pki-ca-10.5.1-9.el7> H HtxHFZԧ] ?*}}*UX\r~l '#*Rj.SU'iJbef54bb34eed9fd1180e9e10f78c8fff27256412$r8ia FZԧ] ?*}}7pJP6o$UYqepfFøBf$>8M?M d   A         , J P XSS JS S <S iS lSqLSwS~~S   (89:GSH SI$SXxY|\S]S^2b5d6re6wf6zl6|t6Su;SvA, wBpSxGSMCpki-ca10.5.19.el7Certificate System - Certificate AuthorityThe Certificate Authority (CA) is a required PKI subsystem which issues, renews, revokes, and publishes certificates as well as compiling and publishing Certificate Revocation Lists (CRLs). The Certificate Authority can be configured as a self-signing Certificate Authority, where it is the root CA, or it can act as a subordinate CA, where it obtains its own signing certificate from a public CA. This package is one of the top-level java-based Tomcat PKI subsystems provided by the PKI Core used by the Certificate System. ================================== || ABOUT "CERTIFICATE SYSTEM" || ================================== Certificate System (CS) is an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments. PKI Core contains ALL top-level java-based Tomcat PKI components: * pki-symkey * pki-base * pki-base-python2 (alias for pki-base) * pki-base-python3 * pki-base-java * pki-tools * pki-server * pki-ca * pki-kra * pki-ocsp * pki-tks * pki-tps * pki-javadoc which comprise the following corresponding PKI subsystems: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) Python clients need only install the pki-base package. This package contains the python REST client packages and the client upgrade framework. Java clients should install the pki-base-java package. This package contains the legacy and REST Java client packages. These clients should also consider installing the pki-tools package, which contain native and Java-based PKI tools and utilities. Certificate Server instances require the fundamental classes and modules in pki-base and pki-base-java, as well as the utilities in pki-tools. The main server classes are in pki-server, with subsystem specific Java classes and resources in pki-ca, pki-kra, pki-ocsp etc. Finally, if Certificate System is being deployed as an individual or set of standalone rather than embedded server(s)/service(s), it is strongly recommended (though not explicitly required) to include at least one PKI Theme package: * dogtag-pki-theme (Dogtag Certificate System deployments) * dogtag-pki-server-theme * redhat-pki-server-theme (Red Hat Certificate System deployments) * redhat-pki-server-theme * customized pki theme (Customized Certificate System deployments) * -pki-server-theme NOTE: As a convenience for standalone deployments, top-level meta packages may be provided which bind a particular theme to these certificate server packages.Zw"sl7-kojislave01.fnal.gov$Scientific LinuxScientific LinuxGPLv2Scientific LinuxSystem Environment/Daemonshttp://pki.fedoraproject.org/linuxnoarch=me&`1l[#t1J6 [[S }F}F+. g%~~[G7(b){^p/{,,x,R.W`MLyP*Nx % *S*L$,kI,A,:+A+3 u9 #%##"vU "`./9/]   Q q >#E/#+{B/'m)H nrtknvpyi  *L*?5%C%c*m;c=O? 9%9Q][  T \71 0VCCF6CQ& "Y"\><bc q  dF r- ~->E,g=tB 1"?%I7Px]%A큤AA큤AA큤A큤AA큤A큤AAA큤A큤AAA큤A큤A큤A큤A큤A큤A큤A큤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.jar/usr/share/java/pki/pki-certsrv.jar/usr/share/java/pki/pki-cms.jar/usr/share/java/pki/pki-cmsbundle.jar/usr/share/java/pki/pki-cmscore.jar/usr/share/java/pki/pki-cmsutil.jar/usr/share/java/pki/pki-nsutil.jar/usr/share/pki/server/webapps/pki/admin/consolerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpki-core-10.5.1-9.el7.src.rpmpki-ca    java-1.8.0-openjdk-headlesspki-serverrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)systemd-unitssystemd-unitssystemd-unitsrpmlib(PayloadIsXz)10.5.1-9.el73.0.4-14.6.0-14.0-15.2-14.11.3Z@ZZxG@Zg#Z.s@Z@Z ZYYY@Y@Y@YoIYlYGY>@Y5GY-^Y$$@Y"Y@Y#@X@XX@XO@X*XRXOX!@X&X2@WWҤ@WίW#W:WWt@W{@Wu WgWV@WV@WV@WV@WV@WV@W 10.5.1-9Dogtag Team 10.5.1-8Dogtag Team 10.5.1-7Dogtag Team 10.5.1-6Dogtag Team 10.5.1-5Dogtag Team 10.5.1-4Troy Dawson - 10.5.1-3Dogtag Team 10.5.1-2Dogtag Team 10.5.1-1Dogtag Team 10.5.0-1Dogtag Team 10.4.1-15Dogtag Team 10.4.1-14Dogtag Team 10.4.1-13Dogtag Team 10.4.1-12Dogtag Team 10.4.1-11Dogtag Team 10.4.1-10Dogtag Team 10.4.1-9Dogtag Team 10.4.1-8Dogtag Team 10.4.1-7Dogtag Team 10.4.1-6Dogtag Team 10.4.1-5Dogtag Team 10.4.1-4Dogtag Team 10.4.1-3Dogtag Team 10.4.1-2Dogtag Team 10.4.1-1Dogtag Team 10.4.0-1Dogtag Team 10.3.3-18Dogtag Team 10.3.3-17Dogtag Team 10.3.3-16Dogtag Team 10.3.3-15Dogtag Team 10.3.3-14Dogtag Team 10.3.3-13Dogtag Team 10.3.3-12Dogtag Team 10.3.3-11Dogtag Team 10.3.3-10Dogtag Team 10.3.3-9Dogtag Team 10.3.3-8Dogtag Team 10.3.3-7Dogtag Team 10.3.3-6Dogtag Team 10.3.3-5Dogtag Team 10.3.3-3Dogtag Team 10.3.3-2Dogtag Team 10.3.3-1Dogtag Team 10.3.3-0.1Dogtag Team 10.3.2-5Dogtag Team 10.3.2-4Dogtag Team 10.3.2-3Dogtag Team 10.3.2-2Dogtag Team 10.3.2-1Dogtag Team 10.3.2-0.1Dogtag Team 10.3.1-1Dogtag Team 10.3.0-1Dogtag Team 10.3.0.b1-1Dogtag Team 10.3.0.a2-2Dogtag Team 10.3.0.a2-1Dogtag Team 10.3.0.a1-2Dogtag Team 10.3.0.a1-1Dogtag Team 10.3.0-0.5Dogtag Team 10.3.0-0.4Dogtag Team 10.3.0-0.3Dogtag Team 10.3.0-0.2Dogtag Team 10.3.0-0.1Dogtag Team 10.2.7-0.3Tomas Radej - 10.2.7-0.2Dogtag Team 10.2.7-0.1Dogtag Team 10.2.6-1Dogtag Team 10.2.6-0.3Dogtag Team 10.2.6-0.2Dogtag Team 10.2.6-0.1Dogtag Team 10.2.5-1Dogtag Team 10.2.5-0.2Dogtag Team 10.2.5-0.1Dogtag Team 10.2.4-1Dogtag Team 10.2.4-0.2Dogtag Team 10.2.4-0.1Dogtag Team 10.2.3-1Dogtag Team 10.2.3-0.1Dogtag Team 10.3.0-0.1Dogtag Team 10.2.3-0.1Dogtag Team 10.2.2-1Dogtag Team 10.2.2-0.1Dogtag Team 10.2.1-1Matthew Harmsen - 10.2.1-0.4Ade Lee 10.2.1-0.3Christina Fu 10.2.1-0.2Dogtag Team 10.2.1-0.1Ade Lee 10.2.0-3Matthew Harmsen - 10.2.0-2Dogtag Team 10.2.0-1Matthew Harmsen - 10.2.0-0.10Matthew Harmsen - 10.2.0-0.9Matthew Harmsen - 10.2.0-0.8Fedora Release Engineering - 10.2.0-0.5Jack Magne - 10.2.0-0.7Matthew Harmsen - 10.2.0-0.6Matthew Harmsen - 10.2.0-0.5Ade Lee - 10.2.0-0.4Fedora Release Engineering - 10.2.0-0.3Michael Simacek - 10.2.0-0.2Dogtag Team 10.2.0-0.1Ade Lee 10.1.0-1Ade Lee 10.1.0-0.14Ade Lee 10.1.0-0.13Ade Lee 10.1.0-0.12Ade Lee 10.1.0-0.11Endi S. Dewata 10.1.0-0.10Abhishek Koneru 10.1.0.0.9Abhishek Koneru 10.1.0.0.8Endi S. Dewata 10.1.0-0.7Endi S. Dewata 10.1.0-0.6Endi S. Dewata 10.1.0-0.5Ade Lee 10.1.0-0.4Endi S. Dewata 10.1.0-0.3Matthew Harmsen 10.1.0-0.2Ade Lee 10.1.0-0.1Endi S. Dewata 10.0.2-5Ade Lee 10.0.2-4Ade Lee 10.0.2-3Endi S. Dewata 10.0.2-2Ade Lee 10.0.2-1Ade Lee 10.0.2-0.8Endi S. Dewata 10.0.2-0.7Endi S. Dewata 10.0.2-0.6Ade Lee 10.0.2-0.5Endi S. Dewata 10.0.2-0.4Endi S. Dewata 10.0.2-0.3Endi S. Dewata 10.0.2-0.2Endi S. Dewata 10.0.2-0.1Endi S. Dewata 10.0.1-9Ade Lee 10.0.1-8Endi S. Dewata 10.0.1-7Matthew Harmsen 10.0.1-6Endi S. Dewata 10.0.1-5Endi S. Dewata 10.0.1-4Matthew Harmsen 10.0.1-3Matthew Harmsen 10.0.1-2Ade Lee 10.0.1-1Matthew Harmsen 10.0.0-5Matthew Harmsen 10.0.0-4Ade Lee 10.0.0-3Ade Lee 10.0.0-2Ade Lee 10.0.0-1Matthew Harmsen 10.0.0-0.56.b3Endi S. Dewata 10.0.0-0.55.b3Endi S. Dewata 10.0.0-0.54.b3Ade Lee 10.0.0-0.53.b3Ade Lee 10.0.0-0.52.b3Endi S. Dewata 10.0.0-0.51.b2Endi S. Dewata 10.0.0-0.50.b2Matthew Harmsen 10.0.0-0.49.b2Ade Lee 10.0.0-0.48.b2Matthew Harmsen 10.0.0-0.47.b1Ade Lee 10.0.0-0.46.b1Ade Lee 10.0.0-0.45.b1Ade Lee 10.0.0-0.44.b1Ade Lee 10.0.0-0.43.b1Ade Lee 10.0.0-0.42.b1Ade Lee 10.0.0-0.41.b1Ade Lee 10.0.0-0.40.b1Endi S. Dewata 10.0.0-0.40.a2Endi S. Dewata 10.0.0-0.39.a2Ade Lee 10.0.0-0.38.a2Endi S. Dewata 10.0.0-0.37.a2Ade Lee 10.0.0-0.36.a2Endi S. Dewata 10.0.0-0.36.a1Endi S. Dewata 10.0.0-0.35.a1Endi S. Dewata 10.0.0-0.34.a1Ade Lee 10.0.0-0.33.a1Matthew Harmsen 10.0.0-0.32.a1Endi S. Dewata 10.0.0-0.31.a1Endi S. Dewata 10.0.0-0.30.a1Endi S. Dewata 10.0.0-0.29.a1Endi S. Dewata 10.0.0-0.28.a1Endi S. Dewata 10.0.0-0.27.a1Endi S. Dewata 10.0.0-0.26.a1Endi S. Dewata 10.0.0-0.25.a1Endi S. Dewata 10.0.0-0.24.a1Matthew Harmsen 10.0.0-0.23.a1Endi S. Dewata 10.0.0-0.22.a1Endi S. Dewata 10.0.0-0.21.a1Matthew Harmsen 10.0.0-0.20.a1Matthew Harmsen 10.0.0-0.19.a1Matthew Harmsen 10.0.0-0.18.a1Endi S. Dewata 10.0.0-0.17.a1Matthew Harmsen 10.0.0-0.16.a1Ade Lee 10.0.0-0.15.a1Christina Fu 10.0.0-0.14.a1Endi S. Dewata 10.0.0-0.13.a1Endi S. Dewata 10.0.0-0.12.a1Ade Lee 10.0.0-0.11.a1Matthew Harmsen 10.0.0-0.10.a1Matthew Harmsen 10.0.0-0.9.a1Jack Magne 10.0.0-0.8.a1Matthew Harmsen 10.0.0-0.7.a1Endi S. Dewata 10.0.0-0.6.a1Ade Lee 10.0.0-0.5.a1Endi S. Dewata 10.0.0-0.4.a1Matthew Harmsen 10.0.0-0.3.a1Matthew Harmsen 10.0.0-0.2.a1Nathan Kinder 10.0.0-0.1.a1Ade Lee 9.0.16-3Endi S. Dewata 9.0.16-2Matthew Harmsen 9.0.16-1Matthew Harmsen 9.0.15-1Matthew Harmsen 9.0.14-1Ade Lee 9.0.13-1Matthew Harmsen 9.0.12-1Matthew Harmsen 9.0.11-1Matthew Harmsen 9.0.10-1Matthew Harmsen 9.0.9-1Matthew Harmsen 9.0.8-2Matthew Harmsen 9.0.8-1Matthew Harmsen 9.0.7-1Matthew Harmsen 9.0.6-2Matthew Harmsen 9.0.6-1Matthew Harmsen 9.0.5-2Matthew Harmsen 9.0.5-1Matthew Harmsen 9.0.4-1Matthew Harmsen 9.0.3-2Matthew Harmsen 9.0.3-1Matthew Harmsen 9.0.2-1Matthew Harmsen 9.0.1-3Matthew Harmsen 9.0.1-2Matthew Harmsen 9.0.1-1Matthew Harmsen 9.0.0-3Matthew Harmsen 9.0.0-2Matthew Harmsen 9.0.0-1- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event set (RHEL) (edewata) - Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata) - Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM and FIPS (edewata) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1542210 - pki console configurations that involves ldap passwords leave the plain text password in debug logs (jmagne) - Bugzilla Bug #1543242 - Regression in lightweight CA key replication (ftweedal) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event set (RHEL) (edewata) - Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and audit event logging at startup (jmagne) - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA instance (alee) - Bugzilla Bug #1525306 - CC: missing CMC request and response record (cfu) - Bugzilla Bug #1532933 - Installing subsystems with external CMC certificates in HSM environment shows import error (edewata) - Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm (edewata) - Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers permitted in fips mode (mharmsen) - Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED outcomes. (edewata) - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in SharedToken scenario's (cfu) - Bugzilla Bug #1541526 - CMC: Revocation works with an unknown revRequest.issuer (cfu) - Bugzilla Bug #1541853 - ProfileService: config values with backslashes have backslashes removed (ftweedal) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the- Updated jss, nuxwdog, and openssl dependencies - ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in few cases (ftweedal) - Bugzilla Bug #1428021 - CC: shared token storage and retrieval mechanism (cfu) - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause error (cfu) - Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog (alee) - Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during pkispawn (alee) - Bugzilla Bug #1520526 - p12 admin certificate is missing when certificate is signed Externally (edewata) - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA instance (alee) - Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to missing nextupdate field (ftweedal) - Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen) - Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords in several different files after installation completes (alee) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - Bugzilla Bug #1466066 - CC: Secure removal of secret data storage (jmagne) - Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to setup with CMC signed certificates (cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- dogtagpki Pagure Issue #2853 - Cleanup spec file conditionals- Patch applying check-ins since 10.5.1-1- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- #Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0- #Require "jss >= 4.4.0-8" as a build and runtime requirement - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332 - # Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions) - # Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error - # Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from - # Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS) - # Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin - # dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data: - ########################################################################## - # RHCS 9.2: - ########################################################################## - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271 - # Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and - # Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin- Resolves: rhbz #1463350 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1463350 - Access banner validation (edewata)- # Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing - # Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause - # Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert - # Bugzilla Bug #1463350 - Access banner validation (edewata) - # Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal - # Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen) - # Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with - # Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option - # Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03 - # Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system- # Resolves: rhbz #1469432 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1469432 - CMC plugin default change - # Resolves CVE-2017-7537 - # Fixes BZ #1470948- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1458043 - Key recovery on token fails with invalid public key error on KRA (alee) - Bugzilla Bug #1460764 - CC: CMC: check HTTPS client authentication cert against CMC signer (cfu) - Bugzilla Bug #1461533 - Unable to find keys in the p12 file after deleting the any of the subsystem certs from it (ftweedal)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret) using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne) - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing certificate requests (cfu) - Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC revocation non-signing cert requests (cfu) - Bugzilla Bug #1458047 - change the way aes clients refer to aes keysets (alee) - Bugzilla Bug #1458055 - dont reuse IVs in the CMC code (alee) - Bugzilla Bug #1460028 - In keywrap mode, key recovery on KRA with HSM causes KRA to crash (ftweedal)- Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement - Require "tomcatjss >= 7.2.1-4" as a build and runtime requirement - ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS enabled system (edewata) - Bugzilla Bug #1447144 - CA brought down during separate KRA instance creation (edewata) - Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure ACCESS_SESSION_ESTABLISH_FAILURE (edewata) - Bugzilla Bug #1454450 - SubCA installation failure with 2 step installation in fips enabled mode (edewata) - Bugzilla Bug #1456597 - Certificate import using pki client-cert-import is asking for password when already provided (edewata) - Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes) - Bugzilla Bug #1458043 - Key recovery using externalReg fails with java null pointer exception on KRA (alee) - Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter (edewata) - Bugzilla Bug #1458429 - client-cert-import --ca-cert should import CA cert with trust bits "CT,C,C" (edewata) - ########################################################################## - # RHCS 9.2: - ########################################################################## - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret) using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne) - Bugzilla Bug #1445519 - CA Server installation with HSM fails (jmagne) - Bugzilla Bug #1452617 - Unable to create IPA Sub CA (ftweedal) - Bugzilla Bug #1454471 - Enabling all subsystems on startup (edewata) - Bugzilla Bug #1455617 - Key recovery on token fails because key record is not marked encrypted (alee)- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error (mharmsen)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal non-signing cert requests (cfu) - Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed) CMC with identity proof (cfu) - Bugzilla Bug #1447144 - CA brought down during separate KRA instance creation (mharmsen) - Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata) - Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne) - Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen) - Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in ConnectorServlet. (edewata) - Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata) - Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED audit event. (edewata)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1386303 - cannot extract generated private key from KRA when HSM is used. (alee) - Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes) - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause error (cfu) - Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from the KRA (ftweedal) - Bugzilla Bug #1448204 - pkispawn of clone install fails with InvalidBERException (ftweedal) - Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on thales hsm (alee) - Updated "jss" build and runtime requirements (mharmsen) - ########################################################################## - # RHCS 9.2: - ########################################################################## - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)- ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in conjuction with FreeIPA (ftweedal) - Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the startTime parameter is not working as expected. (jmagne) - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing certificate requests (cfu) - Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal) - Bugzilla Bug #1445088 - profile modification cannot remove existing config parameters (ftweedal) - Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption) (RHEL) (alee) - Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when pki CLI terminates SSL connection (edewata) - Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption) (RHCS) (alee)- ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1282504 - Installing pki-server in container reports scriptlet failed, exit status 1 (jpazdziora) - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS enabled system (edewata) - Bugzilla Bug #1410650 - [RFE] Add SCP03 support for sc 7 g & d cards (RHEL) (jmagne) - Bugzilla Bug #1437591 - cli authentication using expired cert throws an exception (edewata) - Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a request (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1274086 - [RFE] Add SCP03 support for sc 7 g & d cards (RHCS) (jmagne) - ############################################################################ - # Common Criteria - ############################################################################ - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures (edewata) - Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata) - Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature implementation (cfu)- Require "nss >= 3.28.3" as a build and runtime requirement - Require "jss >= 4.4.0-4" as a build and runtime requirement - Require "tomcatjss >= 7.2.1-3" as a build and runtime requirement - dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find failure (edewata) - ############################################################################ - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4 - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.4.x - ############################################################################ - # RHEL 7.4: - ############################################################################ - ############################################################################ - # RHCS 9.2: - ############################################################################ - ############################################################################ - # Common Criteria - ############################################################################ - Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature implementation (cfu) - Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption cert requests (cfu) - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures (edewata) - Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance protection cert mechanism (cfu)- Require "jss >= 4.4.0-1" as a build and runtime requirement - Require "tomcatjss >= 7.2.1-1" as a build and runtime requirement - ############################################################################ - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4 - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.4.x - ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1222557 - ECDSA Certificates Generated by Certificate System 8.1 fail NIST validation test with parameter field. (cfu) - Bugzilla Bug #1238684 - Generting Symmetric key fails with key-generate when --usages verify (vakwetu) - Bugzilla Bug #1246635 - user-cert-add --serial CLI request to secure port with remote CA shows authentication failure (edewata) - Bugzilla Bug #1249400 - CA EE: Submit caUserCert request without uid does not show proper error message (vakwetu) - Bugzilla Bug #1305993 - Add profile component that copies CN to SAN (ftweedal) - Bugzilla Bug #1316653 - pki ca-cert-request-submit fails presumably because of missing authentication even if it should not require any (edewata) - Bugzilla Bug #1325071 - add options to enable/disable cert or crl publishing. (vakwetu) - Bugzilla Bug #1330800 - Failed to start pki-tomcatd Service ("ipa-cacert-manage renew" failed?) (edewata) - Bugzilla Bug #1368410 - Misleading Logging for HSM (edewata) - Bugzilla Bug #1372052 - Unable to search certificate requests using the latest request ID (edewata) - Bugzilla Bug #1375347 - Typo in comment line of UserPwdDirAuthentication.java (edewata) - Bugzilla Bug #1376226 - IPA replica-prepare failed with error "Profile caIPAserviceCert Not Found" (ftweedal) - Bugzilla Bug #1376488 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - Bugzilla Bug #1378275 - two-step externally-signed CA installation fails due to missing AuthorityID (ftweedal) - Bugzilla Bug #1378277 - Spurious host authority entries created (ftweedal) - Bugzilla Bug #1378527 - Miscellaneous Minor Changes (edewata) - Bugzilla Bug #1381084 - KRA installation failed against externally-signed CA with partial certificate chain (edewata) - Bugzilla Bug #1382066 - Problems with FIPS mode (edewata) - Bugzilla Bug #1386371 - Remove xenroll.dll from pki-core (mharmsen) - Bugzilla Bug #1386424 - Fix packaging duplicates of classes in multiple jar files (edewata) - Bugzilla Bug #1391737 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (RHEL 7) (edewata) - Bugzilla Bug #1392068 - [RFE] add express archivals and retrievals from KRA (vakwetu) - Bugzilla Bug #1395817 - Unable to install subordinate CA with HSM in FIPS mode (edewata) - Bugzilla Bug #1397200 - pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config (jmagne) - Bugzilla Bug #1399862 - Dogtag 10.3.9 Man Pages (edewata) - Bugzilla Bug #1404881 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - Bugzilla Bug #1405654 - Token memory not wiped after key deletion (RHEL) (jmagne) - Bugzilla Bug #1409946 - Request ID undefined for CA signing certificate (vakwetu) - Bugzilla Bug #1409949 - CA Certificate Issuance Date displayed on CA website incorrect (vakwetu) - Bugzilla Bug #1410650 - [RFE] Add SCP03 support (RHEL) (jmagne) - Bugzilla Bug #1411428 - Unable to create a CA clone in FIPS (edewata) - Bugzilla Bug #1412211 - Unable to set up KRA in FIPS (edewata) - Bugzilla Bug #1412681 - update to 7.3 IPA with otpd bugfixes, tomcat will not finish start, hangs (ftweedal) - Bugzilla Bug #1413132 - pki-tomcat for 10+ minutes before generating cert (edewata) - Bugzilla Bug #1413136 - Problem with default AJP hostname in IPv6 environment. (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1 (cfu) - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne) - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed tokens (jmagne) - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working when a token is physically damaged and a temporary token is issued (jmagne) - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches (cfu) - Bugzilla Bug #1381635 - Token format with external reg fails when op.format.externalRegAddToToken.revokeCert=true (cfu) - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when set on a token (jmagne) - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (RHCS 9) (edewata) - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (RHCS) (jmagne) - Bugzilla Bug #1404900 - Dogtag 10.3.9 logging properties (edewata) - Bugzilla Bug #1405655 - Token memory not wiped after key deletion (RHCS) (jmagne) - ############################################################################- ## RHEL 7.3.z Batch Update 4 - Bugzilla Bug #1429492 - Add profile component that copies CN to SAN (ftweedal)- ## RHCS 9.1.z Batch Update 3 - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - ## RHEL 7.3.z Batch Update 3 - Bugzilla Bug #1417063 - ECDSA Certificates Generated by Certificate System 8.1 fail NIST validation test with parameter field. (cfu) - Bugzilla Bug #1417064 - Unable to search certificate requests using the latest request ID (edewata) - Bugzilla Bug #1417065 - CA Certificate Issuance Date displayed on CA website incorrect (alee) - Bugzilla Bug #1417066 - update to 7.3 IPA with otpd bugfixes, tomcat will not finish start, hangs (ftweedal) - Bugzilla Bug #1417067 - pki-tomcat for 10+ minutes before generating cert (edewata) - Bugzilla Bug #1417190 - Problem with default AJP hostname in IPv6 environment. (edewata)- Separate original patches into RHEL and RHCS portions - ## RHEL 7.3.z Batch Update 2 - Bugzilla Bug #1404176 - logging properties and man pages (edewata) - Bugzilla Bug #1405328 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - ## RHCS 9.1.z Batch Update 2 - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - Bugzilla Bug #1404900 - RHCS logging properties (edewata)- ## RHEL 7.3.z Batch Update 2 - Bugzilla Bug #1404173 - user-cert-add --serial CLI request to secure port with remote CA shows authentication failure (edewata) - Bugzilla Bug #1404175 - pki ca-cert-request-submit fails presumably because of missing authentication even if it should not require any (edewata) - Bugzilla Bug #1404178 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI [pki-base] (edewata) - Bugzilla Bug #1404172 - Unable to install subordinate CA with HSM in FIPS mode (edewata) - Bugzilla Bug #1403689 - pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config (jmagne) - Bugzilla Bug #1404176 - logging properties and man pages (edewata) - ## RHCS 9.1.z Batch Update 2 - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI [pki-tps] (edewata) - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne)- Marked the following RHCS 9.1.z bug: Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel when TPS and TKS security db is on fips mode. (jmagne) as a duplicate of RHEL 7.3.z bug: Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) and moved the patch from the RHCS 9.1.z bug to the RHEL 7.3.z bug.- ## RHEL 7.3.z Batch Update 1 - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) (added KRA key recovery via CLI in FIPS mode) - ## RHCS 9.1.z Batch Update 1 - Reverted patches associated with Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (edewata)- ## RHEL 7.3.z Batch Update 1 - Bugzilla Bug #1390318 - CA EE: Submit caUserCert request without uid does not show proper error message (alee) - Bugzilla Bug #1390319 - Failed to start pki-tomcatd Service ("ipa-cacert-manage renew" failed?) (edewata) - Bugzilla Bug #1390320 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - Bugzilla Bug #1390321 - two-step externally-signed CA installation fails due to missing AuthorityID (ftweedal) - Bugzilla Bug #1390322 - Spurious host authority entries created (ftweedal) - Bugzilla Bug #1390324 - KRA installation failed against externally-signed CA with partial certificate chain (edewata) - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) - Bugzilla Bug #1390311 - Fix packaging duplicates of classes in multiple jar files (edewata) - Bugzilla Bug #1390325 - Typo in comment line of UserPwdDirAuthentication.java (edewata) - ## RHCS 9.1.z Batch Update 1 - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1" (cfu) - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed tokens (jmagne) - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working when a token is physically damaged and a temporary token is issued (jmagne) - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches - Bugzilla Bug #1381635 - Token format with external reg fails when op.format.externalRegAddToToken.revokeCert=true (cfu) - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when set on a token (jmagne) - Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel when TPS and TKS security db is on fips mode. (jmagne) - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (edewata)- PKI TRAC Ticket #1527 - TPS Enrollment always goes to "ca1" (cfu) - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - PKI TRAC Ticket #2478 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - PKI TRAC Ticket #2483 - Unable to read an encrypted email using renewed tokens (jmagne) - PKI TRAC Ticket #2496 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches (cfu) - PKI TRAC Ticket #2505 - Fix packaging duplicates of classes in multiple jar files (edewata)- Revert Patch: PKI TRAC Ticket #2449 - Unable to create system certificates in different tokens (edewata) - Resolves: rhbz #1374054 - ipa-replica-install fails setting up certificate - Restores: rhbz #1319557 - pkispawn KRA instance is failing server - Removes from Errata: rhbz #1372041 - Unable to create system certificates in different tokens- PKI TRAC Ticket #1638 - Lightweight CAs: revoke certificate on CA deletion (ftweedal) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (edewata) - PKI TRAC Ticket #2443 - Prevent deletion of host CA's keys if LWCA entry deleted (ftweedal) - PKI TRAC Ticket #2444 - Authority entry without entryUSN is skipped even if USN plugin enabled (ftweedal) - PKI TRAC Ticket #2446 - pkispawn: make subject_dn defaults unique per instance name (for shared HSM) (cfu) - PKI TRAC Ticket #2447 - CertRequestInfo has incorrect URLs (vakwetu) - PKI TRAC Ticket #2449 - Unable to create system certificates in different tokens (edewata)- PKI TRAC Ticket #1578 - Authentication Instance Id PinDirEnrollment with authType value as SslclientAuth is not working (jmagne) - PKI TRAC TIcket #2414 - pki pkcs12-cert-del shows a successfully deleted message when a wrong nickname is provided (gkapoor) - PKI TRAC Ticket #2423 - pki_ca_signing_token when not specified does not fallback to pki_token_name value (edewata) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (akasurde) - ticket remains open - PKI TRAC Ticket #2439 - Outdated deployment descriptors in upgraded server(edewata)- PKI TRAC Ticket #690 - [MAN] pki-tools man pages (mharmsen) - CMCEnroll - PKI TRAC Ticket #833 - pki user-mod fullName="" gives an error message "PKIException: LDAP error (21): error result" (edewata) - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade. (cheimes, edewata, mharmsen) - PKI TRAC Ticket #2432 - Kra-selftest behavior is not as expected (edewata) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (edewata, mharmsen) - PKI TRAC Ticket #2437 - TPS UI: while adding certs for users from TPSUI pem format with/without header works while pkcs7 with header is not allowed (edewata) - PKI TRAC Ticket #2440 - Optional CA signing CSR for migration (edewata)- Bugzilla Bug #1366465 - Errata TPS upgrade test fails- PKI TRAC Ticket #978 - TPS connector man page: add revocation routing info (cfu) - PKI TRAC Ticket #1285 - [MAN] Apply 'generateCRMFRequest() removed from Firefox' workarounds to appropriate 'pki' man page (jmagne) - PKI TRAC Ticket #2246 - [MAN] Man Page: AuditVerify (cfu) - PKI TRAC Ticket #2381 - Throws exception while providing invalid module. (edewata) - PKI TRAC Ticket #2383 - CLI :: pki client-cert-request --extractable should accept only boolean value (edewata) - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter beyond CA signing cert in case of external or existing CA (cfu) - PKI TRAC Ticket #2399 - Dogtag 10.3.5: Miscellaneous Enhancements (akasurde, alee, cheimes, edewata, jmagne, mharmsen) - PKI TRAC Ticket #2401 - pkispawn calls dnsdomainname even if it does not rpm-require hostname (mharmsen) - PKI TRAC Ticket #2402 - Conflict in file ownership in pki-base and pki-server (cheimes) - PKI TRAC Ticket #2403 - Deployment problem with RESTEasy 3.0.17 (edewata) - PKI TRAC Ticket #2406 - Make starting CRL Number configurable (jmagne) - PKI TRAC Ticket #2412 - pki client-cert-import --trust option does not apply the specified trust bits (alee) - PKI TRAC Ticket #2418 - [TPS] Some template substitution didn't happen during installation (alee) - PKI TRAC Ticket #2420 - CA subsystem OSCP responder fails when LWCAs are not used (ftweedal) - PKI TRAC Ticket #2421 - Incorrect SELinux contexts Installation/Configuration (edewata) - PKI TRAC Ticket #2424 - ipa-ca-install fails on replica when IPA server is converted from CA-less to CA-full (edewata) - PKI TRAC Ticket #2428 - broken request links for CA's system certs in agent request viewing (cfu) - PKI TRAC Ticket #2430 - CA Agent certificate list is not sorted by serial number in migration case (jmagne) - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade. (mharmsen) - PKI TRAC Ticket #2433 - Lightweight CA GET /chain returns bogus PEM data (ftweedal)- PKI TRAC Ticket #691 - [MAN] pki-server man pages (mharmsen) - PKI TRAC Ticket #1114 - [MAN] Generting Symmetric key fails with key-generate when --usages verify is passed (jmagne) - PKI TRAC Ticket #1306 - [RFE] Add granularity to token termination in TPS (cfu) - PKI TRAC Ticket #1308 - [RFE] Provide ability to perform off-card key generation for non-encryption token keys (cfu) - PKI TRAC Ticket #1405 - [MAN] Add additional HSM details to 'pki_default.cfg' & 'pkispawn' man pages (mharmsen) - PKI TRAC Ticket #1607 - [MAN] man pkispawn has inadequate description for shared vs non shared tomcat instance installation (mharmsen) - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - PKI TRAC Ticket #1711 - CLI :: pki-server ca-cert-request-find throws IOError (edewata, ftweedal) - PKI TRAC Ticket #2285 - freeipa fails to start correctly after pki-core update on upgraded system (ftweedal) - PKI TRAC Ticket #2311 - When pki_token_name=Internal, consider normalizing it to "internal" (mharmsen) - PKI TRAC Ticket #2349 - Separated TPS does not automatically receive shared secret from remote TKS (jmagne) - PKI TRAC Ticket #2364 - CLI :: pki-server ca-cert-request-show throws attribute error (ftweedal) - PKI TRAC Ticket #2368 - pki-server subsystem subcommands throws error with --help option (edewata) - PKI TRAC Ticket #2374 - KRA cloning overwrites CA signing certificate trust flags (edewata) - PKI TRAC Ticket #2380 - Pki-server instance commands throws exception while specifying invalid parameters. (edewata) - PKI TRAC Ticket #2384 - CA installation with HSM prompts for HSM password during silent installation (edewata) - PKI TRAC Ticket #2385 - Upgraded CA lacks ca.sslserver.certreq in CS.cfg (ftweedal) - PKI TRAC Ticket #2387 - Add config for default OCSP URI if none given (ftweedal) - PKI TRAC Ticket #2388 - CA creation responds 500 if certificate issuance fails (ftweedal) - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter beyond CA signing cert in case of external or existing CA (cfu) - PKI TRAC Ticket #2390 - Dogtag 10.3.4: Miscellaneous Enhancements (akasurde, edewata)- PKI TRAC Ticket #2373 - Fedora 25: RestEasy 3.0.6 ==> 3.0.17 breaks pki-core (ftweedal)- Updated release number to 10.3.3-1- Updated version number to 10.3.3-0.1- Provided cleaner runtime dependency separation- Updated tomcatjss version dependencies- Updated 'java', 'java-headless', and 'java-devel' dependencies to 1:1.8.0.- Updated tomcat version dependencies- Updated version number to 10.3.2-1- Updated version number to 10.3.2-0.1- Updated version number to 10.3.1-1 (to allow upgrade from 10.3.0.b1)- Updated version number to 10.3.0-1- Build for F24 beta- PKI TRAC Ticket #2255 - PKCS #12 backup does not contain trust attributes.- Updated build for F24 alpha- PKI TRAC Ticket #1625 - Allow multiple ACLs of same name (union of rules) [ftweedal] - PKI TRAC Ticket #2237 - Add CRL dist points extension to OIDMap unconditionally [edewata] - PKI TRAC Ticket #1803 - Removed unnecessary URL encoding for admin cert request. [edewata] - PKI TRAC Ticket #1742 - Added support for cloning 3rd-party CA certificates. [edewata] - PKI TRAC Ticket #1482 - Added TPS token filter dialog. [edewata] - PKI TRAC Ticket #1808 - Fixed illegal token state transition via TEMP_LOST. [edewata]- Build for F24 alpha- PKI Trac Ticket #1399 - Move java components out of pki-base- PKI TRAC Ticket #1850 - Rename DRMTool --> KRATool- PKI TRAC Ticket #1714 - mod_revocator and mod_nss dependency for tps should be removed- PKI TRAC Ticket #1623 - Runtime dependency on python-nss is missing- Updated version number to 10.3.0-0.1- Added dep on tomcat-servlet-3.1-api [Fedora 23 and later] or dep on tomcat-servlet-3.0-api [Fedora 22 and later] to pki-tools - Updated dep on tomcatjss [Fedora 23 and later]- Updated dep on policycoreutils-python-utils [Fedora 23 and later]- Updated version number to 10.2.7-0.1- Update release number for release build- Remove setup directory and remaining Perl dependencies- Remove ExcludeArch directive- Updated version number to 10.2.6-0.1- Update release number for release build- Resolves rhbz #1230970 - Errata TPS tests for rpm verification failed- Updated version number to 10.2.5-0.1- Update release number for release build- Updated nuxwdog and tomcatjss requirements (alee)- Updated version number to 10.2.4-0.1 - Added nuxwdog systemd files- Update release number for release build- Reverted version number back to 10.2.3-0.1 - Added support for Tomcat 8.- Updated version number to 10.3.0-0.1- Updated version number to 10.2.3-0.1- Update release number for release build- Updated version number to 10.2.2-0.1 - Moved web application deployment locations. - Updated Resteasy and Jackson dependencies. - Added missing python-lxml build dependency.- Update release number for release build- PKI TRAC Ticket #1187 - mod_perl should be removed from requirements for 10.2 - PKI TRAC Ticket #1205 - Outdated selinux-policy dependency. - Removed perl(XML::LibXML), perl-Crypt-SSLeay, and perl-Mozilla-LDAP runtime dependencies- Change resteasy dependencies for F22+- Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by default and upgrade (cfu) - PKI Trac Ticket #1211 - New release overwrites old source tarball (mharmsen) - up the release number to 0.2- Updated version number to 10.2.1-0.1. - Added CLIs to simplify generating user certificates - Added enhancements to KRA Python API - Added a man page for pki ca-profile commands. - Added python api docs- Disable pylint dependency for RHEL builds - Added jakarta-commons-httpclient requirements - Added tomcat version for RHEL build - Added resteasy-base-client for RHEL build- PKI TRAC Ticket #1130 - Add RHEL/CentOS conditionals to spec- Update release number for release build- PKI TRAC Ticket #1017 - Rename pki-tps-tomcat to pki-tps- Merged jmagne@redhat.com's spec file changes from the stand-alone 'pki-tps-client' package needed to build/run the native 'tpsclient' command line utility into this 'pki-core' spec file under the 'tps' package. - Original tps libararies must be built to support this native utility. - Modifies tps package from 'noarch' into 'architecture-specific' package- PKI TRAC Ticket #1127 - Remove 'pki-ra', 'pki-setup', and 'pki-silent' packages . . .- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Respin to include the applet files with the rpm install. No change to spec file needed.- Bugzilla Bug #1120045 - pki-core: Switch to java-headless (build)requires -- drop dependency on java-atk-wrapper - Removed 'java-atk-wrapper' dependency from 'pki-server'- PKI TRAC Ticket #832 - Remove legacy 'systemctl' files . . .- Update rawhide build- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Use Requires: java-headless rebuild (#1067528)- Added option to build without server packages. - Replaced Jettison with Jackson. - Added python-nss build requirement - Bugzilla Bug #1057959 - pkispawn requires policycoreutils-python - TRAC Ticket #840 - pkispawn requires policycoreutils-python - Updated requirements for resteasy - Added template files for archive, retrieve and generate key requests to the client package.- Trac Ticket 788 - Clean up spec files - Update release number for release build - Updated requirements for resteasy- Change release number for beta build- Updated requirements for tomcat- Removed additional /var/run, /var/lock references.- Removed delivery of /var/lock and /var/run directories for fedora 20.- Moved Tomcat-based TPS into pki-core.- Listed new packages required during build, due to issues reported by pylint. - Packages added: python-requests, python-ldap, libselinux-python, policycoreutils-python- Added pylint scan to the build process.- Added man pages for upgrade tools.- Cleaned up the code to install man pages.- Reorganized deployment tools.- Bugzilla Bug 973224 - resteasy-base must be split into subpackages to simplify dependencies- Updated dependencies to Java 1.7.- TRAC Ticket 606 - add restart / start at boot info to pkispawn man page - TRAC Ticket 610 - Document limitation in using GUI install - TRAC Ticket 629 - Package ownership of '/usr/share/pki/etc/' directory- Change release number for 10.1 development- Fixed incorrect JNI_JAR_DIR.- TRAC Ticket 605 Junit internal function used in TestRunner, breaks F19 build- TRAC Ticket 604 Added fallback methods for pkispawn tests- Added default pki.conf in /usr/share/pki/etc - Create upgrade tracker on install and remove it on uninstall- Change release number for official release.- Added %pretrans script for f19 - Added java-atk-wrapper dependency- Added pki-server-upgrade script and pki.server module. - Call upgrade scripts in %post for pki-base and pki-server.- Added dependency on commons-io.- Add /var/log/pki and /var/lib/pki directories- Run pki-upgrade on post server installation.- Added dependency on python-lxml.- Added pki-upgrade script.- Updated version number to 10.0.2-0.1.- Renamed base/deploy to base/server. - Moved pki.conf into pki-base. - Removed redundant pki/server folder declaration.- Removed jython dependency- Added minimum python-requests version.- Bugzilla Bug #919476 - pkispawn crashes due to dangling symlink to jss4.jar- Added dependency on python-requests. - Reorganized Python module packaging.- Added dependency on python-ldap.- TRAC Ticket #517 - Clean up theme dependencies - TRAC Ticket #518 - Remove UI dependencies from pkispawn . . .- Removed runtime dependency on 'pki-server-theme' to resolve Bugzilla Bug #916134 - unresolved dependency in pki-server: pki-server-theme- TRAC Ticket 214 - Missing error description for duplicate user - TRAC Ticket 213 - Add nonces for cert revocation - TRAC Ticket 367 - pkidestroy does not remove connector - TRAC Ticket #430 - License for 3rd party code - Bugzilla Bug 839426 - [RFE] ECC CRL support for OCSP - Fix spec file to allow f17 to work with latest tomcatjss - TRAC Ticket 466 - Increase root CA validity to 20 years - TRAC Ticket 469 - Fix tomcatjss issue in spec files - TRAC Ticket 468 - pkispawn throws exception - TRAC Ticket 191 - Mapping HTTP Exceptions to HTTP error codes - TRAC Ticket 271 - Dogtag 10: Fix 'status' command in 'pkidaemon' . . . - TRAC Ticket 437 - Make admin cert p12 file location configurable - TRAC Ticket 393 - pkispawn fails when selinux is disabled - Punctuation and formatting changes in man pages - Revert to using default config file for pkidestroy - Hardcode setting of resteasy-lib for instance - TRAC Ticket 436 - Interpolation for pki_subsystem - TRAC Ticket 433 - Interpolation for paths - TRAC Ticket 435 - Identical instance id and instance name - TRAC Ticket 406 - Replace file dependencies with package dependencies- TRAC Ticket #430 - License for 3rd party code- TRAC Ticket #469 - Dogtag 10: Fix tomcatjss issue in pki-core.spec and dogtag-pki.spec . . . - TRAC Ticket #468 - pkispawn throws exception- Replaced file dependencies with package dependencies- Updated man pages- Update to official release for rc1- TRAC Ticket #315 - Man pages for pkispawn/pkidestroy. - Added place-holders for 'pki.1' and 'pki_default.cfg.5' man pages.- Added system-wide configuration /etc/pki/pki.conf. - Removed redundant lines in %files.- Moved default deployment configuration to /etc/pki.- Cleaned up spec file to provide only support rhel 7+, f17+ - Added resteasy-base dependency for rhel 7 - Update cmake version- Update release to b3- Removed dependency on CA, KRA, OCSP, TKS theme packages.- Renamed pki-common-theme to pki-server-theme.- TRAC Ticket #395 - Dogtag 10: Add a Tomcat 7 runtime requirement to 'pki-server'- Update release to b2- TRAC Ticket #350 - Dogtag 10: Remove version numbers from PKI jar files . . .- Added Obsoletes for pki-selinux- Remove build of pki-selinux for f18, use system policy instead- Update required tomcatjss version - Added net-tools dependency- Update selinux-policy version to fix error from latest policy changes- Fix typo in selinux policy versions- Added build requires for correct version of selinux-policy-devel- Update release to b1- Merged pki-silent into pki-server.- Renamed "shared" folder to "server".- Added required selinux versions for new policy.- Added Provides to packages replacing obsolete packages.- Update release to a2- Modified CMake to use RPM version number- Added VERSION file- Merged pki-setup into pki-server- Added Conflicts for IPA 2.X - Added build requires for zip to work around mock problem- TRAC Ticket #312 - Dogtag 10: Automatically restart any running instances upon RPM "update" . . . - TRAC Ticket #317 - Dogtag 10: Move "pkispawn"/"pkidestroy" from /usr/bin to /usr/sbin . . .- Fixed pki-server to include everything in shared dir.- Added build dependency on redhat-rpm-config.- Merged Javadoc packages.- Added pki-tomcat.jar.- Moved webapp creation code into pkispawn.- Split pki-client.jar into pki-certsrv.jar and pki-tools.jar.- Merged pki-native-tools and pki-java-tools into pki-tools. - Modified pki-server to depend on pki-tools.- Split pki-common into pki-base and pki-server. - Merged pki-util into pki-base. - Merged pki-deploy into pki-server.- Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 17 - Changed Dogtag 10 build-time and runtime requirements for 'pki-deploy' - Altered PKI Package Dependency Chain (top-to-bottom): pki-ca, pki-kra, pki-ocsp, pki-tks --> pki-deploy --> pki-common- Added pki-client.jar.- Merged pki-jndi-realm.jar into pki-cmscore.jar.- PKI TRAC Task #254 - Dogtag 10: Fix spec file to build successfully via mock on Fedora 17 . . .- Moved 'pki-jndi-real.jar' link from 'tomcat6' to 'tomcat' (Tomcat 7)- Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 18- Added CLI for REST services- Integration of Tomcat 7 - Addition of centralized 'pki-tomcatd' systemd functionality to the PKI Deployment strategy - Removal of 'pki_flavor' attribute- BZ 813075 - selinux denial for file size access- Bug 745278 - [RFE] ECC encryption keys cannot be archived- Replaced candlepin-deps with resteasy- Added option to build without Javadoc- BZ 802396 - Change location of TOMCAT_LOG to match tomcat6 changes - Corrected patch selected for selinux f17 rules- Corrected 'junit' dependency check- Initial attempt at PKI deployment framework described in 'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'.- Added support for pki-jndi-realm in tomcat6 in pki-common and pki-kra. - Ticket #69.- For 'mock' purposes, removed platform-specific logic from around the 'patch' files so that ALL 'patch' files will be included in the SRPM.- Removed dependency on OSUtil.- 'pki-selinux' - Added platform-dependent patches for SELinux component - Bugzilla Bug #739708 - Selinux fix for ephemeral ports (F16) - Bugzilla Bug #795966 - pki-selinux policy is kind of a mess (F17)- Added dependency on Apache Commons Codec.- Add '-DSYSTEMD_LIB_INSTALL_DIR' override flag to 'cmake' to address changes in fundamental path structure in Fedora 17 - 'pki-setup' - Hard-code Perl dependencies to protect against bugs such as Bugzilla Bug #772699 - Adapt perl and python fileattrs to changed file 5.10 magics - 'pki-selinux' - Bugzilla Bug #795966 - pki-selinux policy is kind of a mess- Integrated 'pki-kra' into 'pki-core' - Integrated 'pki-ocsp' into 'pki-core' - Integrated 'pki-tks' into 'pki-core' - Bugzilla Bug #788787 - added 'junit'/'junit4' build-time requirements- Updated package version number- Added resteasy-jettison-provider-2.3-RC1.jar to pki-setup- Added JUnit tests- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token (cfu) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the in-place upgrade( CS 8.0->8.1) (cfu) - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #746367 - Typo in the profile name. (jmagne) - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token (cfu) - Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17 (rawhide) . . . (mharmsen) - Bugzilla Bug #749945 - Installation error reported during CA, DRM, OCSP, and TKS package installation . . . (mharmsen) - 'pki-silent'- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen) - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-setup' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - Bugzilla Bug #737192 - Need script to upgrade proxy configuration (alee) - 'pki-symkey' - Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode (hsm+NSS). (jmagne) - 'pki-native-tools' - Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk) - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-util' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - Bugzilla Bug #737218 - Incorrect request attribute name matching ignores request attributes during request parsing. (awnuk) - Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode (hsm+NSS). (jmagne) - 'pki-selinux' - Bugzilla Bug #739708 - pki-selinux lacks rules in F16 (alee) - 'pki-ca' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-silent' - Bugzilla Bug #739201 - pkisilent does not take arch into account as Java packages migrated to arch-dependent directories (mharmsen)- 'pki-setup' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-symkey' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-java-tools' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-common' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-silent' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .- 'pki-setup' - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-ca' - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-common' - Bugzilla Bug #699809 - Convert CS to use systemd (alee)- 'pki-setup' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-symkey' - 'pki-native-tools' - Bugzilla Bug #717643 - Fopen without NULL check and other Coverity issues (awnuk) - Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk) - 'pki-util' - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #700522 - pki tomcat6 instances currently running unconfined, allow server to come up when selinux disabled (alee) - Bugzilla Bug #731741 - some CS.cfg nickname parameters not updated correctly when subsystem cloned (using hsm) (alee) - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-selinux' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-ca' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-silent'- 'pki-setup' - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee) - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #724861 - DRMTool: fix duplicate "dn:" records by renumbering "cn=" (mharmsen) - 'pki-common' - Bugzilla Bug #717041 - Improve escaping of some enrollment inputs like (jmagne, awnuk) - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee) - Bugzilla Bug #708075 - Clone installation does not work over NAT (alee) - Bugzilla Bug #726785 - If replication fails while setting up a clone it will wait forever (alee) - Bugzilla Bug #728332 - xml output has changed on cert requests (awnuk) - Bugzilla Bug #700505 - pki tomcat6 instances currently running unconfined (alee) - 'pki-selinux' - Bugzilla Bug #700505 - pki tomcat6 instances currently running unconfined (alee) - 'pki-ca' - Bugzilla Bug #728605 - RFE: increase default validity from 6mo to 2yrs in IPA profile (awnuk) - 'pki-silent' - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee)- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #719007 - Key Constraint keyParameter being ignored using an ECC CA to generate ECC certs from CRMF. (jmagne) - Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding for any component value which is equal to its default value (alee) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #720510 - Console: Adding a certificate into nethsm throws Token not found error. (jmagne) - Bugzilla Bug #719007 - Key Constraint keyParameter being ignored using an ECC CA to generate ECC certs from CRMF. (jmagne) - Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding for any component value which is equal to its default value (alee) - Bugzilla Bug #722989 - Registering an agent when a subsystem is created - does not log AUTHZ_SUCCESS event. (alee) - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #719113 - Add client usage flag to caIPAserviceCert (awnuk) - 'pki-silent'- Updated release of 'jss' - Updated release of 'tomcatjss' for Fedora 15 - 'pki-setup' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser (jdennis) - Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-symkey' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-native-tools' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #717765 - TPS configuration: logging into security domain from tps does not work with clientauth=want. (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-util' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-java-tools' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (config file and record processing) (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (tweaks) (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-common' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs throws 'Invalid protocol' for OCSP subsystems (alee) - Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee) - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages (alee) - Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk) - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages (jmagne) - Bugzilla Bug #698885 - Race conditions during IPA installation (alee) - Bugzilla Bug #704792 - CC_LAB_EVAL: CA agent interface: SubjectID=$Unidentified$ fails audit evaluation (jmagne) - Bugzilla Bug #705914 - SCEP mishandles nicknames when processing subsequent SCEP requests. (awnuk) - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added. (jmagne) - Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs for modify/add (alee) - Bugzilla Bug #707416 - additional audit messages for GetCookie (alee) - Bugzilla Bug #707607 - Published certificate summary has list of non-published certificates with succeeded status (jmagne) - Bugzilla Bug #717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated for tps and ca on server shutdown (jmagne) - Bugzilla Bug #697939 - DRM signed audit log message - operation should be read instead of modify (jmagne) - Bugzilla Bug #718427 - When audit log is full, server continue to function. (alee) - Bugzilla Bug #718607 - CC_LAB_EVAL: No AUTH message is generated in CA's signedaudit log when a directory based user enrollment is performed (jmagne) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-selinux' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #720503 - RA and TPS require additional SELinux permissions to run in "Enforcing" mode (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-ca' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser (jdennis) - Bugzilla Bug #699837 - service command is not fully backwards compatible with Dogtag pki subsystems (mharmsen) - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. (jmagne) - Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs for modify/add (alee) - Bugzilla Bug #716269 - make ra authenticated profiles non-visible on ee pages (alee) - Bugzilla Bug #718621 - CC_LAB_EVAL: PRIVATE_KEY_ARCHIVE_REQUEST occurs for a revocation invoked by EE user (awnuk) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-silent' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Added 'DRMTool.cfg' configuration file to inventory - 'pki-common' - 'pki-selinux' - 'pki-ca' - 'pki-silent'- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #532548 - Tool to do DRM re-key - 'pki-common' - 'pki-selinux' - 'pki-ca' - 'pki-silent'- 'pki-setup' - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser - Bugzilla Bug #694569 - parameter used by pkiremove not updated - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs throws 'Invalid protocol' for OCSP subsystems - Bugzilla Bug #694569 - parameter used by pkiremove not updated - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages - Bugzilla Bug #694143 - CA Agent not returning specified request - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages - Bugzilla Bug #698885 - Race conditions during IPA installation - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser - Bugzilla Bug #699837 - service command is not fully backwards compatible with Dogtag pki subsystems - 'pki-silent'- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.- Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta) - Bugzilla Bug #693327 - Missing requires: tomcatjss - 'pki-setup' - Bugzilla Bug #690626 - pkiremove removes the registry entry for all instances on a machine - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port throws file not found exception. - 'pki-common' - Bugzilla Bug #692990 - Audit log messages needed to match CC doc: DRM Recovery audit log messages - 'pki-selinux' - 'pki-ca' - 'pki-silent'- Bugzilla Bug #693327 - Missing requires: tomcatjss- Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta) - Require "jss >= 4.2.6-15" as a build and runtime requirement - Require "tomcatjss >= 2.1.1" as a build and runtime requirement for Fedora 15 and later platforms - 'pki-setup' - Bugzilla Bug #688287 - Add "deprecation" notice regarding using "shared ports" in pkicreate -help . . . - Bugzilla Bug #688251 - Dogtag installation under IPA takes too much time - SELinux policy compilation - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #689501 - ExtJoiner tool fails to join the multiple extensions - 'pki-common' - Bugzilla Bug #683581 - CA configuration with ECC(Default EC curve-nistp521) CA fails with 'signing operation failed' - Bugzilla Bug #689662 - ocsp publishing needs to be re-enabled on the EE port - 'pki-selinux' - Bugzilla Bug #684871 - ldaps selinux link change - 'pki-ca' - Bugzilla Bug #683581 - CA configuration with ECC(Default EC curve-nistp521) CA fails with 'signing operation failed' - Bugzilla Bug #684381 - CS.cfg specifies incorrect type of comments - Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port throws file not found exception.(profile and CS.cfg only) - 'pki-silent'- Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha) - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA instance - Bugzilla Bug #675742 - Profile caIPAserviceCert Not Found - 'pki-setup' - Bugzilla Bug #678157 - uninitialized variable warnings from Perl - Bugzilla Bug #679574 - Velocity fails to load all dependent classes - Bugzilla Bug #680420 - xml-commons-apis.jar dependency - Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's classpath - Bugzilla Bug #673508 - CS8 64 bit pkicreate script uses wrong library name for SafeNet LunaSA - 'pki-common' - Bugzilla Bug #673638 - Installation within IPA hangs - Bugzilla Bug #678715 - netstat loop fixes needed - Bugzilla Bug #673609 - CC: authorize() call needs to be added to getStats servlet - 'pki-selinux' - Bugzilla Bug #674195: SELinux error message thrown during token enrollment - 'pki-ca' - Bugzilla Bug #673638 - Installation within IPA hangs - Bugzilla Bug #673609 - CC: authorize() call needs to be added to getStats servlet - Bugzilla Bug #676330 - init script cannot start service - 'pki-silent' - Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's classpath- 'pki-common' - Bugzilla Bug #676051 - IPA installation failing - Fails to create CA instance - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA instance- 'pki-common' - Bugzilla Bug #674894 - ipactl restart : an annoy output line - Bugzilla Bug #675179 - ipactl restart : an annoy output line- Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes - 'pki-setup' - Bugzilla Bug #673638 - Installation within IPA hangs - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package - 'pki-common' - Bugzilla Bug #672291 - CA is not publishing certificates issued using "Manual User Dual-Use Certificate Enrollment" - Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error. - Bugzilla Bug #504056 - Completed SCEP requests are assigned to the "begin" state instead of "complete". - Bugzilla Bug #504055 - SCEP requests are not properly populated - Bugzilla Bug #564207 - Searches for completed requests in the agent interface returns zero entries - Bugzilla Bug #672291 - CA is not publishing certificates issued using "Manual User Dual-Use Certificate Enrollment" - - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package - Bugzilla Bug #672920 - CA console: adding policy to a profile throws 'Duplicate policy' error in some cases. - Bugzilla Bug #673199 - init script returns control before web apps have started - Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI subsystem instances - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #504013 - sscep request is rejected due to authentication error if submitted through one time pin router certificate enrollment. - Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing information - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation - Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI subsystem instances - 'pki-silent' - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package- Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files in /var/run and /var/lock- 'pki-symkey' - Bugzilla Bug #671265 - pki-symkey jar version incorrect - 'pki-common' - Bugzilla Bug #564207 - Searches for completed requests in the agent interface returns zero entries- Allow 'pki-native-tools' to be installed independently of 'pki-setup' - Removed explicit 'pki-setup' requirement from 'pki-ca' (since it already requires 'pki-common') - 'pki-setup' - Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group - Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP and TKS. - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from OpenLDAP instead of the Mozldap - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13 - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*, pkicreate fails Fedora 14 and above - Bugzilla Bug #23346 - Two conflicting ACL list definitions in source repository - Bugzilla Bug #656733 - Standardize jar install location and jar names - 'pki-symkey' - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #644056 - CS build contains warnings - 'pki-native-tools' - template change - Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from OpenLDAP instead of the Mozldap - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #644056 - CS build contains warnings - 'pki-util' - Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical cannot be set to true - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #635033 - At installation wizard selecting key types other than CA's signing cert will fail - Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and CS interface - Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse ASN.1 encoding/decoding is broken - Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1 encoding/decoding is incomplete - Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1 encoding/decoding is incomplete - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #658188 - remove remaining references to tomcat5 - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #223319 - Certificate Status inconsistency between token db and CA - Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory During CRL Generation - 'pki-java-tools' - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1 - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to 5000 bytes - Bugzilla Bug #656733 - Standardize jar install location and jar names - 'pki-common' - Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review - Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable started before configuration completed - Bugzilla Bug #620925 - CC: auditor needs to be able to download audit logs in the java subsystems - Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5 policy mappings (seem hardcoded) - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #548699 - subCA's admin certificate should be generated by itself - Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA - Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile caAgentServerCert (null cert_request) - Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited number of times - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #629677 - TPS: token enrollment fails. - Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN in a SCEP request - Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection pools not reliable - improve connections or discovery - Bugzilla Bug #629769 - password decryption logs plain text password - Bugzilla Bug #583823 - CC: Auditing issues found as result of CC - interface review - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #586700 - OCSP Server throws fatal error while using OCSP console for renewing SSL Server certificate. - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #607380 - CC: Make sure Java Console can configure all security relevant config items - Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be generated on TKS instead of TPS. - Bugzilla Bug #489342 - com.netscape.cms.servlet.common.CMCOutputTemplate.java doesn't support EC - Bugzilla Bug #630121 - OCSP responder lacking option to delete or disable a CA that it serves - Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1 - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #635033 - At installation wizard selecting key types other than CA's signing cert will fail - Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated for SCEP signing and encryption. - Bugzilla Bug #223336 - ECC: unable to clone a ECC CA - Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned by Reason Code - onlySomeReasons ? - Bugzilla Bug #637330 - CC feature: Key Management - provide signature verification functions (JAVA subsystems) - Bugzilla Bug #223313 - should do random generated IV param for symmetric keys - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory - Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on ECC curve names (not on key sizes). - Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple Certificates from the Same Request - Bugzilla Bug #648757 - expose and use updated cert verification function in JSS - Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection of signature algorithm; and for ECC curves - Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing e.c. support - Bugzilla Bug #651040 - cloning shoud not include sslserver - Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to CS.cfg files imcomplete when the cert is stored on a hsm - Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . . - Bugzilla Bug #651916 - kra and ocsp are using incorrect ports to talk to CA and complete configuration in DonePanel - Bugzilla Bug #642359 - CC Feature - need to verify certificate when it is added - Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires auditing - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #499494 - change CA defaults to SHA2 - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets as expected - Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for validity - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1 - Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA. - Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an error to TPS even if certificate in question is already revoked. - Bugzilla Bug #663546 - Disable the functionalities that are not exposed in the console - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #658188 - remove remaining references to tomcat5 - Bugzilla Bug #649343 - Publishing queue should recover from CA crash. - Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and pkiCA, obsolete 2252 and 2256 - Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added - Bugzilla Bug #642741 - CS build uses deprecated functions - Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error - Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time interface is no longer available through console - 'pki-selinux' - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer - selinux changes - 'pki-ca' - Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review - Bugzilla Bug #620925 - CC: auditor needs to be able to download audit logs in the java subsystems - Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA - Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of CC interface doc review - Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with admin privilege throws error "You are not authorized to perform this operation". - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #583823 - CC: Auditing issues found as result of CC - interface review - Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws 'Internal Server Error'. - Bugzilla Bug #586700 - OCSP Server throws fatal error while using OCSP console for renewing SSL Server certificate. - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be generated on TKS instead of TPS. - Bugzilla Bug #630121 - OCSP responder lacking option to delete or disable a CA that it serves - Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1 - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned by Reason Code - onlySomeReasons ? - Bugzilla Bug #637330 - CC feature: Key Management - provide signature verification functions (JAVA subsystems) - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on ECC curve names (not on key sizes). - Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple Certificates from the Same Request - Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection of signature algorithm; and for ECC curves - Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA release -- DRM and TKS do not seem to have CRL checking enabled - Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help correctly set up CC environment - Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in certificates (RFC 4262) - Bugzilla Bug #651916 - kra and ocsp are using incorrect ports to talk to CA and complete configuration in DonePanel - Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object signing support in RHCS - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #499494 - change CA defaults to SHA2 - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets as expected - Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for validity - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke certs in TPS - Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature - Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA. - Bugzilla Bug #649343 - Publishing queue should recover from CA crash. - Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and pkiCA, obsolete 2252 and 2256 - Bugzilla Bug #223346 - Two conflicting ACL list definitions in source repository - Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added - Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key usage - Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time interface is no longer available through console - Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory During CRL Generation - 'pki-silent' - Bugzilla Bug #627309 - pkisilent subca configuration fails. - Bugzilla Bug #640091 - pkisilent panels need to match with changed java subsystems - Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM Clone. - Bugzilla Bug #643053 - pkisilent DRM configuration fails - Bugzilla Bug #583754 - pki-silent needs an option to configure signing algorithm for CA certificates - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module Panel up to before Security Domain Panel - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #588323 - Failed to enable cipher 0xc001 - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves, signing algorithm - Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords with special characters - Bugzilla Bug #642741 - CS build uses deprecated functions- Bugzilla Bug #668839 - Review Request: pki-core - Removed empty "pre" from "pki-ca" - Consolidated directory ownership - Corrected file ownership within subpackages - Removed all versioning from NSS and NSPR packages- Bugzilla Bug #668839 - Review Request: pki-core - Added component versioning comments - Updated JSS from "4.2.6-10" to "4.2.6-12" - Modified installation section to preserve timestamps - Removed sectional comments- Initial revision. (kwright@redhat.com & mharmsen@redhat.com)  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRS10.5.1-9.el7    pki-ca-10.5.1LICENSEpki-ca.jarcaconfCS.cfgCatalinalocalhostca.xmlacl.ldifacl.propertiesadminCert.profileauth-method.propertiescaAuditSigningCert.profilecaCert.profilecaOCSPCert.profiledb.ldifflatfile.txtindex.ldifindextasks.ldifjk2.manifestjk2.propertiesjkconf.ant.xmljkconfig.manifestproxy.confregistry.cfgserver-minimal.xmlserverCert.profileserverCert.profile.exampleWithSANserverCert.profile.exampleWithSANpatternshm.manifestsubsystemCert.profiletomcat-jk2.manifesttomcat-users.xmluriworkermap.propertiesvlv.ldifvlvtasks.ldifweb.xmlworkers.propertiesworkers.properties.minimalworkers2.propertiesworkers2.properties.minimalemailsExpiredUnpublishJobExpiredUnpublishJobItemcertIssued_CAcertIssued_CA.htmlcertIssued_RAcertIssued_RA.htmlcertRequestRejected.htmlcertRevoked_CAcertRevoked_CA.htmlcertRevoked_RAcertRevoked_RA.htmleuJob1.htmleuJob1Item.htmlpublishCerts.htmlpublishCertsItem.htmlreqInQueue_CAreqInQueue_CA.htmlreqInQueue_RAreqInQueue_RA.htmlriq1Item.htmlriq1Summary.htmlrnJob1.txtrnJob1Item.txtrnJob1Summary.txtprofilescaAdminCert.cfgDomainController.cfgcaAdminCert.cfgcaAgentFileSigning.cfgcaAgentServerCert.cfgcaCACert.cfgcaCMCUserCert.cfgcaCMCauditSigningCert.cfgcaCMCcaCert.cfgcaCMCkraStorageCert.cfgcaCMCkraTransportCert.cfgcaCMCocspCert.cfgcaCMCserverCert.cfgcaCMCsubsystemCert.cfgcaCrossSignedCACert.cfgcaDirBasedDualCert.cfgcaDirPinUserCert.cfgcaDirUserCert.cfgcaDirUserRenewal.cfgcaDualCert.cfgcaDualRAuserCert.cfgcaECDirUserCert.cfgcaECDualCert.cfgcaECUserCert.cfgcaEncECUserCert.cfgcaEncUserCert.cfgcaFullCMCSelfSignedCert.cfgcaFullCMCUserCert.cfgcaFullCMCUserSignedCert.cfgcaIPAserviceCert.cfgcaInstallCACert.cfgcaInternalAuthAuditSigningCert.cfgcaInternalAuthDRMstorageCert.cfgcaInternalAuthOCSPCert.cfgcaInternalAuthServerCert.cfgcaInternalAuthSubsystemCert.cfgcaInternalAuthTransportCert.cfgcaJarSigningCert.cfgcaManualRenewal.cfgcaOCSPCert.cfgcaOtherCert.cfgcaRACert.cfgcaRARouterCert.cfgcaRAagentCert.cfgcaRAserverCert.cfgcaRouterCert.cfgcaSSLClientSelfRenewal.cfgcaServerCert.cfgcaSignedLogCert.cfgcaSigningECUserCert.cfgcaSigningUserCert.cfgcaSimpleCMCUserCert.cfgcaStorageCert.cfgcaSubsystemCert.cfgcaTPSCert.cfgcaTempTokenDeviceKeyEnrollment.cfgcaTempTokenUserEncryptionKeyEnrollment.cfgcaTempTokenUserSigningKeyEnrollment.cfgcaTokenDeviceKeyEnrollment.cfgcaTokenMSLoginEnrollment.cfgcaTokenUserAuthKeyRenewal.cfgcaTokenUserDelegateAuthKeyEnrollment.cfgcaTokenUserDelegateSigningKeyEnrollment.cfgcaTokenUserEncryptionKeyEnrollment.cfgcaTokenUserEncryptionKeyRenewal.cfgcaTokenUserSigningKeyEnrollment.cfgcaTokenUserSigningKeyRenewal.cfgcaTransportCert.cfgcaUUIDdeviceCert.cfgcaUserCert.cfgcaUserSMIMEcapCert.cfgsetupregistry_instancewebappsROOTWEB-INFweb.xmlindex.jspca404.html500.htmlGenUnexpectedError.templateWEB-INFlibpki-ca.jarpki-certsrv.jarpki-cms.jarpki-cmsbundle.jarpki-cmscore.jarpki-cmsutil.jarpki-nsutil.jarvelocity.propertiesweb.xmladminGenUnexpectedError.templatecaEnrollSuccess.templateImportAdminCert.templateImportCert.templateadminEnroll.htmlsecuritydomainlogin.templatesendCookie.templatecms-funcs.jsconsolehelpfun.jsindex.jspagentGenError.templateGenPending.templateGenRejected.templateGenSuccess.templateGenSvcPending.templateGenUnauthorized.templateGenUnexpectedError.templatecaEnrollSuccess.templateImportCert.templateListRequests.htmlProfileApprove.templateProfileList.templateProfileProcess.templateProfileReview.templateProfileSelect.templateSrchCert.htmlSrchRequests.htmlSrchRevokeCert.htmlUpdateDir.htmlbulkissuance.templatecloneRedirect.templateconfirmRevocation.templatedisplayBySerial.templatedisplayBySerial2.templatedisplayCRL.templatedisplayCertFromRequest.templateerror.templateframeCRL.htmlframeDir.htmlframeDisplayCRL.htmlframeList.htmlframeListReq.htmlframeOCSP.htmlframeProfile.htmlframeRevoke.htmlframeSearch.htmlframeSrchRequests.htmlframeStats.htmlgetOCSPInfo.templategetStats.templateindex.jspmenuCRL.htmlmenuDir.htmlmenuDisplayCRL.htmlmenuList.htmlmenuListReq.htmlmenuOCSP.htmlmenuProfile.htmlmenuRevoke.htmlmenuSearch.htmlmenuSrchRequests.htmlmenuStats.htmlmonitor.htmlmonitor.templatenotImplemented.htmlprocessCertReq.templateprocessReq.templatequeryBySerial.htmlqueryCert.htmlqueryCert.templatequeryReq.templatereasonToRevoke.templaterevocationResult.templaterevokeBySerial.templaterevokeCert.htmlsrchCert.templatetoDisplayCRL.templatetoUpdateCRL.templatetop.htmlunrevocationResult.templateupdateCRL.htmlupdateCRL.templateupdateDir.templatecms-funcs.jsfuncs.jsheader.templatehelpfun.jsindex.jspindex.templateports.templateeeGenError.templateGenPending.templateGenRejected.templateGenSuccess.templateGenSvcPending.templateGenUnauthorized.templateGenUnexpectedError.templatecaAIMEnroll.htmlCMCEnrollment.htmlCMCRevReq.htmlCertBasedDualEnroll.htmlCertBasedEncryptionEnroll.htmlCertBasedSingleEnroll.htmlChallengeRevoke1.htmlDirPinUserEnroll.htmlDirUserEnroll.htmlDisplayCRL.htmlEnrollSuccess.templateGetCAChain.htmlImportAdminCert.templateImportCert.templateKeyRecovery.htmlManCAEnroll.htmlManObjSignEnroll.htmlManRAEnroll.htmlManServerEnroll.htmlManUserEnroll.htmlOCSPResponder.htmlObjSignPKCS10Enroll.htmlPortalEnrollment.htmlProfileList.templateProfileSelect.templateProfileSubmit.htmlProfileSubmit.templateRenewalSuccess.templateRevocationSuccess.templateUserRenewal.htmlUserRevocation.htmlbench2k.htmlblank.htmlcheckRequest.htmldisplayBySerial.templatedisplayBySerial2.templatedisplayCRL.templatedisplayCaCert.templatedisplayCertFromRequest.templateenrollMenu.htmlindex.jsppolicyEnrollmentindex.jspprofileMenu.htmlretrievalMenu.htmlrevocationMenu.htmlprofileEnrollmentindex.jspprofileMenu.htmlretrievalMenu.htmlrevocationMenu.htmlprofileMenu.htmlqueryBySerial.htmlqueryCert.htmlqueryCert.templatereasonToRevoke.templaterecoveryMenu.htmlremoteAuthConfig.templaterenewalMenu.htmlrequestStatus.templateretrievalMenu.htmlrevocationMenu.htmlrevocationResult.templatesrchCert.htmlsrchCert.templatetabs.htmltoDisplayCRL.templateunrevocationResult.templatecms-funcs.jshelpfun.jsindex.jspindex.jspservices.template/usr/share/doc//usr/share/doc/pki-ca-10.5.1//usr/share/java/pki//usr/share/pki//usr/share/pki/ca//usr/share/pki/ca/conf//usr/share/pki/ca/conf/Catalina//usr/share/pki/ca/conf/Catalina/localhost//usr/share/pki/ca/emails//usr/share/pki/ca/profiles//usr/share/pki/ca/profiles/ca//usr/share/pki/ca/setup//usr/share/pki/ca/webapps//usr/share/pki/ca/webapps/ROOT//usr/share/pki/ca/webapps/ROOT/WEB-INF//usr/share/pki/ca/webapps/ca//usr/share/pki/ca/webapps/ca/WEB-INF//usr/share/pki/ca/webapps/ca/WEB-INF/lib//usr/share/pki/ca/webapps/ca/admin//usr/share/pki/ca/webapps/ca/admin/ca//usr/share/pki/ca/webapps/ca/agent//usr/share/pki/ca/webapps/ca/agent/ca//usr/share/pki/ca/webapps/ca/ee//usr/share/pki/ca/webapps/ca/ee/ca//usr/share/pki/ca/webapps/ca/ee/ca/policyEnrollment//usr/share/pki/ca/webapps/ca/ee/ca/profileEnrollment/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz9x86_64-redhat-linux-gnu       directoryASCII textASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract)ASCII text, with very long linesXML 1.0 document textexported SGML document, ASCII textXML 1.0 document, ASCII textC++ source, ASCII textHTML document, ASCII textHTML document, ASCII text, with very long lines?7zXZ !X] crt:bLL'>4'3 ^UD\{̆]CNH|n(ԁ/5ۻ5b%Dm( ?!Jl5"5" ޙnzn@WZɾ2nLއ#9R+t`2RtUui{M4Rhe= qv\gˈWc:++ BҲRɼ, 6Rf7w"E-7Lwܛ%㽊v=b:I;$Jϗ?Ԃ3E`Hmߙˇ<] V=ڪWg*u֟@ $yle!SMc3a@HwssJ!l$Acʑ#a(Ik?}؉tџ?cH2Ryn AHP~10yX"~<KI_mr{}>'m4XzS:UgtpPX=ݝj'"h!C*xI ᶟ}MkQs﵌ ü2!&_O}u-j[orOd1L2e+ ܁q/es vYԄY7Y# ,H>{Dv$V܋<@0"0zx*vHZMΛeNy&-BT|Q~݅<^{ pVKn_HpdKŠUnGזJ">'b.?{4Ce 0ckW b 6#rIə}'>zd2ٲ"pK]:6613m4E |25yB!"g}pJՊH)_S;4Z_$bxNĽİJx@::?drY؅)YgeQ^į0*$RI^}_ݳ{cAz&(F=X 6=f`?z0p.v\:#[>u:Ձ{^)A%J DC#^X U[I3sXӯOqۡ ƬOF?$oZt1rŒPi&Ibc$hJƅΗoNք}(H[-*i낑؋2Z(]?R44S9?kh9e-)e[Tɍ 6@Cjjxf-jA:jWrl R$rVch=9j,4 `S8~gxС/_Y'|o䅣cO8ut+"4 Ap䮐8 zŕ1d#bl*Ʌ% *NIAOj/4|G.+Z9R."̞6|U>Jkp#o;rf=a}zGUۿwg>5/bgIYw>=>p7MwBLt&u)7c%l DПl)S;Q^eQTzTjbJni`ť쩱%7fU{ک3])p8(oHR%KM;#sZPs*dn6t.7DveUhBTRm*v lXC{g9VMSD38WC*y6MF*`Ov.{#{ڑ: i0cdao4eѡ!PdV0k%05[d?40ʗ?EpύL,V@Im,%P ZBSd:ExE*cj# "W AUjN i-YEIXC\2]9R}kva9L:K_G1znX 4AAҘl-C"YuOK ^.3-&p#ȥdpq>a<m 4a<@`Wys8c$H9OW[Z~<ˡ IL^/r6H10ޖJd lnn6p٠WyvY)<tl| \N<7{?Bʱpw8Cz+Q+3k=/ -0̝KįB3D(m 69fB#1ъh€[Wa)dCQE7ԷU p$A!b%4kR:4TF==Խ3Ygjɼ&ˉ]& M+٭S<5.l(q\ ܲF-zu}F}_1/@W5;lpBrV\kHl>Ncr u.+ U/OO}KҀзQ)|Yzk1~=wUlX966.zO]1{<3ky-^hʳM !;4(E آzrAu4~LKv`w:ypxbth^#7Y԰T[GܯEv7tξž1.,cBC gWӜ ͪ vKlf|J>f0;d\MvR4RY^`X;)u<\`L9!/2iۇ-j@Z(Gq rHwJ/qЊcYe!ⳘQR2zT`$pkpTo𠖱b?9ڵۜVw&-N ֕_WGhO{[}u?l-N#]QyI$.{ɰZ<8NK(AnΡ0(}ͩr5O쉾j0FD+o I?PQfcͧ[ʦ8x:̴HtPmd#T =S5%+$Ha?0O{j=Eڰ㢜or8o@AcKP!*}QVڹ=KrV!ߌ`.p|%9 ΄L]/N8KSuLVXIB>!IzY2zn2&z ɰ3?ΟIo*IV7c哟-*=%:aD尽DhuI6E-Z p^l@oZMwqΡ+t25{byhuq?Z !1w-|d𛟉x''xx>i*Ő~+i)K 's[@]ɴP`Vۜ1AOTI~j|;b2'^hqzDy~ꎁH-1 !o6Mav,9fCd!ʬgz,Bhn/B$LK^]O';]GȌ]74%3z{5ü}Q^D>y=#'LrLKd ?.5%qLPo^)u"]9m"4sIp֥ wCũL[kYoy} =2;/57LOUki ֠@.f=Ja;RթnJiyTeG`{=7sz6OׅC>=D-cROŠ--72w#'B$;鷤Xc^Z9T tYm6gΖ~"x!~ + %0D@e1MjqY As!&e&X;IAS;p%3AC'v 1h $֣PVҁC*꿷YˮDʲ 9p L& ױ>Z,-q3Xzիn!`.8/r2fM gݛM,eLPewਏ(BXUo/%9|UAJbJo /6cZ{I,A!(lDr|L5h5A 0HpY;?*R +0&(H/>+"ňf۾8=X"@G f[On_kEH''acnăH?b\40Cb5O,ymR]c1e~MZ/ewZս!7ѡYeT)d&ޘ) 94aS|` fόyjBZm%J8)Wsy$*"01ɛk OA/ $#|oy[F)b4bi/I^vթ^&vO|/XFn틧 +%L)(!08+eYr'6xl,};X)(wMlΜҺ ,gx22(HN"?cB2h{ntBf¶cj[M9wY2>o,3Wc1I (Hu׀ʍ4X3>"+$E<␥igc h޶JsQSVڴjt2 Kp 48|+/Y\bT.1"BJɞ5+&j=W`'*sWOޜsa7bJ*qCoY4 :ZA7Ī=~(93E=K"?7uqᔑO_RŘ}R:ؤ2 i{A9VNUБA둙* 2cknȽnQlNs;_|ԵI6bduIJwUQ*31fʲSghCߕ@P$xd3i")?,6(?5=txUiKDOu Ѻ5KX+z& I|w}_)#}e~5rӝY&WAWNqӖf2ٍMuԕm6'85㓯]kB=aΥ2Aw݋῎|ybjv3߀9*E6հqgW*95/1uɉvD)W/+smjVO>-tǪ>ӓ>Mb)zWgV6 YD p:<|W/[<κA~TyqӘ j]+ZKl)ͥކ# \zU)Fݧnj2fLv .,DK ׭B++ߣ pf.gúXV~>ǰ#"+"HXVaEX|iM\OT3^FؾSe7-VEpkyme?&'Y>&<lmfrI ~{TF!Wy!`{O,>z*7YR+Wu H=i<~)nO~C1cLZI,WskjlbIC;z(IBSU¯j{4P9o& qEcMz%LS@K֏jKn˲2W3B@_K͍zK!wJLK%lL09pL?bN19KM8Os_R#(}9o<O@.X||}jENnn.j;oެMC7(wbˈA|fg3V:|8W/ԠОfٙ%C)1󣖄64яNy 0sf:Eݓ;f2Jh=jx(*j KGsv^sٚ'Ic}|n+R5Ly)CCtzVFe6b܂/ث\$椊,FG {OLYy?\lȔ*99 rsȅ!h{鳠?`37Eqӗ?#p.OXud'UrЊJ#rhAk@Q =QXw5A#f16+@D7>!;ӒKmg1!}R;WQ89~uZxX͓06U.`Ad-rW&s}*W%Y@]:L 9gw>} pr Fޙ~MKtnW9ebJ>_ՌOx$-7.lX^̸!ǃ߱8mwd Dld? '|^lK7WFi2 -w0 ފkXRph0ʑ4+D@DV$ޗ  Zu  v73PPTKĒ9M+$C%^*Y9nz1)NP7sQN3~&6s N C9³MH3e?(pmˍյg|oцi5pG "B{K/2&s}?o7廓Mcul X`\B|MoQx8!@JOX'|,v6vB֚VoJrC~xݡIcKEM?N],|EXFo Na'(L VT5x%`N yvЭ ]|Bɓ P{9#iv% y9+ה~+48vZT~0fpI[;*Jw=U?(>whl݆jUz;5 .{,,)]v.6F]ԿfJ1 gӍ mZ h7[T%{[L2`ieRl3E-CFš$ t f^O'}6wQR6k::a=O ja4eSCL!M2_Ilv;stI?eD@%Ž[%4xJxbx{̟T@SZqeɓB>K+Ч]լuf8Ŵ 3J2¯lsb4b?rdT3 ݌K^uyJc:sx R՟$G?~RV/r"L"‰I2%▛$%h9r uzEuL2!Z9o-+\f\Yp~/ d^;׋? /EZGq!E-3[âF~DK1d8 X\zŐȈYQj=E`(mkam z15aIUARX3Y]0ŋl@?zBCp\[pKO R`mDHh&0gp蛾JEۥXr`tw5乫<,>K,9Zٻ4F)e)j$ߏLĪ@'T GW( iKkM&D rq VDu MFO{SQ$@W KO0V7}FWk_'t|>[.; =m8/^kgSQ[߬{I6V~ʲ;^B?*O#IVnt^'K,QQTK hNr3Y*p$j|Y`54Iӻ^*\5sk TijGf[uЎ_a .SA"q@3~+@t:G`ꬡ-ȩq|ҭVw}4wvefHZv[Bus0O8[1o7(Z,cH>-GdTǜF5ҴehJ[yswz uW):bAzTZ3_ $#ø3'cU쒍^+(~ؔtjF+^i # 5򐚃0?Ol =r ,~q:5/eWݪx(Z3hI@XpG LC$X;OaT,h՝Cb6>sa4!dWwsainՅ&Ds~zdi@¼bGx.i?RtL_bQ2ؓУj$9QO.tES[{%F-9ۖn0 yq"&X9mI_[$$PSNm`P瞣Y/|QLRʿG8iTTLȑyl7YhRlY :ErtNXly@my&r;KI3,ꦘGl)9"CҖ*KZ/j´ZUA20!M!$S}2c)&I,yhm nbZ.,KL_w8:п; > .~LF%)c%>Jsܧa)Cm%W*&-8VxRˁP:X^|@<)4oyPS U]vA`ь; yH[zG%y*̀ kQuhNx v.:i|³|nQ ) MVS{xxKrjHyc:cBw[tD !9X@n Zn` {_HͿxCaoKaC];|&][cX)2-~( G>:'!=&(}ƃzf SEգ7,6xH"K&YlȬ+:(4Ei\ųh'6cSߦZƎD["R7?؀:%B:S!T J3yIHXz;dYf ġQeYp+ jXÛl蛿Ge~!nZ]mi ˽ ,bY' e(J2re '->%PRE])cp!Jً)YǤL WF/jJw2wNJ6jibR/oɹ`Ag5i+n/Q#jjX\Ē"]Ż#۸POK:|'%" q뀒[rv!>*)2fE+)thi:&[$DHV~8햘ðVf0O';2HĈWƉ!Y+KD;LOF,A, 3Ƣdw-9oPL a\ 5(1VW.82HL2`+\QK.pLj2:9xT [0s?jNU{g&J\SeA%!bU9.kkӷ)VѦ&_ s(4i0's WcdNnJ߂svi4W!\x-Ź@yqHqM8/^LDXE2pz8e &>]Gsa&-8fN=ؠUJ:{ӏjvU]؃Qdu1%op~x&S,m64Ͽ.c8ވIH̷[.X9gi4JGDHʱ]oZ|UVѷy6׍F&ءB v~,^R,XzԀqofʕ$6~|؁o1 .__(k}=a% FE}i.*V7MjHOz>U~?-B`,F=I^t:jWܼ_9йa &Vy;ýVצd?Pm(/SQWN$ Eͨڛ[St_1^]A}@4^P\㧗\` .UL9 />/EpA,EyFZ~`6="ؿx7_B:O#c{[ỬTB:=_zD(ܴBr گ=|b.  믉ڝkLB s?0O%O{:ژqOK ѢZZ~}g A}4l_i&#s{OZ"ګcKsסߢ;V=ĵPpy+vjÌ]6JJ" ʭʖKzjiE VHmfK)X茊=! ]bͲwb͕Rkt7Rc6nH>~!_+栿9Z<@գwytxǹo-운< } 78LuC 8ݤA4'&gY9mҡ;stR|Σ!4/hA9"זpaX[2Ǧe|ŧOQ) 8.ESdp"?/+ A#ZU0A].cZv?حg!O&כ74w7M+ѿ"0< Km ,޹M8R^WͷLۤzZ,c֙<,q-h:)E.-a|qݔ E󍏢[^"<alx?F/.'ojBJ$圩m%#r \ dfrLPjlIN?f+)&BZatj Q9`QEv|s7SF GjyӬNȗO1 PLS:xˣ >Uqvԓ`F/xh{OнRWeO)".F 7\F.;C| CqA*H:y/}9qe?A(&/,̀=£7?LUfnT+/\y jdnurҔ}H4\H':$8+\ ?1,IvΓr]V⧧,^suW obaCve[˞ɉ̪'AQJxM֓KSfwLqhvb5^͏=3o ԥ7ftJjܵQNijkXEC6QUnL*ٜ]Rs _r6|^>%OeF* 8aS'hs,ٽFvB!xN\n*S6$|%M"A9K6FpɊ_iMÑ<حw~/]dދx;՚w+kE Dtdt+&an!I;a[}2m;;6!0^xB T*|R|s4:0- i4%%NxB&}Jl$31?zgp#< 0b*M7c g 7,\ѡ f* &uȯ 6c>ؗQp|{C1n.JXuD%!fcyjaeY'd@K;$A5)g(̒;6uO+: M=yro_sD:hF٩:"aw'0%={ԁ,O 㙆:?)Q@ILɏhfvI2Y|sCD- KM؋bÏ[o|skAqVZ[Nl]A-#J)&WYgW`㌵SDp?,uzCh &mtʶ() IUooȆ_EBG8%_0vp{Yxb kmQ )3Rܝe5H p=T=e, )DwS\glq$(i+r7n̜+5#u#NĩDY<@$ܭ7Oyx! ~afp=]Jqfx~&Z4@*鴐IT2 P "UҠەERڄ?A/7,Z>Ҷid 5,+en;i+h"Ee~1 HNh~@9B%NUꃇ|;cK {HkBl.U0Od{S@׻ Ŷ ^FβdMW]Rv W2Y'( L 5509VF"1„:_JWWhE$J:$jv2BeS=t->|`=VlRvPa1XTd!LM<%!fV>g?O2!֋0:1\w=)baM~@!ti#/gdLtSB m(!)U~to |F>4eTNKSe<hoE)`N@oG Ȭ3/c  4n'G>ډ%XqoG5X"$#"?nh 1Ǘ /Kם@g+ptvk(F)%8C V3E[x??Am@x^B@Gy N -Nߘ5A}iypx"7G2r,@I1V`vo# n_8>$~{%-z\MGZ :DPZ~M$y)+͹s |2Z3Gb>m+ ݆:M}} /$z*>R :UZZVN`|sMDXy$wYX5nQ@Qc~{~I" 5(_TFbرmJZ9q37}̾r$4DCQEHe$3E˥&t~'/ ग़pt{+{M`fA=f8PQa=n/WFdI0-yyYaК`*/A>2PBK^\9/y;R8:2F߆ Y\9n24dv"6Fl᮱,]m 6#}]s~\4xC 5SAh[}bCupltܘ2W"pXRvTq#mޗ‹dGWɔ/!ː_ feQ҂QTuT . I ]N<,2#ȚtB#Y"?uGRN%8kgn$F|CUtչQoMi#JXIihkS%\#2M_׳i2d׬N< #/#h9Sy ": ݌/MAǙ]Z2]րe#VDO3M/ x L"E\3(񟞱?cvgD G\= C\ P>S6Lsz/0#%!_Ca"/pI&hٕ*l5ZsIv$y6.J9"l(|E_N)"W[<[|ճ+ $yJYO>iOGbeB:@R S ` X xl4j~UzΨP2+D9"(#|glY(<>  `ȩ(fė9Qlp|a4f:,^.ǚ3m- a@Y 3$F`vg5WBG_uqfH%̟+El߱}w}6ijWyɌpQb 5D#cAF\lU~h˷3쯹?򧞎S]J'm%X 2J'é|R ѷ-_֗Bc0>3L皝^h'w/R%OWT%l:~S\ hKzUՁ[F37b@rNTg/4_sk|Ucz&A5 Z-vD2Ҏ\HDtl9%ހ GQ#EoH wD͓HSE? ; EsC+bW<@/dzߦֵ@B3z*??8s?6WɃSN^&}:W 2EPJRضո ^}i/#{@PmhWlQ6VQx4Kr4ˠJ{\N@ڕɚ[jXɉ^jתG ζ2N"gtgڳr Da4o26iiHQ7ȯ5p-9[r[$lXPY@n+([d݊D[`s'0$Fu6\ā5] eS8ka 1m5~4~` DxzZ RHg%^JP35b:7WX)G;D Y}gL\u[Ԛ7* |`ML/ uB%^o 8oS5|k=1s K骰oq}ڠ~@nn'\I~@BWuگ?)XIj/OQЁ %gNmi=oDcr<]-.{:):X ?QnYנCX+^[8 d&m/C`q|C疑ι.j%>&sw S"ip02kNsTp2R-畟l]8|K~YkE25/zTbqXސgGGz2$#cBՏ# Eex6VW.:5m`K Ĩ؏.[B}gDv;G=DH"mx]M bt!%3+aduW=J$6[o͹(uÛBb.&_BbVd~olum!+excb 7~/ԧ^Nkj;հ[w)顅oۘ@*I3n_,n|$8jq.'b[q-6XW&E(7k#3yDMwskFH,lGgf>v9G~I2bU_H'ʔv1!nB'TЮI "A|9Z]4$O0R{6^e|i6##{".v1ى[RX&Tdݶ10V8nS*ޕ! BU-4Z`Zv ߌ@8!Dpa jiՂ%2o jIU49 Ͻi-3g B7V.͹lGnZX2.;v2*ba4MFkD^p O1(M yM7+}Z)ä/Cq/7{HpH 0\I7DoO&z7v> x@^i_LpGqWK)[=C:խOcRWj[Cś>s#dz<%2PHH< P"PS*:NM;h<1UӬg&\hLc{$ :)הZRj= ɛ`<%FMHк!6Du]XdBr:]?i]dվP=<dzUe 2H$f[M[M# / /e Xwz^DS&$g $ 51-mpO't94CQ<@<}s|3+hqRK|A?.[TV䤑^T))eƪǪrWAg=NT1רH. Ρ:R:OA_RlՄ$ޝK/O"Rc6.1 A,gQh< z-_BxG`!H$h5DB`E'NG7( "^h%+W( Gr3Gw8BQuԦ}r\إnQ.JBtfAв1x.se;')vs>,O̸?׊LMR)̆\[Xd)S/|03`^FGp{Mc# ya}J&u;5ɒREC>n #r.DgUY+N[ v R!GO9.˃^\!ș%p)WUh+@%hB6 `JcЙ#Nt#+ $6srHXG4EN^x,܄e o$ҫ*SuC|˵9:%WIy,?tƧn~LOϑQؗNyRֳ*fn/h"+[F /~%`Ns ]9Q{S>)+S6q/a'ؙw~J\XӔRqadcmI-[D9E6]qݙWN`7gEReTRnEF,ӡy%T  gL} ̗.[O}V$ z$Os.cǰ, b M["uD;=$ '`n"uQSl >7tPkFAgWs8p**ֽk,\Wutҧ>V=2& ٶcނOLbF<6a vrqX| 9Ќԓnhk7i7>GZKhpvٓs9ĭ{ n![\=%?s/ w/2C 登 s{qQJDJV;F^ox0\j.CqUZ]5 ;8S U&e)8E5zpJsz+HXE~>ZָY>0Ag K޴?e1gL]~5.ϢEnOd\VwKmVĠilӊֶHN1)N|YH!NK ݳ6;MjҲPz4>Z{—s;Y3 ^VeY |ƮJK~[N dm`<Rn>x~.%0oV .X~'NWh` ENwn_m0zxm@OJ|*@~9T\;CP{ETzFf(oPOjO `dR}HjP>aԸ<{sȡD=R⩲&Fy~$ک#X*πW;[" @LZ9j@WpX*:ߧyO|ŰG<,0嘉 e,;={2ME1.Gf1Fr4VbXj̀};%=۴ђ0PW *,&qh TKO+͐[`1)`U͌t(ջ NBG Ľտ\9_ Xfz6!a]kcfi rF>FIr,3!0C9)Ei 2aۛ`{٫;uܕSƂScAz na3;|.,,sCu雠rgbL[ TѦ {ټJ_M}M,)hH) J5xiig><=sj7N?&kqKy}⒀bgNRu0=`o8osOnB.+ᅢ|跞e盛`ڔdׅ +h 7GwYuhӾd.:~5*m1,OǙ5kR [C?RX% '=c%xP?PZ5-^zr3 h=G_դ)orK-Hs&":a͉@nP%{̇Ytq~Ķ/P|9}{dpiNd7~:|]:B__@dhR79&Zqca dC#i; rҮg5s_j%剹s?[>78 ,~66gJXqKQYصEm3dN* ka寝~D]1^5m&WDxf:߭øf5km,*AtE)&: l͆!z=Zth+i%qxu3$HάT vk 3~ۏپhm"h~J*CYv,7C[X69r?yW_O1[-Ϗ-`iYhݤjA\z }B4F1OLZM!/ufH.S,?nzkg%zU]~.]?4*[ s?jr4^j!; ĈG~27\"ZҔU9"Vϼ.yFVЦ9;/_) pZ Qk`#<|A"瞲Hu`a o)aTV9[c]Ւ;ۉx8 |g ܨ[Ɵ>i7Vݬ'5S@Ṡ1˧]@-9|B\87 ĻNvjs)?魦p m^ iW1uv6ǡUK\F⣁ߝͣ]⃹k|Z\n;~&V5[QV.͢Ps8Zg Le^HeQŸYd FMֆGGV,I.y-t|Kٯ()fB8z\>42~y{zهpzꅠs2%Xk7 #9QgBa0/Z|sbb1J ra:9 <1f<.ɭ ˬ#a6Cs|C)7Fd@ƙoNVN{Єutj9/sY ƦGz˶P`IZ5cޙ{kjFGǝD=G,@>XbDU6i_͕ZD2Q-"| vc\>W}N{Q"!3kϦl|jdXl &nSуPD>@F`ua͟-G>b蒷T_!Lq NmPg+ΆlqbFNrݹ`ާ{/ l7KP9pņ;i/ʟzf; rODkOѩw2]9T}}:A;@^UPj(*]*x+wnR,;ـ&6~q@K,B1Fs2/c_; 'gi=$餣?op!c0?pNT9ÕAL &ac%a]E@7#>1SbkxM]3CŖ:=jEl";HV-_O?R,4PCdt7tDeE=ێl˄%V%6hAeֱފ%xbjKtbcML!52_ɩi fJ#2((w&/vL7.˻2?6"9bJ\ߠk3k(_AͰ*݃zGk˸ܿIQJRD>*,}B@D0, `ĐB+̡Z2 }X^U|rZnW43xX* Rp ] SN:fSJ+Β߸XK?.H6o] d8kod ;d3rid>Iޒٛ_;bWJğ2TBjihƠwal_p[p)~p$^Ktȥv1Z>10|FORU’,RH,+kJVYUQ.[6)H/!3VlOhN2a'߁J jI`E蝲aheΆ'0|@TwyiJ%_qm~EC{h!9Pʤ6QuyQvPzzVCs:IjS`њhL)|~ffеԭ^9(X5rW 5*2 mn I7 /_!PJ?HYt:&K$R64in-`G|ّZPnwBsƒUzI=o,-3MP k^ib.ßh!9`tTͩJM6,FbPtt 9׃VƬ*K0,OeZ$h0/'m7v=hvr%5z 'j%MCL!R"k[Uy2NO JGca OP'cV3BLzF6 46tu4A>J>/o+nS=ȧ TcD/g1KZxroSS&#BWۿAi1Kܽ<2ծa{db%ͅk_)eT~CȩS'Cck^`!󗒨WGwX[&Bl+,q<UFKJ|Bt>c@J\>`Mg/ ysu?qFR2X/_Yyg(׎9'B/4wS.䠝L Z]Gw* :`zmnTfS0 >|%Muq]P!{& |Px4 Imն^XgN]/X\[4s ZHՁ*?pd ">E&(~y-_?[iQ4CGXvA̳+GnTXP z5[K^QH8sCG~6?:u%dәۅDW?;9)t9Ҫ/5hcq-4АZ8xQ.w( S͙.09y(R52޽P08YA\Ic9m,;NJ90b{o)٩ޮ~8X>9J7i!4]'*d@zg|pd(@?9LI L{lK8щрF&r[/{L7 򺁎vl7}5s(vI:]bCGE;DXt™,}l臿u`|G*l):A{̌zZY붅*G"7BHND ScuI{F!MgJpvKMxso1o|%p$2gA \#.|EZ@YzlNH }+3e:_e\"=0OqXhſҭshphئ.GeN#S\WX.5+P$%+R'@e-tQQ"^}񢑗Xb~& t2K@9!@ W!Jiݾ"vmwZD0DPY1n8@|Űd0:Cebiш־]Ab6zFtމGSqleK麨XL-Bw=E͈LeU\aΔIm1e.*qBv=5ٮ|gD˱:sMح$QId Kh4vBwFA`(M&C<6HZOQ Rhexo?ϗ22EmҎL;Bz+@" '&<8>@<>.oϰ\Pȴ=13P,d"9tCNk/&kRF4Nw2=cH뒽t]zeqISX%}Yv9 !n,!$oܑ:ph{W<* RJ͆QB*TS0JY=vDz.@=N>p ?tWR%QdiJ NA>="A3n\Bggqn~@PUQ߷9j?3&8lK 6_&zJ] &#F.!Ϣv#/ҌKx?e%쵉7v;bAVn@&nNZEuL֓\Us !rƯ2U-0/dln7R{Rȓy*7S˜(a`Cbas''Z(1u67K xjNOxKFIMfCSڬzD-FϦa ܢff; ) tTϠ= 0{~ w6C-G61_]N q+Җl,֊حRoX i twi!hmq~#l=L1 4@S}-DѶvĨ&O%!2cR9݉rw%ڑIJ)ѱƪ MLAuF9~zJ^[v[}a :򪫔!.7^co!ܪCdO܃حWR/mzFHH\Wƴ7fހ!Ix-R^ߵvi-άv@ۤ% 5&"8젟3vj@l^绺3`2ɸh>,2X'文}l4d9kc&'o]q ᄘش=|5fsW.REvO1c@:s;,-MG `x)45V(ل%] s!{ʾr;`4(o)]{SDžށ"/f ?C;yB.'[Tsǭd}+*[  ɽ]&CVl˜bw^ Bd4Jw:]L@ i.߶ 3fErϩ22y<ҐpOA0b5yƖaHt)!odHޞI8aSl_ܒq,Kľfض ix_8 AY,iMaL#L~)xRN;`c̝34 xf _5ej iGM 8mXK igRcS_"|2IG{slګd3.ϓG(5(`mcߚQ`dbCX8=v:Tb1SeT3IS$ˀk,Tr]2œ%7xBXXfUW{ GEY#׀&b| vnPɣ^a֣1CqxY,FӋ ժb;O{|s$;,0@9jz"7CY.;TWWݺ<Ƣq(-sS:+C5"ͽ 8kߛ0k"!F/+vysJyd[L}1>dT9H-*^6&Y'yp6y++ '$uBƠ{i<kUu~8WK5w[JG=p LƎ5ܿ`l Vw-I@FZڳ/RE^Cfh.ҧ)2*ʋ6,@ݳ  5|X$ޅeyܹ-G*fLB %\ʉiX=%RVɐCHw*AN..o)n3vA,&~LN)$ =FOnV>&䚉!' H{4 =3#>˵#? .IrԹKVڰf26ĦS7\ C@"o+:nWT3Q?U&2Y7!_[xGfUpfF<If?X Qa# A<@֧{ʚ L:9&Rpx#up+ODwSV-,ýL{D!J9Yksq*H_Nʯp+8uj}p+i /&0a+]-dk8q8-Pfw]47ib-'Fu7 +~-'~hy~5Vz%X(g4~qk}1qC&?^D^ ISq )^̸θ3O*(2˜jZ"85Z1&Pپ(rF!l>xhXzvuͰ}<#!+7Q௬n؛Iy/p:HѠ~K¦@ϸӤV JXT~sq?mS2j\5^hU"@pH`I{a12'#09EY?3%pm n&CITibc8cIwdJyOD )(&1Jt]sfKI ^ W:q,gxѨi':fVGYILa(Q'= C! 5o}hJ ի) #G ڙXCN.?`7&wYÂx;DP&y`x?赌 (M#d ҙOh A^\r$l§qBڻ</ 28:5+[}EwXn |7$\TnI'V}roJ&"HK !S|rԧ 4:_n iT(2 5(c5WL-渽ufBl÷i߱P*Uk, TJmRP/,ODb9XJL`8DqM\0!l[pt>i}.-9X7V?6&!s1bJQp[G$`Þ fnd9KAC;(k#S:C&XXOUpn ^A߾aݝG`AAMO0 ʞkAu8/2)/Urq(:qGQVDwA.^jEV';gvZy>c} YDɌVUƱէ LwhwwڭvW:V/ &ޥsߜXclNJ;MаG죝LS d~v;.?2B4{HhQ}NuޝZcffme~ Ep$0<1z23qr%1|J]'ȃ.GT "ۑlN*PFw ƲD|QmCȥԅLk/%֠YS#M &S/5&!,&=(]U) lE;B]<|A(O3$H,I+S` 't0阉HL$86oV 3xya?*":3%+iS藉=nmMk,kJL`,gj~*/h2Fg!|ef3GE@ΰ {u~-RB T3YMt3##hYK ğ𨃵S:3_nf .7M'{۾)LzETзLἹ^T1< R|~w,"d,bNeK֛3d(C1lJ>eh[A{(ZxvPD*n u. :F ´o p37 RQ64x|>NrYvKWPUMwQ UسieKunr)xC TKZ86z V`H D!}a&>%ڞq%U[ۜz]F6`f1/QYq*P9 ՝~29ݱ6ݝx1c\Uj@Oj*TÛ"m1#A)X#SӴND8qRAH|6tz#K~'$> S{zGOd#;8ӀcmdTsN:0ZFz5Ђ2 ]ueIFFa(EF f`挥q*ڨlPǂ{(_5?Ɖ&ty(bQTPb |nrJTNJ&V"^{/G6 wBG}$HLIՅ.oPSZ>M jCX0QW Ԩ|ۀ@p0Yʴ9.zD!^12 OVH[18S58 3qh┕M? 8}7ERF+e qi*`SoeCCp7>=u@̛%MuLzzYE<bf@ҠkM)oҖKv( 2AIL+f';۽3C* }+%˗iF4S~#4уFԄ[1W!Rbm>kfBf ݛ-Ԋv,skTa5SٜLJ]"^/Tl ʾ|>gq'G+?uZ]mjY]i=7z9P<=en 9L/SQ ߣS(;+ZG/ <Vt$cG\0TF=|wxꀫ[[RwP9؝`(F£q+=" ."}"5EF`S쎴1fT VԐ] ݖ^\0;2*:SjZ(HA ɻ [CX}ՋwLR0SGvRцoLVPd!J(Z#Jߖ?TcY/.e<@-&Uֳ|=JO!HrD.)-iYu܀=W8zlEDP;Ʀ\Q#~d], dAW8BhSx~HFFi6$5q}_JEXS&WRlX'ǧA,d6@U6 KSbӭ$bpOkiK@Pyq>,6GJDP0aQpu lIPǗUfxQ)T$ؑqPFdf"H=6QC6&{8{a91Uc 2pBmC,S p2@ڤo!# [' .M"/R1~ '*s=ڣAF/H#m}{Et w+s8_=9*Y}- |{S(.\v8?vGbRw` Zn'/u˗YԎxGlGI)mzly#0 Qqe8jfs}H`1LCLqˆLN :l`ߠ&tdi`4ħuD+`S-zj ܷj:G!cX4q8!ela n>)/ڝ t\& D#izQp_3]L#ѻ7ݳtxG|oib=.ݤDA86%IG[K"l802ț@4J2o3.06W&3f8H@ko3^?&JC|`e(͞^=qr9rDŽ>@t`І0g]4mFfUGrE+CpA |/834cyب_ ]j(v߉߫񼛱5޿| GIw3t8<ܴmyTv LďVVg*nZ159Jy&% ,.N;Je{A ՕqWͅj7v QM52+|8*T3#.C i=`<#.*AKNGQ'dà5 J Wȇ]u,buVdYjC`Wd~ֱX0^럴I:z LA4O [_wㅀ[?xK;+ n1 |XMhڋL~4m.g oH M s]TI/ȧX6 DZaәOb7 G4pҒ&K KI|ThPWE3悯,BOPv.x^4r,r9 ,iXoDdqlA3ѫ'm&c}vR֠֠~ ;|`O&@̔>Jsuw@5XS%ԕj;w FSoAHdl .* ,[JU-=YUS7ZD;ڻ.xAme2qEm\ ?+U2|8 -E [!V:9EAmtOF&Ub-. :elHiټFMp@|gT ޫCQUXT8V@O 8E3ҔBY8~ӳ "*&b(㧁mx-j诚Ld {ŝ=.Fw*jVyBTĂ5s| #b7V1pL'f0 (i7zrrRY5 v ~m&ޑM?-z86 -0MAR YABK(P߱8,<]^OH (({h@nC]Hz]!SADtztXag+<:Fcij |FӲ?Bz1YLOTnP||\ϰghv'j=dNt__ԛ &FEi=^( ^G}>Gūtչ\&jO$7Jiv2^:`mcFN*DH# #ec q2(Q`J9e?!'cGk,Ћm3.: pi'$g ts#@TlLOSD4@Q.X~&QV^ʿmQ{6?G%TZAEDBxf2C(ig:QK{O{ÏxG'[Ϸh` j[? 2*!o rSwVѯu)Ȫ,®$Z-gL,_xa cw ͗ ot++|& JsLͯIGIגСF5?PPUФeȒW0zE7(cQOk#9D>DTʊ, TJ*5#oQe{#W/M%NX̑`LgiJ LUɽSmaQTQ.wDjbdh} ~SJk}-k *٬cF= Fˤ(#4Ղf*-%pc&_SJp^.bh 1Y Wx!gqTTg[1xythV<47]+L&(}nEu(WS<|ӳin)2?(D(D Z >KUsR*p䠘ix7$EZgB;5=7l 7)_-] zJKtoI~tSCe6ot!TC=;G:M aV}EmR.a|SIՕ?`8أ~j?fmˑ̍\]#Tb1惨mgTƭ%l3y[[w/vMgH2*?B$[4sy>WC֮@.+Q-Kh%jYiXPpjp ">gKPS0Xo2Sbl$G3 ? d.bȺjv9Le<N{b  W Q |yM{`t^/ ocHr "w̶OqoQ , O a&vҭM-xPo&~1dXDe썿iS,V»%«XO~PiK8vyҚCp!I%*]B5ب<0t7q6>py*[d!)ۼH3Q|֏_ZQA?/W2Z!_8Z7^9ݩZ6Uվ%\Bh_qOjs]l8 F_+E;!i\k>o.]#ݘ)q,xV3 lux`9ieIn&sЬ@oɑPEyR Jؖ 顊Z"Z,_SiL炳WU^caE;_9SZѥrZkeZU)Z'i[Les]!3IDdb0x$Uz2zA2OSRRT %ψ>ef'ސ9c0 ]!m^ =ȅ. +aY0AsLCڣ|iH/w_m^oJj5M.6&Kv3Hf!ӶmoSĢD@Z J99r@ףbApYv^jS̮0}>0rgU{O4ZD5ыN;'4~DI'"tS:|离aaG &uف]̴tNg?3!]7vun t𖫭9_Cuyxn>DJӃr:As~j!%~P*ym~.dmc()+|/7Ns=J#S$GZG/Dui$I[nAn'2I`r}ud8"#b[?~6>5ПD o8_r#kTߪ7&<;{'gt5T +@tv&%(B—OL,+bw Inb lLC,)b~cup'z{+U K;DKp}_lS2;t 8Ef_Z8'QKQ44dx:܁.j{~ruWQD袝)SKG}M/h`;<[)ҶU@t2sYQֵrj2m~j+}A$8oz&UbsXi~>%rX{~Ykΰ J->V|vdO Da3g8esU2 uwu29V~[T)iŷUhRPڍŎO`GDkZܓ~ZȱU[_GZV lpy e p t&,G"HYɈj'$? D 4(m; ;P|*=&14@@$J̙-U+έr!OPhiVWܚ(-)e],BٶGe 0 Xt DJfly;9A#ifvɬ}@e' =h gII (+;Gu:%:f0jLkk I>hMiUxC)WMM%[p Bt彐_b[L? H(e0$ Vm~xWQZe.9Lp%,:ybΝ7wgq*F_o`bK݋4<5jeO1l5 /jbleh-J@Ʃĩwfӫ[e^WJIcUfVRzj7]nIk2cL!81qޮekgK"fj[I=ǟd - n=~4w&1)k9FeysoNN?h7y` l^o[]]Ort)Ce7daTH=t]xwvwV\U6H3)1)I,tB"~F~ <,OPb-y'NG42:Zq?Zo9jby@WN3% ˎԭ.\Go f\ba$@O ^4 n א값VI;4y{G8 ԥo9hVgQjdM\PmL?٥88L!yl5j8!9 Pvm!e8p=g%0}_T3/8͹עO*i㚚6.N?g *QJѦ+#pZd MTUuhpɁpS>pPꂓf៼}4Feo0p:n\kI y)Ϟ< N_K6ѭ.H\p 8nvtN}GkO+Ʉ'jw!蜣 $ EZVI {&mCÖІ6 ),7K7i鎖]8nLhj썻‰[v`i`ϒ^%t ˜f {#!J @?:h9)`H뒙['DZ%};$¢ř)!^߈<G|:kٴ&bB, 8 4,^I(y[ﵟ5\̅dM(8 5i kxiWC7.[O(䏛ұ,wJ=#}2=Y"HzU+emj"T(js+47? V$bdD;ATjtWCPld/]ygs g^)OҧBJ}04uԖVE3I {(1+?e5&zJ=Q<;waOt(uʌ8ve'0)Jpeh.mkkHwU ѯi5>rhs -)CIB.z\X]Ao۪NmP^fu"Ig٠dpm '3`@N^Ǫ8+Ek]Jl0_ua˔`8D8rΖQn#E C!"el"vvqo?aR[Y54tW=2'f[ي'_cL (kσd7m*舦 g%W6 =Oi'\'沔0b:H>mg|΋20j/x~9~ӼTW,t?Sr\b$w|q;#h{>\>_.1qǰwy@Y=?@O'"EBCUb:Vu/ uyQɨR=qϓ,YfO,6xZ4k8Q0ⰵҙjg*9:M4"'׫7|aCC%"oaLx;ـ ͍@s ̖cxp`Πv0+SkXO ? Šav,/-ִТ13‹Q[s˂h{׬^O7VCz!Håevt<=ĕ@FIw3=?>՗I/_ERh_U^W$E<{r2~Qi =-tvQ ޴+ir{s}xO|OtZ~9B QlU#Q`.k*3n09:^ǐSa?9 ym@rК D_aY&+[lAEtp!9RfW$*r4Z: 391 x#>dszg/2{,D@+_h0f^O%bP>״:gG8 P%Q_՘^/lY)qLd3!7h4 .$nvu7|aЉ T)|oHHmaBT;THd*FcU MGtG8G-]wXϺzއFQ8)\ lST\sY1i6M&n5큿-{wnr^K@t˫@X 3ha.P?T/ %1H_0|FMĥVTP ]7+&B;qcZ{nQA4ilH뿓=գEph>$e'=\cWnKYœnHM(QWӻw(a9"4랇9F'5NGt&ڏ6P=>!iA{W '':!P.` 1[p@Ko29Dz0ݨ_ng!cgw]OK=E|T%}eE,Cd< 2?S)+ȇ_|3ur{(!W޼t뾜v-f)9GNR_W²dAӭ-$$ 4Θ/D\FOo;4|\p8@.: i_=6\)dms&Sjة;~ػ3:i!2pA-SMLB 3H3p󽹡 ~tgARϛF  w//;<'^w' +;f[ a9PM"-OcṤá̊-#˝j*f[ьP&* 9+!e܊(-Ѽt dXzj0:ٽۃM 2O{Cbb`kjM|͎{t,1{عy<-͇hٮ,^oʧlA@2oq̈́Bw`P':Z耔M]䂼xsUs_ @cPU9_: IHɵI9}j{d\*ʖpkl. Ul8]_uHoAm%ŞYZS;VqجAB?}~3.}V.4I\+M-5cӕ|e\lI[_si@q}sb.${lMy(SYI:(,VfO\o!إʷEZkї)d 7}dfC쀇 g공5Q ۄF~9(ytˏ͝Z='2{x<ѓ,JkkwE[KUni~:Lh`KIݪB:xQb~뗀PreIάI~kI֦{E7Lل Hy:YfvCFJbr_z+4yľӳһіL|6n'zҏͩJ<;Dh!畄O/Qԣ$caɀ*u6>/JQ ,iΎ=4ot 4ӬnaψO:uZ=wA fFD@M%˒F E["z >=xd%+CTble/׼A0Ɛi1loI=.j8g.L&8ޭt>H->ThuydtK_|/(wp`ĎB|{6>KӈWtJ%l0r-v'6@9}xC!a iC ;]>Л<9hkI3Nbu 7і)UlfVQ_DুRxm /K5RAYvNICDy[.(7HXN]#5β`Qz O ESpi`} kzH#sPyχLr\mK`D}Zl9'HOȝM5 ~Pd`0~}-|D5ɪer%uQ 3çݙTw*Q{򾗉v7.p6:/ #QM(Խei.U4J2w.x b#3Dɪ@xh{ƾEU$s{ A *)!DD}^{A5)[^J]<؃>pWl&G,FfM)%MCr$;|s4`4}a9UBχ@ =o ?D@st5BQ>~>S_JCVSk.!2 &@Fgpd!WT'8džJ2Fޑ,XɲjÀ+&̴Y+gH^˓c Bo90i\#ѭ=ȩZ%J":q |%-19E1tDg;a`E|B+82rRuf_2=o8xfb'Jj1=H/ (i4!+&(rAA]AQ}1h*ʭ!$!MG|2S'3Eާ=hdjұ-Ӹ-w;YlEѾ}Y_m8ə3ZSGFk9#WY̨ƌդ+㊺4<?q \꼾r u]av,j ]mjR>ktpۋ AgoL$+pH=ubs2UX%c]c'ʝ5=F,/D؏#+RT.V%˥MZV\'ҬyijM˯ B07^x`ݎ"_ߋ$D 1r[J<`@8p ̥4 M.?XBjTvٷ B_״j|J5p\ŰQݨINLXׯzoP @M  >= Hc]H!hPL-c Ž1FFj)횬tfqdw HÅI?n؀coMaΔ:~H!,E?S'c6kv0sNj>2ӺvMR!^ruNIg_F- Ӽ9Bf1Ic찠Kjn0IpD d0 M/co͎bGW{q)ހiL#ݢ/wP߾u:ivb6 VeB0WF.) @kovէזD8qwhlOWu%P+6wCoK~~N4{P7[,^|{e"s\d|kDa}9N1џ&Kh7y30C [hdMNSrL"&:ϾA3\y", WՑx7RQ(yܹtߨM^B> b^e>fK$VF*ky@2G'YOݒ^Uܮl%{+ w 옵ij/KUX[_1ʧyRVYfosi J buӜ°XPhEܱ6Oh)ݛWc KӰҲ:ȽE|uS@zV*;q]QBːRg}Ќٽyˉn HP\>"&!T_s,,CL'9jHj"d$>e׏B ѥi5'솶 N$"wϽ]a ^yg Z_Mܶ#Gkt±uMGJo;)Nugsiѧ !ޙgTo~4MQYʓc~vnqHY$w+80xZXH"yy%$tVu`B gr:J*g21moA+)ӠUԻH]8 ʎk?}TOG+sk>R^D0 ?ߣà`ƀ;'IO|S)(896| ➰dWʁS2IY;bW^zѪ'".nJu; WFQr#S/TU2I76[ Nx&,xks'趾QoWB[Q&DCrQ< h#e(骟,gm:hWmw an4*[;z ogۑROm&$=nO&N>ENhŤ`"z ׏~$FLiU',|߼3{1cȥN,sJq=NAм#cɻ.VT /DCnR;g#bF٩Lܼw]vz 0La rwC%;a #a׌g]o{d.SYT )`F_ڀ?d&iAvomb`6zip4kλ/`ȂlA`x9BTU."wAhv\G}ce{N%U6 qoA?=,)UT ~[Gk + 5t KB0wLTl=czA =YxuIEgn6P)n#$6eJqѝo.a|l1< i`\숷%X}167_f8*|Xۉ]@|PBa~4j~ H☃xM< A\aJW2qXw+%+4_ 3\:*)|&֖%ir= ()a-sAJiӧmJcS?TܭpC, ܈ׄlsnzdFm4ibnN<-vG/ 5dW_@E;~ٱJbK1!oߞ cЫjpyWỳA+O4(K&*V*|Ef49gAKvߑr 0>QV>M[y)Ʒb_Z0GX8퍱PB',C>:*rZDM}0eG)z: 6s z؏htX7^hwζ2gd&Da+ZBy 7-)1fDxD4,d!ób 8sLU])RW@U+ԄxAHn<*J{T;#ϵOڹٱTh\(OE1DU"\q~z]S Ń&z" B#?K_$rkgJ9r':rmXg梅](j3TA!i>~L ('%C2} !ҳ s2iZ!sZz^WF\"ˮ.zW j(FW@hn²M h =H,4xĵc]AsϜyQ kmLUBgǿʢߴ x] MN$>}Ja&)%J{YHřrN`;!Me m7 2=d֏O%܁'{ī_/TvD:D~㓙wf/J z. Y> .)2 *=H7Zsg=lDD$aJQҰDޤ1NzB7߼{4#x -VJ7*dI,7 aZLGEװ7ZwSαw7{B;pcW%ip^,mѬaC!R/:1^3K $^PjgR#!nc)>%lgX]<<1yW8M{  !Tf)MKȢ܋ӎ݇&!rjWǻG)+!Ƹ3+l9nzPjё:z5ew .g01'}jzÎXlv=?HbPoǤlJ1J1!,)HݦSB껞3ĈI[|1<٣ofT6 Y-w{thDKjVۻ #d/|˺ʇc5ɲo+n:W@E?Wpuo hcNa(o~@ y׎>s@R*6B yUpbg0;ˋژh%9BPj+$oZI:ȗ|QPcC ЬLjpP/$QGJB0",fƯs&&,>]iC@H>X\vU'q DOBZ龞*XظH$պʝNU*9z1dgY5M'2I~Jܴ*uɓ>&ăfTnL{-iܧǒoy#lbҊaPynRvJc_جI8L& x- >n-*މmEeb!LD|h/9&r .S 1âŸU 6~4s# k vJmA7|f/2KӴ-+zdiY@Hclc).0۬rSsvY뱲'X]Y(km,\v6\n|"Co:1@䶮;y\,?O.ztAD-%jr~pv[8_RL:5$eL0dK@vrX8 _03Rܺ9"TcA0sE_iE.O+Z+X]1+Ȇ&li i^3 `50q*!z@ohf8vA:?ٗ`CA[+^LE`7^c4z>;UI}h<0B\O6iő,J?sZvs%`zfZ]54@]P0P(,l I/V9T E[$S#$i^Qm߫‡#Սq޿R$86Z;'5mma.Zw<vВؾӉV[dN\  X#}^Z$wux%o,%-% ޤM"ys ۋ]JC7ܔhc&P4/&~zV3;Z%uO֐n/8(s,Ӫ[MvR'BߕFq=B8;z>2*zZ3IԨ3G-Y4mf< [M`a@m&4>(Yk=9Do L"(fE:C Axx,D*`c3'tݪiIbJu l+ #P.I~s~PIN\#u9@gf%0U0<q`Hї=JtiFˣ B2XGnqj ӽNGBڶ#B[6yL C"ѫRe *ÕPT17S |)vGdzSyu)#(9Ɓ6q dΓ W>G/͛\kvoͨ~~!+%k(XAcpX Қ⴩xZC@ :tadǪ'=O ơH,"*>V_zk;"knjB3dZqӝ2 ook5cZm1n\d/:+%5o'B,omR`^>E}5~\r+_/Y-zˍd3":lo-ylC:q >xa`%c?/ ZG,g̀UWy5iӺnd%EM'Px 5/ht(E->Qv´rt>|&J|fLZyN51t6 vt+p  S\?Y.4YUqfl|_ }[`ߵR@()l@n8!ǧaeQG0񿵯]lY?{H̸Mez+'T:+YkV,aeNEk,x0?K@ttet)3g3RSfq:=^kDׇ94?N!FI-\5FOȷKRBTǢK$As%5ku#?+>"e Ź:p%ִ[;J8 EkfG EȣoCWvTp$aA򄭶f:Fgŏ@!x u!{v䎘h? PXAnLJZ]=8tCW7ɔYMjCdmF1 [Nxƙ,s|VM°x%-H*CI Rx-"10ˏudZa7eRW{bf*gjK:;VisBMC1ߔ" ȼ!O/ qjW ڪ5'ly+~iVO[jZ446(s0=gX!2-#a8ʳO}}vfU:x˻CjznOBK9auinM&$B{TΩϥX|/2Y?)CoCrBm&v]浪Av#ꯏ 7SkKwHs/'l䃬R =OT 32WDGnoH#Kme"GKb"J( om& ẓ̜W 9̱U+cuz 1oMŸv߶SWٝ*6#M$;Iծ#f[o:\ @5'|\_LSEic(H*PZQ3;(U8|lݧ?g V$`|~trP2DvH LD' }$5+Fm(@y-縜&gC(qKOPb|}7>ӭ*"!x;f 'b f6O }QT˘č|6SIa<6;=AtW kns~MXT}(C]Q6;gv_1țE!H>u+9Xg @@Jd4K EL\K58 Q$< 4qɪ͈K"JXR|Ο͉( H~0W | G!FaH ذ{}v2MtcyM-+_hn}8÷}M.tyG}JKy[N:uMYV nݳWPzɘ>6].i F1TMeikhvow|} _dGwS* O7Q'vR% ^7j Qf2.ݤi_Rշ4WB2-\7J67dQ"OSEfo I4pN2nJkU7ΰ_f )𐑛;i:$$nL{89N.Хp9#ajsXG]Ud=-y[Đ(sRvȚ.@899:3]~nE'8ڤIy@8QzHZcF/xa'XbW'sZ`P-F h@g}-cMaޥ~gk4,m*QtJtsxurUmO*^AWvGw2NU"XNIi⯒};ǐGmS$BD'2E1cqoǐU3]['DnA>EP=fsBtd3Bq8])!dV^5b]wX4š1Rg=4hl_~`tu_)i9&vn2 D@%[BL&pxaH=sm&"a U|,_> ʄ3^baۍOe%iqXUd쵻v9gYw F]E0< !>ȪTANAŠ!z˭9dËbe$.Ay$!`^V܁h{j.dlJ9Ȋ)M-W%U m2v:7,Z%|1Ӏ\ MEP8}*b*#n'4 Ϝc:SMpf9m72%*F4'Gr~_A$vI d 塥x&T>F#]އJzŦ11R8|"cpa{BeV*%vza?e.J}_ڿ9~_F|ZYwq~3 n9Uu`zQū"0+ qFF@OgPH@h:5;rRОXWó~*-eIS?64a:%OZmo&&4^mB"/i+pWnKX) ’g*Ts,ǵ`l6/0AAȨswboU`w O4gvd^~^֍G-@yќv}kDJVqR,#=̀{M yGt@ ȴGЎ,;9¤M{odϿ?˷G|C"/ ]x0Wv2o~OI:poځ|1'5d:Y23*aZQy+PGH0ľpz0|-__U;CJt9CqvkT-KT]+VCdثu񊚥C~#[KhH޺A:~*3۬6EMoɞMsx]ۊS&Iz+G9c5(]ꀆ_+ᮃ SO*cd h97X;r -3֠[[E'qZ*t<ϧ͹:(>x1b0{h X!`2X;} MAa!,a>)SM;^t `v?Kκ"90ɖ?13ӎt#(I_Ԝc:E ̊N4²0B ]3%Wt6SvR}ÉQq M#/1"D/e9Yq{o4h$*@d_1@xo ~<9E@[ㅮM+!C:Ɏ<1+VzUPEBX4r>cFBthCʉߢZ报w9+ pʔ> ;,BsmhΎ /shr_c9t'L  y_?mN&kD՚rTyR-xP.MX%t>(Ďa+h gͺ~/s_9MYʎt&Et92eE0PR&9?Vh$O^ uM /p;F84nBUt_SO+I1-q s"+NHOxR`٣㭯WNuv,e k ǭLɴmΈ-Eb J"1ܿvVWaG=7{{VIhLsw渮[A wz ՞O "eM6JNEҺ ]^섴ֿ9[TL>!nY ""1|IGly{LN+ G26:g䄜U 澔4?L1=vA֗<`@i"]}`Դ*A8nt kV$إ_܁-`==$E^EK%11gYōad )xɁhNܖ% KZc!f4ަiy~n|G$(=W:_8~i y]X}9vLv[8:?Yo'W#ᵰ<*"TtYz?SHub5,\kkս]}hE/)3}b5pOm ☀2 L+ym.p D |lӜ?iܬ$9wXCh !pt^}&@R2gy*D{%%56e,gBsWC WycџцF43͈d,nY%o0ǧFpIHF[¹gŧ}L>&t0̎`ףv7 R` 0ܾ4S\aoہTU2δ`C)*SG rڮ娌\o V_<Bqf^vI&ɝC"Ϛo ~pۍ]0L-)d}IWe:]hr{fC42U#:G/:y:8y&;W@@q \kMźTnK;99Inrl կ.t\.UQXweCOjxVNi,_TyZh fԿٳMc45=K @My槤 *T/%ZtT0T?L]`Âm?2L9iod,UfWT 2b; ʤ8,\΄ 7Ǚ0~ɸ+ Q=H.sX9pWs:[h<( 돦Ph f_ImiAۯ#=Sv+I;1jf5G@ZmѲvPSq;0˟LpLc8KR o XA?.Yyǣ P\ {xFW,I7VeNw|QmĘNHE@ ŋx Z,rP\͛^%#N2{[yXt܆;mB2msv”ш4tOqA`4mj2m+d>mitq.2Wy4>0n.F5ګ:x.'0l4UQ)_͚053jDڳttiܫb@88b5vYJ;D}JT^7ٝ>c_jNLb.h~7<:I'd3{ 1nD>D㏌vZ+-e܆7^lIWj.E+Vd[(A1ݰRAц?ia,﨩j̋Pz.ZNѨ.dΉJX͘.n;v 8T滂h6f&֏'NVF7p~v@~\B(05J6/NÆtmzDjĈVb~OOKxzޒf_LmKDQk`Jj! gi`G$~n1~8wt@]=l[c>#}gCPc֓+a*4My)B^>bOd߷3##*ri f[KTK~]D8Lu ݷW[ꔱ\pa tT<#CA]d>qιҍ.;V2CO_R~k]ԡ1W?aP*3Z7m=>1lI}U,x N\ed#PEf˜'zpф@ nb"@}?əܴ'mӾڜ0<͔?WiJ35__+Qr9r@#Z[st֡d`e<7{3ҵ7C1m{rȼ^S$a=/K^h=[0[k/ $1r!䴃=.W+=oԚ1\ːTDwFul,Ժ!*AZD˃\"^D;|p%c-pSO1Z8;Hg5uOM[Ht!!eܽ[]2GNxGGyt;RyyTTϠv1x4C 2VP^Mn!,&ePdh &#%_ƇƸ8lQp&#s׺dFz{΍}4P!H!%X$t<Ū1uMΥeɯ.0'없H r`h6%/ nZAb1QQ$R=؈oHznNm6[!sQApwy ]0>19n"K4g1`Tȩ0}}<2Ub&X^Wa< 3O`V<ܗTrʽ2`{V*SwogIgv$LT֥HAfK P\9) <,>2}MLCC̪Upc (gפ CŌ=sQc| ͥ֊,`. ) |4 {<ˆi gW8W[Gb>D*f9_ib{CJ0@ά/N"1Eq(&-(Q A_igW)ºr@n[ʶJJg:joWMڑ$;%vh5fMwz7̣q"#Wpr0~)6na=FE_L(x_q%ocL4{o퐡)$6}!{U.Z߳;{ߴGA=:QF1>0d k.׏q)Gfi_aɠwʬ!l/  Q1%S{BsWrqLWa㩴s}X(e39`zkOb-+:6?u$i͕;Oc dB4zzt$Xj.},G;';YP}l7?fi11znx?iW!i WfA O;_Us _']ⰻ#[EyN uS}jP`DT6C&jSْq0F"u{ J WČz|j@C)Cd`_AKַVڶ3$[bU?s\ң0FH& }I!KWm.DeVhw'QCJenkrwKohS4Lȏ\(Tդ htRZ%rk@&1=J]' ϚLkGGe&:8· @l*gXr50Z>|A:keJpW4A蟯H0cm`|7p8)V+]z)pH&iqDطYJeNoMRa^;pjv_`YaY+]_{:[-o3A anShC1\`" >1Bܮ jE1n*Z93ɞ| SH,Zc'p[_ w^d7=xsϚh;mF#=ҀFLVg>,;P Mɘ"$hօb1\[K7pPFI@M4 WMs6 DV&})! "Z=o& #+Um@3Hh{Rvo T"N1mF3?]wEE3}53u?m]6tgHf젏rb}m9;)|3^0;X<9U9l" JO*S\yLwθsL|Ž 4bW0& RAK8uPsi?ǁKGbrq![ʘ;3 hcO8#θ9K܃\Bla,1r'z涰7˜ >Vh+_Dm׺PM6^ᝒZƇ`!NM(X-.W tB,H ~Uw}NN=ua=$x,.%e>Z'yp'n>"GtDlY">`V%ۢW] ǎj:/zl|GX^8cmu+xa k|6qgUN59V1 y%z0p,96H{=VPU乽 mIM}B)J+-2ׄ [_w)DB G&mńj p&MW`gR% P2[)U;F%7Oh.tNzfn}NoY Q 25VhݟtdmVbN\+^=OЄ7]Si$^iuZ!&|^17 %w kZdt-GDsP>\ %)siV_A:O(1$.Ijd',QF+c0Sw"#)ąw&zBȖ'qB.+m)(T=ɲal6cR3. `=w)+k26yl@Tgr/fV ICEebp\"g`:39Aaj)Kyz]wl [ĨWH5tP:i.ȧ:T-EW}dj[;e 4쓲f>V!]lbG!Z=ʒGiPbmsd4! ԞoVj?gɴCU&Dt|XA(BY|-7U\o>LO^y%R>=?z`|{ã2g?6BGgVyva& μ_MXä^'cʏQ2XJƬyGkLoFNhB%ƈr4$)/r87TUl>9PN/Q`ĥ!"Ϡ0r'$FzÂ>ľ*z^/t+X #&/y`Z)%@=%Juh =6>k\;V[ݜQbU24`_'L/<|?}y=Wq/zb[ @n;,s2IG+OFklc@r(coZ/4@He†FSOhDaTg#&U?0jUEErf}BK8%0d'5wV0dd~p{+,`NhKR6l99?4 i֢|6Ma<aqءo1k *g,=]|M)(gêyB0՞jloLo "1piLdjbmcZp[OYf}*Ew? vt cw2w $C7oY*Bt &AfzcqҤ Gڡ)Z'f/~T..yj<ҫsj4jJ\x`V *{.fiot&)a !n Ww7ﶚFV(yJT.sV G.t$]ǩ3`ɟ6+ ޾ X %׀tC&|cQQTg jJ\;[h!&7l;5? ( K -4Y[܏q2:orxR21(uOf;ofɧ6B>J ɫ+ (foyaޖ2RDjz똩$/ئTL +P\Mh>ʛ#}Y=~B4鐌ˢf(2rtLxGJ_΄wQQX9C /qOмaMm>rڿ;3ːs_ W)>WL<_Bg"Ҕˠju,[g\GR+X 8|Ndt:ûgSe-)lDT[N!zpf5X1VFͫ d+T*\gquUfե+S_ :ag0\C26s ɗOf6 τ\Oe@&9ah#@bܳɩȚW h ~`eOtmFx8[/H<(`W)L7*>'ÍxpRLlhHE%[X 6MNߞQxTsߗF.gp6?7ְC;`gKЛjg2YSSvcL@ %~c9ʤԇ5iv e,|X wIz5.&\Ux6DX~ ?t 3Z_z/T=JT T4|jdPWLc>p*:9%⼉u6$a}^i7MS1£@PWÄHm vRjP:VfOk12A1WCHPc7*'DYR~&.Ξ+n\:y0p&W"@y:m jY\㈁(ȁ+I->VCeH |mDdHV+Z*Q5JFy9 K+\~NӃ®MҮ1}&mF(k|:m!ha#Vy!9aāҺf儰ۖ+E'nؼyǿV[NlE9v&~ۗAIeٶlwqgBK(8ql%j7B>"++IBPXo>'lF:GN_5m:W&,?r}ႺqŸ k[ʳoa/н޿H v*R1P&I8VIzOQxҫz<dv{)7p~%6!+1c ] PxĖv-By4t48|ی)4Po'390 zɸ^L ´@5qNVX=?U O+h #+c/Ӑtؽ \sH+i z&E>925i)W1pՔFeDL5Ѧ)0\/9 Qik;|t_P7y{yz'T(c)QZW^&ѻ7\ո'{:] eLT 7ɯEs &M[U^0͉JTP=n S-b N0t4{lfCr"]3PmoѶݟ<};&nҍ)F azEiԆ] u#)zo)k06ґ%A;,)Af 1MTkNʹ%^^匆„ ί`)yS8#X@|q(a/X Wjqb?ՕUdqTX/3-"YyVYDk-p#$I#bȟC޸q>![ǣMcFJkI1fTcY`|) CugpX." ֒w": $O/V5RV w8xGqع+Rapfb DB=F=vu ־,ߨ_bJ}` 9u"5mS;?৏P:+@;ʹeӬJ)B)` h[  Y#x1sJ!&dJV8 ~ n~%j_bfg+ydM)5g`a2=6js$Gc*% 7ׄ+κBu e<~,}}t=Vg^ڎcPLM{][2E*ZAb^ b6eJVa>@L\?wr<\ #C"Il=>?Yh{Hu`u}# s `i4sBy;=hq 0 п; or<^?CODGP_RH賗 7}DXZZXh 6M`Pc ]frh'O. XOtIYrȒ6=tN d/ZF՗H zh[=#Cq@. vAV=nbr&H!_,ӘbnFPmC&V'Yi -W 'IOQw-aS.R$KR67nd`s, -A82bvfdo6j% ~pZQTm|:mމn4|##zXsKQ#IRZHՍ 54:'  ҳs1ݢ73H Y/$d?x|c{H;XBSS9ͷޗurLgYX"ϼY Ut"%iIysi:jĹ&A&5CIk6D2[A6Rk?I4@F 0bouo،Ez[F{gj|ŭ򏹎ed)4zJoZ6SUtU~-^m.cJi-mg{E^M*9Abpyd9b|8Uf.c֭F'_sܴm`q+ՑcKWwJF g 3f?dlլI9,'Ll~|/x}RĻٞ,f%t O%Зf hOn`\ji^p H(UNh6Mdu6o4TwFq2` 4Vzk~YRgdwEٗ:s-d{1`VWRQ.M[MZ1[3Li%Bur͝ҬʚX׏cw[9O֣3P]lGP*rO+}S#߁sWX* Ȝ$Mi'%=P7{ jz>:/sMsGа ^H4lX[%7DuFhʈp銙/^#F_c;2ŋH^'!T}p*f1(q[nLD]W&j~{TYOA&XCn(flIxX#0Tԛ('3MQG29^:dc\@W>9R l:*ƟXD_r_35-k"P\E)Pry> J٬}.6LLζBY$ mzX9BP IL'Uig8WzSx]L|?s8]B,B{0[ܗ~niӲUAx (fxr''bNH )eCɇ2Unט/$کol vMC BJA%TɫPS vb/;#Ϝ:GeZ~.tV\T !;>nǡl0ȵgٺMxCψjRT|#!uxcCcb tH\Ab)( eK&&@Ŷkc  ᖒ]x\Hו9ڼRP_ #> -UT.Š/\{ȝSG[%u~x͇N!6RuJ0@i$֚[G7/wKaQ~t<0W.9U۽n/ UJA&(-Lw{nX.xc1 SZLwmJpS<*EoW5Mo'/bڊ&W`1\@G%%E?qHag5RiahSuA26>YPOW$5:YtONrY,>:COxJl$!~_b 7>M` G):6\nsj4 Mo=E#eNZ<8niC(D`dyאlE@K|Ε |h÷KJ|uz[yV;Gb=L쨊3g5`^IuUɪ>i)=[TՔ6P ziw^T0KK"v`<9Ş16ڝLUV%н99؟_rA3MgX;BӠEe)t6͎JrxDx&Y4Z||rf_r] tFe`Yp%jw+p[pOt.T9_M*C'3+^CG;T@q ?a ymh>ah?_j;Up}62os,!gmY-vvr Ҽ=$l5sŸ3". սBM@="GT݉:o^Tܴ99/ ^*RY/ {99 ˔4}v_ϱl8#Q,0JI.j~K=Ogex[ơh߽I/ +a# v> n!7ДcM,T@-hlw5*p0" @NG@VmUIo䕨]iyh]ZI0̈́kgxlaSD?rqlO:fD ;WnV A]Zzï="lݝ/=@P`;epENvŁC29j?/joGt".qf/$zJxտJG'Ydм1 Z4H H4$-_Ez 8k"{-jbe`Wb+,KjeGμٻOPӰ&h(%ާ@s(&\.+PgI5.ZqSdHYɮx(4@Ĺ^:|AFs>tʏt4VR+y{ϱ[㚽㟳`0أ1?dJ/8oj [E ؏?[u0*繅B"^7LPj:@īlPM9S}(Col O_ڌ":k]^|7NG&߻ )G+?{Pc Wij (0n xͪNb&(L1w nyIqoD(&I ˵X(I͈?\^07W$}}DN~`3+s>_[zwA3Wr[94n]ALnLGs- }9zl 3Vfm GEn^lM%wkLNe؍*Y̠vL 쫓a^g"8CjƴЉˮbߥJ&,}| 8:Oq $bBSBdZr~q>؄] t] /AޤS=oC$GYE\p1M.xaVgx7#h豱CP]`J۠6^Tn]U~I'"Mb*V k,p?,1//lbQ+N13nWCM e0iBjnȽ%[SC>%&aY,3]/(UkD]$0W+>'o1T'2I[B#K 5+˪w9y$nn_zj"&Q<18i8`:ݶ^f7~eTACu9/,L+Xh8f]yAhEZgh^VKC7;+*SR1T xiߴ=5_s7,k J7.=crU_KLLbzWz{)Frڣsc46Dg#ebAr5H%xx^;hYR5%hErv5A˛h%G{RXqsgQ5,/2VSN+٭˺iG+RߌeH3U^pOYK[3i3PPY'.|]¢Fx4EEtv_qPa4A χ Gc3@/'Pjk&^QkP!OL*GpY}a?Ik)D*7oSwJor?,' Y".W?"m}:!0%q>꽴2ªP (|?OP?zn57O_0䴧pjKٻlM+uXdfr>o;Ndi v`<2N,-yHbg.F/xEޥb(@~-~!gN-=s#̖ #,?dXN#Q$݊-X>h3odO /Hs~UTG{Mm}Ԇ Lђp.ep@ t{ =O8(r\]J(|%G'جw Kwkm~6RxU*|1CĨѦxa=!A)jL22beWq6f%/5М!)Q&-*>0 ն8^s55RV>pl1> Zż,+g5OB7TcVz{f[9-E> ?㳔dS)+ℕ׿fqcy#;|+extA:FDWu, ahߝG=h͠.Bf\R_ 2q)U)GAToYXeE-nƝcCD{F\[7 $P 5ɗ рWNI=K6KC@Ye+r-{42.)0RmE{#:͡4k c2<<>"eYJ$oC Z|8ˑneBjk*Ûr>\VݾgV.2wc6 "t8eaLC, I3"qZ T% + |83g2-ệ8ťt+I7x^nLarKc >cG!*kD+)c'"TJZRtvQDhp'i-x+ _hn* TX/X}qюW2cZKĄϣ D9_̓9e0;&Ej0hOm;6?#Xdc}{ק_>aA`^,/gEI,l˻X{c]ܧQT"Igy-Nǎ8T<\8iBkٺf:%I3hMACPv`p]? Cv)iqްIZ%oߙXy7-x~o@m7x5 m8SŶ՞~{#'i_\J?+-i-tFƼ/Sdam V6)$ׁZh mnd wii/;[*f!Yn] 7T8o0fٕ3rL`o烨q#ka3iǖG*="(B(,`Ɩm$hHJ b~?[E ˠFVoU y}l+f4XAJzfۢҡWgy0ƚ@ ,W9=Sk/5 51F)(=t?i҃\m0y2ϛJӊgA/~Vޏ%|Jh( X`B&p˹DNr,X(cMEjO.qx Nd_~򀊬w 45I6Q )y}-dTMԐ>6i6b ,}%$-O;kp\cB]{G.n %R[cvybHq)nOMtaqAg0m+L Os6yw%u1-mEDoIKU_v O#c߃GP%cNJ,FpsN^ RPZKa+1|_w6#9 l}i~R<l͌Hc5V/uT~ml. gv Y';߇.,9[!!y0 @W1*S0teTgeQCpG?q jޭa*IfwX U[NUqa$>S| E6 {ؙ=sIfv`,4Ǥ¼JUҝ+Y$| v#G)oL-9rCOy!i+i7NIZhFcm8JGs0ZxG{f{uo,f\Q}E֐zT8* 1.U涐l(T9aҽ1[ACgLP1C͏ GyGUVwzsiQ-[`vad0ϥ ]ȒdUa_HZO8tL"mکȤ)oLA䕛x!)gxBN*7p[-ِ{{,y7''~ 5;;tk p^}i{*lf|O89KF)2 @RquE6CIJx blH٦f؇4ej2ݑ ۚqOx*[*=[ՊS7v²?f)E`ea$;g6-&J(CceP,,#a|oYfO26UsB.S ”{J.A e PbqhK{A:Ȃ[DOVN}Pbz)fcfPC1WJ,zKinm 4I/dY#9P d?cY'V˵^=˨;2,Fn@s 2eJrCTYKkCFb~FbɖݼGTGSQt nX9!*֑ %G4F@bOCGbFaĘ~N#Ht;%7„e[ZԺIa5qHG(B|UoM" <[eN!Rij%T1,8L %U8r̽1ap edʁ̂e| [k P wb܌C\8+4SxΰniMIhosLvϧ$9#/m@¦9FGb?iF=*A!s+_X[h5PNfrף.m7c6-X_W Q\/y0#*lzA‚8tķ>T{{@I:٪:44~iIGsBb"Q^`$ކ?IqY8-/x9\%B!)g._T$nAԐuq?Ob un6!ʆi }6nm1oz/.`Ԕ2޸p}iWO:%"E:T~TT$ROiIyyfGSV# ى D X=ذRM(-V" G9,˄Q| @d8Q=ؙM͝;5JJC:oH!vocEbm]kƃ)&․ sZO~\TRQNQ#;% r m@ԅ?OE,9N(f0v<͢ad9I.OiD`0yT5z#iw33|M$ZBӻk`_Ga[ٽ9p h0~21>е̡3*f# e\܎3\]͎{Q)z]fquj~Qư? n!Rqx qzqxlyNWhfuJbWT9/+o 7/TS9 l(R6֒zSg)}cb|m=O.@^$$"yo*R)N%jz-Hjh%u=R=RPU搿=&6O-qFމ%tlIoZN>jsoJ. .OHL}Y 4Ws9Bww7ul'LѰ<۳顼{=ѽ$JfX! h GUlv?tourJ{zQXVO'rzmJWmUAsy6Bl4`fTgN[,>| td[ >lZt &A 0F8n Yp õ~fҵ"nM'Ӭ"a&5};1}*ǔh06xą6G8tc]\}&7`$"*l+ET-J2r ﾎj];pBoj ft'<㉜\81"aUضY빆S:vI}VQ#~sW{>cs>TmOWelo}cP_$9 ljmEۭ'Phңp(UP)M *Ph0r8 Af5ԟ+˙)./(ְ909%( F8\QϼY}Znb]!-2I郊ij ],Su|]ఛ){"߅mi8ON;icmVtʘߍqvIXUp0g9d 6" ے>DC:;&w l>v&hœ1P㧡 c!w^e,fXƯm-,+Jb$xy=<'u@iCV$riXbJC:l?^=ZKKXv럄)v!C8K-^ׄﱀ#~$\4f[5ٱ FSoU䟘-`{B|w6o\8G QOm-M+oUV(OICQ:۳żrMs|tJ? -&qз5 j~K{W\\z?⓲(s_.kK: !(@dÙhBT #zѢ_P~9|~u`x@9ha[ %oQ#ğM7f,TJztƘ6Wڝofΐ(qls!ʈb즅50J53_%"|\ܩP(>9|R)Q7RkxZTUB=%ztШ'g5uykR EŢ@9!K(wN>&\&t3&,xگ<Nρ&]\ ^g%FUO8Z5$Ç%K?k8@榈AG3AO&õDl!*ɥ R 0AUx{!{ǿ4S-n$"a(g 2`Fk_6hH+_'$'G9dP ~c(BCCy?Ļkb; wDd Yz'RhXP& A.{!t?p(%'Y0^eg^8~YŚˆ #N\e"zp\+yo @#VQdq4):#C=/:WlМ?b'S# ,C;jzAKa}SU`N7C A7YχFKhCy mU(6D.vгfg6S6,h zc  'ߋ! NNyj_.D6Ħtjl bmVfGnA?0pyUJT@|NlD)܍\n Vt]c5XAhkf &0l%r[NNie!.pԄogkPȑ{*4%2wj!%/ $Vwmp kz_l}_z Ir Aғ,VMh$/l_0Z|J\fZ"0SE5Dw&&.@ w%ݕ1?LfŀtĿ5ۦ{kNfYax<)ߣhb%X#qpiV2V 68\wFn߂Knȏ^B#O.q;@ E!TpaFSq7%7ii ?[Wwc.cK2DC:ms3s~{o㵔Z pVYn]=9r h M?# ,hS%g>į6k^6g+I"H H%MFO2`>|U[R#DK*3z{n6R">S[J@Z@6h DM^OQ]ȉNʧ9ިoO>+fG|ʀ- W8Y,M&5.ƣi(R@hxzxg`y޽ð3G3IdZI׫kh@QM$8$'0mWLD'Q p]hfs2-/"=,++t/ϕ'._zQ^kg(z%2̠3_#?5KPE^λngdvs{JDŽ9g>%,6,wVԵ߱Pb)G_k}=QA#=Y8ǕkwB֍WǶQ Έ\QK~S>ƶGlaR>Yo[K|PfAhT\$Wn'E G{)b;NJYKŌǔx!ݰ8%8d_>]$L%% @⨼&Q"q<iҸ=@&frm.6}-f):w?D #P&pm7'X$Q,abnH,P5oE+ ?%?@I+`_.DitIZV M>&LPhtR"+E&>%g\IM6g]\W7h 羻HR kdhiMUoUͧL&sO7$==MN֋Ve8봦?LR\'ї՜$vrwbp:cd".Zm >kXK6q| ,O-\J]$|e=1( +-H\ۼC0}|-la9=xVz1+M3]i|9`)jGq: I ꏟib4xT@5%p.DU;Y>}ߐAa\"sfTl\6D_0w{2NE֐- ڲT7T6W= LhA:6I%=0ݢHN]q -eu*ٛU 5 ,n~{'(cWu1N?AeD ûYNxUkS|,3:e!ujǫxԁ;ni+J/+$Ny6?g<;:Dƚ53kB JnG`WiⅢ\#3>laeH#j[ۄ,xJQn#5"}TSΡK:mVw3 dVR9è!;i]\*n`iWM_d)"F^g(X]q&n#wa_~h77Y3Ͼ9Ow=Ջ*ZZ iuu5Uo[;A z`so7`AoC4T@H#5_U06'ɩt+#"HM^dC(w1߃_8TF`_A]Ѱ,jP7v1 ,;t՚ϒy x\>ZhLNiDXq?1nhf~'X,='S1.qV@8s3W@oԬ?,F|Xvy̏yMy­(ð\a+gnu0k:?r/D=-tp~(s)Oc`81RYPԓgx$ _>]5][XtH+u/9(Oc\˳2Q\( Q,R'瓊dӂnM(UgY P:YMI!xCʯt6!c!5nzREN\ {m23*_7ZufRCZ"M˧mSƒp. _Ht-fx,!qɽ29 ^?ݶnyBeGgvH,);Ermb{PeǢ]4Ңw/~eTPl"˳WBib?RY=ҹ5r =(.gLeM]l=PB<ԻCO5YU3Jׅ h).0>|nkD c4K Q§ҟDځLkH;czm:r?ьő.R"oMgzL &T 9Wd+w1|T[ۀ t vg0Ajř4{ (; 9FpDo$kM«%];pE^3=>Ɔ&&g$2* ΐb]05nz^n߼CR&=~nQұ eF)_2K׵:QJ[]vLӻ`=4`%S4BFJ`Z!:YjvM$(VKzg$Z.={+WTk5Qģ1 "( 'o\o𴕅kRWbTv:9xiGga֨H{V}""ơ~}ܚyJ : v4 Z<`1VG*/I[?f-T7/0MFww֐ n.xnOH:%> A~k*rL-x1=a Q-7̓ l?uE, 3NSذG}s@ Zxn( E[/zgK\I/Q7V"E9JԒG ܓDEϜB6Ի |1lg*;y#;ҷ&'4?yҌfAY 諭Ăe%#|0{BYic*\OHRŊsM5Učʉ̣Qw¥F͇|܍fPx*\r(:V)rΡ-xnq[iWi<!2w^7u#St DG-E xM6}J8S5jղ2HbuԐ}%*ogkY m|DXq^[Mxo$a926S =fIׯ1V knŚ?, ΁,HM}v μ\YZxoirE?ҪЊ͝ c}3x`ϐRE*B7F#)1 FDZ chS=6i*|FQ|K@t},6h|z&юsi1\ezW>ͨFO">N=gD -.0ui/$q2/,.f<:r'`ijan4"QܮzT"p7lS;_\́l=?=V<}hQcluU2(6 <=uO@|Tuܠ^jT! Cc3hn٦|gy*ץ'U3jnn_.CW+)r Ȅкb(Vʾ}Uvj˅]l?B okؕUi I+sLq`"ZSLĐ XŪ*]AܲiE?(=MX:we `VCAl-Қ_z\[ݽg e55Bx 7R>#!5|()ʈNI#ѐ x0 )20Vk5_ICZ ,tE Iyt3Ǟh~sIl?y0Js/>XtεnU a\L&4ͤe}1i]~F)mU?Y.98~je# s!mj&3we3jduuhjD(4Vmp8d@c/Ap4+0^E.>y X!P5Oal桌<.yJ}}i7(sT|zLr÷3E_JLdQ p[ z5 _ fԫhd&zSLî2dn;z ;a:Ky>.ہGUAO'^:@0NCԨJ -KS`T_"b&pQ  A7z]o2}8QС1d"uj-yă=!-s֡/IPջ@׽a^u͵oGݒۺo&Tc1p$d?wF;Ᶎ(Vrh<5gSb{,np!yS^;3ˉ}_Vp7"Ҏ9 )̖0= -6)q'8a _Գ$լDp1yHUmuN|=X8?),yZd+! [fS.P0M<)%p(s?<՗zf '.AۜN&4 op6i=SU\p\5ѐ+>|SA{x^{ʟn3d!Hܟk1V;RxeZ@R\e澻5M 4C ̎&0Q#EΫ:+YaFGN> =lHw+b9JfήmaaO䯽/lG ke,!~:񝓬07#W.=,#n'FY; ن (ޕGWq>l >;6Fۖoj̯?~e~k]\ާ9vuv84?^^۷O <1 =v. aR|,P0@xTu ౢAF"ͳTs|> ihu#ZRErܿj>{b aE/x "Q+R?yś۷ >xMjʂQ ǏL!dU'A˃87m?*̀w:^f!l? ZK$Fd{gP℥W8;CÃYdHͷTG, i{\4Z"ryd'^LΧ*AʥPu2l0B_}3M*_4sq mz|DP0裚8U{% κEp3a%G:4ygd غT0*^G߯uZůit/ 0RUEP%/I[񙬹/b{*k[|-!eŬKW 5[ۏ2b4J khtAeM4v ʐs;#w{SHیRɱ8w)%^H %Se •qfXmYaABv #C1 60&jRljBD%yN`.l!$Wt-cMZ9 }\Xa4mvp)tG׸\a69b.{9?YcÐp^sп@" ]¦ۓa[oWVIOb!#ːG[3X*`Wp~{p<0SMخtL<d͌Tێ*޶v*q5gc&Ͳm0^kLR{}S&2wQ:携kX '_h%n ߧ>;޾K M~0lr& ~j-+Mw}ۜ$'gHAtQ⇹j`į r1ŁFb0ڱ6;h-s\2"?{WG<[)z<dqڅZj2΁?l`<<:LJ-6cPkS[\ܫy{4];:j9";W@#nfv)cWinWsÑw?Xtl߸-T1 LU,Ʃyƕ=gM|>b+"O]8ݴRϝU4~i/ X\°i+! Z=x-K S@W/:h s"LNYɹJу!1g.u;əX@LS` D;\X` F%S ]̪Oq!EƈTy!</b'zׂjPO3lt5*EnZs_~r~ӊk*3 ,r`Obv<0(+SLl.<9lҺ'9^U0>8XKd\ݵ.o=E;Ќ 9$ȣ@b;|KZeBӛr9^kw*V_#YO8% UWF7>u{[ 1i |JY?F1JXVdp5gu, D{ʻ3suoХ?mq՛>`G{.Q7bN7\&V/X]xp] EzR DRO H2M8Wa#,CdNW VYUǮebYN1/%XzsZy\J4šcNoIwXBœKz3SiN-χz@mx}ty3'CJjΫ CY$;ji#!Y0vao604M w+quҳ(]p;DT1Wc{^K;F%t%UdJj $}>c3WXa4h*@,PK4I6Z;>u*6]9N(R Ϧi ʛ0&Hc8RR5 ;ãsV֞rBz;l}f Ob*4Pf6ʑ<ILkb?~qaq}˛0;䷧clLh^+Ll!$> el!|#3UWɷ/n c[FE,c pf] Dޛ%6^n6bƜJ Q;Z!UMߛD[FZcBĉVb#Jx͚ w ]}vΒ٦+38.y24R/;"syuW[$TJ^yhq"bʙ\fm$ⴅyɫ#& `x*irRZ:nX T?'Uc=#>{2al\^t:D7mjej0؏Z̨&,q[r1M_z!`Gu u:Qm3nߐp>Df y_ר(:p/wVKkFċ ИH+9n0ћ8=Ykq]gR5"ǗS8M M q.dy6?rVoc~xiP>g]4bN<¶tl-[VVQQj_E \Az?JDy mVPf؞o'mla%uz`>ǎ1]Xsf#6+HEd٫@K%*ĸE>/7b߃doI1k'z NsA>5aVҖW/m-OS _%nBb=f15 jbT4q~6AS[@%* V֟u_HAp{tY^{74+{yoqi4 @7GoXu CqDk5Iy0))]I'8/5CfdGEKrD[Υo-sQHq;#?ŹzĚԽV{,\zpheԧ6(qun@WǦL *|ŅVcϧ4ܢnZ} }v=M*1)4"E' t$1ߡ{xX^dnRu>i.X@DzO@Q59S`AzP D"q{m(mJ P%/bBE)6GՈ͘#aWs *ϛbfXV2NN^0s[;XD];ʵ萵QZ-‘I aaSz-w(aRhT|NjKūhӶ/x!ZKL-ϠkLVt 0Fo״{/xUV6 " MS;#nRC6"9}`{ ad_fKGMx񺘫->|`-ؐmig1͝w7cf˜~kPD?BRM&NA͇ѲkˬGKrI xM&{1ԋ8{uۣ5sabM\_Կ_BKzFAEpO,ʘ?HNqOhBOxu5BUoO1vIoF0˨bN}̀fAHO 2xuY 2^;C*x 71q"PSNy( =|g CMܼH1J)!+meIBh 9yv-g0.!J#l,PX$eWWFEEQR]y ,`#qɗ@TLj;U V[Ȣ6e+0D^6L@bkA\O5zd7vͳ{ vEOCD l-#(VA-a*@;zʟ 㯤sgyP-TKUQ GBg_# 7sԦT Щ4{xqN!O 9>ޔcOuJ)npO츪ЉekiO`DZc\3o&.A,SLZ/pF:S-W=)nv'TTdɺsfcUv9uFҾ~`՝Mhe.IIq =K|߃퍻~5bV{%Cr|Yfsvd弇bpLAAB(rZdU2ZF `Q7! 9L5E ݅#իzOY Ʉ K0o 1WoJ?3Fߦ' }|MދbJ4|Dpϵg.{z$lj/MKZ[60lY}u/O\py=Nਜ+VJeGW B%9%B%RLI}/2Vp^׿@G.y`y>Dip(] Rlg⻑4sM8mR, :7?^cQ 0lO?@)W< Q,壭WTIpPy!&4Ut}5ߢnbbvo>$P,\vF& gԡzк PY v3`mt@rP{BFӝ8f H8}4VpK?Z/=j5V A5wU&N[ex/phH>?^Zm0cnGP’[&=(=4$ޠ{+'_a,x*dk~V ūCH䙍jU[_մ be9CkCqS8 +/NX֨]m5;dTurxOW+]O>S>e">hgb`yOJLsa꺧1Tĩ ԜDsё7[sWrP% @.VDNtYQ ef(Iъ՜#v`}<.MPp(f`Eb q$UnL$ϚC⟭ဢꬭNdnex.Rh1Q[2wJ?́>"`Xt`Cl0<0]ϔmYC+jV3_9 K_?"M&8B<ރS*`F?d.r XagZ*b l/y9K= S!B[x }R4]ß -³Bڰ/=(2mMl@I{hXRj֌9V^֬',YlTxFj 5My}2KCp  R&Њh Mn=Gð!R$@F=Ik)ZA@jB̵_vtb)yWP6zv{9Oeр=u9JlƯaÆ=EO9 ros KVFً 5ɏAOs (iY IL Yce/;0s#9'6;Wr_G֮6{IA+ٰZv&1oXOr.~V~qbЫ/R4.rt8xIR`$w[aK篋R\HKRRB~&4/8=He{`W–*nH{kqoZ28sݭfWt1)BdxRWC2+Ql-reV_ul&U7 F1x'$ٮ[:цǢk 7#Bbz|dE!B>ZҫXVN5:^pq ڀ JX$ܠhz)`e0:VP[oy śO 2%ѣ1 @(gJ8gW1$ǫaxtfHt(⟍a$4P;Γ'~wġwejZIi7lP!}V!%&GYdھEabd*/LH53xך 9;Ul`T8PMUnd C'UD [I:pC,07Ցy تIϰ%DHnEƅ)7!xQ|p?@#gumҀ-/k=ݘ?}ƥ_Vk9O6VK5$' #pb %p\+4)DU6yLcnL4[T°2UϒUslM+_iхCFTf}]3v+jk% f?Jx1C㠨yP[}*&v̼e9P)ʒrLm/!rLnM&4"kBx.JfPYxXڄE?7r!lEM{O? ԌR EI赗g䢧=vuP{T:gv!㧑s.pfSdNڈaޛGTX9}ޚ9~6&1n랴/y*Cza)jc 3o^)A;ȞioC!'Nmz<4՛ r?dljf_D~YaF~8@0,p.Ye6G|<>| ¢4_gi:X'ئcD6^|a&B4C{'MSl=YcEivw;6{J-@ } _(CzpiWxԦJ>IlMQB ϤD.u;͗V0wjn_v*rkZ$s3.z{nZ F\V:6x$q+p V=X31N'|[%4)+P t/=<"Ue ф1 1 &?Mj2mA^]Q;nрT֕c&l6xMooM\:2*=p[{÷,2am_WdUQ)i0187z-' h#F ~>ڱhZ"Pz$Phv2=#ğ% [ pYMVaGu ȯP&oZH]t`E:/" ;q" H[%o9G6%.|_تcʗS53$"ӡW[VҎ3(]Ҙи\ V1VInc~?$ JʭX>!BjY+>d45^6mFcĢo攂3&FاZXF`Ԅ+e?˔MvRk{\4 fݩbH.T/t'BitS*c}cu_>w I?fQZ!䌰>HW+>aHX=`Ȋ}_sT%S?5$*zqvڂ0LX1rr:Q{[j^I<&qڗ^9[)g#G8̲?\2,n3V[WV1.^(qk0 % Eюбa8$"F5uyc3;yBC~]-ݸ\mf,2TKY){(/K{?h[PŨ]QU-GBkͶEqJߗ8qa܋)pϙzPJ3n6l`,ec_,U>E39pu'ː歆.2S}nNx̃:6Gv|oY ltꤺSt5ђ+tߙjK!; HD?3y3z֢Gl{ؚןubt4習0}u'm At`Fwozѳg s7#hIVc/_ zӆВw8|(P88!InzMbG# em&(cڥB$20YјdC#r^ 7T2~>ןN,ǻ.ؕz̑?|ys-?oXX{TJ)8pENҌ5IC! v#FgBU, :*4H&HEYMa>I"Fӭ9tO/x2ςVAz]jvl:jЀO˂.jBbPS)82Ay3j2dJr/>IC E&PDIƇ;/co]n%>&U,X?!dzfjw\YDfg$`"&(چa|׆5h=l.2WnΙ1:ʸ 3 59)\]{Î{i_۔y SШ_@O?hGh${) }Mkj%WApQ?t0-.d44c)ǀ-ЀnA͕cIr{+VmET)]N=N9をad>CīJc=ճ`H.RnN!Nʘgv"o0uC:}Xy(?Yjѵϝ\4jcsEC\_qAc56cא 9h߾S=LNo. juY%a3RzdT s^pm};FrS1A-_. v=Lb<@$,O+9O^vCXnϘJr4K5)Y:ˁJv:N8~E (-6z3gC0.+m1X LKWأ_/0p%O=Jq%B+ό8:!{Gd큺49P2vЄ't!q{|ܜ(ڲU՜O>T2<;_֡Q-, Kj@(&7|"=i0>1 veQT^'sno !c_CG.PePvpQƲY$fGTlZ.o+X(U0D2?q0Q_HIk$G =|^[/ . ,1B=pMab?nP5RB9&3,A\S[Ѹ &O Gw @8^=S7&o;NiEym @ [g!df!&VNF)N $<~` j=<%_ܺ6BknZ3WD f=b! plJ(HvW7? 0xWb(_wőUkҘ2zx HtO#(5?p ͞q-Чnzn$JϤ3G4+x$1uHf]6[̈J*8F~R3y*ՍP )jPGX"*L hfWMӿe#jϪ*;eZ$0Vh|*MOJ˜r pjvR}fEw3 a4ygJz)p"jjV_YVaY"KiޏmM?;[IJr 8`wzq'͓֞"kC4,TS(Wg4=Lf$)Օ_NB:K-DG6iȨɣ ^WXf3ێSQA;$Jvb ҋm8mT=׋ `^w_?Ӹ#Уf }t˗lUҵ%U bDoнWr},7M)G!K8pl 6}iVU#Rdy_lWhnR6JF%`^_m^膞~UjR5B\^ ~s"٫GSĨP &xPϣ۾)'.W(Wg.M7 KhӰzMF4]Fx!qTGeMzɂC x&Qvɝn &zWlrbe"RVR^aGiozYR-G o7 #E;YKc}g&h4  @DZ,|={Rbiʦ'+iҖ zWN3 [VK| I.wGrҾP5ȣI@9wuJ0|R, +6(J[,t Mv49/f5 Nž}"I2[UӺɮ0WmUXk/VB:`<qc-ΰY *8@rф(+XC q&(H+qa3v~ee/} 85FksZH3}L@wa?н?}4JNٗb*@ߊ j-E5i8hqh#X(}5ZrM1+ɏ* Zj٫?F6cĖF_wzr0z"J"6Jy8KdosRFݲ침on+3Qo16n*@F߈T}h>u<7xX1/bԙ$$b1vX.󊏞S Z }{5)kj aS頻pjR8lZ(6AJM2H鐭KU6`heO'{a??K&@[5Iq#O:;H,A!EM}pǨyinDZL4XDB7VCfG*b@}xc,9.(zdS? ͧwUcjKm};Bs+Ip=hXԈesxe(swݤC|- K$2?n c[N*2Ӗkr1ĥs 0"p 4 U:n|4%0pWuvjmč˿lR)&! h/S /;sX%M&z*r12nC͠Y"#I> (\  v6E3D{OS@k-l<|5UT JDiJxD`fTP[i'#(AذIs>^eTkv*C<99^ w׀&EM4p$j:#=.~>#vǬҏP~ ƲH8eˊAA 1fk9gOT,24w9W$($xX5rׅIMg(TBA/ᚌ>D(X.#F}]E[E _sq[,k4Ά`3_НZZ-Z|W0Qdyš-U}>/-{Qzb͋kM0/?/P8wsZ9DR:,tV+ƗamlP@kd[̏.{D6T O! oU}%U=4:L l77_+P|0!0Xo4>LhEW5^?ڠ^D'+#_REǖn/}l9ӦvH>*Ǭ^˜&gſ᥿v#e|+O@(iW7N, gE7㏹dGo)_,%~Ġ&j@~b{@t;]L\yb"<~y*hϹ%g;Yp>GI{, ~o,6e >p]_LKX2o2o7O` #Mli$>䴉CP&މ苂7xb&} s4&Rc Y?㦪Ćq7aIqA7Kgۚ"S.˩=cҪh4?~gO?glDžׁ鮹T_{t~LisoΘ;<[^ 4UP^Ni:΍̤֘ ژF ^YrSCž "Z=–K;аdBLj0m >Ӯ#%~vY3-@6-Ctd}' ;EBN}"S o mzToIзMt/[)P#*>)eԛBf49l 5Rف̾ۖgӔnAE,~dǎÒ 0g]˦Fq)~ # }q/ǷA~ Y{+݉FDp37dB] S0K?OEej @UHĬd$_b'ƫ?(r5Tw^ksBt&EC [Y6CiV˙8vܲBȜvgِǕtzo FKhEܗDfJIB<:p)bOdȲd6C.FXnY>O˨%3JkzJIKfG5!_ d$>5a~1XT֌؞3ߘ&.Ie|ֶ\}{%C.K&M*YGώtRVȒ>- SeCsI9\;L4g:Ɏd_[ƍDSRㆌrTZ44T-Mnn'FP*LwR7L\_*@ s;/)w5PlT!>k;h3o+]XKo*i{ʾȪ.ۋ Rzb |S(BL8H:b~xD_:ᵂc+Pk-0cz6Wޯ"l5~,9qA M :O ȳvlxbvGJ(DՓjKe01|A=&eT+̝/$~cXO ݺmi"Tn|g39bbƴi)fJ0C>&EFBtq=&Zψwb~I(.K:[4a wUG0&O\2Y޴/4p^ytÚ)jY(c`PO& Mq ,us@81Z=W!ٚc(D^2@}k~D䲑I٨œ (| @2Se6׼J̭,E +FYYҰvRYTgO?8j N#›< GWyzk݈{h{]h ]\\:^tVP`5 е3d[ZKAǝ4!fL0 E|s3 wgRS2(Kv,1$ ~HdаwG+6&A,54w]2JK.r86Vfڛ[T]-8x5POKک7g)E ϧa}p} )1r~1>5Uf;dYyrp!wTͿO+Hª{OըmeE8{屬_]X]w{?vhiq͒Rivtz?x;7s `׌PT &ӼpEKH8̄IE "J*Zg2 ݾ#j;[ntP)xN^C'bK <|o&>|&RQ홲P֒z>E]vF!ijI9UwS dAV` xϸҀc˕/*Lo%%ݨ!Wcyk SXmTBJ?GUج? 1D1,0H6Y6&Ȳ1瑃{-eqŒ5zr{eMVH(9 E8[̏_=Bh >/Ͽ#S;m Qyl/S`1Xp}̷"=d^Khбr߽8 ;XJ_%^[W:]`mF&*_a+ڰ&Y8Sa!m^ eF9"PwK~efh,0VAOoWsJ\ ;|W< (MTgPFwKJji `g2TV9dedY OyR|Eq@W&5(ueBIOEOuR25as.U2ex3cBc(DOhf -0)_#Qe 7ݾKfބ¹R,2v w}Fo"9Eq z2t=W@' dΉd_\ϕ]oV6 LE~;j<g+6`btΟb-ὼɚ:?Tz(R]pNn*-ޡ"ޢv 4sk</3ͻFg*Ƈ{gis. %ni{U:78wkdy;H1T?‡ @}Z|ʤh}tn/PTLߨ:5$)gfD,q}k&IH tg =8TڭF(Qe="6 +SNyL1Nn+;L~Mv7*E[F왐sі*T\X{ȤGy╈ph;T?6vO%%ܛW7޿GW;t-0눽G4i b4k~\rK J9AuW% 5Uڈ_lVLE\L {oP(&R[ћ\; И1Lݛtcy|{q b.hS ++'KCPALڪ8y[$MVʢKns,Ja/G-Ɲ.y2#m28fhnGj1Y|{ ipzLq BJ'< $-O5%kB>|bQ`c×ӗ.RKȥJXBGasi،>~"X-[/n:7qbH}w$Q8$w:>T$&Cu \Z*NÆ7Y<&f1a(n}9GJZ s{aT_wLw|W C\Ɋ.ؤu!ĈЕ%`Dav$-@S|Z7Yu+n 1}>ПK1r#O A2V9p!6Wd!jFRVvlMT&gTXQ45P_f)1m]PTU}*xQZW13}p\mG^wk(dkhN_yELrܛ ~ii2x5嬿k,#=aB$WWF;+, ;MM!JI3t%"SyݐI~+X!3"3CntDk2h50\5O/{Mp#c>E #Bq J&ʁ̂L $2HlV+`Dܔ+^AXMoh),=VftHdeR?ԓU+*{"Uzba2P?pbac4>;XKA6@F86/An˸;4|zFKr秺o%}IN[>Em2jsFƕ9 l_fbPy}6YAM kο_g!ll6]mcLty!kOeTF62]\x"iD2d??HErI`]8Tm rpL). 2tc%ZِH3tq1oe \Po#z]*{+Е~lŖ)yi?TsQq!+7{:z ,6Wٹqk^N= ?h* [_nL(ƶVyt8蟶m*ţHj+gԓw2ka88 ~VB?gFWƇ܀Gi(31-Qh;+_ "ce]r q]Sqp|1UgQ v\IOԥ"?uOKVhCMߒGEM c@ڟZaN @xMc-:fd0{mϕn! ^ C֐qDN^}2z?&[KWda4؂NV) d9 DyR.P]nl{F@V\fft D-|Ļ0¿ 0l`S#h68D"hC+)i~8-hBef{7 pd$I@VҽuX=} [.ќ>*;7a9-sQY(Tq{ ?0)0~6pN |*^ kŨ:^}1Kw;,/̌CQ<G>\RabaQcZFZ׾BKv&Ai_w P+@8q {|u5cǏH}:/PG)gUܤD@l8!IRkj^sd9tbb$WHO.)3/q;e6Dh/6kUA)rL1Wg39vOt8'ݜ[|iSsz@Yt!k:N5„8܄f"AXG]2,tּ#wkL2<#þu={"5Z1nMG[T0{'lK+Nd=d'YgȚhbEg)Z?*ya[#/MJYXcghhvWd nՅkX̩0A!iw+, ٧BȂAjBmytvn+l2~/^q6k}<'.u15GvMM<[8OجlpQ;4Sϟ.].nQֵ+z)[:?a [ܘ` C|+l4t,Xb]-be卶CͦCizzW뜻bq#>zl!j1ivT֏@CK:ӱY{ŒCFi/6>UJegxșq!r#IY@(pwzi_QU)W""yZ~fO>3>~#_cF%8Cwiv6Z8H^+]ZҢ_ }z8aڪDo>*<:) *7zz|k[,y{Z)cNp ?5[7,9pĵSee& @KjVЦsj *ң' mpe1`q-A}_ 8$BGnk󷇗pI ʤU|sOU?~\)Y_-N*Ce7ka3hr.E]ǫŕğXFQE1- *ltg6, YEU>qQZB}S {;#pLwϯُ+ V*W*y'5e ֹp3{Jm3,..큛4O7Ӊ:>'w*hY;(`i}Ft7k;K/"mD%v"T3ְZ|+C>[_!N'1o2ȩ@ K:2oаVI.LpHț*1.0$NC* 9eL{W2#V=rm|qkcP\N\ȉ~p*V/ض>fXׯ!@%5C3K$&iq~h< 0QwfaA nc.pEl+fiMK~<\+*fZmܼc]>N~5B ;IX.7gjӣQXq^A[E]H QoqTxX|8`'`3^kḨ}jk^ RZoZja2l5L^կq1UMgX20+BRޯB^\tni%})v^ ېItrLzOY^\G i9r2yRP{O2 yAfmݿ`Mo7:?bS,)Ɖ{~:9܅a G<{vׂUK D|RyvwLCm2/`%wmn w0|ң o4*7sXξ@-i UuF̷ޮԞl#Fޅt@IjG. q+ȫ-՗YmYK>q3Zfbe}>J\l9+ <=U_'x!M}HM,bTHrQS`="3 ۑf} v3ts6Z_: Q&8yZ6e몥_ t2khx^L9u@r^Y;D, #.z!?֚udozᓍm#7`%nM, u] Hhz]_[l s༘wS8gNu+ri|Kx=U`'+=CL*J](3 * dm`(~pn"M"2y,LxEָaC ha(X?~-SQ*X0>sOF^\5WM?Ydq~/wAZ#4#թ$vj6|= f< 4j_;uW,kĎ{vzm*5Hfck#9yCZ6!%BwaG?+8 nP|8LI ׬Z壁2YD9qGN 5S^\8e9V `˃ZP^K[mWϒo`y$Cx>~}Zs9@8 ${:-cqgbe*}5tV&nvD!t:i6u&iYw ݭKعIkӦZ^*tЇBG# В_UKaن64tjXkc勠N0y3ɖ:S FI9sv4z(t1P>d>8󴛱 8=wM쩔X?YTw1\p"lot?hXk-6qB:ݼb}DgKR)-aePȀI"/4m1cm"Z* BdoΨbMҐ,f&T ;7;o}a_Ay@GmAfmmGIhq V(wQlf SخI`%'e+%{c͈ SO,5Bwa8 O_lUE=)H8d.UIDe:& 0,4)0&DʣdSGęɦI.Y1 #0=g.MA$to%G<@oQўw0K[FvZ-4_0JBqoHӥ(]ƪ=CWcIo#.B MؗGD{媄ȊkF@94(]ޅZ8=<`G}LSu+)Z9CO yn; ;UaqQy+sU!gqcui)=B@} OhNVV; NwAc0$`?H &w;[ԹX L4&PCzR; O/} 빽{"$~kj[\xQe~K3rG2Qh iz%Hpz7a͊ԜM⡺Q3 mOC\a>vƇ E˼ǥP{ 4m>m"K޸]O.kJNl DB[900)ɰh3㭃4S h1X(gl͵Y]\jBJo|s*/.qnC!lW*^[ hr^$z7Pij (łF#gZ`AqCU:\C 82Hp' PWI%S^9af^ϋR#zU%<ֶ'[ Ql5M׺h6~LDgJDE[9<ߎ~|z\:bK"'"785Zt$%<3+B[rDn#9pr$/ JR)T|ϋ>/? Õxپi 85$L9ơGYľC!<[Z&=Ե1ZH xl]f%m=`u(YݎN_P".R?;u6LcIakПmQ-4ۢ^%MK%Y3A7Z^~ELov݃%[.vZMڱBQ)ZgmWFd8ӸD/@2N<$ON6'3ٔH{1./闃qNb)G#4|ZuDȸq!k;ïlwsk<`mwvܧD`]kЕCOڡW$.#4$H {bsK{ [SGD $ۀ;’ .|1~ݛ85mB/MVFן 3CZ33]}\@z޸7ƞ"j,7@Ff9N"5D}i\hzxWQT SSs]47(sdAP^'5q JTAQ~\ =^ܲjC1#i7i6!g8Sx|r).t.K\T;)*xh|1YUGD҆3xVOf~3E%*+ +xpɓ%i|0o9l8yDskw E橴p o5>G.[ohG-K9ojXڢVv #`P Bz j3")Ý|fszLu@Jerõ9ߚ%r &H`SQ\5}Ax`s.$B4<R(QDŽkZYqf9s5VF\V, aӭ>3A8l߫08IlĿ˚MWHLOMGvJ* K_љOlG*wvEG$}<YhJ-dtW߮[(MM'XsJAi2LNteN2s*(H@r \ȼ0Du;L<[\"d9Y2s3930'G,'f; [!|1Arᣭp҉Jޖ¯ > ⱓB}s/Cޱ:ƋT>{[J3p]H_E)4 IxDC}F0>[Q*N} %Gz.ryhErǑTO`d8N K1T5~Fϸ'2l;w=kγyqdݶdA213k)p*#Nd7^āD0M&t<UPұ6"\dn}#2G94F)`ê4<ZyPJr`+0bv|ݚ<>TO5}qBvѯbnyCލDtgj$p5b)^רҒ b114 e@f[ KlYKyet%uP8E߀5`Jp>{5 UEtH޶(4hxHdkf_b.2pqsjM)6h}@3yϨu^?Cr Y]`M<*j*5Ht3N Bw?:Rb,pTߠӣ4TyM 2nID{nnID3MeUvc2|o4m!ѳ> ]pQZ|z+7/,7Zq,Y%wLV8ڥUЬ:rI4?DXJ/|d%^^:r$X]ա*.쓊,ۇ BTdx0waQɪ - ӎ!XD %C: tc&t92Fɔ'aerM9!rA>zq=bÔE^>#b˱>~meo)=?3J|urjaO#L"1yFHyI6_nw3]n&^!egr-kt`L«G=׵r:m@FW/Qf(_fXNV*Ҵd:N`薁u "h_4yF><"<ƙLHc6~^? stND'b3dQWc5Zo#G /94A-̭a#&U@-,T Ḥ"@œ{\*'[Ac6z"C zW^W+%N-tS }%z- QSؒQ,izT6&&lSר Nd)zspLx={ MҙJ5Ḑ6J pݲ}K*r*,> *'fb"!f+\k${*|ƂZA/wc #܂>.0! >#,pnJ#0t#^pV?0X BW>1erEeV+wFY6A_ksJR_:DzkGh0-KddMGeU'jx'}CpS>o̾Yi?YGQ ⲯ`| SW?Y9m;W"UpJP<7dNrV[L:dDyB9S?OkY-/8n - ~DP8Yz!-S14ya&tPkTJ ڠad1Gz+/oG|v 8驶>Xv]u,Z(e*].D8V8x1rW0 `^OD=-|̧g=Ņ񲎨{TݟW$ 1RTU8(5on7ۄ5<کjyP"O2cӂAY^_r9Զ8͊(b-Ni5[8pdf k[!фteps?Zp+ C62 .vעbgrz̅- `ӷ^J|]ZTJ@K:0Q{C7;Ƌ'!;5z\\Lm6!{4 Z5>GR}6YL_ԟC̨_*M ;c$lU}/'d lman?ݼF,b?+c/'˗7C^E&V4(Ifq=YW?V2 0.UN=LB1^&VgP NOJOFB=+%Q 8llNks0r{DV(=_q0&EUJ:eS>TB=֓HX lKmKJ(-z񔛢 mt$,v_! ڴ^}|^dgHr Qf7s3sS唕Jj!5dlɼla޸^'ƦB1y%Mh9ry2tL~7v_!*Ww 6K7xMInBt{ Dî?(9C0d=ߛ9zp.X&\QEcj29f}whŐ,LFQ*{J$R Z+ س,e7)+˜<*KHIHF8.g!?3sa*5vW~;`q&E*rL΅O"F[wy$lZqd!Px"kXG,L'9C'p\ q?$E=:slE+; J*`m٧ dWU1eƖ #~5K yr^@}4 j݈TbVih .͠Qb&XeGXD2)y/N(䭧b7kfϒYCV_nHmœV;E/ƿt?V?Nh>:X9, }cxm>FBlmetQn{}5K=]`iJw7GBY< ksy'ƿ],g#?Y5ո-”eTw:(ܷhmZnې'sxDQx0>!?~+J^ItaAaSH:0NqW\MkX& 0 K3|(bBc0K5&R'BZ~˔Lm!z3F,呷Y|{x=SC /kQY <@4wP*#YYх;5%rk&Z|{E2ZѝIp>D N>~rIX9}Mwh{*qg"P- h&@%jY)g#'c~ 8-m?ڋ} :ZM0ژPدhϿa&iqDjǖj)Izrr%u +;hF1vB䰴WB-p~ѹXu[{g %UVNqo)]^v~H=”|L9&d1HM6apx4Z EE-?e?[TdwSaReB,tkcC|Gx=/QKآ ,T_(>WH0k#.[3f *>,K7]'3&H3SJ1)!ٌdCx+G<;FV $\uλxqsL)ǩ KvrlkUҊSUݓ׫Eq_{ִ*e~wnUn-6+й&a"syؼ,x1KhnWB@M?3l9p-&0|՝Ӟ%rOGV XW@h3/bQX-2‚w&SekS.c{xV""qŀc [A 'WE3Tޔ<պ m:ƶ[cqn<;A;ۯb$g7!W5HF_\r^Ozzg3k| ZV< &Г yIi@xhZjE7MnJ?/8f8{a?,W eNEtGb@q~@ۓY&|cg23CK& sT$UBZ{r[D ̂MgCNk.Eewm]r/٩cjBK:H@ x[xRL\Ce h\X#-/%vYu젞683;L7SfyvTn}% j)\7p?Û,Ȍ?/zpp#$5-E2wSz~Ҽ[Ľ$[)J|oV eUgv\(2Տ"vujtQŜ@Ƣz#VF\zK(_n$/~ͦ6,b5/<, j!veYRpw`r^-V7 =$Z%!'ކ{ k":͍Fw4`l5ܗTyhS2Ԋs."k?1oܷ]6yaeIF:ͅ .2l5hEB^In||p琉}50wh9$c $C)gт(G^k¤zV7_*κ{}Nӆ[gc8AGk[`1!ۆ_PVe,RtNF=GktrO;t0>VU5) #?(yn,ÌLw͠\p0@ gd_S<-ιJ1&2HEٝace5p HJy[<& e_ߧ՞/; rV9kvt}ViVc]YK$aRT`Ki*:-b7v"wȦ&<`T,--v EfI؏",q0bG7hjkVʊSG:Ε*U7F7 de$;dTǐxRٔ72y.<_ Ba<P:گzg~` SssχϾ{ ]d׏\y]tDn/9n)exKV*D;_}dcI=/7<ş];M y^8wF(j (6M~N&XǤ#EF']#3غ"P~ R"׭CaZ<2%|5KxLM NDx"udV͓ĚqFA#I 2i^!4hYZGDXΧ?CM":kMv_ו׼uVwQ>JU?x8N/: ȺXj∿h0$Y) #edC냛 t _LHHhgH$S%Om<Н XOP! WJrXA,CE4H"G DWAWInBރ1o^D؜tKXX?*lkр#K=.ZɺZ|'Nyrd J]}]s1^x~?"RQ[h2U _ {DB0I}rCs1QV]ĵ%3mDS q/ <c,mlJ%&ʼ<@"xuD({SPxI 3D"M@@UҐhlS>oE2!%S_57 N㱫;r:V A[qHhyf CbKC2_B~:~D/VIL e;3Q[XknaW֑]@My `5MvbM+}]tL?H4ߕ eq}neHFfL3je×T, ("H\1 n47ʻ3"ټG^"3骏 ?`?|JNlo3$8uϭթn~ O(S dZQ]lBR3(=nVJ\9 h`Kc<[j>_R!cpZ7]Ur/a!zQU.:GheUJνg1U:na4&SA9 E.gR\*\%GTm镞}Z&2?{SG_52oM$GjԊ#M5/LfxZiӜ) =M:/#܀jB 73&>loeԛsM֚ \5^x)*Xanh0LBV! CG6bdu;lo SЄr;wP؋ҥ&.K&埘hx+;D.:Fxi6j|֤V?AKxPhםDڜ/UG}'-xՠ^r•傸jXndA †qY7=x>q*v׻`OqT$Qlj'5bDw&t:G {y$-1&-%<[mĻ#n/Զw.Stb޿u9=ʠ/ 6pD&Ó[<,TbTbADP?(i۬ xQ쉓c9c6Z>&O,%V}@ g<?ۇʁ2Q,+írIHt*ABiڌEcQU&؄4b*FRrn;E[r3㴤%IsP7hLQyko"v+dG\ 2j$wmEIꦋNJؼND8ny\@snf352wg4NDC?9ډft=rmy 0d4R$a+IÿCFDD|W ҴKcPh|J7Nif6vγo`\Mq<[i==6) &veّ ,ơSlЙ4aJK/S I9&f-!uŃg>;v('PQM=8.t@ A wkQh~ +W``Ul#<rF֭MVpzJnⷾemyUw?zG_4NӜI*nјwLG HelC[ۢ["nf|N+*!πk7:=3/pGYb| Hbz{PL jz9]BHЫmj{JP-Dـ.toPkF"MHqqױs߂xPrEC 4X,UfeYDAXzejQ_ҿ8ruIߒyXj&zEV1ÜD*,[Er^#C.&CtxjkzA|!dhWV=+E2Òv" {$ Ww401f"$ueW\ذ?.˻/+w }w͟H &mE-Rmᩂ2s15ZRZs9`*CpAks<^W)ݪ7nFޏw9z*=riL765]׽-uErc "pHS<.pn$1tI|z]YN Cv-|ET  5W\>3(Fn Ãղ3tORe騍Zڙ.s:ڜXFgF7k]H 0y:ΦQ?p' =(A(Ym)X48CoVߗ!yX# CדU~J|!'SexLuFU<: s0IЪFizPA>Ϊ92m7M eƆ+[oGZd-BW`]lUbg +58WQGGKvاX?7@K-m{Ð# `YJ\6VӺk60!c %tѓ֍ ~My [|JM''羄=gأ?!+.(k'EдCBLHM\ou& 5u„h".F ̠p3.t[mA/_q!ڲ X:0jQ3JxcXϷ(ɲ&=[DKl4$Ƀ&u R<׊( ߮6.S-gssiit'tҵ(lIFT|o֛:YNiCaq{v<\I፥#dʻhad`SŠe6f<&[d`c9*ޛO:q7>9y[8pO'&&BVYS{O ˥QX3Q-!:mɧD<#%tE:Rή찾ё0vLj_Т;v, #b_ Kb2zNP""r;k\,"["_aQLdEQِڋ@4ɜs?{huZN͈G#zG1n6`Gٻ[xͪ{J=oLģ&$V .-0 J6Od[GMod~ (f(#uxC[yhHek{?4;? =Ye3_VXste3=_GGsR[G>8+m{nmia^3:i`8(?ݡ?F @sٺ4a6r1d`\7nY~GxK=0PMfY/GbsA1Ֆt5NA2g;}šs,WJJI+۸qBVK>Yø+GyǪ6#}#wCRai _Suf|N+ve^")Uon`?tk$f u9?O3хr<Ӧȋi w7BL6%:?Ōe騸*pLl \WYv o͘O8޲I1η~{1[2&ӊڍem%i(aymڥMc Zٱ `6A][؞‘iTN@Jyu =W_?̃,_׫eLEs .kW =FY]ZFޱ@_iǿvdi.DZ a7: CGY1 Fu,U'}ٻSꢍ1jrxBm9'yuvSC*ŘUeBP14H󖸅ӲzXoS -?ly6IT6'{-PSX2\oVTeȫY+PM`B~d ?_qlL&7 \.M*}t0l?rj P(mLA0j~2u!Po"]ʸRXf45* oT%Z4ꀈk4d}4@1vpZKU;y K_i$fl eħR\><6 800|&ϺS'S5T3y,a7\;uMC\uK$f 0j쭐*Ӿ졒dy)r}ZZcO/%^t>+8mŸR[s[⹿ i\ ;G^IoOW'3rTF_$vA_O=o8ݾKN[ϑՏx%&g`@A~/v+0߇CPѻ2.7c?u~C`ՄTgMڙD:}S@9-#k~˂FrSx&AʽK>wPvJxѥ>q2;? )dr%,Fiv(*j޹D8S3 e NvwYMDbJKknR@;VYFVMP#Y 94,W!T~v{CwJ&ۡKmʝ! sq?Z> ȬS0}jb92;QAh硋Y'e:QnO}+mB`La6*iH)$q[Voh9u6JnPJB+ !Ȯc&? 6]}q$:א[ҰՌD l.Wɶ:)9 iD)T͔q' d}λ\ r o6F b w||8g8XPI܈R'e8uJHʷpc c`7 y*2!ť2>@MO7Ѕˆr0o~VE_ψ0ɀul9*-|&V^z|5M] )笹 jdMxHL>#J+hÎr@KM2pAG Vμ 2L$Zl8fg(&>$OR@,6zKȋp3|5wM=8\@%\>XV~RPyAEcݩe$qko*=7K.ȾVp%':ٜ4@AR8j /UMxG;wm徑QYS j0R%B׏{ T?;3#D$g#FH_0lK^2#)vm8.H<䞊ANIdbniZ] ;tn <u?j~g6xCTH8({Y0F8xc¤C YږoH]Se3d7}9tM֯dlM Kk` 2'-~?&X}ZyP@ۧ6O &R BSnDž¯P $,?y0۫kbd:}ys$-n. T%& S1om R+✐pr$58P`J s{^f3%|w^tlfJSBjL|jEpxQM\Lj|ͥ'6Z_Dt|p* }vث=M 6.?4Y-Eb*$LkisT@wQnp-c,N_LJOPJdj'WET`#_L>%7Y5Mk %RWR =i#zK7PgYz@lR#A)qoHm/#8dY`@G^{=Q/u-..]ң7( H~N51}I]N"4Ә:8ij)E8CI=CDɄ*}A>rl">-o5 UJmv7dDXb,,׭`yW{փy|%>Vm ׬ԴSG2 xsA t.&->$aee-s .k|Y|mp6|^7jc1V9!2%pQ6d("l b,wYʦtֲo̾s`t7%"96{'Zg#-u] 4H "Q\N%#Ka)vJ򛜣>yN`˯Z>1}+]Ay5q+ud^o3L!ZmBˡ[FAyjcqEY|uiөWשm^ddWU/ lXцT N*ʋg^oekA.@m F\jV4"KDk=8vF(W]H/檯mWke,?X_}ŞTKx S+ebtSX1)Ph0R% xI, S=U|b4+J{VNaV94VPoM~kb0ս7ԮmߜN3󏮻XuoE\5_׷^Xyx}Ҟl|44>S:CL9bhUk:?T`ty\D0uypC"VveBsWF8#OP #V2 \={{+$avڟضx^#k4#։WV:n2U_][Nj..##kEQQ2(8s_e$dETe/֤`r:d0](-ƴ2к|НlvI.m_$ hL1Ik9ȷB˳73~qx^)S hnj̼![!>UYԳmu \*@ľ'`J(8UE9~R'j~}H!1p\cH\sogc*#p_ x HdUK{$1]E&@WETle%7WQ ՃmgdaY6܉R\(`xw7V!O]>i8s e97`aAcT#b8u.& rc1@ޟCaԅx<UHyPҷHg<#|i{􊰏wxڏ#1ZCt337wV#^xӨ)?hl K!T"XJ&zۀw4Wx$bKD꺾a@ Z\+EEZQ̎ ]Hi&tr_¿`}3; !3K |#&\RLŽ1O]FBz\u5@ERQ>Gkqen6 9-8\qx#֛Ru{{g$Wx"T3sP`vqCh"bl wr Jz*GPNN"UL{/R* -F)U.F[]Φ% I{ji"$.N=2΅.*a+ch;UDv t ש/2qUN(.^iR*)N4'MT#$0}ZsY)WGԏ DGYLUN%tSjPwaJ1Ȅq =nZ)6ya+闇̃|*KKUj_RtUO_^.aa"9.MjZꙜ`w9)XP``}kkp9&¡,Ք5qdQ[kUņa&Zx70 h4̕>BG?ܠ+&h|DES薪|L|q&e`9<t[5zs ǯd=K׍?/&/h2Q~~~J/DΦ%A":u^zlr%>eU#b/Г#$sIMpS?:)w\M& ݣN+,u`yRݻeY*A Rb j͞t"ꜷ%uR-G{,fD^f]#fB`Tsl>+1.sڛ:Na$YM4- {>:~S_m>j}'<2Q F#]R1|.Z(%jDuGo78`}wP!~A=Fo-~Q1<9$_0xiWd{-"]k ]5;iLy:(Vm3b;n"ⷻN ц7v"TdK14ݾ<I^{pt0[(&(ݿDS+;BOͨd(bQXgxCIPCTF/%E}?@p~{͕z_NjpEN?j\@`ܠ}A.Tu% @8q @L)1(s#GxzB%0g''T0EՊU~(}nȥ  X-ݹ( .əy v>A&n.(; xoy> H[Lm?嬄d86-]sa"dJM߳_QA=V o Q6roI_/%O~8ɻ.#g+;%QLbf f[}^7&c\| 2j e]YHoe-8:UVwELL 燸rїn|V6F5{nj?z8n}T:"+oNuaK1q&=,~Dhц N8O7 lߍ)65U{8l͛4A-Kob52;#`'CϞYPRN,r;> ͺ #pC]''|`9vGJdeF2J~rɩ+_l@qPJiBJ?n,"an\$1~F20/T CBlղWrNFb#aF0/쳒ϱ~5O -Kn U/v&Vhh <Ґ 6BN(_2x9b J)/W4<qy`bޅPYjS\l[seɆ}٫s@K~0%0Z~a7[ƯaKn,:l)YVhho Ӿ Ek3l2c4&w [h 443pl@CN*7O&XՅY%f+)dEo1G.;p&׫AGW&^Y3['twx})U8^{U{:lk .W)SsQ*f:>$ $ A9S_Q3Q;:̂4-7cDg- $ )z<^$i ̥QuFE ^H#uF]ph i}Щ' 3_>L4qհԝQkum1aĥ5i[],;O>R!2)/prw?fSpxxy-RCj9ɘX rQM>K%<"ٺ=GP/߻' aA&2v.>(D/=AAP}lOoDsۏ%'u:FŞ'1BpAŽ4vaAnX좹O8 '{&WMoaz[5f,i{ |N'S.#2E_i>Hݡ d.?) XO't󎐽1/t&A9Й`B#Cx@% VIe^y'EL^7r? ZV=k$uTE&#aR6u"|lWPIQOWAW=e^M;`{0.2ôwޟWW?TN>( H`ubzg6o C}-3ӫdLĀcB.b~+VmdAzi p-sh}ձĄrðya}\o`(/^kr!a#c[;[{F|g}D2|ՇFĶ-Ksf^:C,-+e-8yJa'dnB*—.UK%,}FW!\1?x[7 lF͏1|Dnu|DdB~}IImL&twƓ5I1hʼn:s=F<::Id3xbu13izwpj5ӝWZߧGDK`_ V 'v*ڕn?o..Ae5 =v G|xY0‰53ul22`cۦ5ת[WCO,’a2=1h%e(Ál+"`+?lDŽ:}4<(BwP,jϟow@W| .0  lΧ^ /kGg");hHuJ2"u !X}+ޑpo&W(a-Mr! a'}u+xRBcs)\wqÁ=^^9Ur#(u0E`7%M5Rs-5I䥩RQ<8T+9^ZM5\Ĵ!n7~\;.Kg-{{J<nGF?BU1Ҩq̉7et۞_fA+T  },b^[Zqʷ%E!#\l5lv |AB 1Uitt2̙ڤXh ' z/j]wi2//[/ѮFtX1ƉRe$bP^Pv}rO^kd&~5pBfxM~,;n$YyZULޮW#{u+P9i>OP5?=/fw}~)n͌D1byT%R1_eqp]a&&[ȧ(/V_ ҉V Un梮 n?T(LSodƉL4}ɴX<Ɩj!$u(`.%規P(ᅷmGmzʏ$)Ķ}$gy8;[>?]^YEz\F)d]!ɣ*^2~keFScqi  >O9/R/gdd{eض2(DItxDD%8,݈!yZ_1 Pi!`D"2 4TX`i 75^KvW72~M ~}{lMF̆ܦصX+ Ш뵴zWT}" 3Bdwn ̇2:4VFhXum'+j5wz1sKy`2Ǿ%I5\![Yu]bп8V y`S+1O 0%\xrډTgm 7Q%EYOnSoŀ6u rQ*vw K'FSOQG&/6tX^d㒻,I KԾh] BӘm49\Q?NZ .گ%_6xD+t'}1uhQkȅ@ Ҝ8wWf'㰎C;@M>i9׬W+qa8f^j6¬g=v fP?Cjxr"_OðN ր"*ZJµe*f1s dS٥ $*̦.9]*+37bU޾RPd%SuXk<#Dždc]"Hbq+w}BUmzPDC8T—Ly4kFr<\Ņ͓{´S,l?Kd@@(71P/3@{vv}3a`.nX0q0B}h4N9Pc~~0`|uYK,i%FUǪS =RidK-a^L#i/; 2Zi{8mO5LqYOıX+mFC^V[.~F|MktIshWSEI{XbtuH+j %$VJA>īIyӡȼOXThy~ҙmV8/{d NZӦAVAoYN*?##.B,>֑ f4^Ip>ZSBQ˟Ax0Gͥ®DpًH&H`3؀5X= 5c8*ZI !,\H3ȄEr,WKdT(He[7ŵ.LHḙ7KVo &t' BlWhuߧ/"gj!ço~]mdܦ~=>8eV>ñ !LFt@FxR|h G{` ߰ͱ+s/mp0Dxta+.V.]{;&%3XڎP_PJ`u!P=+SR4#[܃mrᕠsc 2E2N{ӪA`{:Xh}L1Uw=Ψ9L4T.榀#,H H WpڋY.[Y'=C\¿Vv}8Ek;L +"Y+HC̘>@U} ^Lb;I*Zz"AYNmY6 ,*ߏ7Pg_4`f} ֿT`> 9p)wHQ0 Ğ"\QZ8KqQ2%#F/m1<+.]x"['JXq׵!*` i[uL@CT!6\Kk ]|]E5FX׺bPDlJ*.Y$p%dQ' Z~t+3 8f%C Hv>zdxBC IҦcyPFOzx!DCuNZ0T !'P TFZ$ :;ىۦU((EXei2 fmHst|}& 93Ɲ5"ԏx՝c:|O"3nj5nZ-V/$蓏#BEb4Ɛ#kչ`N!b[ӽz9JDKc4(n RNGڹX 9R3"by3.Ӯ?#{l8E_ޭ 8>Nvn* [6/F}?SܩUn }9F$Q*S?g/aI>%! Z i˖G җe/kОP]^QHta.v[XqH4Sp1\R25E&Tظ}.OBP`m0 Gt vSUzz& ޭ|VꗗEl3h%L6z3MInVQ+g~A3^OrM`Iϵ] p*koGvU'H>@a  &A~__,%Zx7I7 bBw)'7GB*йdX뚦Q)Jbmuc1ۍ6e r"QނK81D>  ElA? άUx-ğ: d],][ʄ2SW91Ksi*AQ[^&l=ϐ\3Օ/M2KRqbBdH:l/ ǭg:( 9#6וf_vщ'u[0-O#jC r1pwoon]`N#"Y ͺJ/u5hV-#D``y/.:V|Zݺrh5pb=Fy]D yi<ْآ yEAYHCU=M*91k/B uv;%n{;Uu_e2`nx"]b_QZ:.g? ,}Y}H5VoCCEQ('2)Ѱ˓;Rrg*_?L#Ǐ0I@ 5ߖ55bدyp!Ȅľ5 ?@Pa#cUdeH> Rp_n[Q䫋xu;$,. vl±> j]nRt->aѓf{~w.Sju|S㹥qxyp3@lvSΆ%j܂wjU8 B+^ZܺRF@`l.J])-97G kRqn€@tP?8 OΈ-6d&h{tp4|-&gd, qJ/F%\f"79Eq ];#][lt $Iboѐ7Z6;YB _!An>&R ft3?n;EIkBlցTkbViS''hl]['i%gl-ς"ϥS{#CnƆS epo3+-: ;Z <'_~_zdیʣ>_ 562WS>x jG gvWϽSD5,x%^Zr-f|& JG-T຤Q}Ø(uExrD$vdN$Q^Uoʆ{5eAn}Y +\{L?R2FAʻkGqb52~3iKҧQǚ15?bWVx/J֋It 2MDeQ16}t׀+ Ob_kpKhS>Z g+YOɩɣ&/ISb45ZC鑵!ű]aP,Flku?? 9Ź ץ+q/bJןoV80xoz(m LMem%YO?AG=%Uq^޺;~Q,~6fϊH 3ZF7꼔?vlC1HM=_Š/5춸!g䝕@b\A'5֯H U&yi $$ }2NnIi/s8Tf=t%6H@ћxӢ-!d}=d`)%0+'}J<9*c7WDŽ -h@_ɛ@u慁r=4-fSZz1 %a`G)=1pAp<kʋ*7g@nYauHbfY1yElf*nuTG5YczzB}Xg2 eר e)޿8}غgx+<;q7:]e{nK/iԈ1>Y4s'C'jogwRԩ|B+a<|1阊EI81V?"aMT|RF§Pٙ}Ll.źwNacw}#ݝc `16PbbKa]0q$Oan$gl9E<s" o)g bC# EsTۂaDqȻ˲Γk(A^qRjmM);Yf7Q 'e~:mGLf\) ` ˍSG)D@]$tx*$u|^_ Ѕ}c v5 wNgTcF*uL%i <Tgi4SP67PGՆhvŠ1שXL֭p946n46佁I0vc*9ݐ)%ZK O }C":Aa㿜2?AF4^|:,!F,o"lg,XtM.t*]kFRw5>PwӲee(tOHiuBOZ\\(ʑ!fx: 0鴛49ȓִGf$;Zg[7܄)2ߜ/EAU:$IUB r8^^SU{L׭qͰ`_REؖڏ < 7շ7+]J9C50LD٪(kiU3񀄖/ 2$&&O~TbX^^$ *CVdz CitMHT` 0EiK"Afgoj/٣a.ۀ,=kLI*Zƞt ꉪh^KfF:`..}ay`^'FCBvAs~L$ѠCbk)K}g~aU g#7t8zcPwZnнYc%eq'AjM[Y^OS~a3K6;p<7 _$@2 hʊٶ6O D r iPW s8B=2['HykںӂREs/f."И ) P.߉7b9(C8#.F*9$ ri|dU~`:X^`3qeL4?.eH N?,ȋdmRr&Ix?qe!Ox!Fm a[?0=kb@o  Cdc"/d(fe䞵DYz1Hw*?G}璒3dê"~ԂxʔjCzG|TA>[h23LUX,9Q$YsyL>G-d1q,ceQjQp7KҨrT#1Cٻ4"DS^{=['`\NO&M @S׬S|@;r_Ԓ!=)W٢&̢; -/n^8(oGqWP5hvŪ4% .]Eטk+ha7z\ N@l@l>и#bΕD00ll6XbXMvN-3Д7햔:4 δTyh^ʄT*yoʩ ‚"4i;-hqX-þeOуu(KJ.@s)aFU *7r{tL"<"Ë[I;<.L S9l}[ A9˅0 MHj1aGmd$˴̿}i+@8lI3pZ4햓*&PΦpÅR>љ7Ǭ[dm!K~! @\CH]MD >w$kNUqI -- -.G1_Ao>ܐHq3_\IxtZ"{b6>wc ' oj<Õ !D.^zy ;r~l SMd#O}ggTR32*滉V;k^Aa)ہ@ӆp)nzO5opOJ}<-g#^PLB2*9Hjwd@AlpyJg?Y@hA27|])sGIr-o%0{9o/]LJIu{$>Gʋn /])" RK$bA{EGr!d74M6BAM0z/(gX+Fb)ڇ嶒3O,zn ï6c\r)e1N>fuM DΨϳatH2xCߨ[ղj/vZhV,P̵N 1bY_;3XTcΨ!پYn=Y@z8}w:}zl-`jdƔ^w?+}iq.ϲMf= m4NCdzc'W}^> =: j"dUm.̽ FF [\ իs'6#C2ã-Ǽ߿1rL@ qjٰ+צq}a)|ҧRA+PP' !ڈdAPӏɱd@^A/<)m>gmi7n<Ŀ{kov@[l=YXTq> ed䤝wӽYwui=pALS;{:4 N*rE,"+(thD'%H'WtN~f6~!0-('$.z\z&$iW>^P&V`^xDB'\|f8@2&x/g7*҂&'B9)9 YLhQϔd$6,B._FK7ddAu>to|pg?*#ԫjCqKb5U3SϒyoB$A=k.Nʶ?.M~ n40кY`Vu?=L- ⫮, Eň&, ,SNF xwspNPQY;B`L Jjժ;uF M?%L(6uSkou1{tK6!e~:u I͎JjQtB[&XǏd"]v'uX<)T=+_=z j':ز)GMWrruD8s Ms-n98;BbuhG5)ddǑ&ސ&d1jU6`w/aCH}!s8@\B=7kAgyߙ w1}_Y:ʚ:/gjvn&=-rظ#oZ Q=bUCk..-ş9{;/! OP$ؒH1ܯDPqZIiF/mݯA\JcqK݉Aɢ^A-V7`ħT6xx_%@ޖ C _$׀s8"^TSy  24 Fmw*BB$;"nWrfyqtI%_?ZH杦^?ncqԋMi2Lkkӛp~Ŵ,Q% `h_J<\u+fnIo[RuU}MC櫌>>V+gGiN @-9('5#glAV? ܓvO g%cTVI{sC=aט*Tu{EeM_7,Esg.1KWC()!A?`n |KokP~(\7~ByA\'Pr*2t7>XV+rqtU+/_sao'㋺͘g@^68+V (4%⤯j31QϳΣ|nSO 基s.WH~l)k0sVr9MgH g͉]KKfQ ,sF- )WiP qCb&l=.W d5@`r=TF9Jw I})059DŰI v֘r@続c#?OrŘ߷ )Q5Q z=7 I s-V\X%k(T|:ƆF/YǢuyඃm-D_+!7—Fef+wK[T癣2P#Ť(ITDj뱰LdG)m^ȹ`1ֱ#߮ʊкv?҃.3jGYOAmhBdw%ȉ|yߎ#"X )e(S]ے]mkV2GwrwCT)H3fyC܊9A e`Ts2).?J‚xr{*X3 :pRG&DC icW׷:ǫC½-? Mdsiלn[m_43~ްј~b$6;^Ƭ5j+ʙ_MiS;>ہIJ D j"fd^i$Z2߼Ko 1f\^ji T= /?q<(i/GCVaa!\BzĞ3-787[`>7Š6{ |v,.1=*Z7+337 )šc`U:cdKLo\ _}"g5[oZvzjp(n֫_DuSHDW%$޹P64n=t(wKǠ(sY_g9l&5R«WY҄m=VK3 i(YsKtՇ>0IO!4Ů ~M%j' 8Dǃl9Y`Ӈ-=CK!&rj+RКVѪ|TOv gS # _¼~O%YW@klUps"E֟g VuHliıtq~?9G2kĉ7m5NeMѿ16Mc8Lp0f"yCr*xMkC rn,˹Edܤ[v .~5 X?b6OA)e慐7iYlgU/֙.s!z=< aݢua?X"3Di`g+y12ʻV;%6bXtȧ9g40IצsfE\c1)>fF? GR8Q7hh˭8Ib::i:aDSnԅ(dۗJP]zoIMf知Xpnf e(9CMH~ l5C/sX˒O?Is4{]m t %!&nnM r.hT.5z oN^&tAZVܧb"[*~%b]t0:mOSJlD/OWԳ >+9YBBwɌ?Bv"R7j^\c>]Mv2%kjjFAr& ~{!!>HgǏB#a%J؈vǖķuT N$ r.!Nd8u-0Ђ5gZl*"o< '$=Tˮn4hv7 SEҗ&x0R!fl'dEmzz 4Oh,E%MR_2pnHfi(Q]Qx~e(ɻ3xdt/}.> B_8uHTx?{%iv?F[#ssVofgXM͙!Q\_#-! lW%[/subZ*l@o&p D64D@mkdgRcIhMj2Wu;uc\^& 8 %At2+VqR2V.vC^(@);3v#czrHljcD&qUD`< WoLoA0˷tG7B,U_-•^4eZFa cOd=s+ǻBG ƯA]UZSL{?X/2ɠn]jrqRܼ weSJꭙ&EĂ$ WSBΚ *+ՋEH?[1`Yr32阋^k+a}EyLc=VNe&B0bcPC$Y+* {2q"><;M@ӹ^miF"IN~a 9"=Y5AS;&-F)\.1 LCq|Uf3J:6m ٴLc""Xн$byئ--)D;-o:zU,77L;LJڢ6/M)'p|k^" I݄N]Ei?A F,DƋ'*\RήV?4khp_ f.HS- <9dp)SIA+/t%?1uMa|7i"h~,۪#4lj21YPJ5U2K!g =Bl.tRD b`UĦЁy?zMdtmV x[psJI(0Q^`t³%|0eYXъc ,vV6/G53c%L@1."$=ܟ~G#ßYJR72DryBh rկC(d,}jrQpM]/1tȣ(aәVz?d,8<ưV3 Wjzު:K^`&ŵ,! V$;t c˙/8i%!wթ)x~/c}OF:H"ϱXvܡ#tQIz>%:n7O֧O֡*J2%CR^QJTY P&SՎe0gVmoU(jgoq + bޕq{T>\pq6g%iVY[ G̔;x=~zbUj %PA/wKVuQ^n" 2f̴FM arP{%;c(XhڐB#f;NQ_$uyW}2RHbgq:KmGMvHe*2YIWK?.n#g~@I H$(qJ\:Dn#H. E,4dtpfQ[$w 2/ l'Տ[ĆԘ_"Pb]Gʅ/X8sQ57bjĥv[RA2(Bk7>x6D Ҧ h٫Lyua[9u=/Y=˥ 5p^eڴЛ~ڠ.*]R-tO w -[zW f9]R9ͣ]sbٴ IFI!ԚQ6]VXI<eٚKwVJZ/befN‰D(}?R/YPqHW~zt,%mBîF;iI9QDYsHn$ A >Uzia /1TS 1- ˬ=t O>ם)Čgdf&Z&Z,v_hZRCD%*p8Vp϶_SdRH^"tAaӆ ?Ή {De(EOf?U'8&MNĸa&TM^8dynyƌ wHjYOȃ5ƍǑBE劘M963fU9#S~7 j4`SyA7=K i M ݮE@Έu+',ٻ#^&>GQ>%yQMbkz7چ]u߻`q .T9o Ҫ;74\i!$'g foCȇ 'd^Xd& zV]8 {i(rP1y]ru!ǵ+F)3tmV;B \N u0lzx牽I#Lk757gBdF+m lt,?!Ax.ss5dZrP퉣>AGmp  F@1l\D&/)cưDoFm #j֎x=̨ ͒ S.F^;d@Iy!GD靃a|Tks~EOa%_:Lχ[a-3=#Ә*յ $?9lV+vj鎫ШE$?6U$kOޑj,1əgs-}'7굵SRqOa9l[˟8Ќz4WtL}ǞUqs(\ qix1hMU3io;˲N-o_~>Fj`fb-w!- 3Pq+γH=1ƞ3i*:r "{d`DFT6 ڸ P8Y|$VZFn "i=~yCS< X5\%a( ԰POŧbAk0w[MS^,PdPpYEhm,2zD X-%ɾ]"E(ݍk%wD\ <-O ZcXG!2Gegy j+$kc~vm*T#k`ϳjBǐwX6([KN'N}vʹWϾJ4'B`(~d@Ռ[t\7:|v3Ty+xhGWkȨ'.~ YlZO"Ztj,GO3׊c x;z:5Ap[6{ł8/=/Y7X, vOadB'P{(!/fth{`ξT%U\>&4JVW:.v\d-._: na*YnzKlL @4Oߒ ffq|fPe!M"4]SXP [ljX 3m^HXYn ߍjF]KKE_lHPv`hB)̖^Q uQ!Ņc9_Mf nWH'9ylc޼ARnŲ )UȷZ'kGPfOddɥ@F_G^VCaE*a:!ņ,O2AɲZRXC:wDiK-8E"Jk*&>?XS?偉k^m wߠtEBɢ[̭#P6u/ DxJy; E B65z ^>IƔ/-1`hgf#[ JcaQ)[) YLS3+r7иj֭ḽj8RViLډK\^ޑ2Mw]<tm2>i=+Pia>.<7[e7T1lU|كyDG4!K(,^riُӻjjd =/ l[J Icl۔憄(Gh^/L c ZjzL\pr gW~J"V}*l,Li%m;"G_Ε.~gвJug#q_})LDF˜wlEdJRP>ҧ=\VEDŽ9 * ؑ9ڏfʰ; œе eƩ_!d(<dx ߺکUɼs-/HF{_D+O72dCkMd&fĦ,24 DzTRy\u uxY;tņFդ^2J )WP.,HЕp{%ww}JICﰝCl' RB@K쾈Snp؛=fknLw3٫/9" ?g ydϩ_D svb;|m]b2cRM{Hs8+zenX V2\*tJHMW] g웝!|r.=`PE T$_ZmIC]ܢgN}f;]vDKq8rуd`p҂MԤ{RBvT 4xMfOD6i眍0=w׋Y_Q3<Ȋr7=k+UgT̮n g1AE\ `e"bC'x"%h0̎A2wUt e7&̀mB[((rjRdX"BlauxUta ^rzgs`j㊩ZfG4G$^ehsO꯽5gan?j!HK`b\sAm5MĉOxv@1ALz KHE3"%!g56U@bx{SlõW ӠʿɪȹzNfEUU3"Mexf/;<] TDӄ8}׺Dgkr³}T^--.j}?DKψS.%'xlyA6txoHCR؝ݘ[!E}|x7َ)+BX8c%&3cOӧXY=y*A.E'E|U~dW4$!īql홖|S]Ot7S?-oA% 1^=dS}Q#x\%r=a{*/setmkWZW\<ۣZ4PpK$RȁJ X/A3cde;J!`r>xg-=27J9$=%!2zbb ad2 ei]'{\)i'ْ/u}]M)'ހ뒞6'Zqln3o^ћ3۔:WSas*s3n[ M[2Hd<:>mG=h?lj._A4D(KF5qk%\,l\E(YۄݮW~>N|SQ4\RSsDީPQ:`I(;H5oBS-%\ |Q?\YKW@czcAp{dvݎNxa/ =ycZ7<4&z[뚂nxQtjFG4Z .,t8w9 u6 t?Ny[XZ.(u"yW?iLKS*@GP7_=yQgB}Q"_ͺao,8hAU?(4p^W%unr<Ʊ4D+ ~ޛ}=Hƾ}"q,!_j9珶N˰;KhT=֪W4NL {&Ɩ;+쒁zBHr8~hP-aFܑ$ijkn~&uW̊^=Ly!_vZʦ$XZ~=i%p=[gS4h3< [пX/xC]yt5McߐyQd2zo'9| A%4Ŕ?_قέj9SRTӰG#5&ոR;m BpLB$ˈ@_:E-XtnߟՈ m< %1u"W *_oW@В֦Loъ3uX,LmƭiKe? {neQ(,+Ge]#RYMLj Kh=__ zi(ݧuwr:7/&Ak*엚$j] @NL-k0VX%=hw*!MH̜ +EK ʊG ^nXV%9WNY#=SbͽW vɕ7E(ny>n[o<ÁGJv{h< ·0Kǯ yѨ>CZ_j;cF UbnkIjzռ{β8E_  %]1ۭ)s-.㣟f-*E([5㵽2wùtI i3,QĶ̙u|޻#}JH^ڝ^l:ރY0"^!ob6`TbE?@Nq *j &g63#ɾa8tX{.N w^I~edn=7GeLu; #*c8DQ)b'雦CwYRY6%ao0*YR  Y9KRew_`D1rDy9.qBnyC^?T_@:KOo/nS(ӝh b-FOk#F`>3e> QAP^yͱW:+*un\jc[@&(c2(r@B6BěG=e1yZxyKt,M/F^Os](;igA6IjJ 6:5:D_%#rKP>BQ1=Gۆz8h~Vm:'!b$!*#xqgJH1>V޳Bnf!+_HN%lhE12!X&, 38V@wB1z"!dFmX"Xe e@ZO(r<ht&JJ=,œq&_7zmu, 6ؼw6Z19ʲRLNOܰnA]O?m -_OB TQsA^M͸]bܸx`i` QTX619e+췱w^{ny ߱SOee5܉$Ii9*uڡ5˸H/jQf7#S~OcovǕƞ8Xv$vF.I1EvsX^x^iaI230 ˠ zTsݻxB[~kh[Y3ؿS7VxWݖ짣6ȐSp$$ߥN?:>Ӛf[]nԹ>Lrl +l,n'e %q3 X w# zئ̙)vua W}䆂'=%O/Gf3OړU9dsJnv)?DTiX0Ērbґ5tDF8A6C[5#Xs55fʊb Y&kMl=do&̡D|߫WiqIȰEt2_M7x|eC_"'w8ݕk8'HXLk;Y >펨\諄Ki8|/vq̧s^>'W`fc7ڄkHM,!n#$jUns8c4$9~4Hx^vrni~ ߐ!7Bũ|?9nj5#Rc,_bt^(Ys)SU}~ @!K~ؼ'1=LxNGW> N;m+L鬗׿zo7 <{==26AJn8UTBS'K7-(ZE1jFov09t'HQ3qY4ywh]:i_1cIa:dA̟K%WyHt>n/8q̉eEA&O@8 HY+ 4\ !3>5:֞jHƔ _NjL.l\v'5h,+GԥX/lԌ` dS'>U0(1)39>+ &L{3)Uv1L56P!1z̀ >g3.o@O9X?MgZ􉫏-y Ji*,HX(m;]Kb8jGĺ1g_SѡhU&gXYI\'~'_EվdVm7n=K&)bDhz86|LLi91ɋ4u;ͣ4 =i(n:\|[2*z]ņ6?J5٦gtRJE򇋠B.>҉@6ŮG"LrE)A`e4cpx1_rMװgz,|,D@cRcO .S ֣gJNC7+Wg𜈗2JeϓK zȏɼbЉȒ]Rqg=jWK RRbݱyZlpfs"]t6~{Q_U%eXU0]fHGX *N(W`pU50M." ;1|4 k,\Ojp',9bαѣ<cqS$ >ZjvI=sXnߞ|ߏG7$82eE !nX7΢]+s(lQ8N}iBPAMf=B!I* ]EF5+jFCx8ҺaD ^/{/:86( d{Z*u%`ON=Z*9>͢l[%8,քC_:*u=Ƶ}2Mӯq5LE:"Ndug +iЙ5H#].k:k7ά_jv4jԣ>ݛ/S= lX7lh^ d*3?!/}T.z=&VZG?`APvi#HM}([IܲDYoAN‡j #JQPw5܅GY<'4xI{2(x+.B+S.r|P^hޭ 8mK;}=_@)B = z[ms=Fg٩1K,ځ1=L tpr4 PmYn%}Dzװ^d $2Sd| /L4{mh8a4\ny~i(?=epe;Ҙ>Z*t٨EAQ<$*U=ĩq`u;YzE+pV фTc~@ǃoĺ ɜ9 K>zovNWk&dpy8!%OtBuˆG=GG p0Fx yqY T녠GMY .׿t'C U5~r ;u~M;,NMDG@[3-"B9oRWIPُ:AZbP\.Q3奴:O"f/fM:;O{yr[ij"yD^Z!IgJ ZD #vuφiDEO HTL&ÔC}nur,Ho&G5PXhS7]d $eoEWyjfzd Cs 0j e׋h{~a$8Ȑ!ބ 'PL&KˢL,rBF ۍ w)%{2L(=!xX Ν]aNjX\v@BDp[<k[Yd=*k7䢢~2r`~Ҭ-cc^KXgՎG47GvT_x69 3dj]O}O~?oCTR~¡aX-T2}<\}s~IݶzE + .'t%TkiNASL?1$Ӷ9v\Qe RٷGMg lE|F%'D8ހ$O}y;JOA9[SQ'wxhIKɑSt1۠-12MT ;J"׵UmJ .@ѻg7Su OfB3dW=7ib?cS£o-!8kt/@64ZM{oخYBɓ׵S+/XΙ""'SjzRcf+߉$vޕՏ>hBE?`8EoXg{IG @ WۚQQsC*qeZOjwY *d2+! A"^7JPus(QCYze;X,Eů%p<^nXߨ?WѦrBeƖ[Fr}p^nEUK!gK\|p(E.#j Ux%*. $UG~)dު S=1ý qFS=,rN=ĂD=E 74>-݂GLRA|PbDQq0L#_uVQe,ҎB¿!=V2!B o?a^-@SLPma LH' OEѤ8ucial:m5\g`iviK9MzQ|/Ve[W,$'6ޭK2.RA-]RѲnU%ɯZ @k!kk7B9qOmP9MRfPOO}muZ=⮳U4?fjKu0,fpGͯustOឿ1$ r,4^Ro͎P?" 6.g;ǺY&lh'XK2tF+J͙ ~vBA#ot5O2UVY -1l:Z?%+OB3kw70J,b 4nUZ뼬|@ar$Ůr@1 _L+'NY(u04jG5qO:=)10 w}QТQ@Y1pȍ5CL khb3 D HSSU#F҆ӲP|ᆘYUDPb1wV Mm*~$P5;u7oO[|߰WGIEJQpLn(q9&__x?-2HK/ծ*"$\_C"=`e|PӺW.@\336{N7 IƜPڼf,*3#L! Q?cT8? 8rEЗZ)Z2!rMn=o[8J⽜&xZ]Ҵ)" Wq.rt[^js4T`> n2[LPPM@{D zGcA7'Zu8AQ$h"(H7GÛ-Bv QS(Rl}#e}ЄEE￝:B4uƵ#^7_$<=J:{krO9k8'NǜLDIy|k~iq}**ҙS=ƕ7 eA ?K{tGvPNAZBA ,DP-3G?6Cplu;iB^ # FoH$k@検32<wLys~2\( fȵZq0р2uLg x~[8c"HG75j KO8QYF nb52T%7 TRUhCI_= ҲdE䈱b;z> '6q!vƦT!u55Ի6,&A6Ӕۣr:_U#;$+%mY~MJZo=K{]erkH@PEY |ư1Eo{20-`amifI})<6bA6:^$OG僦jF=i=knFiy(5|7UT%Z|~I ]E Z_Aąa}4&Ukk_Tᵨ|V2ntIK)S|s'彲cQw)@I5o/Z2v[=^+]."O6t5%:ǐ㓪(KH|ט>J)E](d P3ewoڜ.Ppn2-x2l2ofEjqQ\@ms(? Z^St9DdV1Zk@(sIAlnx )E#(ަezB`ÙEF ;+<{Ȯ,Ftɩ엿ILb+F^V0}*>*{PK$#^/^(<ж^XV=wӪ)'$r`\OM1_`\V~O[Vɇl^1 vDk:׀RenW=AfmꔩŚr%5 \}U Wj-q2p_ D_fcc V9_E<@Tj׬pH"0ۤs=0͡V1 jW]v[e .Ʌ2˸pI^%NqX[41xx#f.i[SnFB's2qeJiX\?Z×2: N"ɾ9>-_b&L N[:C\tD3ܞJ/>\@q_wsM/a]%GwZZh82ȃ 2OdFW"MWC_S}NX,zP ceS/7Kk:>m,QihFN+ͶMmZX157.u f_+&Xڪr0>IoL`L E +hSQ"hOV|a KpBWTl(t{LEf^|8()oc)`6-2r9\;Ate[eN >Y/A!zy][b0h<SҶCW?ePPIΉɊ1Ɔn٭"sNm^t"e2K\sz`s-%m.vls+11\zW;$" lYSռyHږ)EuH/kEvÐv*J _#qӼUcuBQRaTKz~3lcұn1]i^Y2^"~T뤅EA$i.oD wXF@[p+h,RJ@(QCG;3/HC]/ܕE|Q%kӎ[Lɋ$CN` ֖t@}eK -z|){/ qQx,:ͱszZ3i~_2</ m V?m'BT'KC1 ;qt4N|ttXEnH1mm+"]9}boúB8j_WD%A@[%sQ >NTK@98ii,գ#@'A1: peuiT97P|i47n1KooZ X,{gpu.sHLJ^?Kj] BNIV< MA۷ у7-L7L;5ȷ)m(A&@-/zpZvԾl-c)a}lq[Ȭ횠%K]VPP빨4}0QO Ԟtl_ܭĀk&s#NEtdby]2W ܿt,q;Xu²!Foε%WTcfKf$:L^RtbKʕZe5Zo`yVvp칭[z{[j4ٻCB5h G>W9b]^8TeuUS!Qzьcұa,pcÓ96m'RGaۤ,S ;5k#{JOjVlH,8'YPuP lUdF5/&tu`3&TíO5Υ(o l̇4؀7K ^d5Be\|ݾ_Bqӵ"D:KrsJAỸ'hP')*+=qXұEy Kn2p:KÌzy4ݣAkN`{XUX?+!`v8…[a6SLj)VcbG5Oᔺ9K xCL\L($a $ @) Rӡ[fbR3DxЇ^ ~nS<$!:U"f MXwO_$bp0#.Ve\¡|>Fiiy˴"9εhx/?';[=&xtxȄcS[`nSy"]p;ʛ>GڌpeGn10aҊ/+B5ҬI{9SFNU>]9@,*JnNPx x4%y4ָh"Dhgo5ێqu4 r6FL!])]zR-%iUr1 (Fw, )gMI{Q &ĽnҪӣ(sUoBz:#ځ68n| =zl#&鞱vp`RcXa_EN!vlfjE6 cw@8T,lqU.bʤS60_=3 ω!gCVOjoD~%wO2a-pUbl-J_y"tPn GɭI]bF rv75:97jߐ'hz +);IuƑ󛺰2,dZ"rT0L:#Aw@ƌdIH;Sԏt#|/(gz|$LŎ"5 B59C?zL50>Heف DoLxRZܧӣ8<2,9Dy7zd=u]ޞ%G x/%xVǚΔ9=hI&u'PJ(.IQeB#0 @hrCPQK,Fo*/Y@;cg0%EqÁJ-ʏ2]?(ѿ"M>X-iLa@@cC{,vUi L*{x-Ƀ"FgȽ>w|$Zz EM$ BnUj*\6XKxfCu| ݧ'̵G/{-aD9PQBxAvag 5uPz&}dK N5kyE&$J wYm,ϝ)Nr DwoWL߿ n?;S4dxX ܋d.r{Q^'1Rn܁NW!9mk)U>tyvrtTF! R; j˴jfpVŹY{ɦ[5M_qB{8ë!@B!zIy'|΂Q-\X2!l<0ГFcdo3MgؗG<ߌԿ,a+tQ/ CyҰ&ׂ4jje`KȀh[^(Zc;Q=B:nfG}U/k-Id+0_|Qj_W:@#S4‰?z :D:i{֜L욷nOK,Pux$#3"!' tt8ff`h-өZsy^ H $aği]f5_LdT~ތ o/O m+}$k/`?z̵;oiDrSjb5ɫF㻏Lf<˛jDxníK.L uI.K: >Εŏ&4w63*(Ĝ)%L8Jo'KۧV%ᚺ(EU^ OUc[ O~1wϩV@6H/}voT9J! 4p4 gAUἔ}؊$_g\F-tJ&ecdEp 7|ҋC0&IJHeF)Ҵ['^$40RB6V($J ڿښx@{pm0r.l~wc|LW9L?pv @X p:?JQ|S'@MjY ʍDC{*BZ03).]z\,X}OeL$_TґLrn,N<{EibXfn V ˣzdQ2} LN`fA#d}amf2oc6lYvÌgVGU `B+pKmB@Ҧu=[3\P,b39GH t9 `<\'|:/{M#FdvBaRF>V܇O6Z㧾>eU[{څ,O\-d?|iK4X 1St>Ue,4 H0+B?DoN<ɴ5I'_E!L*2Ɂ<,XBIB#!Tc4UEw<h,b?I7[ozpyvבxys<2uDe!J;+@,q Iի0O ]PdwTK4|_j;;Ȩ HNᩣ wm"+y'w+cqJEҔFů*@4 B-Qρ(+|tOn_$dHMk0C)\SLEH!A OܵK*dJB$'im3+aՐ~Bg{: HZ`FE6XU19g㞀dI[v*s^0':ڡ)q9{N3Pr3Νc'cju,{c~X"9t_|ߡ2!u!NJ`e)zA5DDEm#tNy^MP.7Gso#yLٔpm3! <ǔfFJל[g6LpP' khX1+ǰ ^Yy{O`SFC(JvDp tsGzdH#dڽƾ+2po.:jd# [RIANQWFh}TuKMؤTXSyŚiQKO5}И@J"\`K|+YxS:نb'l&cJ%r13(q J 8O%}EF E*H KD^N0DK5Ti~šfsԝSxYFc@28j Ë㺯LҐ^Wה-]aY,ҫP񸝗&HO;\DLSTez6-Hn.\uölhT$H=&rl"kxn[_~&DaHk%骏9YIx,y5yc*3iW~@!:n"d2ғ&PmZܚ[-opZic՜^SKՎ` cJFAӨ|TziTuj߷,b! ktTRu+`QY#HC`QE(ʻF}e{7eHV#1ݾ윅;(a+SXdDz׮U*f\#q%#  1-Lqc\Y[&cxCiT;Z?w-*X{"&, f>̑1CxNHx{B/gʆqjilU|/BtQ711I gl{!vXcۃgk.(>kmguoZRFƍ^[fe: MeDY'O\++|쑆Q2zyw)˧_ڜo#=gtA FsUmdg}'- )[g,W:r'zJ7+0wpqM- yrPLP Ud|(d(C?5KF^p+ۖSD!ݺ3p|2_ "* ηf8kqKI.ag8A0f9-Ao]qɫ +l;QVQy ώ'^,\O>\acFbϗXH6!=OงW<MMmCȭBps}%Ȥ7cLQ ^-V{ :(G&Q  j 2Y_g7|dkьЕ^\d[gSrOniCͅ9mRA@3ɴp}TW"$߶zk]*Ej0oGdM9)SXyJumr{VU`.TW#L[Jǡ~yګ_/Vx\rEO]?mK }Cj}yXF,+ :rݧw)i۸DMd#u1?bQ(y wDJS,cpR ;* Ei׈S'7-1b:,"GAy$.i50[p6hCJ$B }WIpE)m V 86"9!1$;̭3Q1q5 =b3U)L*#g!c)\hvqGeĀZZpuu 9<.3&z;և>ÃБ"a7j}_ &H-}$k~1q(OϸIn&1T+U,a]-AfHiAޅt@?˜ TKRX@D[=LXo }wnѠazqMy ETi9#_lMam9|f<-ٹIg\J;jnJ`c%Wܤ,FN,LMKGI ;~ȸ[&R.,g.\MHYĦ y&\v+{C-)%bw:=v`ҕ0ݺ,^ZncťWc-ODF?!"g8(7觌mTXބ'oWb,| 6-d>t`U7 rykezsИs6v'ƕ2#:EUp@M`wSb;yҩt %T7lzT}^ق.M5C^ZxpP;Nx)^HmZ1Լvpm2^궿RG6-B!Y&#e/萼248 !LhfR힌Qq(6 bK>C8WyP 2v)} P7}mu$i5ėʼnn. zg>($n7jB VA3z SE׍U'L$#)Q,`Nu oP2-A<ݙ(4Q0?qڥ&R.ȿY[WyV;C{>Z?y.'մДSKE rFDSdk;c?n euX‚˪hɦIȊ8FL*s:g2 ozm(?* :İIwRGٝNVa-i(1B[.횣Y94"u}"?s&tS*Q8@B*csӽ@YO(afmj)8U}w }^ÎuA@b;$pod6!ru>@?[I0شq~nY?2x{sN}n9(u\ju)EKxJY'{8pUP/siX`Aov0Ϧ9TXPڼ\{dNFJ03֖(Z%<)%7.-AG+2Ԗږp!HTʋ{"o[ 9!2ͯX8'Z֫0WsWjp{`m];efx/@h!U|ÛĠ SsOl^?26/ Mdb9nRH'bo,yjH\Yx L|"}G/j!XM#fڢڦD(z6/'CٖLً}NԡÃ(:yFZދV{hUT?25AƍVcL!Q(;o-lXǃVF*i;V &qfxFo&ܨI.<30&6Q_`!WE CnC?ї*sÑ.G4y߂rTIoSUQTXظgDM Fۈ/u~P2jI]ANf ,@h/CC+1S6q)B3AB 8Wg [Ɩ!m pcjl/X:I{$xL}ֺbSt OA6[Dq7E9cf6&6k:!n('KttT$jx[1{9iy싰8_Q0@C=_Z$iLY# Xa|Zm*2QA‰.1EvX$OA2%c:,|")OhEi3ܑ/Xd0"*6dGS:~4FZ5łJ _vtn4ѳeCa[ӏWb~V@⯡)(,W6 Ka!_mWk%V,q9`9_-~'}lw"vޯًkT]wj ښ4Zyw)%і:PϗBxmBH]#5Qhw ) qrHDcg\UeSS؏Owʃp)6PYyn*Gv6 d(HG|f0r"\}QΞo6ֵgnJ}-:S]L*F%k /kkiBJ>*Ʋ +5zoBT g.(&G'HzLfD8%r<:‘e6~jJ6PL ȘН,z` ˨E5G cTu]jO "ѵ RZcI.ZJM̡wi"ea%o T| ;I ݴ9׸&1QGqLq~zh`]f B@v`z= טbEuiH_v~a׍aEjy@!!IieVg..bvr1|@}TYqgF執M;%UIAT/7}n_FsaYs40U 2}?d Sddpǘ T|dk9ؓXk.-W8ʱ= Ni zX 00Sy򶕰pHg )o&c+ؾ# |m'nUm8-Lug+SwA'r.v%~_CH*dVMer+#-A}6FSlМ , >NEi _̍@9yQ\AnSuꥪOZkc`ϹhʍB;]w 9=wS wgSsu{-,+l5/!B~SLC D_JC<8S hT0Lٮs- -Ir/4#=/]]'^Xuo y㻄;dcm#P\{DϤyJ-]i,c`# ^~b8ҙ;"{r;1X4qdL: H Nb]R޴w#Aʍ3Ģ *9tw YDAJ>a =jA A,`("V}v m;5mg c``Цt enJz؇)~ G'm '\TUkcvEƬ@=eu,C7z1sH~,h97>>82%M(S+Swѕf3K2^ٕ[3]{7#B1sJfanMHr\"#NsO:A51=OXrjRvZp4 q f>'my@jQ@S!v]A̓Q??@SLiی`&}fcG]%Y]Ǭ. s~NU xዟ8-׭'Y'}DzYžRb> ,Cv!:J?D0f`'Uҁ{bnN;tږZu?a_Ү'SO"#%imN?qj ylݕ^t|f{{$/D`6Ѹ?VOfJlsYBf g= '.ۭ /ĒDcyLFyepЍIG\ X/!1Z_ k. )IJ>(& 2EREd{ē/^ V~d hQZ#N|=J-ãz 4 ) ) ? KwNʌP?1\bn}|8Ybbs!0}EiBQKe+"?^cJRhʓ%|7}bp8klR^GG킮7 _qM2]]җy@ ,& 󋽃ʪ"}cP]ֻWf}"gMz93BuȍK4cW1-kCA=KcNjZ:(xveNH8f$xd)[?OxCYƽQYrO|wc!"_P~f$M,QXl]( JCw3nE5"ߜ}2-F7'F@a/;%l_xiw)3>$Pd.J]r~t7~ IbS}5Jd{37sP9ux=*aؓJL̥܍Ckm }x:t?Φ@O/N^ȩT(JY'df2w4lq c2dYu$rO$(3GA-#f+p '-nS llHLܣEwGM܂9_ک7N $RǥRd6/' HJ@2e#ufլF~pN "Gxk># Nϟ)"x.r-($f@A^C=(ݎ',6'ǚB_&.&ʡDZdpJMt Adɚ77UGC"0ZEV#tL[8@^e8ץ,5o$ODqb*[ <ɖy槌A 0{K9jk;Կ0CTb%A$74JjS'G $}UmX}#"|ʧZ /Ld7M~ ?"jHA[@'D*m43I]A &7UH)/u~ VX{evHG rx{5RL  N ׾,n ܸ:T$DR xcCJ!=L<iKVEzn K@#WT&3^$3@hOj^zN Ӎd6tGR ؕǣ/m ?_,O+8[۠`;2 !a I ᐔ4>ъrPUk|r'tsr}!5rb˜',H5yf/}Z2 mhSz2 e8eE O0rt(yyA.IP'.Y t.T|٬"Ȍˡˠ?J19j'^5g^ I nsj*BKKk֒ߴ-r;.Ut_ZX$q^UPNߠ| $A(4H'S1Y•뒟9b{8tib |p6A=Sc0zɅgImD E1 5BUL:z&̓:7 sy|:4wF1nFF:c&(ǘ7l>vFekiq-LTnX'|Rppt^w }8[=}WSXO8k耰W*cyM`drY2)ƺ_:TkV`Ž􊽃[zؿGu+6 "H#SKk(틫]K*Hҥ'K_HCn &֝=`~}f<5W (52QaGh3VjY>zUTͲ8C)a0U -TʵZkV`hٰHdml%bZ8YxM?^RB?xf *N+T@ѣ-;MBd8Bo)OOi C!Z<=oPx:q%@DV<[*6žs4,fȷή'A(Vmflt3˶v*I`9|LVY"[8b})e rB׃ ?۹) Wz >D5T٢(?=FjʨjS+KT]14ж/e< 1Lf&y1 5b -ÐP.OMa!uY:@MM߁RuۋUc&/ʟ-ȆH_rgDY}Emv35eB4h)"ZIvڊ^ Ra}AxEM8<%qTh~v4j>ȴI t\}MSRdӁ?NV|UʚU]dfH:%tJULAiX v3p@1h[ "* Rѐ.QzZĚڿxB7U,ÀrciXrPU$ NwAp`nՎNBf?Zt;k@N.XeE1p>'`n WRWXy8;1/a;݈Af)MO3*O-Y$ =`qz; t ٪Gmϼ >Om-0]Eq%IMϓI@]~LfSQNe;%@-9یp4i1 ߃ci/vvN'Kp+Fzf M2`}$0Fzno /}G}!B+/3PJ_\hZq Z\QI <MvQ2Vę60g"Na!Si.W8bbD;Ǭo_ĬZ[/@״OU%r T}pg&_XY[9Ԏ,6LNw*E!aܗ`&: 0>?깦EGeY4Hh.x5/'o t_08Q{ "5znoT AqegdD֛`7,~A( `;Vw&X֖\ 7ifvq'Be5Ht"Xb/Yy3n O4]ޟ@#j(\bQ )(|RA bJmi;X`n #sGTUe\x$OOsZ`3 AE0/ h)́8"1=tiA~߲f&<yN ^}c[R(Y%N&:`+-}1TuܞCkhR6 "h9#KYsB.p(Cj.O uđKF $\{sK~Qep&oAW&Qs$>#G_Q9!,}pLSxҌ7jMW F۶9}ʑ޿$K",b qN1VAM|>+t2JlH/ :!PȲs M e)KdJt6)sA(/>?zhŒ{ٹ ?= JUu]a(}0ɺ0/m~MPse!YƝ] 2jN:P[s0-dS<~#j<a 6}_a+Qh8Z(}qli\Cg' M^{1V ?2B[5Q24M "b 1A[ ?L薎uDš:{fmB*gwn|e[H+oC0\Z}qo ؋6KK%ik9oT<ɢkTkWx5?MG$ztvbI -<=x;Q8W%M)voeYs鍶uZ@|By"~a6˼ :ɶ'D3RmBN{arϞ1G`&(Ԫۢ][҂fޫҬӳH}O,-KAXCp> "JL2QLP! =5lPC?b;9_iwnq鋫C˓P@\7qE5`6ӗg%O;Ҵ ZC( nȂպR ?v3T@P_"i 05SuC v)tǤr:5ɗ LB|Ts3A*hV|\߭ \1>lŃ.o ۋ^Nk;_l5Dp(k&cqͳڀ0ʶT2u />c6<%SKҦ-R3 p\tQ}zME4~amޘ[D(qmن-` <&fϠ?ʖO ^N,\4H~K,UA(JK^3ۦTبy8.Ǔ8{ ݷ,!8c!zO!CNjpGydNL{kdv=M=`q}m:i; ZF4!HMxF'PtJL = q6U1hj }g[Oڜ3 5fwƐCw:̧3p]|nH'4 u bP_5҂ɦJr] .UÜ &}5p2; AcRԙm$~1}a ݞNThc&Np䀟}۶$ߏ[=i]f%SP I Ŷ_8"SX*qdnJ7@Lgi"A%k7ӱxΤYY4Ѐ$%LP+49z&.3Mf,!=<0LAލ-i:82+c_סL`Uƣ_~Ñy ^Gh&ЉX- jEzw˛Gh8Yvc(!1R\o-X#K:܋ND7IJ@R>cq)qqyNLd5X=򸔐(, qg\D%"bMP3H ./ J_ *&u,8:V%_x5.x}/<HrD1 w"t/&>.y%Tf\c:*OØ !u fO g< &È?&H|8ka]!K1Ê~k<\FQ,Z*{ق~BD"̚_~J % H溂cs'8[A(!NF+lc[[@60◗A^Cψ3WYzV[.]Dܟ Bl#lES6B pU`#s0Ԡ Q+EU~>/'ulu/X>k/o5_L* l%%8UkI/~%;v^6vdo2+Aؗ F ՜ j~ґ?w&$!#ѯpH$V]>1l¿\F%<gRxH01/ڣ .1Cee9)XaٙD(_8f.UwN]mH[QH?up}yhVa($urXx+^։G7*Qar4apPC|?v0 8#s]ŲABB`m~Ko-cl$e$XLs Qmʧ2Cc쥘yX9%T\Kko Z{T`cqhZ[oi\ 0iLWw> 9nsƉc gNRWt'uoi1}>l?@_u9J Bqlp:Y{J=Ҩ0ǔqZJr9>/ylz0%$Bǘ I~FGiw4ZsA6omn\Zwa{W6m8AngyoSO}L &/Q(SXV8N$O.ۡ5ucVW6դ#FS LIռpy)-F$Tetz+ܧ (U)ubOj02=CH*=-㩻 .W Tx :on&1ODxG:o#5̘Y-jP0=fڤ_gQTY=tf͹ #Cl6eʍԤhZl8gaAR3o?=8st#*A> E ;AbWS&Wrܛ̔p7D[xb4s%,90.ctFIoL9O$r鼉Qa&˗2n1g0%B!Y: 3} k黰SNW] HXQ2r4'jWA h4wt^W%;Hd9,9BF`J41\Y"67]dMmIapC3woD33Lvph=S`UpF(V]kHp:/޶rچMqU (A"f^D'֐+F< ҹ̛JAh:kYgESfpytSA|ކIt^O_ GzZCyI(~>Jh^F0=svs,Ӑ! t6l+o"gX[ Xfylx XTyR5>˘pÒ4g"\lW<#1@t0),yr[\QAQBl2$Gӈ?8rR\NKd~qo]!R5V*'ډRw*nBH*}`)P3GZ @q<pL+bܡ@}} {v8؈hqc;Bǒ fHǾ?/A&cBRĕ3MA}6~lT(6;RK4`ߴ|k8TTEpObO'<)򙪻%hn,D]L%V6a FcC^Ȟӂ>h6@|kUr]xk%% sAoγ]0WSuxr~Ư z2ê"{TMO8E(2zCι=j Z6 Rc1iGc>4 \򗵲߃7wy~⑜ijWT6@v욛?}U1&+d0CR3S1G'Msάe!'wf(ts˕@1hv[Jck5fZMOY)H:ؘB`C3d$nfʔKa.B+x%RYy#:rHg;Z^=KiZhgQTmvc'g< d=k,7l#apΡ-@KjP![Ϛn%HfRduUeDvQǕ+Ӽ6"$c3N4J,mD5^'WҺHLo.GkÍܓqej ;LD-.b3Ԏ:@B]=_}&p~5(dTVT:I }ʘCKu=G SLOrM@j=rE\qQEA:kk3߈JӼ1~ae61[6m^KTmY^F7 woZ[;(+icGJ2gff0 _O{ca_pK21v+]y{;"hZqԕd;F/2r]QLP(M+3huGw/a֏o}y ftc8gj m YoXZuW]qgމ,=Gt7-Ě8;xg"+5.jz&2$͕S/D_6+ -:@ؼRS![kjZFT* s271š‰O>y㰈g7M0"p[+ʃn`r#[Dy7,3]Ws4aCg7 2A+UC{D}cWU>>>*Ѯݱ6eW=cP 2z$Sid]qSS=vpcJQGFٽTtm kS385N~5 =Hn7[]\8ohv !vc+_~W<͏inya!~`)'f2]Vf!^UĔydm+[CɯJX{~RO¯2S{$۵ nH;͵ҵc9+?1Vg`%;uÛŴ%6pdDy.m->bm&&XTAM{p9[dvウA:N1& )Yƥgw] xrЩ?|@|;C~ V&U+.'aێZ5IrekwknSrZ< Tr՟"Õ`p9YG5LHE?Ʃf`{ ĤZth]fs"|601ͩMѥyE 9-5yR 0Bx k/IEGl )UQݖ (Z ]SjT X:[1NJfxYUZ[W0҈V 8{FO^ϱ90 )G8*s`\mX7x"Iȍ ', 0]m1Ms3]c s0-gWwS? f)6iwB.)` dfv-_V‹_.&o푪nj&8`MSCwFjeĤp3PӦpJrL lە}j)OlEd缂\=Wr݁o4Ԧ [ʈ밨/ z<:"bz^-7N V}\^ 9? (4Fg h>(pƶ_,V!AV*΃ rRCV\l(4tPD_HMC"-jVja. {%o, 8ocZAXi6 t @ؑ#P4҃ˤ_r3#|kD"`Evڻgn~~VOEʣ]fi]>e[jt,EDXE±IQҶ`OtyجmS~ࡳ ay3;b;Ym- LF"qE$?&5@:dHl7pSst˅&>*O+M<)PcMJ5l+bJל_s__r'yn$߿j/I69oߝlgbF85" 5Z {_a4aڰފ1qq%|O>|Uvu΅)ȞOظ1,Gs R}tWC^:7=ess 6S8Tmuؙb(CCh)/5C{CX]OU'O iT-#POjO1|hF٨rd郃+) ,]DoЃŷ|i_j;J:WOۈHxO)٤٫oZgf2e+5T8\v<+)fc;7\Ze%P5 歒% r2mB.SQPʐڶoZ g|Nc0!5> qMk<_fJc0qA!2RgXbPu",Nl_ckwGx?WKV*Z KgEh7QwGL!ȗ׍X+?;Ά`FI[' Iu$&@۰F;Tlq?xzsa !H|Ie9k^Z&Jr/WY`8]MMaW;(1 ~&lFY2BwNDj9>iktwm#hl-EIHTYΫzQ7iiNKAmB8}fc~!Qã:nM]-rifFrRX(gܪoOA&n,%4EK?s1j'~"F9{ aX5;2?OЦ򵧋mFX)E=4aX'J&J5pv%Y8 ¦_ fpM* H}:J#?;{55 GJcde]ұ`;vO3?[Cc.oJѐXHC]~j\’~<̄1&%퇊# E:sCW6&"`mٮ1Lvl9+ vHEmg3=T@2R|W6ZQKך0{̥H3!u#UbTf~~bsy4D4B36s^C1`Yoۂ!`EY4c+i!}T|kȟ ]@r'$"|7oX8܉ѕs#RV P e(K"[*n%{BK܌b.!C>Юsmz_+שЙ :{(֞_tŁI(ziZIIF^C$Qe t8Wq6$tU0igY4JV33̐ X\HMj^ " {g@|PtjdpiO $}uqGY?W+0 NbTɗ'V7FV0F*䐈'7#u+8My,ZXO*{oK)Z9$lׯn Q"fr)}\VzU{`&R`p"Ű?qb쓪-3% ʙ^9Dg\t;Ah^98sq?M|VG_I ]HmxvWx֌t#] IM 'Y׬ɷ6t(1ݿr[\Y ?jBs'ciIGo% t_v5_O:zuY+,#զ`9&%bAavtVW_6N%L5p+pٞ6/t8e' 91ޅiIP$l.^1vOs5Nq3QB27Ev4`Y觌[zH%TޅCnQ﫤x/jn @'2rE?ݓw nG䏬6e-n)A+Z5la_W1AQnk|=Һxڰ.B6VKnUMeSR,*ԛի/?6COFl6C9;o/w8&Szd|2)]UGywtW+FH k)WCݾΉ9CL>aB)tbqFi 4 T$=p w Z;CT#jǐ9<~N`~"Lfӓ-0 fnu ׌Ub/v;#t~S'Wf뀊JDHc7]'簣 jH"'# oH<6eJե0%p#5'Fk)P,&IbKJAM\95VLli&C& 1jRdž8OX0S :b< wM x%z5~.F>#LNuPi/']!0pM_:c,I&x ! ^/Ov0~OJsݙ@eSgh% 1Scb^*1Y͓B39" opp\2?ti / dP_Ip*#8Qw`t%2(jzZKYpSІ.2-%CJ 8hp+C 6=gF&ɉFATw ;~=A Bh&?vEͼt>Ы =~G qY2va]fj4l,I)Ǐ!x_6hK}aF1mqXjW R<C >҆@m;b/<k)?ai:1P-i:/褐`hjO`7bcKl Zbx35ݪu ~\X%ǯ9غ<$f$k̼3!C0 Pdwկ-_fHAD v"\*fR}A~'2]/Qp%q-ugqaD4ԅ!7:Cw%5߸hJ{#"$VgGJFF>|.:*{*N c?2 &XŚΏ.A=B;S>?r'*/w78iATJh3WTEDk%$`$hLGus MM 3H@}cK#3 V P]Q`x{= |\_,ћ&^= ʦ37v۠M)Gƒ?{$J<T8F0!jč@OgǷyJwI2DyB?WAvN'wb*Ԣ{hl?i"Op=o?ǵ%X)s@ud V3|r1LUJQm,K'~-e˙Bѐ>YiѐtsdcCW`۽ ]dqT|i[돎W 4  vft#kriF5db{-̺2Fcfk J`8"5Q\~=hO9*~fhu+yғJ&e昙ne&RCEۙ%,^6*(]]3\x\v~'ߣvnY-ti3BȱAb:2zreml[p qnF?BUB|M)ϫF5(Rds |~wKiʛ]C++L#$-:q$L|vdN߸Y,˹7EІjOvis-m8ݥ4[J {tԂGW\1;*x6Mp I$n{ # 3X5W0qJ+h <p aaa䟮k{zD׹|Ņ&'gߝ)@c1ѥV^3r?/ft}x2aoI,FrQbny8_BՒ9LRLW8I ¹!,aixx( AjT~P,_(j͚܀93O1U' @]ۇ3y;n3ly7)]0:5.sB P˫D<8ΘL V%(^ @ÿV5BP1;yQcUܺ7QPĜDLzJkJ~y5? T̴ (d~g9-t,L@8'hZ~,{Y #DϱI{mM7Z{wNt5s&K5FsB&S:xYh9g",>B2zS0b0go?^47,|Gc(j-%1' H!IМ|dH#UW^I`d8+( !0e rV^r]vLlh\+h/kzM\8֎(:N򽮂&[4F5"-:EB Ū9:r mG7J`Vaƿmf&so"{ kHp`G-HD ,چlk@e||y(\^)[ _dwO?-@iC[J5o[/5 4cS}`ลSDU2)f)ITBk;>I9N+1-ZccvJEvB,({v~0}71y|a|  /뫆9zup%7iE$0:Ib ӢG-)C2‚9-*Ǎ&U-Cslo(3jcM(eOi{u, _1n8!4(gxSQqu^ {z7"JpW1x kE,vvMg`S3sPdlLhF/s$ox$FV lW19*ԗA5ɃRE4pev11…uQ_uo ;&ή5v_FꚠR{`wb{` ф%#V?R^Uޙ w5t_EΥTқ1Kla9Z<4 R rl\=&k)o zQԻMhF(*bCn!5_4}Ns|RK;/Ӝ@(4WPͿu:Ē+#Fӹx.OMfPm%AjQ6;ܡX6Ց%[.Z@(p=ѱ>dԖV9W0F%fʢX dER+piOs7q;fкKqd1Pj"e#a0~"7cX*17.5h`Q燺YnrϪo;5:"-3G%ԃ!-;20I|5PL^Mp Y Ѧ6Y`iaUzXQ%U*@oO7y90ۢ 07O}M:R)~EEGUW$UJeC㭽+2n$r~;q%> }~Db szw:槹̓Ă꥟jm](72d&f푤Mq #E"jvyX4GO8  MVk8N 0.| B,Ls_gT#0  Rˆ,INCL>!QjRX.s 60{%oǩzTQ^*.3h}ց9F9᮳@Y/~~ĪpxYNy&^Ts8'KоR:hYԨh9oZ@J^Tɩ"ϩ#?@gzJUH`z]ܢ.r-Rbnw_͆I A_XEh* Hc;!TrUI Ҹ(n(WOf_*{4y {_r,7O*TWLio9#>|@/ `¯!{ZrLJm Ve* We2TI<#lΨ41QX_{UD"Bn]qѻ՘\ZFqs M!bkyM= ns \Q${"=04MK;gP2=qA3tTuMI((7ǑZ`ݨ˅B%;E%)-{ʻ6 $zhf`e}TSmwd+m( C7 g$Jk3?u) ZP9f;Z]{(ko\A񿅕 ZUS\2޺?CQM z^[[]2&PYdh.49`}GWٛ<Ѽ xFOYU%fl֝{zEc1w:ҙ,0DpWR[׻,AaǒċNT1:R% n\WʎBsPCb /AS[L1~u^8%)y]8f+W 8<8RǬ*+ĂX5_( 4,c#;+` nN MO}A I*{e,GS{\xMyJXsB>;ń3 o mOJ4:lBk݂::ZOK˜*|ڑ˚Nq+bxĶ+%_,4prE`IyϹPyy$@35he=}\g[oԴ/⧨ ;^VY L/7GS9"]S*c8qYLҡ}o*U]3] hֻQGnw*Z0oL J8+$ƕ2r"X [i!.,O"]rÁ2m0Is=<N&8:Oh6;PASuYӗmK.;2i|/99.)G- 9C{zGUYe%Ô'i:LBŒ 9u+PzD*u3=tuZ$fM\\3tB]+2! TT# y˄G;YϠ iQ@NB lê_r3P,UQ+*\c2I@H69}bQa`˨AAN~JEN4c~(GDbH4__\O+ҽei";FF- *6B3ɤ|;Ƃ=fQ#&2E^hF^ Nɺmc}Ν_7S퀤ѣݖ 5i%VS.vF~-`3dco"(V*JowLÏ}I-g>hV#N_JSS҈QumX.h﹍&ΕL|h}1Ⱥ@˕`ؑݤôzh!͹jK2Gxv-> M@0^'ayckm `63ZlHO Rs2퉨"6fAZIFW++tiipRWӭzARi^?/¢kHJ)QG iLv ǭB,k/|xr]?K.^^<27~@M12մ''83=wO׬e*$4%a'nީPkYσy1 :px~,91OOXpP7K{K,<s8k홣TM<" S,RLPǛIӋ]7XjsF12,:F}7}lAT Xj9'uH+j O 2]ԃY@?iukds:fhydbPG֍3wWFv m_*iO/]C`g둼4GA,~/۸F (牺$wl!)(T ҈0 8#K?Ē a#蠲[F᤻ "&޷6U?4&``!6)D2MD?Wս&Z "~WI+F_ql||^ҐvuK3|I92̦MÂ)vuL5 DΜ֜oD7v3V9:|i3?;FH]ЬZ# _ ZBrܿT} Lli}R*y $iy)@tˍ J$Y93?t}ԣI;zYꉨs7IS6'.^aKOxo]ip ;lfp1qGW\^&;>7[Z{e i"DB.oL"!$`>7‚XlzC .4U1qL6]m͈,EH,I> ~ QicfeE6>'Е g˥nGRq{Wj L*:hfgzAQadؓ,X[[},~!Q +zgΊČ";@i'$ۈ0GG5 _B=c l) i ՞efb4)FgEdY6%¤Us& cE{ -fd1Ac`fW/ KVj{1sW-끚Л)j-, P翯Bv9ndol! 4ߦ"/p` w<VOz{ [M7t_oJ qߩGㅀ4ԑL4Tl Sx # HVK. vsoF!.l&ɰ%#m jNt|{~ؿn4UII˼:$$ !̃ FfBt% Th6lL_NѰԌ5aq;"ىoZq!Tq.&wl3A}W?Jl!h`o{˺IsޣJM"ӣevEn_b`DSa Fz-逃b~@|'HʱSQWǸ5`$S>xcnfpo+cc ˾2֞,,Mu~1343:-^BL/@(#n*qTcz?Z5me k[{ WX79]&-r$8̿d[ɓp|>ާuvddWzHpzI 4 $҈?)YBЍ~PYswhʾ:/,Ynr8Vlx_ *҄47y)>0$nzRC^by8"?&(LNӦެ*q/",Jioxl#x,J ?6o񳔴zqܬ菓B= !aψ&$Ii6I+9݅ udr>YW9qDu"I 6Z2V5)r`WC1 +JAME&[{j';Q Kt (|R{DxlˁU@~|d9 &?=s5. eTJ̕TtjH5I!VDQ@.l6y%~vz42*6h㸯wB}2QiY#=Lg.\W8<ǣ0 =hYY|G\o7zF^eo/%NO(Nx@ "H_M~_Ư͝‚yPYosOY[]][W@Й@^}hקŐD0ɄAHu ;x龢<\hS`d5IMʂCš gfXH 'cy~ ǕNntzŶ= w8IG2g{ GUOT/ 4s"pݥEP1^ƽX:N׎V^=g#lC= .>*>8WΗSbzVzq*@/!4}\BlOoՁcisPnS^ß Ua\ϖz7=9"V -+RY[jlXXsV =:{Ր}zM)QtVq_ Ny#6vDqG[YP\T l.φ 4|w#-2v-dPZmwkY"Ŕ{ɝМ|{.<~[y X0y-rW3Ư$ e־{]I_Yia/5փbK=C03VGH:#=YU=qWӇ=-I<LQL FB:UqA!`'k乵_8;ztrOG T,u(֊a X |} otSS=V.Iu$pƻ(d0)-o:MNA&;` 8b㬃!%2>J iiT>C,LI?h54¾2}y?ېg[8ڪItC6{U$JLp'LcF< a&C> I^^aqWQL3Rjל[y~ dNYi7"ᤂ50HLl҆J (ҶwQ/fDN0=XsXJhHsӗpVE+=sGwպIc۟q/vׄOGH9'h`BsJ^6U3yh͑V("ڿ gExqRe=OAoxOF ,khVʔ(BԾ볞*'=5z=ԛxFD_{;؁\_<ÐrPc3$!HEOq2DgM > 3hΰ% X5V~ְX-$A$;T5gZq (2mwXxo ;t8OHQᒒÖօ0'Z2!>2M\f0ɇ6^cdEE%b6DO&etKҫSSZ8e ^r")@.]4q 9Q*~7PۋnhJCS9;-;.NV H3Ozv8k)GP .=+[4QiJtc}s> {ƫEi먝0œ{=%]4G!N4h }͇YS:;q}>j*};"i.7- ƢT1 `S$?UVe끐P-׀}ԄkwbQخ:T`~N{ nÄw$Е)ʸG߱L#;;c ^ dv4_j /߼osl؃yàSǹ3)Lt AP8' nO;U$R˖ ̧ԖHΖE93Ӡp:v0|8QSc4=G֡Sp0k ?6i,,۩OÞ!VG\Egy%SޘHAJz\EO`kЕ#KM~f'h8Xks{zt\ZW0M4[ 9TVږ&M'$VxG#.u ӯs=39RIDc;5ٷ.yA|3ŵalf@b@RA+ᛎKt=^ڰsYHΒ86# y70D M +/9.;Gri~TzTrxP^rq"XI6}k>wtMCn+q@׭$ndysM/1J->˜ܖs0H? C?OK ʪ:9ב6=~ t$YVE:db\9C`W}q.}k$h g~%aBأfD/(s\\$y2Zm/j(0SX JVL`|(uc(w7 JqII:,HëP9.XT._I@V|[s_|*QC#o<;Ggx5k}=N6~KP=Ox|smnw4)4`o]BiGm1NG]vyap / h>߉e y >u1c$ i֦kd1xҌ󟋓;hX/#g^Wed'6w=^ҕuX`8bNl-Cbم&pk`4dچ&<*Vr4q`I-:/75g5qi=BGT4;Iʝ~Y8uw򈆝Ad-|7r<"wfDlr0MV4yJ`q>tKޣ0%;D+\-Ou1?V}8SS<ԥZD>!Ac5mn&N'ĚqQ#2:zSdBr|e8w4V" "1dMhNK}TIbH+36G`gmV&4w[oȂ#xr)J0> h,.Cqs( uXM|AneiFl!yUϋQ~H¹ѹR|W"0 nfst wF{5QR hs|sI ^ B練+aЩZ_2-u*}ݕt]\#S}J3檹ז !d)L9N {'>QeF³Zcw1GkHLߢߏ{ؒ͞X^YoHe?1vIDG@fߖ:{)Oz5ù,< cY{]{BU!5Q6iUD C "Rs].f_3kc#"%'yRudLn-Tb}uDflM א.ׯ:e%߸_~Hտd S ME_Bʁ&S<eo}͊HY/,+( מ,~ 1͞XX?Ijbtz Jyj}8zVRP4~[lv H[rK< ݝiM>&V=; ` \B6>nYWZC(wfǟ =*MV@p|X&6K趄Eu%9u.z[`^In 92^h _}Öoh'5RLfBu?lF.#L >5m۾+:_!e8xnsIKt}XS^+;Ǔ !D7qjqW YhrMۉ/E+5 ~<$ &l$nÌ {t=.C;eXܓf\DZpm&m#nU~b23K<(rBy4*qOK]j}*[$R^ Sq$ @2ҳp&#M=Kb.pd!2Pr&Cf!:vf {@ 8RVW%՘ yNFϬZ<XcHO58iNJJ@T)K^3ZB^3Z7qgMý[2xeu,M`Ww{Zѕ .e-fU <`Fvk(╆I (>JdyMq,pj_LDMSA_1R{W@_!gnkmŪRCGRUܷ]oF?IP;\CАm^w*ǰm1* )^-`ϠF&[MCΧ`%fl^1+HIj.r;it]B׾ְbc Wy/p༞0?;^qgٰEb>f^FF̴ifv\^7ŵŢd+8vaҿD@6ˉA"Huc+䭰NG]K7>h߶RNTV|Ӭw~CԴߊ{t|iy#lv~7-Ѝ`e|^x<lIR'=LhVڻ 9WeФy9unKX؋z1Ä y7leoD%t˝#Κ(%4+TRX2Q}<|'UoP):F~!"U9 7?fqGΤ?54{fI g3eA/9].Ay|7@K|J@@d9Jg,A\VhWt6k:R,8"*SW JA>;F<68t9݅9moGPg:`D+=^l(y=P+,D8p;b+s`Wv1]n5 up͏\{ЗDV %7+#GāO˭F͖37eFCX w?)gfnae o[dkV$bˆٳYQY<|TMVi bfm"-x,l7'l,gb%ȭ}^ H3Gc]˱hOô:@g;n+:ʒ _ 8B`Ie\cj'*Z)JR, w.f# e@45"졁QbSe5 p|CYhF'/ ĜSWS6ѓ'@x ?3c eL}t1M G?O[֯$wɳ<ݢD? g^_m&=_UtA^m`B{u``3p6,Zlzt_cS~mП5@ ؿI3 5 uy-z3r4 ˆnx<殷Fp7mPA aľGJ|xC{CQ?[;LQƩAטؖ>k 2R? 6嚷nDCսo6(D]WƲ*׺whVmlN&~13*_#WtSUHtgFB~] qo-D*LEY*HͰZPzXea0ߊ]Ng|xnplb-;)_7weqVg؊P@wӜ5H 317+V93W,jMgiHgޣv}vx#b1\I7M`6bÛϟL#myIMee繩S&FAw,Բ MQr?Èϡ}t{aWM.PrjXD(Qj0?bnH6 6utl}]̤n5sLʎJ~bѾ#w7YayK=ަ^7ޕx!*CHNn- ^i37f'8?M8:L78Qd0l8]ne0(`3@ྤk#rLs'9v돥| e:PEy+k:FXN,[RWۦv7y7nU}RW/}cSe5I} J>߭N2A8j] KqBײtX7aEE%=VU<^Y+Hrpf(,0;.̥Mʷcdrϣ5wQ/Q̳e#0>HZ4j͙e37|J| j[qB6\>+e4 c-1Z ^_ުa"=یo[ʆMS?DcăD7x7nOO|m.hg L_~̝< MG(]mMY< ڼdPfXt.v.f,#tIF4`3$U0jkA#1%w=<ŋ2|d&7+}/.Az[zh"}Pև6 x(W8DTG,Npo&ˮTh#Z+ jd>O焯m_z˩Q=qڴѕ x[2/5O_bm=42ʏ1ֈnϕp/A`n>+Lx䍨opI#!bn L$ WO8ttc+x* GPIdB-Gt~SB?%'P;˥"@oT)xBh1t"#Y|XL Ӻ[` #kj9)RGfQtiz} 0LSB_gA)0eCCDӞ, b8y};\R|*v*+4+8p vsth"/(, h{k=}f˅^Zoq6 "W(5 ?{jDӧ;(cd.$ 8y1b>EĹfK<]{G-TȦhOsf P^v.ck%HCVwN9Xy\Jl(č݃f J;m;o3L4  BHlX$<й|tyJ.CPXቺ|::iȂhU+U{P* #AtMƐ a$7szjIbu#}o-A>%:6AB/]ޒu }rv`#zїTv2di 1F*U5K!!Lp8!_VE/:4h4V5 p27Db'mP?;3ӹz̯7a0Xnj/I5qu5'\U^Xw‹7]CC*qc?AeMԻs>kI!yI諁4 5H_@#OhHA61o4gTSNI1/psq[ͭyD$ ;ڰ25K TWwk3F"v?X,Qt7:_uY~PJp`R'Y/qc񻥦u^)EG=ٟ ^DrÖWg (mƚ+>QMޛiN)'p𹒿$TaNHK.mx=" V1g)FY>p%.;R-VA% DF͟9t*W8ߏDӢ^3U!^VB74eZlw8Yx'3w`Nmyyps~=hJn:d[),%^oA:&Q.\S.r>1Ǥz"H=z\mFOx16/5TھwҟA Вl/)QKhF,wnʟ'),\Gg SccmcF%F8{ݗA t` 87`']L}3A'uh!#ӿN}%U~=feQ,7ŞKTM}D ء,Eږւh szwqCgM&7wC]rk'*ÃXI.F5P1 In4Q!iOs;GǪAˢ=[X$B&#YgOmv yOM).WfS|y)^6bWyAp`H0vFpF hO(aV Zu9k\q&u'K'ޝnCl/}| σcZ]qxQyk RM;F<$:bG艇q ǵ3)oua0_6v)mOX鮢q[D,o(:#kFլ'7w+f`4t|tHLq Zlfk:RAb4! Ax5`ucfi}zobW"dbs)+TٲFn_A.'])ޙCoFQA dPAߓ6\cM}Z@֓ć8*{3xc夓_3WxB]sBy>jM:-,9ցx f̷sM!q*(9i۹!Q|MZNt%\KoU&zj 0 4ɘq_34\M#7΄f4]SK8儶O.]]@}~-m)> t5ՉGfitF)aAb'0s^t6FB,IUeKXr׊`[s, qZnj)_W } >i;Kveoo?Pqcc\,wjJp$hDaΙo-fYRYy[NɢM8ȍ֤D_@7a*.D7fcfA}꤇gqHSjt˷nyC.-+34.ijᆽO32i-b{M޳DdRSSßJ}p|'_lǮLēi&R`#/uR Wx69Q%lx& `o1|Hj=Gwv-M^{Α\} M"Ab3Y׿2F3A" ~e=h(/\OLB+Bm;vk;?,>O nWgwWqV2@zQ/ N nr4 ؍NܕTmcasYASMf^0Dv-fGns+0} «P:cAxuMtv]/k8WLSLJ>"yU _UCC<"!^xLKCS>X")cďhd>ŪOɏaC.oHKX@~dw ~4j"F!]G|' ɋWWt㪱Bt?Tt݂ŵkBf ]!r8)(3cI2y9uآ/*Gct;)+Ŀ_b&OeKk2N\<;x}A5v@" ĩ>b% xBy.,V~įxFD{"_eu򧤆}0P"-Cpӵ:}V.l\ʅMͭdպ :yn!剪@rg'w_+էyשIdj x/ޕ1$m%5+~uy<8Y~b_D)`Ŧ(fY/_g`7)c:1 ҷs#lNjL\>L7ƚfJ($<4,&j {iz 6G57JJU @r$q 9@}dB˅0/"44{4`13ꌷ"Xr75B^DmHå7#Z.BP -j3Mxz>!Υ?sNY1th14 -kpm Y0R,^-PfQ#E@mw-(ߟLִb5 b}nA/iR(a- 1IoC ʜX+GX+Wq?5d.i0) h/OUb?֦ 7lkXMޞW)p@X/tgZW* 2F "?Mӌs-ΧOӼ%l岾+{ `aa;\8Zkj AbVsAJ9sFca5ıp];Pz&ҧ(r‰߯G/{c1*ZUUE5_Ooc%A6pCW@")ҴOZOV%g$B)F*).(U=DM ^$cQ.N\0l RxzmH@qMАg< KSK=pn;֪KWx5; .%Sg:(m4!0ݛsf{}0)=a)f&:pw:~mVHgz#^<2ģlH`c u ?s?LxEBF;tJœEש!(KRҍ'x ^b=7ϐPDiȀ)>,<#FcS"b"70fQ П4:+a`f+|M& /H*M> H>L/W2UnF?A&{FI;] HH~`;g|sieV݄6HKr8I+z3fϜH5sΓw!C=[v' 8eXfR |*9ER>:2a1FV7}qRϯ}oJ>]3^ŊPPc rr;6_ВA|jNF+mfqyxHgN+RSX ߺ`DY&:nJՒu|@cV|${;oU!pdK!c!L@G$lL50fUK'U?GaՂKXGQvla}r»a94vBnknu Te@m|ql 0U] 7$]i5 9JZZ0BhB$'ZiA% QLM!RE9=Ev8;Ǚ o Xʎ.b <U!fGM^Ee`Zw}:&_Wv)$ĔKiO䝀'sA獊yP4Azeـ$YyeƖ˥ Q~ hkb]C(N}_Y.J]KfzD4ޅ\BK.(3^JtrOƏnIM$P. J69ɻi[\KYfDxvSj 1= dp Pެ/HFgu-bDPt!6t%o!3TF37 ʄ#KM E,cSCxp)Rs 0XdT&b HED7ϋH*nʧV2r0G  @x*;0<6c7 Wp@54/h/¶jLIAF-%7Vyڔug굈4,ڽҠ {0d}Mvo^҂wk{Dw}Ξ2=*-P˩OZ< %.UK!:C;DDVq> IWit' hg+rSmSeuM"͸2tA_-Q  |2(ҩu^-%r\tLYOt/B͏QbI!E.xOzW_4lM\k`n+11}7@R fCO8Gk0lP~=5B:AaMq$I^")NQN>E,(Ju|w .ub ie݁s36+p J3g-YģPX;ȺIm@NGOx\Wj+ |āOdyף4yiIqۛDӞPh9LJ~68`<'ð&q:<"QX}~!wd T'ɽeuXe2pW&'ȡ2 *$9n&MJ'l! GxY"NKۅaQ3GO%FS+#'IG&>6 r ZߑD炪h"%HtUG`jѧNBq&} b_Z?(N# B4 VPuh )R</6<͓pXvsifW9G^ q9?Gqoc,(-a?*\Y] l wi6GDN5( 0%MĜCi `ĂY $-#fg: +8J^eR9Њ@!.@(Fk.zͱgr"/e^NS{%R=[]cjՏSCXW Ը|-}[o&ܚat+akTWUdbx>MK"l`{a_#v U6Jk++ uhY w9: y[fnFH}ɿQni::\7LWy.:I&GتC;;j?="8iR Ug:LyͽjRU!q<9洏$cR<ϻuؼuI̛}EzףUKb<ϩGοVg/q&?pnIs$1gw''͐Rg`PZ'df NPje2E]WjI~_N_h8 J_8Xb{.NƏ9T]@Gqt_l\9ëxQ %v{w,V*$'5WzyF"1hK8E eFG*Mk\(Z=F;, %<,0iDv=ei/jUPLWO[#Rʃ]#i9E>du҃<4VkzKLA?_6 ~C~Ѹ}wIh1 Ϩ"\@iڏ rYJqHr!: Tx ʆ^է&YrF3J P# +YY3LOQv{%_7%8 4t rTA J(XfL~D.!ZJuum`?ĩIMYfq1 68x|8I%lΊ@Lv":@mXz *o3Jk;=f'Cah^VI3ت KwCAF\< Ɍ׬!y$ EXZ]{r C8 qʰ7\9hF|&%/@A5t+ɠ}m%9 Ã^d e!֗B`\wYb)Dڭ*<{ \d{B( #S! }8v]ܿu?f- }gDofOxQ$SUӱA w^>s|[yأsŅ;*xiɔtFp P+[MJVN2A5,y1 'R[&H\jv ӺpJ$(\dS7qdz"ℚdz;B w]C6pW]sLY1K!ʷ8$$QQ>Tu7\cxEP-jB`\Ӂd&$ YUsA,ycpq×~[#KJT $o(ݿ/ofz:UܡV SNi—!KsCt~#A<^Ya3^\"΁:AoiЭdG>ݽ bF[5C4) lI^8'1aŢ ϠN2>o,pȝ:;ed =* '[;(3TRDqv'\ՍJ9ҜZ?[ȗ9Z^1ݣUҕ_ ptDVAGqO3`- $-vT/A!}xr\eXTxH;pr۝MyJ܇*wmIqQ&3YQQ7Ôy9& 远ik{dG;hU$بPa/6^OJ7 >S$gxόOCsyZQ$! \g:.yzQB}YW4z$Xc`-:vW@*[@ptg?-U' CQBͱV YȰVD10m.8kۘ=ۈú ]Yp/[nCp>٫͓.%RsBpٮ:ayo}v87JtUlaǥE.VI8Z-x\3fjrf?l`շMnqu\+o@Y)WT`($7).-I %v'I`r;&iN4}ͦ;:On-0)_k a s_R}uw6zy@s֗]F-YKc!zƥ㉉U,(Z]p̿Aƿx%i%ǮE&*_Ws蜥/l0&;x,FL~xqh͎t^'a䩵F[1o^ G7[xmc*@mZ~]2vu^φ#-a!T.$!]ށ!^PcW"<,1q[1o̺zZ8 i7,}hNH.˞a:vǸo|F}@ 8T2B+vLxIW]íH4H$g tթaN!?OG.{W& ~{g] OwqhKOyQw`X*|F7& V~%!@L yD2We7r vbV~M&6S[8@E W*2J0 IuSA4̠N"^YĎ@K]Mr9qxZڻŦbZ[eo}TDsO0y["O) {Dcaam4upb~q辒'̶tj;Z>e=sPHT2#o߼†p41g`0%}zW\."UWDRI6N *0Ja9YcG{$=&3q\^*%3wKc|7M0l2Fkr_e[;vDroS6ͪId3\ PHa$T=iA NAԕg!6ވF3ıKl,=L ཱུV@ #@$? fſh[Ϛ2_o3PHGv<ۀ9z%o3U$`_dQzZGYy#l2bܝsbpfNHx206p:}`r'+kVU8k/fzw6>BT'2ǚa נPB] 3wM&zDž-6 c|C $!lLvbE4?V}M"3 Rn>4o9jw0iO = gdv*n+ ]iExРM'ti<ڍ@)t:{l?$D~,kf,NqV]hqe٢?0BQn^' Eҗ iLqf餞 tVAPCYj8r*]}[́ZnH\aO尸1&xBhNF@X4X] w0=G6X͙7&#6wyPi: "8,/3,>o==ؠ@>!f` $Buz~@ӋYn]nS 876 <9k; S}ڊNHƱyL94Ww~W )W[o袠IU. SI[XђkGF)9cF&YUŖ KK}6hD I,w)Ű|*ďP~YkZMLƑ?s\\S-_ YM9&dPs [l&),Լ#mRBRVr@F(`q m=v ?d,>V"c !2F@ǃT/>,a|;T*3ԻU OUVq@{oT{"n)gwz 8崨{蛂!h}QT|~eo _ ʘ& ^q)Zgbx7ZDu8NWs,s&ձ':`H'Ecføs ]4DVO H`_\fHq*։d3R=텊0{5]zJ[3:{K,J+ m@CsdRC= {44E,$K~ 5ѐRWBKebc6MejZ '):b'.pqcN7VEPP 9XF%VV>x r2Z&S?gKNuPݑ{sbKBf(56e =V+'="EO>sg\ cHM7!JdCk8FZUB VCjr휽Qd'%JU3"?'qVItOn cwh^Xv{d 4Dʅ&0\K&+K쨿~ě#Z@]U|nD^FLhnܐ ̫\RAz쫊/`ez:[GZzS\K('2r~kTsQFS7Qcg$`t#UHxUo~Z҂mӴt( [/r2xI _A0WSpO,0nm3W5-1М *UI>AD[prGit.(Ցe[H6-k=pSEHE2?+~/I.B('&^RRt.*:QrpZ챍$榘^qjGz=u1DF̟)H6WM3`W(Wb6&I5uHl/ͧ}Q CFw8 M7n$43+`El(SjV+i}jz}j?#6>*[a7Ch拾^]ӧCSBM<DHyg]H$pZ4W0ZE->r?Q 9ҏ{!Js_OڂC7xS]& ҕQ:qfnl$;`ZIas 5YiFQh#C̈gdi>P.dITd?5"$-zEVwtj+@ѻ$h\CyA2ŠŬ׎"BlG0FW~| JhvOTFt _c@ |B_c.shǎ6~!y`96?Zz"0|cj<[ksKq63!3"ۏiL~Ugt&w e搮KsGJ< uV%[\|*F D}IB>>96!.}*~åu u*&FvWG}F ގmS= ʷ8Tl|svj^e7sGDFY ~G[ܪ?]5Ё-9E~L9/R^*TZr댘![^¹q 1c6Y^2YX { >g PbPB?IlPy'aP'80nA;3HМVʊ|SAvh&#WU}2  5^EI 3vH5`̘V*+h dDj&]8tb1yH5'b 2l4?0s04L`Πg|ٗP",i5nsߏ!RRҧjJj6&`㔟]pZl#*d)`党zz&g)X&I@{af.+48x3$A)ςobi_;&#S^1[Υi6+-N @A!<}G-?> ;~$Rgbxc9N/ރS[Lv®o˯IGmdj|m>T% 3zjBN `Y : 1]FD.I]4˜bMs2s鐙6dɆ҂_ԛ"CbV TYpfp!u;T2h 4XkJu i|]{$u6zj[-w~6#َ ft:5)h;^RXzl`pKN9#UV_75! ѭ26ك6GŶ)Sµ Trk'p3T=tXvU8U (Mm[XT.V&SfH*ugՆ`twu%X(}7uǭ,W0GwxM{JE#BTS]!r|f5)YR.*W Ё= 8yp ]41yj GJ/MjpIj#YN%AQ^ c& r-_c-@B b_I˽`%H:#JNsJ` Q|z/j߅%D@]olvwTi<^*~]݋(4B'LjXα`+:I,˥v#m0VEo.lW>qz0*D ±ԉ4"lYm92hWJevo0MXk{7H7[{W@x&sֱ*JeװLBk޴Vd.Lty#rmZCr5%d2aПCcLfC ܑ`ILndl.=]^'sRNrK]5*75ib3v M{<9`.;t4hbi#fekO"6,,y#V0f<^2cǫ a5ҟ (`>!>F5Οwhm >-]_ulWG< n )]KaX*BX|~mJ qIhjUy)俤u6~{ᩰSa˽ugҚg9gw͚! M̬L/ (I>9 fmq&'뫌ӥ6"0>Rs#,d"f:Ow6ޒ Ĉ\:@WqB, =2 9m$y%8[R}Gd/qJ:aV]AWJ E.56T'ERׅ5) Kr#06dq`_GiΔIӥH\ y>z_n=.mK81>t$(ofS Ia'48$" 9t珵۰"eeq)1-Km$iJHyG~If ͑Gu rǔv$X.B5[?\^?Kh#%-SxYZ6VC(os"ʋy#/mYWӧm8|ԕFsZ.V|82F{a('`tm։̾҄Tϕd]rX.:) M 8}0 v?ӌ}kޭ &,WL)IӸcHa,}冫[S=76,;=0֧8~rCPPC,kO5/ \b"a`F꥽/D0s#N)mR%qTC}#zۨgkҢ )rw9{ χ5_!I /9ά|*xFkTJ"MFC/K!fR!;[= u^K0g^ˣeoI1bO) ~;^Ydz9!Jwbq#˳k:IR=j7G~q{_|^Օ)S)NYeЁl+Q2̶9Wp#Kr9f ON2b IXE*6TpЈʈn!&?Nа%Y41 :io 0NO.vBN׶ձ?끿+kM 9>҆E#`7(*g[%kDa`_<bkFCa),}F"Eu878Iҵrom d XO%$йEz0E-IZ"T_.X!2gtۘ(Jg5,^L:v t@9`[&~M`A^1oZ4:)hm6WGH1j֊,asܳV˳9 M|K-IUm9ϥB{r"]  l藭rțpJeD.=!QpWoՠ8u# 4BCRxD]|qj$zqnʉEiZ` wv虊,ƣUʬ;Z]9/$1N?e?A%5*9l"5#ӯ{ѾQsM\7;`ТN!lir*r*6rպfMX#mCCwʆش /BXQ rΠ dϪxYCzsơT s߿#p Сt%snw IBU^ʡ#F)^~^`8Kspޘ?"XL&<3O5Qi|꧹Ŷ}4^~v_`ĸ^QJ i1rko lq`Ur/^؋e:op='d@'=_ㅫL@jnϬL5쏀N(% J<:=K\d_B+C@'T O@J#\Q)Qz;'׏>bRТ>U/ '?jh/-r׻h g^A4l͟żb\8BHu7tį ;{ދQ wb7k4=e~¢| ݋},LZ?>s6"5;P9,ox95}4R 5c҂mXuG6i>4/=bYt[g8"WTUWCvGBz-_(wTfٜ&2Аr'sJ"zW֯0FlHSdwVN.btڰj6:zqD}SFgؚj! gוH;"U 2J}  /7e$O['\:;ftMOT%~vϨU[ܬfMt44}z;!Q0^+E.6{8ō v6_1yWA DWԴu6afS*jc( ҳƉ{)1`J |+I͝Ƴ]IFa\aӢ^j\YẽJy+x&PO^!Iƍ"?[u s̵ZKk 1Nj#6 cUHCy cMTDfM@b +R47hG|s<وh@Ulou~{aLR|LgЩ"J;}= a|dѐsh.&U•>Ah ˶nHCLӊtV~۝LMYC2-췫(]E3#.fP C1. E[6,U^/ѧ5tW;Kwg),Brqz4cκ!: Yv7`~8z$Ob߹+7{76Tk/=qNYy %^JAѳ# ?f +qV24ߍM0(LCLq2=eƽAWK~Y-bK &_1#ۥwA*+TÕ;ЌW1_GG@Vlaq]x[C_ueEd9l&16y t# SM(G&1nX`ͳ8#o3j%Bb$aXL9e6ׇiпhMx7&zlD`L84ΕɞiW HJ<6kjQQ D 3{ow$x%:!B*!45FGGzK?>@7BjߢTGiN,ࣁݷ±UO>H1*vێm SG mR H0vCz 7,ƦTyB5/kNjj4QL;V/6R._@=,)nQL^)oz}Pף̋;>8ٰvB0A6PT J#ʉ mE8K49so302׽ֺ6Jt5ElA{>-|x]Na6 |z<Uչ>{u/ 90Y,;ガzÀ#Ӵ+ǪjYȶݨGFj`)tU(R\l/ ^0 r'YW83'O`r0>،V67 иE-u gvxR?rZM]E6;֫mZ(M% E"i,EtD h@Dd{ GbK}i K~htZ,oZyG2ߵq*cS9jTfayE=z!8rj)C[cnT. AԲ܍zDQ4j],,yU٦q4.:;k R3A3c̪Ęt-Q Li)9S()O-{*u6Q׍x]JS.)K!Z-`>݋gH'Ȭ֍jφ[moB@XBxnѣҚ##z2C}ԇ=#7 I*tnU0%-{K)IU׳VP1bʩa_TpQyH8-@êCQ4: %YQY ZRH9嶘a(s3H~&"xlQ{f<.kX3s){ j(jm C-*W](Teb_ksV* pkzRļ7dJqO ׅxDFԱha[YvE̊l£lN#sX"\n#mm4:Vv@7WkN/F4qaޘr4ɍ+Q]3|A~dk: 0FUCVƆIY% w=-#FMs]]*f'l|-V:@ېW3sS/;v/%h /ҢBX7uw#HJ/=t<ԓ޼(v!B$VxPlpDpAGbq2VjL imƮ#d½"L1+!pXJ(#!AKl*g)这!$e: (&k]h{o#b%[h0]|Cwu4ό`¥\}{N?+;f<w Χp(Xfg9oMI~&k(XLk8+xW*x H)6ƌ_t$-XOq)sQ%m=VYAe=!7!zX{$s 5qDfjNPťֱzGx %%vX29sT 7<`{)9NPoW6@ҚQ7#gciAV!qo 5)'9/Pe[9;L#{⽂`Q'dI $bBZFblv~r1eB2*iӜ^60a.^Sc8T~Hg+\˿(GzjzԛGE P_y$A3Y i[s "n[NH[*7 ~U8TI jnƛTh{ Hp@9]kB]2a+1,3]Sz\ShfM/Hk&Im g6ӷy!9Ő{C Z2pɴf!M4g- +I j<&V3B&)#yutY1ܔ.2{f]`X[ rTx:~UsÌo@n Obzpj5S~#Ḏ&;N=}mdy7^F'O2@j%y¼ )[(eƘ3 }#G0u<1x^f`.!b) =+z(/=P_@W;h :!ۿz,|zELډCq(}2ts+U`[ט7/wIQ[V5KCЬF;mۥkɏa%s7-/ i5*(p}e.>5yvl ;;΁KYq˻YNT̀lɦ1z6 1^Fy_9CH`-A+ӀwM!«YJC֨MeY  /8 5+h1 0[)`O w%AIlq< ]{5CNbLcVסpA׀3[ET';(JY$LOQ{mӒB-zu gKGO!WDz*=NS=$Fy烶ׇ fbl6fi6 JEUP UACQhR.ԣgh!ť+(5DWK> [vW+pZHYMx(/ NxNZ2/h&u rbrwjϝs;Z=gc*f,dKT[%f aR 7,x8(, i@]Xbelq1_m XV BO)vvx%;MGX\G5@|cϼO5ܔ'S"*` XxsE@Q#e%.\{Jl1y.&K>yE/Pp4{nrF<*e_C>MI{ٺ{pxs_n9! Vrw|,)ji 3J/"߹S!cN"GKʑ6мڛm|d=HvL<akZs?-(XZ94gK\}} 45嫿=H)`D >G,Xx<͗ ;zO|TL.*\@oNXF)y$Y 3 UdD6~w" HTRw gt}y{I-~@9 3;&tFie(@,Mp%)BzֲycƖ0O,`? g&^r?+ڻ0C,U Wӫ?ղM}Q> TSy_ܐ4۪ϟ-f,uJu4a&PQTDqU; &H n.Q% B=i3b.ft LUg(閷XxZAllOY=Ym;_J;9=aYD@UP)T<דʗ(HI\~ia3^}ۖM޷l)%+2&bKDwـ}BIBR # AJ"5.cnO?=i;E5tf`yzjo;OcEr[t8/?if g=Fئη&6O/m4IXt4L{`PeNmjCf'.R7<O6 "T@Hd<},MK=#Ig'h?5I~cKZ+~#[nLkyXo&(hkhOv &V| F?$.')67(ەUv?J*e!99/2\a70 *&`9#ΐ ,Kz1H|. s5Li00 6>4N&+PG?4"_I -FJF5b)MWKO'xC4/B@CԽ5(,GҀPpx(|Xt鸤3oYlAXf[;+SN JWٳ'e殨Ie,PdtswV>r\̗gm.l_ޢ7.}* @eUf֋]UTRϢ"Ѣ neVw]IDc'ϖjAl2&W"  sj"H8S9 \ղa>[e?-Yw6B%#?ZXӰEb]<+3BmŶ1`tO](czyM8W} hXN::٫hC t="Gm}Đ-3ƺ+bDBxE;B7g,'BQXeg+Y)`ancY 7^m}Y-NTÂ$iЕ.e*)DKRoS[@OdqO3-Vj{^ܩ11k酐^dgӢxQ4c ndOP&]hs(쫿{@p^X)81W8Qł*NXSBWRr8IAU'cq[/FB'BkZdvRb$`F$IL~p !%'4{:QOIǓ1g삃^QGG|.`41$e{D/-[jZ7c4@nYҥ6n'旦,MԅTNv3ߝ#!#tn(ؘ? cm8_BwO/49P~@wJ|7 mvb26LҀRDbF,CxUc@56 rZ z/UR ˣFQ7 ҨqP +h9[Ȟ ȪֱOW)L8wr/,Oܺ"3kx.o:kVÐY$6 < qז3Hւ>dU02<\P?M6w,74F/-B>]P6aUO (ˏG衷x:66nV6!0 v%(vi/Kٝ蔜\nя3t~䙳3V' r3#?Nbz/Ko%?i*Y+ &+ZBl1GT A n&;|'pxL2PõyWϨdp{ i^Eh(<48,5wif},sDRTM7%2lFu(jHbn+T$Hjf \*#5HQgU*?1{me 4i̴[&sk0|~ -F |h:*$M^?DDסya#+ \%; ?{-IoOfbp.Ke!+FBTk;| h;w+= ޅ {0*[mΚm{g:0aInY&[nd)rZNNj7PܛV& 2BQ RVBL@T%Yy` ^Q×$sḲCP=g]p- ؞U(?"($rHL:\vgT+k85DyrFlvd2vQ6/}*72 t,b# ܂Έ%Z;μZ)T:S2 } +Sl^ԖDd}:-ss15Ֆt,2'wFB54 B7VZ>HX] HmqwѦg6y*Ç-DI}hifd `W g@U;#I/"d>9`=S~2Vꃸ\qDs<\|AyS6K8"Ngs CEe->bTnɀ9ό'bP{_эR#&_{ԫdƺ qT|ti0<2VɅ]CJ#=+ 9(YǁH`&&,;2*%0IwyBl2Z8zcKZd[vI_x)Jo_`5=^F@_Kmq4Ae3f61#ޔ)o7};֩dUETzL@@L c9TO`smVSp)ES^&7{@dkYsЦgO!*{!xiܩ9@پU Y$L)tP\h ?W:xٖ{Qqn?E(h~@z^Zۜ% &m4TZTխ ` ҀU:j2NSf$(S.$ |6(#ښ ~b?![xsMs;?:,^eR;Z} F]=^nna:"Av6ذ=Qxh20 )*W8;' oշz7|,Q/ך5^ ']Q3];AuDT9S? PJ̹490~Wƾώ8õ}XfIb"dTI/2xmqK[QZeE1AasآK>8fga~\>{-¥/WMaICzY- Zu{$<UB[9ݢ'f0*tLcyZn\j'Ն(nܯ!u. ;>gsѯgrpҳ39@dF?zߡU4pV] v՚zSbuygKbo= v¶"iL]2sܩ4w޼F~r`:acY4fH`+{{u)W u>_Vb_6ZS8U!:D{(Z!w nT,eR1=VQV:Q$]H6Րd.fg:ج4DbK R.,w*עB*põ ̐Rx8 :+52H8sN#NJ{o]^,tmʄ/pA6\}Z@B<ħܔ/|n_ɅlF1X, 7:6 Nf 6ñϟ-Ah0WJ={`WL{[c OE+J|ۙAq/G32hش5 i6g %?4lVx ÷ω)wGw1 _jO5oo O$Jss18cn+QC]k'Yc$-S,t\ Jhʻ!<fJ _>ki!>LЄ[=t IHCXOSwa$LŷuЧ6)ᒢ5kE8Zxʚ X\a; {5.QHmd((>~ UlB<ZڢDG 8{2ZuQuϰ4/;ۉ3Gw4ӝf2HG۾>h/ Y eP\O|P>~_#N)$cz6<h(uV & mPIM(K 3^o^|O86½)4`5#s/n ū Bչ2ujiŕc<M{te8EDTDr"KlĂz>snkx;7ì?G$ }XWrѳSl܄.U*,%m4UufjT(,ske qMwLB6ֱx'/ w.3R-x; pua]+ IabHBX" 窪^9:xnb>vbUp@ 5*lf+50U. YzED|h)tK}9V6۰N1!'bu<*Jԉ#a'Jb ]n=++_bDĮBs@^?xIG;oIhazl4CgRu xIj@zә|lYԌ6Gs8 ѾA=" uhfmA0}G+aIyN;f^ݍbWj"t}/_;N}hRI-?9KJ^h0PFVcҞ;,;A n9}Wb`Z󼤝[3@F Z*H:p:+g?ަ1փٹtB9B`CPS'bpʣN]PD'>L)y͡1E (?CH ނr=>@^pTҍÏW"x5U&یCdbdq": *!" w ߕ̸8bw1im' Q;GKh 3FgӾʫEaDr] ȨYlͮNr8mqbJW^)hĦgkT'dr0 Xkz6=ܠ. =Eqb5z嚛QP@=f^B kmlC1B d:lnK7:k7n o b9R5 E~zdX 8xHʧ3c2D<5<;uᗭ Y,2Ef>I `0L^]Yr]޹'B~9yuTj#9 }ʃ> g=`tG{=m\N -F /]bڣЙugs[*}It[$GI_CP\_A螄I%hu78MaRSKPP}Tx+_Q [ S+nĢ"drM}E2 I@P>7D3Uo83¥tX枱L2-'Uc!h0tsl`asr"͸'KaD? xC{?e^%<w^:p]o܊~ZA,cfFNO@R.PeFkAeq>r$aYZyNRV$!m66Cq>UTQZASiKY Cd~hU;Нc}'&+PQj#\oUg=v~9/w%% ~GjWs:giySsًj")TGF<Xl F7&>͊q4؅v D4ܘ{op nXNz}Dx(q 6h,Y-w~yBOMwk7z\z4=bIF?ׁH^}X+|@EQ:WMGeݓF[Uk'ԈE{E߂K9: 8uC),E]z16|78Q =$06 6gh\Ip q'ߝXD3q*T R gM)PI;H&NUq(Hr^M֛丮I}tQ$~!SLVR^ARgm,i{\rvdl:g*;Nʁ(Lt:{ˁE^G^RgE, ˎtX/%·? P]H /,~Ŏŗۦ7ɚ֟>aul"h4_#rGؾC^Vl/浭EG{!fbnrhilk̢C̟>]OjM46ƷФ<ۡ+"d/?l:!XpȶWq8&vSM7gHpw',=@Ndž:偰k2IXbʈ0ͩtه5u$Y~iɤk+GG~vOd~~1ӕM™P<+g*uo L22^}Xb 8'~jTnH3K{00H`̙)[2 )]K`XYqg)`xLvȵ*'`-w} ??{ j*VoötA5C0 #w;XvnDm L郓1x `.xDyΒKi\\.;տJxom:6.~o[grJ$qvęwX唰/o3L$q nWß<9 Hz_|a8ZynZ>"M'\ͪ D&D,C`N2_: n m>2 3^l3`j"RN&^;o7, D >~JZ=avŴH\7~Fc:~ٌx42K4[; `Bm`y c`HQKIT3Ս^tJɬ$>ʬ+ *: }s^`Y0_&|JaҘEz!3YĊaMnoF6$Вd4NP rQ\J/**Į2"ܢP;q4Pv׻)GM.?2f^B_' @u4a[Ϙ78@t|x+Vf;| 7 eRw;2R;wb0S9dP{fy3ELBH4?b׼Jq+X3Y%H!BvpӲߝG; 67e'+.9 iHOӫ)$诺ru)*LMq%g2jC2qߔ|?ڲq`"mmJ"f;$d7`e ůʑ D YVaًuƠ+2{ =L%嶕L&xߢ8$*F&+QN uv&1C![59syD.2!qvzCic!ƐH>Ң:lʐw@ ￾19DLdN/sn(TzqbXWa.:xX$E= t/g(O8hݕ3pmyob"8NJ*L) {sĭJsU`~`_bM@nQLֿLpGK+P9[‡ؖHQwCT =h E9172nӫkjE7qwWKmqVkdsK@O-݄xP;WAp@oV1g.]H3Sȩa8 G-&C $(A){>|92yo+)rg!F[)Rfғ#go(J^$HNՉX\L*^|bY{>҄q˶m}{F1,O/zdTp`oNWIa3<|%fMɟgFνt׈5uWs:.e` ,Kt),o!U`Z$gG2rr:!/VyvU,+AO/1#29{+QxܹшHǍ>tw 3+_ݼtZz;ٌ轭"lg8ɣI"헆_ 7HIp[~5xNL /hBۨHoP1\S C 8<̑a=.Wi:~H$7rMoJ'`t- cwW&;0; q$T~9ݽ">6 `1fKʭW թfv}u(^\;#g`1ZӏKőYz 3)@T߇OawBI'dXħ_[|}U{sg]oc4R-Cv7P4g72?r\/ AQϵL4-s.HU7-%naڙKƆa4q@0}^E=- <+|My{(][F7̈{_Nn0Ɂ DS8OF#!dc@_5ڕM-"r1h<?~s5Do-͚ n#U/QŭZoxNsl| !1BG # DM/GS,(C"ߪ Up;0X%UG >asϔXWNP:0x!* Tg@~Tڤ8oAm&*aqkoЁՕO$.y̍]~؄;ʽ2Z#$}q mr *{դ>fhCT2"N"RX40߳' CpSG5y+48m_Ov:?4(ۈ:Sԇn"*jwmɡ(G,xQ[%:_QȑY!{4 o (100l/s-SU\d0f&Oj9w ŬЌ \fi)XOÆ mr}2/eOF*?.j_SH!'8Uߓu0Kτ>k>^*p6^ݝmJ39cZ <Y9%8/xtٔ\x hLj|ou4v;srQIثAF,3%\PAxV08VK/m5j7CٞIMXD BOWmf-BG5h{Zfwhįe]U4Lu %wl+(xF~͙ժT3>'ɻPw9μF: | c!5m)WA*5A)4ז@2}z7g!:k6M;-~Ҋ-{'2d4NO_?.&z9ShAIyuzׅr_ `7(lꪐ0gp(N 70 ڌuQHkAoD`zlRjgߢ*yhfs0Dy&xQr1$hUHu_;ѹ*(eM|%tZ1Ip?MSU<#Zdm++rV$Si[ 2|htYT~ix:sKEm;DiB S\Ә{a;j W&$ǷAƚw}V]233s deGKR E}1Ʋ'we~á(+~#y:&M&q{m:~L =vwRl_)4&i'j7r0JXgh~@nD5pD#PAxw}2nthAK S J?S:U]jA9W"AgOw\ v+@sI"'}?tʧ͐[ /] -WnO6C.MyP ~tۓ9ǽ)W2%Ȑgœ '-b)YSJCAWA-&ŌyzeoD1g-J]}\'sEB6X_қ|.l>}=@Rr'b퇙 [Ry<^O5Q/Uq NGfEa? x't!2F "bIY)\ ^kjxj7&opٞN{iܵlmŽ"~#%@z6ZI䒍sy-u&04 z@w?nZ0ݷRDZWrW~j0FSˋ!^⌊oPڿy*̼Q蛸|JK#׌ˈ DCmlУ{c=5껴R{.4ol-䱿_Е%arkdgk{@2:-EѕKB~%nY?KSi "mItd!_,}^Z:O[XHEg?KG04q~vR7 ϗ8 W@5 6SfKZ|#e`ڽKhYg?sH=.T ߜ]3ays ]uAd<:vE.q{-kFF쬒vRy Y۾m8*V5!#O;qw#cn `)׉ ~EXMnw=ړ\rzUrMjrR33駧Ѹ^40 voxiեJ2uVC/nNu&rGqbp>ɪe^t` UzjI*ϝIbh m^֖Yޢ<3qۭQf 724kLQ&pFi)x&[6Pc]hi.MM O.jw4o@, Nω D #@R}p^":RR!)V!M_Z; sP CeɪB.; 4|"pk}:cqKW+ٛ1֋du=ǯtb!_XI6Ѽ W7L3#;"k{c]H& %-^f|[ƅLc!$fן".YhPIn{7a+7 ?a,, m)`е{:Ft| AZ:h{J–%VzOt,èToDƗu.词swyB]ɯ%l K-ofj2W"r t{CLʡB"%[qg>\c.aVXa.[I3U}ԫH 6p>IEպ 2CQp'ԲsZ\M i@/elnm>,w0Б"j4X^Jz,s̈ -~nb+I  ;%.0jY5ql~)>~_lدkI]|*{]MbwI3eG(ICFL'(h❽Su6=en$2Kk Q_kv6mm;CiNCHHxN :h>8wvď*sm lu0CUhFCp )*UBMf7eQ~62,|Gi"?ϷW͍ "o VWU0dV69!Áɯj0V ͡^X¨k;X&Rp&.ATMzT>[N ,886*DqʄaPq!wLICB+juEwrtKǚ[. %WjUepOۚ۾rL}_ :\$} 8U2V[ 1'pmvR?^aVk^8nVpӖYaS 1d$ |IiY 7 RYЛ<6VȢtAͲbMOCmF6C^DH:+6Z[AjZIkܔs؍#gL6m;RMܪk~LIKe(PUC0,&QȽ B b`RAqC<,#ԕcR l-'YXw,;^%%DtPQZB"椂C_V"WbuV,qm^ A U:H /!\PC3{Wanץ^j|;h"D[cU@ދ)'B!cz 1Ji)wAT.iWK`(2P#IgrBy"ѡ&G8icS ٦,pKgڈaғC/t]pf{Fƺh pORazS&O^T7G=I>.M*r G1OE]X S*Yտ E oK_aӫCqM[؝!./k #-AXҔl9U&uKCRp̕S }\Qږ]ᾜ_c#{T*9Yw;k&n5t:[p]B^)[Ɉv6 ҨD eq8!dJV ;J${C~LȠfv6 `3IJ1Lv:rQO0@͒4XAi:EK[ ݖ{S{ dWwY ͚Z,Wt߫jE "e;IL +bO.=l\R{y >>)δtԓ_f<󮙽ցUkp&̻Ol)?1  /v{] Zʸ-I V׸&c=\ k(:^Hr 1x EQ o!oe)׷f^]Ll*5ot$.s@JKta c|]/w/q&lh5#=OZR @k-2Yd_G_8K',]{`,gCS>B907eV |$Ww9,Vn}K,RqH⅚ѥ5u xn96^ݭ[ Qȏ|gl`~pϪ x,k<8tJf!AfXPW&OGm$ Nd]aU&zTdVҥtex|G%.~_$佩4P>Jwa'g0=I+ j {<N\y"S߁%poda$ 6PL.H5i>9ߊ(D=)̹7- ;2| ceW:2HIi8Guj@ꎋ NqsPI5%ņ 6mQ2֝بP61oЁ{a}eC{*n/1aDb̚S_T~a]NQz/LyqZ~ۻ.]}2&HAP5M"29,vV*yC+ h=U`bo2He  Mpwo;m{6_ni-Ou?5L4bt2;1}8ı~x:ၒ}a_19@H&}-;t(BhD"䁳p>PɇekTMv*kT[Kma .ǔ<EK]<[2pfq:G_<s|>ITeg(+`^wik+w V2lS2r1 g>(gB7Qe:{1d VwX'#kQ+WN—*rߏ -jLu)/MW/in{?_esA9Y.Q_?.dI?To(XnVR!hgZ$ 4\euVlJ9-Q}#x ^DKюoT{&PCl޵ YNjna;0_LYzp5l)_v8ᴄ$259HǼpQbn⿈Lc$yŢk3<ؽI=ԙ<7PAP4"iW \zL-nHc -TaprkɑrdՖ6O|eYi]qlB=mgfn{6Fg-|`8 iY ̻B6|kFqdBG*J^!ثy B9߼n)] I@.Xwr؈}~ gE|Ib]~l<{9gPiaH!G 3Zk1i3AyQh짍CUt/*(DRjDjGSU_ Ѥjl毫oisN#d  ـz_=̧N+םz*qj!4ߗp|E"8=q$%0]{|u0s`Hq5f䴥;O  MM$>%DqRWSD$z:+x{yd"aX0h)'wYi(  *nV;(yÅ5tlX GazuZtX")avRT7HȤl%/?uh`H(Xv*oFḆDG`:)A3vEIt#+k{Q{cU2#z>Z ܘGt[}%F*3 5&:6$A;vR 1nl̇cyB!ZW ̓Z`8]50"7;n }I MW VIx)t\B VZWSzNj>5{0x!_YHF ơ%S:hi[*0B Zs{3ӭv)a} СL?GLaϤ &@|<. |3T+3õFdq% fW HO1 ,{ :w:xtل3LRNe K|K K`5*&_3 %P,t%U^KC:鋌ij>O~N#%vg^F^B-wwJ!IPFThk2b*G$w8}d)_W&c2+ 6#L#@"8'imem7#ΚNCgNzb+71 s A ;^{tTИ ~7͙\p$|},~)5> Twqͪח+09g]g^Èę512Ce~+/oL Q)q&Ťl%b=7^:51H&6K ]OƫiKA١qӦ{ 2mhQ/ DIvi9ؔ9TGF&/9'.`̭> 6FI֔߈gq7@ ).B}yʱP8ioKvCKEfw<; 0E~XlE6)q4Y9N. VRqZz/,)fCk{nX8%@FzL{;90PKc:0/N͌drG[""i""M@b],YK[FufC=><%0PbN\?0Җ 6,\G/%YK2DKV4诡T&{&Fr}6ݱc1DBMb(Z\k]ty+;6ݎRS /`=T˔[4^tt3/t;Er93X@> RTЈіG`H'+!N;Sp㡜\/3yl^J0q6Fw7RHAԻhR. ˶rWn{`@u8oZ1VJ4](V 29P)Wrʓ*+i$;g9ğncpɸ`t&ީ5T :[|x#)ȵE@CfN td\-Q2+\6Ji9q74UC-Z_Q0IRMz]i'MHC1;:ĝ.5ɗH*l1Do%,Pr*-9dh@\)0gb խOGv9+10!&Mr Ẑ.Gp <.+:nwT?cCv΍,߬Jsna$"ȒxQaIkufLJشPgڈWFVgح5lSP=]зrkQSD5ɘˊGȬ:*k"c8sO/o~pR3((=Vv-\q3f lxG3oF^y`c8QI-V*y^! ي^B5R%VgQ:lM%1'2HLAs@3۴p!QˤUxޞ$G d!S?َ=Tj)rSH|D m4 h?Io9gPo G]b=c)FOPt4PgBuڳv ЍѝԪ!>OfAkWE~Թ}3IHɥ;ΚsR9C=6f,])^l DP.gDd.V]ڻg|w9br!q.uqQS/Ӳ'G >:fhO4fD%HMеASJO xߖm2R'I n]Alx=l-ꑰ_ϑ6T~t6ŬrZPo|2xzp "!eA=d}-ClԢNdc)HPIE*-a5z WR琖uL^J")e X fc1*j^OV6hEI*X:Z ЅN*E# a!%o$ZS 4|ra$gt4Ja e+Bet{lI=uWܗ=;aX\SX- ǜ[B3_`E]iZtlFz  M^u4Ҕk$WLmqv-\*2Kvi3\@NYxA7(_BJs=},<%@sާ.05^ RHk'A% YߚL٭L שq9 T.MYo<͙xc@HcXj5~%hZHF~]ǥ`D-Fq4(lI1gQIiW "ЋG] Je\7ӖݖQnJ趁wDƏog n)|R ;zžLLeʝpt`5ؗ7ᎍFȁ믇  %  i&* G"prn81!$Ij0цclvk?b1O3+9Ve T$uOc#يc?,8)gQA ܉Jyad4=r/#s&o&v~$@$9Uϧ-'IANl$-f9j$0JP u+SNj IU6MЀFKIox;׭sfry+>Af O K0S?F6i ;Z 8/d%-6Wiri\Hܦ֣z-Dة|3WwW =Vb Ho'9>CvnE$/lk2G*Ptteqյ, ,-}-Z{n1EGj|3<hdĉ cǷ^W6hIilŧύf\mH`/ks&}PJmź+a q;٣[ %sCqriZeU4/yvWĘ(rkC'cZ&̚o'WFȗ-ʌ1G%ْi)wё~yK۪Ja#0Tz$.kN1&S5^OpXVJ>Mᾍ MN <\Jp`~g 3f ? sڿ7c-NEV# lڒ[+RGfJ1DQxprK3ҩH Qę ?ڬ 4odQ* _5@1Q u]s{*t ?qٳF&.Ȕ׀ڤHT` FG Uo<#!G }ydxumHD ωYvZC)GCy𬫱Pu v5Te-˗VNJ˛HczTZkCz֜IS.Zge܅AyE=ãeXo֣(YSFy3-F#^X:cMI:ani;!Ѽjqxyӎ2A_eഇ2X`Il_ ՘Rֿ&量M5oMbaOi S N .qMaPP///nrC;E@wfDBQ/ӳTu^WD2F*YrrHRw@cYf*9 XY#߆&]1t>To)u-5R5:1iLY mDY㛈G!s+m8 *K4HstvjZ3f*.?} wB(s"gs;crkࣕ/mI vʃmq2BEa (k\Cs$WG /2_ c", ,N&o"p&Nvqʅq%־!,ϲC3RJFЃzeg2(AO91ZœkL2Oq zG4+}F@]:W$i5SV⛷ ٸ EW80-y[~? 'Gxȅ盯Q+Z.DӨH.ۆ3`EËP:*`^l~tÙaK$ddP =`UMYzzM-0k2KLw˯MJ?-* 9WM9ƨҁnBmu2kM8, o$}kUZm͖qi^-5Cw ٮ?e~ ZD#Jz<2ÉJ*6y[3?3? b4Sa SbCAӄ^Jйlby6iRyO_!MV(^g͜vw jhN?8~hJ 7pEn_bxK/*svbV]L9hT-#iO*Gڌ0lU)69udWD-!(@DM`E}CZъ ~q gZiwP*Lo9ǀx"l~6ct)Ѳ[GITc5б4(bLdeOѓæAx۞Ÿ+J/l~wDp34BUԬd "x} 8A?>hAB$U^d 탺_ɾyQjTOSPP.HP8&߮GXжoBa^dO~0Bɦ8HTsfk)#?x zWjbj{QJ14'b9~U:$ҷ,bT&m#a{Y:ZQ7WW>O@÷an k1jteTyT݆p4쁰F^ ח.dH='}ŋgÿU2M4tWP|hmFl"Lu2LJ$,I4|汈Gp+0A=z(C7?3b.1ߥRv(OVwIVKTD)suḦ?Vqo b KFq/1,$S: YZ