pki-ca-10.5.18-17.el7_9> H HtxHFae ?*}}wZ}ШJu~Ozle(\vTu@nỀ1ha54663daf47a49875a7638259e84800d1eb94edc`t7C>fVFae ?*}}SB+@kN4rJ[&~LɌ݋!9=0&X&l>8t?dd   E         $ B H Pii i i <i p%i rixPi]iji08 \  (A8H9:G0iHiIxiXY\i]i^bdhemfplrtČiu0iv wixּi`Cpki-ca10.5.1817.el7_9Certificate System - Certificate AuthorityThe Certificate Authority (CA) is a required PKI subsystem which issues, renews, revokes, and publishes certificates as well as compiling and publishing Certificate Revocation Lists (CRLs). The Certificate Authority can be configured as a self-signing Certificate Authority, where it is the root CA, or it can act as a subordinate CA, where it obtains its own signing certificate from a public CA. This package is one of the top-level java-based Tomcat PKI subsystems provided by the PKI Core used by the Certificate System. ================================== || ABOUT "CERTIFICATE SYSTEM" || ================================== Certificate System (CS) is an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments. PKI Core contains ALL top-level java-based Tomcat PKI components: * pki-symkey * pki-base * pki-base-python2 (alias for pki-base) * pki-base-python3 * pki-base-java * pki-tools * pki-server * pki-ca * pki-kra * pki-ocsp * pki-tks * pki-tps * pki-javadoc which comprise the following corresponding PKI subsystems: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) Python clients need only install the pki-base package. This package contains the python REST client packages and the client upgrade framework. Java clients should install the pki-base-java package. This package contains the legacy and REST Java client packages. These clients should also consider installing the pki-tools package, which contain native and Java-based PKI tools and utilities. Certificate Server instances require the fundamental classes and modules in pki-base and pki-base-java, as well as the utilities in pki-tools. The main server classes are in pki-server, with subsystem specific Java classes and resources in pki-ca, pki-kra, pki-ocsp etc. Finally, if Certificate System is being deployed as an individual or set of standalone rather than embedded server(s)/service(s), it is strongly recommended (though not explicitly required) to include at least one PKI Theme package: * dogtag-pki-theme (Dogtag Certificate System deployments) * dogtag-pki-server-theme * redhat-pki-server-theme (Red Hat Certificate System deployments) * redhat-pki-server-theme * customized pki theme (Customized Certificate System deployments) * -pki-server-theme NOTE: As a convenience for standalone deployments, top-level meta packages may be provided which bind a particular theme to these certificate server packages.aesl7.fnal.gov%'Scientific LinuxScientific LinuxGPLv2Scientific LinuxSystem Environment/Daemonshttp://pki.fedoraproject.org/linuxnoarch=mL+1l[#tR#1J6 _ S }F}F+ g%~~[G7(b)[J2 O,", +Bf PEml]P'nz1{{% *S*L$,kI,A,:+A+3&u9 ;#%##"vSy "`./9/]   Q q >#E/#+{B/'m)H nrtknvpyi  *L*?5%C%c*m;c=O? 9%9RU][  T \71 0VCCF6CQ& "Y"\><bc q-  dF r- ~-d>Ed,g>QB 1"?%I7Px]%A큤AA큤AA큤A큤AA큤A큤AAA큤A큤AAA큤A큤A큤A큤A큤A큤A큤A큤aeg^2ae_aeQaeQaeaeQaeQ^2^2^2^2ae^2^2aeae^2^2^2^2^2^2^2^2^2^2^2^2ae^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2aeQ^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2aeQaeQ^2^2^2^2^2^2ae^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2aeae^2^2^2ae^2^2^2^2^2^2^2^2^2^2^2aeaeae^2^2^2ae^2^2^2^2^2^2^2^2^2^2^2^2^2^2ae^2^2^2aeQ^2aeQaeQaeQ^2^2aeQ^2^2^2aeQaeQaeQaeQaeQaeQaeQaeQaeQ^2^2aeR^2aeQ^2^2^2^2^2^2^2aeR^2^2aeQ^2^2^2^2^2^2^2aeQ^2^2^2^2^2^2ae^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2ae^2^2^2^2^2aeQ^2^2^2^2^2^2^2aeQ^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2ae^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2aeQ^2^2^2^2aeQ^2^2^2^2^2^2^2ae^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^2^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.jar/usr/share/java/pki/pki-certsrv.jar/usr/share/java/pki/pki-cms.jar/usr/share/java/pki/pki-cmsbundle.jar/usr/share/java/pki/pki-cmscore.jar/usr/share/java/pki/pki-cmsutil.jar/usr/share/java/pki/pki-nsutil.jar/usr/share/pki/server/webapps/pki/admin/consolerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpki-core-10.5.18-17.el7_9.src.rpmpki-ca    java-1.8.0-openjdk-headlesspki-serverrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)systemd-unitssystemd-unitssystemd-unitsrpmlib(PayloadIsXz)10.5.18-17.el7_93.0.4-14.6.0-14.0-15.2-14.11.3aA@a`@``e@`6?`%@_$_@_@^V@^@^@^U@^=@^@^]]@]@]]v>]R@] u@\\@\f\T4\R@\\U@\[@[{[l,[`O@[U@[>@[d@[@[o[@ZUZ@Z@ZZxG@Zg#Z.s@Z@Z ZYYY@Y@Y@YoIYlYGY>@Y5GY-^Y$$@Y"Y@Y#@X@XX@XO@X*XRXOX!@X&X2@WWҤ@WίW#W:WWt@W{@Wu WgWV@WV@WV@WV@WV@WV@W 10.5.18-17Dogtag Team 10.5.18-16Dogtag Team 10.5.18-15Dogtag Team 10.5.18-14Dogtag Team 10.5.18-13Dogtag Team 10.5.18-12Dogtag Team 10.5.18-11Dogtag Team 10.5.18-10Dogtag Team 10.5.18-9Dogtag Team 10.5.18-8Dogtag Team 10.5.18-7Dogtag Team 10.5.18-6Dogtag Team 10.5.18-5Dogtag Team 10.5.18-4Dogtag Team 10.5.18-3Dogtag Team 10.5.18-2Dogtag Team 10.5.18-1Dogtag Team 10.5.17-6Dogtag Team 10.5.17-5Dogtag Team 10.5.17-4Dogtag Team 10.5.17-3Dogtag Team 10.5.17-2Dogtag Team 10.5.17-1Dogtag Team 10.5.16-3Dogtag Team 10.5.16-2Dogtag Team 10.5.16-1Dogtag Team 10.5.9-13Dogtag Team 10.5.9-12Dogtag Team 10.5.9-11Dogtag Team 10.5.9-10Dogtag Team 10.5.9-9Dogtag Team 10.5.9-8Dogtag Team 10.5.9-7Dogtag Team 10.5.9-6Dogtag Team 10.5.9-5Dogtag Team 10.5.9-4Dogtag Team 10.5.9-3Dogtag Team 10.5.9-2Dogtag Team 10.5.9-1Dogtag Team 10.5.1-13.1Dogtag Team 10.5.1-13Dogtag Team 10.5.1-12Dogtag Team 10.5.1-11Dogtag Team 10.5.1-10Dogtag Team 10.5.1-9Dogtag Team 10.5.1-8Dogtag Team 10.5.1-7Dogtag Team 10.5.1-6Dogtag Team 10.5.1-5Dogtag Team 10.5.1-4Troy Dawson - 10.5.1-3Dogtag Team 10.5.1-2Dogtag Team 10.5.1-1Dogtag Team 10.5.0-1Dogtag Team 10.4.1-15Dogtag Team 10.4.1-14Dogtag Team 10.4.1-13Dogtag Team 10.4.1-12Dogtag Team 10.4.1-11Dogtag Team 10.4.1-10Dogtag Team 10.4.1-9Dogtag Team 10.4.1-8Dogtag Team 10.4.1-7Dogtag Team 10.4.1-6Dogtag Team 10.4.1-5Dogtag Team 10.4.1-4Dogtag Team 10.4.1-3Dogtag Team 10.4.1-2Dogtag Team 10.4.1-1Dogtag Team 10.4.0-1Dogtag Team 10.3.3-18Dogtag Team 10.3.3-17Dogtag Team 10.3.3-16Dogtag Team 10.3.3-15Dogtag Team 10.3.3-14Dogtag Team 10.3.3-13Dogtag Team 10.3.3-12Dogtag Team 10.3.3-11Dogtag Team 10.3.3-10Dogtag Team 10.3.3-9Dogtag Team 10.3.3-8Dogtag Team 10.3.3-7Dogtag Team 10.3.3-6Dogtag Team 10.3.3-5Dogtag Team 10.3.3-3Dogtag Team 10.3.3-2Dogtag Team 10.3.3-1Dogtag Team 10.3.3-0.1Dogtag Team 10.3.2-5Dogtag Team 10.3.2-4Dogtag Team 10.3.2-3Dogtag Team 10.3.2-2Dogtag Team 10.3.2-1Dogtag Team 10.3.2-0.1Dogtag Team 10.3.1-1Dogtag Team 10.3.0-1Dogtag Team 10.3.0.b1-1Dogtag Team 10.3.0.a2-2Dogtag Team 10.3.0.a2-1Dogtag Team 10.3.0.a1-2Dogtag Team 10.3.0.a1-1Dogtag Team 10.3.0-0.5Dogtag Team 10.3.0-0.4Dogtag Team 10.3.0-0.3Dogtag Team 10.3.0-0.2Dogtag Team 10.3.0-0.1Dogtag Team 10.2.7-0.3Tomas Radej - 10.2.7-0.2Dogtag Team 10.2.7-0.1Dogtag Team 10.2.6-1Dogtag Team 10.2.6-0.3Dogtag Team 10.2.6-0.2Dogtag Team 10.2.6-0.1Dogtag Team 10.2.5-1Dogtag Team 10.2.5-0.2Dogtag Team 10.2.5-0.1Dogtag Team 10.2.4-1Dogtag Team 10.2.4-0.2Dogtag Team 10.2.4-0.1Dogtag Team 10.2.3-1Dogtag Team 10.2.3-0.1Dogtag Team 10.3.0-0.1Dogtag Team 10.2.3-0.1Dogtag Team 10.2.2-1Dogtag Team 10.2.2-0.1Dogtag Team 10.2.1-1Matthew Harmsen - 10.2.1-0.4Ade Lee 10.2.1-0.3Christina Fu 10.2.1-0.2Dogtag Team 10.2.1-0.1Ade Lee 10.2.0-3Matthew Harmsen - 10.2.0-2Dogtag Team 10.2.0-1Matthew Harmsen - 10.2.0-0.10Matthew Harmsen - 10.2.0-0.9Matthew Harmsen - 10.2.0-0.8Fedora Release Engineering - 10.2.0-0.5Jack Magne - 10.2.0-0.7Matthew Harmsen - 10.2.0-0.6Matthew Harmsen - 10.2.0-0.5Ade Lee - 10.2.0-0.4Fedora Release Engineering - 10.2.0-0.3Michael Simacek - 10.2.0-0.2Dogtag Team 10.2.0-0.1Ade Lee 10.1.0-1Ade Lee 10.1.0-0.14Ade Lee 10.1.0-0.13Ade Lee 10.1.0-0.12Ade Lee 10.1.0-0.11Endi S. Dewata 10.1.0-0.10Abhishek Koneru 10.1.0.0.9Abhishek Koneru 10.1.0.0.8Endi S. Dewata 10.1.0-0.7Endi S. Dewata 10.1.0-0.6Endi S. Dewata 10.1.0-0.5Ade Lee 10.1.0-0.4Endi S. Dewata 10.1.0-0.3Matthew Harmsen 10.1.0-0.2Ade Lee 10.1.0-0.1Endi S. Dewata 10.0.2-5Ade Lee 10.0.2-4Ade Lee 10.0.2-3Endi S. Dewata 10.0.2-2Ade Lee 10.0.2-1Ade Lee 10.0.2-0.8Endi S. Dewata 10.0.2-0.7Endi S. Dewata 10.0.2-0.6Ade Lee 10.0.2-0.5Endi S. Dewata 10.0.2-0.4Endi S. Dewata 10.0.2-0.3Endi S. Dewata 10.0.2-0.2Endi S. Dewata 10.0.2-0.1Endi S. Dewata 10.0.1-9Ade Lee 10.0.1-8Endi S. Dewata 10.0.1-7Matthew Harmsen 10.0.1-6Endi S. Dewata 10.0.1-5Endi S. Dewata 10.0.1-4Matthew Harmsen 10.0.1-3Matthew Harmsen 10.0.1-2Ade Lee 10.0.1-1Matthew Harmsen 10.0.0-5Matthew Harmsen 10.0.0-4Ade Lee 10.0.0-3Ade Lee 10.0.0-2Ade Lee 10.0.0-1Matthew Harmsen 10.0.0-0.56.b3Endi S. Dewata 10.0.0-0.55.b3Endi S. Dewata 10.0.0-0.54.b3Ade Lee 10.0.0-0.53.b3Ade Lee 10.0.0-0.52.b3Endi S. Dewata 10.0.0-0.51.b2Endi S. Dewata 10.0.0-0.50.b2Matthew Harmsen 10.0.0-0.49.b2Ade Lee 10.0.0-0.48.b2Matthew Harmsen 10.0.0-0.47.b1Ade Lee 10.0.0-0.46.b1Ade Lee 10.0.0-0.45.b1Ade Lee 10.0.0-0.44.b1Ade Lee 10.0.0-0.43.b1Ade Lee 10.0.0-0.42.b1Ade Lee 10.0.0-0.41.b1Ade Lee 10.0.0-0.40.b1Endi S. Dewata 10.0.0-0.40.a2Endi S. Dewata 10.0.0-0.39.a2Ade Lee 10.0.0-0.38.a2Endi S. Dewata 10.0.0-0.37.a2Ade Lee 10.0.0-0.36.a2Endi S. Dewata 10.0.0-0.36.a1Endi S. Dewata 10.0.0-0.35.a1Endi S. Dewata 10.0.0-0.34.a1Ade Lee 10.0.0-0.33.a1Matthew Harmsen 10.0.0-0.32.a1Endi S. Dewata 10.0.0-0.31.a1Endi S. Dewata 10.0.0-0.30.a1Endi S. Dewata 10.0.0-0.29.a1Endi S. Dewata 10.0.0-0.28.a1Endi S. Dewata 10.0.0-0.27.a1Endi S. Dewata 10.0.0-0.26.a1Endi S. Dewata 10.0.0-0.25.a1Endi S. Dewata 10.0.0-0.24.a1Matthew Harmsen 10.0.0-0.23.a1Endi S. Dewata 10.0.0-0.22.a1Endi S. Dewata 10.0.0-0.21.a1Matthew Harmsen 10.0.0-0.20.a1Matthew Harmsen 10.0.0-0.19.a1Matthew Harmsen 10.0.0-0.18.a1Endi S. Dewata 10.0.0-0.17.a1Matthew Harmsen 10.0.0-0.16.a1Ade Lee 10.0.0-0.15.a1Christina Fu 10.0.0-0.14.a1Endi S. Dewata 10.0.0-0.13.a1Endi S. Dewata 10.0.0-0.12.a1Ade Lee 10.0.0-0.11.a1Matthew Harmsen 10.0.0-0.10.a1Matthew Harmsen 10.0.0-0.9.a1Jack Magne 10.0.0-0.8.a1Matthew Harmsen 10.0.0-0.7.a1Endi S. Dewata 10.0.0-0.6.a1Ade Lee 10.0.0-0.5.a1Endi S. Dewata 10.0.0-0.4.a1Matthew Harmsen 10.0.0-0.3.a1Matthew Harmsen 10.0.0-0.2.a1Nathan Kinder 10.0.0-0.1.a1Ade Lee 9.0.16-3Endi S. Dewata 9.0.16-2Matthew Harmsen 9.0.16-1Matthew Harmsen 9.0.15-1Matthew Harmsen 9.0.14-1Ade Lee 9.0.13-1Matthew Harmsen 9.0.12-1Matthew Harmsen 9.0.11-1Matthew Harmsen 9.0.10-1Matthew Harmsen 9.0.9-1Matthew Harmsen 9.0.8-2Matthew Harmsen 9.0.8-1Matthew Harmsen 9.0.7-1Matthew Harmsen 9.0.6-2Matthew Harmsen 9.0.6-1Matthew Harmsen 9.0.5-2Matthew Harmsen 9.0.5-1Matthew Harmsen 9.0.4-1Matthew Harmsen 9.0.3-2Matthew Harmsen 9.0.3-1Matthew Harmsen 9.0.2-1Matthew Harmsen 9.0.1-3Matthew Harmsen 9.0.1-2Matthew Harmsen 9.0.1-1Matthew Harmsen 9.0.0-3Matthew Harmsen 9.0.0-2Matthew Harmsen 9.0.0-1- ########################################################################## - # RHEL 7.9 (Batch Update 8): - ########################################################################## - Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx response from CA REST API: 500 [ftweedal, ckelley] - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)- ########################################################################## - # RHEL 7.9 (Batch Update 8): - ########################################################################## - Bugzilla Bug 1958277 - PKCS10Client EC Attribute Encoding [cfu] - Bugzilla Bug 1958788 - ipa: ERROR: Request failed with status 500: Non-2xx response from CA REST API: 500 [ftweedale, ckelley] - ########################################################################## - # RHCS 9.7 (Batch Update 8): - ########################################################################## - Bugzilla Bug 1959937 - TPS Allowing Token Transactions while the CA is Down [cfu] - Bugzilla Bug 1979710 - TPS Not properly enforcing Token Profile Separation [cfu]- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1905374 - restrict EE profile list and enrollment submission per LDAP group without immediate issuance [rhel-7.9.z] (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 7)- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1911472 - Revoke via REST API not working when Agent certificate not issued by CA [rhel-7.9.z] (cfu) - Bugzilla Bug 1914587 - RHEL IPA PKI - Failed to read product version String.java.io.FileNotFoundException (ckelley) - Bugzilla Bug 1942687 - TPS not populating Token Policy, or switching PIN_RESET=YES to NO [rhel-7.9.z] (jmagne) - Bugzilla Bug 1955633 - Recovery of Keys migrated to latest version of KRA fail to recover and result in Null Point Exception [rhel-7.9.z] (jmagne) - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1949136 - PKI instance creation failed with new 389-ds-base build (jmagne) - Bugzilla Bug 1949656 - CRMF requests with extensions other than SKID cannot be processed (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.5.18 in RHCS 9.7 (Batch Update 6)- Change variable 'TPS' to 'tps' - ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates profiles, audit for IPA (edewata) - ########################################################################## - # Backported CVEs (ascheel): - ########################################################################## - Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token parameters in TPS resulting in stored XSS [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site scripting (XSS) in the pki-tps web Activity tab [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile creation [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site Scripting in 'path length' constraint field in CA's Agent page [rhel-7.9.z] (dmoluguw, ascheel) - Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site scripting in getcookies?url= endpoint in CA [rhel-7.9.z] (dmoluguw, ascheel) - Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab [rhel-7.9.z] (ascheel) - Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne) - ########################################################################## - Update to jquery v3.4.1 (ascheel) - Update to jquery-i18n-properties v1.2.7 (ascheel) - Update to backbone v1.4.0 (ascheel) - Upgrade to underscore v1.9.2 (ascheel) - Update to patternfly v3.59.3 (ascheel) - Update to jQuery v3.5.1 (ascheel) - Upgrade to bootstrap v3.4.1 (ascheel) - Link in new Bootstrap CSS file (ascheel) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug 1883639 - Add KRA Transport and Storage Certificates profiles, audit for IPA (edewata) - ########################################################################## - # Backported CVEs (ascheel): - ########################################################################## - Bugzilla Bug 1724697 - CVE-2019-10180 pki-core: unsanitized token parameters in TPS resulting in stored XSS [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1725128 - CVE-2019-10178 pki-core: stored Cross-site scripting (XSS) in the pki-tps web Activity tab [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1791100 - CVE-2020-1696 pki-core: Stored XSS in TPS profile creation [certificate_system_9-default] (edewata, ascheel) - Bugzilla Bug 1724688 - CVE-2019-10146 pki-core: Reflected Cross-Site Scripting in 'path length' constraint field in CA's Agent page [rhel-7.9.z] (dmoluguw, ascheel) - Bugzilla Bug 1789843 - CVE-2019-10221 pki-core: reflected cross site scripting in getcookies?url= endpoint in CA [rhel-7.9.z] (dmoluguw, ascheel) - Bugzilla Bug 1724713 - CVE-2019-10179 pki-core: pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab [rhel-7.9.z] (ascheel) - Bugzilla Bug 1798011 - CVE-2020-1721 pki-core: KRA vulnerable to reflected XSS via the getPk12 page [rhel-7.9.z] (ascheel,jmagne) - ########################################################################## - Update to jquery v3.4.1 (ascheel) - Update to jquery-i18n-properties v1.2.7 (ascheel) - Update to backbone v1.4.0 (ascheel) - Upgrade to underscore v1.9.2 (ascheel) - Update to patternfly v3.59.3 (ascheel) - Update to jQuery v3.5.1 (ascheel) - Upgrade to bootstrap v3.4.1 (ascheel) - Link in new Bootstrap CSS file (ascheel) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- Bugzilla Bug #1883639 - additional fix to upgrade script (edewata)- Bugzilla Bug #1883639 - additional support on upgrade for audit cert profile and auditProfileUpgrade + auditProfileUpgrade part 2 (cfu)- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug #1883639 - add profile caAuditSigningCert (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1710978 - TPS - Add logging to tdbAddCertificatesForCUID if - # Bugzilla Bug #1858860 - TPS - Update Error Codes returned to client - # Bugzilla Bug #1858861 - TPS - Server side key generation is not working - # Bugzilla Bug #1858867 - TPS does not check token cuid on the user- Patch for CMCResponse tool - Bugzilla Bug #1710109 - add RSA PSS support - fix CMCResponse tool (jmagne)- Patch for CMC Credential Error, RSA PSS typo, and new profile for directory-authentication-based Server-Side keygen - ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug #1710109 - add RSA PSS support (jmagne) - Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- Updated jss dependencies - Bugzilla Bug #1710109 - add RSA PSS support - fix SHA512 (jmagne)- ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE additional support and touch-up (cfu) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1710975 - TPS - Searching the certificate DB for a brand new- Updated jss dependencies - ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug #1794213 - Server-Side keygen Enrollment for EE (cfu) - Bugzilla Bug #1809273 - CRL generation performs an unindexed search (jmagne) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1549307 - No default TPS Auditor group (ascheel)- Bugzilla Bug #1710109 - add RSA PSS support - fix IPA installer (jmagne)- Updated jss dependencies - ########################################################################## - # RHEL 7.9: - ########################################################################## - Bugzilla Bug #1774174 - Rebase pki-core from 10.5.17 to 10.5.18 (RHEL) - ########################################################################## - # RHCS 9.7: - ########################################################################## - # Bugzilla Bug #1774177 - Rebase redhat-pki, redhat-pki-theme, pki-core, and - # Bugzilla Bug #1774181 - Update RHCS version of CA, KRA, OCSP, and TKS so- ########################################################################## - # RHEL 7.8: - ########################################################################## - Bugzilla Bug #1723008 - ECC Key recovery failure with CKR_TEMPLATE_INCONSISTENT (cfu) - Bugzilla Bug #1774282 - pki-server-nuxwdog template has pid file name with non-breakable space char encoded instead of 0x20 space char (ascheel) - ########################################################################## - # RHCS 9.6: - ########################################################################## - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.8: - ########################################################################## - Bugzilla Bug #1523330 - CC: missing audit event for CS acting as TLS client (cfu) - ########################################################################## - # RHCS 9.6: - ########################################################################## - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- Include 'pistool' in the 'pki-tools' package- ########################################################################## - # RHEL 7.8: - ########################################################################## - Bugzilla Bug #1445479 - KRATool does not support netkeyKeyRecovery attribute (dmoluguw) - Bugzilla Bug #1534013 - Attempting to add new keys using a PUT KEY APDU to a token that is loaded only with the default/factory keys (Key Version Number 0xFF) returns an APDU with error code 0x6A88. (jmagne) - Bugzilla Bug #1709585 - PKI (test support) for PKCS#11 standard AES KeyWrap for HSM support (cfu, ftweedal) - Bugzilla Bug #1748766 - number range depletion when multiple clones created from same master (ftweedal) - ########################################################################## - # RHCS 9.6: - ########################################################################## - # Bugzilla Bug #1520258 - TPS token search fails to find entries , LDAP filter - # Bugzilla Bug #1535671 - RFE to have the users be able to use the- ########################################################################## - # RHEL 7.8: - ########################################################################## - Bugzilla Bug #1523330 - CC: missing audit event for CS acting as TLS client (cfu) - Bugzilla Bug #1597727 - CA - Unable to change a certificate’s revocation reason from superceded to key_compromised (rhcs-maint) - ########################################################################## - # RHCS 9.6: - ########################################################################## - # Bugzilla Bug #1470410 - TPS doesn't update revocation status when - # Bugzilla Bug #1470433 - Add supported transitions to TPS (rhcs-maint) - # Bugzilla Bug #1585722 - TMS - PKISocketFactory – Modify Logging to Allow - # Bugzilla Bug #1642577 - TPS – Revoked Encryption Certificates Marked as- Updated jss, nuxwdog, and tomcatjss dependencies - ########################################################################## - # RHEL 7.8: - ########################################################################## - Bugzilla Bug #1733586 - Rebase pki-core from 10.5.16 to 10.5.17 (RHEL) - ########################################################################## - # RHCS 9.6: - ########################################################################## - # Bugzilla Bug #1718418 - Update RHCS version of CA, KRA, OCSP, and TKS so - # Bugzilla Bug #1733588 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.7: - ########################################################################## - Bugzilla Bug #1638379 - PKI startup initialization process should not depend on LDAP operational attributes [ftweedal] - ########################################################################## - # RHCS 9.5: - ########################################################################## - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.7: - ########################################################################## - Bugzilla Bug #1491453 - Need Method to Include SKI in CA Signing Certificate Request [ftweedal] - ########################################################################## - # RHCS 9.5: - ########################################################################## - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- Updated jss dependencies - ########################################################################## - # RHEL 7.7: - ########################################################################## - Bugzilla Bug #1633422 - Rebase pki-core from 10.5.1 to 10.5.16 (RHEL) - ########################################################################## - # RHCS 9.5: - ########################################################################## - # Bugzilla Bug #1633423 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- Updated jss dependencies - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1671245 - CC: unable to verify cert before import [rhel-7.6.z] [manpage] (ascheel) - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL) [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)- Updated jss dependencies - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1671245 - CC: unable to verify cert before import [rhel-7.6.z] (ascheel) - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL) [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)- Updated jss dependencies - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1671245 - CC: unable to verify cert before import [rhel-7.6.z] (ascheel) - Bugzilla Bug #1671303 - CC: Upgrade scripts for audit event names (RHEL) [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1671586 - CC: Upgrade scripts for audit event names (RHCS)- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1659939 - CC: Simplifying Web UI session timeout configuration [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA, - # Added Batch Update Information to Product Version (mharmsen)- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1657922 - CC: CA/OCSP startup fail on SystemCertsVerification if enableOCSP is true [rhel-7.6.z] (jmagne) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1645262 - pkidestroy may not remove all files [rhel-7.6.z] (dmoluguw) - Bugzilla Bug #1645263 - Auth plugins leave passwords in the access log and audit log using REST [rhel-7.6.z] (dmoluguw) - Bugzilla Bug #1645429 - pkispawn fails due to name collision with /var/log/pki/ [rhel-7.6.z] (dmoluguw) - Bugzilla Bug #1655951 - CC: tools supporting CMC requests output keyID needs to be captured in file [rhel-7.6.z] (cfu) - Bugzilla Bug #1656297 - Unable to install with admin-generated keys [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,- Require "tomcatjss >= 7.2.1-8" as a build and runtime requirement - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1632116 - CC: missing audit event for CS acting as TLS client [rhel-7.6.z] (cfu) - Bugzilla Bug #1632120 - Unsupported RSA_ ciphers should be removed from the default ciphers list [rhel-7.6.z] (cfu) - Bugzilla Bug #1632615 - Permit certain SHA384 FIPS ciphers to be enabled by default for RSA and ECC . . . [rhel-7.6.z] (cfu) - Bugzilla Bug #1632616 - X500Name.directoryStringEncodingOrder overridden by CSR encoding (coverity changes) [rhel-7.6.z] (mharmsen) - Bugzilla Bug #1633104 - CMC: add config to allow non-clientAuth [rhel-7.6.z] (cfu) - Bugzilla Bug #1636490 - Installation of CA using an existing CA fails [rhel-7.6.z] (edewata) - Bugzilla Bug #1643878 - pki cli command for RHCS doesn't prompt for a password [rhel-7.6.z] (edewata) - Bugzilla Bug #1643879 - CC: Identify version/release of pki-ca, pki-kra, pki-ocsp, pki-tks, and pki-tps remotely [RHEL] [rhel-7.6.z] (cfu, jmagne) - Bugzilla Bug #1643880 - PKI subsystem process is not shutdown when there is no space on the disk to write logs [rhel-7.6.z] (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1639836 - CC: Identify RHCS version of CA, KRA,- Updated nuxwdog dependencies - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #673182 - ECC keys not supported for signing audit logs (cfu) - Bugzilla Bug #1593805 - Better understanding of NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu) - Bugzilla Bug #1601071 - Certificate generation happens with partial attributes in CMCRequest file (cfu) - Bugzilla Bug #1601569 - CC: Enable all config audit events (cfu) - Bugzilla Bug #1608375 - CMC Revocations throws exception with same reqIssuer & certissuer (cfu) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0 with latest version (abokovoy) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1548203 - pki console configurations that involves ldap passwords leave the plain text password in signed audit logs (cfu) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1494591 - keyGen fails when only Identity- Re-spin alpha builds- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden by CSR encoding (cfu) - Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a certificate (ftweedal) - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in SharedToken scenario's (cfu) - Bugzilla Bug #1550742 - Address ECC profile overrides (cfu) - Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu) - Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu) - Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request authenticated through SharedToken (cfu) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a certifcate (ftweedal) - Bugzilla Bug #1544843 - ExternalCA: Installation failed during csr generation with ecc (rrelyea, gkapoor) - Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest upstream 10.5.x (RHEL) (mharmsen) - Bugzilla Bug #1580394 - CMC CRMF requests result in InvalidKeyFormatException when signing algorithm is ECC (cfu) - Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access (ftweedal, cfu) - Bugzilla Bug #1585866 - CRMFPopClient tool - should allow option to do no key archival (cfu) - Bugzilla Bug #1588655 - Cert validation for installation with external CA cert (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- Rebuild due to build system database problem- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry in a certifcate [rhel-7.5.z] (ftweedal) - Bugzilla Bug #1585945 - CMC CRMF requests result in InvalidKeyFormatException when signing algorithm is ECC [rhel-7.5.z] (cfu) - Bugzilla Bug #1587826 - ExternalCA: Installation failed during csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor) - Bugzilla Bug #1588944 - Cert validation for installation with external CA cert [rhel-7.5.z] (edewata) - Bugzilla Bug #1588945 - CRMFPopClient tool - should allow option to do no key archival (cfu) - Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access [rhel-7.5.z] (ftweedal, cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- Updated "jss" build and runtime requirements (mharmsen) - ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest, CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu) - Bugzilla Bug #1572548 - IPA install with external-CA is failing when FIPS mode enabled. [rhel-7.5.z] (edewata) - Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE [rhel-7.5.z] (cfu) - Bugzilla Bug #1575521 - subsystem -> subsystem SSL handshake issue with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu) - Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs improvement [rhel-7.5.z] (jmagne) - Bugzilla Bug #1581135 - SAN in internal SSL server certificate in pkispawn configuration step [rhel-7.5.z] (cfu) - Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong input class_id [rhel-7.5.z] (cfu) - Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System 9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for standard conformance [rhel-7.5.z] (cfu) - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1560233 - libtps does not directly depend on libz- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1550581 - CMCAuth throws org.mozilla.jss.crypto.TokenException: Unable to insert certificate into temporary database [rhel-7.5.z] (cfu) - Bugzilla Bug #1551067 - [MAN] Add --skip-configuration and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata) - Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers [rhel-7.5.z] (cheimes, mharmsen) - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry in a certifcate [rhel-7.5.z] (ftweedal) - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for standard conformance [rhel-7.5.z] (cfu) - Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu) - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu) - Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal) - Bugzilla Bug #1558919 - Not able to generate certificate request with ECC using pki client-cert-request [rhel-7.5.z] (akahat) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1560233 - libtps does not directly depend on libz- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event set (RHEL) (edewata) - Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata) - Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM and FIPS (edewata) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1542210 - pki console configurations that involves ldap passwords leave the plain text password in debug logs (jmagne) - Bugzilla Bug #1543242 - Regression in lightweight CA key replication (ftweedal) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event set (RHEL) (edewata) - Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and audit event logging at startup (jmagne) - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA instance (alee) - Bugzilla Bug #1525306 - CC: missing CMC request and response record (cfu) - Bugzilla Bug #1532933 - Installing subsystems with external CMC certificates in HSM environment shows import error (edewata) - Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm (edewata) - Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers permitted in fips mode (mharmsen) - Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED outcomes. (edewata) - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in SharedToken scenario's (cfu) - Bugzilla Bug #1541526 - CMC: Revocation works with an unknown revRequest.issuer (cfu) - Bugzilla Bug #1541853 - ProfileService: config values with backslashes have backslashes removed (ftweedal) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the- Updated jss, nuxwdog, and openssl dependencies - ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in few cases (ftweedal) - Bugzilla Bug #1428021 - CC: shared token storage and retrieval mechanism (cfu) - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause error (cfu) - Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog (alee) - Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during pkispawn (alee) - Bugzilla Bug #1520526 - p12 admin certificate is missing when certificate is signed Externally (edewata) - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA instance (alee) - Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to missing nextupdate field (ftweedal) - Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen) - Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords in several different files after installation completes (alee) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - Bugzilla Bug #1466066 - CC: Secure removal of secret data storage (jmagne) - Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to setup with CMC signed certificates (cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- dogtagpki Pagure Issue #2853 - Cleanup spec file conditionals- Patch applying check-ins since 10.5.1-1- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- #Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0- #Require "jss >= 4.4.0-8" as a build and runtime requirement - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332 - # Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions) - # Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error - # Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from - # Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS) - # Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin - # dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data: - ########################################################################## - # RHCS 9.2: - ########################################################################## - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271 - # Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and - # Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin- Resolves: rhbz #1463350 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1463350 - Access banner validation (edewata)- # Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing - # Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause - # Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert - # Bugzilla Bug #1463350 - Access banner validation (edewata) - # Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal - # Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen) - # Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with - # Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option - # Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03 - # Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system- # Resolves: rhbz #1469432 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1469432 - CMC plugin default change - # Resolves CVE-2017-7537 - # Fixes BZ #1470948- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1458043 - Key recovery on token fails with invalid public key error on KRA (alee) - Bugzilla Bug #1460764 - CC: CMC: check HTTPS client authentication cert against CMC signer (cfu) - Bugzilla Bug #1461533 - Unable to find keys in the p12 file after deleting the any of the subsystem certs from it (ftweedal)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret) using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne) - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing certificate requests (cfu) - Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC revocation non-signing cert requests (cfu) - Bugzilla Bug #1458047 - change the way aes clients refer to aes keysets (alee) - Bugzilla Bug #1458055 - dont reuse IVs in the CMC code (alee) - Bugzilla Bug #1460028 - In keywrap mode, key recovery on KRA with HSM causes KRA to crash (ftweedal)- Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement - Require "tomcatjss >= 7.2.1-4" as a build and runtime requirement - ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS enabled system (edewata) - Bugzilla Bug #1447144 - CA brought down during separate KRA instance creation (edewata) - Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure ACCESS_SESSION_ESTABLISH_FAILURE (edewata) - Bugzilla Bug #1454450 - SubCA installation failure with 2 step installation in fips enabled mode (edewata) - Bugzilla Bug #1456597 - Certificate import using pki client-cert-import is asking for password when already provided (edewata) - Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes) - Bugzilla Bug #1458043 - Key recovery using externalReg fails with java null pointer exception on KRA (alee) - Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter (edewata) - Bugzilla Bug #1458429 - client-cert-import --ca-cert should import CA cert with trust bits "CT,C,C" (edewata) - ########################################################################## - # RHCS 9.2: - ########################################################################## - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret) using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne) - Bugzilla Bug #1445519 - CA Server installation with HSM fails (jmagne) - Bugzilla Bug #1452617 - Unable to create IPA Sub CA (ftweedal) - Bugzilla Bug #1454471 - Enabling all subsystems on startup (edewata) - Bugzilla Bug #1455617 - Key recovery on token fails because key record is not marked encrypted (alee)- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error (mharmsen)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal non-signing cert requests (cfu) - Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed) CMC with identity proof (cfu) - Bugzilla Bug #1447144 - CA brought down during separate KRA instance creation (mharmsen) - Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata) - Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne) - Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen) - Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in ConnectorServlet. (edewata) - Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata) - Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED audit event. (edewata)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1386303 - cannot extract generated private key from KRA when HSM is used. (alee) - Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes) - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause error (cfu) - Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from the KRA (ftweedal) - Bugzilla Bug #1448204 - pkispawn of clone install fails with InvalidBERException (ftweedal) - Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on thales hsm (alee) - Updated "jss" build and runtime requirements (mharmsen) - ########################################################################## - # RHCS 9.2: - ########################################################################## - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)- ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in conjuction with FreeIPA (ftweedal) - Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the startTime parameter is not working as expected. (jmagne) - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing certificate requests (cfu) - Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal) - Bugzilla Bug #1445088 - profile modification cannot remove existing config parameters (ftweedal) - Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption) (RHEL) (alee) - Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when pki CLI terminates SSL connection (edewata) - Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption) (RHCS) (alee)- ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1282504 - Installing pki-server in container reports scriptlet failed, exit status 1 (jpazdziora) - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS enabled system (edewata) - Bugzilla Bug #1410650 - [RFE] Add SCP03 support for sc 7 g & d cards (RHEL) (jmagne) - Bugzilla Bug #1437591 - cli authentication using expired cert throws an exception (edewata) - Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a request (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1274086 - [RFE] Add SCP03 support for sc 7 g & d cards (RHCS) (jmagne) - ############################################################################ - # Common Criteria - ############################################################################ - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures (edewata) - Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata) - Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature implementation (cfu)- Require "nss >= 3.28.3" as a build and runtime requirement - Require "jss >= 4.4.0-4" as a build and runtime requirement - Require "tomcatjss >= 7.2.1-3" as a build and runtime requirement - dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find failure (edewata) - ############################################################################ - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4 - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.4.x - ############################################################################ - # RHEL 7.4: - ############################################################################ - ############################################################################ - # RHCS 9.2: - ############################################################################ - ############################################################################ - # Common Criteria - ############################################################################ - Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature implementation (cfu) - Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption cert requests (cfu) - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures (edewata) - Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance protection cert mechanism (cfu)- Require "jss >= 4.4.0-1" as a build and runtime requirement - Require "tomcatjss >= 7.2.1-1" as a build and runtime requirement - ############################################################################ - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4 - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.4.x - ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1222557 - ECDSA Certificates Generated by Certificate System 8.1 fail NIST validation test with parameter field. (cfu) - Bugzilla Bug #1238684 - Generting Symmetric key fails with key-generate when --usages verify (vakwetu) - Bugzilla Bug #1246635 - user-cert-add --serial CLI request to secure port with remote CA shows authentication failure (edewata) - Bugzilla Bug #1249400 - CA EE: Submit caUserCert request without uid does not show proper error message (vakwetu) - Bugzilla Bug #1305993 - Add profile component that copies CN to SAN (ftweedal) - Bugzilla Bug #1316653 - pki ca-cert-request-submit fails presumably because of missing authentication even if it should not require any (edewata) - Bugzilla Bug #1325071 - add options to enable/disable cert or crl publishing. (vakwetu) - Bugzilla Bug #1330800 - Failed to start pki-tomcatd Service ("ipa-cacert-manage renew" failed?) (edewata) - Bugzilla Bug #1368410 - Misleading Logging for HSM (edewata) - Bugzilla Bug #1372052 - Unable to search certificate requests using the latest request ID (edewata) - Bugzilla Bug #1375347 - Typo in comment line of UserPwdDirAuthentication.java (edewata) - Bugzilla Bug #1376226 - IPA replica-prepare failed with error "Profile caIPAserviceCert Not Found" (ftweedal) - Bugzilla Bug #1376488 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - Bugzilla Bug #1378275 - two-step externally-signed CA installation fails due to missing AuthorityID (ftweedal) - Bugzilla Bug #1378277 - Spurious host authority entries created (ftweedal) - Bugzilla Bug #1378527 - Miscellaneous Minor Changes (edewata) - Bugzilla Bug #1381084 - KRA installation failed against externally-signed CA with partial certificate chain (edewata) - Bugzilla Bug #1382066 - Problems with FIPS mode (edewata) - Bugzilla Bug #1386371 - Remove xenroll.dll from pki-core (mharmsen) - Bugzilla Bug #1386424 - Fix packaging duplicates of classes in multiple jar files (edewata) - Bugzilla Bug #1391737 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (RHEL 7) (edewata) - Bugzilla Bug #1392068 - [RFE] add express archivals and retrievals from KRA (vakwetu) - Bugzilla Bug #1395817 - Unable to install subordinate CA with HSM in FIPS mode (edewata) - Bugzilla Bug #1397200 - pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config (jmagne) - Bugzilla Bug #1399862 - Dogtag 10.3.9 Man Pages (edewata) - Bugzilla Bug #1404881 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - Bugzilla Bug #1405654 - Token memory not wiped after key deletion (RHEL) (jmagne) - Bugzilla Bug #1409946 - Request ID undefined for CA signing certificate (vakwetu) - Bugzilla Bug #1409949 - CA Certificate Issuance Date displayed on CA website incorrect (vakwetu) - Bugzilla Bug #1410650 - [RFE] Add SCP03 support (RHEL) (jmagne) - Bugzilla Bug #1411428 - Unable to create a CA clone in FIPS (edewata) - Bugzilla Bug #1412211 - Unable to set up KRA in FIPS (edewata) - Bugzilla Bug #1412681 - update to 7.3 IPA with otpd bugfixes, tomcat will not finish start, hangs (ftweedal) - Bugzilla Bug #1413132 - pki-tomcat for 10+ minutes before generating cert (edewata) - Bugzilla Bug #1413136 - Problem with default AJP hostname in IPv6 environment. (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1 (cfu) - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne) - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed tokens (jmagne) - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working when a token is physically damaged and a temporary token is issued (jmagne) - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches (cfu) - Bugzilla Bug #1381635 - Token format with external reg fails when op.format.externalRegAddToToken.revokeCert=true (cfu) - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when set on a token (jmagne) - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (RHCS 9) (edewata) - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (RHCS) (jmagne) - Bugzilla Bug #1404900 - Dogtag 10.3.9 logging properties (edewata) - Bugzilla Bug #1405655 - Token memory not wiped after key deletion (RHCS) (jmagne) - ############################################################################- ## RHEL 7.3.z Batch Update 4 - Bugzilla Bug #1429492 - Add profile component that copies CN to SAN (ftweedal)- ## RHCS 9.1.z Batch Update 3 - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - ## RHEL 7.3.z Batch Update 3 - Bugzilla Bug #1417063 - ECDSA Certificates Generated by Certificate System 8.1 fail NIST validation test with parameter field. (cfu) - Bugzilla Bug #1417064 - Unable to search certificate requests using the latest request ID (edewata) - Bugzilla Bug #1417065 - CA Certificate Issuance Date displayed on CA website incorrect (alee) - Bugzilla Bug #1417066 - update to 7.3 IPA with otpd bugfixes, tomcat will not finish start, hangs (ftweedal) - Bugzilla Bug #1417067 - pki-tomcat for 10+ minutes before generating cert (edewata) - Bugzilla Bug #1417190 - Problem with default AJP hostname in IPv6 environment. (edewata)- Separate original patches into RHEL and RHCS portions - ## RHEL 7.3.z Batch Update 2 - Bugzilla Bug #1404176 - logging properties and man pages (edewata) - Bugzilla Bug #1405328 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - ## RHCS 9.1.z Batch Update 2 - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - Bugzilla Bug #1404900 - RHCS logging properties (edewata)- ## RHEL 7.3.z Batch Update 2 - Bugzilla Bug #1404173 - user-cert-add --serial CLI request to secure port with remote CA shows authentication failure (edewata) - Bugzilla Bug #1404175 - pki ca-cert-request-submit fails presumably because of missing authentication even if it should not require any (edewata) - Bugzilla Bug #1404178 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI [pki-base] (edewata) - Bugzilla Bug #1404172 - Unable to install subordinate CA with HSM in FIPS mode (edewata) - Bugzilla Bug #1403689 - pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config (jmagne) - Bugzilla Bug #1404176 - logging properties and man pages (edewata) - ## RHCS 9.1.z Batch Update 2 - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI [pki-tps] (edewata) - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne)- Marked the following RHCS 9.1.z bug: Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel when TPS and TKS security db is on fips mode. (jmagne) as a duplicate of RHEL 7.3.z bug: Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) and moved the patch from the RHCS 9.1.z bug to the RHEL 7.3.z bug.- ## RHEL 7.3.z Batch Update 1 - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) (added KRA key recovery via CLI in FIPS mode) - ## RHCS 9.1.z Batch Update 1 - Reverted patches associated with Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (edewata)- ## RHEL 7.3.z Batch Update 1 - Bugzilla Bug #1390318 - CA EE: Submit caUserCert request without uid does not show proper error message (alee) - Bugzilla Bug #1390319 - Failed to start pki-tomcatd Service ("ipa-cacert-manage renew" failed?) (edewata) - Bugzilla Bug #1390320 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - Bugzilla Bug #1390321 - two-step externally-signed CA installation fails due to missing AuthorityID (ftweedal) - Bugzilla Bug #1390322 - Spurious host authority entries created (ftweedal) - Bugzilla Bug #1390324 - KRA installation failed against externally-signed CA with partial certificate chain (edewata) - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) - Bugzilla Bug #1390311 - Fix packaging duplicates of classes in multiple jar files (edewata) - Bugzilla Bug #1390325 - Typo in comment line of UserPwdDirAuthentication.java (edewata) - ## RHCS 9.1.z Batch Update 1 - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1" (cfu) - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed tokens (jmagne) - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working when a token is physically damaged and a temporary token is issued (jmagne) - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches - Bugzilla Bug #1381635 - Token format with external reg fails when op.format.externalRegAddToToken.revokeCert=true (cfu) - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when set on a token (jmagne) - Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel when TPS and TKS security db is on fips mode. (jmagne) - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (edewata)- PKI TRAC Ticket #1527 - TPS Enrollment always goes to "ca1" (cfu) - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - PKI TRAC Ticket #2478 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - PKI TRAC Ticket #2483 - Unable to read an encrypted email using renewed tokens (jmagne) - PKI TRAC Ticket #2496 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches (cfu) - PKI TRAC Ticket #2505 - Fix packaging duplicates of classes in multiple jar files (edewata)- Revert Patch: PKI TRAC Ticket #2449 - Unable to create system certificates in different tokens (edewata) - Resolves: rhbz #1374054 - ipa-replica-install fails setting up certificate - Restores: rhbz #1319557 - pkispawn KRA instance is failing server - Removes from Errata: rhbz #1372041 - Unable to create system certificates in different tokens- PKI TRAC Ticket #1638 - Lightweight CAs: revoke certificate on CA deletion (ftweedal) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (edewata) - PKI TRAC Ticket #2443 - Prevent deletion of host CA's keys if LWCA entry deleted (ftweedal) - PKI TRAC Ticket #2444 - Authority entry without entryUSN is skipped even if USN plugin enabled (ftweedal) - PKI TRAC Ticket #2446 - pkispawn: make subject_dn defaults unique per instance name (for shared HSM) (cfu) - PKI TRAC Ticket #2447 - CertRequestInfo has incorrect URLs (vakwetu) - PKI TRAC Ticket #2449 - Unable to create system certificates in different tokens (edewata)- PKI TRAC Ticket #1578 - Authentication Instance Id PinDirEnrollment with authType value as SslclientAuth is not working (jmagne) - PKI TRAC TIcket #2414 - pki pkcs12-cert-del shows a successfully deleted message when a wrong nickname is provided (gkapoor) - PKI TRAC Ticket #2423 - pki_ca_signing_token when not specified does not fallback to pki_token_name value (edewata) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (akasurde) - ticket remains open - PKI TRAC Ticket #2439 - Outdated deployment descriptors in upgraded server(edewata)- PKI TRAC Ticket #690 - [MAN] pki-tools man pages (mharmsen) - CMCEnroll - PKI TRAC Ticket #833 - pki user-mod fullName="" gives an error message "PKIException: LDAP error (21): error result" (edewata) - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade. (cheimes, edewata, mharmsen) - PKI TRAC Ticket #2432 - Kra-selftest behavior is not as expected (edewata) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (edewata, mharmsen) - PKI TRAC Ticket #2437 - TPS UI: while adding certs for users from TPSUI pem format with/without header works while pkcs7 with header is not allowed (edewata) - PKI TRAC Ticket #2440 - Optional CA signing CSR for migration (edewata)- Bugzilla Bug #1366465 - Errata TPS upgrade test fails- PKI TRAC Ticket #978 - TPS connector man page: add revocation routing info (cfu) - PKI TRAC Ticket #1285 - [MAN] Apply 'generateCRMFRequest() removed from Firefox' workarounds to appropriate 'pki' man page (jmagne) - PKI TRAC Ticket #2246 - [MAN] Man Page: AuditVerify (cfu) - PKI TRAC Ticket #2381 - Throws exception while providing invalid module. (edewata) - PKI TRAC Ticket #2383 - CLI :: pki client-cert-request --extractable should accept only boolean value (edewata) - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter beyond CA signing cert in case of external or existing CA (cfu) - PKI TRAC Ticket #2399 - Dogtag 10.3.5: Miscellaneous Enhancements (akasurde, alee, cheimes, edewata, jmagne, mharmsen) - PKI TRAC Ticket #2401 - pkispawn calls dnsdomainname even if it does not rpm-require hostname (mharmsen) - PKI TRAC Ticket #2402 - Conflict in file ownership in pki-base and pki-server (cheimes) - PKI TRAC Ticket #2403 - Deployment problem with RESTEasy 3.0.17 (edewata) - PKI TRAC Ticket #2406 - Make starting CRL Number configurable (jmagne) - PKI TRAC Ticket #2412 - pki client-cert-import --trust option does not apply the specified trust bits (alee) - PKI TRAC Ticket #2418 - [TPS] Some template substitution didn't happen during installation (alee) - PKI TRAC Ticket #2420 - CA subsystem OSCP responder fails when LWCAs are not used (ftweedal) - PKI TRAC Ticket #2421 - Incorrect SELinux contexts Installation/Configuration (edewata) - PKI TRAC Ticket #2424 - ipa-ca-install fails on replica when IPA server is converted from CA-less to CA-full (edewata) - PKI TRAC Ticket #2428 - broken request links for CA's system certs in agent request viewing (cfu) - PKI TRAC Ticket #2430 - CA Agent certificate list is not sorted by serial number in migration case (jmagne) - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade. (mharmsen) - PKI TRAC Ticket #2433 - Lightweight CA GET /chain returns bogus PEM data (ftweedal)- PKI TRAC Ticket #691 - [MAN] pki-server man pages (mharmsen) - PKI TRAC Ticket #1114 - [MAN] Generting Symmetric key fails with key-generate when --usages verify is passed (jmagne) - PKI TRAC Ticket #1306 - [RFE] Add granularity to token termination in TPS (cfu) - PKI TRAC Ticket #1308 - [RFE] Provide ability to perform off-card key generation for non-encryption token keys (cfu) - PKI TRAC Ticket #1405 - [MAN] Add additional HSM details to 'pki_default.cfg' & 'pkispawn' man pages (mharmsen) - PKI TRAC Ticket #1607 - [MAN] man pkispawn has inadequate description for shared vs non shared tomcat instance installation (mharmsen) - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - PKI TRAC Ticket #1711 - CLI :: pki-server ca-cert-request-find throws IOError (edewata, ftweedal) - PKI TRAC Ticket #2285 - freeipa fails to start correctly after pki-core update on upgraded system (ftweedal) - PKI TRAC Ticket #2311 - When pki_token_name=Internal, consider normalizing it to "internal" (mharmsen) - PKI TRAC Ticket #2349 - Separated TPS does not automatically receive shared secret from remote TKS (jmagne) - PKI TRAC Ticket #2364 - CLI :: pki-server ca-cert-request-show throws attribute error (ftweedal) - PKI TRAC Ticket #2368 - pki-server subsystem subcommands throws error with --help option (edewata) - PKI TRAC Ticket #2374 - KRA cloning overwrites CA signing certificate trust flags (edewata) - PKI TRAC Ticket #2380 - Pki-server instance commands throws exception while specifying invalid parameters. (edewata) - PKI TRAC Ticket #2384 - CA installation with HSM prompts for HSM password during silent installation (edewata) - PKI TRAC Ticket #2385 - Upgraded CA lacks ca.sslserver.certreq in CS.cfg (ftweedal) - PKI TRAC Ticket #2387 - Add config for default OCSP URI if none given (ftweedal) - PKI TRAC Ticket #2388 - CA creation responds 500 if certificate issuance fails (ftweedal) - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter beyond CA signing cert in case of external or existing CA (cfu) - PKI TRAC Ticket #2390 - Dogtag 10.3.4: Miscellaneous Enhancements (akasurde, edewata)- PKI TRAC Ticket #2373 - Fedora 25: RestEasy 3.0.6 ==> 3.0.17 breaks pki-core (ftweedal)- Updated release number to 10.3.3-1- Updated version number to 10.3.3-0.1- Provided cleaner runtime dependency separation- Updated tomcatjss version dependencies- Updated 'java', 'java-headless', and 'java-devel' dependencies to 1:1.8.0.- Updated tomcat version dependencies- Updated version number to 10.3.2-1- Updated version number to 10.3.2-0.1- Updated version number to 10.3.1-1 (to allow upgrade from 10.3.0.b1)- Updated version number to 10.3.0-1- Build for F24 beta- PKI TRAC Ticket #2255 - PKCS #12 backup does not contain trust attributes.- Updated build for F24 alpha- PKI TRAC Ticket #1625 - Allow multiple ACLs of same name (union of rules) [ftweedal] - PKI TRAC Ticket #2237 - Add CRL dist points extension to OIDMap unconditionally [edewata] - PKI TRAC Ticket #1803 - Removed unnecessary URL encoding for admin cert request. [edewata] - PKI TRAC Ticket #1742 - Added support for cloning 3rd-party CA certificates. [edewata] - PKI TRAC Ticket #1482 - Added TPS token filter dialog. [edewata] - PKI TRAC Ticket #1808 - Fixed illegal token state transition via TEMP_LOST. [edewata]- Build for F24 alpha- PKI Trac Ticket #1399 - Move java components out of pki-base- PKI TRAC Ticket #1850 - Rename DRMTool --> KRATool- PKI TRAC Ticket #1714 - mod_revocator and mod_nss dependency for tps should be removed- PKI TRAC Ticket #1623 - Runtime dependency on python-nss is missing- Updated version number to 10.3.0-0.1- Added dep on tomcat-servlet-3.1-api [Fedora 23 and later] or dep on tomcat-servlet-3.0-api [Fedora 22 and later] to pki-tools - Updated dep on tomcatjss [Fedora 23 and later]- Updated dep on policycoreutils-python-utils [Fedora 23 and later]- Updated version number to 10.2.7-0.1- Update release number for release build- Remove setup directory and remaining Perl dependencies- Remove ExcludeArch directive- Updated version number to 10.2.6-0.1- Update release number for release build- Resolves rhbz #1230970 - Errata TPS tests for rpm verification failed- Updated version number to 10.2.5-0.1- Update release number for release build- Updated nuxwdog and tomcatjss requirements (alee)- Updated version number to 10.2.4-0.1 - Added nuxwdog systemd files- Update release number for release build- Reverted version number back to 10.2.3-0.1 - Added support for Tomcat 8.- Updated version number to 10.3.0-0.1- Updated version number to 10.2.3-0.1- Update release number for release build- Updated version number to 10.2.2-0.1 - Moved web application deployment locations. - Updated Resteasy and Jackson dependencies. - Added missing python-lxml build dependency.- Update release number for release build- PKI TRAC Ticket #1187 - mod_perl should be removed from requirements for 10.2 - PKI TRAC Ticket #1205 - Outdated selinux-policy dependency. - Removed perl(XML::LibXML), perl-Crypt-SSLeay, and perl-Mozilla-LDAP runtime dependencies- Change resteasy dependencies for F22+- Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by default and upgrade (cfu) - PKI Trac Ticket #1211 - New release overwrites old source tarball (mharmsen) - up the release number to 0.2- Updated version number to 10.2.1-0.1. - Added CLIs to simplify generating user certificates - Added enhancements to KRA Python API - Added a man page for pki ca-profile commands. - Added python api docs- Disable pylint dependency for RHEL builds - Added jakarta-commons-httpclient requirements - Added tomcat version for RHEL build - Added resteasy-base-client for RHEL build- PKI TRAC Ticket #1130 - Add RHEL/CentOS conditionals to spec- Update release number for release build- PKI TRAC Ticket #1017 - Rename pki-tps-tomcat to pki-tps- Merged jmagne@redhat.com's spec file changes from the stand-alone 'pki-tps-client' package needed to build/run the native 'tpsclient' command line utility into this 'pki-core' spec file under the 'tps' package. - Original tps libararies must be built to support this native utility. - Modifies tps package from 'noarch' into 'architecture-specific' package- PKI TRAC Ticket #1127 - Remove 'pki-ra', 'pki-setup', and 'pki-silent' packages . . .- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Respin to include the applet files with the rpm install. No change to spec file needed.- Bugzilla Bug #1120045 - pki-core: Switch to java-headless (build)requires -- drop dependency on java-atk-wrapper - Removed 'java-atk-wrapper' dependency from 'pki-server'- PKI TRAC Ticket #832 - Remove legacy 'systemctl' files . . .- Update rawhide build- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Use Requires: java-headless rebuild (#1067528)- Added option to build without server packages. - Replaced Jettison with Jackson. - Added python-nss build requirement - Bugzilla Bug #1057959 - pkispawn requires policycoreutils-python - TRAC Ticket #840 - pkispawn requires policycoreutils-python - Updated requirements for resteasy - Added template files for archive, retrieve and generate key requests to the client package.- Trac Ticket 788 - Clean up spec files - Update release number for release build - Updated requirements for resteasy- Change release number for beta build- Updated requirements for tomcat- Removed additional /var/run, /var/lock references.- Removed delivery of /var/lock and /var/run directories for fedora 20.- Moved Tomcat-based TPS into pki-core.- Listed new packages required during build, due to issues reported by pylint. - Packages added: python-requests, python-ldap, libselinux-python, policycoreutils-python- Added pylint scan to the build process.- Added man pages for upgrade tools.- Cleaned up the code to install man pages.- Reorganized deployment tools.- Bugzilla Bug 973224 - resteasy-base must be split into subpackages to simplify dependencies- Updated dependencies to Java 1.7.- TRAC Ticket 606 - add restart / start at boot info to pkispawn man page - TRAC Ticket 610 - Document limitation in using GUI install - TRAC Ticket 629 - Package ownership of '/usr/share/pki/etc/' directory- Change release number for 10.1 development- Fixed incorrect JNI_JAR_DIR.- TRAC Ticket 605 Junit internal function used in TestRunner, breaks F19 build- TRAC Ticket 604 Added fallback methods for pkispawn tests- Added default pki.conf in /usr/share/pki/etc - Create upgrade tracker on install and remove it on uninstall- Change release number for official release.- Added %pretrans script for f19 - Added java-atk-wrapper dependency- Added pki-server-upgrade script and pki.server module. - Call upgrade scripts in %post for pki-base and pki-server.- Added dependency on commons-io.- Add /var/log/pki and /var/lib/pki directories- Run pki-upgrade on post server installation.- Added dependency on python-lxml.- Added pki-upgrade script.- Updated version number to 10.0.2-0.1.- Renamed base/deploy to base/server. - Moved pki.conf into pki-base. - Removed redundant pki/server folder declaration.- Removed jython dependency- Added minimum python-requests version.- Bugzilla Bug #919476 - pkispawn crashes due to dangling symlink to jss4.jar- Added dependency on python-requests. - Reorganized Python module packaging.- Added dependency on python-ldap.- TRAC Ticket #517 - Clean up theme dependencies - TRAC Ticket #518 - Remove UI dependencies from pkispawn . . .- Removed runtime dependency on 'pki-server-theme' to resolve Bugzilla Bug #916134 - unresolved dependency in pki-server: pki-server-theme- TRAC Ticket 214 - Missing error description for duplicate user - TRAC Ticket 213 - Add nonces for cert revocation - TRAC Ticket 367 - pkidestroy does not remove connector - TRAC Ticket #430 - License for 3rd party code - Bugzilla Bug 839426 - [RFE] ECC CRL support for OCSP - Fix spec file to allow f17 to work with latest tomcatjss - TRAC Ticket 466 - Increase root CA validity to 20 years - TRAC Ticket 469 - Fix tomcatjss issue in spec files - TRAC Ticket 468 - pkispawn throws exception - TRAC Ticket 191 - Mapping HTTP Exceptions to HTTP error codes - TRAC Ticket 271 - Dogtag 10: Fix 'status' command in 'pkidaemon' . . . - TRAC Ticket 437 - Make admin cert p12 file location configurable - TRAC Ticket 393 - pkispawn fails when selinux is disabled - Punctuation and formatting changes in man pages - Revert to using default config file for pkidestroy - Hardcode setting of resteasy-lib for instance - TRAC Ticket 436 - Interpolation for pki_subsystem - TRAC Ticket 433 - Interpolation for paths - TRAC Ticket 435 - Identical instance id and instance name - TRAC Ticket 406 - Replace file dependencies with package dependencies- TRAC Ticket #430 - License for 3rd party code- TRAC Ticket #469 - Dogtag 10: Fix tomcatjss issue in pki-core.spec and dogtag-pki.spec . . . - TRAC Ticket #468 - pkispawn throws exception- Replaced file dependencies with package dependencies- Updated man pages- Update to official release for rc1- TRAC Ticket #315 - Man pages for pkispawn/pkidestroy. - Added place-holders for 'pki.1' and 'pki_default.cfg.5' man pages.- Added system-wide configuration /etc/pki/pki.conf. - Removed redundant lines in %files.- Moved default deployment configuration to /etc/pki.- Cleaned up spec file to provide only support rhel 7+, f17+ - Added resteasy-base dependency for rhel 7 - Update cmake version- Update release to b3- Removed dependency on CA, KRA, OCSP, TKS theme packages.- Renamed pki-common-theme to pki-server-theme.- TRAC Ticket #395 - Dogtag 10: Add a Tomcat 7 runtime requirement to 'pki-server'- Update release to b2- TRAC Ticket #350 - Dogtag 10: Remove version numbers from PKI jar files . . .- Added Obsoletes for pki-selinux- Remove build of pki-selinux for f18, use system policy instead- Update required tomcatjss version - Added net-tools dependency- Update selinux-policy version to fix error from latest policy changes- Fix typo in selinux policy versions- Added build requires for correct version of selinux-policy-devel- Update release to b1- Merged pki-silent into pki-server.- Renamed "shared" folder to "server".- Added required selinux versions for new policy.- Added Provides to packages replacing obsolete packages.- Update release to a2- Modified CMake to use RPM version number- Added VERSION file- Merged pki-setup into pki-server- Added Conflicts for IPA 2.X - Added build requires for zip to work around mock problem- TRAC Ticket #312 - Dogtag 10: Automatically restart any running instances upon RPM "update" . . . - TRAC Ticket #317 - Dogtag 10: Move "pkispawn"/"pkidestroy" from /usr/bin to /usr/sbin . . .- Fixed pki-server to include everything in shared dir.- Added build dependency on redhat-rpm-config.- Merged Javadoc packages.- Added pki-tomcat.jar.- Moved webapp creation code into pkispawn.- Split pki-client.jar into pki-certsrv.jar and pki-tools.jar.- Merged pki-native-tools and pki-java-tools into pki-tools. - Modified pki-server to depend on pki-tools.- Split pki-common into pki-base and pki-server. - Merged pki-util into pki-base. - Merged pki-deploy into pki-server.- Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 17 - Changed Dogtag 10 build-time and runtime requirements for 'pki-deploy' - Altered PKI Package Dependency Chain (top-to-bottom): pki-ca, pki-kra, pki-ocsp, pki-tks --> pki-deploy --> pki-common- Added pki-client.jar.- Merged pki-jndi-realm.jar into pki-cmscore.jar.- PKI TRAC Task #254 - Dogtag 10: Fix spec file to build successfully via mock on Fedora 17 . . .- Moved 'pki-jndi-real.jar' link from 'tomcat6' to 'tomcat' (Tomcat 7)- Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 18- Added CLI for REST services- Integration of Tomcat 7 - Addition of centralized 'pki-tomcatd' systemd functionality to the PKI Deployment strategy - Removal of 'pki_flavor' attribute- BZ 813075 - selinux denial for file size access- Bug 745278 - [RFE] ECC encryption keys cannot be archived- Replaced candlepin-deps with resteasy- Added option to build without Javadoc- BZ 802396 - Change location of TOMCAT_LOG to match tomcat6 changes - Corrected patch selected for selinux f17 rules- Corrected 'junit' dependency check- Initial attempt at PKI deployment framework described in 'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'.- Added support for pki-jndi-realm in tomcat6 in pki-common and pki-kra. - Ticket #69.- For 'mock' purposes, removed platform-specific logic from around the 'patch' files so that ALL 'patch' files will be included in the SRPM.- Removed dependency on OSUtil.- 'pki-selinux' - Added platform-dependent patches for SELinux component - Bugzilla Bug #739708 - Selinux fix for ephemeral ports (F16) - Bugzilla Bug #795966 - pki-selinux policy is kind of a mess (F17)- Added dependency on Apache Commons Codec.- Add '-DSYSTEMD_LIB_INSTALL_DIR' override flag to 'cmake' to address changes in fundamental path structure in Fedora 17 - 'pki-setup' - Hard-code Perl dependencies to protect against bugs such as Bugzilla Bug #772699 - Adapt perl and python fileattrs to changed file 5.10 magics - 'pki-selinux' - Bugzilla Bug #795966 - pki-selinux policy is kind of a mess- Integrated 'pki-kra' into 'pki-core' - Integrated 'pki-ocsp' into 'pki-core' - Integrated 'pki-tks' into 'pki-core' - Bugzilla Bug #788787 - added 'junit'/'junit4' build-time requirements- Updated package version number- Added resteasy-jettison-provider-2.3-RC1.jar to pki-setup- Added JUnit tests- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token (cfu) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the in-place upgrade( CS 8.0->8.1) (cfu) - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #746367 - Typo in the profile name. (jmagne) - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token (cfu) - Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17 (rawhide) . . . (mharmsen) - Bugzilla Bug #749945 - Installation error reported during CA, DRM, OCSP, and TKS package installation . . . (mharmsen) - 'pki-silent'- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen) - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-setup' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - Bugzilla Bug #737192 - Need script to upgrade proxy configuration (alee) - 'pki-symkey' - Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode (hsm+NSS). (jmagne) - 'pki-native-tools' - Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk) - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-util' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - Bugzilla Bug #737218 - Incorrect request attribute name matching ignores request attributes during request parsing. (awnuk) - Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode (hsm+NSS). (jmagne) - 'pki-selinux' - Bugzilla Bug #739708 - pki-selinux lacks rules in F16 (alee) - 'pki-ca' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-silent' - Bugzilla Bug #739201 - pkisilent does not take arch into account as Java packages migrated to arch-dependent directories (mharmsen)- 'pki-setup' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-symkey' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-java-tools' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-common' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-silent' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .- 'pki-setup' - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-ca' - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-common' - Bugzilla Bug #699809 - Convert CS to use systemd (alee)- 'pki-setup' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-symkey' - 'pki-native-tools' - Bugzilla Bug #717643 - Fopen without NULL check and other Coverity issues (awnuk) - Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk) - 'pki-util' - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #700522 - pki tomcat6 instances currently running unconfined, allow server to come up when selinux disabled (alee) - Bugzilla Bug #731741 - some CS.cfg nickname parameters not updated correctly when subsystem cloned (using hsm) (alee) - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-selinux' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-ca' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-silent'- 'pki-setup' - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee) - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #724861 - DRMTool: fix duplicate "dn:" records by renumbering "cn=" (mharmsen) - 'pki-common' - Bugzilla Bug #717041 - Improve escaping of some enrollment inputs like (jmagne, awnuk) - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee) - Bugzilla Bug #708075 - Clone installation does not work over NAT (alee) - Bugzilla Bug #726785 - If replication fails while setting up a clone it will wait forever (alee) - Bugzilla Bug #728332 - xml output has changed on cert requests (awnuk) - Bugzilla Bug #700505 - pki tomcat6 instances currently running unconfined (alee) - 'pki-selinux' - Bugzilla Bug #700505 - pki tomcat6 instances currently running unconfined (alee) - 'pki-ca' - Bugzilla Bug #728605 - RFE: increase default validity from 6mo to 2yrs in IPA profile (awnuk) - 'pki-silent' - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee)- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #719007 - Key Constraint keyParameter being ignored using an ECC CA to generate ECC certs from CRMF. (jmagne) - Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding for any component value which is equal to its default value (alee) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #720510 - Console: Adding a certificate into nethsm throws Token not found error. (jmagne) - Bugzilla Bug #719007 - Key Constraint keyParameter being ignored using an ECC CA to generate ECC certs from CRMF. (jmagne) - Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding for any component value which is equal to its default value (alee) - Bugzilla Bug #722989 - Registering an agent when a subsystem is created - does not log AUTHZ_SUCCESS event. (alee) - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #719113 - Add client usage flag to caIPAserviceCert (awnuk) - 'pki-silent'- Updated release of 'jss' - Updated release of 'tomcatjss' for Fedora 15 - 'pki-setup' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser (jdennis) - Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-symkey' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-native-tools' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #717765 - TPS configuration: logging into security domain from tps does not work with clientauth=want. (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-util' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-java-tools' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (config file and record processing) (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (tweaks) (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-common' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs throws 'Invalid protocol' for OCSP subsystems (alee) - Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee) - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages (alee) - Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk) - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages (jmagne) - Bugzilla Bug #698885 - Race conditions during IPA installation (alee) - Bugzilla Bug #704792 - CC_LAB_EVAL: CA agent interface: SubjectID=$Unidentified$ fails audit evaluation (jmagne) - Bugzilla Bug #705914 - SCEP mishandles nicknames when processing subsequent SCEP requests. (awnuk) - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added. (jmagne) - Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs for modify/add (alee) - Bugzilla Bug #707416 - additional audit messages for GetCookie (alee) - Bugzilla Bug #707607 - Published certificate summary has list of non-published certificates with succeeded status (jmagne) - Bugzilla Bug #717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated for tps and ca on server shutdown (jmagne) - Bugzilla Bug #697939 - DRM signed audit log message - operation should be read instead of modify (jmagne) - Bugzilla Bug #718427 - When audit log is full, server continue to function. (alee) - Bugzilla Bug #718607 - CC_LAB_EVAL: No AUTH message is generated in CA's signedaudit log when a directory based user enrollment is performed (jmagne) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-selinux' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #720503 - RA and TPS require additional SELinux permissions to run in "Enforcing" mode (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-ca' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser (jdennis) - Bugzilla Bug #699837 - service command is not fully backwards compatible with Dogtag pki subsystems (mharmsen) - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. (jmagne) - Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs for modify/add (alee) - Bugzilla Bug #716269 - make ra authenticated profiles non-visible on ee pages (alee) - Bugzilla Bug #718621 - CC_LAB_EVAL: PRIVATE_KEY_ARCHIVE_REQUEST occurs for a revocation invoked by EE user (awnuk) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-silent' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Added 'DRMTool.cfg' configuration file to inventory - 'pki-common' - 'pki-selinux' - 'pki-ca' - 'pki-silent'- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #532548 - Tool to do DRM re-key - 'pki-common' - 'pki-selinux' - 'pki-ca' - 'pki-silent'- 'pki-setup' - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser - Bugzilla Bug #694569 - parameter used by pkiremove not updated - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs throws 'Invalid protocol' for OCSP subsystems - Bugzilla Bug #694569 - parameter used by pkiremove not updated - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages - Bugzilla Bug #694143 - CA Agent not returning specified request - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages - Bugzilla Bug #698885 - Race conditions during IPA installation - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser - Bugzilla Bug #699837 - service command is not fully backwards compatible with Dogtag pki subsystems - 'pki-silent'- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.- Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta) - Bugzilla Bug #693327 - Missing requires: tomcatjss - 'pki-setup' - Bugzilla Bug #690626 - pkiremove removes the registry entry for all instances on a machine - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port throws file not found exception. - 'pki-common' - Bugzilla Bug #692990 - Audit log messages needed to match CC doc: DRM Recovery audit log messages - 'pki-selinux' - 'pki-ca' - 'pki-silent'- Bugzilla Bug #693327 - Missing requires: tomcatjss- Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta) - Require "jss >= 4.2.6-15" as a build and runtime requirement - Require "tomcatjss >= 2.1.1" as a build and runtime requirement for Fedora 15 and later platforms - 'pki-setup' - Bugzilla Bug #688287 - Add "deprecation" notice regarding using "shared ports" in pkicreate -help . . . - Bugzilla Bug #688251 - Dogtag installation under IPA takes too much time - SELinux policy compilation - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #689501 - ExtJoiner tool fails to join the multiple extensions - 'pki-common' - Bugzilla Bug #683581 - CA configuration with ECC(Default EC curve-nistp521) CA fails with 'signing operation failed' - Bugzilla Bug #689662 - ocsp publishing needs to be re-enabled on the EE port - 'pki-selinux' - Bugzilla Bug #684871 - ldaps selinux link change - 'pki-ca' - Bugzilla Bug #683581 - CA configuration with ECC(Default EC curve-nistp521) CA fails with 'signing operation failed' - Bugzilla Bug #684381 - CS.cfg specifies incorrect type of comments - Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port throws file not found exception.(profile and CS.cfg only) - 'pki-silent'- Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha) - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA instance - Bugzilla Bug #675742 - Profile caIPAserviceCert Not Found - 'pki-setup' - Bugzilla Bug #678157 - uninitialized variable warnings from Perl - Bugzilla Bug #679574 - Velocity fails to load all dependent classes - Bugzilla Bug #680420 - xml-commons-apis.jar dependency - Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's classpath - Bugzilla Bug #673508 - CS8 64 bit pkicreate script uses wrong library name for SafeNet LunaSA - 'pki-common' - Bugzilla Bug #673638 - Installation within IPA hangs - Bugzilla Bug #678715 - netstat loop fixes needed - Bugzilla Bug #673609 - CC: authorize() call needs to be added to getStats servlet - 'pki-selinux' - Bugzilla Bug #674195: SELinux error message thrown during token enrollment - 'pki-ca' - Bugzilla Bug #673638 - Installation within IPA hangs - Bugzilla Bug #673609 - CC: authorize() call needs to be added to getStats servlet - Bugzilla Bug #676330 - init script cannot start service - 'pki-silent' - Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's classpath- 'pki-common' - Bugzilla Bug #676051 - IPA installation failing - Fails to create CA instance - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA instance- 'pki-common' - Bugzilla Bug #674894 - ipactl restart : an annoy output line - Bugzilla Bug #675179 - ipactl restart : an annoy output line- Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes - 'pki-setup' - Bugzilla Bug #673638 - Installation within IPA hangs - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package - 'pki-common' - Bugzilla Bug #672291 - CA is not publishing certificates issued using "Manual User Dual-Use Certificate Enrollment" - Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error. - Bugzilla Bug #504056 - Completed SCEP requests are assigned to the "begin" state instead of "complete". - Bugzilla Bug #504055 - SCEP requests are not properly populated - Bugzilla Bug #564207 - Searches for completed requests in the agent interface returns zero entries - Bugzilla Bug #672291 - CA is not publishing certificates issued using "Manual User Dual-Use Certificate Enrollment" - - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package - Bugzilla Bug #672920 - CA console: adding policy to a profile throws 'Duplicate policy' error in some cases. - Bugzilla Bug #673199 - init script returns control before web apps have started - Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI subsystem instances - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #504013 - sscep request is rejected due to authentication error if submitted through one time pin router certificate enrollment. - Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing information - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation - Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI subsystem instances - 'pki-silent' - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package- Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files in /var/run and /var/lock- 'pki-symkey' - Bugzilla Bug #671265 - pki-symkey jar version incorrect - 'pki-common' - Bugzilla Bug #564207 - Searches for completed requests in the agent interface returns zero entries- Allow 'pki-native-tools' to be installed independently of 'pki-setup' - Removed explicit 'pki-setup' requirement from 'pki-ca' (since it already requires 'pki-common') - 'pki-setup' - Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group - Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP and TKS. - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from OpenLDAP instead of the Mozldap - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13 - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*, pkicreate fails Fedora 14 and above - Bugzilla Bug #23346 - Two conflicting ACL list definitions in source repository - Bugzilla Bug #656733 - Standardize jar install location and jar names - 'pki-symkey' - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #644056 - CS build contains warnings - 'pki-native-tools' - template change - Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from OpenLDAP instead of the Mozldap - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #644056 - CS build contains warnings - 'pki-util' - Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical cannot be set to true - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #635033 - At installation wizard selecting key types other than CA's signing cert will fail - Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and CS interface - Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse ASN.1 encoding/decoding is broken - Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1 encoding/decoding is incomplete - Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1 encoding/decoding is incomplete - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #658188 - remove remaining references to tomcat5 - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #223319 - Certificate Status inconsistency between token db and CA - Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory During CRL Generation - 'pki-java-tools' - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1 - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to 5000 bytes - Bugzilla Bug #656733 - Standardize jar install location and jar names - 'pki-common' - Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review - Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable started before configuration completed - Bugzilla Bug #620925 - CC: auditor needs to be able to download audit logs in the java subsystems - Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5 policy mappings (seem hardcoded) - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #548699 - subCA's admin certificate should be generated by itself - Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA - Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile caAgentServerCert (null cert_request) - Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited number of times - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #629677 - TPS: token enrollment fails. - Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN in a SCEP request - Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection pools not reliable - improve connections or discovery - Bugzilla Bug #629769 - password decryption logs plain text password - Bugzilla Bug #583823 - CC: Auditing issues found as result of CC - interface review - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #586700 - OCSP Server throws fatal error while using OCSP console for renewing SSL Server certificate. - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #607380 - CC: Make sure Java Console can configure all security relevant config items - Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be generated on TKS instead of TPS. - Bugzilla Bug #489342 - com.netscape.cms.servlet.common.CMCOutputTemplate.java doesn't support EC - Bugzilla Bug #630121 - OCSP responder lacking option to delete or disable a CA that it serves - Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1 - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #635033 - At installation wizard selecting key types other than CA's signing cert will fail - Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated for SCEP signing and encryption. - Bugzilla Bug #223336 - ECC: unable to clone a ECC CA - Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned by Reason Code - onlySomeReasons ? - Bugzilla Bug #637330 - CC feature: Key Management - provide signature verification functions (JAVA subsystems) - Bugzilla Bug #223313 - should do random generated IV param for symmetric keys - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory - Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on ECC curve names (not on key sizes). - Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple Certificates from the Same Request - Bugzilla Bug #648757 - expose and use updated cert verification function in JSS - Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection of signature algorithm; and for ECC curves - Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing e.c. support - Bugzilla Bug #651040 - cloning shoud not include sslserver - Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to CS.cfg files imcomplete when the cert is stored on a hsm - Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . . - Bugzilla Bug #651916 - kra and ocsp are using incorrect ports to talk to CA and complete configuration in DonePanel - Bugzilla Bug #642359 - CC Feature - need to verify certificate when it is added - Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires auditing - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #499494 - change CA defaults to SHA2 - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets as expected - Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for validity - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1 - Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA. - Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an error to TPS even if certificate in question is already revoked. - Bugzilla Bug #663546 - Disable the functionalities that are not exposed in the console - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #658188 - remove remaining references to tomcat5 - Bugzilla Bug #649343 - Publishing queue should recover from CA crash. - Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and pkiCA, obsolete 2252 and 2256 - Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added - Bugzilla Bug #642741 - CS build uses deprecated functions - Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error - Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time interface is no longer available through console - 'pki-selinux' - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer - selinux changes - 'pki-ca' - Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review - Bugzilla Bug #620925 - CC: auditor needs to be able to download audit logs in the java subsystems - Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA - Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of CC interface doc review - Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with admin privilege throws error "You are not authorized to perform this operation". - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #583823 - CC: Auditing issues found as result of CC - interface review - Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws 'Internal Server Error'. - Bugzilla Bug #586700 - OCSP Server throws fatal error while using OCSP console for renewing SSL Server certificate. - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be generated on TKS instead of TPS. - Bugzilla Bug #630121 - OCSP responder lacking option to delete or disable a CA that it serves - Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1 - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned by Reason Code - onlySomeReasons ? - Bugzilla Bug #637330 - CC feature: Key Management - provide signature verification functions (JAVA subsystems) - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on ECC curve names (not on key sizes). - Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple Certificates from the Same Request - Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection of signature algorithm; and for ECC curves - Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA release -- DRM and TKS do not seem to have CRL checking enabled - Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help correctly set up CC environment - Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in certificates (RFC 4262) - Bugzilla Bug #651916 - kra and ocsp are using incorrect ports to talk to CA and complete configuration in DonePanel - Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object signing support in RHCS - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #499494 - change CA defaults to SHA2 - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets as expected - Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for validity - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke certs in TPS - Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature - Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA. - Bugzilla Bug #649343 - Publishing queue should recover from CA crash. - Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and pkiCA, obsolete 2252 and 2256 - Bugzilla Bug #223346 - Two conflicting ACL list definitions in source repository - Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added - Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key usage - Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time interface is no longer available through console - Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory During CRL Generation - 'pki-silent' - Bugzilla Bug #627309 - pkisilent subca configuration fails. - Bugzilla Bug #640091 - pkisilent panels need to match with changed java subsystems - Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM Clone. - Bugzilla Bug #643053 - pkisilent DRM configuration fails - Bugzilla Bug #583754 - pki-silent needs an option to configure signing algorithm for CA certificates - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module Panel up to before Security Domain Panel - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #588323 - Failed to enable cipher 0xc001 - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves, signing algorithm - Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords with special characters - Bugzilla Bug #642741 - CS build uses deprecated functions- Bugzilla Bug #668839 - Review Request: pki-core - Removed empty "pre" from "pki-ca" - Consolidated directory ownership - Corrected file ownership within subpackages - Removed all versioning from NSS and NSPR packages- Bugzilla Bug #668839 - Review Request: pki-core - Added component versioning comments - Updated JSS from "4.2.6-10" to "4.2.6-12" - Modified installation section to preserve timestamps - Removed sectional comments- Initial revision. (kwright@redhat.com & mharmsen@redhat.com)  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghi10.5.18-17.el7_9    pki-ca-10.5.18LICENSEpki-ca.jarcaconfCS.cfgCatalinalocalhostca.xmlacl.ldifacl.propertiesauth-method.propertiescaAuditSigningCert.profilecaCert.profilecaOCSPCert.profilecrlcaissuer.ldifcrlcaissuertasks.ldifdb.ldifeccAdminCert.profileeccServerCert.profileeccSubsystemCert.profileflatfile.txtindex.ldifindextasks.ldifjk2.manifestjk2.propertiesjkconf.ant.xmljkconfig.manifestproxy.confregistry.cfgrsaAdminCert.profilersaServerCert.profilersaSubsystemCert.profileserver-minimal.xmlserverCert.profile.exampleWithSANserverCert.profile.exampleWithSANpatternshm.manifesttomcat-jk2.manifesttomcat-users.xmluriworkermap.propertiesvlv.ldifvlvtasks.ldifworkers.propertiesworkers.properties.minimalworkers2.propertiesworkers2.properties.minimalemailsExpiredUnpublishJobExpiredUnpublishJobItemcertIssued_CAcertIssued_CA.htmlcertIssued_RAcertIssued_RA.htmlcertRequestRejected.htmlcertRevoked_CAcertRevoked_CA.htmlcertRevoked_RAcertRevoked_RA.htmleuJob1.htmleuJob1Item.htmlpublishCerts.htmlpublishCertsItem.htmlreqInQueue_CAreqInQueue_CA.htmlreqInQueue_RAreqInQueue_RA.htmlriq1Item.htmlriq1Summary.htmlrnJob1.txtrnJob1Item.txtrnJob1Summary.txtprofilescaAdminCert.cfgDomainController.cfgECAdminCert.cfgcaAdminCert.cfgcaAgentFileSigning.cfgcaAgentServerCert.cfgcaAuditSigningCert.cfgcaCACert.cfgcaCMCECUserCert.cfgcaCMCECserverCert.cfgcaCMCECsubsystemCert.cfgcaCMCUserCert.cfgcaCMCauditSigningCert.cfgcaCMCcaCert.cfgcaCMCkraStorageCert.cfgcaCMCkraTransportCert.cfgcaCMCocspCert.cfgcaCMCserverCert.cfgcaCMCsubsystemCert.cfgcaCrossSignedCACert.cfgcaDirBasedDualCert.cfgcaDirPinUserCert.cfgcaDirUserCert.cfgcaDirUserRenewal.cfgcaDualCert.cfgcaDualRAuserCert.cfgcaECAdminCert.cfgcaECAgentServerCert.cfgcaECDirPinUserCert.cfgcaECDirUserCert.cfgcaECDualCert.cfgcaECFullCMCSharedTokenCert.cfgcaECFullCMCUserCert.cfgcaECFullCMCUserSignedCert.cfgcaECInternalAuthServerCert.cfgcaECInternalAuthSubsystemCert.cfgcaECServerCert.cfgcaECSimpleCMCUserCert.cfgcaECSubsystemCert.cfgcaECUserCert.cfgcaEncECUserCert.cfgcaEncUserCert.cfgcaFullCMCSharedTokenCert.cfgcaFullCMCUserCert.cfgcaFullCMCUserSignedCert.cfgcaIPAserviceCert.cfgcaInstallCACert.cfgcaInternalAuthAuditSigningCert.cfgcaInternalAuthDRMstorageCert.cfgcaInternalAuthOCSPCert.cfgcaInternalAuthServerCert.cfgcaInternalAuthSubsystemCert.cfgcaInternalAuthTransportCert.cfgcaJarSigningCert.cfgcaManualRenewal.cfgcaOCSPCert.cfgcaOtherCert.cfgcaRACert.cfgcaRARouterCert.cfgcaRAagentCert.cfgcaRAserverCert.cfgcaRouterCert.cfgcaSSLClientSelfRenewal.cfgcaServerCert.cfgcaServerKeygen_DirUserCert.cfgcaServerKeygen_UserCert.cfgcaSignedLogCert.cfgcaSigningECUserCert.cfgcaSigningUserCert.cfgcaSimpleCMCUserCert.cfgcaStorageCert.cfgcaSubsystemCert.cfgcaTPSCert.cfgcaTempTokenDeviceKeyEnrollment.cfgcaTempTokenUserEncryptionKeyEnrollment.cfgcaTempTokenUserSigningKeyEnrollment.cfgcaTokenDeviceKeyEnrollment.cfgcaTokenMSLoginEnrollment.cfgcaTokenUserAuthKeyRenewal.cfgcaTokenUserDelegateAuthKeyEnrollment.cfgcaTokenUserDelegateSigningKeyEnrollment.cfgcaTokenUserEncryptionKeyEnrollment.cfgcaTokenUserEncryptionKeyRenewal.cfgcaTokenUserSigningKeyEnrollment.cfgcaTokenUserSigningKeyRenewal.cfgcaTransportCert.cfgcaUUIDdeviceCert.cfgcaUserCert.cfgcaUserSMIMEcapCert.cfgsetupregistry_instancewebappsROOTWEB-INFweb.xmlindex.jspca404.html500.htmlGenUnexpectedError.templateWEB-INFlibpki-ca.jarpki-certsrv.jarpki-cms.jarpki-cmsbundle.jarpki-cmscore.jarpki-cmsutil.jarpki-nsutil.jarvelocity.propertiesweb.xmladminGenUnexpectedError.templatecaEnrollSuccess.templateImportAdminCert.templateImportCert.templateadminEnroll.htmlsecuritydomainlogin.templatesendCookie.templatecms-funcs.jsconsolehelpfun.jsindex.jspagentGenError.templateGenPending.templateGenRejected.templateGenSuccess.templateGenSvcPending.templateGenUnauthorized.templateGenUnexpectedError.templatecaEnrollSuccess.templateImportCert.templateListRequests.htmlProfileApprove.templateProfileList.templateProfileProcess.templateProfileReview.templateProfileSelect.templateSrchCert.htmlSrchRequests.htmlSrchRevokeCert.htmlUpdateDir.htmlbulkissuance.templatecloneRedirect.templateconfirmRevocation.templatedisplayBySerial.templatedisplayBySerial2.templatedisplayCRL.templatedisplayCertFromRequest.templateerror.templateframeCRL.htmlframeDir.htmlframeDisplayCRL.htmlframeList.htmlframeListReq.htmlframeOCSP.htmlframeProfile.htmlframeRevoke.htmlframeSearch.htmlframeSrchRequests.htmlframeStats.htmlgetOCSPInfo.templategetStats.templateindex.jspmenuCRL.htmlmenuDir.htmlmenuDisplayCRL.htmlmenuList.htmlmenuListReq.htmlmenuOCSP.htmlmenuProfile.htmlmenuRevoke.htmlmenuSearch.htmlmenuSrchRequests.htmlmenuStats.htmlmonitor.htmlmonitor.templatenotImplemented.htmlprocessCertReq.templateprocessReq.templatequeryBySerial.htmlqueryCert.htmlqueryCert.templatequeryReq.templatereasonToRevoke.templaterevocationResult.templaterevokeBySerial.templaterevokeCert.htmlsrchCert.templatetoDisplayCRL.templatetoUpdateCRL.templatetop.htmlunrevocationResult.templateupdateCRL.htmlupdateCRL.templateupdateDir.templatecms-funcs.jsfuncs.jsheader.templatehelpfun.jsindex.jspindex.templateports.templateeeGenError.templateGenPending.templateGenRejected.templateGenSuccess.templateGenSvcPending.templateGenUnauthorized.templateGenUnexpectedError.templatecaAIMEnroll.htmlCMCEnrollment.htmlCMCRevReq.htmlCertBasedDualEnroll.htmlCertBasedEncryptionEnroll.htmlCertBasedSingleEnroll.htmlChallengeRevoke1.htmlDirPinUserEnroll.htmlDirUserEnroll.htmlDisplayCRL.htmlEnrollSuccess.templateGetCAChain.htmlImportAdminCert.templateImportCert.templateKeyRecovery.htmlManCAEnroll.htmlManObjSignEnroll.htmlManRAEnroll.htmlManServerEnroll.htmlManUserEnroll.htmlOCSPResponder.htmlObjSignPKCS10Enroll.htmlPortalEnrollment.htmlProfileList.templateProfileSelect.templateProfileSubmit.htmlProfileSubmit.templateRenewalSuccess.templateRevocationSuccess.templateUserRenewal.htmlUserRevocation.htmlbench2k.htmlblank.htmlcheckRequest.htmldisplayBySerial.templatedisplayBySerial2.templatedisplayCRL.templatedisplayCaCert.templatedisplayCertFromRequest.templateenrollMenu.htmlindex.jsppolicyEnrollmentindex.jspprofileMenu.htmlretrievalMenu.htmlrevocationMenu.htmlprofileEnrollmentindex.jspprofileMenu.htmlretrievalMenu.htmlrevocationMenu.htmlprofileMenu.htmlqueryBySerial.htmlqueryCert.htmlqueryCert.templatereasonToRevoke.templaterecoveryMenu.htmlremoteAuthConfig.templaterenewalMenu.htmlrequestStatus.templateretrievalMenu.htmlrevocationMenu.htmlrevocationResult.templatesrchCert.htmlsrchCert.templatetabs.htmltoDisplayCRL.templateunrevocationResult.templatecms-funcs.jshelpfun.jsindex.jspindex.jspservices.template/usr/share/doc//usr/share/doc/pki-ca-10.5.18//usr/share/java/pki//usr/share/pki//usr/share/pki/ca//usr/share/pki/ca/conf//usr/share/pki/ca/conf/Catalina//usr/share/pki/ca/conf/Catalina/localhost//usr/share/pki/ca/emails//usr/share/pki/ca/profiles//usr/share/pki/ca/profiles/ca//usr/share/pki/ca/setup//usr/share/pki/ca/webapps//usr/share/pki/ca/webapps/ROOT//usr/share/pki/ca/webapps/ROOT/WEB-INF//usr/share/pki/ca/webapps/ca//usr/share/pki/ca/webapps/ca/WEB-INF//usr/share/pki/ca/webapps/ca/WEB-INF/lib//usr/share/pki/ca/webapps/ca/admin//usr/share/pki/ca/webapps/ca/admin/ca//usr/share/pki/ca/webapps/ca/agent//usr/share/pki/ca/webapps/ca/agent/ca//usr/share/pki/ca/webapps/ca/ee//usr/share/pki/ca/webapps/ca/ee/ca//usr/share/pki/ca/webapps/ca/ee/ca/policyEnrollment//usr/share/pki/ca/webapps/ca/ee/ca/profileEnrollment/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz9x86_64-redhat-linux-gnu       directoryASCII textASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract)ASCII text, with very long linesXML 1.0 document textexported SGML document, ASCII textC++ source, ASCII textHTML document, ASCII textXML 1.0 document, ASCII textHTML document, ASCII text, with very long lines?7zXZ !X] crt:bLL*Ia>z=]4K!`T/#?؎!s2-c?q _b!=>7O;V9y{!WdbQh32 <9on9!t$\{QS& n#3ɛ# Z, Ԇi0;c#dyP%8Ek-[SgZK} WTs *3KyT F5_0 F19V21X%OW-NI0s< \!RlyK_z=Qr.h$*1khjP {-B9!1ԐEcYD~uE$s$<ʇN,!ShaצԮI#EK0tdέ]?Tyz~qN#4lh7gjDܩ8^v|/DCFCXYG}ĉe% m Ppe4?**X(;2cG<عLYuь3OR8.Vج#Uq_/sluE +2>ʔ˖)o:tN8m`XM[nD`-=6Ig=SM` 쨲a߆U<21=n$P}J(pr }P ۢ1b ]s9K$0 DcgHoª^C±3`Gr!m_dO+Փa3}d =嵅.~ a;6>t `7q$EKƓqN8ZߌXbA=,9[g}[`3XڠPn;Gʜ>7{XӮel[A#ˠO 45d^][l(Q`oe:sV P *"KКpݜ@r`r i5{@qo=. c>1r',t|2{ :Q N;9$AX.j&xdVTAǑɲ^H䋒$Gfi–Lr+p Y|Dn4WhTb='BqqQJJ$4}ucU=$J| 셼f7َWVy.ڦv4 oiԃԯF6Ң=stGYQ'Hn*>lwXlV3rIFV[C+`95?0ٔ6eYd/3^Qs  \/Ar#d1:Nj8G#]dJ-4Y71TL{և>4w|LpDt; i8oWW]w''i3c6!Y8΀Dc6BˊB1iG >;=N^-]q)e7vq"˱pѵ}򇕿K#{)Tp|m l(1(@cxkr_:vG|amyHx<>+p.l&j {Qzi@~CL8G<:Id\ K*[4?<IQ}UFqP\J}kUF ܫ ޒwK=a- dWM lW=! 70 ^iG + {&}[!q>T`E `5#_42%(:vi9d>BPi.ƻfG#%սAM/C+Gu*ڟ7E~ɪjkOD^ЉmbG *㙫 zkC.zB@ !/?qLSKOD̰D#w=D5/Zehzިe"Be*L4c̼߄܍r@Pi@qC/>QXxFBo_g= >X{m8B5!q@qEvD#2wU(r;x`օR:u-α{ dp[%-QPLN%b8'}nvl*2)8SRkmՀ[h7Ts';c& t=kUm*L@ȗT|v,x$Nqkgd_8$1m60mEd["ra~7c">JYl2)eQ0:LVKhmRWE}7;{м00%s8EBQx`-OUiD @W%He}/ȝe.D!bWB PE ":ͷR81$=m̲O߀ƟHOR戾e)&QԤT|Ug:t ^X`)/GO}H^ TҪq j|r:ъ|Xg9N/0iux]{җWd4031f1mOM70&}YL0Xdί@B$7i<=Fq tT[.| jP~ @M+x=~e|7OFlNB.EBȋF"w )wL3Pu9)lrVg2 vKm&?[vzZt)s$h9g颂jB֍īJoSM~֎D1I4/f9\,݆$v=Mg-~Ȼ a/VyçpMN` FZyχNҼlϞ]wq_0]hS_Gؚ&g :4g6@2}09QNEF}=, ^-RHX{I-E.zȸ]ɹ8 '|ҽsMk޵>~`3;'sr#Կ_AڽL~ Gqklko{tņHne ZY XZl^}b-.霔Z,]CH9 op] @0奰Q[뺒 JjXKHT,0|I2n/V|]D a8FIO%GO9Yo>YжUjZ tĿ`}5, ŢO)ֺo7vNQk18Iϰ؄1ceTjo@Lk|%X;:1ݙwrro^݋][Jar@Z ~"  -Z:p$8utE' 7iH{n y3ZBaCuTJALЍ2*jX{֙[ZaIl>g58%rugnSUx5kgu:Gx@D}2׬pcֈOZEJ9<į|TpӪf6h-ã:zl-?5|a<kZfy9#8[<8ζRm3;fQ"MBF5n^'.1H֢3OSdbO]ǣVt~&WצV|8WC*!ۺڎi2 DNpJUA㵹:'lj1hϝgfQg^G:dG~iFWE 1GNS=%5Ք&<4!F!FF_EK'h,te VHq֬j &dMϝ ³0) ( dְӅqHvډg3GCҌSF^KF](!nL1k@ʧ%+ܔBI`N*`fn`0.zXk ҔhO25:BS <迗3)OTQk/`m2a+p! 6Ke1Joc7N9ٷ+ KncgorJ fPcȋ">xvW}>H4!%ڦB#;{b w_ x:jg6;W@9x cts, 5"'pϻ?;>t6}(^>iH(]x)uW_y q(AHz"W ] TH(lcl"D%ʖ~Yvã=RN!maGjΟǺ*8:^% n>)< O ,w&.y8r,mHh<[8;E=pF$ C/~uDZ$&2?v/p|v\>H@r0L 1#EԎFs˩BP_AF&&G)]0EgI+3#e!aS1P`D 1rw $>CD$p|c_er"V:zOOaH'.ԦU ta6vwNӒ;i2]k3i=ZsP=>b'˶׺63;y+FBc۴&D%0,3;Vv)7p\xE z[1#zDwCo|A[E>>~_A'INu}gk0J4ʹbΚis@T.^ufzX]h{򼷊LDF(\CULUzMünh>/ 3nǃd)x X->YT Ƀ R ++OwfS1eI[U`?6j$NXA-D5ӥUw$\7:`_tˋub#t 7$;X)|@m'`Ou+#V9O!Tu4l|؞䐂MRm,f,ֹ SnXd,V!hS8wϤ6fEHYP8f\4V|=\u ͳ0!"ꦣtsl=;CGsae&GW.T)vqHBNg_U!_)2!91%)w|?Wӱ%CA~h%if/sn]]Gױԉ&!]Q28VMHɜr-jgz`sb6Ϻv3}NGSfY^lZ5-4{|2[[d: 2*S`HV|MywLss;|fa'sx\t^%YTv0qRW!*74|MڦG0}-[lT8{R7O X=؇{6g̅cfHO8yjFޤ7 Fƫ!Ǚ3yl0b|o-?;I=5A:L>FggnK{y)e)C# ޥ^?O& |Mzϯpf52ZT\.L#ar(3WD;L9i8' r^"ކwxӧܓcs;`@ mq]!:WM7[U1Yth2zrC^Ds$Ymr][6^wkA=TQE<Ⱦ(=Ej۽WE|L`kX5>3~IJHzF1#{Wg.3oBf R CM!UM-ˎ>{ m|1rqdyjWm@/yE]C'2S\!PCOײG*eoDz"SokzcLB< S>bgȆVq^ 4PSRLڸuKQ7ߚ>M}ZU*/ w;슫(z[Op7o{CY5DF!ݼm19aA?O"6)\LBI_9І`FpB~QV.tЙwTzlI؏WEBwM2dAz{&jnf w:}kd3' ^MmW/ *ddMHJ*v=mEZ VNFޓq|ڴ,n^?lAv!86G%O,n:am/1KfjY=y1);Y#@,|3:q-0;%L` y`JiKTƲ wS6Q D,cO+_ PkFR%2A>ڮyÝ17 /)? h*.)q<{ :r$<;=V^kKBP' ܾ >9}..sRRܘcļ\up=,ȟWR XVC:hM4]N>iP'9&\1HŰ##Ds]"d~o۬0c4pW/0·gez~vP^ICz:p_bϛh~}[1t+N _Igirs7]*R1k@gָ̼˓9{K ʎ KAsyeiD5 0H;ʙ=g.BY|^9(Ye@^nG52ïu4r :McL!E:6DBx`~2hqlV *Omdjej@!6 O{RFu/mZa RFvGi;|3ei+]("&LZ+5E*D]D Aͣ"e ª+ L.wʟB_7 1~ͼ[ r)*؇j98t \Mm2 g숝Ͽ>~9IKӮO35ܕ/JA+|X~]f :!sumUI_դrm-]J$[.)hҜU-t7b2bxpӭ;N!KK qR558 VO \;bܫB,k6@\Ԯ 3y |F<--kJuY]CY|푚hY2F~7My5{!nF{,\7][J/z-n9'PTOϾ)"wl'V.SZ68GF)[\ J҉W3IRRgW&j%&Ͳ,xD tUt)空 %> e{dP| rzƣV7{ Z17x\?AH(vr̿ȹQ`"rj;CmX"Stx˴e#eF L`+canj{6 {X_qaHZ {{CCPd5x(uPX҃ve5g, 0f}d>2䮒+:Z6ќz f(?t.E7kYS -Zfk\oRĵaE:_ MHy G>vZQR춘ObmwU]M֬L~59FI*T &R]&G\bLbR\7ɺ=c;F2\L,ᔎ)ѥ9$wIKY;j$d_AkBВfk:+`xsAzcB< Υ'^pibX Zg Է\t*4HckXs, >DSZ4[Mz_ z+iH#PݍT\TRw ʝ@ 6PĆ~Ad_OJR G=_QTZvrwyQ'mtD:!+->R]pǃBS~\|e7FBNFQ>Gwc~QS+_ <&(Qw8ą W1e"@/$-F&'4` @Y]D''O 5qDLUD4./'xf (r )Vk\yBLocnHkSUܿ/uٍ݊&+^h9p|J=^ُcI>Ǭ;ֈ@K%yT;]z7b0zk3g%$ 9\||`jwϹ^ߐb j8ՓfAVp`H;Y$Mb%t@:?2TpSU:{V|zKl!͓nW̺UeCݰR<qO-oT`|"=6cg.D>aC՝Di;QB99λ,\o"[^l0(8 Xᅦ!t3iX/.m'jʶy tXLtI 'K _ϐP2Tq,c}uF/3O^G0sD#J#1-Q{G~3|ΘG YoL1-:)H/aQxjhRJF T(žDֳR@%H]J<#;@<I^0YwT\ym 2e{foJ{JF/DxM=,>ꅸg PPZbձPo3l;vv tîmP#r^)baçU4 f75嘡&u}q)fPuvQXLX4x :B3zqKi5*rsۄ V`d ЈG .C Qt_9Xh].;PA e}L[K)V#K b#[PkyƶEa?}eͮ_#z YgSZlKeD.?1-d:*\}r:LDԈ#(:nsoT־Ȅ pi gkP/dSM %0KPr9PH!t[~R'P$~^$b;¥b w{sA ,w֯3A5rCr`%œP8L8&S.O$qy,Q5&YD,==ଝX?aqXŜfl1ʯCq% |f7Р,sX!ޘ,袆'jA'l Tkt|$<N5Y6YQ6Au%aK}N=K9ҟy!TPiDh!s(v$Q6ވ1B0.^)U#:ۉn/aRA@,kҩ\*1Ȁ8^6p 2&;f,Z!TUDqtHSX-k]uJb^'/mBb V}Q[K`563`gZ- `Y2_Qz4d8AQ9ĪJ!J=f\oAjhIN)ذA [g;ً}\ʳ1k1XaDZt)z~=~y Ӽ %DH~&; ft8ϳUqҐNƞ>[J;z)$p k'qoL8yVUpqNKg|9Inu2̩nVd筗qGc+=p /,R.[}:d<S[Υ%'Yϭs" +tnԳ?]W"30Sf;ddOI3/J};z3t[~6]_\KK̐񸢔u-pgpVlj?71(}BZ)=:V."it`bCj}нMT{[? io_=G{U& ̎/!rXcˇ2j!kAAY Ei8@؎.][w>:=Ⱦ) "m~9j&!(%wTI506 CyŁ$SZ5^O1Nlur[uwWZnN] ߗ]! Mt{/XBI¯CoϡO[Nf_L$l R8ANmNGu.A35fYcx/}0v\npQj0 ?MM ~3TfOM4EFX1OdǸ]6ITyk`_XڶD؀XfGŐm^/ haYsKh}.-9֤-& P:#xPn֝5fZF"A sb+pq; xͿiP!TX)N5|v2\ :7mY|": qE?to 6F"6JE~FxVwfRr?7`oݲ)b9vԤm/t|i+Ui03F l=foPBIx3^OkWlYKtK.};1`])\-m 5-:zj EJ6iݫKg/8qfJ#`VKN:>"5BنOs 4FG1T V rn FFsxh|hU`,`CN]B8NRסs^hy ]EwR}p)YrnHe8,q: / T!nC,-:._͍u 7Kt2)?9|rƟĶso1`-(ђC釥sPʽm'csst&#AQ5ݵ݈MǪaeFx,U.VK24f\z0ߣ/&Ag ;oa^BZ6]Iw9YXK)EWv)ՄVȌ5f:FOE*\6ϳIbOX(uG:rځ+` -e#7&i)"/usu'#nrc)\=Z2$m> oyN R!Df\B+,e.j<=A~&枞VdKU|& ¸i,IF9|(jA=E`Awtu[[$G)4BFqg.%K3|fA~2c5̝xr'x6kOߍAxjϮ\hu/,ds>W ^(2[2x)ºĢ1i2Qn9>Rб&8V4z 3qxDɆYϐ0A|W-m(I} =K}(Kay>9~XtrBst\}@$II@ Cje/~>dɫ4[q]sqVߖHUk05~1ӈ# To{6EV tlP[X0xjעߊK`ަ@k-2j}+Mr~f9lb/fz?viBV@5~tZzDŵ?IRT!t裌,R{{++M~2'oΙu#`}ʙLڜ6c:Y$XkyC I{D㹨`D9gUjw.+s24.pWۆUd2ֺօBE@4c'HOkwm_lT?70QDot:Q/b/}l M[/>ZNXc@ _E{2qHɂ{,~kȉkp/bxyc/IʟJpХz•mxBg.WTڂw?+ԡ ͗يhң9gQ@. T X^zGTE=+y{C:o߷=rAwaPKO~>h;nx60W;ejPmDqXbZ Ԝ'/0=:F8'= d="F WnrUMzwp$ϋe;ҴG440ZH8}Z|-A %ߊ=\$uAҾʻʘFlϿZQy A%$xW@v 6 .(Ba4' 9.+PjZmoP Rw"F=Y\&vhzMꇒZS<&o[mcmD"ImO~YWzjs4ʊVsf,6X9J>gZ2 ث' V+2NøyhL,VaaoX5r(5|nT`f]g萩)}S ^ٴ^AQ+t DC,ot,[Fl67c{TQSSSO,vb$BS;\oeԓݱڹLdd\ Rو {Sq2 ϩ&v\]$мG>'.DB$׆V1L'V\`dLuEYKlܗze;8{ܜw4| ]sz4'\%(›P'z4B:¹m3WQ?a2N&}e[ < M?xNMVEm!%~lfbc݄$=R_`Dd7ztV5ƂiQIO!bsbua*QEKIܖ P^86aS2&u%%y]?7gpU1)r5n @ܮK@q Q/ZfÓku;y*~Qu*7:Ŵz! pbYs>[:'r=|} | fR8qẺLiyQT?|A|uGwNXLY>aŅ%rg5 .nvh9$Xqs»4bO.[YEg|~zmpNIYq9; Bʨ7],`r/䳝h;3{b`q^EcO rLkk.`…rsUu4u}¯y1`G׈JVs}F]r]NR4nǸ3hMЈSp^ pk+"vy#3 r?4옟u ިB@,gʥ5@ Z HE5V QI?~ag3KP m;k#ҥ?JY K1SJiVVR$..qj@rҚB~v_;|}:7c7K(V$C(цwzMy.\2 _n܌ nn_OY{p5=P`^V@7=5G(ҦqXxReƜFm) 3qcf&X6DV &`1/o,1HY0ah;iI IWͰz)DA0o(j, SIR!ɮI1.# K-VnV'\T +*ЫzvFֹ2{Zo ̛1%Sf| #Xv|,p*bE'^xͥ%zTDu__x}҈bS(NŅXF j:$Փ2~yAgI)TsK-^6G )(RLMdQ]P F"_ D X(J t?wCU}&v/$F T)p ɴ _~؄>XfQ󖦸чYk5~SNǓ-iSi׈HǍuS ]rCsy-[a ,&w Hmm8SbO4csydksXMɷ&~N5?~Ӝh~?9d~n 'lU+*1^՛;ЪVjU^k!^[W&/1{;cKGdW:fOF%@|xC㊱ԧv= jaU?]%L4E걷l#\myUgk|-/x( 3GR:dqވ ebm B)o[aVEFw|:kKKX \p,u7l9(,T{fQ(9V[@e#8ӝO-)$'kHnB_ݲ_<*43j }?#O,ru9\; rjKi9~o?O P֠4z`~ϴ!B3A%@Nc2T nyj;v| =9锩":~ktd/h0RkLm-Z$7ή0-Vt|qcF1$F@xiMuP @.5Bp/.=j0D"WwPf(>~&x8[d86r/(Ϲ16_rQ;:Zj@$mv˜\Bm8M \]J2RGsrآ1W؉,` ġAgzوrWF2O%lI I\CUpP'V;#{[Sdžqh3yAӌ@/G]b'Xα_6t;B:Ӵ[Uw`8edZ9gEH|}HAϸ=+S }Cp{@ pb&0^)sEY1!1T$+*xF@cvNrdxL |ϲPg¢} pQ Pά'~bvi"ZTAV!^.&_Ej?@/El܉g@f:3:#w˅ŠJ5~*?_= J*{v LP]RxgAyE uWf{';Ku^ZotG35f;쮋a@%Dr Dy*@}%&D"q@Jtȓ0v|SE=ڂ)H~SCj%W>oa* NΔ ߣ»1n=_RCw9 Kwރ2`mCB(*27 u)L%ߴP^$u&lxLF4%uO5^*߀Lxdti`fo#F͚NHZ +r#J'ƳFOb jc|mZ?Tz}?Ji WWla~{ A=h2Ć G):UBrwp`8:4-'@3`p7 PkVƚCJs쒺>!+i"e ݵ}6[q{ÞiW^bԵ{ҁ 5!D"̇ᥰ\U$R5Yqr 咿2 9"z8I{uJ9* HD*^_Ϸe A;7qО'͔ myz4TJю )4w|= Ze?DX++0TUxB"|ovZG; ]Me=.G͈C185 : | D+X^⍙9d Ǯtu, ts8`5F:R4pvSd`@IF D]ye<}hdpz^դ jP@#abIӞ c0dh<F1Z]77(!9CTYE$̛QL8>GPLu$F';(~ivw0 :_Ϛ)44A/ qbmtA]嶆3K.V>Fh#ڤ8P # mh QEGg`}G@>⚜H3V|ʞ4DjT1#m&t~n!5G+Ø2 b=~dT|?u{G| 1Q!3zoasZbx,i 9:,E=EwG=b%$?jza^߭Cd`2`_%s*Iɕ\mPlw"A)Dw!`ErE`tƩwqS&t{IvKA@OۗHdo^yh_LZX-U*@t1jԻ=\%Ho AcO"]Dn `pFT#͕@K2Oei7)5zjDC%J΅VKmRz;niq\lJKqtE Hb]llS62N6{ĨW_aRv% `EC>>ʳ 2QMT/I .m*CzS81 lgg3X &Sİ異q5,\vf,ovn5XVBcqb:%OeiQw+87xtm MUHW}wQAQg*0 ll%t®:H_ExR)}MxF_!mJtRF˹)hQH|PӄIDL ,!G!~$cJp/r?)!^t+cP,Z r\r}d$\ʍDNm7Ywn57ETl$ĕc=4mꍆvh!  l!?`4:Y VovL",Ȓ,x`k&gV+7FY|Za`q!!(,+w郥-iGfQْĬ2CƈQAZ ]f+ax1WbZdqח7ɶ'V&C+cO9QA$cp<@ }k 85dD.۪z'v9=FJjQ;QR/d2=`5@74$;3V&q ~R\od<.\ ~v"\0,b6Q~rlp?xL YS-]ЉM- ` ΑXF P.AR|a/hO\W_do'v0˛´VeE_H R i4SI3tOw)_ j*AOb!+ZB9 s| X43do%̄9hQѲh (.V jr䐮.Șcwwhl)HtRZ~u볈:oaA >Л0+NCKVP &L_dmbb%Wk؝҅SÇ,brINތ犾pz\ As1mte>S;Ps$8I0şBFHKb$<ɓ`mb&aVH?a:% R(6DE.jgW'Zt'p;S,4lϑxTdђ(*Q|fN#f.c/ ͯn^@Y {ZVd|y-wTᑕ JWHLg;c6a5š~}$Vip!ev( Łlĩ0}]W(WRiݹ5"|] 73 `Xąג_%ˮM:6r͟ك|z{=z%' 0lmj4﯅o {<BJWњE(ɰ=P@o~j[̨y3[2=LZiL٣U < 8>hk*uN֓Sh&P\ep]?9۫'HNU0YcBs!Fdi9Sfk\<u'GXD`4 #f6U|nLWnaeqõ7h@) U~(4IrlOou$.ZNE2y}h[L;eK >2 g+_Aay^Q&۽`plY?n\WB49`XP8Lfp1uMrb`L$NLB[wqX/7 υfՖ|^ ǘOE+(; ayt _KE X^l_@ $qpBC_71g?^ f M)6 T~ev^9J%Y}QKj MvЊ>PXWk)h)FBKĂ!vImI襬-^IZ44Š3{f:p{1:0ng;h H93glX5s-T%~-8ǣ>殐[6aT:DG)^2X)ӗicPksn +7t<\XQىM#Rap(i;jǬ@z&Eyz_}H^pC$ln!͵T^q 1 ٢xΰO/ v L BS]ۡJOD)9&^$ O7:\O.L_[fPLF;-H 5ꚏ]ޛ;c`+桋I0ϫ;"uj,PxP҈U#'z^pni,؉NDeO lC4('Ic;0gC1tmBH{9)5-y4Uh }|dD3s?2LR5]$3rTυ6.*^+ȮrmYY\^Fw&7$ZK @Tuw*Oq\ĠFGfV۶OH {uMG?LɟS9T:{|jzX/D"7э.-}&+}s=e%#8g^񦹨u>kU!B@@AP/HҶިܝ) f$H31c珬z{ 9􃓴ʒU +{qJmu4lWU.|JŽT}6L"lKs1( gG(х$/wX{J1s׆@֒c! Clb3x[j; mUTv+ߞnXQjixKw&K1 F eA-q BwC$m[J;FZCs8gQK\}+,F%pud7y`nOH=8xWqAմ3̒% f?όu= 'CаDɷ#7XWuH)]@*XZP"+մeW#`-x AГUK݁C 9e^Gx! ΰCtܒ%Wff'!c`kKm -\{x޼Z7<;~ y,PMۋQ]uݴ{˜_sٳ=vj-rt~IR]9_rjFq-^a쏔[b|L͠ÚOv]}T!y]q |6q2xsׄo!5@ q -V$̑=)_Mj`A\u%,C\jJ0=*MWְһ 6 $/+7[wA8*E] H)ʂQ=K; @^"MS ߤc#vV 'lnB#=7vް$T|cKj٢EGy1UfFT%# K,mh6˛Ph>'2EwsOmślJlrS7t6fғgv=T0_庮&`(ʘ}lHxp :cIE%GԴe\c\61u' K3)f|9@`M@$)|z5pBV!dI~Oxh\S]xoEe#۪q .VFu(vGx*kPamCboUlbK^^Rи )TďomDT]WsC-v-ј/Hq jJOk& n /ytnXJayAV2N|ݦ''Ġcn"i@5iN@V)M,BI$ l|sb%<kVyQq^ uijVB'{5τ v~r6!FDvE`jэ1ܪSa,v|-XQj E^0"X+uFjtAq LaU9ذ5..buRBYQr''3ko0/jr\'sGw?KzLC˽HZg9d|;Yv7D7&Yt켚cOЙ!  NkX E h%3.h3F,p5T3o.jȻଐMJ˄4K K <T}'VK4IS"^x!`~>'<5+diNQ"sj}HmRO{.Pﮓ}UC8ҦÒaD9xq^'$*A_piS`lHKeX*7,t%:v)!ӂfD$g=c<?b"~xY(*HLѵgoӒ BBM$BF {i)$"?'k/|aUd'' r_]0812^5k(Bsit#Cxb1 0i<\L_f]WUBa yXBdh :geh[X?IaGsA;)K*&.s[L9zv6ณ1E>QZ9kUAi8 |b)d !B1 '`))*T9}?O!eYLsFSmWh~ t10jIMfW ȩwNBWMp.q-\8o+uy T8PG9ܾ1V@VYP>|웩Rs!FJ\Ӷ2xGohCi>[R^XJ6j`ˍ5Kfo ׺q[Z^;?"%K]*etoK$lZ~, ZoU0y"8;{b NILj6f^ Is=B =*8?Ww_ {k5S.7X]~ȦN~^S*ensrQ hpZ̢r?ؠsq8'<޿J+Wvj!E$h/pY}-\bEuSZ!b&E1l#Y۸zـl0մ } ǿ?ƗzY2[BpILfzrSQM@Y^CT#!.3&څ=ӁP*E:VcYfr#@DtUX sUc/l%Dt%9%5Ʀ5١3tXaDy RpI O-p\;TJ~KQM02Ȥaʎ2| N8|de1b6YX xkg,h`Z*91dC8~x$3t91rrCY#2(@ sbqG:Ksnk%&zX[Rin(lp+9"ma;)4`BZlxdT$f;PY߻ !=DzMwӎfnLVξIH( Q/@& ({Z̽Sf>fE# hjrA9+f 1gV:B#jU؇ߜGLp/‚#KH„L}f:u/Ա<WhZw8D Cš6Cm`߿ x݋%tۘnv*F2Y'@\_]XAW1 V͝ml+bʀlӯAjY5V]y]׶kwO\J;l:L0^Y7S hȜx(<#dn9$xJGPray]źV2a:UJ"b*M%Ko!y xfwՕu/c6 g/d2*fx dTom/%WB). Ȱ0c+!YmY] tb42T<ޗ0;h Vӈ$Ӥk|g,skn 5d dy Gs/w,uBMV.2 7'/ۆ%bVԫ_f՚YQ+xt 9&,ټ\[euV "sUJ+yD]9kޤˎ3APӌI0Lk*%dOOQq+J |6k+y8L 7W]{:xWY8]u;:ֶ~TBrݑLZW:VcF)Ple"2_S gZ7c88NQX}̳\\_*gPDl&-jWR6/j<Umz0+.fs7>jחRt^$"]˺D3:Ʃ.Ĵ, ֭Xg@_4-\GX-b2쳐Cb' tP>ݠ8#D]U]w2BZPcw?'mkgA#?bM8„Ob$I)_;W ETs51:efIEY֜ʙ֝5qeI z,8׉+14 ˺i?Ƹ[Jp3!'~M?N"܌`2]2G<{Օj_ !Z=[9:BbXqR * Gq-_| eJ+U @$d q+Vd|r!E; 17ҹb/Vi?/~" _9ۯe)PpyP("T[K5,w E^Ȩ_J֥mkPBEܥGZ6X1Mf9\W ZdnS'|MGڸ4wȊ.k>qH̟4YV! `^Aڪ01D)xo+K=KPfzCatՎYY5b?&&gpls3B%yeCXս 8yr !(5aɞKswʄ,S>%A`ꑰCMUJ1|o!7vM/ԶVZ+x{EN92ҡ3rlBħ"d- MJ́7G8n-}IS 7LOfRHnvpyg1/)֬q9 PӨi['b< R@ZTjylMBBu((=*z2N[{ݰ T0~F,٨y}sTQ,d!.TZ7),#۵uRp5%0P/D9S*rP4\xϕ8Зr]@LUJS(]67CUC!kd@pj]ݰU{\3Ƶ- 95 h<4.`t=ɕ& tC;zyA]\38%9Lyk0_ôrԢFs7Η/G+k˯vں\ц0X8"dMM|?fbjl;/潡j}=t21H8'l ̗]axHSNyV2 ZǹXXt'k箃`8@MI\o6BJjH&5Ǖj٪1áa@py3^Wk?; D+1ؘþhr a0TmK|v'6J XG1>)<._ru0z'J2c סt + Κ vusV ʫfX8xřoC$yA`j{8«ۮg TaXevdSI.0KI7!VGDhf@$_dB唐Du4SZ4R{^^1)}Ki㝶 yah9-4̑?! B5t7I 3wDPb $GW. XoT[,oOeKbE@tG[`N 0aX a-,+a?QF{A]=t7>R^;%8jSR )n qP2G<h1`Ym!/Q4y\*'\5!vʘZr .ah ^ƹGу^ױb҅eկ!!ԷY .7<0܁\$k7|2+ इK[gCAV -`G6ʶ[ [C8h.` ess u<*-ԝmg/!ٵnX`ϭ]m^=pVf9ß-TCwosyMߗf.+{hގ»eU6 Qs 7dv|k\޻ӥEki?mtI4+XZ=?4P%;>O] ȉ<"ú'L%) oy$!o`v՗v:n3n'}%'6Ug6o!r h>O23&јgGO1`~^3$Og~@-t %|ک NBS`Uubk Ddh8liF6Caa-mƜ"er4o4 GP4LNZ%55l^X^]n  !=Th+tMR[^ֆh'5˃CgG< :kNζDl-Q ?xQskpVɂ&xml+ 3=;q- dLhf~j a;Aռ䡃d D!E2"`J)Y@ īri8|Xb;wxopjoQw.}p?l,-=xНCщˢyh6wNk1Pra6V`=OATG촂A4ob(A *~!BnEh (U8 DsY}墧V]LVglSW'6=煔8jk=6t3u El<}BjJtl q#ưiOfm | {O-SdillH1&mJG~NK/kx'f0vKp/t]@nE.59Y0y}W1gcsP?m >Q0ˋPzĄb pqS؏9"$=; KX(8E)}Gl7ϒ˭etlE (?zwwYkWI Ƙ ):ƺwLCE⏔ ɑ^d; u̲m,55a!0'1MH%Z ":Uj8TT~wiyZ FMLГQN[rdu@U*e-"qoi<_avJO*FxG%z]7/=3kQݽ7#-W+*SEjz0'A!> B⚂(\x.ߘ.]|v'J[0RpD}G&룖29!!KpVti&zU( hfdYi:xȹN5Eɸ fspÉ h['I9Z ^RM5}3}3%$c$p  n@_4_=M qHbүE<)§!ʲD8L l"'/aXۗG>GzMYWQۆy9~swG$Z}4kϵ:wֺa{"=bv %Dٚ^6tT\  #y@!:߀]㘖ڝ<5F穦 r}Sua4ԳӅqOmK'jnQŻ󓗄Dtiq5)ESzѫ'{#kqn-C4nKNDh@DɾUs۳rbFL1mu?:.WXlwpmBD4oo A+՝$A>F`ը$\17M,*gT8O(tnFgAV ly R<58Y|ܜCHa͔ot4ab塝%QzAK:yEA{AcXr߻Bȴa/$=Ȓ05Vw:شtd[XnGb:xN:S=n qfu訊`N~"_^/2Zum*WdY]"A3R_oK0z_ׁ|@r?Ұ[tsŒؾH?mt,9CguQd7ĥt:XXNsZ֙S_rWYNPƉws2з[psa$ø<qD/07JeܕL!sf(KX;o&{ 8bY)4ʫ\>Rֽ/vU)lVkѭ5۩jF[ˋvQeJ8ύHp>jٯ!]|It՝!Ѵߎ:hh" [9ƣmddTdP2ɒG{\(u*27|{Lb(HZ;:֢N`,M*Tw?~>T䜤@T~T4ʍ\{D]-PuR|D?@x:A+K!H XV9i{Bz^.X l6(4E:HSQ|wg+zoZfjq 1*\ .Zb7Rԩš[Qu> e1 #W81NCXI0rksEGg_7T*iE֎%_CCܡ͆p=n$ ='0Gq>_).]T6ގ$p`g>-DKZ8=nmU8XZ#keO^~w4؍ɃxvڄiJzl1398^029`)ls~V6tZ']s_.2ʦ]u܆d+Uq* ;Sa1*m#r [WRTlB9y]\?N+c?>KTa5b-v Nb&0~3eWԡ{;\Tr[:sŸvd#sـ_&Hgӱ F!dn}DOIu_ӦǒaCsF)Op0ЭAg,AdJz4Qw 4o Y-+☌eiz|'"lOBMr@)Dĭ`Ws#qUh|hP%j+yKMq-Ks2Û+!x.㻆 P靄g("=$@<ѯ|:8C.2"EK.^NG5M .J?uԠWևOZE"B$}=yS1c 6 _9YVʩhJV:岳%~#AhAݐB"׻M]ew+nHb~f' gJk[ШmNx]AUA7@TM`P%ױk8Qݻ鬖rBpYsOw_DxV PuixK,D&rY}!y@$YKȣ"i<~^:+y;Lw tky&}sa=#W`eBm ˓4hYd7;KfKE2ɞ19/UwG% S&څ( S#:lWTR3T^({^pd.8LÏ-ъgh]M;"pӱjB.R 1jQ' t, nF=.zH0NnMyiEZHxdjǧU Icsq7Ԁ@}pF@T/GhvNYnvz+6@h\tZ׳TR&` p*wY6 #XccYKTZ.(<ܓmgUWhB"s7p*dOyLqrhJEtJ X&n{XD?V8sĕM_e*!1~ݒn(lQ >B1¦PYHW) Pe qImvznvt. Wԋ@"( '+hgYM=w_K> ̸Ͻ^'Ti)v[g5VOfCinzjjoZ/ԟqS1E_c4ur6"T闶9}#u d@Xh]8k*7&QaW~/0\c:KxAxB`CaRWfiֹt)Z$SNF[w%/0{~Ty  i8;YJP@)76[Y.˸͇gyi`6U@1"C c|7[GDY҇I[g;J!IUaEr9o(a 0p b7/4،W KV>Y!i5CYH zd h|/t7?#`֙}I?|jC xwXŘXDO:5uq_}lF"*GRjaSk88=KY]>*F$XF݅k8@ e6K_Qҷ1ӾxípO4#;W5&Bl?U n EKDOꮜuy) ok .% m)r:~N5DJ! ym3Wt jRGjgqO2堤 8ͪ1acub69V9НVU.X^$L~kAe,,2ٍ$8m-FRߘ3R:a\HۧY_Ӧ뽂|{#})79ڑDmM:>GvK ǰp@R)A@e(w->/B7}.zuVHxS1o|+Ia˥4H8.gqh[0S[@@8?)>x5YU uC5wf .E:ꏃffÁ%?++POϪnB%,m( C{Jøx '<u"HNO%CN2xB2;;]'݇@lpH<x)fq,mb(PجlVV2 C̟n{Qo+zӛ<,亿[iWx sI~"^5jX0Ȃޱq]2*a[fyMk$ĂяeJ X7(iGX0LfU$v<0 w]ǚ3yϏR@_֐;ia]Y#h:2.kVegHvB.{rEBU`PwϺ ,]䷧V~@6nĶ͂`bFBLɫg#cڱ)uj•YHpX05xfGbsJƃW˂36(K(y*`ԡ ,8L,g'~F !R,'+$K2@"h0-a+qmx c4B|x!X`7;j|9csl$|P4jn#hv_Epq@7E$qIן1ђ VGQ+#^屴> NAIz+;&aNu;ނܒEdQb^F/-Tq{5R[T㰄[|I-Mm8ܾM=" !bfO `>eǒ9zA$?vg}C 8C"忥!1ǶMȱE:":iEH:k#S9E' OlC%5L k|rEA/󰜋'j]Z}8M PXBN d%%&>뻱>p{ي H3*6R45x Y35?Eqf|s*_.rN[_GRkCH$Hu TTY.;&t; GWv;{9 }39Et&ti \2* C ֮BêǤ}K~-NL|\еWVtL::siFnIt aO Ѹ.c'O #3&&/ K?[4Z{쐶q+BW#?Y^zSoSǀ&r'l>nJb6|F\pXT$KL Qso_&'H}C$b{6MxXleۈ'޶u#ö,>?}N,p5IfaGS亯ER\[Ykb["TW#k\wD%e4d)I/ҷl^*QrJ9Ytl?{P9'"ph38 rG5Gzqnudiw| &~$S*k?4T/̣o1Y.WU2OkR,5llΟ*~T{n@feıj|bjHK!MwDe/j:.EKj̶/;sl oNK=?> cf*s˯*3;Q 5Zk4dj h\k#0]%S}b;9Ssye6~m)o%>=wTJ*'JM.[8Ҫ MLٰn$G#(Q~MG/*ſHz2ׇrg4\s(c9tk2liwhhH*qb!τֱsv1 t\1l'"+zSOCE \inc2:%BwU]V!(UP3+iNfFQ"MHl@ŽP{HAp'~}RN?5hH抯ɒǀCL9 laޝ`)MUEWY3`4^X ;2F! CMC(F喠M ]oOڊMeK_>7h_L1MacW>ECG2dXV/I{35umE孜l tppCܡC[嬋b)CK܁RCCVK٠vZ}wԁr&4xY/ZHiξ@=~fPLX1C=^/v{[[wL>fHDU""9/,N'x:OL!JOfD/4KsJgBA:Į!nxa׻NcJrpg6J@ $O K_џު h2uB KD_ gH%pC"O $}O9<&I``#E9E.Zy!zirm<ٝV~M+tTm@KBhz8/D!" /%Yr~&u37%{8{ Zy΄`p6ɘŸ};E~Q!b)56=# S!v!A!+Xſ!`F YҜJr'PN4'څH-]#Gٌ)ëa~y< N6ڳ#lQ_`&2`r땔*"sINRZXu~ב , E8Ґ@ > G-M8׸AҼ,Ҟ=(eUO̭_4`TPŔ: 4Cu; !]JG.Ə<p|A DwA)7<> hvF.OK]I|l,ݹK=.IQաi( Uw,-Q ӄ'/JZv5em兿 R?!l4X_( 'Ջf?XƟ{6k7ѡUarMygK@Dq*3=3y :VP+DDKA {Z$|oAqSl zP]ջMVLwg2>|[5nFN 'JT'zt$9ZfC4h3CKغp2F^h^qXP;,@h `Qkbςl.—vG:lViB "T5x{|/KDpKU}Er#7;Ӌ}W W(<#R=b[CoS& S4NY``Y= }XlTabzzo>n99T],$EtoxW&O.K~nƪ[hR Sb COaQZg_ez@?jlc ϋKAVԊanO.@;eɛuf3tmF',UDqJ1DΎW:)A|jkS`k:W?5F$lftUjK-fWՆx-?,+铤M˜&]zJYYl_RyF#`z:Ȋ8'k>Y`,z lX)ٵPB8CR|6hx TAZ)VnNQP 8 cP ݡWׄŢtf.`#ӫ;nd>hQ*",P"&b^ZZ#o. Z%xJm!has yx4RZJs#~*cM*k@g.wY5؎+zGfrµ/pZTB]%pP^WlcjCfVWN+5JkjTZz@z5XYS׌HLIy/HEoD1N{ɕqLqP|N{lWc|s:;+X/u z߇ <\oS(XPɀҭ8FJfiSiIݳrOҐZpQ|>e='%˥'Bn ]R& hW? ϲYt{R ,c$kh.v=NC4j"_cL ?:5[:ej)xF}9¶Yލxy_Z%'enQbA@ l#cF_8'PJH5kswLϠ v(D6YmWuKU FCݚ|XסljefMX,li})j|mMڌK Q?]iD{vZDS6N|{U]V"ǕґvjxyƉbnس"vrBJM4W/bM՞YU} Nb^0:j+|P:G``&jI zOkGsDSb1 @ EVIݒja3Mx؊q i]Ú~DQ&2u$JCEVA2gJ}ŕ۲v*ixyUrdw`]]_860QXYXOKa9O%K&u^q0vqQAwڽ?.'[(#+k9ɐm;ys,$IZZʝCƆ;4 74Z}'7eħ3NC|l78[]ms$<3ÎVکg18RB/=ȿ_<pť,< x4kb i xOiֵ P+ȩ] `"57}'YQ BAsXy |{B&&1!0zsHҦ7kJ,y5fN ~uP [=)̉QsGՁMZ(9goûUkP)Nbtl34fV˵jdI4РX4;޻ҵ&`h(e2oaD.ڗ/GH.,=R ӥTa55ޟセ"EF`KKgaQ uSt]PanrCGZqk)FT0)*7!ȉ`Qy~U3"vR۵,@r$"{aMZ8 D-nF817(od~$w>z^@RΩ~ԂU#[)9naV,",ܺdY↴~maƑ=XCJOКD)!&);.dXnEu"#p:s+q#䯺IZcG+/hm\~Bizlt. c֐ߥvMxrI.8T>sv^\Te@5r^!"[сΓG9gh6j r+ <L 6!ʴF^ɴ3 dsMn׳3foY~N\) @ q7*>)zLQ[+LVTpqP"e9"S52\34N8yh^~=_ 97Z6sH8|"b%[!v"˓܉E4&C@GSa=Fk:̲%;gb4xw =.d)RbrP[EMӔ=.0DHWXpBdWH'fG2&`7+ӻaUrQ<RBp媚!V<ϫFԫ9q0]g|'4+N+Іz1SN,I,UH!K9FXb+:M;}5GN^ :51tP%e!o+ylYiUPc"2M$g,*5܈A<fű{3 ,LGB2IGFSw5<Bufm:;zHr7l 5HS泲eF J M5BϦ!Eko6ZڐhD۾0 _ #XV:h[7yᓋE`@쟅Or5Qip_cɆ*Ơϫe+D<\`J]~Aba$1Yev|vnmA[ cM3Jc>=;wpz :D?'}e~) : MҡZ< Qô^nc>|r'Viԗl1 evqd IKcHN(? )оzB dcow+bFZR/jD .lžk=MSLL@YѪy27z++02g8?SF\/Ϧn@=bm0qYr D($Ut >QFK&, 3@fq0!AA2?d }#R⠪UHLgsyFg/х||HbIZN.y+(_}ZK1̽?{ХuޅtEVp0hݐN<܄/Za8GJی>T(t8Hw"3UZ|"T%G&U o_~`|4\LAmQ*Jm71NUdx?fu>C2ҒlދZ[x 8xQvt|Λđ1 B!5=i9wYnŨM8+E|OeOsj)y"0\58<5$m{Jws>6)2~:,|)b;7Olߧq1^W-7>^LSuLWV:}QY!k¶fEr1ZLܟMZZpx?P[# -pN;r8.j.f71<*L}?MW FO%w=p&kwq,˒ŰV,P#-q>$ܖWiC;dŝ I|XHEtX|%̉ H-&@kz9cߴj,u`/ț:ށJYk4Ѓ!h[STMzرtGZB- =c1ʵS?T]ܴSpc;!ߪ)'qPY)E3~QQttqPjGĠoe'XwD؆n{"xGHl!п|ܪ˕x9+N+nΪ쯨Σ߽,avwEyv'1HB$D=Mb i3A$'ⅯkwȼrNlpW1s|-Q1]U\Bwl!\B;]*}RjZD"FJ[{mc5-1 ׋YDϒ^0(Rj`PHOT,AbmޗO<[Ihj'T|0A GM&"tfII'/o¾s{d-+QDԜ 1 lH[MŮϴ:O5(GLlC6@E|V"duTA.Q7DܞXXڏsX>}n܄Ցfz]j"ɵ |o Cjb^ghnTcgc|.F33{3yg2"H]#$i6Yw{T'n!1$ _&(@m=*r.oSڣ CQE;q GQ SE Q~|o粦yڹf"s< N41^/rS略*6:wPLr@)11]wen{ؽ1_VL  D.KmVTkhk=QA>!'TS+i?B3V%&GdJs;3m禑~yц'>!Nqy0\czfZC#i6UkYҁV%8iV3'$۝ )ŠwoMԙ!/%؏_BD8/TS'./aGh΀+>WvmzhրP-7Z)\Cl{[@$^{Dr:V T@Y~u_P(IZhɲl~5/+N2ElFs?s\߯ۤ^X`Kb]_6آt X]W2s8q2VH 8ekU}ZxFg /jU4L07AH^$Yx082)Mh<29wגpv"Z%$Y/QY\ߞ! H.@(wd gD(8m 4ev!P U)@2͠eqQ(~X#"c1<bS WP~c>2:;n7:az ۭ SG&wźִ}'(z6cdaH = 8%TFCUm#1c狮ض0gVJ}w y GTJH`T-x)QEt._V#"CZdrC$|t5ջM'EiqZ\#>d`woA 9\KX dv:: D浪M"sZ[E{mub<f`D fzrP6Mr%7铢ʺ\3(s!]7mwjPAy3y_V\v_`oJ3 ˝gEJ7\Gpi\"y@@b2&Hnv=jG̾N]=ЭřlVha}q7ܷ#< i^i!jQNUH`I[Q 2\+kH9-OLLYĄ#{ 1ڨIsq̞/;/BS]sV̸Az=Вzӛ aKTAt g ʋ6< *_<}ypfďcAJ"+:u@3^,9;`r>.y3C'q}i]4 k , x&6\qMzW1hR-7MU>zoMuv^ZJxW|~+x(9bNC7 7&?D 㢌$+3 wKK#Cv:T\Gow+^6~ |`µjZ\(Ng~lb82)NvmFsC(N6NŦNlKj݃HALƼ̿eV܅0W)LPXcΜh<-Mobwo xmg$ߦ.#vmc^VÌB]+a 2p (&3h v$ l*9X^*LEr ۽6_UܷdY xē'H=@;;cBޑGOitpy5H92Jڑf Y\;Ö"@S)c\hY2qЅ,aLBji[LJƾ8_`ߛ×!2def%'{9Siߟ%dqLЬMA! Ygr93t(XڛR+C{f<) :F*,nV: dƯac< ==`s/q4şޅ=0 &Tn߮< j3t! `s% =ʢw()]g%$d2FKƳD9 5OЬMɋ ZzSœ~|ܥX`xSě(^;#n;5" ĝ@XgOJ|hDh^rN,0_ =&i7fص]5aL+cjP°7E⪫;q]feƀV!U<c)lfLLyCZz밞C=eed #FE^DM̏ޏsl%eFF)蟤UsלF"8z0@:\&O.|ؽLHV* +XE=HY_hG&ޕK0s栣PKL>/HR/+ʭ2&Nٿ=ȉڏjN;Hvq3cx/h@ V֑lax7ƔCڇs^Sdi3LY]ƾeR.Qg0@v=~yAq>Җ epRMB'Dٛ^g6:(Ghxy7qa^Z=Sv)YrϰvN=G7#˚A0ޜP9њ0% o~<-S,fy,,S=f#dltߩ[|Qi Y 5I%K)::>&|6iB& ܸ1+N)}͙t@HԱW*yV͢Mt"`-xӵbX\!Z+ Do&PS[HcnB86\v/^g͚ע>WNCb?QݝQ{!TOlL⌥'Ɣja0W숒/ : v0NP]E %- A?g\ds%fK·lURCKo8ZTޑA,R { *P}97"ѽlC2ˀڸw&'ϜQ`_êנPU ?ә;/簾AuCc^鶵7/z5;^ >Bѩ=io~KH*<} 4}V"y?z(7*MڣZ K7?˃ˎIĸqu_Pc6r>l٥RI@T5Ĩa_#~W [ \vA'%G#UDc9ԙ_N Έ+kY~I{Zor9}%].oDVR1¤ӗ\ạqZE>Dac !q@Q7MoW";եn&}8 WyJNRUgDZd[4J?+IE _Ep88Ш'2`q(CĈZShXu= SX*`rI85嗃{RK;DD ,'&NcL:s w&wYsOY睌݀xl 7"0OQ\%7$jǖ~d z )Wh:B$5G|[1#\4?OOdHzD:mk#j2/=Zܬ6 q6 "lwGjײ%^9 [`<}Me?c=b&c.{]F(S;̃"c|#{<&^=2>QЙޤ=>.rA6Ow&QE= &>wZXMN(^iѯcl֎b{5Ow8Kn;'r%X6͔75:XGu 1[^:3QÚ& 2De>W7†\x_$@IBN{~N"'=UZ©Vp+vUfR^KWǵ/ p@Ś,O%P^pO+s푗ղm;HJNzP@Xb@dǰWކ=ARf0ߊvi=j3(e_/ܺ{s2Sv0P/-Q\yfvk ,+1}){JRl> s_{  ޙ?V8;G;1Su|/{nQJ;+RXbτ\;[U-":0vB_Nl+<N.?yߗ#5OFp`5fZiI/~ CT`roЧ[s>\P-֮W&0T5̮@ϨbUhhɲ4]:MN@ {UwŜj,\#T٭C~O\Q'Hբtp|omA mɓS\Re[ \k>pv)fFI( 1e雰L3e>/ 0K>_UA|Vlf~Yln}j+6y2~ȣ阜@iEHWBM 1c. jHgԎ&xQtWh NMA[s+w*zt S4SBR:Q8hNU1J~P,Ez|+{ ]/WFeGoʧeLV OG˩mpɣSFQJQ/Pfc@z8 k#rOw!=/ü+ .lQO%xʂ?pRR㱌uIMIoB]; Rv}ݼ;|v=tצs.pe97"ToTtAXIyNMFPch\_^؝d8u(O! Jϛ*-T# ('2a"g!i74gx!!V^8\+"R |,ӣߛ0G%Z4se&]@օZkz Ql5.^L%?LSa70"XK҅`hM L5M  NXxYcN'l\ArǼljbu5jZ$2 Z餔PA]ez>rŮ¯+V՞hxSC [+TMD\x{z^QYK_({[on˜홟^hyv$MZq #\+,0ęU'һs` \"QV.%Ƞ֙Pg]O\ܛ2 b3$9eI:7X̺c'6ħe٭QTWS`~+6iE{}3VMê D]pU PVNJx֦B̿aD r Z"IݟխrS"¡,3Бw1'M`s5qWZc\)'P̛4s'e;9\6 [j9C'!0Ӌ0C387N |V)jG&yg 2 ]LTe\77j57irY2UûHLTS[U7=sY~:+^w +LG\i(u͍k9iJrs dnʌ<jU r_2 ug:NEUOmv2S@Ndλe;Fv'EvY)`Ov_;2oڀv 5ҋxՁDډ8wp7$Ӯ-W/bp-B;#~񂦹r|gg]Ln-hJ3CT oYC6! (?p- ?d3l.GgCdJ)kkx% )` `EvC }Ev_# ҦkIcy8 P:Oih,mʲJɁ,XMOɯcwHӟHY1(q;$JUI$ŐpZwCYsFuvZu[>ZCCdDi ˱I@*t 7KM*g~`w]hCj禿SWnxllZXu+ÈKL ݬGdwa@zb`RyR3fkʰ!ڽ.r|dۑ]ER#pLtk[jB H?Y$# fҞ4<=h*q02#a]18HLu3|+ Ctݤ d6HתE}`Q ۲S/ rr$ޓ#;oh%") 0VM@7 ҽ?W|HNxczږ> 3$RU8ה:ym`<\`d1n7,{%n{wאUي.qEqk/6)q5 nOBGcײ{1 KIE-kH@R+"!7*\j~2 3}M o=gM8Bn ^2[LL(&c#UNQ{1eÞ3Q H=ZDc3KzniO+|>Cی<]%|WavWz WJT25S=KIݿf ԑ ct{L+a31ET™TV5,, XI4pF_8e d+R+h"/sTm~륰U0tmM_k؋ʔ5=!q#_\Kt U^\|W@2~eഛk%l_c TZ$B{McT:Ӳ{j'[K(!"#ikVS 6At-mf/PO3Z]gxJ`T@޳Nyc+ T$yx3 ~b8}X0>Ӌ2[MGVXZyD9a ")P7?ng>xچa~&uW][zwEA> ~%7\[랻$pEUV?j4k ?KN?D@ @* zOƴ p#hװKd79:^#h -k*@`|aLJVLjfգU/:۪$tSITh*|;ճ;4ɢkO ,NKئ8Ar`q Xm^^;{y(.u6)EKg7228;N 2l"_+} Hl0;KSЋUdc$&8˧ZSXޓζS ͬs==e .4wY_Vǝ Շj.JJuPiIocdT=-9EuA c@5()%ݤ{%P(X:7E&29f0hL<|WEcmw1YYݧ`ecW&+oy팩*B;ucDE-;|{3f){V++2(q@C ܢtl%~UN&D3>5ZiXh>=א"%H3&aWR@\]~/b qTc*._ĈEե} ܨh8D`L9b@g8F)aBfD/ r PؒqVE /8WU C)mȅ%ZI˒b0 qHS%8zjW9?Հnvynpc9vf_aH';e0ċ{-pͫ[A9?mV 3zjh,áʍ͓f13,a "j؂ #c4FE]?T1#1cоL||s Ov-8y>&{d޿?,O-xJM$k/;d<w8 ,.KfdN 鿫Xts tC5˕pEDD1P! {P5h+;M/EmbSf%j鿶 KXubKL`DE,.PuJHVutfX}KC\'ү?OyPKb LaaׅK-'4 Fs\KQÍ2w֓=O2+[Avȕm?/zrNnLT"Vgkp# StI֊RԴ:e"n ?/H(P1gUp'h.]bLrrݻO4lʍՕ9Pz.|}Tf56fvl_r^OF֮>S} u~GBm;-*p''c2 L\t:by}v+-p|x(!XdLj̷gZ{vOu\.~FNM9pcr%\.%KCY =.s#|b>gAΘ#$.n FE{A{`֬_33AP%N\x%=j/%7jyVK= ũBH?N|$}٩q6O1G$A^vO\+w΃נ+N׽˓hD糆8~0Ɯ7p^Awtvl4:^?`OѼV~l#M@u3K9Vi]Z{YGLtre,?en3Yݪ=ݼ+P8X Ѧ\'8ĸz^;xn,+jAgB/R(yXL`[6HkO0/Fӣ'ݐ1 ߛeB/n+ջ]vߌOB~F0X&GQgUgU(^ 9lOf;X6CV^]NE5NƁi&Zl-Ѭ@N!%Έ# F:vu axޮT?((:ӏ^Y,I-]0|Rp4EO`Ϲ 8"(pYxC<ˣa֔8 J0m-9,2ʤ NXH|ǔrb^7]q=qR6VUQ^ASa0_SnfF×"҈F@=I)aPZIk; _^7O5Xj]&4k.; ťļ]0WH)-a/-aKhg 7Gؔ&UYߊ/s7ėO+~uHdAM{e$N DKh6JF}F9=*˄b|H@ڧ_+Tp ;I&`@iu=Q )0*8M?/H_M>1nYffzulPY[B)tD!'K693en7% ,$Fa@:0:\umSDb5KOV)IG.@8.4GR:T@2W_)k-ox/0aT ?۔![}F*ƒ6}"2# $oʑ%$ӺX@sz *uM[A)F`J4a%{"G&rK]b P,?ii)!d1_Ȟu*S2 RN;vNk[Bf@eI{0dGg:Ջ/N|̔,'ޕkc@1Lx}@65P=t> _;s 3iV͙RP#GphoPe 5;բz톔:q tqyΓ b=!b|vH~E"~L싺^2@vVb _,,Kқ޷';[: D=ICxxLl,i^-:a H]%F MiG(`i!;w"uOٽ;R$Bv{a#Zx׽}M妾цN}U P ;lg9aLP埅tRK>HЎ!I, b#&NoIeBNCdYpT863S#I y˃4Au-dPHQoއJSYjh0kr!|@-.X$3G8̫ .m߽/,ܱNPmԴ(3-0)&Dd wB MN?>nS3lxΜN."qsԾܬUOd@AZUJWV,\u܏BQI64HO 6rIg*&(f%ʈ4-5Dhe5I[')RRn`~$zq,F ꇴrtx~==ȒRu)KH\CTH@FAXG,)X T`:$˞Kl.U̕Y|$v2۱YMhê'wYL&-1#;-.c|=Hê\̕ rbyK)˹"?]NOA]LXug17.31;5tc*麻k+LJ,P&rv\QBNc4aL7j3˥j}C4IJ9$< ϧ$SЅ2`}~}ZR{漠@:D~LXFA[iZO?'0ſQԎS渻ȕ=P7; Ƣ|«!-HoN$ъ[?=z[8na 4ivԔ螝#u3Lʰ^jo#N1=.\ cܩՕt_ M}B)'jmh1jn ˠV eنⶴ[ِCT.{#ޣ7HzzMQFswaߖ[ihv.ޫ"c~cvDel#+N䒕DXE QgX( q%a쉢\LIx>bOI\fw.b*wف݃S:־8F0KX~`%f5*񃴴^蟗?YFX.d+fD}P]>wU (k.l]JZW8{kjyĢ~{T;GmGz]Pvg WVyօ|'bfU{fqZN!` zSc^R?kbߪۈP |U?Bpi|E18if)3!Aeݎ?nZ^/F Ԅ4e^1 c1=5\ v, ښv1/}+Vv'=-.nCI[r Fie 2+}D9!8.ʶPZ2zyk4^#B,^\ "vIAL=i|hPϿ^ Δ9PA]aWH$sF`Ӌ4G-S*;ȿ2A`P"Ks.uÛ'^܏,e}$l꽖,NtJÆx4 x/UrvT&T[mjds bGoԠ1my8xRяje0C[=<2wV{wkCϙ+R32׻eVgq/5M\~ hI&"8h4Ry{e" j#ˇby͵#.Q lS9ҔDsBΛBqp ݲ{1{&m j?8M2 W}3\pbH^j[=$%_)KJ2"ŊZ "4z o9Wl,h^JfI3X:ڮK|WnkJ9 Fw6֢vHW,Z Z 9n4U9ÿɼڌaO~\Z@ /PX{?)X ƠMZ/8gGʍPj"<蹜E)&Z5 ^*옱}jV< Q֊HI2L63RU|킦CCpl46<,[؞GԴq̍9V PKOGֆ"ohJ/\gxfa9[!BHt @)Wg#س0ȱiUnz"~5zȳ6LD.65k=%|ɫG~y³i# 4]68lp)5̍~nh5PO͌(Tlr qLe k¾e4]̫K5"z Ϧ|g@G$EN9_s['tdɨhkq;"]ކr`"9H*`TӖ-T>Oyr@{11YRQaTVO Ze= ̡՝l,90װ,bh2lW+yN/5A7T3qsW&[ =Kұ k" xIx˻rj*STBc >!dSK(qmfqj5| $'7l8 (!3:_$Yh5?Eѐ),(~|3V[,i1" :I'o&&fSv'A{ pkU,NdMfY׉r4],;zí'hryg9Pp) Lft|">l_ x*ԍKg|&_.~vvvGDuŤyE(ږ#q7YE;?6ԣ n * И~0r=>)N\%sZ|aIn#`D=d'bR`wEQ qZ OVpש5A|-"ʲi\6p{Jl"^R”I&J8,n>P|HN1{__PE7 r?ѓ嗨>I8QwdSQ l39'g^z# t/?,\F}M V2R{jFv=O$YG*(4ݧCVy΂$W%:f͚h=ڞ&  ? ^]I a6zNB,uP\0fBT2M}4W79~@5WWn[KQ}@?E]Xw|NhqYXbHn%וf5ԅ_I$Ag:N=;ifrq]bSUIg0QۿXJ\*W,MTCpkU%wK#/]ULeȱEfn߉l^~u$_Ս׷E zbZ% sL'O$)RZ f"K;SḢX5~ٲ9oJŃ(oFrp˘Jn3nct3 A^݂;>fW]X\;AEXlut|2h\8qH2)KdlsB8Ii&7V~wˬk 0%bԇc b5Yl[+eJ8!!e@{.ػM1$ŵIOU}Sz&ހlѰ12)FYy_4/ 0H!祛HpcӼ Ȣ?i ~*N1Vw ɸQ'|Ƿa- bf؛`-TN%̘ި@~e>F14P|ߕt.HN)Af [+;qT3fx;|BFnt̂tE2F],%8BzATJÑJl$xlΤvΧϋ﯎ R)cZzeDS0^S4/$贎Ų,Թ;1~xYvRe#uԝߥŜC}/ I["qr u[ sy:':mϭu#Z_5n薷"jߵ7Eo# ø]еYw>7ϣSyr8Io9fa}@rRldI̋I,h#;m(5UwC}L#.+n%k+{em|!(;z93}-GcxtBg>&4 ][++ѱZWu0vmt` PD +Y:C??P24( vfAY*۷/My*Kf2K8Eox@Xmsy[ 7nfT>i#Ƶ8(pDmO#$+_I}$EMYiKYw00%IAFMŸFbpI$Ld003{UO6ρMzT3V3FxcJI~9'̀v4@u4ndSWm :l٥xEYҊ91~}:/=<ҦcZ,oa"L+/hErJ2)z] [ l)Rev䀄h^\33?1*iUjTmنegcZP1]V3Us0z'u9Z'Khޗ4bvVb Nz;8A߀!}NAp,cE0{N4nV_Rx"K.qoM DToJkѤ}FLBl ]b(?yOt(^>)R?*P`:3RYLB !޲Ľ髠\0'>FJӏ{!!VahI a7ho$&0ʔpm8_Qlc":zsJPR}vvILmю׿n\?V 2{R3~5׷)ċ՝<8y+|J@AwgK7 l&6KfbUtџS9^9eF|Yp1JU6 NG~hK2ӃV3,KP(؟?SG wqeO3< ;$$$Ūy#exa 5Ys8)%a% XV%72wU\3 ;Ҹ4ӳ(Z/\*o"f=צ'eu1djȶ&Gk~Ģ#~=^@r`|t f̮şnv]VAQK_OwEA߉niB t|S@/Fvpr]6Z|1woӠ;xf9tIZrGZ#cϰ@!T#v<ݽ뙥-u l5J[6p.w:G4SgUɓ' ^hx} ,2YԅX9ZZ [fyf;FWA_~XgGi"G`8 Yx;tgjzuh&;ڛ1܁\[&2lw(hE%ĝ*3S/7mM,znNI/Anqxn;*.W?"5-uۨaBljlLw.bQ`AR=;f BŮz*Qjz.B$+"Go?w-<ƒvn_CrrE>1-|e<<ȧX\3M\a0ij\iot]W/ǥ)N£xȍ%`)gRLW$З@- C'd+z q?o 7&$o+s5p00ĬX56 m4w?c姧$dO:fIOjhXq6Ρ/l{F˲Yw[o-V H|O•u,%v(V~ , 5g t_Lwm.2V߻L"gk,d#L0@۸]!skK2;&"q-p@]r{y7=t`Z}c1hCI7Y'y20&9 D w|I'4s Fr0PWzA?aQ ݫ`hxrUA23Rt#&˳mt uI_s &@+UÞm\"OY^?@+3"ibsIJT Ky+nc'48.m^p1Ы݅$F#b<8Nڂk/I*|si=Z-KCe.".{q+ž ֛1wgc3WzNӍ\@w%߈ʵ`{Dlt瓡js\F[CӏCׯwٱk/ QN<Pu7,b;!b\9KH +ܑYO&[Wiip8q|>"%1b~rugg1[P@,}Aeuҽ֍Gt @$CFrjy"wn,%,̏"s qnu:ۯn׮jBuK -IFL֔F$?B:GZܩθWbهE#A`D#"}5dʡ|UW~ujDzRiRC S5^WKRgEL\{Ӥ?tFV0xl7cPW'eo6vYKn HYE#p8,3ۿnO+n }f ʙNS3LNdOmzpՆ^Ruv<;U7!PLg#Pih6j8J`=}Hc3+EbAyQ]wX(÷A۠atlߺ,̮Qd_6Wّ# T,!K ǟ_`hɅ$VVs'J}v2>JqM Y įM)?#?BL$?@XA8wE8Lq]r秊gfֶjFGXҴ%kt*jQ8rX,?̘ O/zO\E&ߙ1S˕\;uy$4HQ;_j,K>= ;lnmy^7K<\YV^^/Zl!B> # ϹFBt.2eG򚰃@z}Өzx>>)粰 A$*Tr[Ғ%s).1I#&cO4"ldM.3>󻙦X0 -_50{8N#9h VP*T䀎h(0xhpo0k{2d;d΄ci&<Z6ڕdfG;3O@aZ45PZ;ke 5k ^jsSPe RG6Zȩ; WL|/OD^ QӠ~ll-1|rgBĦ߄ ׀j[wgY6e `-N!6G(k=.K8 +~hS{l"E wY?Н,(P$[IS3_Q&@GЀV sozX&ħX%4JAm(2WƟzӉ֌]jDZ'8F˾Ǡ0uSRByo5Cb>fE~[C7D%{ pWxћMu ]Mup`O : BỲ_U "E+`J2ƤȾ>YZBECfN/y`|K(,0r7%(zm\9SI}Q5CkĬaDCi⛜EBY4L$5$zKXUdq3+mn) R2ըZZt/ܵ3(b?Ζ7=URb3BЅSq7:-ab 'J Mlj,.;BFj*nsq)'x@TIȭ/4MBov5gg9[ =v6<|Uu i " X=l*E\84\(B$/Qf"B|`zk"z=Գ-"ÚM-'e(+q{D%P=<ڱ2Nr:{!#Ch7z*A'}`s qS%:u#.JjSPCM%e?dR/=[@17^go&j:Jb:oa[5}E^:vH[8=KXaTbjo!^[{=wt$ -J *Cď*9l?CuqUy|G:q~KW~9-W a{Drǭr깯W7P@v{"nEauո`{<ґfP7uSM6n Y@5v%_.:>gufn$Gn $~D/9ۂ xNh#.sf 53?':IZT7ިsΦ{Sσ#3=CO;):\w!B9F_R'bˆζzI$u!FTķ zT[~- I/w$E) G3@-a5tV8!]lՄdP+тD9h#*D$pq~6hB^6/g\jxiaF9:} ~v +$^IG+t`.DnGYO%uȴֺBC ?I IQߝp0"FWWMl 0U<~`Ü2%&ݍUyΈkq]JCfUY$@au2;MڌzyG$pM`޺C[&@߽y-d n<9&M T}K* .r $a7z!*Y&Tbi/ߌ#T>. q~|wf8>bXKU*O"VdO>)>Qhnk w^ Y6OF ژ:]sA`oZG,HvꝵfXH'H>D헖'{tSw5ڿZ_q,u CBD#Xf2i.T\߆Wqz֩KUG1B~l xp} Z5\ ~U/ײ\ʣFvBD`(W焨FHI<=IT>vz7Viv׺ x/lPJqdktx9^ 'j Hdk5~KFK 2d8=ժ39]X.33T,G {wVNEvACٷatg/fT5_7͔GZ[@# ])}/ү"H%و567`%XQL/X Ĭ4ZCd#ٶ L#*>`벂a ](5z>ҚaW&9f!b{92u)iB`M('ѝ"3"j  \uY*~CJk^q'[W/L̒nٛuDyU_УX2o+J/jBEKdB8T*AQk4VaXfwh@% G| a q/KROE(\n|X BbLp{|7:=#m[AE0{`ŭ@. %Gdʖ›6p] P %Fr̖^(dY<4$g *ܿ wTmQ/HJ+B Ul @uv4I֠иBT@4!!%uQ p(xov}Zj1ȡAD`.G!k@ ) ՇNX`dJ+[siߺ\a~ʼnOd$}Q7Gl^opI._X6&x`iK%).T1[DK7쨋Ll&E1$&ǣZ8a)HVn{Ya=|LY{ۓ\:(oӧcNCMbq8Y /`iVK,_*E3aHOᕡy=ORmL`cm4M/IpY)A*B 89x=K~9##yNBX` u{|]~fw1f>p -(ځ,\))lӢ}dbʑ<9qdDHy-k?Gm_FQoh %Z-~9yՃ9gu?*Cluj2o^'eȚyR.P8E_h̸'2@sĜ } {DnOg+ 3P=;w(@=zfa* {1S`4,Z\'mHO0cqRxqZGu6lR *r5&r[WKNH=Q7V *Sװh`N?߀/$O}fxmwEu[ > lDIŘUKXu36sxz"sK se7^|1_ڊ9&Ƣ8:«! ⓗr, TVdLy9c&eH$z,mAiŜQFgT*A 5'\vwle\Mz5(o@"lO #//BVg/K;"џly blݜ"4e>Y5[x,ل07mok*G_@UN^s|X26>@ 3#V?%V@dΪSF8#撟1&ugYmw/V!0[43g )~O$TGa*o񴣅pcݣ"KYn0r~a߈n_B$z<ڊ;4/SaZ* E~6Jtt[”~B=]qzds:FHnG[<ɿĹ#E=4.m>=0ϭyV/.=YkWU1 +~ e%,V}W<%]NTC_]ϪYMQY7g70՝5o \Yom'sBDUp^TK h< 57,KM\˩,mF(kcnթ., VZZjΉUXJM{ 1ma!ӛ ˢԾGwOf[3PA^3PcPT%(K/͍\yfcݹL1'@lJ ?(*Z/RՐ(xȚ! L Iw6өS/XhmFob328C|IfƞgW,'90/{@"X~D5Je:}95?V,-tTl<KyދB4?tyOC}; EUk_x%1EY@Ɛm7o5o- z6,B%$\CŋᰨiN6ȸr4s6(θ(j;˙@c,kץe(MՎS8*{7n[o0fNY xBff w Ч).8SBM-c͒07}:K$f:*F e0Ntxt&R T7D > HN q[ q # DW<lJV"G0rw;c ,ajϠ"1|0&B3seJr;. C`ƷĕLEE ;S.? G6deBk赠2}←]S!qb~ FgyϢF#bO%ܔizuP ]V~JBnXK' 2q`>CYkhtz OC,El/YhI"9ddyajhgbrTl4S~HJ/i_k97p“=tZLŮ%pIJAB„W t3DW+#>t\ݮ>1k{TK vuӭM(a޸Y3//ft;tmXcVKhs,bsx!bI+7#ޫG5>. hMS1l#{QvAqYg sxxy{"-)Lc{;%k)>GmiBkp{s@R=b+O<@G^_d7fW+6x 7/^t2Gsh>*g*po-Q:a;v"{ѩ'8bdKY'*~[(;#]aRDqv5Tk9I9oWObU( tφ`-J+T|+A/ا18 Q5ʻGB$ [oxŹ~+-Xnw+M!#^sULF=H42ʄ3`3\!IhDgig 1ٽ%6 -;J</PӼ~!ސღgO4E}thǖ1/ ~>( hz&Uaǝ٣yjm5޽]jSc}~ m8{~I~ Xc?V+/gut;7\Kx1Ǫ;+rG@xɘGB.RhH v=7ZNn?OyQ!Ժ& Qi4|*^0LxeB7'"f4|sJR`F8s mJiWk㓌,s$}1In2E^o7hiPg|S7DSp eɑ=p2IZ.[]}OA(K ," 8 h|!WC1{C);~QaG ̶^~Z?􋇅ECk %d9s*y^~SuR =q~^D{V+pO^Tׂ`zef~:3?+推QiKϯ ^/Hղ?51ۊ&"VŊ+ c3nΣb&?nz,{ ޒb@{ؿ=هQðnMV0SF|ŦВ(d& ̶Sͤ@/(uZe99a k OqMUn7XTބKϲZ* B0&?!6'UK0#ّ\|IL()ftƈf)qg6fɌTB6@Υ"b#?t_J'J[17Gᑵ)to`zsX%VU*PyH:$ܧQ̏Y}6~E$} J v8'I{ c|`/z3:xURTF{f]6-V~%/`=_Һ,Yzb\nCmzBP%ch k"g_3a2IeIGwuf޶@5ļ<:|O4Cp]8]CRt&SSKۯvu5h8ZgwGO[/O6\'pC)D%[f2ߤ'A#F0 6h紳HX8Ҫ+Fߎ:8e,~9 CCֻ$LTDiW>5|ͺ`0D_sCK$oQN-7`;,ҙѤ.Or ;Űѱ(Ϥ@8ȆY4Gλ=NvS@}q¯ Vr Q ,LR`xRŚg<cpbSоX5ᦧQLCg}cNʩbk<1^o3P^S`ؐ3Fa @JNeiXZ:h͏^:s=@z'5#`*@/!͜v6}&y,h7шBa ؀i>&*)Hk}*,=\38nig%#&=2gHH@,BMI@7:q{[l8?=Hv@{~nrg (̅ey*)f'םc~).M -{gw C[,De>DN68|Ij{́iIڟ(0Z⓼ ealR_5g-t{S`@VGY='S!>_( ,0nagtNr=#hI*9{ƚ&i6xrWj"gfv\:@\L O*FYd@RB <W5sC6pt7Fj1D9ς \Q>3;L7CH8$tJd+6@ c iC-9d@F;Y—N.C?5ntzɍfsTr'ڻT'./fR[[  'F101!rw]kA[& :͡WPnX6ǽΊACOge&t[&>3[;. o1YnSv>)_潌M5I|dU}vTO`* %ӡ2ϱ^ũ³)&g{&T ޙVLSnP5GLeL^8?M5&ŅebX7hA=t xH3i&/$9+&NSf:2L2b=Yf'.RIDėrIu2,R8|jCj% 䍾gHXSE y[ x_ǚ.ܒOR=շ d p(4l= Tg8n"24Kd٩x jo֙oX9?yN!L`vLy-^wX(}Aٺ%Q[5^6u9&n?0Ыfv~~3itK,(cÂK2 W;@oe%{[)(_F́! Qn|"Uo٭k5]f1>EKݶZ33~ GmXP?AN䐆i&Z,4,R\qч2nA+!JmWPdԤb!eWr0I֘=+y5-$ggDhaǽ>$BrbՕCтDK!q~fgwR1=)~ fAPXlK뱝Aa$`_.P+م]d^18p!V )V]J9y0GB7j %ؿG`A'^Hʝb) <66hzr'Whb4lt52{Џտmv;"I4rGMEʘՄH M֖T!=6b̫lKy>?,2CF˿=mƫ@,Pn {@$Mu)љ%$u)+f qH$~5&^QAp̵vQNOTyQzfPWHJh۾&I:3}ʌk&qJm#UqݢcWܟg>Ϳ4} #R!ޠ(hr Lzdc|3}%*y)0{`+=>&e _ΨFv+q,X7f"H}Lk\30#s"@Sn̓\hסfּ3! ]ґjN Dwlw^{ L%F+(r4Zq Viw1h Cd5o{Idf~瘰b]E;?gqtP1T: ?f^KdRJ:%Tf.[N^ȏ,B,+2 LM]7m@`4 Υq T<`︶L~LQLOݽJC7ȥnn?Enl/1ҥcG`o#u?M C~MPc1pPpUrrk_0h=xXY$%|?I IB6v.W囑)b^Z8'#ak)`Azn (IeQʯEKnz l6*b9U2(>>•Af)dh\uT1ъa7R.\BU,^h-Z C4u'qq}˲ F~a"ꠍ~0s`~`|xcA"w$}&z!4fD [5$`dUGa6>cDn`\\[W_ sfz6,>uVao|l,t[#_[~2](OFZ`.6^?R5XSi\f" u5jjh( (rҹI]geMxj>'Ǭ1>4hƑsG3KUn~V.8-~3`"zJaJ0$ ""7/ p^yKW>CHAJpef2H%~J 젓DWHM@aXF1 vneoF-ֿ^\k!ϭ4C騣_U#AG_?]ʄw/YbҼ."R=h=lpU];rdmTv]3>'tC!a3 cMa'")㲌otlkoG?߿vk Y cn\~(HVo`qsӜc#e\mAUH딲,Ӷӷ nHDNtTSM'f ^9a<;!l0 -%;#/עf)=3=Hbgmʪꛟ/QHN}:4F>\;+yS.E^Y]YQ+V.]U2U=6N w VxTqU25xQh?3-S=46kL>(򁞙e,{\W[QRj9悒C̐hLmf1=~׌u;vmGXӸj _K|@"D PRT]M >v1/U>;n{/lW ֞UC2Cˀs&#qA(C0C= UbkHc°sNh C_r]`ۣX~-tK?jYJ]v\73CHV\*$.FF63&1&{f^9ͥTTDQQ}]?Jm[gZf~K@g܂@Нc&i@ iݘok<_\?OI2sA T @QR(ﲷ5FQ3>|t=P݀k?) j?"?xǒx$wn*S`߿%,o#Eq -q t5bPNwkL/ahZjtjT(#yFϕ +x YQ0ٔp{5,9'! ̳]b/DFJsg>D6e9jg>hKHM li iBj A%$rGNo|h³ĺOٜ8n-wV.⋴v:9Ta|[ ?;Zg82OSZ2B3ti(#r' 3~J*ĚD^j6ќ簣3];Q+"ҏ}\ΫC,Hb'J:  +Ε-1 ]ޅ4˲CVX(0&~*wdqrsyd`/Jhm֔B+O-]fhJ;@FЊ.25w0>z(Pq'0Tp~aNwUTo;ψ~DyL:ak8i.S:ְ@3<佔tQ2DGSSY0m ;& QYaeGd*~gK8]xrp87:MuRkvL,;n0#W)@^)#+ƒB t8nxzQ\$?O³U 'ġe?MTXׁB`RQ,1Iҝ&̳=lV@+V]Ku[dy\DCLR8Dgx1,+VR!h}k܇8yğu&E&^nU&spLdBob͜]s OʃVK=@>JGF8^7TΤPyqie'kc sYB c'Rp?Π=yj+?h 5 %RP(bê'&XK$ ,dK66]sO󡛚_ m;U9[Pm;24@[ >&M)> rn Rd <|20l*XUQ !"$k,DNP&br2yD󻆷DϞFBڸ4WKE0 9B Xgϊ">ض}=7S AhG5rՙqPX!d5uwQt[(OAgUAڅyۆL= ¦#,;V;y>|e0@T0xs^i4D atAd) 'fPqK؊4$Psj~`Jژ-UP9^=?>e͏ک[Cʅmf{SC3`9={h<DW%9Fcfi/B@;"D;Nٽ]-a@Q#.m6ݥ-w ?gHE[#Ozh`Q Xq&Huy>%Hݓ 1&e;]йg_"xM5Ld\G_U`e O݉%\ + 9PYb2 Å)&u㛂8¦]I=yÍȹ2I8D%Hy6zLhZ4/3q0YܧЩ*_*23qC'))~r'p:EjA4Wld6>2 f@a  ycp'y&QQMɍvA ָk?ǖgmخˇlE2h_QzaR2q V£-@`D?AFpz6`H nC7"d9-DeNq?0JJ}$N{R<>eixȖ)+l^RcangP(x fO\< Ϋ.Yr3b PHR8xy?v=;it-ghb,Ez+U$wfqp#5ڤ%bhkvyxYX^m)"n<X ԗl~hq;WF/D֤a6DIFimk4 ! qYٹ :\]Yr;(Rp ׼} nۭׅ@Ƨ.s9=w@i:[Whw.ȒzHZ8j3.uH+$L+%_7z8&* , }BĻYW:6LΗvRW `vËf@nlm)*`oV&8G׻wB2 _O%ߋ-C_-nd/*7p[HZ ī6pv+*G= }◱>sEHÌkB'4XerPPkҰMq [J-"JfD+UمOyw>T~vckF5U'Mč5| "=^y>j+p/^kY\C# %TqZTb`׿uh-/es`}p5 2cGej ]Jy@\<+o{9Tw weƱD/J QΑkbwڮV0mYv { v MWx7!^%TFO*%gf2-_ 4VSO)wD;%`r_|'8A"5r8^nU5Sͱ]{wvMEn\C>rSlٯ;WծLpO6}ٚVL]ɤ8hYנPnZ<q;qS譢0꺘0j <摄֠=lVkHqO A#}\+- 1%Ѯ$sxyzX 3ޥ*Jd"1rzVBqu *:Jynߞv2>4l_fаDĠ-0Tew)<=FIbBz|v.Cxk|ImDZG(hMc@l*&~F||Q09x<7zEjl[7-wSH씍(R6l8ڒe+0+PZQ;5Pv"rNk70NI=f%!_, 5:_ͯqpM}po q= Mj2G HXgfv|&|Ẕ?O)'X&H<'N^X K<49ncc#F4@zO<#%T SțH 1O2xgqG.{{}? }D(6.j4x[gQI5S"@C"罆d) Q%AYx6H`[!IZw)=dxeՏ¯;0ͳd<YBbE?DaAFtw_ . $4U,,ze247(6˂PRt;92+)'m&%O!q:t7S(1̅l]|Bq|ϗ3&Cx1 d+&Kcm0-=m(ٕ8c$W'V-#[ecAUC!O ц$գGLmVeR%xsy@ZЩ.aA#BD(:tJ-I5n;1 ↈ|+us/k\}7!4(PjN8@/s~]Ӄ RP!^>^pF25gnT}*spm舜<ɖhY)[ -3r](1-hmkT谯5lA*4˪;$B9KyEHhj'GMļ<{17~MG#ڈ@+7B7.dG@ʠɵ"2u\^h"5 | oؽhnɾG>GuV~j|-$s;>7wAXDYYވft]ŒE3^@nҸ V(uTsVͫҾIpNK 9vv!Ebym ,U5k,hgX64tq=z>%ì 4K[A##`U=/3U zMmk$m6`/Y]S+Hq Tʚ+Mp;ϕ 6Yn/A A@"v\5^QFTKLTw{ኍ>ŝ9Xe((G($C0dRboX8Kx%eA];^8TrB&;Rb*F=YrH2 xVͤw<݉rρ[x9_4؜Ew:Nl0[MO4sB)yErZW 1r0ilءZ#RCB~6[x&P)% j?Qk s$ BߍaajCFOt:W%ޢF8 *(CQ !"M+KLDH.L2j_/ G%8S[W gT7ق8`xpX{W?=P%kck΋߅JTmx/$ @@+S+Α5=^剓f7GY] RF:UfX #IjD m9fQ&4ZOܬNG@“R҉bS,+rԁ w]460:LϚ+fs#ㄜBa-!f_P5-_ fgElS#-v[. \B#[7f/U1t<x9щo#OU@^uSx(\m"+N躺A. ?@I-jb:>hZ{2gXr-} rs#c_|[c#Ӣ*;_GxO]t,ؚ֚Av ύ~YƤ|޲k+kZ3Ot.wAn$jiAYםw&Ϥ0Ԫ1gjQ$r4*-toK#S/t%]5 FM3a]!iĖa't0敏o8z>z7oίا>Ctr/P=G^^ #*%I ^K Ø (̌o] vFyHp"A+nyv.>؋xHnjJ,7 ɛlZ_ ą+Xu%z5)|yqx%}x,w)Zs109i<; qz?GP3eGr 5j. UNS/OF 2J֍4i"&Fcoh}`LXSm\)"и䥛S$"Q$0KNHDؽ?M,\xߪ'б;ɈE(;n3;t12 X3'!Q@y,!zԿ ŖQ3jг7fZmO]TEPTɀ=`r2_i$]_.UgdJ*P n!ܘj:;OyxI\?GȿF3ohP? AjՔ. #8CȩJfg'(Pv ЦN4%tȔ襋%+N`>f騛Qt̜P!Z;ƱEV9Sp,+ieի5rAY{Ph@83j9thvd\=7o]O K󍌵:1}>M3m(l]ڶXφ˕/ {,BCxRp2܏B<4uťݏBfHg`m?cmU_4B C{joeA G>t&("OW-X`L9FsΖh5,anOw1WrJMt^u5fN5!{I\trUg\G} Wڈs6Ѐ:/Bpzɲ…%vΔp1j;3Za0@-Sҏ]T9<<x JAie5I 3%U6c,lI8[!~LBԳv DhY5Pm\ӺOjn =|U_U3Cas `$Cg?y9S<_ &R7l:q/IJ)[|_]ݶa8eGU?1f5.vМH9BρX̜IN#!D M7>!uB0u#rW{yn 99Dd?59d_UPbJ,P>½92+̢H+ D)M" קPXዒbjMP% R4T͇!6BR? .<[2TDe-}DG q! u 5_L(ØIp!{\14kU?{ *u"`zu?7Y:\7o*o5{QH=Be_IY ѳ&o4P~C|d@]Eb`Cl۱D'‘};X.|`{]?1:"q̛y }PsE lTvɿygϭ- PrB0ZAbi?<"yrl1^(x{U]͍.:|g_̴Mry&Ԃ햞 N翷&+?\s؁d8Mɕrg5Mq)[q &~Q߀|49mGu/Ҭ!qҌgXAk.;U'sR3xn&QkyH#%/3o{!;ɚH^>8 `iֱ-l*o 7KwU;̴ ^?GD:+L}4>K BP:0v CHܨc3(Vz<0ˀ=殚QՐrj\hJH 2Gcv0t8O,+Ҟzq|,LO4sh.Қ-ٞjI*ޒX)e;ўkߦtY3AHRkFڌk}Y!O&-]N(YI`M iqs5l:d{?t$fmq9H4*`'0r7{25=$0En;`(#eɕu+$iMP{%& 4 QŻ[xKzž5zڕ_+ kQ1>d> _&}tߔ_ȾbÂֱ:K*ѝcʀE%V۰u8fsrgOjEULOMvQ<&{44Y>F5 XlZgM;i ^חБyK %RQ=tF \e+aK/EpWN#,Y\7fBwС%88m?x#;ʱp~G 9<(2R0iO:BY ezBh.pOAnAzf]\J_|ʙ@AEht8}L-b]N7fWUl\{Biwzُ`tz;\!;,7:]4ZN1# (W T@}3m0Ȗ@H7=RiҘy=G^l%\#YxlUÝ>sRY V ~7}v3̈B5LELghcG&c{- YT|8vABl̳%V0[I Y}لk"|2vh3Vryʅvݿgiȡb XSPYW:VtS0đoX,r,#38!"(v+^cSڜ?r*ar"#i;?J&:j-h,Kebm:^Jw:b Yij<@Dg㘑ø.P~Hxs|Myܵj#ڈ{^{82$9V0YqpEZx^ԡή/ޮ@'ՃA0VPSu0Y9+a@}nH X;Y;(gN*(;3|']s%9nuP*l43r_KgdުyPT~,tc >̠Oze^WB{bA'($ kKcYul"c6N\b=[] > -J[F̴"c"ߤ/#ە'Zh =\4NQ.k쒡b}0싁'\?z3.V?H) g}e-~SC_es*B;w ΕN5rbI.W}Q)?xt"KydO?wNmH J/Q c})bU}82wG +^r ?$8 _<X"Z:ᶈŹ4)uG6a?%r{0~X8>ϱeg*9ίfE\(T}ik9 ?y3E/6{bG Ƈg~ NA0cBvWP^vҸ*W S$cG'}B lu#q唕Mb>O90% :]jZI:Ї 7@9_}79{u3 MQ_+AÌjگv&4wz㛎=PtIuȍ(9:p`JZ|n^ҹo2FigHQt$T=͒)11Ox8!{Kf-^.!TxQ0W7{u/CUP(epg1Vlrh1?`r7Kה)˰UeuXJsc Ҧ$|~/E:1q,E w̘ u"0nŭ_Eܟ%›}F,.aŇD>⼢șNQ(*ћٸuKjB펙*p[ _  .ѮI< C}d頲;25=d}=Dmjcp8n@tHwӎjpK5;V_CM,m8Oju3G/imcR .[I}x E~J$5hhVBF #DBBfv@3büM.Iq3KK1+\3^JDatM*zmH867I;;l>Eɺ.Lnh/BVRt ^z}̼ȜL,`Dۮ@Cy` 0X#^d2k䂔Zho5E pًnΎa#\P_> 3xk^x|a\/~neAs HY>, OdU$Zklr`aIBEPp@XEB8Q%9C}InC}!7YSsCssϔVG>D~cp}-B:F)d86+ڔ$PRex-JxŻ`u4?ս3E7ɲ##dkBxi/"G["_$&|<én#R{22z6m.)$μߚ x "VrL1%Gݺ<q+#4g)V_}eNbJXP1E?d:h6=:7CT5mA%Oksͬ.bHӨ+8a˘ ɣYgXSDib9EW;y k?;zrԸE5Ӟ[Sg^e]QG7l˽39dѵ>Pц u^-˥t;/t$ ՃU; 8IuHiC3ABOn귣kL< k\S?zɷ)U0Jz!G0XV֣a)@v-$7e[ WI$(ViPWP{ן?GZpWU6Ō,`>O:4/xO!Ugu+О<"F#{7dzB 斩WaBx|J乙.l79g\h4*g/z4<f^`4Z U&Qu C y)$y7BH7͖u{vB`9o ,Wx9;ǹ}a+ONuz5׾f{Uc?UU-+:I2xd*B_9yf?#owWrL)쮕xqb**ɴRcؓ{b 1726cL|יQCKF(hpv<: ʟGEü=RSJ>ͥ@6V7S:HYߟc-u fauĸ̾!G ‘W!i,pmg1+Zgoxj6wbD`r/GgͶ@&eYipu.˚C#g5LIҤH8Q+oQ@ }LDMWc.rc ,MWm i8'hHύYg}=FHO Te4$Ga(bQz拝DܡVG"m4m8`+[mqdE ͢7D4`vLY"D(EٓYe;:讈}=ۀL/>,!lQhAW%F풜)l iikdw6Dؓx)&o:4 {hg8xGp+-M{e fDR(zp+u?nc+R[͋HRdlhmϐo1Qs5P@} qô >9F9EDu; |앑}3Ԧblұtxﰽ[+'*8F4oFoD`TH bLon | Xq _I yM-hLڲp4k45%rEʲpNxK3AϴqyNuc￧M'uۏ p&!/+h1BsdX̊r(Y"3ƑiDlp<YUjCȳj& o=VGk#Q7. !qrӛ>;`k8(>5NhCOW.*D1Ρrさ.F] S8>_X(|M"/^eB MC{xA1Njگ3xznk]bGtQ ARlB(?H19j7yR-!pؐ&2XC8PP8X= BB `3l[LV%KL qea$'D^:x',FZ rsT._MK)q9xۤ` #sl]Qu R"/ej.™ίOdL79 pVZT[3zn{߲;UGٰj*Q2B#4GRdؽ} ES> n>>zeTCw`B4b˯[&}L @F*SA$Lp pM:R RyeJ42Y[% ~FIVXRj7ӱ?/gaR*%8\&7L@޺Xn/)b8o~odNr+S0!.:@u=8;/0)iO%t ;Ӕ 0p,!~+wLZo;G@,M+?mG'ٓPf.Qhga 0>1 W%1|nϳ͉5]&\CV }d9JKrmfh'!7_ ;i.>jRYl?ܤc'Ft. xqsa WkuQI>=(Tko'\c 0mƤ]Oaڠ>ЦRy]T4`3ω >5wLLN6Ҫ3zs3^i-N!7~tNچvrLTSڞ\KZxq&V| hH1:eo1#͘ߔ`u dGk4(fڻLr^~iX'd"q.ڡ=\!bՃ5[ö2BoɍNܘQn "e T)ڦnns>^^ 7\nQX-0=K/OUU5`^S7y&QGgoWTvf ՋL2@H\#'x)drRnTM3i<5- $cpwG{YA\RAȧE=z&й lf>WlY|Yd@eD9Lt<tk42 :Tkv%÷T]siVs$ϒ6=wQl^{g5AYmU4q/2޲#EN&02rIS_x5ŏ h'Il華c -%dd1ɻSQ6)l>.y'}ܥ6ܮ6zJkhQ -2jቧ]P+6w5hV5Dڿo &&!m{^54CDI?:8B'<ЊNܗ㊞jC%VrD\eIמ@ 1LѾZBN=QPN Qŋ|!= VZyK''/׼􉄙?/vq‹C%`CG^(U]1aL,#.Y18Π` ~пّ h &fDĉDe`9,|WC/cx%{>-1M';R1Sރ6D6[R$C/NH' Žw:𸠿cxWUq?eh-Ճ`kFA]S}( l 2V%Ĭfa5p`GpuT$0O-b?u 8ĤM'MH1pH}Cei}+8+=!\BLk!L_Bp\UTd0^L'CE_O4KEEK7}\Mfx,ԳAP;Ƨ5>|ׅ9fjX@mk[nͪ@GORwы6D ]TfrP؈_oZoahߟ, P~H|,A%ToMx7R0FJ N٢D2WbI&J% #nxy.@B{AWlZVfԌ$ m AD]C)v9%-)I m)xbx4z]t0=BƱTn%`_[MNM`:)fVỵ·jd裷6f L^l gd!Mh!3ɏl`*09mxj̫깭BPo/%~Ԓd8'VxeM2e·N+3֫i7-*%ށG$>zl]?'c#N&PgVzz\ʥsF(RVP'玭Nt5 ;˒iB=:s"Jhn⒫QRHpw,mpf w@RdIe{+)xZ~jly&I.3O78ق㢹xm!\ ɓĸ#'L\a8$/NvzmY;ژ^k&p] mV|g80r96XqlGqpG梙OC00#%si3JK@js/Q#Cx44yJͬQRTSSI~U]ӵ"mΚjQ~SQ"{i#J$r") 9ϟ96ȉ /WVmq5FB>HBu#"Aw΃|a &5F1 Ԭ.,SϡTlm<4F d08aVCM.͛phiBUZvOђVycsWz\'y!04RmQĐ[-/^ R=i}+3&og)Qn df^m+_V@y il 秷VEOhېf|R]"sɝMH-/M m Fm2݇W|*=(#mg~`:ÎAƘ,+h޴ RRp@l2#‚ꊹ쫲OQ1^:\n7<<_"9up` :b]rSl2lkWa5 =bRL + nP@qgv*:#ɋP؉)Aaբ2=F )&P LSTSX+~(6Jπ'46Mgy6! [bhVp?Ώe"'el ΣYAQY |)0&er|yJ]`uAԪAF;nFif|ż rsl Gwӂťu,E߼ekA?B2~t(yxॾ x GzsiVՀF$A4/<}f_ξptPV F y#P#٭悊bH#~L'2weTH:o&&Y*saʁqrp˿!p 0u1{_! X?VTč07%+|x oljvb'! _ykrt^DlKn~b40زR?nXWjoX cc4q #lʸ86nUG+Y\͡53ZΗ6۶A UHg<0P&Kԉɋ:r.Y\a _:0ZfƎ*QO+.!s1|;Fż.K=ǚ!dkwr'PoCAԔW]9I4ό9hp&a=^j1ypUlaBRu\ֹ |qZ&aad7 sgb?h7R쳲S >޽Gǭf#M᧗=؃g@7]%{3QRp9!%T9brFԧfN`$7lN?gPݯroz Ϳ4No@luYg]2|U"-"otGo7an"+:9E) Ԏ=SܙhD; sE0qj*~|֙3x(e;f,ձbDdթ8/!j7S?/XH;=cTqN ɟV QdԮ/C㆔c,8ufYi8@0j ABd6l}Q ;,ߍKˀs=W YI`Ɖ>u.\%o=ʵ(bʂ$4F$PŨl-\ٚӿ0#Ƣ: &DJ"d;V SsE@ih]S>Xmپs Q<~qxowЬ/ϱм￐[eJq*|v&UcIVfgMޯ)q<&zXeU-!#4u-j;Xt|Oltgpғ/vm4B'S˞1gZ ݍIkMD9t ɽJΊ 8Jt&8-9ƉH/ٲ ~)>*hP?F ?.M)bnXπp|?@CÐImPm]D0[V`AJ@lqrZ(>Jԡd>Mp= Yгcu,ruFŸzKhRϥ=)`}6uX[6gCnX팳[tPI-M 晷]ᶠk+^N~͋bKm* i8ʡ 17>^ك/cGсGlFb]d8$ )ȦHT=Iab|n(_$fϸ.tOzo?i`p*Ka7@hCKU(HWη;gVJc /XAlR=)f{~b]f҆+1>iW;vEg˵qmqy릎[b]7q1CO: Cx:?vӾ*W.dF(D0RGbsV~Yi+mQTIjD?^;(s]l+j" ^(6Nwi-&ܿ{0*NZ->`GDO6&fw׍ˤ@_kFR,w]x]J~S c7evDl})-3<5w-T~3~8C ;K }hCIS]-.uJUjYla} _e<ՎQyq2wLD)f-BxC\Ks褴 B[Vt ֥CTHwY{$鑇b]-uW ,J)k .52~WѤB3u_b_g.5*L~4]i|rV3~_B#?@(9!ABOjr%JWeB{H$kHO(_]!.6[V?H*}Vp{ +"bn|]V} KGgr:BHt\iZǠԆJ?#yA )ht;6esJwÇVF<S(\s5oxΒ*̍dbBmGR|~4pC7kMk }L%*Zes<=1=rC}O~4Kw€{l%LJ/k)b8G|[(x VX^˃mhB$w.FqGKu>g{ֲzp® "L?3{nJ#ء19Q E͟շÔ 3P?svAښ@H[FZ6M@@god5wTrt~dee+OeGRMHwfDH[RߋnxY%Uu4Ӊᅇ'3ݤŌRK~3$J/c*܏bQ g)06 aHbQs9(c.rT@$J -rl! 7䙖IJ+h#NɚG !*!#N Ut'QD|*{r;~;3&c6ƨE -6ZI- ;-"Уt)/ZPqK លjP: J E3|z \!.1`r7ٖU ||[ b&=!0wV2XZJGVWf c x?R 6>>ݲg].tD\JE)aϬ̊2%z wƸG .]^8Ht"vAO=Iq 4!*"!]nmtF)&S]c.?ƽr.#Y]ͥJngiy*׌/t>E_h$`ےcH#]G"lmʵ7{ ;\ߕAtf> -9 ~ FlUƆ<efZ{ N2tb"F̰p"_&aio5 )e:B؆.PG>.b ZC/n+M?shPcPw7|_Q(JT~\p/w7&,N%2=4*h_E6[*Y6Pu[4ш"kK2epWSN4\_=,N$QD{ \ `` ? gī<!^h]Х'p$yjSmL?aQ p?,o366Be\lݒ]fT̲#W_ƝLj 3n>z5D6cB37~ ݶ/I1{|6\[Fĉi8O[M`m!13AB0mt99#Z!;O;n9M6 n=]di Cr(`XP\0v(?w,SwD#mƽ;+e|0- @p_+0ΒZ(&5ȲgLD/C.!jiŭGj=ۤK I،~9?Ł:]0NMG (3.R5#<;-qz@]C殷wW3? 4Wf"N|ק~iQnj̙8zY+>J*Ӎ0JՆS۱7U?ۗ_H>z״s/70p7y؄M4 ':(l*˶Jdh uJ8Ƌf $iΐKgPkJ\m6K Z$TO/j y![ri\vʹchamj T=mJ6N鳓\8 0HGn8H \m\T-:1Z2 %HV3 ?FS׆B఑Mloe y #.YJHSףA @Vs _?sQVKrPXf) XKl7-dү)Nw8uys%^͈ ^SEڟ:~&x1i}zGÀޞby9ƮC# - \ eWE'YTOfvV(l=:@(dyXT)< v= q(*\Gѐ)ڕu/1i/?9E`oLXrW̖%h^6`kbZ_$Eù[˾! # Kd7XC6pDuY*3f<;QFxg"AiǕ_vpo5(Q.[G@Uܕ6BEj_ܼ\SE4Ps58X=88: =smz'dN:k]Xd9n Q[{^YDG~RWVTvUkyzO0U HP#0Иm,2F:)È`}=?.&@nu͘A,vnqM O9yq,|!ߢjK.d aos,_ U,oo"ۦ*ʩvp)ZY9e> ܤO5+:&/ţe^\ӇUrbZy--͕1?Ri(i鋌gN^~W6%ĚϢ1&,3pNOd=`Cl5ӗz-^A o]f|L# 34qR4>+ f㵦Yc$sNqH,lD @dMnx4 .>Z+< Hɥ7p^Mص`RŞvKTû1O|P`0~9Laqn\,4n}-?gy;C/FF'(]MP4hy\i qSCM ba~X4⤊K 6y|THL8o폎^$ lhme#v[4@E<좍H\iLGi t q*w_gx{g- ]2\ R@7\BB+RGiFA<6ˢq 䗽+4%!-d\ j\(à7غN9aytíaW 8I|bo8r"/(0mv{ M)/ΘVb;8Vor&X$N .i)4P0x#[M,. :#ZitxU vЙ{+UWA(!`[IR*FŧgK\?,؟s;u=F ^PRثqxU$RZX;W97ڧj@a T 6x`rk:tSUm3 cJjKqȫ[R>܅ީocy@7A 'պ@bv!Y9vn8gƕ>M5_\S_7;ùV]55)Am*v tfk1c%'Nb7W|4,;̞h7'g*6nWZHIA_|yr/֦8[N3:]8ғOڌ-pFO4N#蹮h&ٰ ^;|SZo5F: )pvb\Ozzk0 dѺX> hӞU 4KG:x܋ t\x5-[ldt߆!(zQ9^:gUG"0AB ֗fw|=_.%.nf,p\ C, w1ႏZgݿRb`_ЖvOeLheo2 !A<)v ,|@-~%MQ!klQ# .(} 4Dy0)2$HCdFƬD#XTdd' Em[7퐊=ze+w|ow:![R\n^ɌԙvFeނp_{6^tߖDˉA+vq O0B-^KٛBLxV0$t.pc@7*D,۰[Ň&6P{ui׋%d%)[I5KַxJ 1bӿڴ̚oMjd`%i Eתmlm;y,$5INŤ%Q˜ :9Zjsεf^XL9Չl^M!僕mQGmH*V]M٥5Z:E7WySJ(ǫ+:.& 9P5;.ISWtXlkFjچJV!41mg 9V֑OW ·kN6~~b3]Z.5ln=WdRd%Q?E`KP'.qX:3 *7~SQ5z9h>cK@ҚJh;s0%9}Ŭh%fXsV)5 l; Fꃑ/Q F63'MaW 0xgk;h#!\PޘHlԒ=Uȧk"E{X<&m ]}mqlh5>oU=BpϹ^`Gg!과 ȬA&3UxX1Z3ew7yCSo-d ޹O&uj1[2 h~K} nEx^:ɦ,B;W< KkAV&i5֑,Iܿn˚b[<_B f<)~^"w-Yo&[(Z` e>1fDTƘf{e.)cgH:~61:VMQ [I/PbXpH#WJu| +[ݞRgyު@Ʉ{_ ~oiR# zj~ &: %H)Mx)j}*<&#fXPws`LJH4@?T )3]taVcR?&诗.VA?͕2. پYA˽c R-n  ^7F =Is7'+<߂oz)Ial+5O(z WwIf/l|Ԃ"[~UUCg^?J]x"_Լ!eop"yZ[C5-Nul1܁"4zYT{L(-Ȫ _,|gmvC1/Lp ^9δ28ZYN^Hb'j|1}eb|g~fڄ7t6NgAFnd@0a|!BX}(L["]CGru4mF ;/ЀccA di j04d ;Z制Ar3OhFو|~{WqkiUHJtZ蛟;' u+@ن*~giLO|*FBSpqOz$7(5U%`M8A&Z\#aFnJ՗#kKM}!Ǿ LPy. %E6H<)?k[Z[ZWfw;BAqhUF׃?"1XF5D g:yO6C#ī#q%] ?gb6HvX"@"kvud|%4>P9E/ңUI]DaD'5B| GtPZ ?Ҳ=nejT Wݶ HGMp_?U!Iw#~s%lx` G@ь5v {ph,6ecX)ZYJȠ:;>[ +C ;4"cLfeZ8Xk]'tHKEzJiF:5rK+ʙ\hCDA8ޗS-np4":s| 5R `/]#mԔ?_W^c2@zd&qCcnJPFn;P$Ju_A{jЋ``'8r|͵XolMc?.I((|TbI]Q[?Hy])6_uXE\CB\a,l+;)KXGOr_A&e~$4:3C@aF +eﮔ.G/>z[r+KJ;ȐOx͋zyػmG+mU\~ >3ViQ;^]6=\t Chߏ$P@4@5*@R 03ò6 PXg6VDTھEep{U w~wQIug0hln;! r4IxSeJ6e5jetw|ŒD-+g ?O aOۖ8勑[]x~A`}- iKo?K0 ǡF!;B 'gİ`܋`MA9P w[d]KxL+}-YW.LdaL HM  r~ 0VvW>F&97 H]L>nZuǴ3G:^Sklc$GTżs?N(9 ee(d8 uA*٩dV?l*G^>H0R n&Ԧ竵t練oz? Iy= RUb}P4>!)B~0U mW5c4}dZ' OF=x'?ی8pwA5W<&8G9lnJ4c˒4SA^%,RQpaHPɡXuYFNL:E%Åv"X@[FN~W _E쯕{lWVtu3/bGNJWPj:Yq ½W**;GV s&YE-b+n VT nx,*# <'|})NiݦlLCt?6~2jy4ƈW6.t8U,c!3;xX<4#Zuߌ-ݎw4&O)*F^" W%M|x`A϶`9 {ts#M``(μ]CF-Z1 ȮbB.~s;( n-#!]#Aě;&#CSS(Je KETu0~xll"gC8 Mp'Bq@us<,fpfݮnk/gq0˼m}M؈XL(bӖd}EsReT@0'RaVȩ,L@pNwVTj'7* ?8]u@$" މ3e<,V\hGjqlMgzWlǺnqeK7 LoKZ Ϣi}\:,{"aYLI?3Zf._-cMt;,N ,k /"%.stu'g&Ӳ)_8>SֿZ2kH1,qϪ,D%xqDW6dXE!{E dbiU0Pv6ff]v*;vk, [6b5 Ä=kzQ[1;dPfe.züܞ/({K-rFd>`$NY%s^򉼄MMںzF[b$ciH|*klAV:aŗ~E{eVu;w3,kfEpo+>!*+ #h[D7"0Y#1 jX Sd8 M(UA 99ۿ ZO*1I %΃m D$BK k7OX'F\VRHc@9¿£[]L9[ !!CQYH A׊iqll?%YIl7} 6AP-/lJ63OzH P~}Ɋ54Kn^ʈwϝ=e"\ a߰ᮂ:'3,}Q+ h#,uP?^gFY/ЬȨd|s_EaTp+49*t8i+/p:s)9#M#WM0) ^cʪX.1Ͷ ,|(7>9Ө9.:esh!L\Ǧ.ثN(+,TEs"fDn8+u"3 >s>L),N>KUZRq@QPw µF|)70x=01cF"~=5VClʚT%w@)uZ:LڶJ0xHl!JЖ >Iu|QS=XJwt'hQ> *2rOB #sD#}8Eo8eBR&az8 ĤuLW,SCxp5 ]g}A!ax:9I/=''* (`s)iꅃ50X}ͤ_^Op=p]%;\XRv>']PvY-NWDd>ׄʒ9 98ۚY'R e]%OjE HHAT-ݍ.dO{NʮkCK9naQBo4'عl<_N~f""N>z +B\9F#2q l'wgǓϐVks!E!>^. 1Jv8{_BFelW»?eXۀ^))/5eYc,6)/&Tჭ"(K/EM)6 Ph˕C&R' -uYrMyڷZmsP5JR@\汫ͦ';+`A?@;ص0ܖFE~ _꣕O UOf^r qn[> sÓ YxVeG(-gB_D dhjU eV;MIei&<"v^A,QC{ f+ӉB Egoz7%ʲQou?_RkZ6F!*z{Rym`+&_9u0ί"^@ 'pi`jk&y/X?ADhj&/7AZ r͋R%|/ŀfCvNdZUr޺nTcs#Y{%V6͎?ccxxao7ADXͲط.=KZSgA.̓kZ:ytXD(5 QŶ ׼F8 :B"9vd3?|0t1%̄>E]LEz( AU\Q6\ k+S~S"^} ߾g~]0I:#.iɧD Ä䵕 cK6Sc7–' J=viI=RUD\+-!-tDʍG6,8^҈Ck.%L=Ջ^s1ʦ?aU-nEev:O֎zt'.1Y.H S8+b7hs(0`0y7e.@ )cz98AkK@0pkD 5gO }wXc'!wrX.e$֓ :m~ܪ2xGњرՌD?QFm/\c\9WK(R`O s-@Z{dq /$ϯhzz>!Q> _M|r.몍qz -\ci TwP_ A=߰~9z FX-uPmXf3Tmm߳ȁxEe3{ )Ny !1ɉZj)Xbz5Y6\UL9[HvQ 됨thnvBIϺ$gF?Selx4\3BV.!| pF.8-r&ZN!v <șF`tv` Mp5k A3`X|x1*8U|Gc: xRm~3*Q\ضpBYLɓߗ?f9Ѧl%gd 47 wN2bsޫ/$cV#ӓ Qxjh/TMQ@n5<C/1NGO#~vDT˸VxmwI2 {#yBq,ŀ0X94EpXe}+;1s0v  o^69Kh0Tzg<(ES_sTSysBse`ؕ)h&>Q\:W]eXMm5ݳ;Q Cei+OM`iԆ$u잜W<},o?y.st2b >*?$Q9ἱ W_: tWY_YuCb|^gE@K i[N "0d;Ds \XO7vm#+c\.#hyUJZmGF"`)M)rq.)5i1B_K]dSCdlâxלdoRG=M̚?zxD(qAc=rQ׳!ʝ5O|O(j`<`tf0`yzKĘXÆHR)Bl-d9 hsZdo1W\7?Dsp|_?\٫/1 Egy#/Swkqx"k2j&"z 93d)M(b/ƃ~{.úoZp2~ZG*|a73z899oi9}˞59968P#i-*`1I#=zˋ@(ʑw7c5/ څ&^d HwaW R`iDVT.`1#Kϋ0٬߁cROih C~jHPo%?v]a;O@U_yLi/S޳Mߠlq.ÛC, `RJ.D#yKҦt ,u3=)U.E3Y޷Bݹ 63Yt>՘<p{i_Ӱ6v$!qT?o! .&X7W HǮ3> f0P5oi -UлF):B( ArƉ1.f;B(ÿk@Um<0vTFwZkvYL'9JCN=-*S:';)[&ks;?~=g?Ēϱk+O/8љ3e5 EںjxSi!5E}C_.jk lɍ%cf8$ _OY8A.z!zRA}ӹ&Ͷ%p-p z oqY0a(NT)%)m!yܗ6dq{ &䅓Y-Y`a@.[ ?Ζhi(Ud@uca"|1Ȃ5†LCN_y9 ib5V7mI *lU:N.fKص`v8UWPekyj槄pvKizw#u^5šSRl/Y6u` f?(uVSy[x8^ښwY[v7zR8kxmJj&Kr&hЂeEy,.`w^(g}$u:EQmgm/-.:AC=yk'L?X+tވ< C$ڑA jR mh#GpՒcC7'Cy!uok}CCVb]`*Z ؇VL (98:LADlwc"&yN(few%{wrP8XN L2{\נw>#92K{_`Ms5L F1ƝcV!{9f,*HDS]BccUi5ԟZ|؀̅TBԻl8aMQZu n߽amBU*/ 8+1,f/g%FJO mMF^/Q ݍgtˏ+ X⢊ Ad{Z|28Nޘ_}Ox!lmec ,A>ރUr(oӒ9xKG5y4cpX?a5g5!5.a{d!2wL?/Db9nOv!F҅Vr{pnp)~L1%.,ͅN!x.!*LɅ<Ūw>!\ S"Bۚ9δ 66py3&zlo=Suv@KiC:I/~_4~U%:lFa6%;f唤Mu˫_*_lkK2`PB9߁x7K0l7 L-QO$te\ٺH 92 "3nFu1:eW017J2κUAک|ʺhnVDR̓S`;l,q0IIek3{E:׈vBs"\s?z \y"MLw5tQJ<|T]YΙP =.m_nDڻvT\(>!k6x+Jw-TF(Vo׸A7H=-{H?QQWnb=X$'R7>0=#=oV>­GS7,YsDW~V}iۖ[S{2LmBo1Տ~RpAdF8f>V5d+JW1I# ,@h4ĺ,1Iw??s"!& 0Hlt^ˆVk2pԖ-6`"`M(J85e[t!lymMtg_~;z3!<Us {:L%K}_CI3g%ٵt+Уz*:o#^V-fOE~XcCq ~;`0[ݭkGL@|HTJ%2S)=N^Hrs8uY7>+wSܹY}-Y~9)ئ<;KԆtX[ٖC#} Jp"E^}0E#"^j~ٕ8C9_*RAxٱ(_Spd^uߊT3"@xʕmk#K27^˽M.usT'l7q'NO`pRՑq8%)(xsclA]̧8+BHAǁU,Co@Mmf ,"^6;wɤϊ\TzmR!u]4}gWZG@bZ $KT|gqݫjk7ؾ@86jδ- M[|%ĵkbY ӦENR瘫_͡G17%5&BM>1%(WpMØjO_W/ Q+8!2tmOC<7Ip?!;&J R·,:.Ab+gDF/.\I *vK[QٚYJ&X$ *Ft,+̿W]Ɛ fcޝ.+^> ܴnMc g YfoZUЭDJAݝ̰&O̦x`s'in ݖȒ-7)&RoT(/.+ ǚ):s (3 rpROI=AΫ{:{qTj;-wZt?q5V}9'GFh(0ՙW2@5$lBX0{})te7ΛF77\ʤc Futo9 |nhmsKs>C2.cºboǺl;Z 1-qGX}ˋmO!pW_רu@ KOlZzVzXr z%glVb;b7%7>s\J1 Lt`T3g;]ymKELWMt| 1d(u>#(Uf+1_5f+&Q$iX/lB`72z%PeXrsxoRl$+cE-ߎ[MQk&qi覗[PGڥW;3MR;(XcQ4 Ob{3@YYR8/$}Hs} { DgLrŅWtG\a< dnGJ mJ{K޽-61d'SQ/nwgك˓8zA)7 p>Xl؜؏*0|o H8cDb,qVʔ%sPǗ=8L*[}y^\K^M{$B`u>28kq_%`ܷ1MRi/=Im.guMcڗ"̦埇7J}&Se?r|ĝOdh"f5Ѧò0ک^JMI5h-߷*ໂE{c]B3]؛ b~g|PeNm?@_~ϒI_nE#ѷ!6/Lrض'z869%`2GТY ;2\|t^X57z {bZ-QiK'cL5 b{yR˽b;cMq<0ffJ_~')"wslp]FH;*Y(?D )Q7ԈG,[GȻT|lw%4~24omLL$) 6W s1GF󃕶:v;@_hD]@pej[7[Dr΅!"6˂ňmsAG\4jLanA>YK ϳ8ںe~z,*;Ӳ)$- _&mrQ^ 9iߥ"#y fi"0[$0߬'f16׷dJ}bZI*WIa0v!Nհhʤڣ/$(#Y%S̙]=f6TW#-ӾbioW-Cf 'Vz1S.ttK{ǏpWB+T 㷜c `(c=I¥׻>9SqU rG#BHۙ5=!g:*(P' 88a;+'~.%1Kk5br+*~R0KNŔD YH(=Rt:o}@k7 JJY1208㗍@1G}9 @ѭ903e{Íئݢ&؂аKes` UÿKm]E^%5ۓP;Nd؈A@2Ǘ1 ]ov~Rtg_Y)FS $1hU]]Yߗ~GO]ēcHoBA|G#MLy^cN@Wqd+Ll65'vy]D!,3_^s2~:2XMd4]٩ ƂB swcĪ&Ր@ڙ.wpR9ÇA5!wОɜ 7|ً=C1l*~c1t魵e`"J R@ *lvc#y:B!\Yn)"7qUWSkP^]J烢3ϙǨvg B]E -E}%z<>e B}gʕKlj^+uWH/cdKK@aECBM$MR}x y1(<y$O8K<:`7l?a0ʈ𹡿 !=)Q{0רQ4#Wzm@4W:1l+(D؈q:9DXq+-2Bۖiv!z~; ͗+n{xxI i3ڇXFlv,l㞜o{X![!]_vݪ[4u?> D'plײKwY`YNFq<}93)򴔍\GBuJIu_ L1@ȨxM_%~X:He bvEi `[DҊJ[:ְfѢڶr9l~۽r̈jSF2跓UK٪ -æ&dwr(Cw:B8-cfdH3f-N vP''_o]fM~\0ӜyWtMhyc= YR!vX}K{aqǝ?x iA)S^r -[;VWR(|{?ݫLKc\]IǥƓ*hߤI@vw6=}([7&\kC5%83YAX78 ʿģb8zlNOnGOG0O{ 1 ̢r]:;ZpBi`ܿTQo-nm&#6j >8"d17=190J1.Hӓ63fmrڲ_\SkŷnKVW C"L'*!}L;e82r${sJ؇yeEuei,݊}wY4V%")OEa5^˞$p˵]ȯF`0WWězUR Ai (6_%L gIl߁1*}34,[00S$-= `cR`O 5$.0 pdКtPv/ RzGC@P\'+ %!RjsK²+tnMOɢY+y3={: c*ŭ7WPt-c<pYF϶~\vi-cy& :U@X69!-aٶhޤ#l^q[M gw&ݤ+MkOXV%xˏ+!SN|Jњv+=)XP }[ R+;K[k 4 GM#2AWSpQxc&W0~ȟy1;rr~|!6w >ޮTWOg?]m>Tƴ]5V" ԅLDztEaG?ЧdX,8f0`zsA٥#=y 4HeOS> y`w=-@#`6Wfag/C o죙oK 8va|0XjC'y\H}ImՇrȁ(rt0&` CȼSGCFQ 3|4Do Q T0̖ô)i^&Q-U7I ִҨ2 𡊇ƣӚ^V)ntC`iiWPj qK؝(.`vB%7$3xCuA[놡>+ŕK `s.8t1W6%T[8PnպL/4햍_L[N oyE-jrW )u7;'8{ɲkb=w5fK,L/q}fx uCM$^ M!l=51LlmuʬlU)n{"0{CQtBɦY2q[VDt+ZA|&E@\M)+WBGb)ϒ5l ubTP63R?:~߷M$ ԓj FMzQ#_A,)wzYTyC`FSdXv3k7iĐّ if-D$AV;/WR1?o'7+so5V?\Ɋ&AX40s{4C2?@n(Jj/f(?{(pDS,g9fx\'GW|{,흽@h~:TGuU&e>! F<'TdT{a.@7M S-aٞ54V,9 ]?s4"@vb0]lhU_,…J! E]J0+ngpROQ+6N\$<:P)v XVB+>mKgi'+7éo&ҋƕ -SKJǞ":id8oˆp+ ,DWcX,ih+ r꾞6m4K6( %JÆO=̲ 5aMI:%Qzג9{ލb@fV_}|R-<\ SVJCOw>`K&r7% )9<}C]m&yk(6R'} c vΗE$ vϥ-돕3[Άl{ Wfy:j `O1+,?^{8 | TR<ö;,k^@[A-0Rޣ@Gmon[gj?W($ [B$wϥ%c ;du)w:`j _;ob |DشX 6D~xB06+ u[C[QU VG 'VOW8gwW>:!=q[b:I` Pݗw ̇.*aozw2hVQGѶl48U=#LBf.PNg AjKg .<ӿ6BeJF~Pt$xbdTd G> XMe|BEQhI[hĠ$ytO!gy__P<ͪV2D3(.~9CZ<ةg,4mh|_!LJ[s lŭ) N"tgYBv^qZ޴څ&Ĭ `|&UJt~Ǽ(?l"l=x99jt]k`U7ŠX 4}`+BKuߜ}Z0tU>_ KMfø֫) br@+B-j %Iv!JũɆv WcN<1lm!rהf\Q']K,=v1'MA>v].bv cDi^_˻J2aH.քdF@={3n<'V}:h+h6t161:N#z$ŤƔJf9.[XG%rzV[VHhO|ߕ}~׊EU/Lgc ҇ 2~M}E(˜Ov< ($ꃦ<+}97-m5X}^SI`$yj$;e{jBtsZZy/}$U_үN]{;R.}rA{Ujk$ef|rٺ e\?9ι"& ze%GEL9$Dc"-s#XHS7E솔}ӛ}(͈VF5Vݎ@͞Ws6H5?ڝ3"'#V~V3nIWVCB9A ٓ#sK5R 09 Xw^4Z˸0 (R#~M77i9, Z~,! OLMl+ren8|ZyH/ѝ%t\BM}JodGI:F,'7ЍSj,*\ 2?c?׻GlhD=R!t>} ϰ/)IS6d exW[e*])*v-܀<&L?v|Tvl;K029fh7aO@3]l&xU!ڢORQ9SWcLܺg47Et /-QreِW4)ۖ%5-ЊUx)c} ̝y+sS&5F #ppL! YW2 y9LgKC[`R6.{ZwHa^ŗik &?ZA/1翥>xgwH xs}{.MV:F[FZ/{/`RF fu yBj#TjsAs)ѐjlKD)ߏKd7caxZnl<\Y v?5f8^XzUIoxiN54ORԃ挈|K~o 74UMN~I9"8歨.Ò`¸ .7hjup %,3BTsPEsWy-i % OݩxJH>߁ ̽M[nkz_A[E|ze2$󲃶{Qds:68u &%K}+UyK;?^쪹 Pk=M{3f pD n(?}YhpsfK5@НDqN %ág,{` Daa:FFEr fYsNikb1B+w!nS5r7>cwv bܱN=vM Y](!p84plșb#*#R,$27 )oO&$bREdG=A'gU !hqJoQs}qP2u{g?t4cCT= ٩?^!Ŷm$. #KnBrtGq}x6ښ (Gf7ZYsّ#w2,,o @='"u$@įphF K$fD"X5:!MQ&Dy'R7U5y'2YAV.&'TN@Lv)LtC eУa@Ƭ•ڲ!K•Xؗ3.^s >숿̡&"$qSR ^L)=hm_Q~)@=Np*rs>*?]J&?~QMXdF`?;m|\T{O|\ -73U˲NE۞m*4%B2/'3Y6,f|,i[)L M0k$2謘@qAb1 W_ULʙ@rJvXŨKHo8B!)w"Zk5bmw~l׸dR'; _k`B;-V!kR zL[^ɳldbе=E Oa.JsS]xZM`>(eQi$wO,<]H;$|5(4 t{G0Ƥئʼ5~}[]b`h)K!x2AVβt q0vG/sOkTHԡo* fa|eQ* Gb5hTwx7boIt/~+cLq>I΀+/"÷v@IZ"3Uװ-E&7HwI̗ڄ6ϗsڡ}`SAfoj.1`J2fA3ְl"c"Pa#Qڄ( f [^1i;; pɛҮMy3T uD5&-h٨,;) |eU,pGF"2LVWO%69<^Gp^b#M6zƟ捨'4k;5ݕzPKlvM`a'+ɭ˒Hʭ@9t QzUuж‹tlj}HuHVhv'gfzKxMe}B$[Zzk.H\P% h`..ؚfb(cĆ~s0Cی=7T98< ȉ7 Eѵ`"zGH`1>a^gKaƮtKޛS΍(SR.^[]Ax.\6`px FE̚baDFI7,TldS3weXe|7}4Sɥij+3jBFbicС,#y}С~%mvEg=_M``ofk72g۪绛&[H)啫sm,".ۼj׈6>E8KcbU($m.KZOxڢx%U#P>[&Sr]%)ݟ 10`{-\n,KK{{W\^%Bb;KJ=dI ")$'d/g''WV  1k}Lp[ %˛gMK?~H5;TE|dY.ħ힠O}~N jfB_V$e qaz8 ?15xNb^UCM.OBr*zNf8?vS3s%C%ߧhxw$`vHwXWe aD%Ғ> 3CJ;4mI׋-15o4ӟБtZkt(؍Y?/Ա8/9IϡR#(>sFKDay+~9HD;)uMj)2p_'@5R_)a~Q,h0lKXVGs^| ?P?t*g"V]QRv/iq U3z(Y)| mDx~ҿ_2LQUeUd$ v5툥F#[<,6th 25]&:vEq*'ED2]tÆW4M< {dbQgowD\ e3J?0,*-Ι,Bel#,U\gTőރF/\X?Ѻ%HW_]31 LYjjSx2g*AM XExq)"G#7sl)WJpQ-~-W[;?Ig-5F Yu}wGYu>~Gݡ8O4rt$F}.Eq-4>oUӪQ˭RmcZ57m w"j6XCw)"rd'A&ɁQ;n6kBb' ٌg.CT"?!K>{HP1z N $rwfo\$Z1O7wī2Mamx`g9NJi=͑B%<ՈP',c曲EQX!̶58Q}wɥ:Q^7,ގBseֲ:s=%s*;F%gyk0GzziE)Eml!ZPY/D @ڊdWE,c)e=f8r[J3WRV}h,^=⻗侫`(JK)Sg-Clv6 .6f{~ EE:G=y6yրrkm!(rr:$_zH;X= ZEi) "\5 [A@ڶ ܱ3cҷg4_' ;Ier?F, |!lx!XvMvt/E' ,R ap)Q=Rg)x:bcmjٗC+x/99µS>*5*߄N=7""cm%qR6-rpj~s;7W^m&HE: Q] (P6,d7Y)-E孉psF6–H T3(2hC7 `(1xҌg F ̩#<b# <;95n8zܹ\z.?ɯ^Ÿ^/ ]Uyu-Vx9(ȞH¾/iGtST? ,O ӊDl\ŤD%bfa$ 4sD KEm0w$Q9͡M&;9 qI,*)FAE5q6FO7,Ztj̞qGx^()v;[_p';RqMLrƪܠ/Ǖ&C}:6ULP%^DjVQxȞ {3$A.O`oSF=ч@Q3A3#EvI&+P %rx]7' bOu1N^tnoT8oB+{[.T5цΠp6[xh )ΣǁAXl":_s]"Bal%ȞF.;mHvIBjB&gd\ߞ`Fնuj eОS}.\|xO`ܦr:?/9E 5k^4 uB@)nR5Dמ}"g7x+//;F2<s 3XK+P~@cv )U=b] e5Xyi?.EW1N7}rP>o묉.NErFTh}6V+`gv<~DV`-ʋiG CQY`q׬{kj]|_) vz)`ނ<)E*H+խ1Y]>:VLwkt+b}|af|vS:"vO(5B.\0h?w%vVIE^"8@rFU2Hq${va @XW. Oq*|#`ڛ7 *o%ѻֿlc**P ׀1;CW&pzSlS#r~{hA,szNր.>ϙI0- OCuW*f7xZ6[1 Ρq޷[n^F82DD{ŭ hk;ұ$pW$&>&ha <D|qá})3%% ,v{p}$83pJcǼ#bS=ZOqu#%ŒK_=q#.A; ȱqy5{q0&eA(1ѯOnaHĴ!QݓT}Ky`Eq-k4zغ75ޏ5V߅.Z|G0`=dm##x%# db/ ߅uE [01&)\qvF^LnF %`I-C^t%6 (t"w}_j#ge5~;92`w)af];e64́nT Z:j7 SGsXD2WHXݵQSBm:7˨?q 1zhuC|ncrUӋUc5mToe# 6M<=i͂zH4Xbc-˷[R/3w$g ]vlLrK>.*]UQ0;N.L>3Y *p#g$XbFMY_UU?8 ^z,^{O666e2tj V#UU[:(Q 76#*{5>_iH'k*(I&`NsUy/h2)D- ~W'qHiWTa7m:_Ej߹#O89O)_ ݅wt79e+7Yl/{s,3v=)R#? CBm4OiWDxs*#AIp\.@/%.\*_@mE[1~r!b9P=ӢjZZ"E*V]|w_YD"o,ö͓f8\W}$1gnQp^#H5{vǣ/{ѲlyhbƧx/!I*Jr詷7Eܠ:z& Ty 2oh, 8#v4 kT'2WY\x5r3't2y@G.!P_w <`GM74ϣp86BGY?0 }M!Á@u`7'xIk([\;6ŞXO{'1)LB Z`Dgl.NEF!yY^:7]Y%Q~Dha  g6 jbKbZ}V90l'~=-oqsՁ )Y|qQF47'- Pda56vI<*VOh(`kvLJ˛Ǎ>E{4穑Ӗ,G߳|_U}c΂K5ιR;[/.Qe*O-Vf/tم}Uِߢע}r΃{ |:z!UK5y$ՀtV q{Of- _[]!J[R_S c2+Q1'k_pɟcT4@6m~ʫZ逓ݯi9rG2I5HMgRmLBFvӌ%ԭ*J?uCGN~8RAK1X$a[ϳ7x>W\OE jT:'ie!S>Ӈר1qpcf.(07>7h bW t8ծ\)5gZ$f!oZD<ۺ̬ u-YlNjVU@AH)Vl>iRV6Z-ju\@"Q9KT|]Ȅ栌Lm!Ʃ|sױkAѸ)%kz*7Ia>(mG)/fxUs)WU&XIcUM@:̮A$nP+¥^=vl!h !6*+~_t&5)qU"vM)/VP +1ae%|*dKJ$M Tzшpʽ;?O>:/'>M<]S#.d \% >cv1x4֝S)v6lPVivѮ]\"+ #J 7RcDrA'%X y_Ď-X&D17a>q|ÅIGSՇ^)a# %RUM۸{vק\<) Bzx`rh7:0FQALz/L=܏UvGx6W>pL敾1 _ TN9EX m 翐2FDXXR'DŽocb@x,(b]‡㿧vORCF -siYW@ڈ6M/ ]dYmV1  \<:W-p) *.bR;eMOcRE2oqjt XG>d]'WiKEQ*PC7B>^@&pLYi;!ju.nlNcMX`>ey>1ZNԹD}10cO=cPB|gdCp)cD돇n pm'qH,4}. _" 861S_㟆/]e6~c2YL.ʘ3hN5AJGSزrrFW,UI1(}ņci(5jtTL96De!!E1"˒VXtN۟"Ew9x!&- ɜЕ^%jȐd|v79 Kv\s.n$}&X۲Z aayF}tR *ޙB e"Ci#{:+8-&O˭+m-PJE ۡx-"}K|J=M [mK} xV ^9_bgj!eஊKڰD=@=A@yL 񷺛nՀ8|vK%{0*G ?TC`nO~YC!ִă: P4va[ -r:QfTZ zbG֞ϩϭU'3vt <@АsqAKM[I&3qA9T~nڰdg㘨&c}2^#Ea -ۅ ߪo 3 5x5ߡn߷4bE4s=jIڞ21dMT 4Hˆ؆| z6/!f}mp4$<n8ЌyV2ިwo7[g}t(On33A-ј]B^}Ǜ ?!e6e~RV 1c E?]M8n~uv=/⬻;6əhHvC^dVsȘ# ]+g:V4s8kF_CM}zgC5U$0I~RMOmK!miZT%0?yo&Ϳ<: x.RW4T$~gXB{)`B6f`d|.u݂/!>"P (DΦ9xz. F%#4VBD>دJX'-1\^ִ 5v5Yצ/眚|KZ0tQ?c-aNӭlXJ7$=Bk$y_AQVʇ!a0_`m, .B,v`n4>Wc`o DB <3G)vOfnb9a1YٕQ-E(lӷ w=poZB-qweDOkB ^yWWj'`NzcZ[)BVfhq]G9c&_SݶR(E+ɦo] ՑL ȳ Fӱct'aƋ-ϔ2yG<͇/J%StYXyk c8Np;.rRDK ?ƌD[p:AfrQcڏ ).(vB,/)G M,bF^&a H}x ]: zG3IpOz5QYfWƭ⺨d0=qb2iXO{˄;#a,KYA;A҄j5=/Pw1`.6TuֳtolC~]lz|r+_|!ISQMY^h_$ R,ݜZ[%MmL\s_b[3AB\"ʡ佦65ZIQ'rtl}p7x#F2F{b1&) ?uV…Հf$q轕M: {q?3?UN2[#LmFE ji,Fp_)"\1\C9џhXi_jSN<@I!̜e:8Sv&#P]vX56zx̹1 9\_SD⴫n ar*0}V$\EK7e.^47Ӈ] lL&'BIH)Hntg&$' [Z\[N#AjMGۭȴQOsgM蒰Lߍ[I⵨77z7/ڼS1]08xJSV\+)qk q>Mtӻu.jql>p"[ґKQW=igx UCN^N\w ^CWJ~UׄΒ^w#}C:j5R}^L2V-44ӴbcO0#gëSr}ג{(:ݽ߮|'+v&2[h/&X1=\N Dx l'|n8}`&Xg(w!{5.Tٯb!зې]8q޴FY߷ri [Mkr b,oVnYδ XIS g=XHQ Ok)cMp*ّsjkOY@;w$9x =xKk?4   bpLpE~qQ'j{ )Հ=ʪR]& &焇uԍ}?i)]璻v68!0pf?6D&묏(nT% Q>g~KK5cz|zQзSX\.R"sxkm ׊:cE[7&7̆KSDk^s)c 6ԈOCPSmG DHaIX\)lZπYK^ -iE3"ŃYpB]s]LjH wcѢ@S6F<2,kqX|vrrLᇢ2Ws;C1)Ćp ᏺxi~yO@v T#2B;&n4Qf>=yϿ&]:ب,7h f`9߸vPr^Ņj_h'1 }NGaVoلb-3B9jγ5/G8|c;+zaK_BOZ8/tyCD-Em]y`Z!֬A͛ xGlI R_A{)XLF!5ZOP}!b~9e6҅Luy ?7im"0CߍXfwlfĒVGTz0*l#$ۿhEb9J/'k -MH툣h@Uv%\z6cž盳]&qj״SܤwtNh4ѧ+oP~+Ra0}'=\_dyꡓ`1zӃPYg H$]**>~2m<\;a]l1U+eJjm mB!`U."!bm3@}l.xtM֣l)<.vRJ Lq̌ wjAUzL:5f0RA`|=D#,BFG^o &Fy\_ Hyh UNvha?[y%W=a?2\- RiQ$e}l)ˆ>[ޥ^ UnMw**Kd\KnU[UiY=9fv@W)e0q3?,*8XE1;?N"Q`{e%tQr_6Pw5}ԇILK+??!1+4Ygi6s2CN>v:m&>ؕl/>z"6 gXΌ!˄:=tnX ̾y(EQ0,Vqӱ1 T͞`hy{;E#lTS2Ib:nIاX4'd}|8=쯉 zp>m%(`ϕ./]uM"eօBs% /dJDP#JgES J1MK\(BWʅEEiD5$i^GKL<=ŝL KѰ;*w}=>'_sB;inTZdrOaoO Sޞj *hJ\O5^7]5| 5x}w"&r@BXf5] ; xݙSl8v#7}@mZv~v/Zf@g#5A @nx y51Ir{!Fj'%_T0 ]l2`&M_R^xW,8Y̬_Z0tw3N.pNl$팅ҫ1"-?VvR&.!흗( <4Έ3ȴRi&8YΆS.d:VH)~6{| !Cɧ>':h\ !n1GӈVJ[W&{XEܢcdl0\9e_SX :I jNlxП)Ȫ"P˺M1x(Mz'h; գ"͍ \=zRל> XqG^pS2 (6Ŭw[^rUdz4@ W5OڠVemkBx#Q-i@^![wOtN ftɕY]A}ڌ7^݊w!hpiC,HRB2MZ©%IadÚ~qo8g.~6X髐yeUL/+b Y*xֿ&1ޟ`U 7}jx[GtJT%id#Uc*/Ҍs$Cdi Ӈlzpze=r _4ܣ͋^|8^Z=O3k2vg`'py533Eٸݹ|H^NE`١C&#9lGJEf׎VX+esHgW*WȜZ;fOJ҄Nc9=ʰZy mwɥGX*pNB;QQ9Ci'~.tWjɀLn %7reUj'_? qq>`2GZvn4%]m6;q*%rwiN$u<ĝra,* bUv<bٟkg}BJiWtVSe3RgTLvlK"d\[<$ttٱ_.Ly)*c㵱Kq[Rh[kgm>Ј^:,l]32 ..g\R\m-*WŒqz48NDo o+۳˶fUIM kʔ?/ 7Z0B Nl?8K&һkfek&(EQ.8|-ek,FnDvW̯^'sF:*mɐ}^" yG8!b![?Gq,3 H0 Ku K?xeYaʐ@bͦ_]Vc`]:9`y<|9Dzӵ^(^(Zk_9:+fBTl^hAg^R''̨U=5umOk bcK{kjo3}s۟533y ! fd X7Xg9<3U~ܘ> H=8{-NJ~|[quv$U >H+Vky|g~ON>v\Uz>Uf /e<|3jU}\V|KkFor?jQ% I)qhus]rbk{0d', \lcgFnlcDۆ woKj6*/+}wyTuihqy~@D"RYSU- :F۷jG _:~ MO p3esyηlRb`ʻn/O̺9!^pP.hQkL8tkR%o~WS^MLWQ4AyqS lLvЗ/l QS_7YG6טl8 @Q@-!**& tŨů_{m1B s%gⳝd_z;^8br䕴952߭ oފ́fWj"YŬdzFaxP? g js(r{B{Tuh!'@*15 /M}| )89vI*'p oڙт*G*2bDjnhS}+3[kγ 5ffoeRNs'mO0>ڢ' U YIv2N̕ hrFVQ*-ǁy&&?sc"("Wd+p{փwaczL]1N-xSb -ZSb3i8Tj]\F^r6muxV {0`d(= ng<馨Je5D/;e2N=J4LQXG3 {?\4%+skɐ]OB@+Al3>3p ]M'F̋i\5 җ*pϟ^lkX>޾R;zrT?TO\K%fo^zK?;gA~^ /iGAstʭDQ,Ne]|{fu'2^In{3U4$Ԁp0-E_(/!>Qܛv^ smvyҘrM9\5kkBlvOX̹Qo"#: w5({uXŒ5Rm4$NYbwxi-%=WoKi@R5|O4||֨8&?۸]@Tf)R7¸a.)[p*4u ΁C74;Y0ЫYQ{`~yVr?yRPAZSj盦Cʺ$,__Q;%|ĨoLɝ8I f(yUa!W^[ζh"]=": 3%:L E/)Lg\Fe>zӍz[b]sJkw8ˌr,,q> C˨s͔׷NL< qLTg[5H(%߼)mE %B<WwGAo;uIlk%aG6m$DBDqA#*vl~xndI,M7l| '4H4 2v>G<[H'W~XkZJZn0q (g\ Dans;BϮ< `lM;+O(  c|iΐ$ ?>OI䛄&Gӵ䨨Kix4؏$vѱIJ òvx=D-5!h4 wEb23|ɥu0 E{a,h# &,qK3FTBrK&!oi5{ V?7LVpx,N { vO*K"Qg`6d GxY{XE}b̬w.vQ#l;x"6lWy$;^a%:pE9:FH䍚63ċejgU@ v8B q9UEd {'."z9H-$>V\Ȉ)Q؂ )zP\t _qRIj\-!-;+XK`gr{́MlR@]uZ#̝ 1k6-`TZJzYu6 F@x5 kP4:F\];+Ezശ[%0"Kp79yl\P b_L9˒]{GhqsLmh1ór|f Ujh0tTa7eEǢՄ7oc?IssYT6Cqa B")[1{ϵ _}vNr:d!Zu7/z B̀n ܌)7?/5эEFzbQΫf.kgx~"DGLrRf3V$!5{4 eDeL$S|jn @iz>th͵v[Em:/,'MC{/¬Jh>dg 7& J .RD_5]4s,_B}qU< )NmTd^VRi`&W@isD/*)dM]yn&K+Ew ͊Ub|-uGSōΒtaR[k/htE:փ9Bcά0M^\$ys&}P]}tu0P]'F;OLghy_> NE z 9I-|uRQN8*IdY5:.[~r|C, P,Cl5G2䓶)sQo$FJ3T1@cjW&zZUҙŖl*>6+FR7LkRgKQr]WT*'bVV=S2)W:E$~{4~i gkfVߦTNs| x#8q'nz悂%ڳ|_,DpT"zm5PH$ 5Sko2?-|2Pj9L j(]KkOln} (4 h ;`GZńҚXypAcuEzO_CB,Ta8NQW(RY 9 `7/^K3Z1~uVh-w:g 2xyPyY9:W~,I6ЯaȽ*A}S8yGsbR;eo}0FoSlP2ME3UζvVsPp#zɾ'<..X*S$[hQ\lgJɞIfPZF#%]Wڢ\Qvs|W>ExbYL Z TU^v3r ` Ka(܂փ;zo;q:Bh&E}%R6)oQ 뜬o.onF^Na1t }E@99G<"3"ة,~fEEnd> =*3?Eȩ&/LwI]vc♒WPВ[Y# I3?ǹ'Ҝ8̤};[_9DmPƂq:2SH^'ٶ={G1܁)^cA%8hɟrw7>P~Y*v`MVʨT|dvv t0 ,v b"&%ˡz-aRbH;ǩ0/ g{Z4>z 9jc+po=9Re|g9>Ŏ 6.k:o!lمg0~]܁ְnG6*:L6m-h6o 4/M`?E}!ī 1 ? %ܗ^}8+KA^OF/-+6-q)TWE@А1ܰ T:7xígyTAa _^t%vBS|kvΛW8ډ"]-vzpKگ#BVU˜Iy*n+=p 6!`Nt_ GqS@!' .w{N$LVL7aPٯU/@(aEKTr9^;ϺQc6;Ts!﷎g 27@WhS 8rM,&"^oI#_B݈y3弧 Af׽l*-Khc,JI`xNxBDa@-WO0-8z3t xr[*9ZjyTTeN;YSw`;87 fXtO-Ao<ǭtW8*ʐR z7^Jݭ(sx$ (݄3Ym=>wEkf튯k!2A#gyIPՠ6,YS|1dȥtAKpڅ=2C0LHKy#D;54@6S5Ҟ jn[^$&;$QR Z˝w H,~Vn!8z^8κ<; 2; o:ic5doF5{p Iږϓhr6 "c,hP:aQ,:<׿ mH9t;ilPZڵI,.~ʬ0E:kx',u,W?aڑ4:Mb-΢64B), /T]r')p4mv.*LCP0 u篵8XA 3Xe[dw>OR'י/tq?L>=]$>3Կβ~9(@!pUFy`QX-"J"Cb?ȮAe.SJ[rǓ箫S}CJWiͷz!Փ#*S6AudBz\9-urbk QU>E?dRWF̘HB*bznh_2FB̷4,Qa5LO>JAɾ(w7,ݓ"^ꢴjӔz$d1eEoG53+, #đKLĦ &,Ă7}3~O3NPPA6*xA.rU#P)q9kYhi۵tI HPFu9X;;.C[Om}Al2AGr-8ǗكwfjZRrWq:%Π%xQT:+'"1=QO((vK*[s1IPm29<З>H1ZfAA s02+lLXV G+ FyOj\: %[S6ϣRy-Dŋ>;Ȯ4jUP)6]^<\ȹd]ka@# 38.`%QdZ^`~UɅҍC\۸ǘndH^q{3S dVYuN/ ozc_P=޳atSyU|.MřJ5}5.h~Ki  u3 [fĸCŸ!0!@*0&_tOR8&ID /aa< ָ= yQƋفYsiwE羔(*~,Od@LAW%Ez aUL,ɹ#u'xN!%l ^ B4hcccN5nX _VO=ZWiYPv[MhM3g^}>0Gx <~4st.gMO2 o"<>K%(;:H9pkW:qDE>avP"Q9v&"dxTq}!; <>ci+ 6@TIXfRY@3$:>s?(4LK ,}hhlI+=Ru*(Дs7^OG'{*bzcb +#E!b- ݹ5gwX;@j2QumZ*+.uBEV@羻A!⻂oۑuU2+xxazi[=cr#/z%VvetDZ^n$,S: w &bDRev;+þ+= vI7XhX2˴'ۭq(mT$RHI=Fv.mo%@XI GkJvONfΔP5P5#g")שs\<=rrXߤ 7;46vN(}_%yۮ{Y;YͶF`GKi\q).A?s%3 'ekpͨU46"-흯/XjGI-DSV/q4fB@Nb!w&]6^4׶Khʏ/Z'žj0a<}6mhv=q)!=o 2R/tf 's##IKhٱLDy9 c љCy{|@ryeeXQ='(Z Uߣ:Kƣl[v9'g´-?ӟ-(LDi%%n^x6!]) LSߔD08P(7nCbAqPU7oeR q\yNckgcoTP'¶$^C> TcWzH ln $ĦkU%K^ /0l3RWgnVK -E#9e_86^o*`A,k|F/cx(A(ߐw8\I"hj-5;_Xrh. :RrOsGhw )Y9oT`Uݗd!L#}zpS4W+oe8~ ˩RSwCv֗IH~Iw8:"ŤWgʼn&i&>7srppTr(h$Gu}Μo'/b1LSĩO(}H{n Gv$g 6 llö,b7, -~Ő}.pRɐlR Ets4@z={`f,G0@x6Pum~p4[6|Wߟ-:DZr|yM؅@.VS<ɮˈ5*GS22+TK\z%?xJJ {.ޣzગKdgOگ T|~ $Vvm{~,>qZ'(7¤.WӀ"WCTp7V%HX ;h" 9jtfe' ~U rvqCLW?sd7XSEɻ^?9a*宏e_h  B_R 7Qx{O_ K6G3e8ik݂_@ðY(\D<QP1- @thnTd}U d+vȨf?oN>!h:r8}w rMtb9#qgѦ{vx2}9;:֨RIɋ*AڐxF$ƒLZƻ4-.(MtD-rF .e%lᄩ(ow\r 7#n`@?9E:m5\N"Z@wO`%zu!UkCM~/fNAĞC7rǖی=$^:QޛG\:pEN`T;Ĺ,SN /Ym2ngaeW-4]!/-]Q*;rYt9w;(EAu‰izs`6^g?G.@{JG}$[{Hw))7o7TG(4DIJ6SfDԅfUʂ|U0M%8@WudD2(j)"DJxȴZFSy>^JI#V^ON '2r9i0 *O( PAID^t~' . c']g]hkg*ȇ 4hxa G*_>ߌb;lDM `zNFZ,V`n. :`]puXZCEcDx%<(y |"]Z[V\TJF*ࡁ*ǹ]4-[/9=+|ň~A174<56ˡ|t-}cMu,V@ J͙HGxհ$md^M2sX)m;~ތ(^j55v{*ola(chs$vw'F|ϑݽ}?oH?]ԏ~"Mh:SLshJ46I U+ĆV1q-'fYR$%dž+o Y52(A Vs0 !S1o~7a0+2/ ͙vw5'7E,N'1T?/mb Z4GNUb.Ū"UpGNp8]R?o?GV>'ӹyʞSL@D 'YP3?K䒧ϙdkF !dD7l5MZ7k#6fm.+ <6T f҂9cBίL3#2k;@fO9F$v=cqeuq.[m!zS:/I,a;mCaNC-xyF{ϓ@%^&7\d|Ka851˗ܹ۶yH! r.1!M}BBD4N<7˾$ =RSMBˈ\|\OvBmגUVHo^du5c^r$Xj:']}I _ӓ[,~(vI΂qxl 36G PZji'YaGzx"(tPg']O3;;KId 1"ܶѮ Qur/Lוv*Cï*]zmJٔɽ!ӽvbw+FsjX >C~%SO;'@a8=sZK5᚟~&E"" pۥª`ڒp=SK&,GV_8U-1['j2wJ!o.uM0O[cG ony{ P-ϒn6{}!G of$Ccm*@jC=8ߡꁹXDWE:N.7ګZJff4E,BfgU%17 viI DH-xw6 M0XH>=v5PlȣS~,.wh`{ǭwFޫ`}ϡ=}BNĹ+^p'!eГ}})թ^Q l2@l[+rX4=s+~4#(^7iL1VNpZ)04 J*R <EXA MF2gn˦f]1L1V$@3xX8\ we)o.vzq&Mt[SoM#-ӱ; !5=C~ӇH ӳ#PK/ 9xf{"Hc{}I&"-ݙ^Pӫw`,Ȃ6ֹrq0!LE6jTX]q6qAP.)@|F.Lh!#ʙ* Ll%ЧxnQK+`,T:}gL b(j} [R.*G4UxɲB7W&LY^- ])+Wf#2”Qw>46"3_Y('wiz2-|Q>Uh i;kGm4JRe7]d_yuܰ~nzJ`=ͅH ZgR&.9b`+t,OXl?8[{^_MYmlsS1]O#>fd;'4Ƿ,"A1TK+kC8/bINe#أ6: mmU5y ۽tꚁK6Oʈ6 ^z߄%jHXdDii NmA{ J:Ӡm騜x-.^7%dK0LSgr.hny jft^hG]ј갴DSyl YLa)ҡC7㦮<6DŹxgOPjzZ)VHui5kp쀺5r:cp {JaJ=Ih#(|ᦠ{D=6jwEy3dK%[G_OȃG|rc{E U I v΃V؆"c,oh{Vyj`;jq Z u1E"3TfߞeX?l0( dYg Irf0zJtb̒Wͨ<qg#&˼'~2uJHKu6:fZ+e6X5\d׼]aS%B k[IU"!lUK+# :xD'w.euD _ZO%֏#?dT=ܞQ fX^{a AGN9DO<)U'љ}c>hEF2x+&Fk:QS>b\Cd"sT~Pd!Qer4\m֒؟f|LE5 aXkw <Ϊҩc 78atm,> XR&d/!"(9Rw0:%95k* @tJ6=ny@֦a랿w`h;osigx?Ra++P3Qk~ls1P-">=T jqa9ltFO3^oqTNJXM [|xgזn-LͿ]I&Wnh2z?.N a`GntC|8< 2+k|lOҶLj ٞd[l͕d T.| ?Z`ܿ[tonml0DQTHdcUmDLo;.@'֝dmo\,fӠy'A=(&6v Xu8Sa69:xVH2XՌIP{7m|Ftb~ ]<,$^Pf-U]~uMntBˋ r(vp_F@7*)CF8v(?yhł?凪{R6KJӮ5O|Cw֊ϯQXZByEUByOpzЙCiVTǎ17R.N)lOqY桒b6wYճPIh Ev]D߄I{Ae;hH"N:³a1CL?:{G`"3vNoHW0% <4#GmwoJy%PH=|9^5rY7F_>b=<'#)/VAi  U5;Yp2׵[W H@?t 'Bg;_P`VHdV4s:kESRmpapq'5"v~x@ 2փ'bH9~2 c^zhlM`Zu㵬9}s"]#Re>4kv(*j^y9SC/R1{$wkhtgylDnilĠHQnʿX-!he'itQ4QcG#qTPU@} a^BdfL$pG =مE:JnՈc9/}5:Q>DgH<NF*Z G%fFTOP,;4: ֵ 6/?5x3ma˕Rt$n @}߆Z[U2H`4,YӾ 342E+Jz.חF-e2BaGY.ˠ.I&O`$ M8E $vSΆ>"trOFDgZڇUgoA^Fy!42ht. Wj 56.@T{\eV\3ٽ`)O1 *{e ,AΥI,yPxj(6`]B 1::zʲ9 Aȭ(CƜQ'ckf3g"!-clP}iqx" r7gSie/:7fJtr}膁PxbeS'$yoP/GkΞMJo 3,SnyeUqqDATݕRT+EŻ:㈟y`O>c؉] ;Mw A WO4GYjcSI<Q&@X,T>(HrB8ܤUMH"W_izE "f6P\#|h F;xQÖ)rSbN9{szD!|݇6ZAfXp1:'}P 1Ep$ @Zf;Q^Vӣ=Au!ዴkȦc "cUҸE}JnAn-59{IY)nzT|F""Sx~EGJ&Vru:  6O)9Ň+uOs Xи7);\He Hy^x2d < F)#FR* z#(?# _23 -g"A4ŮrUڀN<~uL) i"ͷRl9S֣:"5ĥ~@JO󛱋|cQgO:SѴQ]Ыݻ5O e(o`);?s 0~f-)O84|7Ÿ!8'cS'o2~0ZDPme>CQV)8?Wε$ %sS=Y?#B^Ռ Oج^yhğ]b(;~kIq,L2ij}Ǡ8z`b)86dtZ!lt|> 4*J#^Ԅ+b[)e_> i}xaڠ9S݁X~Ui$%m`YT=XA>l! Tm&NAa3QLx]DbdfP劆Q/s(gNگ ry췇Q eJS9QEjR8IM!tܝR-F%+Ah~`k933wN p [;)i QA'5"@)5xqGUh7?(R;>;(HW|:]dlFH>} {0A Zfb0Ե!K,@'YWaGea W%E6}hjހfJ։9R#S ;Y#^Jk,<{@0 yJ䃺 "l8N~~$u5QR6=9<=ǩ&U\"TCF=In7rcI.Q o7/s3^K6r\yk3`YTo9 0uX!Ss Hr>ʹ/}~V`^ "ӡYR\WsП^|Zࢷ?{mM1<2Ҩn=DZ"LOH"h_;/s; 5VOmwsL}ӀI{h|p|BӴfl__n}A Adjpv]lRu.wO  (jedadkJ-Q+'.ٴ pU5฼†{\4;P%mM_p y)K& LH݈tes/|HL|yu^v ˕"$]ŠP9#č U|9ZVn'u83\ړe#U/8Հ#46 ) }gtoDB:^1U &o>@W_Z,/WY=uM k#t#s1@vz6m=[Rt$YTOkRL+^{$_4gQt""d7{*ud4M<0GMI\* Cɮ#tauD` I_3c,Ʀym.V8"xGrfͥ827-,ԍ1 xvҩVH/yp3v9 >4cd9`z ~4P4߂s7.Bz;*yzE/{k4XdЏs|h2̙i.]8ۑ[ȀqR}8UY/(LH=za#SkdOO>/fHbr#xU % DӋ@w[{ɒ7>hMll^y:9LdvE?2{4F3-:99:9<@jq%z9lխeK)`Gu%rGsb$aQvSo8sJ [ϾX]/t R&Kͣ'X͜qM{ISDC&K9c w [pQC?d\:{>|c^odw-$gv,c džmF`bR]V?iӗ߇fl9KBaGd$-;5,;2EGmX5A:6h 5)̋DFZLsO2v^d!Kf SsF8.p;?6}rbh{,ܾ[pxgگM2yp0ps5U6!Uدص)c!LF&/>hPnmb{*yU7n<(b!1s_mtzj$42/dgnL~@3FрfFRJYzrad9kJ%3ernu<֝Kxu7P]Nu^ԧUfFI' e6^5T6/'*hVF撴UMuLɫn"\FMaSs1l.F~ԡUo$o'ܰ@A̦C7bP$K# 'jH4dj6A&Yop@U5\TVN 8v{"2d'jW5mv-VaЬ MS>(xD}$e&/!*35$w_bdlwXL'e@eS莴&&>OmdR,-kR2y[\=*)Ԇ١B&~oR+"N_0fvLc>oB7fKTפݩ*թ0.a2m\RLygUŝ`q(Ψ V܀a 3G'|2bCZn{-B@=UZK5w8,,^>'ZI VJ4WR2lTi ~KW)N4QkQzK# ʞ`sn 6UaX|כ1-{6+1c^#|{/_V%rqݘ3z`4V^%{6f0eQ1e~uzww-KpxdK[us\Q'v/1ZD;PJ]1sFc❧{E1!i2LWB1g|2?_cU)jẮzw俰T qsV_5o`z)KQo`“7Ok@Rs cfC2Ͽ^~M%gl]O7 C=p9}Op"ȶ϶6YB3Ҁ<,Ɓ15DG$ƨ5Ic+` m[Zz'U=iw"b`OU'  ymO [CWil4ی|n7Ex_F݁Hy k(H?s r%-r޽s :dlVn:؟XhlS<ƨ5icKKfޛWu~(OQiuϹ&&MN SAMtx YvmjAX$D7h,D;l_~6S /l-l3;N+|_tx$s6'DFtEB\k'/V8z Xg(N@>caSFBRdtnBlȻ5]D[Y7YHÕCA@VG ]q|\K bKAڃߺWN~nO]ȜK1[УBkvym$vh&GybzfH ]_1†{ԌW_ *ә}xĻmQ%i6jAEQ1Wtr]Wާ;+s?'ur;LRpۏ}KmyLUoTatDYҤ8H52A~2Tu~QQF-I 㿣ikE,j:Sj)FrT;lI^?iDk]^6cxPW` FmD$ALl(JlS)O$f H:S޶ϜM7o,+8Zb\t}Vj/nEZK$;}8(rZάD5߫.n>% ᷣvj۫qR5F kuuFE`4{`rIT1̔3^bL7h}VWhY'3n"w{X^By9o m6u[FrRt.l)ݍr@w\';Kgjw m<>2{h:PkU|rtXVfR6hb1}!;RjI7"wCXTqɗR2plWt~u8'sg-9ρ.ysGBf+粷v$X@cI) %66P Ⴒ5-w~Bdxaаԓ= ҰMȗKcN(ñ\Fb-}Cҡ_=ҹn'Nj&W޿lSmEiB\@|csv׌mA9$?N ;>XER3)dynz#LB2zv(b%yspi8" 5:LYrkp5L:2dPexꒃO .]tdNw Q tMrFyx 4w2Uy N&^@ݑtGL#՟"C EHx$#ŨpqpUZ4jŒm&UD'UD݉08BmoLi8WT 1-p\\l9s_.XY7S #]6 ,c'YL9CWSMӰHqGX=sh8,h_kFj-.B֑<s5(v uK\;溱^ZRc紨IgmôpRG\h 1Iû>^S]Urt/:r(%P-<Ղ7dDxkGr4֚!Q+r@54&ZP0]\Ry/r FSl O&¦3g;Cbt@FB`BH%!%BZvٙF]PlO?zr=Sv:BJxiިY}fcB9)N' [yY91`maH<Td*jA9ge-~] ?$Ƀpiw?JQS^99e'Lg렒:9j?*ܤ((e-U p |cɬ]IbZ~q(yqݪVYh(q,ie/8N߅E?Cr<;}ę&ۤ~m` e]%)Tc;OĖ@R0duMTWvN8Z}f^u֐#D`SO'z He'&Mӂ*Mқn ĽxS4V% ߡՒ֍X᭟UJ3.(&^TL NDJrzѵ8@Q9%,toWDҗ\ yЊ>&W8ez[Kм&4V1{"vY_xHަ:Ev@Q,Q5ύeq|n޳7zZtr*o%f +QK݆$Bxji3ԶQ^l o]z| )t f`/FYƙ‚33zR$nEDFĄa͒-Hvl*~׸~ :??hqZ S';}c+nF~/aR4c}7tuj5 BYgOJ+~=#':tWzhlx =77{mrbK˸F"Ⱥ]b~`̃@4w]3;8qh-U瞔ةգ QDݝ)#ב֖Ⱥ+t(k9}&9쨠"@q\̻DR@*Ll}66W.r}4:tKu]ϡcz &c=0LdeA|P^mDVK.w267jvQ)8gSXL}~;D&uxӞD{0~³m4m^1>k"#֒Q5ڹA Y.%'H};uWGj,!ďfSeQ51QzoH #rXsMxzڵ1=QYw7Dkh x؛S) uț#7flo/UgrxǻE r'3j~$pG r,f9 4yqH*3C{Wr~S:s} 4-OD.ȕ^Un)!d_6}CbJ ;j)0V>H"q: KZͼo$ d7 \!AZ.=e_ а(j9m0AxA Q >f}3%<`A>)GOXq/ͩ lqӉ>)n`.DF/*jY!,/g֟+va2BzP]!.B:HvW' AP]榅%~ŋf12_ 2BM@'sZ3w,h3 P]^T#A\$c>';+u括3 <<=~)\Ff3FDܲts(vb*+tt-}ñ憺'TXr󋐃' 8BMO}ٙBo)lEX&ʦbjeWM_rXw9y`4#iGRYN~O)>WJD&≑̓7z(#Iid{*GX,zD uXXjo4JxA/iFn9#OE koncq7(fqS418yī&^9o#F /V~EJ:AWl䍨hD 1s}/%Q< .2Ϟ1_zbڤ8],J49J>z4R$ m,џ+4w;C;- 9@LK){]"l[4/ƴ/91de JO|n{PƂ0-Rs<}}{;oƸeO#Xj q4'gžS^V,bx ZAzB_8+LP1EntK(Y>$$&^Y<lG><4 1#[oN!Mwtvj$Nc%^Luo|aʡvj6!}Y;ܦ{{/1+g_wE 3.OMkO9-ؙ4Q(aCGgѾǶRYbd+`]sSҞ ]J͒Y=],K3irc5s٦K)n1|M%/9pG0q&|/Fw4fjwwzvY&l⩦AI%>hSoovʤUo+N ORfh&.sVP9A Kjƺ.a`K0OG&c*O8 \#Mgwm!`uoml@!À%YEàhA$1;"=#uaW8X^3TiiY&>ud~ o<8wVid\+O9GqG4'p,' (`GaUL8Z,1VH!p$ֆ{nb@HF5ݦ]} 6g `;zL7Oi1$]aԣWDv٥QufҹutxkRdB];I,s|,&g`pǔˉM֠[I'v4Vz;p45_WXSOD`G,h.Du_;w}#{R m6uJLhl baVt.eꇙ(nb1®&3ZrQ6bubMBuM&zzdDyZ`z,`CẀvS"gپ$C!Cචb<[Q#b葞lTW}}'gf<ZwE`mgʎ2U֭i 6Q =2=܈nWSרˑ̣ c"5U4NQj9(y8WYzq4 RPD8FEr9İ}3 cESѯeܭ?6WY>N$xL_R"lUI ?#h<a$І }ZHlEVuK|TcG>{NU/ ܄@#>a l!<@PzP] }ŠwP'vI|Ps{@=_Z]s0$qq2@m`љGD,aˎ7*_{cYWb6mϭ"r M" o;kB;_iKҴED;+ ETRyK2_| U hf;nD`<GcybBj ͏>vV5:ws6?#I^oxC:a[|C#-XGqx9j24 [ma\PGS酾2~<7,{]|Co61X'Q$F4*P$8 TOlR:m𲄚9#k):|g s>D\Eoi}^l tiUFZE f] #Q- h_>܏r!f1-mfP#G:xOҥ@ф/Fhm cV](Kt$/Rp(Z r"h86+6=/\}q7qh^Wi a'뤓 ېMtMMAR^ 0ZcðOp̶5]ߺna@9[Y:XX|F8:q|-%"B9Č \? Nfj79flX99G-FFp?O13/.ꕍ|͹2\ wVӈӦ;.r~mJc :YC/YwAUN0,gOj&U,=~:>w${,A,\^+ɑh QA \舁7+صv@KI5B b MZu9LvW+hlc[}X s7_ '/^`9,@ O@X8VoG>g$:;cе3omlƆ1]2z{чca~sc'VUb- W_{"Hf`4`;blY {C2gn\#"ɳ#75'6z_rj=WO n|P[ gccW%-Cy5wjYT6O]s lYQs\z G0ZZq; R29R $f1CaA-0 jNTg~c ?k=㤑<fw_mdŅ\ܧ;`)F!5̽Kq`8uEn|ƃ7x"dhe8ٌ7-{0KV"Nl`Jn?->]&@jxu(dݤð8Z%Nb-ږE;C)VM~`vL}뤞MyIn\[-Z %n4zX-!v%aĕ6S}w:m=:N ͜0^1`=^)i!60l|1TrDNUm4= *<*N9չ^')30\U]A:EfxDprE6/8%|j{fd* YfͶ€~4 Npv[::X: #Cb9F!mk3k9a~nLQ&S,({;,R'{ i5` b:M =u{]Q(q歁+ n5axuINBbq&b-Yf2ޓuJ ^g:нy֡_f3PeE$'a2'W}jFV_L9j)P AHdޝl#A(^pXMР?rI O5ΆȬ'n\+N; c9qO2L  #liIG fXgц9_-`b֋U%9^~L+)7TKJ10Cl<I8̧C:vq KPYu 93ۆ藾4C(K4;-.ՆCg ۧ7y šɮ6"~|Z`Zi KCH4 _o0V0#ca ^ZBrtKċR?]tC([P a0Rw><ʨr4+jB¾AUd+aגn\,ӑ=$Mv~@õi0\~;fSlz"LEܝ_y)L%Ij@xurڂ5FohrMkPWBˊJvICzv <-Wzj:awZYX-M鳧fB8` V ,([IV.؄Lߐ:`zz x³k*Ze?a}'+wT/XR2?HEfTG8*l^04F'W а8ӭp_+PKm/7[%\Iz8;׉wZCO%sT^3[7_?XՆK1PJPa)2h+T$+C!_%5Ng4zpw1S&VDDE>>R7n+4Q0e'&v h$D?S\p9a923gR)"ȓo4^|=2F7nDpwa*˜2 #uȴ;#D1 K%d΅ZZ2g64RyS3[*Օ{(I(r6I$t VY飂ݞ/"Ui{nzd r߰[5f< ?0}w 7඙rN KXL4` T$K0۪8x3lpsL7s01vIYA4D!]tbiǿHh(4yUj eG8:|)mE?6hI/T}&3Yvr}iF9ӹ:iBcm_V{]i5yd`7lM8k vHXFerotW%|-EOڿN t_l#po[)¼A*]ZGﵬZS) kjr7^R`Ot"//H<^w^R|ҥ噩ySG8I`; h}s-cqSWg̞y)N7 (~Z)Jp;FsRh3yNJS^tW Ap:}FN}i Jm)vIu?zٹImcs'519ᔏ1dɌ#<޴Vyo w'I4t.RuəQ#dm=U+uɒ{8m@ rњrppAs~%J@C؊|K}oE/w62:*ΜﱤkͭN&۳؜K[k;2A)0RpLjpsOn vF/ຌ`190t)ݒ6@_pgǶ:x-5cX)eyz];OӏAG:rt &\Íj-phj(![_w?sjE{_H=I |䒍Ė6؜)텲Nf@I4R. 27G@/9+x [s8{tD@;vi,USj0XGp)'JvckTdda(oovc1)}9 k!~oV[ũTN*I+됙K@b/f'.<|1R< Zώ',x(041[W!%:maF5y KLcJk kԉhHyT2_GHxco\hah37TlR&.+QDJ7 n^Ti6 'W'q}zі,ٕf`TG L^?¤ c ##rӽ/2~} n< ۠Ȥ'3Jh.0쯴0Wĩ7L;Y`;`۔:c2(U{X,y /8n_6cÐaMg:o3Olo5>g37f{1E ζ0VsqQfT*tI)TlzڒAt㰑o&Qj›.QEhO[ZSs?"x0iIX/{7Hm253 mhw1SH;N%7=7нX Щ&Zg|5V?}#Jy;+[m21<9wC+xq*X" |tboF &W 5p0Y"pIYF=Q4f{t%y Ё" %М.F,5t~͹ ^C 0DՔ3 KQ:[1mzo)ZKUZ.`GH_W/ xyɡ+s0ifPP|XTy#>0Gl{ξ$"Mx:1%o3UZ҆$s;%lA2rvt{ŸC򛃭Ս*Jd.;_SY_FsDW\qNo^c;aA}P!nb[ш"ԹeqEYU:"d]^eX; =#ǀRcY ʉL@|n$|jik$,٢bDJܤ>6ˀ1<١Z$ٴp2?K;q#zPI'P\xTëd>txdUmFْJ.{q b%;h_nG:Z`2=o[pGj%2KԹ,[i(֖wj1J=hUz@,IX |cCT aؽfJ* o!=:D%oקHE?8M]]+ e%T,ٍ(z" A+uԶQlrQG1n?5+[V98ۢ9:I6ZtS3c!V㊐:ʐ->p3f.u-Q_ #nBYe'9B36 F̯Qc=P)#60( o[]#X2 @ǁ]$ij?BCgf$5Ihh0ukīKs$ 58g JgHa#y6ؽ7g(umA eT=uYͨvE!쀍/Lqzp,|/pȮ^n{+V̦os~vt U9Ztma <&G3Uf^?vq(' L\~fPVk~.7UI,=vj]xAse\XBnqu^ G$lV9[Xֶd02Dc]4¡q]?T/J)xDF4]ZxqOL2] =dSٱP95TyH-ݾbΰ9}hb`"[ .r؛֖ڏ>PxO}-J3  nBhQe9KLQLhSv'ElL\Jv߳"a_f ܙ.aIsOr-D-Enm,CǪ1Lka B-x( zdHz.DaCDWMmҜEbCo&dpI90W~kxc-^}'ֺdK2$ sMdYԚC O;N@TS,rV'md%iX8#sLܩEe<ِ~7iRbåɣ$m2W)W+֣MeBje+7?Vx{˩`E+FȭF? rϯA\ޮɞZ!i'&~1e@V^!8NErW 1 +\oH1_sWzk֖J-?@(QCL}$e'*$ 43r~KҠ_j_0ʥGѣJ?~)]<'KUiX|[$q珱hW r}j-BHPÃ&I0PLU}<{WԹLuQū,b-j ^cBh6^@3U[Pe,Cܬw *|^HHK[ 8΀ѯes/̀E?X BbF>D`&|oyZSOi26X9 BAۼܑs!cbyM/_p~W&gLmE&8T//]346ŘmT1N!MH=[8|, p"33ưE~!9NN$:/ m0YfJ'(M*^Jm50gڄXg(i¾] Hǥ9lUΡKtg cm막Mx 枸5p~K$ưOeu'wr;fhXܸof[BkefBBFz/Y=Crh?kxkp8<_peA"FdL9>n8n2tY[y-~h6TDV˵tjRHo,m#/LV`IZԌnE*iОwQ#!%iyveu R k8:A?f#8+2㴁&˛/i-|֯Rw߸-tK^`IP+m+|4SxYFfD.eLo!LqAsJI๺AA_=fFA>B~0j3mb^wOi_zDAh=z9'ōO-4 _ }27j )y6IB2Wr[:# MxU47 'Py\.W6?!v;ĨLIۥfY|P%W4_D`B6cdՃYn|%]0u"P:ؐ`ͯWs\pv+I.B >G;ս5Zۉ=ƣn]^iPKZ] ZMc (g.t^c6sMwzB(W(Ws߿.kݛi8ȃ7"/KcV̜ %cM:jcK(BE>X⦚{Կ䅟o&֊;eOY4K0m  c yfJG fVM(X+ճkjIԸ{Tn!df-wA$k"'52[}bDnۀSv\vvCQ7egM6Y*q*RG]Q\XPX;ǖ%'h<Ӓ[ v!l5 >t<ժ')a>]=n@f>;gon~Sĝ8᫃%ľ3QVze4Z}7=Wn} ĹA%b'\8oz kcH *;iw&w$sîi!x.nv W с4J=9CItkpVërevS]†N*#E$w:ZtǻmE#Z97( C+`v1ǭRuUenN5.:]q|zhzXb?Bt#%gZHKj1FgT䎓%Ά~ĉ|iJjZJ, ηlo?D&+̣XN';x y'>|cھVM='#tD P C1m9 ؇)wxvruY9umbsX)_ӏ?x2Pk*1 1z;bݼ )j4ʝ T7_9VZٮks啙xCn׈J[rތ6J@!7-(s7!aо()̎p0jҬ#:=2>M 9reSvc γY T&^v󭝄h fcF# C!6#x|%VN]ή략XNzwޤ t)"@vBVvw˒dmҵkE'7_8mدZe/nH26ը9Z%G>1H WE!$J$!vmgs/!oo׷ x]-C?S!6%yV9<[nfxKR *@fFaeV:ޙr[hV*ۓcGM _ߚ&*#=s) MApҿ6i:8׼@BM[?rvx"eK?r$ s(ҧ$ 7ɱ&\6n~O WM`2oMcؔGa*[UIXk o-6D Kru:Bf3+ph6vm8aCy$s v:2VkGZKI*p(bKT֗3m9*y<ݼ!j]NYLKT!#`1u_hfg!Wؾ بg,2|$t@:,FQV Y 'ljؖӨ SBޕV{B}0'mB k?|ܼm个ÑMYx8U|q5k !ٷIw"!ҕyҩȿ܇Ďue0cU:R >5+g kBa0x,?:P񘔤N|xT3yӁW̩,RvfC[H 9|*zLzkl42G% EՕ|’Yab}%x"8CĪq:N=3r<\ BM3JP;VI  j&`ɫ?j-ĂRD mj'BYpt"$y2P8)/U̩3ვkIk\[Sl ):=dqJLWf2Gmd1Wk.-΢_ $zEYR6Kg.u,' ^}+F] [ЃǠaNʛcq1Wb@)0zfz_^Rid]U xd# ŤR.DM,exdR>7bG}PqY} d8A\o_9d~^\ I[h\0!M C=%FK3Ef;%]\MI֧_n7=:QEkAu86#HjaAg禍8O>*roOD UOY%mK$Nv/xǻ tm|@4:(z:Ð`_^f(9P6?A7Icu8iVQv]H3H1t16(؈`7.L3߯Ă)ki/.!mS,\!X6}?")gAL+L w7Y#w =Dܠp8Xwn-UYBu7O1ځ:۵Cz=Pꡋ-ok%"5VWאXu1ɹ\6l29zmxSK&t8m8mC. PLq2$M!R ^>ۗE:_Cl3*tp&0'2í{?4"8Tu\y ]otX`/KH].˨= U2Vv'~s6PAm jREX Z3Ra(B3誮h^aMS!# BxMsDRmӼOCdd;sMBF%)E AGN٩UffڅZ0ȘBCast8b<$Unҿͣ>-ZteELH.[bKVә՘aZHu~@KR?F0u_w^/w.H.\W$lxfTnm~9ge8zZYNy*XI6 \U,<\ΤQmIE |qr!Ca(MwAPj}(q7{Ē&[Z7q0'5ۆ!Ƣ KJQxB U$_r͚Q>j@%5 V"ar2WMp/a.iGMߪ+p ݿj> ͵~p( z1q`dHUXE j,wt!IV")'Rl ]&phA*T  d4>Ϻ!,!c=m wub$~ 2!YMȫ\>gf22f%k)Qš*EN}cێo_Zi^朳,[GKfa6K\W8Y0bfԒ(O.&"u.SMgE 4~DR +zl]<"}ql` F c2J qq:KKh}nŨz[-yfpCW?(9ʳi2tMxl{=S(?105?aMMQCZҞVߒѓr袩r/oJg4R@ Et!< 4.P dɝ0)O@ 'J_n*ih8CBiJ8"whhZ@I/پSW ۍE*]vPSj7H |aߟ Zxkˠ(] PR,!(8pJgѶ^BeLCy"+m_w\+tWI\?%oj +'p@1KU69P~0WnueUEq\3(ێ G!e_B4(,)uiǴ(ViֲG!%yaQyʦ'ԇTUx䞥ǯlq0 Em@sFr-} "O1}CS5 g6+>`;ּب$iBݦ.sߣ#m/0ha>Vq@` خ,>\H"miB~dVL(߉CVRE0&<|˃cHUQCđӗWqtK_ >6ˑ4>7 կ[s+xU@vW r>nS&7T)i`/'v |!ˈj^Ssf AъInRo8=Gyaʖbx K4"*z"Q1~@=( .q\w2i)Hd|\e㔨"צ-xJ"ivOV0* [Et;#eT}Ξ@3Үھ C2|RXl`3۰HD9? I_ez*;aƒ G&r#P2{Bua}by ؅J<239 BHAIo4 72x:)o<IJ̜cr6 (+̤$fdD4>(yHQ= h[Tueˤ0{^Y#Ng0Yp"6 -10TjnyهdW],އ%« XVK'N>%i0h*QG owGtjbGa-~|U^2JxmZa])S씆x" jBi۰ui3:+.t[T5Vj+}l TLxNobwKF;7-NȦr 1Absj T]E{@>je0KEOY݊j@HoW {SهZB^ TZi$۱C[f*ct̽Z{ 6 TgO|=N@0%EO=22Ň*)Q(i΍° JGq@V;qT&ǨH]"~N3?[׶2E(G~B𦼃u 'HeL~H] Z&?!p9l=Rv1=a:R fx$.P@&/4kIB#xvw7LBX xvkQ% ]H/U[7O9E44WL VBޞs~'_- YtdO,@Z5]q\Z6EwgF`Sʵ6)$`+w&z=vQj>…_i=eoflxt;Oxht]|}f{* I-Fj2v:'E1,yw=IeRR!JWl#Ԕ}7ژw;. {n# |IHpu%7ܪ4ɭ86FW`"/w>V q2ak+$IՄy19_$]љ?ץ;4qdp R(dbt<sQcA,=kh0DN(m *eߜLE֓RBDXЍyγZe@ce]:l|4fHYleI7]j[1`͸O?7RnA,r_a5Zt"hFE68lL*Rm^ 6¼ I ^Vd{ b^QxI3+Tq"X k u%uI^ @Zd|mYU>+-ZƮOlmprpqI;IVJ;b[@TeiBƎkPM" 'We.2V1Mj5e?CKv;)lR\*{dԌ]Q](JWHsӲ lL3}1uҳ8kAYKjK.ߴβǮ#ge~go 7YRe^GzhC?/< Y!7rR0m'#,LkHN_rȃbs6To)nWjY2#\ܶnB[N^Ks[C*HǹiEfH4(H# 򇰁³~glJxۿfY}XT+gF4 r$jNW:;n9ÏG n&6.yd&X m]r{$YL|Tnyd+P&$6Ѭ{ ͻ0$-sGB@tC P7-1s`,fg٧ڙ)¢Ӑ{* j/('(%+ aۻ9 Tn*5VE%|f?wUl=P͔KݾhՏU}<5 C !vUFM"Xĸ&kepC'3X!ZC.7{~ N.>#$dA1wY".vx>ծy>">Q֘MzYx2{N{:fX5QUôG5Y]/ /,2šx#nvRF^3Ȕ=N6;(YHM5%*V2s4e\By_gt{>!Fn =m } 6UJϿ1z7_PŻkCjɈY9t6"dt.G$%>~7~fQ צ% w. :ui팓=Je*\CdXh"H%vUXuS1~ I9)Cjӌ>vq4*G 8"fvXT:0OEZV[5%-yC#W@3l ]/dP ׃{WVޜqW!O7G3E> yFa!Um}V4/vVMt=wv"S_c`&@zԈ(c. pUgi/]ڱ6.ڎ=G9,BD+(x3L"` ISDZ#m5 TT87yw12#"1pyuƧ "Yỹ? ,\yЪMF3ќZ来Q4J՝H${ l1OH^/OxqS7/BCe3m,"솃"U- M>r6ru.c+jD$kK\Dzs6ONrhW+{{hxlN;*1ϴZ!Oil丸?-a@<(ۖX OS"Zc"QGCKS6c"t~nksNxBLY% \u 2kf/0bCh2v0!ZԽSD)sP%%. ~ pyl5_)Ak#h37-' ܣ-}X<7TsR9aڏbV'E_UV][)2%w,LL2}C4H~Ӈp ]| nWT5~T[k)f[d1MBQv:c|wP9m9eN)XkYoE%ţ㷳8y] *BZܺp ү/-mk ZQAZcϦ'uPO2e\DfW FTpۓe];ϴkST[,Ώ*[a@~B/wlr{/OX|>k0G5:ϡK ,{NJJsTR.&qѠ󲛆G}(m 6=-X|SP(0::=m Njr)kdl=% S= {[5$ȂA,V!yTp#<HѰ(8x^A;]EV ea5N4ɇLUXIܽ@3I5f9Et'|ǁUС5wP^l&~DYH3\5њPA Yzs$2 a̖u %P4z0Y;n< nd5ٛΛxu]1t(8xT G(^*2g7tp ⧟Au>uy֤[kJ^տ{.R 5.*WYrG!E5Lrj(+䝬 wP,0`=fAz,xaP=tFQ |0A6^D/1;ʪkW?IcA kqyV#߆ل ׎g|q|r1e"= xmlǢmf&%x1 !TDF3B7sh;pNoݨ0`Wl^:&.#F*9l-[,DXv??lA qXt<b636<[{M/Zѧ#'rwG &88<|<۩yT ^5?e ]"%Ѭ[6~ЇxiuNqfտ~\=?p|i8pSڊ rFTFR:ow=gQtReGX  'ɜ\*l/2,¬GXSڽ|W:6WEvU1iʰ[cVRPDNV/ 畐y 6h=!C9y}ƃ;(6%A^y@tɳRL#Ş`2td-!A*"PIAHWmd U*HuͷѝXo.P5 qnvOȚARe/Cb?xey12N7kHAOUQ O\ɎF H,ksN1SWʢTGJW6S[0tP`65 ZlU!?tfAmTr$g"ĀjrBC],س%{a\i& 8D`Eގ_]vZ:!I֚{3zJXTpMG$+r~gN:1棫dzr.T$|'ZMH6٥c:4ړ^MI%fC(f /Y9`yFy\L]A^$`0%)RFmGr8Hjp]j/u& ZPj{8&/A+6_Mr-~KvjiΙB;^SI&n`$4.;)iGTJ#g k'}%9RN n5+;+⇒8BiA'gSTS6L٤2TQHa->yU7z@DFx0=H-r<2QsJ?ɛIM0fSQ_A-#C[P\R~8)f9]vas //m>Ko ^.õIy㼎Hy&M+%Yx(,43oU꿏(I Aw8K>{!pbiЩ tmMv%& 1ﮐWU[3%<;2;*KWV ۔ic(g׃=1a:~nP΋ GU2lJ![Ͷj*:L-@l,MQz2j;hM=͵5x !P=?dB# 0,hpC l R&hlrOUoк)Xx:|I@ 't62K ]UjZNYi& ?G,ALę3% ѥ"_OzC؜#nM#LjUCeЏ Fs"$xH5Q7; 1?Yv»)?cL@Q-g*Y 'vyӦ7vԩd[F#$u:#莋mJ w-1j#Z"EU .8/bʮEbT(bdwL,Z"rbF!ַI'iBU߱hhn5n%L("t>k}yK$S9&"ss`&F*w3{"hbvp#eلdt d7v4n:`KܚvZ̧h/ɿGN0U`Ԗüpɵ9 ʦn, 'd"FJy /Nv'P(1˶B t؎ۗ! &{E6nxȑdO^>a/W/CH̅3_`mv1FuU2.~@Z3J H6F"X.eڒD>\r%S&@oF`0\m +ڠ6՝Z-LV ap$*]u6&YM_JjQyM`7K#w b&簰,Hq~ `&C,2}sTKUE Kڝ6Z>pJ*`})&duTb)Ob=:fWP@D{N9ht4 vjFFZǒq„!{i,"eqHj>bZf5u!]:-~:d ES-ʝ, =M+k9?OwDŽ<&H1f0 ,R&C'ݶ77{k;oȍ\jqέ)3\'k+4ӏΤ&J`c` B21>H !Hk;b5 sDeG}h\QAD-@7Sm㡕g$|/i|<ɪ&-$f玎"eiM!q )'cz7#+7E#hoʦફ8W\{,f a̢Ƥxރs0uni5m$_unsrU <*ss Oߵ;\KXx i8x?GFGwc|c ޗlsW(צ~f$ND4*Vk ۄS'6S8[ڢ%%jʣÇ<<A|l< Y 5rxB3%)xzpo!MHFMmlsN=n;aT1p)?-}b%p(ŕnQ&&VzB\si(PCC4Kd^$xK}Z١k5N?Z 楱J^4X+4PKnЊk1A?!zAHG ӊF p[=K]!)?-ﺪM2h&ˢF=LpF 2q?=kz8X#}O_|gxj}! \Uߩmv%?{QC6ٓ'VR@󼏂| *dϥ=-'Ff,b z W 5n!@T;Z%|rZӘgt/N@{ͻHV"[kʺXeЙ9`NfU;d pM%,:"}t4dnE݁fB 4rs /s'n%kGB9#.Т@ K_TjzZ,;^Ϟ\# e]:m~2b<$aw=ޞp qGCLWݚz@Wf c٪`\Ճ|D֑`ɻL,r~Q0 ?CdG$x^EC57Jv(Dk)2!(қNI/|XX|vfXYS@gj-Kn=p3g `"~>xD2k ru7~!ML7 4k0C$HeZ.pJ r>#r,{+U`*g褎.VI ,0k&6~9U@&$ %F 2>8qeoNcy0H0x"i_o)>bO3;$m nU\}+)i0%6Sى^ +Uuxҽ|#3֠ٞT& -bt5ą=Gy c N%Ѵ GyNMW):6.&>s Chu'G79sY3!r!U"-@qJB \f$ ׾ TcOV!6]g;He }:X*ֻk09K4+szuxc mF77-l=[Ve_Γ.TK$R Q[hxa듨l;&Y+NI>{YbA) Sؕ PA6vK=k|Ղr`ƈm?- ~"0 $K==;KE&OZ}rH?}m EF}n.; g#-5x$8=/7 0-M嵻zyid16acBz]]х.(YvՇ $<3?xxdhvdg9{k]&t ʛH2Q[9V'NB6<;ARfg)mF\g_nR ꊠuuVqKâtN z!͹)ă ۖ1.Ũ)m"V0۳m!&ՐC$ol^!ڨO+%lvm0 ąb_LY?~E԰,\1 V@b&mթmkYC+0Gn+Ljqaɏ X#;OZ,P }qG)Ez]s-,StG+Y{Ypk_UUm{0kOAg 攍4@ 8LMPg#/vn& Si#;Ժ?W>P59!u?JkK,utl7AQ_r '=;{p/"3 {=`bh_T &18_ۉjKr,atYiOn- XsT2|UlR}TULCyo e?"T ֩|rM4B.բÛCLB{Px\̷-Fn9Fm3X!%%nsɒp>x}% ]D.>mYY܇H`z>%'X憳vx hA1-߃^r牜8q !ž@aոOI o*w$)G_^osA]+ẠoiWn;e5ʛ~1<{B༓X4*-oU a` q6,"fP :|htQ5Rfz/FiyZЂ2͎ Owe f3Isl*־0>y_@AS5"Fߚ[: W*|SyNX#w"ri)h5@ fK.pց迤p֪?_0ƌ=<|{S?{L9AkΤdtJ9Wa ̥@ՖXv둝I?ZS=^!ֶ>.0OiKGaønKm⣷ "{g7 2~"GlsקtH̨cJg ɍRGYrX!NO*( @E`K N-ls+k>RA .#v2Psb/֏ hIqE̛uQd1|0MܝH H{g"+8b6HOdzL#tLm# D0(N~I17Mg*t!T` "-G /p(_ܩ rg`*S3N'TMzgDBT[.`qA&͋۠;©ۜ#[JtMQ.H弛aHFmΞ7ī*4iDtKBdaDʋMRéI>'ʌ-Kt J I0Ȝqs#t*й*H utOd7d42XO"9>y `{KQIeaxZb26yLEi|9R35\HdDG :qKode|Pr7j/|շ*-D LOz *c͈l+QlDTo+뉉lGw$vjp(d( IdAde't$,lY@ oS<9|U0j^o֋! y5O'.>yfr͕0ZT̄. c~@n_@G0BoW ymo{WN>ǥZh%m*Zsu4[*BWj' c 0[?nӶhiӱg}wF05ÒvߜY;Gi5H-REWM1ɣ+1.6T,oC xV: J2J'ٽQv]$_;ZܥkZ.vQxP;?՘_<$ωHW)_;iڬI]ydt@De!TT"+66=$E ypZo`)R>N-a T)˿"^BW8i[9gl E!Tb= ZF5<{DG^a]IخB#zOt>9)(Dp18H+X9 ^ޔ S &dkϗ{MY{UEy.RYֱykoB?Gş_٧fG뢞t ,t`kUJg *rw9/Y\6ځQҒb~o Q] P`՞ X0IZMLd8^̩rEewM?Jè8iȤO Ѡ a%DOFVCz:+ 9{6PZ c.PRH!e5G7r'eEYA4m#)-hᩲ:+e>^[O[q*_^\r` _X|>N w"Y1&?5m܀zs=R={87om)&n 5)ǥq}rmUΝTQ68| f޾k8Hlսh~ *[ߎ$(Bϻz VWyjR*NGMٴC㽪)]9wT Y5.מtY#xTM1㢾%@a*:oËnWq| 0s? g.1函S%-{[3 и- x< pljrj}kaC uMC(5P4>Snv,wK؄(:){'AhMGܓ_Չg*D'Ӗbz֫T)ČjH㧁੆} wNDhEjnUF$ > U?ŲMۍqO/v\) nH`u쮗AQoL}dF=i8.h^O|:dMV)]%WW]s!G'ffZ+q_]90"Jq6^_)JU.#RiyCpYx^Ϣ(Vc7s]g5V1`Q/ Uz+$R~ &TGɚ *#~YnNv cZzBL"[}4'&<5I*vzdqKuG ТhbM^KNrIdys}mH\e8s\hϚڷyM0c͍SY1aK#!?7)w+`WKMŗZyG-( C3þk }ls9Bᑉ%3x6T ô6"D(k }f> dFN@jVEJK;&8u.LB-xW͛P ;}A-ϛ/wyKFgJIEÖ7׾?籖G$'^C΢4uZM!M>s`'KY22W$f3'[ǔ;kj}rݽ-/p)')|~ԣ;[ASLo2"? +-k 끦[{~0nZY42I!#ohڮ07^-GYLq^'(5vXp5KB 1h[x0FLAnTdLX-zk+L;=v1mѨxRsh=ڂWϑ g" I'aЈF^ 4$jy+mOoYd[ cG-/1M{NDQfC5|O` GeR:`DuX4pš! 縴O.^}BJYgfqr: H Coam] OsrslFAYv<ϫїFb&dDbvm TjVˁ.O8bHӤUW^25/X {^ 2*'*SVqDMiv5+YW9ȂR:#YT֕ܳ/)qR%f z:.KHb-"(zw1ܑ6n犂K/Ls61\ؼCGe:?.Sm>=sL.y\dJh+wW꿰b`Cz(k'ƤˡgY[NDi/2)t.rHoW=bZ 홉/-A-UD)N>; ʐx^kg߼^W>|dAKRM }Ek5A~KoLGܙCtB: ÆːF[x K Ms ltWӱ;P,r wxP 3z0-Ӈb۱XUc6-< ;jX¿R?ա\0[ q7[[Xort`PR2+DJX2f6݂m=ɚ?P|{!$ǕoWf/iK fߕ$xcnm :Y^;Lp&Vr8{Ho{Fу__LpD(ȱ\X츭^DlL=iJ@PYt%!6mwsn]0g{ ub]Sc7je3Y];YJ_'9{%1>wQA,UJԚKJEF3Ɂ8u.q7$/ š$`crQX0iU]a[ ؐ 4)FE0tWOj|.. e p=: ]c ] }(o@]OW)Ù5w k˗5[L#V*ֈiG,l`1Fw%P]Ҋ 9 J;0&Rd9w -a NeEC5a#,LÄ/S!_dsk|v|e6TYW;*u|ҢvesV򏯒mMt`тp֘X~Y*]"8%;D08:ا:J3b>:OVKcm| n`p 5Wd\?J+KUunRv**N7;R6bv~7vT#9J""b:!2OVK%dU"$}k?^C:}"9PzVuؐ7 eeL5kp`lӆa6K~G*?H+X S;E(xESY[F%_#D-Mo[z [jXE:V#ᓶ ;5ZFAVp)Si ܦ7m}%4#a=W߲B9ͯNyZPya*< Ɂݭ+8y>AzO6'*Qc$QSOJ796:?SmJVG;drw= )iԉtיQh{}?+>^= DlK#=9 MkP63c7[}YHuch/%_GͰj |s8.TD7(_Q|hO:55{&t~v- .V2v?:#L3`3_tsKq`ͨ8><5ǥ \a{(J9`J[c|B%u3? 3"T 5 K Y&|X\/r"-/b4efsxd, ;PK"ٺūnۘSƵ>B{Ne^t%%i^~v@hS׆' @}=_I 0D,'1=X$Л/q/`x!cxnpuIhd *7n 8UO+lwMح#8𴙒YV}]Q|5#fjB %^O]7Czۃʯ"wɾ'"f/=b2Q:$XԾGGZXec`y_؋!(UˣN8Onsp;VVIPk"}%?ԕqQӎ"y[ӝw*h)ƍީ_HIȢy3RJ u™X'Z}?˟[\s s]hT+L*J[aN1K's$tLgBe\tM(B IY©3̦{Đl?9R ^B&)}ə?w%V!bJi"R)ct ʇ[GBG.,ΣC輅(g>+qQh)&bH,/c\'}| AV%Χ#*؛-x Ŷ]H֐P$FBDe;qJ-yہeu9?gre7@BOEO> :*07"5=HB7m」X"$w$#fD؍-dqGm\BMX.ɨj."й,K8XԕKPe\8bcf؃3o։^)uxzv=VZU+]yau]|;2ԫRMRRNTcuz /(#omIJh5<=}$) S`)hԧ)raNW\X^7zaI$',}GRҼnPLf9⠩ (vRh05/+1j2J6˭2bVnWoU5$\j6RNh*ݨdeGzrJiQiddS$&FwmF%jKۈܸQ%1v,Qx^pS%ч.o!0Ϫ4֌?zTD+PLZy2ib #Y-?3PaV!Z}^d`:t%z;?K"Щ$:^a0$n4Ex VoRuܢB5AdT!s |\#fVxKƛqFθ֐t.ʵ*y󕬝3E'*ck / V oRh eĈv! _̭YbQa3P0z j}&5F}%genK}Gsil~wrQϞ}?/l+uU9ye+ɃZ#X`RA+K<X9EKn5e?)8a@w>[jp0nm_j{?wt{zob<_-:ۗpqXCW"xL3MJF3,K5w Ǚ.D~VsFyAK=vsHu|5?>8^3ڛGϜo.pg(?T2I$rjpm˗}9L,zg 餛r@0o! {p5H{rf%[ANxA3 ڍ'Ǎ pD82oC+7:"NC"Ǝ^Q]s^QWd?*:i`NՖ= C5 Dnl2eLJ]jO_x[D#R~bhF $爆gɬi3Xwzk>[J A*Z%_P~칔kn kп ͠{$P;n <~>HK#d4AMRJB`LBPה/8݁z洵 qNE__L*^} F'LԄyڇbECJ<$U>nm`~Xŕ@Aw@(*@Mьuvos5Ju~ (?etcSJl*`aX - uĕH_~-eS R(Gihn8zη6Koݭj$|/5s#c6m0 Fh؅#&5'>`Dwb5Wbt7YI0Tݗ)}ncX&wZ{DJx[|[X cлk2 uzҰnQ DlPݭJw%hdУL'z߉]Y#|F= }fR?!YZĘ\T9*)qJbdoaԤq@%w? 8b3zx;e +GAHK*L<v3^+}Sbb1q7DAc2I^ 3[lXo6Y(~`f\Rɭ-t}\ũ-߳eÞ{l ۮ@=JMtÔD9f^cc=ڵZ> %c?v>tݟ [Ww/nkA''(ɯh~X&.k7MNGAEkChnH `XNۆHP$V؛Z/]w#_uZtsvp:[LkLL/݉g]Er Zz<[t݁m#Ѹ lQ6xIj 3G*;Sf-* UɆQhmt/"ޛY$g#(0~tI8'<ڏGS'fx 6#$nb%Vaю g>=N/RI^]1%el@oSf*x:}m!3/ s 8u=W 6 (w*dcڣXDRn^Rji+U^jhN.2LU!XSU 7Vθjʛ֙^Tl#(kzv$yW !I$gƮSɈŌgE,i-I]#S+LQ9m-hZ.fBq9%_RpYzT-,*xK#b~5H䙶Ш~eߧDS<NW(ٟ-L2)#Zǵv8ՒXqz#t#D'A@Db㚀^ "0ppT$¡ҫo<@yյĚ]a{ekk>A\󇘕TN8 J2#x\t8 H;\#JgqNlZ/3":ySq*.(G/;M!2% o9$/;ӜDA&@J3s,JXNJ>҆괹1^iչP']@ܔ|@(#9u; ` Sxe{lpL@XeJt~F"uK3i$#vB{'Ekf]AveHNzGS/Ua:{dQR'ǻDx=?a1{~tfǢ%i8LY 3{K G9O < >z;r!#i5! mT`ZJ`.+͝ΰx|?t(ej#esDjR>RWu $ q,}X2B{4 va`5do(h ;T{ zbDe „g'}?e*'aw^8W' ǻ7( /¬K{YP|5#v ィ^y07¢\RpLjKOZxZӌ>|iI-қW^r羿NO}@O&aU54!/lFzx@&GY<^SmM!ȵ֑rKv09\}(3jUaKiNU ^1@q5Sx=qs Л\tҭD2dyj7:Q&mT'KJuԑT.İ4nPF0ˡnA_Yŭ'M3T䕼 8I- rvV!/8[>!wSП* HKY6}h6Hm*&U]z>BG #20s4E7!W)1 wx`wX 2&۩2erȰ_dƩ̺8BZd옓#b{kX}>>W`trQDǵ6 t]g-w.J$rBʬvnIq ʘvA_'.ن,t̹GgvmL&q*乜f*}V |pBVENM߶S1_PncoPOyj&6PRr `N;f?/VcxE*։hɄ 4ifL̽^ȴ)9 \He 8UG/PaѡZb:g2}Qx0I2|yBxQ~(ˬTّbFҥ-v+bRp-#`). 7 lc^Ͽ,M/u ߩu0u$1EnYSusosEoWM\L1T3UZKz;Bնl\Op}MM(of#~6s#LjAIџu9{: Ldmmzńƀ,Dh1vۑwq]3{Y[9if9*B.~;Eap؏i7'9 ,lKIaJVoZ=Z32;xף_ES' $6-mۻI T6VV ȒʺG]xS[)m ,q-Rh;B:_VQ)e> ѳo5c}ƿ^(%%m<⛬Fe^\\[W'yK FwZ+]Q O[\n'Sʼnav\3CXE)'7 !IC׆Dm֍&A,FΒx`eONL.:9e;nBk`rxdK"'WЇ.q 0^"]dTgKxwAb-EgDŽx8}D7*%{y  xڌMm*Ͷ/@S) 2/"=LKT \WeJ}b ״ %{#V2g63/B[5"Rb*Z S?#<]2p"D`X HƗ&t,V`O(XF ީy^=ɠIJ/7t [С럈!}"*N\+JgJURa̓%J"yi&HcUa*1Q+p'øyAw44%xٕT#j~Re'gpKH Z &-A56S cWN49]0'U"ˢ%:#?#0zC%i:]_K8NR/#Fl5 IEϝu =H h_zڨJ\R3CU/[&8xܧi'mXmDxuF7^HR.芍Hcь5ΘuS60 &E&̈́ߌAH`Q(\Zx?JR+ԠB_|]$"G9$ \]:R+'0̟:WUiM63if]rV,~hle@H@?uišllL סD}'xeTS@ ŷnIKUR١۾ЦQvZ&S+w3 7; 1SW0OMZ&GKޚ>xTY=>R%|{` CFߨ+NxE .ٺA:C I"l@+w\UEޝې ߷1䘭|@ 8rgx vE^]M6c"*5FxAU⻼"ڱ. LgEpxlm iAsj )_[hzºEQ_}E=k>eqhjo"\J@:\puW1Q`-d,_u_J+^=:>{Xˁ/EY>%e/vZ ;Z?Q#␓Z/и!l99ZW/Ԗ~~Xb70؃, 23 HQÛ{n5 }v)5!Fڭ\ܙst1WYNOM +_Dk,HxT25=,Ba]&lRLڥDu]ʥ*Fj/$"Y=˔ j~"PmO.']K|t:ܪ<,'ō듵Fi ZvuԲn#O{Q嘴SFv?NR/&rn5bI"xcVeyy6/aaxv֨hFsdgաPf#50/A7*w79?īaMI1)Ѵݸv+ؒM1.Ԓ-ФV,AD1?awEмg$`#U}U+\EI(bل1 RIMH+%ƀ/,jhۼK2Qfb͖a\ߢX Ջ2o9T,GȲ9v|2x$GZA"`r`p:hIkޭ 2 xk䀟|"ڤSHaoeBظh(lDTokuC V<9NTW,/+L,`',cVۜn,KEN 2C+Gp^OU䨫Z,rlℚo8i=5m 'o1.CULtaɉIJ5v!^{(.2K أ] CIt#$+yeA\CW ?ܚJ>SހYZ`mJ~ >ɄZ9 N7 G.2^ z3uqזu^~so憞,!+žlk |Y oa7$]!kg@4 $y^p{*R6O]H $Ot' 9LϞTk3j'C8ml"\^ZZX[SNh?j 1Ӛs|޵GoRh'|=9+аz% ծcuK51k80;N:1VR6g\.b{gS al2@3zUUsU,3uHYgNJ폴i;F`rV?Q|y:ۓj TrL4?\t?6F !BֆFYA<0QH^DB^y7~0OSֺ'C` Nd n{,T^gij0%AM)P;-#&&@Dh  2JM ,pڹpC`xMl,Z g@ĩ^&6Z蛝:+>0L 26-N4Vp(Ȑu:  5f_v#' ' }]6T Gx8 gp;JBHfRFl'AUDI鏇)+Ɲi4syBOS  ப>%khK͹686:⡿AwB>k޶{T VsxM7$6K_ˑF<ވ`ӑҀh(.L 4MtV ixC3,{O]!EƦ˱P ]Y^t݀y#l!lrpxAjnr&Z8ۂ"u#Nqu z8}[a^PV6g1ݶD 2Q_+͢SezNșжhr>$VցnxF̈ZuN8 UB ޅ4,tސcՎrH( 65gJ咖?XPQ|B%'CmX@ ma =p[~E  7m(xeub{ڷe!&H7Zos.Ƽ*P]U'Ochё; _*)]q}yzK1+8f#YWȅh֔[3r9 O:> LC,s[J\xw>C'ofH_KLNFo39`l3_ [,hY]/Qʃ[$!ჷuɘkT4jry}(:@r-=s"Mȕw bME1fo%v&{HO,г|$ܛ MWo+,¶W}1Y(ڡA)<5#婆`5 !6 g#gU^X7-ofwΝ4B٭^3.ZQ[L- 9c Bk ZV̡e;Xz!>kM88a=ȸO>i(PDc Ayi3IDS}T9=U64׸7`HPB+c+'ӻQżzPSJKBh:ˮNT5~\WdyܵǝR)F,d_}Nm.x [=` pM?5Vg1h~QiC׀Է&dԱ"ܬU:-S57*: Cd?s=kj$bw yK Ѧd߻]c6-jVx;<-$lSU,:+R|<&=X!C*o*V»Fn^Z-Bo sphJy=YfA&%mzF>U[_XYlЎ1.#7amQǭmA\ {ms5T/wPx+ώw1@ w{ЭьB&lw!6%Pc+O`VijtL=B9X<=fsz`:l>h#ݗ~[gdF&1/ C8+A-`VsRʂ @Jpɘ~ubz.~GMT|]dRX4G"e U*vgt%R)d!闧Kq$V+R&)ϔ SdY`a#嶢ʙ2>IbsaNX)S5B\[-p:i h~f)\bl!ǸYPa-v7gC,]|")m(1Ƈz Ԧ%4,hELH6ƓI1ydbK |WHKCC.AT.U=#cM#k|S]ߗ_QÚwi,^˚-[q]PnFqOOr@YK$S_|Eݲkm/WHɟk`\֕,Px{@u O镎$Ԗ5ux_|g@/Q_C&wsR8gܝȖue:WdʠxmZ%uPK}p4_TSR8x|hY3"[;$WV wl$VPjIM,K&>B7;ewO*~crg@v-pp|k5^rZ8 \J2;G`Or˟FNM@c Bythϯب ͐@/NXG*G2:6)G^`  }57g[UnUqiލp=堯|P"z2?]lˤ.;r&v^wx-T y hr܅lWJ79,U RнSv}qyn !_M|ؘ ]^gaSHX{*`yx~_yjU3C4W1%bZ(p;Mi*L'f5EYj=@8zRh*RS P8HWD|p.8SKR#k0) <+P{k)GKExXb{|!blL>uӧJa_Y?cH*[ ,Ucmp8-\ͦ\F'+{ɇC8(IBæZkT\"(X`mi]SuZy('?Dĺ` Zq?T?(j{Q|ƹ^K9I+!;DhB\YIWgr s\:L)#<ѥI?##K}x~Ys  z-1Z7GN_xY2lY" jTRJϱRfV-Q-nđS|ZYɇC..æwW5cgi1H&>7uCPYwAEt+3I'bDk6v VhtӖ Ek,xZ^Y w+A$ŊZ `E9qpx7\PLͼ؜QBfw0-ZC_+/昚^sVmM?K"eO T@ 33>KL#Tt % Qol)^N#r\ΑwzD&kA=];½UjAj >kс),oo9s(t4Ujs3:kJ+ۆonqY=%\00?+@}ڰ#CCuXMZdPh͠ 5 :̨Te%a:7.^qۉ~g%JlNx  8k4MD`/C!G\76[cM= V+>ũa&_=b߱N`JM&=)ˉ":X:gTiIrwT&+ Ra9tgQ A}Y:}[r1oHCr##>\3r 룇h){=]ğc!i pz'`nV7ڛ9 `!,t[r=eƖpb_RQތXP)n_*8M`0^_Ul+߲}<dzO?s2_Zm}*FCqDϪ;W k}ޗb<]VNIsLԸ]CXKdk2)WT#dGזc?v8Rhc׏}6ZT/\[qT/2l!sf hIr5J7''头m5;fpT t=~lbByiugG8e%6[35qkXs1}φ}S==>t!G?N|] I´i^ᶗRI]:GR8L4iZ NS-gcL%ZEyWC_yekFB&Q; qpAljaE6$ull8c bgfeyIP{us & ;~cRfɃ޹7П/|I h}U6T)cd. 6}&]G  znWąz46(ؓ[38~O6AWʅɚ)k98!uKQ{x )7vI"A!ZG<\N̈́]:)gj1.{O2!{Wqܪp`ڻ%l|naॶ8iE*wM@GD6sBw>k{u ~}A\Y(ZNx)>V{ɠ, Zx^M-^]!d?#YOPce?IJxѠޘ 6A"y|-Poz<!%ރa?0~A/'R7I¢V`G gRސ,hr2#nؙ"IUFQ̩`VzBێv|ԟG|\VfzY$Ru" zHDcP5)5Ϙ$#ˏ=V@ +JmSmpNCR`e?Apo}""b8ӿ7qWĩE.]s8ʄ+פ@>l^6)tU#؟-'vtWC?AeTQP(;N)e @#6(2=/*JH)D ?DOh\D40(yȪN9|̔s7[tk({Ͷݿˬ!R!a}d,߃F< a)ʘ`#)tHcO|0wɋ_!%2#e-r ˺`~'F Y$xCJ:9>2!;zcf׭)%I΁uл71yFT''W弙̑KFIqN$Ӕl`Oj´8c qNT)GFϧnTFfAw}2=bIPնC؞$M:60vbMԲs"qA(]E.&cFTxvc[6itr~4c\N>2R+GBrv$IH!KÄs^}Җ7mVQH.p_Erħ"£c(K?9Mf` [Ime7wlHXWBv9]MBp!聚5Zr`7s^$bbesKyq'7LIM^Ra.q8ji&ŰeYycd2 Kf1vo}E ,nEbBߥmgIoxn_U!ѓ*uOs@KS31yNK*y|&(yo wQa|Z( d>&~103Zא/zeW69[>R`db/k1Јt+O%$1mUеج鱿e8 [<7RV꬈ͤkMEhNWHwcnyYߤQ^Hn[ڢ|'%pk0@"g*w#Mf68{1/sx?[;NyfIY#ӑ'x,ٝW/uGpq?ŃMm C,o䡼v(/_xvrx v"O>BH0,aZ+,,: ^Cq\yy |!t51wr=?X`ڊk@efBmͪ *d0 RLҠ(V<Iai`.zu(N vjhiW斮Ŋܻ}m;/XyXC?MV6n(~ɔVp^!\-}k=jL FmNɌmIfw\fM0-?qUS3x "dr-V=q})~d8iB޲\p4{z[a968s4{?a-D+ZomouΠ&L5\Ċ.)FpD}%JpčvF+()L&w?1zt2!  t)Z"pAlLcD4[ p$V;?I#n < S10@I'ZSSn$;p%U% '2rX?"+`ZQXSv4Ji4iVs;q,M]bGp3%YkWW!M۰^F_ݢ#Fz(]iȭ*_aO ҆tKH,[9$ /ecܩZ]>qyِ()g<[M41 D(|8|:XPΨ0Ь }g %UJG|RsIHvbW:߈ҽ͂U_n\UŇYk<{c[L2EwWCfW$HMˁ5 Q\|::'D_4 a}$ SQ(ev:V3N=1^}Re.6Lr~A#EWdbyvsoӌmaCa|xƏ{@'@j;X{ QrNVZmmɼPӷ/Gs8QEd[([bv8)mUōEʟvĈk~N='a-rAN* !|YfRmVIOD'SLEsr\ieroe (<gמ3 B  ⧘P&-/mZºwGsPl)o{ܜ f"y$yU x]!jaܐg~isguU#}Q9o}Mh"gF.D#*lVJq ۈ`؞vH EԈZ9o~+V,(TvCگ7cBiaHJ;ؔj ƭ~O!=+ȇMP^uCUe۵DAԻi19畞$d{HBVlKZ5&9Xә(|"'hfB,zS9ʦgP=YI᤺3%I(jDrqW .IؽJWf!1JD.VJEU kzٚ wS70Hb5:hɪ#} wJaEh;W{ʤ S'iqw$oNA3o \\Dv'?FEqϩ~Iǭhr``G(wDk˦ii|%PJ_9ëΞ1k fM $s}qFv,, iD?{d \"nV*^>:QT.(񁙈u]lKH.^Jr>O u^TR :1 $X  Kr}c%Q_5$(=e+7 B\Q:pD[@[c䨆&ܑ3Ȕ2qIƵK$e\}<`wApbK[&\>|?bC!څl8W($ϖ, l˼~'d:ĩIHxȺLH+ׇ0>ABJUj5}Ajsn(BXv7SHfosWfW3^PkV6lNJ n hJKbwrKeq 4IJ֕E.64D=_?-ʝӡ-Wd|Rjkenj3v;F!h&yOaįGM*=;jkt}*v2 &19%gdH癧1yweOrW(0 `@Z=y<%C!Rk9Yotii4yQV70{ޒ<YmlB.W]o2kѻo4JdBzu&0Ud7 /+l3)rWZn_^ϲlT#r3M?M[rx& ɱ Iu[NR*04ep?Lr5= sJ1Czo7^XLlA #3VpmgGtWMCU֊K٠1Y)"<>UrL ͦ@M.Cװ'7 &ňҊ(iI M z'AM {;A بf1| vQ2Lpp<̄˅}zGۿkK<=\ieLډ̒ZkQK b%.=q_1Ƶ M<"xzM,YV⻴Q{i"fT#%i<ؐK>.`igr5jYzdp& wC=åܡzSG&}eJaWVRsTR Բ;;D 0P /-m8YWL;}sUU>rxu$.r/OEs@٧{F3$>|A8Z Y|ss`bqYqТ@ה+,,Ku&IX—ɕ̟&`eqB %^yE߯zLOiNYPF >.U&ظN7ރŚ9z%:,"ǷM^t=J,\/QA iw3A|M`Xb_W9iU K /^j'w*8X.4M*yWYj/|O)0%M:/\oww'47}2 vci^*A*ÜֈDE7 @  3`k^?ȟu_KsP&`Iu60ۻ`AAoy*?ȦC¬`"SPA r=d܉L4-TAko5p; *;@QLbs6/ xv/qP幧 5ϕ]nk!4wn N%w@laU}*YHEFȜکb+%.7;E<ώNATesb /j)~vNΥ?' -xؗEZ |Y/E7ɐ#i6ǺBZ =gl8 'R"LոG O@FY+N <Hޖg!;UtB3-_rKȐ5d[\ ng^DJ[]/#/ Y :@xuqE]h&*h ສxaar2<(>u;`b7dGqn~EYҚ14:Zztk[qK̸xWԡqfOWƜ]4qHdi-;u\ د㢶:zCDeKM"7[a.׮m”3Jn3]7|3TRnBK"y \񿎛pM-S+`f.ع\r6c{ %m謌7m`:0o Y 7o x_?ȢGbc5Vv+|{ٚ=5$6~yRo_ /E>-+W𽬑}ܲb*)d%6]p|M*{~_[;{f )K*uضhyxjiDcwPmw75/YM݂UJ vSY#p}, Bg9٩&3?25mcƇq΅Qi˗]6qӆ `D kQ wGt-%ThRdF`+^ <<=|brUKۈ 0.%*uZ}\L1z^L_Jwn҆pj{;|M*CnUv(iYo K)3.C[V`[9m:SН$z#;xSi9b| E&b"c'yG0R{($ IB69/cm*ZFV"KAu%1\/匹_ waOh/e4$yp uvvb6>X q@W?Ay޽fj]VڛWQP9>eeo'{N8HG9yy]+#~bK]ҒLPbg~d;M/U8Dy]WmmÃМ8RJ*Vv)\(.Nنn̏68=ϴN5ME'XyPQtSor ޡ xsO+AIr;.GFtR VK*`A my& RJ @O2&ߪ)Âi} pлB(h}}iO-cp2봲~TעL2ŪMX7lxʶ;[{L{6 YiKh_]oHC*r $$AH'+hG;t׫\ Yv F~ [ZIy6hO}h̤i5Js TWzU8 C $Ħ;MQ7+j0^qaҝAIpoU"b?Q>iC E'(,JG&!|D (-IOw fнt9Ũniv-R1f09u `$y+_4E+6s"Q@wĆ2%NW %+zȧ^ NpM\f,֚c3c=+-NԪ2&) T}K{WMYr9Y_w~٩tR.+!8nLr#Pm()J^7t5]d>DK%Vs:Vlw_IeFЋ[,qCO~ճxζN~d4\cb|M祆'Uʎρ#>9$w N节FLE{$"EmCq݅|r!fYTZqn{@ޮPa8(6UP>SHvc*I!:,6hmV|Z],kGd/ ,hBŔI嘅Z(fhgZHg>R. h4rt7& 6(t?Hpy@u ;=А芏OLWZ】O]'QypōwؾX f[l⇵d\ŀX>jG ![٣d/=`a# *1{_Y{a/QyԉǭF5iTMj ERXo0ňE!YX[&chmtRqqw'4Zc[j}#YBDC`KQb#?)vh } |옵VT ɜъ$ Lqs0\kxo~#]KeXvcޯ{mj'h4%P9UJiqkŹQa_BwT~WE;W_Ĉ v ZM39">ZIQqc'F 1$,yR똅3,չ3d'p܎ęW-yJx B<VpqMV==pr>w^ MP~b# lsIضyv6;O??;1<-j Y嘤)ܞQ3˴/h;hoEQsJ" YH?!XЋ`ݛ[{wC74f7D%DѸǀYbv =FFa3syn ûN?HCY.V9OYc}יv[wY6?l?tNV /8a3K8JӤT䮽9kRUу}]hﺄsSjڿ/U{Z(Xz3L `{zt[VҢH݌" c„D$E;EhL4pxDԅeB=ycT &X cmnؽn9wOp\(d9TW(~FSݾTZ*it Jf$\]QQsI(l^{xMՃ+IYA'jpA=>s=1ɾ9GM| . Fv/R\g1!Cْ5-Gsޤ (8SF>?v"b֊H4cWOW | 9q&8ftېүjyY;@=h S">b<@]jb;yAXԈ^qg'*VmvyYމjQٛS9ڇf،nM̺iN$Ƴ+긁WWSՋ0DTdKűǐȼ֛ _U'-p3WieWڶi¼bYb+!a%6Sp&X@eF֠Y0RC,ceSݶ"Q{KV]\PX6$!pVL cyBp25dUۥ򍃆l%u~0[fߡT͝^z/-G`v~lgn P9_TC' J@O\+pE}Y+OtFX30/ڲa!cY,t( Z>`a\3yu4i*bnalnvNr]l,wp`4Bɡ+L0 ƏsO(kŁ.k0mo7 $Y|Stf$qnDTnJr?#{hV_@Y6sӦyv[O\jLC(ɞ`:N{~4xLg,ݣ%gy+uso$`Cac[s<O0I'wltSMxf^iy) >N"m21|`'Q<71dEsh^u~Pآ.ԮS/ZEZCK! H/ek`CߏTSsP f[>ܹ9Mg6_!?}lqrg7=ǟt/_pbqA3>W3]?rU"^kq)}b{tUQTQ*x@>m;jx2<(~&̯i%EHQ_ș6jK仫^9-X5T!VC-5<&.Wz n :M bχy!?Ibj01gaH xeb.[xH17U^$}etSQ7|TS!w@#YhM;`9JYH0ѪQyt#nCzz!T9WQE8^c::~Y4! >N~1t8pݴ8΃ʦP: O SMN# i}zJQ _zZ6,򐀨RUnI Azn2`BJD޸HA; SOU+,#MPzdn?T}Lq;O$YQ(լ䄫)Ю%TTdŸj7n 24=nR{zTe}u"`гy+Bo sn ; Ր>\*XfS湁pP-{MPFF >.˱> i@+L >tQC،nTK\Og5Ls WXɢXаm1,ky`5VU3! fV$0PVf4~'(U/G,&JI^:+Rsdֺ/,d[y`. XOIԪM]Uz8kK*`vB07[W1=ƮdU OZ6dK;XYOE##svn&y'삹Z"}[31y]5 \+m]" gJ鰡XavaD iH߼C|Nj϶fS! o_F:4'F1p UKR/sM%]DΩnrUo'H?boNVI6g@!Rc'Ia^ .ѱ.k*e<P͎_˩ W'͊mxemr /tbm&Q(YeWtk7/y^<Ui˕ӪYūXZVi[9J(&|dO&c}DUz;< gmGLIe]1{k\FT$YwЉ_iT*QxpP ȇ"6VRk5%^6 /YeV(tMU['ل&GǢW4 u|vQ/YO} \6շ^hf { Azt8b].EU R= AA<i?ժDR?#?j2u,ܓAs:(roٛ"t; YwywU-27RxЛ}0rA}RLKFL+8[Y]*NӖ(ڇ#Ԥ_К8:Gb(Qx/N=!@|J,\ܦ%6? vmr"A!7sm9- /(-LV1ɁF9dufѵ}Hxܙs):3HYMn<,;](sHO2ݸgO= 뙨JUb3$$9fǥd=> XgU |5mÆfm]tyW]] {ie k<<7 ǪA+;r̯] & Ξ `/qB8ok\3\u§K>ct>՜nl++Sx8,|*Z*uux L>칁B L aW݅t J@@ ^ִC:Bʼng]|yp@anlٻn \СIgr@/3.@2&z!nٕh)Bgf*<\4JJ F+Ś(FM06.da6-\/c4O RӈHpEg-M/tXABI^=qr(NoMR6U!o?p*]8ixpn;KzSJߦIB LY^`"\3rxۣEN]ġS&\bpsM_Vv ҠqAmE;˫|7U*?Uk4x-ɨQʹ"MI (,%,nє mS֍M&R~m*A`k89LLڐkEYtߢYǾgJf%srӝj\` ¬xp_@qZFpJmPM߾ )x99%lީx~Ezp >bvWk( = pWF7=lk|ͦh*Gv/bȶx`\޴AOlnq0%Fh>-xCTǨuG <_Q;SW& NCG6ږ ~pt|G%gk ɗ_\4TxmdkC0z.I0]:{ȏɸ1@[bXk5w)Wb0¤|5ט\WG8Axb#fm\;1E"Ksl5Hi(NqȔt(1 Fd L&:R&XՊ3!o4ρuZqA7LսMԆ}HGpvuR ?Ǜ~0@Ug,ܔ W&-떰%NJ}HpOEЪ(;R?v [ٍ7{|=b;wvjw#NZ 3)6!>xKp`ި:P_=p]>$@6`@B- +:Nтz9&=LF݉HG4n~i^5>>B!a Pj? MnJRD~Q5rsJ1rXL&Qݹ܇)oWG6,C!ƝZTe0haFwW2TZ(}7\e<(ޭ)M`X/7=솱 ޟNӬE' %seMlUOp'fĆA;Ϲ3ui92Y;VŞ$\aP1gHc2sps^{H8J獁%^^t;YODoժ|_'VR!8,u cYb˽JPxYR+u9-|TŕIn,"Uȉ:/g!JCaPoB\kP%A4`_a,*xv:-\] f1e`[{w01)6][K>1j8䗔j4-`1/0`-3Z&{$'m"=4T=-m&o2)ͩ:\s=CnSi3#pݣ+%eP"ֻ}jZ]kR@FgD4igYV G*tp?޹o1i z6ֆ]*cMYW~ngXy s>XNE@RF5ٯ]c߳!]a@sAK&q$yktNc Xp^, mUv|HmAw^͎&)җXKU!N!_X%im1S!:N1?xK'12FEFq T4U;P Q`b;C& Z=#h)͍V,>ݴ/y!kX<زtWc"H8kB‰q|NbziL\{CMhDq=bA*iSUh<8,RcqM^Z*ɫqɊ ~I'jThWO&L86֗K!FUޅGY=̰F-J~F}wd@ufHJ4&  ïkvu}ےT;>7!f {!ڡ ~!mTJ Q[^:DPQdDFC%{u%U!P>YݬI@B9zbemWHpq yc5䘜VHP TsZIӎ3!C? /&(Xq[/I{c{֖!w6 NBb\{8}kV<Ƞ7% DH;߂=;j?_<6C>,U%Qt9(9kvCkPs9Y/?坯,5IO.Bޫ}ku.co!Ll77 Fº[#.bR܈וչ>9~_]4vF'6*?9tEC $?Ut!S;o|O$J=VSPj_ `EybYW/FL o232ݙ[}uOE:pk/Te.+ZF($YBO6=n0DY M/45Ujot71UhaaVi#ǿr\8'⦤BnKVXNҎՇs z2uOm {snrϱ8zB|Y+h$)k7R_ E-"4|iªY􊛯uo%r((OK j[6q1'MuwHe mQi]WTz@m.'۾ ge.x3@jU@f" 5w 0N)N TԺ1CT'<++j֏m=Zny <)ŬI`BJMo$6,n.7CfGHUb8`>՚O6]w r#NB%Wc[{WC-,0 z_o+Pར;U9! t-O&^ׇ / h^r O6` vkCSx\^A`Z~ސOJQԞ% ↈЃz7tM8Vuܦq@[hZUl>HtBȨ\;J0Tntƽ %?1)]L,+oL˯L=b*6oc~+Cn8} gnr0KB%p߯vcNŐ;xk,M#m{HdTqb"1ŷ7 WҗAlmt{~mUߵο}qq;4M˼ 71i1~־>g^MH[N?RM,;ث']q:o獨GGf$~r*-s3IŸ _?EB餎C\~"si>`&CR: O0,,W}sO$zž p;6qC΅H$= (/ٛY1)MP#7bHSez,+TOdž8?0o ;CVa%d*Fˍ Ď,ι24-!=z0EFNz _N<7pF jǘe`{ih4r;׮ZU=vJ:ՔGyZi:e%{`]EOZ 3D@`Ż>C˟xqZ'RG͌d~LMv g QP% ^̝a0ʇD o:&gfE>UNlZ:/ ܑ9NW v7vHw0ŕ&U+ڹ]0z4A ["ڻ5,a 1)59nBs2?Ix~-BOJӍJ֌Sfcj%}Kj4PoyJSKYOsٹ8/#?%)rx쩲l궏Qv4cOV;:;qF҃A[x+ˋ 덮 /RC>Xױִ7i \kQ6Kk (DfߐNۖ L6&v1 7f^D'?&ds$EO'(] jS':mѣt{U1˿mn1%e~'b:]W@ۥ/.\`&~n&AYM(a^FqE6Sj mS&ͥ+1_ {R\KR' { ղh؞e\G0 5iFJsˍ-部tpf1a Cv򿼣%M4%)HBm&Qdy5+bܻ4h~ym_Py}Ԧk>*e?k3C8{T|;WVxi5}dE78d7Š. fS&٭@$A n}f32;1:FYKn#[|~ mb%f,+O6Gd3Fבم}<06]L]4bh8ꊦ:#v*O}:%V#P-ĂgHW~VjVG\iPlk/a2:d6wp: ..D9 x:O7rXC$S58]5WIxCTBl&G>Q!I‹h@U@ضsc'ލEVV,2z͉X|a=9d܄Ѕ8޵ Fӗĉݰhҁ%Z,(0!'{í&bep _ geIF֎şCc.,x0Ժ!w~џ;B#Jb5r?E5{mTހum}()_5UI4C!sJa htqʳn4@Cٽ5'Έ{t]{m̓/璩?(@Jb7Id*h*]xG^ν*VO~S_U&ӂzG!~:0WKhG:U=Ea:TGw NNMufޡSGaɽ=(ss]椥LYZ_rH<RHGط3D0wo_G<39:JNsdCf%Ƌd׉>y,s <xFR^SmP1 c8;`ViZ faHOk\N^J.Ϡ)QE^e9"M٤Hj,5ؘZԎ'rUYB0a @2F?5CSB;+JM|ŭmf_pAbWrΰ򅶧f-Xǟ?}lRuV 5}{q y "q̨3=(Oo0i!ʙ24 6жâWdU2s3|S#3#Z"B+AqhuFbAY0Fvc,N3F'rR 0?+m > bt zR3x"R5rJݏDFѐ~T2:#]Mi#)6UeRlZeb];Ci䝿;V;y ̞ӾJ3ƣE@cmObnYq.ujˍ+ kHP?XU("q&B#GO?6b&8-SS &҉Cko8-A}NےD:Hds%f9Ns GokB-LjWQjk"%jH&܋Hv4@ qwWM)-Y"=^uPifM1ҦI_ռW4|cB( ,m ZYH8Q9RL%ye\;e_i݃@>KvhHo`l55Zo9)70`MRo+d%bXkMik7/>_ByNhR X.z=c9qưX'M[pWֻEDI (v C+Aj(٣Z]{ĝ@Edu!׃{6񚟣[$*QherԨynSo[F"D#}LΙ$_ht:jGUPg$zLL\$Ek\~{;^:]b>w9xt}_Nl{#K N$ZuW (5ZM\q6Fޅ/S1ۍ)Iϒ̯)s^ގГv> Mvq^t}SLlȓ#v51f4}h#lMz)}Ud^x0qv9`R[}Yא8hˉ2"/A@E]_ķkO])#KH1%pN#.Y0:F<~1UC{}>/cӊ^89#bvL$~R?#^]8BSAG%͓bXCF |hU9`qFlA>/ b٣4:<.ܪc`ms,ػc镯~HG5cP#TFCz d{._c1ׇy3WL AM T]+P5|бh>^u"9] 05wI^3󠾦 WQoaB ON!Bw}09a=?k&efPslg.N_KɍpJI ȗHeϑgb}Tj.bH<}3r] Ae2"f-(A.(8Z0#2#]kaDD+5-1V:NJl[׼ԡ,^y&] iiH[ST{ /`9chN6L尿凜WB+-QeDDYqqfGaY])cLrhzfpMQ:ZQn|12%ehqrϟ\6?0[Њs2<}lĉ{]}z~j)٦jn~ RMxhXPg{ Ve2K.A/b/q]+*= TVԂ_`;>->sy=C Z}!hSahOWixT4с1& (i9cbwB)6ze$ZDXbtq oS$}sK< +KY̓R  s.%p2E0Ю;sj> բ@娛s4c%2%-&̱8^c% >6ɸnoP4L>%cݎ~>y3#lyX {,d>V PP: y븿(ٴl hhlT%r08a0UlL$ZDm_U]W$5Hg8TlA`)#Xclt$ot,% Nȃ g 3 ƀr 4G;G^M]%@՘rm2.]5?RKSi4ڑ{-IƩڻ V񱩊`¼]I5ODpI~D6>j+<<H08çJP]BM؝1/2 rl8ĆV BuaK^L;9UeUݷr1n9sz 'bkRdq%/ISRRMM1tBO-+$,[ ̗ ?FĦgZG>)MI83)t]1%WNC^ʵ`]Z~Ve8 QAAiMWoc%Kc-#Y}X& ֎Ud/1΁rlxrzu@ʥ2cm2:8xv-[h?lqk[_%-X엜S\H=#s侵ǶLX5gCS |TK[\ҳB nQ)_Lu4 Z|0 )Nn^f܏U$W[Ao @a}KT|Cĥ ɪw;AEz`Ӟ5>_y H4jr(-f%[|ziVgϕ [),LEэ VƬڈpf[:GS+eh"bG>?E5j'{LL16s < [q <k31Z^o-xvH Z*q* |1opo}XYrlk8]5<\soF`%s2–ڥڕ'_seF*ot)k&IP,ym(pUsN<.\ړkCgi7hJZD#ϲZ2FXJ;=~ Da&Ql*qؠmh ؒPqԖY5y52SnDGO ?/M56sJQ =(nhF7܋}B.ɿ5 f#4f\vNfl[MS~K 69"@/ Y 24lP rBɣQ@P#Tc4fW|`w 9 cA~aT=]5Ԗ*SthHaEQ %;\cr6*2?QʐvZ-"JR$K)q TRg̹;UY7!k9Q؛BoӣF_C IHRK߈lhrua`ne5B7{M>=s(ݣ4Xydѩ3V6")1B%= L~j{gIɑS&L"e=zgfM\y HUj!pzZe@agԾ7tB.ՠs޼Qi'Y{iB ߉@kDsGK!qP#Ge ASg~pe)PUV? ќ|2EgZWM3?(_f6Vrh(,hOڂ̓T3d>毀B q]idr0,Px+_>:!)9E*l00&=+z^Ȭ@>8 {{:ĮE>LΛ Z,fq)gYƈ+OKKPҗ^srwYT`&кߝ!` V\' 4EFXEOJHgƐY7I%Mn\DXReGlWjhsDQ6c! 'jj^kvgV!6|Q?f?8/k@)[gbj m_3@%NK)XL`2I~A `Pyk9I]?0k#X=o29-Oå k2٥+ R} Jfa%^ǘ,)ܰjm_}hrGt^('̹[T5TV K io'x̙Sdߐ 8Er?jbG !\I(/ EB22ȠoHgjl?KךTɉ9[<i78PGx^ig+nV.1ǂ/X2GR7:JiчΥ?;yoݢ=X*Ip+߾o9ܤnctc=0(yI(<}rԃ4 Z6]@T&AD{5oo4*~wE=koukP+VfBgGR/^ae`j @Ymp#6KTG6˥c^wo" R߾Lz|gXimt3G g3+7Kpܽ-8 ` .39`U+H ;=#-llo3BwR!&m%ɽAZ1DÑ$|1tT;a*}5qb E/*Z߶<ےIt%ZQ Y5i(awqb0 Vy7+ꚬ™0  Esyp_îυvvb-o()9neF1YNxK>bʾB +~:N*thMe _!BuJ'JvӐ=FUDUFmnLegȴ -~[1*dGe1l )C^9*+G)xK{4!?G)/`G#$1[)Thйm8ѓ Qb+'~'n Df#ӧ΋D\A 4{@y7 =$xF>5N̏ FK4x 3xL@fR).c{28*INf 2go$C H@{j_|@@_!nߒ{E٦1e*!oIw5W/H%r[&zD`^Ik#}=+P9$lmw@I 3w4+ȠXĉE"KycV!Dm+\ W_ M~pea;}A7L`@zXfJ=1V5jZ[1 Y=//O܅ VU~sCBk=*ZF?f =IkHwW0Cdz~B٠f̭GCFu= n(u[l}y]&fŃ\-+=fivLK\o+Ld%{0>9.Lw3y&<={ Rݻ^ĖIpQ P&V z'cйYD}P!7pA4#7ʺyڌ7J NJ$h:6ANf_rVMK4+.NٿCȄ̒7cI6f $~{Ąz1huZ@bK DO XH;L({s ,*Dh;rK &~nR6]49,rpꑀcJy, =J*\9D )^5@)~0fgl[8=z/)+#[ҿk!xh%uwCP>OLCJh+y,~W$uS]I_,YzK~whd_ !Jfc_VcweTb>~|)#Sgyjs|lZj#}#[VG>ۗ69trrj"\clbAҖ J!GWr& NuI+$7 ԖpV bviIa+z_(jGB~{֓!Zڗ0nPU3J8|fSJr}6n9 M#+nbQ W`S&op EyspȜLe<)n"$Y8 6Xɳvt ƶT7 8)r@i9"ٲ9,IV,gt0H/:]D6acbл%Eō HxO@hTu e$.)n=eL'+]D\8q*(v5 #Iۘ}K&i+u8Vf .[ŨP?x )}+M{DE p&^v3B<9l'57Hs53:RŒ( N+@GH0Ts)*ˮnz%w?&Er; 02MS ;6Lcvj>3mwD^8JaxpPTsݦFƛkp)t4,c|rn yEBasAgw׼]l8E]h{YPMÖWQV"@VhlЗO\yF1Z };_OH+L,qR5#žť3qnPZ-0a: ʕlgH/+/tz"-8,ǎoܑ.6^RӋVrVY S=Ug!g:NϡFoNhY:98lzQ>&ܶcFnj?ɴza:"׵z87;:!>Gq!(D讄b}OKBpءpz)[y b@Onb=BZ >EHYD;~ΕjpG@1duݚZzq3W Loz(8dQ ]wvB) @`=Y$\>%* 2<'"g L{Et]Km#h_#|AwZ'X=W4&p˺'an+lOE$Sɠ2z{=fqP|s`U eD3ZP,@g36 J 1>06O1{cT.n$fJ,# jS|y6OYY.!cnF+hp/2 0pi);*G bţGb.`RDU!9_6VcWܔ W=lEж=7tHs[㏄'B}+*iE9($ʚsbo42*(71L=m7{]ȧ즏Ru$raCI!~ܥU4Z's8T= qkn;q+APo>) $ஔ_x]- -v50߄x$+lbxU+ CVHW{[`=q |G, jȀ줘: YZ