M ~}0 I@ךqx/|עn-ETڵo/j:; $ ̔C2z8Izw8Z_?nyr CwPܟڴ==V+ljsJZs1 Q
.]sedD* #/\x~ Y1@X'63
ţ]*@!0< `Gn!jF lMH5*.a4#,(e9'T, t%P6P [F|tb0_Vg9v6D|ns(>>J ޥ{(W2W )#AdR嗥6 rl^w-T|Q _12Np-|3KZO6
Jm־wdNo)f P˄pC r4vWDN2Ne吥օ0puq ob R;?S}a7fLjes
6 JKV^hAFUƋ$
;JhS$#5)KK`2 Nꋩd-L5ܢ27.a(89ZYN 7a>t#FΔx
2T)0(-9)Q6lHu_L*=r>@ Ca%~V4N] - GQf=M.B,DQ Jky=Fgk c] hlEGͮ1qL])) Ӆ74}\cZ_qiST O{=|vŊquq9P@hD0a1RVE*>'VI'gdc m7zRx3 ~gA ɩ)hWpTVS#W&%jEIТ-' ֎h̺R˗-vpSn\C7C_ѕz㔆u!Cb.!t{]-_ϤN_}ģ'Vq6T J(s%[Tx$NНn?u;Q] p /r2ud V`kAD>dO|cJK1e$I x)qv4
NcT'r<#uBd7Q"ꃘtV~Nr5?t"\,l|{r%-Cf1
KG}mݖoK=xɇ3` V+oS G2W /'LxE_R*V3S99] @
. CDž,Y9'7f1쫌{N_iStOwZf
o4I
igt: Z V&U ;kn
!7(}>=GQQk\=-x"_75w0bXca3xI/Lc x%:,[N,E :agĺa5APԗ?,ubg}Zc!uH5טO6l5`38>ȁFLՊ=#S?m JO,LB]ӄ@Z % )&xM:_ < s.-bڧYԹg6ߙmlMd O&# Y<|AaGP1@v
XZM b=_!{$pn7Q^mʐA>Pr틎`y89LՎ !_<2f+
.Vq lJÈE ٔKm2kr\1 <9f>7 d$Ou1}
7HOVlU oz 3l
L<
\5^FNtǟm^|/>"҇ nPrI5\9i",3P8C /Z?-n~,IhpC&xKvW*@OMU>\GRokR_R剽WJo-\qۙ*;&m|5 ! k | c[PԖMb"F.]foIracMP'b HnjrF7VH ,{[#cKy 5OqeP; u" TflcW2ΰד\LTӰL85m2 +JlK+DzN4'߆Fh8q Wvу'"3=&c~O
V &̋l6,7,˄{" %àVv痥/dcԢ K¾nA}@F5-[sWl 啨ze y)- TMe LrLA
j;Jn7TFQխWY
W'4S[mhXa#Us}HH3mqoǵ14jnKpN{\UH5g .yĒ&h Y ΦL~"k,.-ۭu+q/0C
faإk xmu](|Cm=' *#^|>V5wlMש*NN(mYx`L
d@2T5:xV0 Aupl0 ,MQ:BD.QiG/5eZS@mQA ,;)oK i@h o:-cMy~
ͬ֫Quܲ97aw`Z
Pdn|֩\|7wA
%BlIru!d*z^.]ao O42H%2Vy%d , ̇qbAUZy?]OkrqaGe>nMv Qk٥W
px/ g^ϐP jΤ~;;IfuI!Cp9*,\ێ$#z pxKeAH\$ εe 2
&5Dp&Ғ3 eR? dT5[w ʼnHT8U(73g? XM;0 +`>Pdi<&' Ҭë~%Dyw1VLՆIw{x&҈GkO @v"ߧ$ <8s 5 c _Œn3 kfȚ]K<@u1Jz4=Ԃ(%Gn2;0qEy} 9+!?^#_ c} A0 4Rh4f/y e% `v <4rVG pt ek pa; uzw캡1ȗ]r~E7 t˴Q- &5ghT@D1{ ~VhKk'@(Pz9Ivyf;O.=1lE}>qo!ʕsHz4
sg msd'=X,@b7K8~gw@[a7*upju>p'Q"k1oPr鈂Dx '. *NiL$.0 Wyb5MrG9b DPX o\i !. knloKb--X EO_ ]0z'\aʝ 28?ZhG M7JԿQW ԄؽN?RXl-0tgT(¸F-^1h[:Sk3u M
2"iT8w LejA?i`y#S\m6A .[G> yTy8則"i<vg6X w l ~Ά
Ŋn>Gnt]N-%ٔ#z%]{'<\oS%:N(,Z8M;-'aC>`|@6|tbw +۷UiThf;v
8* Z3VF; V"+0hB|}俐+=Vv!L_!#GPN |#Fg%>gM 'z1@RV(K
{q?EF#^ 9i xI7]ŸcA*+m#AEh[#|T*VkW%; xHwΖ^oc+SQUk.z[i3M&bX
Wcw!B걻4ʱ) NTFmYI% IK)'H`3 wR >̼Xzy RuC
WaVB0tN!t4f.~ٳ]E:7R8
[G۷-h
Y=|1<][D-e8WhO >:,@5]<}_J4K $B
a`U ;$pbӜ:9{cm1<G%syLI0C֒؝E]SmDFRN[Qi UE\'1ytwvCB{HpC'
u(bZ*'ݰN
{0̳źY(_ْ;rDةWm%I笆NK[1)Yڣ pܙzd3n,iF2oqizsf!v":`Yj'Y#O ؙ=tC #L xOX UK w\$ 훭SX
EH7ɻi㳻 U2,GkBB!jmK
3zyeY;pvRm K K(d,VFޮo\вC%b^T{A ~]Y~PUE2@KyQ4b.C/ F&^)aPgz+8v ]VًR_+ ecH# V<M,,4%qo4:#ݸlb!bi߫|-:Gpx <
LP)^Y3;R=$ '.k x@ ]Deq+Dغ%.Xu2j4zRz#}Ofq1 ЖaHpKֿKX{F#~@8Y( ;{|lfBC__i;gAP@{ ViMca]YH3`@ 0 lNN<4Cw҆|^|yJ"p cȁ`(
EVu+0 VRЖ[8 ,a7t3!SYLJ/~Ym%H|5N{&چk1ڜ!?xvBTy%/p.0uOWB.&L9:,_y l+dM1ǰ
} 5 sC X^Z>H> *{xd֡& iZsw ^Di?)NA9LؽSŞyu.}aj5P#s ʆfюv{@/ r/
fjCT)f4ZjwJ1&PE[e {K]DO儴cxP3UX N"扗#"pIx [rmLڒ}S?mͼOp)ۏ@ 4s g'_Иfz3QG`^Qۆ|gpTީs;y $ցPfZ}1n;b+)ݳC=x
b㶊+5]J{k#Q?,ZadW7M<ؖ l,/R^*鸈T
Z. &#rg7KJe*XQ`CŸgށ=Abͧ=PK#SMD2uj2<7OQ#pو"ץ(_o1Mx
D-d?[|&q]]hfYNnCַ̄E~Zտ6TJ#gn֘b 5k ֛!_Pn21o_Y;$$7e̱I㐩5a Ժ c},9 (g
Z-,3yF=˜\Cc
)SXç%RB'aA0)z[MS-w$m=}z~n@'K4O
MS>T
R=/ f1P
%w6QP-s<ђq݀:%=1/جuHl6l= ZjI2c |8%|I>QCP{^7NLhÙ]vtt-Kյ7 xRĆo$L>~ \\`E d3@
꽼4-e >rl}b[x00c9Jٷ_`+q@THYk 6ʪϞW\ [/6MAS%SU|er/[>r0>m>JWpQqU*+lȫ a7VlF4W>鎵%guy U4FBbŗ0"3y; ;V/9U)Y4»6o.~pST-
s_ > nu\(,J `k>ɔyҠ+X$u|z9L#u'+|~Ƿd [
NOr"&C)N&1fI2C};6FB| /%XkjF߹`OZ 0ѰGycGsọkSX gj{k5C{ ]1<҉yQdB
=ثZ1Yh $wCU SI\;{
хxMp:y% qw.e Vu蹒1k @a;l W Ly: sKH~j Fɩ54)
\ uCS.A[ YbEJa0bN*sVtM }~Bǥf.Ś=@S{
漮uU~"dgMD{..g;FyOsx ]Kjri
(u1
{~y#4KMj3_Gt[+xO b`A}{T 簍@ڈ#ݲ_]gߣ[]V&ӑ}*{*9:r14MD-jDe,^/"עK w ZHjIek"c
7 [c9th"dk BD9:"ѓ$dlm](
s\'6ʆ ҠJ 88)(
e4M\Ũ0L- tbK !=c
֬.e<Dѝ6+?8_] 2\ XOM e:wV8 ՜Õ 'mm[?G͂s(o]CYPNZy++i8Qak9
QB4yXBbJFu!Ezq po7A>ނ%mxxh~ z3hg1 L7N"siGa*Rln h(^v'_d'!Y)B9˿[ydj(N 67
i0H(~~<{$˕z ۪
M t 8 ?e I<WQȜQ xS7uV&K 2e` n#{1u:uڿ}6j&R64?w#pwRG(ɔ/6I *{mQP g[1W,#_h+Gi^+Nfuٰ vYN
$L>dpgWX@ G"
(lm$%:,Q=,t
&ĽmJ\]eC70o
iEQʡ~i}76$cV&d։8}9q^M 0t 'i߅R c' ȉ7=d=aU)W%šx*9?qnL[ sSRd}T@[ Ƈ gg YQ2$z~vcSԪ |"Qx;fFKĆn;.;Tߙ֒꾚 \B$qɡ@pꛢd$
.fdj UPü4g||@! 9 9pUYd5:qE _E;4y^>N$6\ k[['%m@O VU)k[{-P1b|e9r>UZRѪ6k2=(VxAP"gTR5aٔާ35 Z49M*Û,4l˕3%dJ
|Q\O<| Ԓ>]?/0PR1g/B^Sd51T'v4E2O
JUU-"';lr*¥vEfns"k,drYq7+r~t.A, O. =H 9&⎅3mqؠ~Vrj ?ʙmprÖoPޤ2ALRW ;Ia QY8 Ҡz)&[R^*vЂ[{zrPm @̵4+L]JIM5qf MEhnSɉΛgˮ}E0 t L &U˰ ްy*_d∿A
tSl]RK˂ $js23XG
;_죾@>jZK|ꮎ;6N̪#Ur$Bꢳ
x%lz̞'7/ T_?% @~nQ?֩iAgUڃrL6tOT5Q 5ˑ/ƅ\+#< DL:5I} =| 5c){ YԤD
u"2?Fn#U+`k oX5"wa^ ֫}_>lvK*}X+|k& ӫ).]S_b~L]b|ӣIMz;#? th5RUe;1YXk'M
<]KOJ Zi}Yn|Rؕd wT2[yPOI=zX 34<5VB6 vh YW'},LZ ]XY>r^WVMJ'7Bp'2АXLk| ll`3Nſ935LX-5\~܄xmJ9ySZfkU?!g+Q
J4ɸ | qs S@,%::bz[t ^1(ʹCyr y\`Oy+ AU.?ʌ!,)eeXFLvc? w9f7%l#sKB]pB Mv)@&W 61
"I*(j]YJ|uvdg@N{_3d+}C\7yVUeZwp \$ԃ!)H^9 FX?93VvI 4D#0u_ _u Qc-cń*ϛ8TKzWFZ"0,%鵜J3kρˢa%^اDxz-Z
sY-hekXNW ݣ'A$
0/x 7 9vf M%AX*cMg2B0j#' ^ ZdH ?'ku = : "Y ;O hn I)Qq]0RH4H{;- ue;a]no5d n3>ⵋxgC; Ti=g{J53LՏc{u햎jT9~=3)J^Ҁd Up?H¿I H8 p= UB7eO/~7p%^L3LE y5Q}sae2oz0J#k:A4 oF_EN.嵠4O:E;7 ?mCZ}4-|P-e3 >*5jZ~q$K68kdWfl_ EsgX$y)z[͍nQÙB }!2MWӊw) %u|<35lHR_`",ϭƸme} Iso6 (ӂUPaP|=D $2ڥy>&۳U(˄QIğbȁwrsQʕbX
RɄwVt8I IY쭚WMPJ5YW >g§qnWe,-@ b muau:箇$x\9f8Y!.6D\t%
Ƴ!N i \i5}e?(v>+kKJ#ιӮ_#P>F'{M`lwhm }nkӘ.N66&>^UCe/YbZznT^A);.RߣͲtq;Nӻy\YJdΝ1U5zP`9!LTYK"g
MH肃iu!?H:h6n?"\>q ݑeCS;`f,fW$SkʰGJf nl78HvF UɦCUS"=M|Ɖ3eqCWuO-t&jaё '>hp;';y,Hpag9¿1}7L3=_Z #A `^Ҹ]mHcd 8/ Wi p~adž\'燕 XAryr| +7-ax}<6BH|; wi0x a}-F&*c| wXJ
T/5مb
m35F cQ,ZtҒ
g3~x@5 :qL0ہh24Š&xA;\HROyI/*se6N3xP9 &1:`ޖ JH%~]$½=o"Tu-_CCWgT:qP`7z ( :U}W mo2,YW
(<ҊH#Ap;TSq/ F(h^gDkl#QV="b07CF{am Ɩ
% A>L4ؖ"'
M<X&'1TLCED
.oJ}l Sn_3];U7Q/Mhvn4K}[
QVO-L]-j'NUA X~} P.LJ8v2 As ?i$~ CW(
kghF(cs"( mP/jT)*"2vm`I܊Gg+L
4~O ҲSHA?-f6BI !^.B3 O [C9*iκս8[(Ma߱ՠ.x_△h}T ZqZ!fq~ENDFJ̌A bZ<0ZFm } ܙjlTxAUoKt@\aG= e>fK u?ڪ` b.9Jb,aFΫe3p3 " oD% ~,5IQ H~ώuң2bI(s
KS:t~T`W|j;lVdO#iK<NQӡ@J$մj}}Ň>S1Mș\
6cd#U"$^zIH]uy]D="K//P.+ 9kR 3e!Z<TTz}/{B^0)^Ԉ7AܒNB{qL!z`:\05OG 7 ~y&'@K X |@ԯek'ojQ'pnK@c"q1{z*B롱0WɄ.p>oq@n.#oq@;r1: ڻ`_hp{2!,3v>OtzTM Wf8X#q; S!K"r!6G U/}2 dNb5jwU82`ExI"~~hLą
JzЃƇEk`ŮCKhxgJf7n=K|>f-ec aY iY3.iXGU5mODfTmޡ,!9 xbh
%6nxK7
R|Y`~̓u%G ;(X0^yPCkkCwB UZY[ts'VcF/+86q.huyS~<6?/ȳpѶ́i" W1lA(y:=tTjYp&j%$Bgt(I,G[/.l^ t5)!'9B (*T ~.4aN5)A-@;~idlnz!Ձ;w9=W簳w c_i?`n"E6t}9JFLK8HؿEZ1`Gخ!厾Tt:H.,_Hm gM0Tycoy;K) c: "*XSf4 )K@ lLs7jOm$ _`R6ܣ(жײǗXNre l5']g Ck}K$be P!
.}|kŁ ;)ozNARc2o(F>R. /3f ~ {x)yr[Yav\Pwu[WyD ?Z& fLutJ$Q\HQSUF8]vL=qi*L #POf# DV98[$wFmCfwZ_MoNthdW2v~mq+>(9[cG1ѧgUL!zDx.9 i
h
Oxo:IZDН0d"
IXҦNMSGOO}zٮ\wFex]&NT &0g?QF{2L 8ȶ/ GB w Q"lλҞ+"1*̬KDJu&~m\fz.Ȳ&@ZLST]ʚnЁq_Fb6
meZur:(:MgHl 'MOע
~[hc d՚F((<ۇVDJaC
4,%Cߪt?us)뤒'ϧ{x1w -@I(%
{2vgxOE2 X4R=]ͭ$}VU11ȕHg+%FD
SL07-Sך[^rTs+@&/yvḶOw+*C2NI8LC](8~ceC&'ndybVQ5s&]mܤ%6kY Re йP5)eiipu,ޚ 5 evR@E~"{!tRR3DG+ r }eħ vV4 S/K@j"[PoM/': %I?HfiQU,Ek_ С<<7M\Ez k5w"͛05˟|!'kVkBukqh)u LmC`Ψp Ca.bʻsmK1 056[3aKd,-ɲ5n"8-QMVE0`ftӄ"N=-ǖȖ*Mmq½sRBcHC?v<P գ&E&Z\+9У F GUw諛VB TV=F$o3.Ufg%'co?cWȢ`|&jHcF}'- 8¨J0|,S4[hHrí$qb:#[I<6?I8݄L="uu O tW2MK :f$[",Xg$r i2C_lBV=Ј>4*$&ATb4^O3b\gj&T/ woJd2s^\$>K {# u\SհX^,+>Tj u4%Hf ݡ
_ڃv/(5S2M}wyōNJ6אGuߏyߎl,8ofK v1,g
dYsm?
$ L
>x[,Wۯ4 ^RTF
˶ŀ
)/fR?W5z`ݙ,R8m7hҪ
f>$(/7
xJQ~qVR)ߡ_L~ى(g^1cV״_z9?ez
q*#Ũby#KPG ;+Cus DK5ڙնՍq]XG!C rSMS I
S3;*f1j+`'ACSFQI&_kvA # }i ߥSug J1S!C=ݘTN=
c+9ӭE͊4AH :5dDnˊ.!r[ysNxw~č#兣j
3 ?Ss,{E=#!
Mx}geYic& s덭A}/e2|o6&ƠݓB A+ Ws p;b Mksy㻋6Vd쵱ܭ
_Z$.3 Z_ nbVP]x.KiY,j0A{@kAY,O$[h|ˮ,%>CZ8I=Z
wg <{tr'7 t@q]NN:aſ
J8!xکZ/ekn;v+ӷ{@ =ַ*5tj_ߡzi- ~gA%КLqZiCtX]raVȅ|A!gYjq &tYPr&RN]L
BӴIlt
LhbM[JD7>- cZ*q/ƒ'LɜhW& Z :Y1fZFRܚd?K/Ncj^2clpEW#0EL2ؿ" "GD-`L
?AtT!f'` BŁIsǂ|]V?a k{ ?Su_kk`f`m%CXh&䬭*ؙoݳ>_3rWWRxon08n5+)a+UD i%gc{%R1}h%3ܥx:fsj5֝-l4. 3~
VGm |sX>(+뾀Fg}9[qHtһ+u"wF̨:X|M#1RڄX J""d|EVu#$v ފ2! y `n;cXĉMKzдEtu *7@f5,BW9beD <gEEٹo/nXo@'P#gB 0p~N!E ` DŽ~Xw.&ikXMX dn)Fwd?F ƛt">@*3Ī:' "/і:OAu(wkCհH1I7]"̐ʤբ9'ëYcHy,Co6LQS
, s]됮qɲɧh!)?hKU5TOL}"2$QlI-7RN4N 1.c6mΔS+f0$ov'2P%%#IsbP֫.p4&T=FVm<ȅ7-$p*K˒A0sQ#
dxLٮ9R^&c@93.T/ؗeU^b^.
Z.DЯMOL o: APx
8ܩxOſ W?S6[GϪLe:&NII-A RW#(P4nQMl;YOl9 M͵j;И/Ĥ77۷ aah4u&Lw kR -jT}1DTkdyY9;xRyE q^ e' D>=#R͓e<0N@ `V uUsSz kwWkҠqtK#T[t낪cM:'eՆY: D9M!<4~] ՂHLJo_JVsGa} )c2/XpayTؠ [=Д$0` >ҙ/
~M{Yv
8$q7 !Jyev{,ٮiK$$*sfMJ
p,< 7ǒ T
Dy%PpM+6]}c/d} ҥC{dWv9QEX9:y OI&wzne "o,xշ.{f-=Y+%K 2#}gF9YQZ EYhq"46*u.5h;O~@* ?R (?
5%^cz][ASDu;
8D2#h~
nMWɗAټ]g I4]28!
Sp6hdD;ki15E'`P
ckJ aK] ֪gS]ZV&+&v ofMzvyӭ G^ qӌ 炮HDAhp uH/$١
-,ToO4O\v"&!3 ҈gԊ
oyttǘa;piҘ-]| أues4Z
kTK 6Lj8
yʏ(v|/դ-GC,5P5ه/sp~Qkٖw\A풸+n7 3ɿ;dK?H.^-8b4 R&ekePS*oqϖVD J<ǜ
1a /鮘Fimvv aUC il*0}G&ʄ4 Y./N0x9{ e>Yz*V)X5ީP*l@ {nل]n_ .jv & f+/j?A6}j.[. ή̹p Jd j;1{ v[x>
蚛mKia;'Tq7u|\
Q;2f 7ϢAqgޏ$ *[ʓ9`fgh_fY~dh?-auTzڊu vV MIY"/I}505r]Ϻt,[]yO e )07B| 3r/dZ*DK S't%W[x `.,Ȅcמ19gWBV|uCƭ%Qt#ʱv]N G~:o]WKԗϺFP,D Byha6bpնg5b>hB'
Mn擭8{N1MwB[éXdVWT3'5Xb 8 6p,z^xzHb?s`KWW+ 3ۛ-t9\ׄB 2eU~©PulSj=ͺ$wGWkADnÍ4Cq
= [.Ni 'wѾPp +|ex*eR$ꪓuyYzy"*tFb9 .KNea髈p%*Sw>=?.@$(8.-j8acxpq&)Gm!0 s{d
|ʇ QCLi إֵ ~>d*|HMjGuК^"͠Č}eIt;10- evA">HwJ/";+e4H mŗۛeB>.iz>pi6zfC+%P1@fI K|/h칒GjvE8_zׇ5SIsZNc7G@=C"*f@w\Pb7b˙ɛR@ `Y/TвP`m&ݴ?Nlb(F$Svێ}J+As(:v Й5A,4=?d͇U[9i73]&PDUeLw
o
yӞ+h* #W<2 R8&CUs 6ݜq+}$,bN%Cx\ :x0࡞K IR2H"p]okD24ۂ1i
@5 @O@=fvkڕNtKnHe+2,B x.V#!# D!e+Ϫ̻_Uxn%ު'+WA MC_@A_GĮ.SDT~QG\jMpdX_j _VLL&NȒ;(
a ]v&6d$[z 7;v[a%K'm 7 WR(r wx';qQ P Ϳ}1q"俱X?+92n) F./ ]b?>فd. /hK{3ΚУp==|e:do'C79 "h0@;r=sT z "eS|p I+MVzmgߕ *I]f) zOW/cSq]vojoG 0Q7GU1lٻ냡f'-ʋV0^"y,<,vlt x8Zk3'.p1O_ ˔%ߍB( G7@ \C{Gޅz 7oJoD}?kez\sF ! 9ȴ]i kpޢ-lB@?4sJЖl]Kl42EH @"^TJ L',
bG/xNnЍ r9w[bz9 3,5W{׳ ]3gc)lM?> Gdvo4wyFu`ȊVTfSjoݣqr2sF g,k 줈+ԙi?%g3j3 2L8F䡛x#>
-x X?S$R>v h(D/*8(ᮛjҍ6qX ߣҝ5B6XYuTʄ+]Xz9`Ne lk7dUᛃh,k We
1s96{_ilBvnHgstZ!x^zAVHFK*jt=T7 gSb}Ыa'i/@2g͊Rrɯ]v&p:#0̘mXnEzu <VJA/8bJqh#NBMw=_#m1n4+Y f* ߔmWeu3y%2|1[ҚBՋ
?E
L}JOQʊ2:ʚ|V9 #)'ֲWn#_FRrPاԣ{/tҵ+4AG ]Kd%/NP?L1ŝ^PrV*!Q1s6~gT>rCf8N<<X!) yZ8K Fj lΟ
Us|k3 أ>Azio^=bn !r̨3wF:\)tjwRt2'@:/o7"fb"V! .guR"KZv!
dȬ~6 !T urRV [~<
;"~ >Š[/ 3a&2E"爯"j\y)nVc{s&8 D#g |=D7
&l8'r'`3y*E~X) o$ LKUppRN a ϥ vDk6(t)7 X+.^ x]!<a6^ /Y3dubz+d5V*In>s?2P Ti.O&5Xv{ϩcrCZtlCYa#c80^1 ڋX~ t b j{;G獝_ps4F̂ Z}mOjZlԠgozc A` `!ͥPw|mZ+DY~ 媽3\{⮳`TX!AւE
49 isM©WƱ۟U_7h4AmIKpۚmޥ/a|sXP| WR1qXZ+p~ iw~{gGi,HH瞍1]ܑxRk .{*-6kbE˃YxضUXZThS7>|9NL4`ډ)bsZe~tՖ@.^Lu W]('%'lwt&{G@3 P[
4-)xPr8ljř !s({2gٕg:53hDl8Ph"(!&I.S_c7}^/hlX6u1-RP'eRGb G``C?5q,( X ϑ WО'O;ȯX > k
xi)[ xӋqBVF(^9+"Twq*jiހX??LY~q@" @)v?jfXILN$-tvAG
`[>@E?*B_YvuBcn+
8 S . W ɷ]i SAdm285}2'< t?,Mח >te/_4HFtF hɴ$ J/( }+>'4YU)V4wHwYqtoğd4G渃 J"|ޞUAr~2M[xx jݏ {Z߀%!Tl4Z7bN}c]V$}vQ
$&QhtֻY$; LK֥@qubS(&Z뉠dvpmLrtNW3+v?Q ݅͗d0J6% ۯmPm|BGՍpf`}CN{4l:/ il=KLPw*҆ ~n~Qd,mmZJX@NaF Y$ԕB?M-[r b$M)1Ǭ[/˹H
oHk ۇSs6+zvC#L@}SȲ(rwxMd2c cf`g>lJ®6X ͊XoiVf|:U v~#=I~Sg`=Z⤸S HTHզ>GJ"093@Rkavn=ëS %5Z.sM|gzS ?+Gg
\HzOq . j|R(]O!wፔ]oKJ 1 *iB.Q$z蒇:~: BcEIVM]IĂMà2
so~6`O&9h)sL[싹f嫙>`-3=V
[ (1C9(="' 9ԲK R+p14Z6<=3K|+g1/F{эqT/q 2}$=]HT %k$jH9
-N
k/5>{j b&l =w5j$bV<=y(C^d# M DB DW_,~ %okm Ι4r%yޝ sXq pArpۀ9x~q:S#Ux2AC7`^?Fb2斷f :]VCq[l'(Mʽ[N!b!lWgNu6nlUO7=j>cn^HЋbNـt`)3cNRhA.-Du9[\+e--9tk5E^@0 Op)at2rmg4vGv^-_ nL Pn4=p%G 9`&k DڳHo[ l+iv>ǭ alh} rYe OJf?@M@uuJey,+g'z w j\ ]sPl.D| Չ 89Gp7 A$c'd ӝ!#M ֟e
ooDQCce$nqmE.!u^hm3aTMWΖ6tjyE/LK8SCvCNN
r"!=f4'(ңF2t<ڿRR-*,=#3t6.Yq1kt BjVBSjj.7]lpn_et8ȃtvb@ 2k鴜}Z;
*?a|oo [LKE{PP ƭmNQ՚s !rnikʆ*0f#? ̍{j٭KwK . nKx(D⇉? `$bMNJ+s諦AzڭoK`s+ 'VK <+mtwЖ#!J=g}AnAN`$z[h_B{/N^/]=$ O*Wl ;K)*O
@p7={FGQt{+;
rc?QZ|IHf6,`K]pW0:Mރ#8ADq6hf8'YFɎҪ_fKTЕ/b((g4W >N& %a*ʡ,$UIFȮ=^bAChL6py݆\ȴKpi:csI5sƞPq~d_)=,jHF9j2 pZP|"
<#*[ (+{%?,) Le<tJѻjR{<,u'T&$/k-pjO( P JaL8}m86$Z:V
] zA;9RQ%xBP)'"jS w^3V0wg9bN0@fGxwט'UV"-ͨ"S ŹĹ~'q2uN mHxZ{'QI h k|^`_AdqsX**bdD\ I\DǏm^:lw,lOD3u}#k]=k/k~fh?* `S!&HQ W;8&#馐 `40j%_ZB1r@Q=15*u !1%?M-^ = {,Yj+toٲK<.e
g l+0((Ӌ*
@C
Id5 $+SўizZ]~,o!Ҿe(Su%9&:yʪ)}q&ݟ}3Bq' $tS\F:21쀠Q[h !a[ڙ./hJDy6Bfs
: f)d8Vb4agWܗӼL.Ć3ns2]IrTSiB/ ݏxPdo % vE ssbh*1HB(IH[ lq zoB۴j$4Dێ K OC{;vqU>Ra+TtyCa'Ct2
&mNBNk+ӕqtX0&Y'.c&\\L m
&ة#lTO>{8xJ9$]j|fj*K
@ EOBr
@HӝnaZXw6-{%X}}V$S&Zcf?}RE@Q<2@XsQҡj.r tǷd2lpnfOC2텲u*F|AwR0b+]]
x0҆hM/~-^= s^Exil5zs~[ݝǑ:j2>KBK0@L 2bF6 @az 9ьI续U`;O- (3s̱%Y4 W)1
2ys'Kr ƣ;?lӤuh0zN[OI$q"O=Bj1J"K #zkO.$ =9~N&3tvpެg*a%1L%K'd
L`(MX}lW]#^^ o"9m6oh'ϭr1k 5y&̳OcgﻤGm{><]|fOz9ljqn%4Fx֑䩦 Cl9B[Q˲'
}eC>pB#;mRx4 ayR~fz'g&r]̟N.k,%c,09?m/iD`3N
Vfƹ}JQiWԮV.BySl
}K)lϰR}Ìa=C r#e/ ;FB q_Gb& ?mB q6?~S% wOk=cy;&S# ?%PkAPG%C؛{:R8,D0WIz$!ˏtp ]sd쐸ϡ}{ v[P4M|5
%B䚕V&DG@>qr`Yl<
k2'I
D os^ȗgm( !E?5DmqN
"OI[" :vEuX3PK: 5+> diكnn8 JRGw u:~#W<(nq{-d+vguulD \나HLC,ͯ4Ȋ\Lϭ LP5!Ol-PoqR)^=N aUN֡(b ?
6@,eSD ISRE-&xfpMmKE7>lyŞ>ϸN8ƈ$a]Gp*?o$j}c|"ǢyA{kR0y1/䑜hO>[2 TXK"zIl
8[x;$USNhrd++Z*Y^3#PnցOP0[f,Cbkփq-]RՁŨ^)* .Z98wZ@~>vL:of Ny3يCS!mLBE5 g DYALpeT7S45\;uݔ#4ֱe"L@BEz4 Ex+1z R
TP&Ͷ( ocHv7 Ѯxp^B~e P_ڪ6 e7F@ y\b'Iҭ t /v9XNak _s3EO_ ~
P1m
[vNҡ._) > =8=Y( RS&i5 sAa}V&hڵ !_U'~KzjqhNJ|b~1U/ ?C 1^ [1*bsG/DOzj>.ð|\&
(=$k # Mn:7 .AMW jA - k Tӵ`?0B}Nɔ_lܿKMXu RO`i;ܾ*M+nO(aT|-@õt翅VxwnE~Ѡ~Dth$O__ sh#xfeB\wo
a()tڜ>'h]FI CoŮ#8 A3)D謚S93$ |
f\cj~<B^ݔwnu/>`1 q I, KtRNNe8|LKu֘>
1|l9 l5غ`8ZurR5| ;tYi<@g K=A܍6S -Kk I%,:Dեq/Uʨ)>N FNsx A 7
#ܴ0ޢpn]S1][F C#"GpC!#&2f Yw kh#I!dl*6.إWbcWng0o ſSn))e*7ҠH?j0ʼn"f%UC^~&FL{wk_Jku(k2'ۺ #AYԘn@#_{ޣa0Zjl^zUWf=%r-?~PE ੲ*0tM^YeBfMh,/%0T
=*Ŕ i9ZQuXrS
ѽJ`puȇ.wGTXA̖`C6Y/Jgk6$&LGp1wB'2p55~Rܮ WEܪž*̋swXɿɳ/Q\Sa9
K 4 X *ÞЦjgpz[tH :S^2N|YQnH
599aSVT^yBxF+:c-II =wwJvt ղf,;en>*yƓjVRvBt CE /J
߽:h~L^ҵ$<>됆&xhXT(M>7 no8,j',!ct:OZm ӟ.1q-= Z`cwD @Zc1;&{,uZ`5FrvlD!U" ;H{^"'; nt5Y$@w'L [RQ5mL1ݧjTۈAK[4J?!Xs32a+GX?^Uv ]x?jR|c>yϿ͝{a'hU\s_qxD❣8nߖeZ+}lHbPPgd mxޮ`{(Vewwlw݃|7k Z9JZ: lnyZ't!bb) p8;jWYENAa#x[lYnLmH4 =IY"~ֶ,,$;.yr*ϭjİGDRO f,a @2oH/-`*M ñ|WAHq!tC@J%<wnP,hbCh f=BDSLP
~aOW!h<)ݪ* !I4OBjI"7 Ⱦ42[`(q̟McD.~w%7 '|seL"
1,ܒ>F䤞Ie' B QYsuJ+f
4:rT Lkl}O3@58 S^ >kN$dN%Yد,fr[H5QRegV)-~-ɏة3̿E#wDXf#WehZDtWY1 ]vn q^D;; л0U VoN696Tİ j4E8&U>$MaՈx] ENzoB?chݻʩziXUbU~344(
0l( t} t>]^rbD`KM.{=BT @798]G:~x>8I7guRЫ{ӜQa:J
6Y]##0.6
L1$ A^L$WTnίT 10.fFYC؟ TIyȗ/OJ+lj>sp"hcGaʑ{6 Rdӈ$|B!ٺƋX
yk;R ͂Y_胕T!jH|,έ
A\Ǐ9\" cw`~dV6K֩щW D3PR _ FL˷BV!W7rtܡ>;`}Kc?K_@҉;\㔶 [:2cLR0 c?1yy&7/:d .AeojD!o -P.p8 E"j/{+$v9Ez~Y@SER;S[0fekPʾ gPE@)Aj;x\5`m+ tqXf"Ie 7?MKgЍlha~X?=|*qeGeRSE:l IUȒiQ nF;M ؐs:>Lj B,BhH0CD
5tXiX
Hu1 Ѵ|gS3if*pa~?EwY|B<ϧ$g .t_`&gkHV0 z,܆Ũ[\驃 5ZQӯ1, W=mE)DJk^)yKg5 ? OVu(!܍5 5~dZ_ab -XuHa\0k[ s,U$Ƞ,=!y!qO윁+ "t+
ST^,Tݩ=Vml )s7Z]\Vá-
T '=GԒ<Ɋ''ؠQzA7S f1x
#5v^[JV yyӨ&p|)-t3v,NOV"pkbPx#xsr [y,j,_LW! V' |VӁ9^a|ӌ>yc\1%@LU[yMQZFŬVF:J EfA[? M8K952_n1! A/~W|lo S/S| 5&`Ǻе .HD}?#lu||Bx='i2mWɂ >>l4O)qьX 㐨0!ƌD͇`9C#k[Gg\ws`N敀lrhi2Dp,LKt5FE)du-OiIEbt'Br ݛ }mlyeDASЂGs| wyX5UZ+zT ,o\yߟ8dtŶ넲@gp# KV?&u;8/}k>y ep,ZJE x:sU$ilmQRГl%h8c6.=\ua(} gvYXPX>Myj5_1IAEBLjYҟj4ypǟɡq XyYۀd<1?bllV iW 3@@ʪP\ ,& d[ i f} ZҲl6{)1 8p
7s]#tVApK|lcH,c6z$<^Iwnl \=UJEgUyddaQJ, U߮ui{G4%@jRlZhVg]L6ndzbEvƉQ3&4lPVcdV̏,W b[義O %CvQ[^LjmV'UW 8 UϜ1VZ{D2D9jF9t!@)[bp>V jIDm`]B- 7# _R h-`3DFOQ69lZfL:?z(ElByNU݇סe^
sG]{RP+,KVWx%1߇G":ё$)6Ξٴ쌸1gu ȡG!cHNZMc< qC
?o֩.|{ڳ{~NM kqpMc
I37h ",S!j+*rt"GٝtKƷMX<}~ v
wїhMY e21\g.-ng
m;hgz Y)X{a0+ #Q˅ 1-ۍ!$$ ܼ6-Y->]RH P"t>Hf ڣ UĠL MxX(%&+wɞAb@^vzb>'
'MHGQдy4L܊f^A8c?WLE@FPC=OlP[cDlVyxo #|O)H''c̈́V25z?ƽWWm((ᙐ`Zى]+ʯUYdSZZ*q$,qw !'Cv=hۨY):SM*/ {혖gpfKĮQ[gUNVFqB|ÂM|O Ҍ$ϹOT 'q.EQad E*lމx_A t@q/!@p.YF{l4gBj*UxkT$e !_$|HYK]AY)V/9}5QMV=:7hбssO<
ȉ:뷁TY> {KHVRY4QUb& @ļ4wlu"ɋiH5 t]]qX &V{A1יM&C [Èϱ% w\zLa 1G'7'>\D"@n0jJzo1c h=/ A*Aj Qwi|ۅͿ'4` }{42Pp Pozٲ{`Q\ y2uD?W/6a9&aX H{:QP>PaP; `!>t4BOZ}2e Yrj#PS =ȩ
eʜ6_|e r7P;S6(yA7rĨ4^P -2ƻ' )-rD_(z|ݹ5hX9d}jDuW|_ [ ~tٲ
;q4_R}-ͮ%R}]%PVBqwl3JwO
u~ s _RBݢ˅^*68<OBR+RG R fO_-PCm\Z_>
҉穫*͉ 'dQSO&z"YF;9D/`?%{yIl;0<3zKI?N!E7h0"L]W9̖׆96ԗ#/o$ u::@< "n ۱}t
l;Q=} ?F @Njɘ琹Cl;BY@AssSikTs;fR14'?Ss.P`|/]- >~4;8t)KwV20" P! k
;(nRa-o}f&
10'##d-Q28'}i즃\p}Ks
}3Pc VXDhm5 ;ahXA0䕝QNpyXcQeZ756 }#VN]4
$7L& s ~/lOCIRBo;#髓Y0$ y/DZexslO
KOw
4@*|7 |3KUsjZmN ?6;"p~].
9 ^\v~1PYG+PE \[JֲX\+^e{J
о~Um&\Tί= ._5%T28Y'đH4_;h22x^ۘ7ht'?`e] *?:E@n7L]IW=bn(@{GM**G0n t(urc`Sb7F $@){!qH<;@vI4k⧸A.7;nBsM9R.jIUy
]U }O&o (,SGF&mU$9Y jCj4m04 P:w>~L6]&;_t)Z"f Qi0a?lwQîvs&=AgGM>c- t/XK^xTRD* 3F>)YI&-P.8|@'͔eL9$tp^ַDb ElOeHJQaֿ"z A -yI9`N(e/ pHBC U.OW -&9dN9w )KB N@ ni0;|rWWWYQok b*̖E\"ߒe:/E MΛ |*Ɔ
^QՋOד6gg'sce)i'c[] 0i\[\Zm?!PS|U#myu'>xL)p$7USIZ"Y~
!z Z%}s8څ>3l2cuGc0Tm+s &R!)%
⇷vϝKx2Wq
'ɟk}7vH&HLӤnyaeǭ 3h w-qFtz,"1uYqcDkײ?7&b`7> "5Lb%}`U(a{i
d\=|L .p,uq8 *3/]gK1Tȍzɦ
`G'0dBAD"i b U)]l$w3w~
GCI\nڗzuѾԹMVQTz6!@Ia;FZB%3/d`0nd ] !1wmC {^T<8 2ӭ0-~ᗽۊh!2$ ,HJȗeas` ?go+u` {2S+AEo3*5w{kTJ9KZ@utaQLݜ&[`Q=l0UW~>oļ"3x|=RA
jʤ\H-n
b?1$eX*=pn !ɱp< ߄uYX=ٻy3.iԜU& j-Ƨ@qJs:I gMq# :F>P p;` +רE*.K9'-ؚ, ?TF|zqRLI I
V^Uf ܌0O@1Re-FA-kgQI:$n<. PBIޫ ȅ(] k.˭=jÏl5~aqVpm~J
{. Y@DZӪ'p>'.vtM+k^ɍWX~-c G-a_É#Ql5r k"6-0թ uQjq'kLOrŜQ՟T 3 6joQ7,ޏ?Bk
}~!~a=GIQQH I#}btrg<fZRtTk O&!_s3a:GJz&9`Y.;v鷔 a2oL}H ~"DW@pl/r 9plOu?¡hg_R攙TVؙ.T_ k5f>j/N)ӕ J!5$1j|ёm+`ԢE5zݏ ]sYZ%Pv~tG/1_mayV/?JNo%}Nx,pO_Byʌ F4nT:h/
v S/b\dx#$;
RKwD_1V&3.wnsszo_ǯ}^`QTg92RFewU7(p7=iB ؑ Sٰ-'n>w7V
wl;E _F[D*Lt&>ߍSg1O #q]N!i1,"3N=]s^=/4V- LNWgWCla|V# ɚ.d#
] i4sSEAh%L^&6[@̟9{19 6k6$d> fL O$fwǀ'a"q <:-],;U{w&n>Ϸ&Ø2n'APwz$cI)ٛ *kESL zkMő9xЂ
$jrVx[ H[j!a (gA1<8Ei؊up}ЬRlnS1d8ɹS BK 2~V8u.;dH}#L&X~пXuZ_=^4mҿ8CŌs].f/|XRMP U$OP
\T^6ݾ U=\X,ՊYI
3T\n3S ]tʸdv
|u ٵdm!$Hg4;MysNJ1^ _M[ h$ %36/7: '}6*G]Cm(*3֭%R
[0qz^?/ʨCydɈ
RQwJ?'kQj\SĎN^CnԿ %
mۈ .9@Gz Ñډrb ɠt(M; NHgߜ?嵀]g< B/ѳ5f *ϡ$4aC,yHj93NeτgM7㬽-nA4 C=uE^Z"l Ἐw+ܮt\$έsÃX-+ҫied&r דz%~OM6m.Pr K܄Ū<& P~ᚍ`y%NSB8n㟋$hXS0 ?
f:pZD&m5L~55d/)p->+G%6Buwe8f ŒsT|н9 1[P୮Nr>j fpKJTpἁ3ZtdL(r\d m b\(W.c"wdU0+%bLpS-<[m u0? I&Q4n]{b6i*URi?`y`'/!Y
hSozWND.#4|wPL]RMdϚO0bxJWf}9~E0S+n̔\=L *\Zm_N`إ=qܗcS 9
g7ƃ1
D}\"ߧ ܆I'G5P d8 G{b'I30,$T62 /iFnk _o^LE2ML= @ H m?LƋmv}._,ĎzZ{WN^#V㿴RA tgzS-$1 &WgU2G}3@?K]v>nN2#9)h7EWu7/8wH"8@ڭx(\QV+kPr? "6v(O$L.oo"Cʰ` YٔD_%a \Z,˅0GD ǎK#VܸTR(QXcʉ
ݦ)FӠUzAsѺbW<>@XPxQE#!YfJ?EW^$d:x]f qk h曕҉' x ށiM苂)){BBV 5`\t؝@0?,eۑy֠'og83O{ iJM&tŶrc[ ,g}@)\~b[$_wIa57~6irX_ 'Zkd#LiB8hP5c#$lV
;C|]J:
VwoM4Z63ioLb'R1DžJm{:YQZi48 N|F^ tj %#-[}6 ۾)N t)"k KNבʮ^
0G@Wm,&< z{ggO^ߔ^\?m Ùx`k 8a btA F]F x<^=tN4?Q}֧ȸ WeKӛ4#OU{0B*y
<عOL<2|K @UXS$P/#!J-0! 7bO:~ÄƦvlv.$#P Fpڄz; GEH4t Õx{[2DQ[&0e^yca,n ¥Κ[ȴ-$:Nmv28DHU
)Y{0W[ 0rV Gltukނ!Ĭg揄 y/s1r*]:ߢ~灁F²q6 +;ig\#i;Klf)rK僞'__]# ,釭[~d$*=̱3pYңҘC cT(
0%'P 2"i~b$iOo:[LCYjm4> p\Ρ2V3＂-JGuź $ou QdZ"%%ǿj|y280Sg-od`;)KpOΓDyXhb)|s6,dPvξV"8J-Q32ƥyc#0^_ʓ!SR}+̚.ul>)2|Mzgejd✹mE1tDB |kcګnŹۜ=*0(ebkA\z;@V_՛l{Loږ} 4`ȣ/~77ɖ 3saڶ(xzTn&h$Bʾ M$ {3kߋ&%hò G3/J o[
h OSR^;' w )I<Ċ_l3wdvg ủm2@hra.o432
_Xȸ#& 4O7\'wԪӭ= 3n>mz]_Geý rZ7%x~cuzZc^DC\ $&5
d;IW%M/;/t,d!̃0h_Qۭ96q' &rqZ>b6d[a#XrIs3qJ~`y);H4Yם
r0%aЛJX6( ^IpDBUi$6 ~clQ+6>Xڋ>ΈQlIHC @;[ -fdiĂ: Ŏ`7[MR8sX=/n e-!9jN{;u:uB-뷱hf
g@d&e/M+ 7AԯP{[[ &pŚPotKsOB J !Ͼ=yjqpl,+$XgBiDR*K@ܛ
^xEfA?C'w Q$ OےAxNԐ5u|0.GԞʰ7"8-7J_Ae$//~o B{G8J^'!LrFulB$Rf
y3+hy TAv`
&ObBYnniqܢ=uT?)<1$yR\ߛ8W.l놕7 e9 庯ĵ[s;]48m1h) L5sA2]; m ˿l܀9jW},:97Q ݛ#|1PK)jmlb<
xn S$B _A=rU1{ GYa2G)n$`,
Z,# ]..- Reƻ d$`H/K/m2*gȤ52cWJ_.e͓q/0%g
۵JɱxhM]&(iBhP6ėPu-t+2 b/GAZgkɘW^hFJOX(~ q^\Av뜑`{+>v=rB$xQ-yn6π?GCs 4WSD)÷F <|147Nɉm6<"; +D✞uQAB[}|<?S%<(ly`[}LX K.Gl?^ӷ ,` 1 X'Q7]m^ =Ҡ\fSppSM=vԘ9~
ϬH˞>DD=v~`,ku
@t qc9;wͰKq .m_7)%p,5˖ z hF!bp@טMVjWJ~Zhurp疝~OPYr 'T5r8Fu:Ew2^@+X鷀_Kp kajC7T= ak =l?];* E^I̺]1G \8ڍ ll<%q
׳f|,fy62,vU.&} ƚ rd9gE)cG4å6d4ji]턶 Ơ@5%AwҶ9- "k܂0 rte6NYWՐׅw3k_u?eī:4vlUiQt0 1*2jb_c6wJ+[JDj**}YkQQ[Y OBJq &l
{C ,-{ ⺌ZnN!#QY92 )(r2J6_
D5B8gdLsiV_(c&)a\)F15[%r%V'Hx'D^ cN~8l0Ν` }$d3wV2*Dfl Awlӳ̀)%x%KHh/ njĸK@_QQj VƸ9 tLwӒ.{ \~T4SBTN J}%yl ގlqRLEF%P#{Qu' \۶fsgifK t hb1)$3P*kK
]b Կ;濽9D9c% xؽgSSF2d+5& 텎$`ʉ`Vw[hS)2uNp=8M
O 8(̃\)pvQʤ6-#l
:uz C9T!.mL"m}Q 6^VTޮYrT GPZT_3a#yG0_%[OxEg\6Z`,AH#^)`hw53W 3bE;0-14ʃ2R h@DO 1]RK-KVv7^C| 8mъ-.g!|7% <-< /%+ AJPR['BVt:C:cϔ\H OqEʂo7V*C9*`w#>0+dm /\S8}|N|5bO騉hhXi&
<4!mQF;% cE;][Z*?upctNZhL HDi JC(0Y<$
Yc08=:7, )2 vXŶdxs(k2x T] >0^ֵϳ5yA wpUL7WoZVψl1Aovգ,-xr]цQ~^G-zA^=bu#, wƴ+ %9i}+!^Psh}ؘ_0ЬrXO ?BK-ʍ!.
?ƌs G[h)<d
`~jedq =e[=}Ur@u wNNuo.FY-6- , !To '~WAJ X[*2P[pU/^tR6=
@xE[&)0*WHtiS?fn.De v_V e
q_߆15
O<;k7ۈ9Ē'Ubc cؑ3<٬KH DRt^E%\ƵNJJq z zI3 ǹM4lr:S2s xNIA7i M e5h S`3CX' fVE>:TM Ejv]9'TبZ *H,` FBrL_tvx?~4mziF_sPCۄ t1v36إwy`k!il}bmKC G@X;- E?ERfb_ RZ| ҇F
7W$Sn6!wЊV$䛊Gs$]wL\TUE~A {B˜l&3Dc |-YorPO/I{4*(ŸL^?dА<%e@_ ֑^Kycsơ+2ۼWVlų=<] L5I"r,/AW"%2je傳CD, e
[Jķ}˶rbD%uEG.7` tm&^[!l/9٪q
Kq5mby( c
"o6XD8Nnc<9lԦxÙGTb~Pxߞ47r$psaM_\ 1gT6
yC sF YL )/wBZ_z*qsr OjC]ˑ_iLjnFtlCz2uр~ԥWȮGOūL6BߪU1sn[W.O5֘t:\>qɁ#V3ldY
& Eลm|ݳ] _a[PHٯ9e\4 +6M8 Z <+Ҏԝt$#\GUS4x)C(vtmwЪ |%N~q?+3X aS.M/ƟI[ɨS)EcZF/iG'@LoR04I@o8~o|+EdOș@)ܜY ¾*W }D=\ŠK|shޝWS9$69 X D- ͞nt5YɇɜB_0 ( UnQȍ<.`9ꕯ2:
\n0% V
UkS墦 =Ły`DDSN:Zu}?3VAM;&oVUAsڡ/\ R<>cGpzjg~uzNVRcO'cqIO@I?u&5 _"T'5.CŴ ݱ7s94~^AqR.`X&rkL!=Gy jWv/p eG jIb'@P
}śl66inaRZ"8U`cdAXNI 'i B)q u rxr oy0%wK,5%
sȖJ=GURX%2UX 09)1n
N[E U` R5l
cF-}C̃52U6o[Ωm6z%;sqfĤ!QŰl]pQ2y)Z 9dap&tm3C OM2o| ϧy)ev P c ?\^ xǂ5aZhmޗM;INOfꁠ ֬4etXQN
^oOlw 7/; zzh1˂ue 0/joĕٷ
," +nh/(ض d? ͅ!y.Ð,\N
0vc2?/H.]5B ={"o,0ohW#MmdI+ y+p&\@$mck"H=
# -`)kfcN>z,yw~!t K8
g\,"L6;# U < ːB=0 c0L$V-|zBPy9,L{Af䗢Kn+JMNLpd"x䠥@&m,<:a?IF:a\y fU )ۿR?th\ ԊM+m`P97< rc3#':ss ﴽuTP_
`>, w23Z^\ބR0^!+Q4 ycmimC|u鯊d x5] 1
Km2qya>`.K ׀`eN$f6U (vp`ݠlpRMtl:y{yՁJ~uuɒ8H>Ą&; oS \%sQ[<\ò> Anq燘kۃ[B;B
9PfTS_a;pIS|y2^1 $jaMܽ )rFB"P{v@R< tpAh$ qV?Ϻ2cTäeN E`B -\(| J RpcT~XzM
@"HKN.hZP=1av:%ۜ:jfD:GfMg{To#/<1qUƴHu-tEV{vL9&N5I'ahhzaM5سbT 42V::ew 04> sn5*t%. "Ο.=1̇Åxh $y ʖ` &AGH^ëJq"HcX^cU[tGL>[a] Hڵ:
V~jB*4) Qߢ ?
cXs5o]0 !;Lڰ+ŧikpb~za c2٪y&&|s=3o9C'IˀѮ ol!d 0 5<wW\Wd*xkQXXx(.Q?uPV i7fpV{˖ifzWUl[1tӏZp]5 Wi ( ?c
*n
+Bny6k=ԏҼq =]`]sb=~H طSJc#2RVMkehzp:U!y -t(<"o}@Yh-σۄJzey| 2 ̟( VaqY}Y>"|Vk?r+<1X\ˬӭut|om#D(7W/$ :?r@stδ:.<%Gֽ $̔y &}0rRMN` lN6݈Ifry|Te=2*vgYeTͣ4]{+ه>N\ B1` &1toYrpFޢ)Wvmr}& S2~:mPQEUerIT
^cӷ#J.dFu{ PAI{_ dhj'\@
ޘJժF'lΒWy&o`]j
|ɏX8-] zx{Z `^Ǣ@1#j@캃4%6 S?!d`v}:Ҿl5Zo. adw;u-*$q}"D#YE1TL.0Ű|9⛍6a&z%2?WmO~^ ŷ.B(6%|H~4`Hx~Y[ h*ԗ/R'dQ G|[Dfx[ 8]\tW*x24Uh_"}>"F Z3 r/"
l kƻ\1+ rn 7R( UyO sO&q#Z)Yj 4w_t?}2=SR
ߊD3: gU xU᪄yG@'p_K2um7a=!ndpQQI]Zu qLnT+Ljͥ ˺]kX쮻=afWג TR ioF2[<ЫLWiDdž c{͊HJYĶ[8#Tn*2ĘXvbĽLK,..]6Y@g]#jܙ:`yG's6tY.c2u s&Ue(`ڤ飕2.!h_<+"wx^mTHtI*K<ɡM
I
ZӕsOfzL@k fH>ptSfY3mHܡQ9 ;~ e鐶k'4ݠYJ[ff:'wSX}9G 0-# ]y0|ȡɦ$YNE9q }WVB,Ie@մ%~PtI e-y0d5VDUN>lqH 5ljl'8Bd?]# [U^ N6w'r^@f`k#$ˈKdطV!Uu
6w9 73 $ llF2Tl"EK4_ܾ\,.! з'ʧ#-2Ue4~bw#Z?껒ψYCp2hw4טh+E-Y';g+1Lȼ[!txo28PGzVoG]],0h (
cX\ |wn MrG!녞! wa+3!}ys;z&ć[;d(ײR[
=gK=j_$n Y."%H` 5$M?],knb[!TuŭaUݶ}ڊj3iYpQƮ_&pO](* aZ<ihb9'dckGNmY" 2[=$!װP 2tx=4{ D`P)AxHM@|[ir+(hE9e3,~mn0spi } |qV Szq9? wGun-\. vO'nzZ>Xz}c tf'ImN3*m9l* #p L?bNuvssV&.w}M[!& a;+Z({}IbԷ
2ꥦgx16`$I(~P.U揽7G(p1wh4Usj.tI}#'W]ep9Vۡ('^槈{]HsC2fjE6B3,ڤ C NJ],оkE-' f^0[2ז- 1:@H SVx6]!OYHŨ!M-} 5Qcc_W1 O^ϱ;+D^pkaL9:J gƀ۴jma':kg Β"ĩ$^h{8fՍ=I6xʨ,ҋX+GO̰k(Z|= ]k@Ϧ r?TbNG$[6l k7Ay QA{h6
S2SO-Q kUҚ4=z`CZ}M2Y}jrt
xN ENWoT ]U^ F2^s/ N
ǟ1I"9IAACEib1Qn+dsّsv
S?O,Uxr俋,xB5@@υqHGA8+$C Dw'ܢ.iEjؔ釠ࡆj݂D ^;v-=5![~~:dL/l{9HT.J
殢Y]$9zoju% ,3}r
3+tP+/AGz! #qAݙxF2]&ģ^[Snj75Vf\;z
o;1Ofݥ0z ).WysUGFbMӤԔW@d`KoIj "kCJE `76r1p ţS)D -W Xf;3U'[fi&9iD sRJiif(_a9$ԊZNomC^ -k`\k+!l)2Wqxs=$ ʙw
`_^ wX5qh>#$!<搴t/<7G
_' /9Ir~,E*uyAKúQMLn f
ب:"772-ӅvtGmAљ)5W)fş).#XZ>x
{8?7g "[Sm,{Vur0bx̯g7"Hd'&g ŀ`Y3 2q&dLŇ-E/6ẗ=^u1V zꊑ+Ip o:zAH&KCaKsVQ/2-z EOc'tu!S ;
fGN:o5ˎuHjG3,ZҤL"tcWM'
3 T"6|G:d:T7(L:\6١Pg?hV|F$O[|W1`^+;:d[ (B1R@3V!tUVmAU ݫ1̎gakŇul k)!Hh+C8
F£7C!/zY/ K-yXQHgQǫSK4폀{N ,hdIilCc挬w1YOdD~ "<9k\#λ`-0nAq$htfOsY P tj/zL(hcA% vdt&?і C )H%C:F2Wkxq列OjՈcүM31a*C9ɌsA3B|t᯽ה`ModD4.Bt,ؕf P;P `q9r<%ږsͷ/6мݨe1~ U[]<ι^-{30XY-jYRre%ѠO:2=i Yaʍ2%t qt7TD FV7]gD. ;U-/[³]YlWG&tT}OKS@ --ge)u:!bJ d,U!`h:E輗A#pH%=C4~* Lj=d v6>g>qZ5[b74b ?8Rvmu''E橅2|9r{Q$(S _{֘bݱ ?6zYJI#DGQc MEg ЄL]ewM~ƳV 7&T1$U$V. Zj O W4ً=>io? ÌuLAs%,# -*v B.#k5ޭ3 I_ -+Zvvkm|~ޡko(L;1v$ۧmyYmnR`=aT1b.Yx6І`Э.[>`
_0y_#I
5?~;uSZǞ. RUZ0|}ŊO8Ms`E}yZQQ__YE\Y
J7H <`j6 ;`Ë(;{>[a\Gc) aע Lf7*OdEv9(B. rvK1-CZZLb@]3 < Kp<⳯*'On8!5ήJֽ}/6'A# r%UF*4?o2+xT\5{l4FtG gd2
v ht`y'|u T|^~6!N"LΦ7sH2ؠ,s^}3WJ]Nq1rSI_,%%{!GUuJ_ĺ\g YD>ERY[of0 uzs1G{-a ³L"?kesU<2He,gsEbsbuV=o1 vV>6>[`΅HJO"dӕ
ŃAQǕvl,ʯ":xے3=1zgDs
Iv'6v`D!\hd!wc+5|$Rz&OW6YvF'E}=ӢU8U# 0YXl,kSvlڛ ;ϭ 9I[}=gK(#TŤXcN k:am
VJ D2 #TVqN_"PsTWF3dANrcTh6zzK,ԔH29ә 54(qq:[/K˫l`!223{FC@ՠEgݚV_#}p`6mf@xn_} IedRFqC^ArsĪO7X3!vwsu Fz,;q r`WKRm i~0ɰ P >JTʿYoWg
M$$ bE!؇([ ( !;fѢ;j<㾾wZzQ\ 17X5Ӳ3c
^t[8pqv">rWp/Uw Pݱ ԡG)[EMA b(9ԺKLTB_ }!sPrcE`7JM#q 6έD3У_Z(2n
yb5R& 4qF[KvaCNCSy^K zOB`U{VG6"rPnܕtBY̮Kħ7+h2>$4c ٘8
+ŻN 렾>(xi +1wT |n> 86O&')jfoM%Dc?lYf oŊA' Skƣ$ؠ%P> ]ܹ ﳬ XôkIӁb5NA"m~ua,* /8zXI5}&urdPǘnTLt )|gGmĤDl?Lj:|( P4J>u ,jvwŌ4-moE^pgsPցj\w_Dup>tgƝd
'YT ;f[RLUX'ы_
eӹz :v˔uDQS*F$Mc{X36ݠ18Oiڵ!/| J̀<1؈yoc.*O[ q7ރh朡t;>cV_;pf x=@
4ʫ]E
@$T58j(#ʔA[} U8$/r
x )0X oK,6,R}* mfPү [9oNIG*z
ĬUEawUޠAʼn'ՆMipQ$-YK2ʵ$`<^PFYٴF xYKʱyIʑ,Vb>r
*E\aP@Zb4AQj ?SQ# io˷j ɴ\*Mk{W%a9wd
9M~jIL>a@e3OHjWBO5[
.PѮ%Z4Ϣ,4)hUk|Mkُn<; Op4f+ ȹCAK}D'ek~
95ԃ4յ: !:Yīuķ] oɼ;~& ;6S #7 .q#.vDox{( > .RٽKct?{=^y
9dE2r5>QpcXyŃ2ydAH_z.A8Vt~TG4 3meN'uoz"{o$W.{믜2[D[*% A^| N G&F݁˳n|STsvw5 $FD)/-^s HG _Uhz3@`db r:͊WKe(R Hė+kOqjugoN7x@" fz$yMq .
l^鉬c聼q(O#|ieo9@:W? +UPcXitZűsS2 (Ǹ`
4࢝" `9-Nm Zvpw#C)>$ tއNfY|=jc;G P;KGɃXU D%HKX{ [@GRUzZ92xc0:5
xGVuUߒ3wG^,-Q')B0ǹ.w;
?\ E/\b6 d5qjktl=(hLKSA? ;! )]n9p
YqŎ}L}(]I/SV|ɼw#^FC:ꉫFs^FŴm)J=5=Q,ED\:jTwVLOޞU}6tN2<-e_yo~`oc:yA2V茄oMܦ)
I;QbP8rf% 3xϠp.TEa$;f,fۧ /oriXSV
LyBhL1ܘD!hёYr?4@ܖP`w} VmoɐEg%Z]?V*?;y! J7Uu*S,g \1LѫU4
_ F[
ۄlr-'|A^ St y v^WzE( V1jeɗ,)Nņ, V ɪt!$)ݸH"93NyYD5ss@У ;0QQˀ `Ӗ) v͙^.mk`/ץJw%5Ŷ6^U^˽t/LŜ:l(@F^-P :{j-1 %a~/U"j= )h U'v6M|XV ~{؎xyQXEk=$u='>T 3*3\T 3ЇSH@8Xl L_F'ئofYf*q {\چ &(
a>VB`qi3V0')90CL oRj\߀|{i!\2_Yy73S1ӻ{HJ{Gs?ޮL1nwCck\[(eꁛIb*bG^I34c~e0f>(,KYvue
& ̀ޘx^묯I3%T;* ˌJٮx#UG @euOR%%ᨤT}>1k
pE_N"w/e|/[*X '"::YY1Kk fmeކeyPCuwhx3tvױq1,3l
Q6C~
ZSg6IB qf [ D /uq˧ %^KB|;(Pr82 Vo蛭I jp^OtYE#Yf6PQHH/5 UdD}563iofM%=G%($ʖg胩x4&;l>1emH,S+>2 >;(eR C.ywv薳=&PJZYa4iYVCp/|$4wh,4YY5.8g 7VgKDaE+cn Vɘk ^_)_ۼewˢ2( ?:þ-%Kn*Vצ]PqG્C!"ae萁 kXɘLG ?˻ӶfiZcnPc,6fa@^p 엨gǰA${@-QO/ R©ElJG7 qӋ@B s*yȦP~x. R5 &Ns2ĉDhe%
P~M.Gj}M׳%/6:t:f6:fp`ED{kfulƄGPg>/ƀb(CSo?jPJȕYe:*ݰ:&}2 7M Iq OCTڠEiGdd ÒɁf IՖS:q|f^ {Mu!GCeA7.EivC{uH'(T
ExM)-!x?b(c'!_t۱9nq{6!9߉љղhJ_>P*JȺoA@Ș`̴f7 aߚcpVi_i dԐ0~.Nkw nݠnl0$'aLs;5K
΅&XH$Pji _DGUbK0ѵ{0:VcTq${v4uJ7sy'9qrRlbkKX?ƫ:Ǽ'㭗/)MPs,>˯?l$LT AK2]2*:<É*T,- ZJ[pf%po`}PQ`]_ Hg( 7)TH
@?DXbs! @zA걓~VU3ڃ0Q|5' O#$]bi&% (M A|bV̡Ų9U["Bs ?*95|c^Rl瞴qF#T[ Eyw0)0!G[LXB #$}
D] gJՠp=W Qfk$){PtU Fb<(JvC5m cZ \("a{ƫq?K
Sq.gL.2˪iwj||ydƱ6DC~2{?ONvo*=#-)[@YTw N1+*heҀ;Pp Wg:9`FQ
W,HTPm#b.g?3UplD@E+tv>
Vl2 N s=[qIh!XƜ&` %7b٩+m&MԔߥta4`u_dms
>rA@y~C? -"Btz( >`
H5Vì j`^@XlQo6%%Eӳ,W\%Uxȴ#A
7pxzϝ\ҳP_nh[͍xRܐsՌ6izt+F0Lfcۮ
sZ3:3_[)/"}|.[qt6Ĭ*[ љz-aPM2 B
&|Q iҔ ×I TK/w45IA'|<80^DxP$QSPsĥQX~\~vEDaQ75\
k 3F\AUl{5A=q
ڣ\
'{ Ύ*KR *wӌ 4{0[ڨ ",-
} lige6R|փ9hvA(TA5gr! Lԁy^>f1K'DPg WަN/7G`ikk*MAsBLχ]$m/#枋 BV&NN =1y@1o kc a-n{A fڣINۨO 1XNS5p1+eTq6C[
dUȬ'^OU1YX8tV~* úr !Z cVZc!Ƙ (P^AG O k`^
Au/ {6=pb& ،o#wS߱
^JT'
JoE:ОdadpK,BDkj X,o36!4"#2H:+<
Ft@#?k07WS$hM #vFvWDO e a?P5%Nwcpы!v75Y2Tɬpᙃ NAn?$L/GkS gF;EjC6/jڧb3?M4l4ah"4Ň 5N#zCm,.\:H)XR+
MΕ
:mqpV5z M t[~ Ө?)ܶm(9&AtoyQ,^퍰(u VQ;ѹp43z
2Lm=]srYwT] Ō0 ?!p &9o#]0(Y `Kwڮ Z*/f 2u%#qa1Rd]HK$!3HYq k Ɔ:,:T=ÇWƢ8q9}Jj8nM'7ID2|31mgc6ݰU ;eY2uۥJ GTSԋ 2~CTL]uñ X8EyZWt8M4 8: ycXB#(ngea[k H7X) vNCOj8\c?MHgr "*t ˔n=83 o#4`tX9`~ YeT 5ݪ~Po%y3_i,2zvWq
g~e6~.2[Ar1օAe "*QW 4ݹI{?biz174nصEbt',cxLhwR/{zM^GJ(kqGN{#lq߬H2Gfjg;,/N"C$}
_?F4+,ȖͶ.?!]bpCP (BbL#
h@^ċlQRN L։RgJ~`{@Qз`т<CsvqeRS[ȹ A 7ʥ
t.î :<*4p40][`
;L㭻z&^+3pPQ`β1!+y@z7
f0&qwc&@p|*&Jx.Xg1C j?r}ҩNCSjrU%sY!kNf0j 9.C`nR7%bjz{Gaa*f| PqyTy mi YNZ@Q A
&ǜ:+Xuj wtfm0: y} LNazyнx]eƠm"̂!~DRX;F;y'7j%{@9VZ[Q,z
oD*eҹB4a1 ?DuryLRd+OEof`H 7tT'V@?ڣUX^yH!ΨCUji07 !t4#"*[1'{t/ L`Kҳ{:}kU\+*#EW6&AF/OfFPA}rA<&C]ai$b^ z3^<(`Q}WYA y3_
O0hDΌBC>Lg?z>G̓.CeB]%5
}LO?#)?㋵XW k003 }u 1' i(ug{CO*.vRMa)G!ln @1e-v9L/mОփin$&y9%zݤI<z Hp@FLʳZܻ8EQ;c6$Bbž aB hS^>( A{Z' =d=}f]4 uЈ #1(sYE]Oä40emVyqko6ʖ&h*zFsKA9"y;ZY
7xW" Σ+)|AeL rq4
Szl6ײp,ơ [
{^$\Aa ҡ )ܾ' :ԉoUi/`2K{N_y0"_Z5YIs4J9X*% KD_.y Xq@ݎqJY;+nPfK8{* )wF< Ek4Z|a:+ĩl
j˸\*-,3hS[q ydҰ1VbK4=it80@(Yz5r ڎR䆇) $a|}&|p %a K [T4|2l,:/ȥ6Q3u[^SX +a.
~D-k-&QdVJj~yv#Ha7)fd?}ؑ*?Ɗ|SfH!;p+L<,|.cW=NţJV/.Ï
|!Aj R9Mhsʡ }Cb S;duAΩ߶b6O=OGa늨듕U Pk4S+@՝knO^>8^9EQCT,,!$S%_Jc2 9I쬨>=JQɷUr) :/
C@$|}`LpJ=J03[ҟ,?{1X tE̾RY$;_Q>7 /Es(0l, uݻ:f'9w! y8_l
ANC ՋؚS:u)^̏azb«3>چTM&!,.Z>P$ C ~X 7̝$5_`$yR
s>zUH=PƟԄ#I}W84w>(kuYZ&01X\K0BE XAja uamnU+x.]6:#P
Y ":&} uc)zs ȣ#2A ];N%
6eHN0W-1@D}4JA']x9(j$=0<8elw=- ( }q2$rf !YKBD<7@o~)2jiW2,*?pϜdam\ũӳ,FPzR1ؽ6;:4gDS a"afÉmϜ~x +t5J/R ߫&'~$7j 0Y!H&``d| yd _aH/ֶ
FZ }@h.`]s \XɑRs{Bdvt-M,wx%#
P@̓|iV<
oЦ^{M3{]+>q1Zy#q 6-JÉm 9\/'Ҹ} {v$&s zo|~JEZIK/X]988J>ywֲ%bys VJH1:1-/y% 'mגН
B% 0r tgaqCgAK1)g )ޱ /M8)<Վm}Qnd^')56 -TJfP> D)Qλ6_bµ h̉S6Mٰ[jcN>jC ϫaz6_* wDPl":tz SCySƔo4/IvY` cm
|<0='LL5vN%G6_X~Cy&M&(U~om$ wCzNG-pX3\T!η &aVzjKyeen+8qX؋e_I h;bUܶa,rr c7'/LM_X753fu C7 ȡl;xiwPF4 #Z/U%$7LʧF``) \{aJ /\m
MDܷ` ERd-
"
T5+& [Mi$UG?7#H23aʎdMNvZ X ˃R(
Xqٿr ٜȬk< 8/
Qa'S /@g;WƗ%4+p0E&rڂp~YM̻XD&s2y
U|? G^@jvTzgDTy~(1&ذg! Һ,Ƃ8@XbG
H0{ ?^/ d cnsbI8Ky{%fڗ/0!EO#-@uY1n
S^?/Ǡ21O%lad7bD$N44 * ~\
҂(6wCz6E'zD1w"V A ߅ 1w v8XΫ tݧeA
,Us!0m D ѭvsX_bNs n\
m1/<&9k\7t#_bUK֟ȲS)F؇|ItZ6 ^S*Tv'_w{4z~E =q!c0wi A__~ڶG>i}mόvu&c`e.kϬ\\&3w\*>}$Vn T>|4Xb'@:&\qa_4JOGk|˧{U0?Y}r쏆5ĸylywVn M6P ?,>LM;[M;gz&ZP!|A#= #)G8F= p+P)/Rq $aI߳ŢAjS\9y
p6|$8])-ԕQ-95w Z64 o@+o盆)}1| Ŵ= a HFx<_@hOBKΛ {>XIڳX{w pl$,cJ5CƼq杌RM,9m_U6Lmq9q ӏee hI+xE
S. }r:y6/LfP
NTIo#N!?E ]2_ٓ^q:~p!O5W~d6@&Z1!l^V#Wm]]
:ϐQHN`:a>(eՒ\+
}*XU9IXo-iI]&kKxA.R>.H%0u ;#a^hD:^IO t/aˁQ=a╤Lǜ Ӻ3zN٬# WyM"҇AD ~\ P2$oc&d.RsmvqvD7݀'pȅ^Vol($srE;Iٖ
s+B% -)gO/ũ
*3g8$E
u=9^n'G1+Bg4Fm u/Iy4Ybnl]][ 0)\ ~1~},Ci>
%XRE\G/ q$ H5q)`WVĉｱ& =ތw=D%&
=o'1$-͕Yc-Ès~t jN9'C"E 0i:mA$bⱳ@Už,
koٓ fW[]V3Ǔ To\aA 2:BcUU5_uEtQA1xZa2c\fmz (Cs/ b 4x>Ù&- Y81Rjh֢a81cW N
cc>uf 5m
e1cGRS3p=/ۣYgIOSW1jb$zu֥48p]2XB>fX C|qz@F @ޠSCL'o33C MDG m`# >`p?ޠZ 8J`&]W8َ;tW* K( h
,, 꾕Hu;nP㊇J%-!+ܵͫ^Mv
y' U Q&Bϼ 銠6 YPCfeA U=xJ`N I "g9#/]]smpl-K˵m@B$Th
EjXfɤs̹]
c>4qjQ Kvu 6Z{3 UȚtU})X[@( $}- M1/x?=#Z;[I91:,C^w_Gkv-BB%YDN`HQHKiy$4E,.㑾q:H8# @_^aQNQ { Jna
倃R b\t0y e8 YYvnEc]ޏ>Cm.Q:>t1Zݎ _>ޑڮ_ϟ#s 9B`[XvR ߢ=^9vj!pes(p~GM UIkY=6lL7.ه ӈׅG2Akۗ~n)T{"$?3N:<*u\|2.Xb8ʫ@Qvak*mmSx#=ZM/qo@& 6K3J~ѓ3*Muxݣl{\ Q.
\X5n؟fP?u'*n?MގNvdp _GJݨb]Qa.eR&Q۱OEogJuf֊6y^|Wh#R1 \cX1XǟZX DT
SU%ħ?:^"}=3lQ淑
M (\#"/[ KHAfZwO8T n'j{j$d4xa ϳQ('Bud%yS? gYW!T]Gb&L0;ajjH.-ӭUUĴlPh_s\lI\Ƭ1M,O4//➩HC LaCc :i
h#c4qhJ zuމ7CN #, ] JIHP-;ʀ'a\-+ 'ٴ"VA{f6
:^Z[qV(TPV&$lU==kNJU:W|gu0On7Gv:.]&с>uQ$Ԡیɓ%!O4zigqN?Sy:+y_% em*@ t \%zqXen+ʅ8aWZ%dZ.|v1v iAFm5pæŒMW K#HO:{3# z.'#7cl]
'h] ԼU%{sRlhV~993L_"g2ikjhPl&y*trדo3ؑFNU#ex`&
2AAh+jz!}m7R #`7UrzF}\>0^@˻@U *,Ys7LSD3;wiK&l΄Wպ \=yf +e:NXlRrD#ԓK^0 g"q (^5F =l{ n
>eFn]l9wX'
xsj(\W p .yQ,E@ N
6߅d~$AuIѱ|[' }kNBjv*%,4_\UG
Uk#eڻy; 8BIac^-?Ό#J*zO[]cTwI Qn ?]Q8<\[o'"4;twĠJ-
$ c/rabBي*Q^TNNɻ݆A!hVu=TsJdD6flyZ3h)4[2Yuӌ$xļI0dB/5hf=sA6W.HkښKEcΐ/ߡҥEQAusrwOEB 6=R6h6 5'MV1hb D.ӱ[a} hX!tHmmF&?̰vEmr_I <= I{ TC<:B~ 0@=Y2鵉b{W)V=
1j܋G0 9
kD;tVbb)O@*0XAcsϰr/'^G>]F*o~ZʂH,}R#Mg/P U3_ۼ||j]N0w>`~Q9Y\L@
0l}4b v1z$ PHY;tIm^c31FkuLP#0tZ {+]>E,}2TH#[rZsğȌ].5c*.feQ/y%Ow10 $Z! $dT8 lχИxjݟk;Q3])n Ku1wNN1Oi2=0N " V,1
,ã+Xy5"رr"( ifu\SZx^y k omn;Ze ?惠E AFk: P 9@0h?;tj>P}fkgp^1 zȏӦ/} ws=[yM 8gj)LHUI28 nA[+PJގ^d F2QqIR;ݎ2QCtoV>v@[\KaRlYiR'+YF7hj;Eb> j\, RCe@/R؎ HOi}gcy<0NH_qШb Z0yNb:Y,Ia RgB 3܊Y!ƣ'nJ0s/^v b[zl(jSκ߭4nIWd /·5rkp&*4rwOu%G]]!9t i0qK2QZED h~BfEk]&
gdhbZ藡ԚLz6!,{U=ϱZV?6[T{/ PxQ|E,3w(J\7pӁ 7N' lz#Q# S)
?o|E-dg&3٬D^LFc!ɺr|49R,AYgD
C y!<|&k =W5#XT ma
~<6 r7{D`H<%"-_V?[A?1@)5i N퀪9 v%q2JkFPnkxmEg $BL < əo8delW"aIU_W`]靰 U_uv5 `d3ۧC eUr 䒅УDk_S9W'T> kʼnEeU- _8trU (^ T} a,ٚc XDOOO& oe1254( Bf>bo5S ʇuHinnpxboo
ɰX 03)?>%Y閘 2v{͵rQOl^;}
ʖYfㅱPgJ% DDb@4$<RZ6 ,1 o( FMr Tڞ9.= weCV?NfS$qPO &C
>քn,]揼ϧ({
a|}%}oy/F9{RtR*
L;A3NXL !
|To5/5G{S;u֢XXy
&HP❈Dqx6m۠1M{C~A|wZe7WK/&LFyK91 RɅ' 3c%V,!x1iz.Ũ0/^@H(yEZjeQv
RÓ:sٴZsSL{ x@w)W.}|!%Hs-{놺Z@EhSA OC( .v& G?إ(գ7{ZA`x^/ ;aBq 9Uq?
ey&Ũ ^{> qq ;/deĠ`^鄹wY37lO WSƇ]M `o tUaQ]Q8{2%- (Պ(!(c\ i@K~uP_l* ,]~0ARugR:)?hs uROϊZmơt\Tk=],`O*Œ7
` 6ƽM4[]{MFb Y{)
ծ[Tycb{Ϸ洼Qp,9d տ?M&.64֤3Of?%X7 Wl nKIN ,6rT]Sv6v:Hw2!.' `uB;bY}EjMpN Y?kpj=e@6xa.|4 &Sʙ[Iέ`,fMwz**'8 }։}
h-I
D-WmՄ OSA gV?Kd]t[`[y/ ؟ǿ 3!Z;H'^S_Owl 3
̠e( ͡gq;Qʹqx,D 9"=fR/lUO.#V8*mz^RȟF7zwlӿm>EӬMLT"i 4)Mx s࡛ cJQ3>8ț* _\ A/8+@&ƏT[oa-ٓzTжI $NYyfP\ $NnSЍJ7]7fBs ?Ӫ
e*[FpU:%F}/e4
Yն"gWyɞQO7̈(Wѱu/ҬsI 轍olTmKyP jhQKe-{#~.Z\8rc{y`iz頂#C
(k^MJ5
Oʭ>vmT &vC p1ғL죴@eEvCDozo+j
N ͊n[7,\e< g8c_ο2ܓ$$D Zu !Z$T=A:rMn=Jp xW~0.LO+*r >>Dk!n5+9:/!R`⫽ ֚pa dp{Di(|yy$3evRCP0?kP
s-p̂$:91۳\}< ,}۬9|Q*і ӼVVi$U&_? 2qbܲz E3 7IҸMLLiE=S6}Ov<0Z kUyrqJP"ܤa$t{W{#a0Uc" JE ,/!A)ԭ 83 jbCVλ=V" O;-N m=e&Z 7 -
XLH 5<g7EgvK%t䟆{ N<ɂnH wg~1 YQX vধ,#%aYg d5wgа"l&p2aؕP
ܞ[6HoM-\kZU8DMG{ռwg># =^ F+G }<ּ]Yӊ7+1 I bR LO?Cp ꡳmK{88B~|} f$<>QPusM2-T}| h 3T.б8
2隱9q82$9~r~hHt@+uo lYG9h&`P z@k0<_46 &z7@(gn zq\vd= !vc
44@涠 \QUA==cLEuXqOJ
,roίBp6͚88~
_ՂQܿLT&TgN-dP(`~xQp3Jk[n \p[ekDh z [ER9IGdCњL0D8'Ez=ְ̆tk?h~wB 4vd@. ^x CBeZTPu5\8I :'~ydnJ-5yvuGl)bOuqkK& [k&b~嚙ΧL1sm\R`x˒ԧP48kObiAlq+o
6-8LmB "Ra6P8, @
j5xCIJ*/ g