pki-ca-10.5.9-6.el7>t  DH`p[$ƨR1@s c9s KՋjMOuYxq5WӍJ9 Y Ϙ371t8G3hS;l@vJ?{0yK;_h^zh1j;8(tx<-٪l>'a?11BK)Kc.cN Nj:V_0எNuPqmQHDCg PK+wv}c#Ic"SBܖNWWyK6 ja )f Wh㹖u#Myz O|ŐF 0ec u5v+/8QI*M S_0|{ <UHl2YD'V=B'hfIFO!1]VEͷ4"LDY/)cվ=d8:0 c3181c78689d1411749501c4944b1999265ecb10N[$ƨfxza){IBb6~hIzZqH7F$"<6 Tuy*|B 2\RUNhۃ,6 YIs#5˙IEAi(H0WxuSE&v"oHRގ5O+7|X?|Hd   A        ( F L Tee e |e e ne qxew e~ee   (89|:G4eH9eI?(eX@Y@\@e]F8e^`bcddedfdldtdeujDevo wqexve|DCpki-ca10.5.96.el7Certificate System - Certificate AuthorityThe Certificate Authority (CA) is a required PKI subsystem which issues, renews, revokes, and publishes certificates as well as compiling and publishing Certificate Revocation Lists (CRLs). The Certificate Authority can be configured as a self-signing Certificate Authority, where it is the root CA, or it can act as a subordinate CA, where it obtains its own signing certificate from a public CA. This package is one of the top-level java-based Tomcat PKI subsystems provided by the PKI Core used by the Certificate System. ================================== || ABOUT "CERTIFICATE SYSTEM" || ================================== Certificate System (CS) is an enterprise software system designed to manage enterprise Public Key Infrastructure (PKI) deployments. PKI Core contains ALL top-level java-based Tomcat PKI components: * pki-symkey * pki-base * pki-base-python2 (alias for pki-base) * pki-base-python3 * pki-base-java * pki-tools * pki-server * pki-ca * pki-kra * pki-ocsp * pki-tks * pki-tps * pki-javadoc which comprise the following corresponding PKI subsystems: * Certificate Authority (CA) * Key Recovery Authority (KRA) * Online Certificate Status Protocol (OCSP) Manager * Token Key Service (TKS) * Token Processing Service (TPS) Python clients need only install the pki-base package. This package contains the python REST client packages and the client upgrade framework. Java clients should install the pki-base-java package. This package contains the legacy and REST Java client packages. These clients should also consider installing the pki-tools package, which contain native and Java-based PKI tools and utilities. Certificate Server instances require the fundamental classes and modules in pki-base and pki-base-java, as well as the utilities in pki-tools. The main server classes are in pki-server, with subsystem specific Java classes and resources in pki-ca, pki-kra, pki-ocsp etc. Finally, if Certificate System is being deployed as an individual or set of standalone rather than embedded server(s)/service(s), it is strongly recommended (though not explicitly required) to include at least one PKI Theme package: * dogtag-pki-theme (Dogtag Certificate System deployments) * dogtag-pki-server-theme * redhat-pki-server-theme (Red Hat Certificate System deployments) * redhat-pki-server-theme * customized pki theme (Customized Certificate System deployments) * -pki-server-theme NOTE: As a convenience for standalone deployments, top-level meta packages may be provided which bind a particular theme to these certificate server packages.[ܟx86-01.bsys.centos.org%hCentOSGPLv2CentOS BuildSystem System Environment/Daemonshttp://pki.fedoraproject.org/linuxnoarch=m/o1l[#t1J6 ] S }F}F+. g%~~[G7(b){%xkl_,,x,t Bfkx`ML9PNxuE% *S*L$,kI,A,:+A+3u9 #%##"vU "`./9/]   Q q >#E/#+{B/'m)H nrtknvpyi  *L*?5%C%c*m;c=O? 9%9Q][  T \71 0VCCF6CQ& "Y"\><bc q  dF r- ~->E,g=tB 1"?%I7Px]%A큤AA큤AA큤A큤AA큤A큤AAA큤A큤AAA큤A큤A큤A큤A큤A큤A큤A큤[ܟ[!T[ܟ[ܟ[ܟ[ܟ5[ܟ[ܟ[!T[!T[!T[!T[!T[!T[!T[!T[ܟ3[ܟ3[ܟ3[!T[!T[!T[!T[!T[!T[!T[!T[ܟ3[ܟ3[ܟ3[ܟ3[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[ܟ[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[ܟ[ܟ[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[ܟ3[!T[!T[!T[!T[!T[!T[!T[!T[!T[ܟ3[!T[!T[!T[!T[!T[!T[ܟ3[!T[ܟ3[!T[ܟ3[!T[!T[!T[ܟ3[!T[!T[!T[!T[ܟ3[!T[ܟ3[!T[!T[ܟ3[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[ܟ3[!T[!T[ܟ3[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[ܟ[!T[ܟ[ܟ[ܟ[!T[!T[ܟ[!T[!T[!T[ܟ[ܟ[ܟ[ܟ[ܟ[ܟ[ܟ[ܟ[ܟ[!T[!T[ܟ[!T[ܟ[!T[!T[!T[!T[!T[!T[!T[ܟ[!T[!T[ܟ[!T[!T[!T[!T[!T[!T[!T[ܟ[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[ܟ[!T[!T[!T[!T[!T[!T[!T[ܟ[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[ܟ[!T[!T[!T[!T[ܟ[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!T[!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.jar/usr/share/java/pki/pki-certsrv.jar/usr/share/java/pki/pki-cms.jar/usr/share/java/pki/pki-cmsbundle.jar/usr/share/java/pki/pki-cmscore.jar/usr/share/java/pki/pki-cmsutil.jar/usr/share/java/pki/pki-nsutil.jar/usr/share/pki/server/webapps/pki/admin/consolerootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootrootpki-core-10.5.9-6.el7.src.rpmpki-ca    java-1.8.0-openjdk-headlesspki-serverrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)systemd-unitssystemd-unitssystemd-unitsrpmlib(PayloadIsXz)10.5.9-6.el73.0.4-14.6.0-14.0-15.2-14.11.3[{[l,[`O@[U@[>@[d@[@[o[@ZUZ@Z@ZZxG@Zg#Z.s@Z@Z ZYYY@Y@Y@YoIYlYGY>@Y5GY-^Y$$@Y"Y@Y#@X@XX@XO@X*XRXOX!@X&X2@WWҤ@WίW#W:WWt@W{@Wu WgWV@WV@WV@WV@WV@WV@W 10.5.9-6Dogtag Team 10.5.9-5Dogtag Team 10.5.9-4Dogtag Team 10.5.9-3Dogtag Team 10.5.9-2Dogtag Team 10.5.9-1Dogtag Team 10.5.1-13.1Dogtag Team 10.5.1-13Dogtag Team 10.5.1-12Dogtag Team 10.5.1-11Dogtag Team 10.5.1-10Dogtag Team 10.5.1-9Dogtag Team 10.5.1-8Dogtag Team 10.5.1-7Dogtag Team 10.5.1-6Dogtag Team 10.5.1-5Dogtag Team 10.5.1-4Troy Dawson - 10.5.1-3Dogtag Team 10.5.1-2Dogtag Team 10.5.1-1Dogtag Team 10.5.0-1Dogtag Team 10.4.1-15Dogtag Team 10.4.1-14Dogtag Team 10.4.1-13Dogtag Team 10.4.1-12Dogtag Team 10.4.1-11Dogtag Team 10.4.1-10Dogtag Team 10.4.1-9Dogtag Team 10.4.1-8Dogtag Team 10.4.1-7Dogtag Team 10.4.1-6Dogtag Team 10.4.1-5Dogtag Team 10.4.1-4Dogtag Team 10.4.1-3Dogtag Team 10.4.1-2Dogtag Team 10.4.1-1Dogtag Team 10.4.0-1Dogtag Team 10.3.3-18Dogtag Team 10.3.3-17Dogtag Team 10.3.3-16Dogtag Team 10.3.3-15Dogtag Team 10.3.3-14Dogtag Team 10.3.3-13Dogtag Team 10.3.3-12Dogtag Team 10.3.3-11Dogtag Team 10.3.3-10Dogtag Team 10.3.3-9Dogtag Team 10.3.3-8Dogtag Team 10.3.3-7Dogtag Team 10.3.3-6Dogtag Team 10.3.3-5Dogtag Team 10.3.3-3Dogtag Team 10.3.3-2Dogtag Team 10.3.3-1Dogtag Team 10.3.3-0.1Dogtag Team 10.3.2-5Dogtag Team 10.3.2-4Dogtag Team 10.3.2-3Dogtag Team 10.3.2-2Dogtag Team 10.3.2-1Dogtag Team 10.3.2-0.1Dogtag Team 10.3.1-1Dogtag Team 10.3.0-1Dogtag Team 10.3.0.b1-1Dogtag Team 10.3.0.a2-2Dogtag Team 10.3.0.a2-1Dogtag Team 10.3.0.a1-2Dogtag Team 10.3.0.a1-1Dogtag Team 10.3.0-0.5Dogtag Team 10.3.0-0.4Dogtag Team 10.3.0-0.3Dogtag Team 10.3.0-0.2Dogtag Team 10.3.0-0.1Dogtag Team 10.2.7-0.3Tomas Radej - 10.2.7-0.2Dogtag Team 10.2.7-0.1Dogtag Team 10.2.6-1Dogtag Team 10.2.6-0.3Dogtag Team 10.2.6-0.2Dogtag Team 10.2.6-0.1Dogtag Team 10.2.5-1Dogtag Team 10.2.5-0.2Dogtag Team 10.2.5-0.1Dogtag Team 10.2.4-1Dogtag Team 10.2.4-0.2Dogtag Team 10.2.4-0.1Dogtag Team 10.2.3-1Dogtag Team 10.2.3-0.1Dogtag Team 10.3.0-0.1Dogtag Team 10.2.3-0.1Dogtag Team 10.2.2-1Dogtag Team 10.2.2-0.1Dogtag Team 10.2.1-1Matthew Harmsen - 10.2.1-0.4Ade Lee 10.2.1-0.3Christina Fu 10.2.1-0.2Dogtag Team 10.2.1-0.1Ade Lee 10.2.0-3Matthew Harmsen - 10.2.0-2Dogtag Team 10.2.0-1Matthew Harmsen - 10.2.0-0.10Matthew Harmsen - 10.2.0-0.9Matthew Harmsen - 10.2.0-0.8Fedora Release Engineering - 10.2.0-0.5Jack Magne - 10.2.0-0.7Matthew Harmsen - 10.2.0-0.6Matthew Harmsen - 10.2.0-0.5Ade Lee - 10.2.0-0.4Fedora Release Engineering - 10.2.0-0.3Michael Simacek - 10.2.0-0.2Dogtag Team 10.2.0-0.1Ade Lee 10.1.0-1Ade Lee 10.1.0-0.14Ade Lee 10.1.0-0.13Ade Lee 10.1.0-0.12Ade Lee 10.1.0-0.11Endi S. Dewata 10.1.0-0.10Abhishek Koneru 10.1.0.0.9Abhishek Koneru 10.1.0.0.8Endi S. Dewata 10.1.0-0.7Endi S. Dewata 10.1.0-0.6Endi S. Dewata 10.1.0-0.5Ade Lee 10.1.0-0.4Endi S. Dewata 10.1.0-0.3Matthew Harmsen 10.1.0-0.2Ade Lee 10.1.0-0.1Endi S. Dewata 10.0.2-5Ade Lee 10.0.2-4Ade Lee 10.0.2-3Endi S. Dewata 10.0.2-2Ade Lee 10.0.2-1Ade Lee 10.0.2-0.8Endi S. Dewata 10.0.2-0.7Endi S. Dewata 10.0.2-0.6Ade Lee 10.0.2-0.5Endi S. Dewata 10.0.2-0.4Endi S. Dewata 10.0.2-0.3Endi S. Dewata 10.0.2-0.2Endi S. Dewata 10.0.2-0.1Endi S. Dewata 10.0.1-9Ade Lee 10.0.1-8Endi S. Dewata 10.0.1-7Matthew Harmsen 10.0.1-6Endi S. Dewata 10.0.1-5Endi S. Dewata 10.0.1-4Matthew Harmsen 10.0.1-3Matthew Harmsen 10.0.1-2Ade Lee 10.0.1-1Matthew Harmsen 10.0.0-5Matthew Harmsen 10.0.0-4Ade Lee 10.0.0-3Ade Lee 10.0.0-2Ade Lee 10.0.0-1Matthew Harmsen 10.0.0-0.56.b3Endi S. Dewata 10.0.0-0.55.b3Endi S. Dewata 10.0.0-0.54.b3Ade Lee 10.0.0-0.53.b3Ade Lee 10.0.0-0.52.b3Endi S. Dewata 10.0.0-0.51.b2Endi S. Dewata 10.0.0-0.50.b2Matthew Harmsen 10.0.0-0.49.b2Ade Lee 10.0.0-0.48.b2Matthew Harmsen 10.0.0-0.47.b1Ade Lee 10.0.0-0.46.b1Ade Lee 10.0.0-0.45.b1Ade Lee 10.0.0-0.44.b1Ade Lee 10.0.0-0.43.b1Ade Lee 10.0.0-0.42.b1Ade Lee 10.0.0-0.41.b1Ade Lee 10.0.0-0.40.b1Endi S. Dewata 10.0.0-0.40.a2Endi S. Dewata 10.0.0-0.39.a2Ade Lee 10.0.0-0.38.a2Endi S. Dewata 10.0.0-0.37.a2Ade Lee 10.0.0-0.36.a2Endi S. Dewata 10.0.0-0.36.a1Endi S. Dewata 10.0.0-0.35.a1Endi S. Dewata 10.0.0-0.34.a1Ade Lee 10.0.0-0.33.a1Matthew Harmsen 10.0.0-0.32.a1Endi S. Dewata 10.0.0-0.31.a1Endi S. Dewata 10.0.0-0.30.a1Endi S. Dewata 10.0.0-0.29.a1Endi S. Dewata 10.0.0-0.28.a1Endi S. Dewata 10.0.0-0.27.a1Endi S. Dewata 10.0.0-0.26.a1Endi S. Dewata 10.0.0-0.25.a1Endi S. Dewata 10.0.0-0.24.a1Matthew Harmsen 10.0.0-0.23.a1Endi S. Dewata 10.0.0-0.22.a1Endi S. Dewata 10.0.0-0.21.a1Matthew Harmsen 10.0.0-0.20.a1Matthew Harmsen 10.0.0-0.19.a1Matthew Harmsen 10.0.0-0.18.a1Endi S. Dewata 10.0.0-0.17.a1Matthew Harmsen 10.0.0-0.16.a1Ade Lee 10.0.0-0.15.a1Christina Fu 10.0.0-0.14.a1Endi S. Dewata 10.0.0-0.13.a1Endi S. Dewata 10.0.0-0.12.a1Ade Lee 10.0.0-0.11.a1Matthew Harmsen 10.0.0-0.10.a1Matthew Harmsen 10.0.0-0.9.a1Jack Magne 10.0.0-0.8.a1Matthew Harmsen 10.0.0-0.7.a1Endi S. Dewata 10.0.0-0.6.a1Ade Lee 10.0.0-0.5.a1Endi S. Dewata 10.0.0-0.4.a1Matthew Harmsen 10.0.0-0.3.a1Matthew Harmsen 10.0.0-0.2.a1Nathan Kinder 10.0.0-0.1.a1Ade Lee 9.0.16-3Endi S. Dewata 9.0.16-2Matthew Harmsen 9.0.16-1Matthew Harmsen 9.0.15-1Matthew Harmsen 9.0.14-1Ade Lee 9.0.13-1Matthew Harmsen 9.0.12-1Matthew Harmsen 9.0.11-1Matthew Harmsen 9.0.10-1Matthew Harmsen 9.0.9-1Matthew Harmsen 9.0.8-2Matthew Harmsen 9.0.8-1Matthew Harmsen 9.0.7-1Matthew Harmsen 9.0.6-2Matthew Harmsen 9.0.6-1Matthew Harmsen 9.0.5-2Matthew Harmsen 9.0.5-1Matthew Harmsen 9.0.4-1Matthew Harmsen 9.0.3-2Matthew Harmsen 9.0.3-1Matthew Harmsen 9.0.2-1Matthew Harmsen 9.0.1-3Matthew Harmsen 9.0.1-2Matthew Harmsen 9.0.1-1Matthew Harmsen 9.0.0-3Matthew Harmsen 9.0.0-2Matthew Harmsen 9.0.0-1- Updated nuxwdog dependencies - ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #673182 - ECC keys not supported for signing audit logs (cfu) - Bugzilla Bug #1593805 - Better understanding of NSS_USE_DECODED_CKA_EC_POINT for ECC (cfu) - Bugzilla Bug #1601071 - Certificate generation happens with partial attributes in CMCRequest file (cfu) - Bugzilla Bug #1601569 - CC: Enable all config audit events (cfu) - Bugzilla Bug #1608375 - CMC Revocations throws exception with same reqIssuer & certissuer (cfu) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1596629 - ipa-replica-install --setup-kra broken on DL0 with latest version (abokovoy) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1548203 - pki console configurations that involves ldap passwords leave the plain text password in signed audit logs (cfu) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1494591 - keyGen fails when only Identity- Re-spin alpha builds- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1471935 - X500Name.directoryStringEncodingOrder overridden by CSR encoding (cfu) - Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a certificate (ftweedal) - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in SharedToken scenario's (cfu) - Bugzilla Bug #1550742 - Address ECC profile overrides (cfu) - Bugzilla Bug #1562841 - servlet profileSubmitCMCSimple throws NPE (cfu) - Bugzilla Bug #1572432 - AuditVerify failure due to line breaks (cfu) - Bugzilla Bug #1592961 - Need proper default subjectDN for CMC request authenticated through SharedToken (cfu) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- ########################################################################## - # RHEL 7.6: - ########################################################################## - Bugzilla Bug #1538311 - Using a Netmask produces an odd entry in a certifcate (ftweedal) - Bugzilla Bug #1544843 - ExternalCA: Installation failed during csr generation with ecc (rrelyea, gkapoor) - Bugzilla Bug #1557569 - Re-base pki-core from 10.5.1 to latest upstream 10.5.x (RHEL) (mharmsen) - Bugzilla Bug #1580394 - CMC CRMF requests result in InvalidKeyFormatException when signing algorithm is ECC (cfu) - Bugzilla Bug #1580527 - CVE-2018-1080 pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access (ftweedal, cfu) - Bugzilla Bug #1585866 - CRMFPopClient tool - should allow option to do no key archival (cfu) - Bugzilla Bug #1588655 - Cert validation for installation with external CA cert (edewata) - ########################################################################## - # RHCS 9.4: - ########################################################################## - # Bugzilla Bug #1557570 - Re-base pki-core from 10.5.1 to- Rebuild due to build system database problem- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry in a certifcate [rhel-7.5.z] (ftweedal) - Bugzilla Bug #1585945 - CMC CRMF requests result in InvalidKeyFormatException when signing algorithm is ECC [rhel-7.5.z] (cfu) - Bugzilla Bug #1587826 - ExternalCA: Installation failed during csr generation with ecc [rhel-7.5.z] (rrelyea, gkapoor) - Bugzilla Bug #1588944 - Cert validation for installation with external CA cert [rhel-7.5.z] (edewata) - Bugzilla Bug #1588945 - CRMFPopClient tool - should allow option to do no key archival (cfu) - Bugzilla Bug #1589307 - CVE-2018-1080 pki-core: Mishandled ACL configuration in AAclAuthz.java reverses rules that allow and deny access [rhel-7.5.z] (ftweedal, cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- Updated "jss" build and runtime requirements (mharmsen) - ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1571582 - [MAN] Missing Man pages for tools CMCRequest, CMCResponse, CMCSharedToken (typos) [rhel-7.5.z] (cfu) - Bugzilla Bug #1572548 - IPA install with external-CA is failing when FIPS mode enabled. [rhel-7.5.z] (edewata) - Bugzilla Bug #1574848 - servlet profileSubmitCMCSimple throws NPE [rhel-7.5.z] (cfu) - Bugzilla Bug #1575521 - subsystem -> subsystem SSL handshake issue with TLS_ECDHE_RSA_* on Thales HSM [rhel-7.5.z] (cfu) - Bugzilla Bug #1581134 - ECC installation for non CA subsystems needs improvement [rhel-7.5.z] (jmagne) - Bugzilla Bug #1581135 - SAN in internal SSL server certificate in pkispawn configuration step [rhel-7.5.z] (cfu) - Bugzilla Bug #1581167 - CC: CMC profiles: Some CMC profiles have wrong input class_id [rhel-7.5.z] (cfu) - Bugzilla Bug #1581382 - ECDSA Certificates Generated by Certificate System 9.3 fail NIST validation test with parameter field. [rhel-7.5.z] (cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for standard conformance [rhel-7.5.z] (cfu) - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1560233 - libtps does not directly depend on libz- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1550581 - CMCAuth throws org.mozilla.jss.crypto.TokenException: Unable to insert certificate into temporary database [rhel-7.5.z] (cfu) - Bugzilla Bug #1551067 - [MAN] Add --skip-configuration and --skip-installation into pkispawn man page. [rhel-7.5.z] (edewata) - Bugzilla Bug #1552241 - Make sslget aware of TLSv1_2 ciphers [rhel-7.5.z] (cheimes, mharmsen) - Bugzilla Bug #1553068 - Using a Netmask produces an odd entry in a certifcate [rhel-7.5.z] (ftweedal) - Bugzilla Bug #1554726 - Need ECC-specific Enrollment Profiles for standard conformance [rhel-7.5.z] (cfu) - Bugzilla Bug #1554727 - Permit additional FIPS ciphers to be enabled by default for RSA . . . [rhel-7.5.z] (mharmsen, cfu) - Bugzilla Bug #1557880 - [MAN] Missing Man pages for tools CMCRequest, CMCResponse, CMCSharedToken [rhel-7.5.z] (cfu) - Bugzilla Bug #1557883 - Console: Adding ACL from pki-console gives StringIndexOutOfBoundsException [rhel-7.5.z] (ftweedal) - Bugzilla Bug #1558919 - Not able to generate certificate request with ECC using pki client-cert-request [rhel-7.5.z] (akahat) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1560233 - libtps does not directly depend on libz- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event set (RHEL) (edewata) - Bugzilla Bug #1532867 - Inconsistent key ID encoding (edewata) - Bugzilla Bug #1540687 - CC: External OCSP Installation failure with HSM and FIPS (edewata) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit event- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1542210 - pki console configurations that involves ldap passwords leave the plain text password in debug logs (jmagne) - Bugzilla Bug #1543242 - Regression in lightweight CA key replication (ftweedal) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - # Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release - Bugzilla Bug #1445532 - CC: Audit Events: Update the default audit event set (RHEL) (edewata) - Bugzilla Bug #1522938 - CC: Missing faillure resumption detection and audit event logging at startup (jmagne) - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA instance (alee) - Bugzilla Bug #1525306 - CC: missing CMC request and response record (cfu) - Bugzilla Bug #1532933 - Installing subsystems with external CMC certificates in HSM environment shows import error (edewata) - Bugzilla Bug #1535797 - ExternalCA: Failures when installed with hsm (edewata) - Bugzilla Bug #1539125 - restrict default cipher suite to those ciphers permitted in fips mode (mharmsen) - Bugzilla Bug #1539198 - Inconsistent CERT_REQUEST_PROCESSED outcomes. (edewata) - Bugzilla Bug #1540440 - CMC: Audit Events needed for failures in SharedToken scenario's (cfu) - Bugzilla Bug #1541526 - CMC: Revocation works with an unknown revRequest.issuer (cfu) - Bugzilla Bug #1541853 - ProfileService: config values with backslashes have backslashes removed (ftweedal) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, - # Bugzilla Bug #1404075 - CC: Audit Events: Update the default audit - # Bugzilla Bug #1501436 - TPS CS.cfg should be reflected with the- Updated jss, nuxwdog, and openssl dependencies - ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - Bugzilla Bug #1402280 - CA Cloning: Failed to update number range in few cases (ftweedal) - Bugzilla Bug #1428021 - CC: shared token storage and retrieval mechanism (cfu) - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause error (cfu) - Bugzilla Bug #1498957 - pkidestroy does not work with nuxwdog (alee) - Bugzilla Bug #1520277 - PR_FILE_NOT_FOUND_ERROR during pkispawn (alee) - Bugzilla Bug #1520526 - p12 admin certificate is missing when certificate is signed Externally (edewata) - Bugzilla Bug #1523410 - Unable to have non "pkiuser" owned CA instance (alee) - Bugzilla Bug #1523443 - HAProxy rejects OCSP responses due to missing nextupdate field (ftweedal) - Bugzilla Bug #1526881 - Not able to setup CA with ECC (mharmsen) - Bugzilla Bug #1532759 - pkispawn seems to be leaving our passwords in several different files after installation completes (alee) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core,- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - Bugzilla Bug #1466066 - CC: Secure removal of secret data storage (jmagne) - Bugzilla Bug #1518096 - ExternalCA: Failures in ExternalCA when tried to setup with CMC signed certificates (cfu) - ########################################################################## - # RHCS 9.3: - ########################################################################## - # Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- dogtagpki Pagure Issue #2853 - Cleanup spec file conditionals- Patch applying check-ins since 10.5.1-1- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- ########################################################################## - # RHEL 7.5: - ########################################################################## - Bugzilla Bug #1473452 - Rebase pki-core to latest upstream 10.5.x release (RHEL) - ########################################################################## - # RHCS 9.3: - ########################################################################## - #Bugzilla Bug #1471303 - Rebase redhat-pki, redhat-pki-theme, pki-core, and- #Bugzilla Bug #1492560 - ipa-replica-install --setup-kra broken on DL0- #Require "jss >= 4.4.0-8" as a build and runtime requirement - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332 - # Bugzilla Bug #1486870 - Lightweight CA key replication fails (regressions) - # Bugzilla Bug #1485833 - Missing CN in user signing cert would cause error - # Bugzilla Bug #1487509 - pki-server-upgrade fails when upgrading from - # Bugzilla Bug #1490241 - PKCS12: upgrade to at least AES and SHA2 (FIPS) - # Bugzilla Bug #1491332 - TPS UI: need to display tokenType and tokenOrigin - # dogtagpki Pagure Issue #2764 - py3: pki.key.archive_encrypted_data: - ########################################################################## - # RHCS 9.2: - ########################################################################## - # Resolves: rhbz #1486870,1485833,1487509,1490241,1491332,1482729,1462271 - # Bugzilla Bug #1462271 - TPS incorrectly assigns "tokenOrigin" and - # Bugzilla Bug #1482729 - TPS UI: need to display tokenType and tokenOrigin- Resolves: rhbz #1463350 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1463350 - Access banner validation (edewata)- # Resolves: rhbz #1472615,1472617,1469447,1463350,1469449,1472619,1464970,1469437,1469439,1469446 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1472615 - CC: allow CA to process pre-signed CMC non-signing - # Bugzilla Bug #1472617 - CMC: cmc.popLinkWitnessRequired=false would cause - # Bugzilla Bug #1469447 - CC: CMC: check HTTPS client authentication cert - # Bugzilla Bug #1463350 - Access banner validation (edewata) - # Bugzilla Bug #1469449 - CC: allow CA to process pre-signed CMC renewal - # Bugzilla Bug #1472619 - Platform Dependent Python Import (mharmsen) - # Bugzilla Bug #1464970 - CC: CMC: replace id-cmc-statusInfo with - # Bugzilla Bug #1469437 - subsystem-cert-update command lacks --cert option - # Bugzilla Bug #1469439 - Fix Key Changeover with HSM to support SCP03 - # Bugzilla Bug #1469446 - CC: need CMC enrollment profiles for system- # Resolves: rhbz #1469432 - ########################################################################## - # RHEL 7.4: - ########################################################################## - # Bugzilla Bug #1469432 - CMC plugin default change - # Resolves CVE-2017-7537 - # Fixes BZ #1470948- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1458043 - Key recovery on token fails with invalid public key error on KRA (alee) - Bugzilla Bug #1460764 - CC: CMC: check HTTPS client authentication cert against CMC signer (cfu) - Bugzilla Bug #1461533 - Unable to find keys in the p12 file after deleting the any of the subsystem certs from it (ftweedal)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret) using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne) - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing certificate requests (cfu) - Bugzilla Bug #1419777 - CC: allow CA to process pre-signed CMC revocation non-signing cert requests (cfu) - Bugzilla Bug #1458047 - change the way aes clients refer to aes keysets (alee) - Bugzilla Bug #1458055 - dont reuse IVs in the CMC code (alee) - Bugzilla Bug #1460028 - In keywrap mode, key recovery on KRA with HSM causes KRA to crash (ftweedal)- Require "selinux-policy-targeted >= 3.13.1-159" as a runtime requirement - Require "tomcatjss >= 7.2.1-4" as a build and runtime requirement - ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS enabled system (edewata) - Bugzilla Bug #1447144 - CA brought down during separate KRA instance creation (edewata) - Bugzilla Bug #1447762 - pkispawn fails occasionally with this failure ACCESS_SESSION_ESTABLISH_FAILURE (edewata) - Bugzilla Bug #1454450 - SubCA installation failure with 2 step installation in fips enabled mode (edewata) - Bugzilla Bug #1456597 - Certificate import using pki client-cert-import is asking for password when already provided (edewata) - Bugzilla Bug #1456940 - Build failure due to Pylint issues (cheimes) - Bugzilla Bug #1458043 - Key recovery using externalReg fails with java null pointer exception on KRA (alee) - Bugzilla Bug #1458379 - Upgrade script for keepAliveTimeout parameter (edewata) - Bugzilla Bug #1458429 - client-cert-import --ca-cert should import CA cert with trust bits "CT,C,C" (edewata) - ########################################################################## - # RHCS 9.2: - ########################################################################## - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1393633 - Creating symmetric key (sharedSecret) using tkstool is failing when RHEL 7.3 is in FIPS mode. (jmagne) - Bugzilla Bug #1445519 - CA Server installation with HSM fails (jmagne) - Bugzilla Bug #1452617 - Unable to create IPA Sub CA (ftweedal) - Bugzilla Bug #1454471 - Enabling all subsystems on startup (edewata) - Bugzilla Bug #1455617 - Key recovery on token fails because key record is not marked encrypted (alee)- Bugzilla Bug #1454603 - Unable to install IPA server due to pkispawn error (mharmsen)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1419761 - CC: allow CA to process pre-signed CMC renewal non-signing cert requests (cfu) - Bugzilla Bug #1447080 - CC: CMC: allow enrollment key signed (self-signed) CMC with identity proof (cfu) - Bugzilla Bug #1447144 - CA brought down during separate KRA instance creation (mharmsen) - Bugzilla Bug #1448903 - exception Invalid module "--ignore-banner" when defined in ~/.dogtag/pki.conf and run pki pkcs12-import --help (edewata) - Bugzilla Bug #1450143 - CA installation with HSM in FIPS mode fails (jmagne) - Bugzilla Bug #1452123 - CA CS.cfg shows default port (mharmsen) - Bugzilla Bug #1452250 - Inconsistent CERT_REQUEST_PROCESSED event in ConnectorServlet. (edewata) - Bugzilla Bug #1452340 - Ensuring common audit log correctness (edewata) - Bugzilla Bug #1452344 - Adding serial number into CERT_REQUEST_PROCESSED audit event. (edewata)- ########################################################################## - # RHEL 7.4: - ########################################################################## - Bugzilla Bug #1386303 - cannot extract generated private key from KRA when HSM is used. (alee) - Bugzilla Bug #1446364 - pkispawn returns before tomcat is ready (cheimes) - Bugzilla Bug #1447145 - CMC: cmc.popLinkWitnessRequired=false would cause error (cfu) - Bugzilla Bug #1448203 - CAInfoService: retrieve KRA-related values from the KRA (ftweedal) - Bugzilla Bug #1448204 - pkispawn of clone install fails with InvalidBERException (ftweedal) - Bugzilla Bug #1448521 - kra unable to extract symmetric keys generated on thales hsm (alee) - Updated "jss" build and runtime requirements (mharmsen) - ########################################################################## - # RHCS 9.2: - ########################################################################## - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne)- ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1303683 - dogtag should support GSSAPI based auth in conjuction with FreeIPA (ftweedal) - Bugzilla Bug #1385208 - RHCS 9.1 RC5 CA in the certificate profiles the startTime parameter is not working as expected. (jmagne) - Bugzilla Bug #1419756 - CC: allow CA to process pre-signed CMC non-signing certificate requests (cfu) - Bugzilla Bug #1426754 - PKCS12: upgrade to at least AES and SHA2 (ftweedal) - Bugzilla Bug #1445088 - profile modification cannot remove existing config parameters (ftweedal) - Bugzilla Bug #1445535 - CC: Crypto Operation (AES Encryption/Decryption) (RHEL) (alee) - Bugzilla Bug #1446874 - Missing ClientIP and ServerIP in audit log when pki CLI terminates SSL connection (edewata) - Bugzilla Bug #1446875 - Session timeout for PKI console (RHEL) (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1404480 - CC: Crypto Operation (AES Encryption/Decryption) (RHCS) (alee)- ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1282504 - Installing pki-server in container reports scriptlet failed, exit status 1 (jpazdziora) - Bugzilla Bug #1400149 - pkispawn fails to create CA subsystem on FIPS enabled system (edewata) - Bugzilla Bug #1410650 - [RFE] Add SCP03 support for sc 7 g & d cards (RHEL) (jmagne) - Bugzilla Bug #1437591 - cli authentication using expired cert throws an exception (edewata) - Bugzilla Bug #1437602 - non-CA cli looks for CA in the instance during a request (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1274086 - [RFE] Add SCP03 support for sc 7 g & d cards (RHCS) (jmagne) - ############################################################################ - # Common Criteria - ############################################################################ - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures (edewata) - Bugzilla Bug #1417307 - CC: Audit Review /Searches (edewata) - Bugzilla Bug #1419737 - CC: CMC: id-cmc-popLinkWitnessV2 feature implementation (cfu)- Require "nss >= 3.28.3" as a build and runtime requirement - Require "jss >= 4.4.0-4" as a build and runtime requirement - Require "tomcatjss >= 7.2.1-3" as a build and runtime requirement - dogtagpki Pagure Issue #2612 - Unable to clone due to pki pkcs12-cert-find failure (edewata) - ############################################################################ - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4 - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.4.x - ############################################################################ - # RHEL 7.4: - ############################################################################ - ############################################################################ - # RHCS 9.2: - ############################################################################ - ############################################################################ - # Common Criteria - ############################################################################ - Bugzilla Bug #1419734 - CC: CMC: id-cmc-identityProofV2 feature implementation (cfu) - Bugzilla Bug #1419742 - CC: CMC: provide Proof of Possession for encryption cert requests (cfu) - Bugzilla Bug #1404080 - CC: add audit event: various SSL/TLS failures (edewata) - Bugzilla Bug #1428020 - CC: CMC feature support: provided issuance protection cert mechanism (cfu)- Require "jss >= 4.4.0-1" as a build and runtime requirement - Require "tomcatjss >= 7.2.1-1" as a build and runtime requirement - ############################################################################ - Bugzilla Bug #1394309 - Rebase pki-core to 10.4.x in RHEL-7.4 - Bugzilla Bug #1394315 - Rebase redhat-pki, redhat-pki-theme, pki-core, and pki-console to 10.4.x - ############################################################################ - # RHEL 7.4: - ############################################################################ - Bugzilla Bug #1222557 - ECDSA Certificates Generated by Certificate System 8.1 fail NIST validation test with parameter field. (cfu) - Bugzilla Bug #1238684 - Generting Symmetric key fails with key-generate when --usages verify (vakwetu) - Bugzilla Bug #1246635 - user-cert-add --serial CLI request to secure port with remote CA shows authentication failure (edewata) - Bugzilla Bug #1249400 - CA EE: Submit caUserCert request without uid does not show proper error message (vakwetu) - Bugzilla Bug #1305993 - Add profile component that copies CN to SAN (ftweedal) - Bugzilla Bug #1316653 - pki ca-cert-request-submit fails presumably because of missing authentication even if it should not require any (edewata) - Bugzilla Bug #1325071 - add options to enable/disable cert or crl publishing. (vakwetu) - Bugzilla Bug #1330800 - Failed to start pki-tomcatd Service ("ipa-cacert-manage renew" failed?) (edewata) - Bugzilla Bug #1368410 - Misleading Logging for HSM (edewata) - Bugzilla Bug #1372052 - Unable to search certificate requests using the latest request ID (edewata) - Bugzilla Bug #1375347 - Typo in comment line of UserPwdDirAuthentication.java (edewata) - Bugzilla Bug #1376226 - IPA replica-prepare failed with error "Profile caIPAserviceCert Not Found" (ftweedal) - Bugzilla Bug #1376488 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - Bugzilla Bug #1378275 - two-step externally-signed CA installation fails due to missing AuthorityID (ftweedal) - Bugzilla Bug #1378277 - Spurious host authority entries created (ftweedal) - Bugzilla Bug #1378527 - Miscellaneous Minor Changes (edewata) - Bugzilla Bug #1381084 - KRA installation failed against externally-signed CA with partial certificate chain (edewata) - Bugzilla Bug #1382066 - Problems with FIPS mode (edewata) - Bugzilla Bug #1386371 - Remove xenroll.dll from pki-core (mharmsen) - Bugzilla Bug #1386424 - Fix packaging duplicates of classes in multiple jar files (edewata) - Bugzilla Bug #1391737 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (RHEL 7) (edewata) - Bugzilla Bug #1392068 - [RFE] add express archivals and retrievals from KRA (vakwetu) - Bugzilla Bug #1395817 - Unable to install subordinate CA with HSM in FIPS mode (edewata) - Bugzilla Bug #1397200 - pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config (jmagne) - Bugzilla Bug #1399862 - Dogtag 10.3.9 Man Pages (edewata) - Bugzilla Bug #1404881 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - Bugzilla Bug #1405654 - Token memory not wiped after key deletion (RHEL) (jmagne) - Bugzilla Bug #1409946 - Request ID undefined for CA signing certificate (vakwetu) - Bugzilla Bug #1409949 - CA Certificate Issuance Date displayed on CA website incorrect (vakwetu) - Bugzilla Bug #1410650 - [RFE] Add SCP03 support (RHEL) (jmagne) - Bugzilla Bug #1411428 - Unable to create a CA clone in FIPS (edewata) - Bugzilla Bug #1412211 - Unable to set up KRA in FIPS (edewata) - Bugzilla Bug #1412681 - update to 7.3 IPA with otpd bugfixes, tomcat will not finish start, hangs (ftweedal) - Bugzilla Bug #1413132 - pki-tomcat for 10+ minutes before generating cert (edewata) - Bugzilla Bug #1413136 - Problem with default AJP hostname in IPv6 environment. (edewata) - ############################################################################ - # RHCS 9.2: - ############################################################################ - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1 (cfu) - Bugzilla Bug #1274086 - [RFE] Add SCP03 support (RHCS) (jmagne) - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed tokens (jmagne) - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working when a token is physically damaged and a temporary token is issued (jmagne) - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches (cfu) - Bugzilla Bug #1381635 - Token format with external reg fails when op.format.externalRegAddToToken.revokeCert=true (cfu) - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when set on a token (jmagne) - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (RHCS 9) (edewata) - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (RHCS) (jmagne) - Bugzilla Bug #1404900 - Dogtag 10.3.9 logging properties (edewata) - Bugzilla Bug #1405655 - Token memory not wiped after key deletion (RHCS) (jmagne) - ############################################################################- ## RHEL 7.3.z Batch Update 4 - Bugzilla Bug #1429492 - Add profile component that copies CN to SAN (ftweedal)- ## RHCS 9.1.z Batch Update 3 - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - ## RHEL 7.3.z Batch Update 3 - Bugzilla Bug #1417063 - ECDSA Certificates Generated by Certificate System 8.1 fail NIST validation test with parameter field. (cfu) - Bugzilla Bug #1417064 - Unable to search certificate requests using the latest request ID (edewata) - Bugzilla Bug #1417065 - CA Certificate Issuance Date displayed on CA website incorrect (alee) - Bugzilla Bug #1417066 - update to 7.3 IPA with otpd bugfixes, tomcat will not finish start, hangs (ftweedal) - Bugzilla Bug #1417067 - pki-tomcat for 10+ minutes before generating cert (edewata) - Bugzilla Bug #1417190 - Problem with default AJP hostname in IPv6 environment. (edewata)- Separate original patches into RHEL and RHCS portions - ## RHEL 7.3.z Batch Update 2 - Bugzilla Bug #1404176 - logging properties and man pages (edewata) - Bugzilla Bug #1405328 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - ## RHCS 9.1.z Batch Update 2 - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne) - Bugzilla Bug #1404900 - RHCS logging properties (edewata)- ## RHEL 7.3.z Batch Update 2 - Bugzilla Bug #1404173 - user-cert-add --serial CLI request to secure port with remote CA shows authentication failure (edewata) - Bugzilla Bug #1404175 - pki ca-cert-request-submit fails presumably because of missing authentication even if it should not require any (edewata) - Bugzilla Bug #1404178 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI [pki-base] (edewata) - Bugzilla Bug #1404172 - Unable to install subordinate CA with HSM in FIPS mode (edewata) - Bugzilla Bug #1403689 - pkispawn does not change default ecc key size from nistp256 when nistp384 is specified in spawn config (jmagne) - Bugzilla Bug #1404176 - logging properties and man pages (edewata) - ## RHCS 9.1.z Batch Update 2 - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI [pki-tps] (edewata) - Bugzilla Bug #1391207 - Automatic recovery of encryption cert - CA and TPS tokendb shows different certificate status (cfu) - Bugzilla Bug #1395479 - TPS throws "err=6" when attempting to format and enroll G&D Cards (jmagne)- Marked the following RHCS 9.1.z bug: Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel when TPS and TKS security db is on fips mode. (jmagne) as a duplicate of RHEL 7.3.z bug: Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) and moved the patch from the RHCS 9.1.z bug to the RHEL 7.3.z bug.- ## RHEL 7.3.z Batch Update 1 - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) (added KRA key recovery via CLI in FIPS mode) - ## RHCS 9.1.z Batch Update 1 - Reverted patches associated with Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (edewata)- ## RHEL 7.3.z Batch Update 1 - Bugzilla Bug #1390318 - CA EE: Submit caUserCert request without uid does not show proper error message (alee) - Bugzilla Bug #1390319 - Failed to start pki-tomcatd Service ("ipa-cacert-manage renew" failed?) (edewata) - Bugzilla Bug #1390320 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - Bugzilla Bug #1390321 - two-step externally-signed CA installation fails due to missing AuthorityID (ftweedal) - Bugzilla Bug #1390322 - Spurious host authority entries created (ftweedal) - Bugzilla Bug #1390324 - KRA installation failed against externally-signed CA with partial certificate chain (edewata) - Bugzilla Bug #1389757 - Problems with FIPS mode (edewata) - Bugzilla Bug #1390311 - Fix packaging duplicates of classes in multiple jar files (edewata) - Bugzilla Bug #1390325 - Typo in comment line of UserPwdDirAuthentication.java (edewata) - ## RHCS 9.1.z Batch Update 1 - Bugzilla Bug #1248553 - TPS Enrollment always goes to "ca1" (cfu) - Bugzilla Bug #1274096 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - Bugzilla Bug #1379379 - Unable to read an encrypted email using renewed tokens (jmagne) - Bugzilla Bug #1379749 - Automatic recovery of encryption cert is not working when a token is physically damaged and a temporary token is issued (jmagne) - Bugzilla Bug #1381375 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches - Bugzilla Bug #1381635 - Token format with external reg fails when op.format.externalRegAddToToken.revokeCert=true (cfu) - Bugzilla Bug #1382762 - PIN_RESET policy is not giving expected results when set on a token (jmagne) - Bugzilla Bug #1382862 - TPS token enrollment fails to setupSecureChannel when TPS and TKS security db is on fips mode. (jmagne) - Bugzilla Bug #1386257 - Changes to target.agent.approve.list parameter is not reflected in the TPS Web UI (edewata)- PKI TRAC Ticket #1527 - TPS Enrollment always goes to "ca1" (cfu) - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - PKI TRAC Ticket #2478 - pkispawn fails as it is not able to find openssl as a dependency package (mharmsen) - PKI TRAC Ticket #2483 - Unable to read an encrypted email using renewed tokens (jmagne) - PKI TRAC Ticket #2496 - Cert/Key recovery is successful when the cert serial number and key id on the ldap user mismatches (cfu) - PKI TRAC Ticket #2505 - Fix packaging duplicates of classes in multiple jar files (edewata)- Revert Patch: PKI TRAC Ticket #2449 - Unable to create system certificates in different tokens (edewata) - Resolves: rhbz #1374054 - ipa-replica-install fails setting up certificate - Restores: rhbz #1319557 - pkispawn KRA instance is failing server - Removes from Errata: rhbz #1372041 - Unable to create system certificates in different tokens- PKI TRAC Ticket #1638 - Lightweight CAs: revoke certificate on CA deletion (ftweedal) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (edewata) - PKI TRAC Ticket #2443 - Prevent deletion of host CA's keys if LWCA entry deleted (ftweedal) - PKI TRAC Ticket #2444 - Authority entry without entryUSN is skipped even if USN plugin enabled (ftweedal) - PKI TRAC Ticket #2446 - pkispawn: make subject_dn defaults unique per instance name (for shared HSM) (cfu) - PKI TRAC Ticket #2447 - CertRequestInfo has incorrect URLs (vakwetu) - PKI TRAC Ticket #2449 - Unable to create system certificates in different tokens (edewata)- PKI TRAC Ticket #1578 - Authentication Instance Id PinDirEnrollment with authType value as SslclientAuth is not working (jmagne) - PKI TRAC TIcket #2414 - pki pkcs12-cert-del shows a successfully deleted message when a wrong nickname is provided (gkapoor) - PKI TRAC Ticket #2423 - pki_ca_signing_token when not specified does not fallback to pki_token_name value (edewata) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (akasurde) - ticket remains open - PKI TRAC Ticket #2439 - Outdated deployment descriptors in upgraded server(edewata)- PKI TRAC Ticket #690 - [MAN] pki-tools man pages (mharmsen) - CMCEnroll - PKI TRAC Ticket #833 - pki user-mod fullName="" gives an error message "PKIException: LDAP error (21): error result" (edewata) - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade. (cheimes, edewata, mharmsen) - PKI TRAC Ticket #2432 - Kra-selftest behavior is not as expected (edewata) - PKI TRAC Ticket #2436 - Dogtag 10.3.6: Miscellaneous Enhancements (edewata, mharmsen) - PKI TRAC Ticket #2437 - TPS UI: while adding certs for users from TPSUI pem format with/without header works while pkcs7 with header is not allowed (edewata) - PKI TRAC Ticket #2440 - Optional CA signing CSR for migration (edewata)- Bugzilla Bug #1366465 - Errata TPS upgrade test fails- PKI TRAC Ticket #978 - TPS connector man page: add revocation routing info (cfu) - PKI TRAC Ticket #1285 - [MAN] Apply 'generateCRMFRequest() removed from Firefox' workarounds to appropriate 'pki' man page (jmagne) - PKI TRAC Ticket #2246 - [MAN] Man Page: AuditVerify (cfu) - PKI TRAC Ticket #2381 - Throws exception while providing invalid module. (edewata) - PKI TRAC Ticket #2383 - CLI :: pki client-cert-request --extractable should accept only boolean value (edewata) - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter beyond CA signing cert in case of external or existing CA (cfu) - PKI TRAC Ticket #2399 - Dogtag 10.3.5: Miscellaneous Enhancements (akasurde, alee, cheimes, edewata, jmagne, mharmsen) - PKI TRAC Ticket #2401 - pkispawn calls dnsdomainname even if it does not rpm-require hostname (mharmsen) - PKI TRAC Ticket #2402 - Conflict in file ownership in pki-base and pki-server (cheimes) - PKI TRAC Ticket #2403 - Deployment problem with RESTEasy 3.0.17 (edewata) - PKI TRAC Ticket #2406 - Make starting CRL Number configurable (jmagne) - PKI TRAC Ticket #2412 - pki client-cert-import --trust option does not apply the specified trust bits (alee) - PKI TRAC Ticket #2418 - [TPS] Some template substitution didn't happen during installation (alee) - PKI TRAC Ticket #2420 - CA subsystem OSCP responder fails when LWCAs are not used (ftweedal) - PKI TRAC Ticket #2421 - Incorrect SELinux contexts Installation/Configuration (edewata) - PKI TRAC Ticket #2424 - ipa-ca-install fails on replica when IPA server is converted from CA-less to CA-full (edewata) - PKI TRAC Ticket #2428 - broken request links for CA's system certs in agent request viewing (cfu) - PKI TRAC Ticket #2430 - CA Agent certificate list is not sorted by serial number in migration case (jmagne) - PKI TRAC Ticket #2431 - Errors noticed during ipa server upgrade. (mharmsen) - PKI TRAC Ticket #2433 - Lightweight CA GET /chain returns bogus PEM data (ftweedal)- PKI TRAC Ticket #691 - [MAN] pki-server man pages (mharmsen) - PKI TRAC Ticket #1114 - [MAN] Generting Symmetric key fails with key-generate when --usages verify is passed (jmagne) - PKI TRAC Ticket #1306 - [RFE] Add granularity to token termination in TPS (cfu) - PKI TRAC Ticket #1308 - [RFE] Provide ability to perform off-card key generation for non-encryption token keys (cfu) - PKI TRAC Ticket #1405 - [MAN] Add additional HSM details to 'pki_default.cfg' & 'pkispawn' man pages (mharmsen) - PKI TRAC Ticket #1607 - [MAN] man pkispawn has inadequate description for shared vs non shared tomcat instance installation (mharmsen) - PKI TRAC Ticket #1664 - [BUG] Add ability to disallow TPS to enroll a single user on multiple tokens. (jmagne) - PKI TRAC Ticket #1711 - CLI :: pki-server ca-cert-request-find throws IOError (edewata, ftweedal) - PKI TRAC Ticket #2285 - freeipa fails to start correctly after pki-core update on upgraded system (ftweedal) - PKI TRAC Ticket #2311 - When pki_token_name=Internal, consider normalizing it to "internal" (mharmsen) - PKI TRAC Ticket #2349 - Separated TPS does not automatically receive shared secret from remote TKS (jmagne) - PKI TRAC Ticket #2364 - CLI :: pki-server ca-cert-request-show throws attribute error (ftweedal) - PKI TRAC Ticket #2368 - pki-server subsystem subcommands throws error with --help option (edewata) - PKI TRAC Ticket #2374 - KRA cloning overwrites CA signing certificate trust flags (edewata) - PKI TRAC Ticket #2380 - Pki-server instance commands throws exception while specifying invalid parameters. (edewata) - PKI TRAC Ticket #2384 - CA installation with HSM prompts for HSM password during silent installation (edewata) - PKI TRAC Ticket #2385 - Upgraded CA lacks ca.sslserver.certreq in CS.cfg (ftweedal) - PKI TRAC Ticket #2387 - Add config for default OCSP URI if none given (ftweedal) - PKI TRAC Ticket #2388 - CA creation responds 500 if certificate issuance fails (ftweedal) - PKI TRAC Ticket #2389 - Installation: subsystem certs could have notAfter beyond CA signing cert in case of external or existing CA (cfu) - PKI TRAC Ticket #2390 - Dogtag 10.3.4: Miscellaneous Enhancements (akasurde, edewata)- PKI TRAC Ticket #2373 - Fedora 25: RestEasy 3.0.6 ==> 3.0.17 breaks pki-core (ftweedal)- Updated release number to 10.3.3-1- Updated version number to 10.3.3-0.1- Provided cleaner runtime dependency separation- Updated tomcatjss version dependencies- Updated 'java', 'java-headless', and 'java-devel' dependencies to 1:1.8.0.- Updated tomcat version dependencies- Updated version number to 10.3.2-1- Updated version number to 10.3.2-0.1- Updated version number to 10.3.1-1 (to allow upgrade from 10.3.0.b1)- Updated version number to 10.3.0-1- Build for F24 beta- PKI TRAC Ticket #2255 - PKCS #12 backup does not contain trust attributes.- Updated build for F24 alpha- PKI TRAC Ticket #1625 - Allow multiple ACLs of same name (union of rules) [ftweedal] - PKI TRAC Ticket #2237 - Add CRL dist points extension to OIDMap unconditionally [edewata] - PKI TRAC Ticket #1803 - Removed unnecessary URL encoding for admin cert request. [edewata] - PKI TRAC Ticket #1742 - Added support for cloning 3rd-party CA certificates. [edewata] - PKI TRAC Ticket #1482 - Added TPS token filter dialog. [edewata] - PKI TRAC Ticket #1808 - Fixed illegal token state transition via TEMP_LOST. [edewata]- Build for F24 alpha- PKI Trac Ticket #1399 - Move java components out of pki-base- PKI TRAC Ticket #1850 - Rename DRMTool --> KRATool- PKI TRAC Ticket #1714 - mod_revocator and mod_nss dependency for tps should be removed- PKI TRAC Ticket #1623 - Runtime dependency on python-nss is missing- Updated version number to 10.3.0-0.1- Added dep on tomcat-servlet-3.1-api [Fedora 23 and later] or dep on tomcat-servlet-3.0-api [Fedora 22 and later] to pki-tools - Updated dep on tomcatjss [Fedora 23 and later]- Updated dep on policycoreutils-python-utils [Fedora 23 and later]- Updated version number to 10.2.7-0.1- Update release number for release build- Remove setup directory and remaining Perl dependencies- Remove ExcludeArch directive- Updated version number to 10.2.6-0.1- Update release number for release build- Resolves rhbz #1230970 - Errata TPS tests for rpm verification failed- Updated version number to 10.2.5-0.1- Update release number for release build- Updated nuxwdog and tomcatjss requirements (alee)- Updated version number to 10.2.4-0.1 - Added nuxwdog systemd files- Update release number for release build- Reverted version number back to 10.2.3-0.1 - Added support for Tomcat 8.- Updated version number to 10.3.0-0.1- Updated version number to 10.2.3-0.1- Update release number for release build- Updated version number to 10.2.2-0.1 - Moved web application deployment locations. - Updated Resteasy and Jackson dependencies. - Added missing python-lxml build dependency.- Update release number for release build- PKI TRAC Ticket #1187 - mod_perl should be removed from requirements for 10.2 - PKI TRAC Ticket #1205 - Outdated selinux-policy dependency. - Removed perl(XML::LibXML), perl-Crypt-SSLeay, and perl-Mozilla-LDAP runtime dependencies- Change resteasy dependencies for F22+- Ticket 1198 Bugzilla 1158410 add TLS range support to server.xml by default and upgrade (cfu) - PKI Trac Ticket #1211 - New release overwrites old source tarball (mharmsen) - up the release number to 0.2- Updated version number to 10.2.1-0.1. - Added CLIs to simplify generating user certificates - Added enhancements to KRA Python API - Added a man page for pki ca-profile commands. - Added python api docs- Disable pylint dependency for RHEL builds - Added jakarta-commons-httpclient requirements - Added tomcat version for RHEL build - Added resteasy-base-client for RHEL build- PKI TRAC Ticket #1130 - Add RHEL/CentOS conditionals to spec- Update release number for release build- PKI TRAC Ticket #1017 - Rename pki-tps-tomcat to pki-tps- Merged jmagne@redhat.com's spec file changes from the stand-alone 'pki-tps-client' package needed to build/run the native 'tpsclient' command line utility into this 'pki-core' spec file under the 'tps' package. - Original tps libararies must be built to support this native utility. - Modifies tps package from 'noarch' into 'architecture-specific' package- PKI TRAC Ticket #1127 - Remove 'pki-ra', 'pki-setup', and 'pki-silent' packages . . .- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild- Respin to include the applet files with the rpm install. No change to spec file needed.- Bugzilla Bug #1120045 - pki-core: Switch to java-headless (build)requires -- drop dependency on java-atk-wrapper - Removed 'java-atk-wrapper' dependency from 'pki-server'- PKI TRAC Ticket #832 - Remove legacy 'systemctl' files . . .- Update rawhide build- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild- Use Requires: java-headless rebuild (#1067528)- Added option to build without server packages. - Replaced Jettison with Jackson. - Added python-nss build requirement - Bugzilla Bug #1057959 - pkispawn requires policycoreutils-python - TRAC Ticket #840 - pkispawn requires policycoreutils-python - Updated requirements for resteasy - Added template files for archive, retrieve and generate key requests to the client package.- Trac Ticket 788 - Clean up spec files - Update release number for release build - Updated requirements for resteasy- Change release number for beta build- Updated requirements for tomcat- Removed additional /var/run, /var/lock references.- Removed delivery of /var/lock and /var/run directories for fedora 20.- Moved Tomcat-based TPS into pki-core.- Listed new packages required during build, due to issues reported by pylint. - Packages added: python-requests, python-ldap, libselinux-python, policycoreutils-python- Added pylint scan to the build process.- Added man pages for upgrade tools.- Cleaned up the code to install man pages.- Reorganized deployment tools.- Bugzilla Bug 973224 - resteasy-base must be split into subpackages to simplify dependencies- Updated dependencies to Java 1.7.- TRAC Ticket 606 - add restart / start at boot info to pkispawn man page - TRAC Ticket 610 - Document limitation in using GUI install - TRAC Ticket 629 - Package ownership of '/usr/share/pki/etc/' directory- Change release number for 10.1 development- Fixed incorrect JNI_JAR_DIR.- TRAC Ticket 605 Junit internal function used in TestRunner, breaks F19 build- TRAC Ticket 604 Added fallback methods for pkispawn tests- Added default pki.conf in /usr/share/pki/etc - Create upgrade tracker on install and remove it on uninstall- Change release number for official release.- Added %pretrans script for f19 - Added java-atk-wrapper dependency- Added pki-server-upgrade script and pki.server module. - Call upgrade scripts in %post for pki-base and pki-server.- Added dependency on commons-io.- Add /var/log/pki and /var/lib/pki directories- Run pki-upgrade on post server installation.- Added dependency on python-lxml.- Added pki-upgrade script.- Updated version number to 10.0.2-0.1.- Renamed base/deploy to base/server. - Moved pki.conf into pki-base. - Removed redundant pki/server folder declaration.- Removed jython dependency- Added minimum python-requests version.- Bugzilla Bug #919476 - pkispawn crashes due to dangling symlink to jss4.jar- Added dependency on python-requests. - Reorganized Python module packaging.- Added dependency on python-ldap.- TRAC Ticket #517 - Clean up theme dependencies - TRAC Ticket #518 - Remove UI dependencies from pkispawn . . .- Removed runtime dependency on 'pki-server-theme' to resolve Bugzilla Bug #916134 - unresolved dependency in pki-server: pki-server-theme- TRAC Ticket 214 - Missing error description for duplicate user - TRAC Ticket 213 - Add nonces for cert revocation - TRAC Ticket 367 - pkidestroy does not remove connector - TRAC Ticket #430 - License for 3rd party code - Bugzilla Bug 839426 - [RFE] ECC CRL support for OCSP - Fix spec file to allow f17 to work with latest tomcatjss - TRAC Ticket 466 - Increase root CA validity to 20 years - TRAC Ticket 469 - Fix tomcatjss issue in spec files - TRAC Ticket 468 - pkispawn throws exception - TRAC Ticket 191 - Mapping HTTP Exceptions to HTTP error codes - TRAC Ticket 271 - Dogtag 10: Fix 'status' command in 'pkidaemon' . . . - TRAC Ticket 437 - Make admin cert p12 file location configurable - TRAC Ticket 393 - pkispawn fails when selinux is disabled - Punctuation and formatting changes in man pages - Revert to using default config file for pkidestroy - Hardcode setting of resteasy-lib for instance - TRAC Ticket 436 - Interpolation for pki_subsystem - TRAC Ticket 433 - Interpolation for paths - TRAC Ticket 435 - Identical instance id and instance name - TRAC Ticket 406 - Replace file dependencies with package dependencies- TRAC Ticket #430 - License for 3rd party code- TRAC Ticket #469 - Dogtag 10: Fix tomcatjss issue in pki-core.spec and dogtag-pki.spec . . . - TRAC Ticket #468 - pkispawn throws exception- Replaced file dependencies with package dependencies- Updated man pages- Update to official release for rc1- TRAC Ticket #315 - Man pages for pkispawn/pkidestroy. - Added place-holders for 'pki.1' and 'pki_default.cfg.5' man pages.- Added system-wide configuration /etc/pki/pki.conf. - Removed redundant lines in %files.- Moved default deployment configuration to /etc/pki.- Cleaned up spec file to provide only support rhel 7+, f17+ - Added resteasy-base dependency for rhel 7 - Update cmake version- Update release to b3- Removed dependency on CA, KRA, OCSP, TKS theme packages.- Renamed pki-common-theme to pki-server-theme.- TRAC Ticket #395 - Dogtag 10: Add a Tomcat 7 runtime requirement to 'pki-server'- Update release to b2- TRAC Ticket #350 - Dogtag 10: Remove version numbers from PKI jar files . . .- Added Obsoletes for pki-selinux- Remove build of pki-selinux for f18, use system policy instead- Update required tomcatjss version - Added net-tools dependency- Update selinux-policy version to fix error from latest policy changes- Fix typo in selinux policy versions- Added build requires for correct version of selinux-policy-devel- Update release to b1- Merged pki-silent into pki-server.- Renamed "shared" folder to "server".- Added required selinux versions for new policy.- Added Provides to packages replacing obsolete packages.- Update release to a2- Modified CMake to use RPM version number- Added VERSION file- Merged pki-setup into pki-server- Added Conflicts for IPA 2.X - Added build requires for zip to work around mock problem- TRAC Ticket #312 - Dogtag 10: Automatically restart any running instances upon RPM "update" . . . - TRAC Ticket #317 - Dogtag 10: Move "pkispawn"/"pkidestroy" from /usr/bin to /usr/sbin . . .- Fixed pki-server to include everything in shared dir.- Added build dependency on redhat-rpm-config.- Merged Javadoc packages.- Added pki-tomcat.jar.- Moved webapp creation code into pkispawn.- Split pki-client.jar into pki-certsrv.jar and pki-tools.jar.- Merged pki-native-tools and pki-java-tools into pki-tools. - Modified pki-server to depend on pki-tools.- Split pki-common into pki-base and pki-server. - Merged pki-util into pki-base. - Merged pki-deploy into pki-server.- Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 17 - Changed Dogtag 10 build-time and runtime requirements for 'pki-deploy' - Altered PKI Package Dependency Chain (top-to-bottom): pki-ca, pki-kra, pki-ocsp, pki-tks --> pki-deploy --> pki-common- Added pki-client.jar.- Merged pki-jndi-realm.jar into pki-cmscore.jar.- PKI TRAC Task #254 - Dogtag 10: Fix spec file to build successfully via mock on Fedora 17 . . .- Moved 'pki-jndi-real.jar' link from 'tomcat6' to 'tomcat' (Tomcat 7)- Updated release of 'tomcatjss' to rely on Tomcat 7 for Fedora 18- Added CLI for REST services- Integration of Tomcat 7 - Addition of centralized 'pki-tomcatd' systemd functionality to the PKI Deployment strategy - Removal of 'pki_flavor' attribute- BZ 813075 - selinux denial for file size access- Bug 745278 - [RFE] ECC encryption keys cannot be archived- Replaced candlepin-deps with resteasy- Added option to build without Javadoc- BZ 802396 - Change location of TOMCAT_LOG to match tomcat6 changes - Corrected patch selected for selinux f17 rules- Corrected 'junit' dependency check- Initial attempt at PKI deployment framework described in 'http://pki.fedoraproject.org/wiki/PKI_Instance_Deployment'.- Added support for pki-jndi-realm in tomcat6 in pki-common and pki-kra. - Ticket #69.- For 'mock' purposes, removed platform-specific logic from around the 'patch' files so that ALL 'patch' files will be included in the SRPM.- Removed dependency on OSUtil.- 'pki-selinux' - Added platform-dependent patches for SELinux component - Bugzilla Bug #739708 - Selinux fix for ephemeral ports (F16) - Bugzilla Bug #795966 - pki-selinux policy is kind of a mess (F17)- Added dependency on Apache Commons Codec.- Add '-DSYSTEMD_LIB_INSTALL_DIR' override flag to 'cmake' to address changes in fundamental path structure in Fedora 17 - 'pki-setup' - Hard-code Perl dependencies to protect against bugs such as Bugzilla Bug #772699 - Adapt perl and python fileattrs to changed file 5.10 magics - 'pki-selinux' - Bugzilla Bug #795966 - pki-selinux policy is kind of a mess- Integrated 'pki-kra' into 'pki-core' - Integrated 'pki-ocsp' into 'pki-core' - Integrated 'pki-tks' into 'pki-core' - Bugzilla Bug #788787 - added 'junit'/'junit4' build-time requirements- Updated package version number- Added resteasy-jettison-provider-2.3-RC1.jar to pki-setup- Added JUnit tests- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token (cfu) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #744797 - KRA key recovery (retrieve pkcs#12) fails after the in-place upgrade( CS 8.0->8.1) (cfu) - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #746367 - Typo in the profile name. (jmagne) - Bugzilla Bug #737122 - DRM: during archiving and recovering, wrapping unwrapping keys should be done in the token (cfu) - Bugzilla Bug #749927 - Java class conflicts using Java 7 in Fedora 17 (rawhide) . . . (mharmsen) - Bugzilla Bug #749945 - Installation error reported during CA, DRM, OCSP, and TKS package installation . . . (mharmsen) - 'pki-silent'- Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . (mharmsen) - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-setup' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - Bugzilla Bug #737192 - Need script to upgrade proxy configuration (alee) - 'pki-symkey' - Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode (hsm+NSS). (jmagne) - 'pki-native-tools' - Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk) - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-util' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - Bugzilla Bug #737218 - Incorrect request attribute name matching ignores request attributes during request parsing. (awnuk) - Bugzilla Bug #730162 - TPS/TKS token enrollment failure in FIPS mode (hsm+NSS). (jmagne) - 'pki-selinux' - Bugzilla Bug #739708 - pki-selinux lacks rules in F16 (alee) - 'pki-ca' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - Bugzilla Bug #730146 - SSL handshake picks non-FIPS ciphers in FIPS mode (cfu) - 'pki-silent' - Bugzilla Bug #739201 - pkisilent does not take arch into account as Java packages migrated to arch-dependent directories (mharmsen)- 'pki-setup' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-symkey' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-java-tools' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-common' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . . - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-silent' - Bugzilla Bug #734590 - Refactor JNI libraries for Fedora 16+ . . .- 'pki-setup' - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-ca' - Bugzilla Bug #699809 - Convert CS to use systemd (alee) - 'pki-common' - Bugzilla Bug #699809 - Convert CS to use systemd (alee)- 'pki-setup' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-symkey' - 'pki-native-tools' - Bugzilla Bug #717643 - Fopen without NULL check and other Coverity issues (awnuk) - Bugzilla Bug #730801 - Coverity issues in native-tools area (awnuk) - 'pki-util' - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #700522 - pki tomcat6 instances currently running unconfined, allow server to come up when selinux disabled (alee) - Bugzilla Bug #731741 - some CS.cfg nickname parameters not updated correctly when subsystem cloned (using hsm) (alee) - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-selinux' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-ca' - Bugzilla Bug #712931 - CS requires too many ports to be open in the FW (alee) - 'pki-silent'- 'pki-setup' - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee) - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #724861 - DRMTool: fix duplicate "dn:" records by renumbering "cn=" (mharmsen) - 'pki-common' - Bugzilla Bug #717041 - Improve escaping of some enrollment inputs like (jmagne, awnuk) - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee) - Bugzilla Bug #708075 - Clone installation does not work over NAT (alee) - Bugzilla Bug #726785 - If replication fails while setting up a clone it will wait forever (alee) - Bugzilla Bug #728332 - xml output has changed on cert requests (awnuk) - Bugzilla Bug #700505 - pki tomcat6 instances currently running unconfined (alee) - 'pki-selinux' - Bugzilla Bug #700505 - pki tomcat6 instances currently running unconfined (alee) - 'pki-ca' - Bugzilla Bug #728605 - RFE: increase default validity from 6mo to 2yrs in IPA profile (awnuk) - 'pki-silent' - Bugzilla Bug #689909 - Dogtag installation under IPA takes too much time - remove the inefficient sleeps (alee)- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - Bugzilla Bug #719007 - Key Constraint keyParameter being ignored using an ECC CA to generate ECC certs from CRMF. (jmagne) - Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding for any component value which is equal to its default value (alee) - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #720510 - Console: Adding a certificate into nethsm throws Token not found error. (jmagne) - Bugzilla Bug #719007 - Key Constraint keyParameter being ignored using an ECC CA to generate ECC certs from CRMF. (jmagne) - Bugzilla Bug #716307 - rhcs80 - DER shall not include an encoding for any component value which is equal to its default value (alee) - Bugzilla Bug #722989 - Registering an agent when a subsystem is created - does not log AUTHZ_SUCCESS event. (alee) - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #719113 - Add client usage flag to caIPAserviceCert (awnuk) - 'pki-silent'- Updated release of 'jss' - Updated release of 'tomcatjss' for Fedora 15 - 'pki-setup' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser (jdennis) - Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-symkey' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-native-tools' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #717765 - TPS configuration: logging into security domain from tps does not work with clientauth=want. (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-util' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-java-tools' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (config file and record processing) (mharmsen) - Bugzilla Bug #532548 - Tool to do DRM re-key (tweaks) (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-common' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs throws 'Invalid protocol' for OCSP subsystems (alee) - Bugzilla Bug #694569 - parameter used by pkiremove not updated (alee) - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages (alee) - Bugzilla Bug #694143 - CA Agent not returning specified request (awnuk) - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages (jmagne) - Bugzilla Bug #698885 - Race conditions during IPA installation (alee) - Bugzilla Bug #704792 - CC_LAB_EVAL: CA agent interface: SubjectID=$Unidentified$ fails audit evaluation (jmagne) - Bugzilla Bug #705914 - SCEP mishandles nicknames when processing subsequent SCEP requests. (awnuk) - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added. (jmagne) - Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs for modify/add (alee) - Bugzilla Bug #707416 - additional audit messages for GetCookie (alee) - Bugzilla Bug #707607 - Published certificate summary has list of non-published certificates with succeeded status (jmagne) - Bugzilla Bug #717813 - EV_AUDIT_LOG_SHUTDOWN audit log not generated for tps and ca on server shutdown (jmagne) - Bugzilla Bug #697939 - DRM signed audit log message - operation should be read instead of modify (jmagne) - Bugzilla Bug #718427 - When audit log is full, server continue to function. (alee) - Bugzilla Bug #718607 - CC_LAB_EVAL: No AUTH message is generated in CA's signedaudit log when a directory based user enrollment is performed (jmagne) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-selinux' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #720503 - RA and TPS require additional SELinux permissions to run in "Enforcing" mode (alee) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-ca' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser (jdennis) - Bugzilla Bug #699837 - service command is not fully backwards compatible with Dogtag pki subsystems (mharmsen) - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. (jmagne) - Bugzilla Bug #707416 - CC_LAB_EVAL: Security Domain: missing audit msgs for modify/add (alee) - Bugzilla Bug #716269 - make ra authenticated profiles non-visible on ee pages (alee) - Bugzilla Bug #718621 - CC_LAB_EVAL: PRIVATE_KEY_ARCHIVE_REQUEST occurs for a revocation invoked by EE user (awnuk) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen) - 'pki-silent' - Bugzilla Bug #695157 - Auditverify on TPS audit log throws error. (mharmsen) - Bugzilla Bug #669226 - Remove Legacy Build System (mharmsen)- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Added 'DRMTool.cfg' configuration file to inventory - 'pki-common' - 'pki-selinux' - 'pki-ca' - 'pki-silent'- 'pki-setup' - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #532548 - Tool to do DRM re-key - 'pki-common' - 'pki-selinux' - 'pki-ca' - 'pki-silent'- 'pki-setup' - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser - Bugzilla Bug #694569 - parameter used by pkiremove not updated - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - 'pki-common' - Bugzilla Bug #695403 - Editing signedaudit or transaction, system logs throws 'Invalid protocol' for OCSP subsystems - Bugzilla Bug #694569 - parameter used by pkiremove not updated - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages - Bugzilla Bug #694143 - CA Agent not returning specified request - Bugzilla Bug #695015 - Serial No. of a revoked certificate is not populated in the CA signedAudit messages - Bugzilla Bug #698885 - Race conditions during IPA installation - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #693815 - /var/log/tomcat6/catalina.out owned by pkiuser - Bugzilla Bug #699837 - service command is not fully backwards compatible with Dogtag pki subsystems - 'pki-silent'- Bugzilla Bug #695157 - Auditverify on TPS audit log throws error.- Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta) - Bugzilla Bug #693327 - Missing requires: tomcatjss - 'pki-setup' - Bugzilla Bug #690626 - pkiremove removes the registry entry for all instances on a machine - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port throws file not found exception. - 'pki-common' - Bugzilla Bug #692990 - Audit log messages needed to match CC doc: DRM Recovery audit log messages - 'pki-selinux' - 'pki-ca' - 'pki-silent'- Bugzilla Bug #693327 - Missing requires: tomcatjss- Bugzilla Bug #690950 - Update Dogtag Packages for Fedora 15 (beta) - Require "jss >= 4.2.6-15" as a build and runtime requirement - Require "tomcatjss >= 2.1.1" as a build and runtime requirement for Fedora 15 and later platforms - 'pki-setup' - Bugzilla Bug #688287 - Add "deprecation" notice regarding using "shared ports" in pkicreate -help . . . - Bugzilla Bug #688251 - Dogtag installation under IPA takes too much time - SELinux policy compilation - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #689501 - ExtJoiner tool fails to join the multiple extensions - 'pki-common' - Bugzilla Bug #683581 - CA configuration with ECC(Default EC curve-nistp521) CA fails with 'signing operation failed' - Bugzilla Bug #689662 - ocsp publishing needs to be re-enabled on the EE port - 'pki-selinux' - Bugzilla Bug #684871 - ldaps selinux link change - 'pki-ca' - Bugzilla Bug #683581 - CA configuration with ECC(Default EC curve-nistp521) CA fails with 'signing operation failed' - Bugzilla Bug #684381 - CS.cfg specifies incorrect type of comments - Bugzilla Bug #689453 - CRMFPopClient request to CA's unsecure port throws file not found exception.(profile and CS.cfg only) - 'pki-silent'- Bugzilla Bug #688763 - Rebase updated Dogtag Packages for Fedora 15 (alpha) - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA instance - Bugzilla Bug #675742 - Profile caIPAserviceCert Not Found - 'pki-setup' - Bugzilla Bug #678157 - uninitialized variable warnings from Perl - Bugzilla Bug #679574 - Velocity fails to load all dependent classes - Bugzilla Bug #680420 - xml-commons-apis.jar dependency - Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's classpath - Bugzilla Bug #673508 - CS8 64 bit pkicreate script uses wrong library name for SafeNet LunaSA - 'pki-common' - Bugzilla Bug #673638 - Installation within IPA hangs - Bugzilla Bug #678715 - netstat loop fixes needed - Bugzilla Bug #673609 - CC: authorize() call needs to be added to getStats servlet - 'pki-selinux' - Bugzilla Bug #674195: SELinux error message thrown during token enrollment - 'pki-ca' - Bugzilla Bug #673638 - Installation within IPA hangs - Bugzilla Bug #673609 - CC: authorize() call needs to be added to getStats servlet - Bugzilla Bug #676330 - init script cannot start service - 'pki-silent' - Bugzilla Bug #682013 - pkisilent needs xml-commons-apis.jar in it's classpath- 'pki-common' - Bugzilla Bug #676051 - IPA installation failing - Fails to create CA instance - Bugzilla Bug #676182 - IPA installation failing - Fails to create CA instance- 'pki-common' - Bugzilla Bug #674894 - ipactl restart : an annoy output line - Bugzilla Bug #675179 - ipactl restart : an annoy output line- Bugzilla Bug #673233 - Rebase pki-core to pick the latest features and fixes - 'pki-setup' - Bugzilla Bug #673638 - Installation within IPA hangs - 'pki-symkey' - 'pki-native-tools' - 'pki-util' - 'pki-java-tools' - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package - 'pki-common' - Bugzilla Bug #672291 - CA is not publishing certificates issued using "Manual User Dual-Use Certificate Enrollment" - Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error. - Bugzilla Bug #504056 - Completed SCEP requests are assigned to the "begin" state instead of "complete". - Bugzilla Bug #504055 - SCEP requests are not properly populated - Bugzilla Bug #564207 - Searches for completed requests in the agent interface returns zero entries - Bugzilla Bug #672291 - CA is not publishing certificates issued using "Manual User Dual-Use Certificate Enrollment" - - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package - Bugzilla Bug #672920 - CA console: adding policy to a profile throws 'Duplicate policy' error in some cases. - Bugzilla Bug #673199 - init script returns control before web apps have started - Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI subsystem instances - 'pki-selinux' - 'pki-ca' - Bugzilla Bug #504013 - sscep request is rejected due to authentication error if submitted through one time pin router certificate enrollment. - Bugzilla Bug #672111 - CC doc: certServer.usrgrp.administration missing information - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #672333 - Creation of RA agent fails in IPA installation - Bugzilla Bug #674917 - Restore identification of Tomcat-based PKI subsystem instances - 'pki-silent' - Bugzilla Bug #673614 - CC: Review of cryptographic algorithms provided by 'netscape.security.provider' package- Bugzilla Bug #656661 - Please Update Spec File to use 'ghost' on files in /var/run and /var/lock- 'pki-symkey' - Bugzilla Bug #671265 - pki-symkey jar version incorrect - 'pki-common' - Bugzilla Bug #564207 - Searches for completed requests in the agent interface returns zero entries- Allow 'pki-native-tools' to be installed independently of 'pki-setup' - Removed explicit 'pki-setup' requirement from 'pki-ca' (since it already requires 'pki-common') - 'pki-setup' - Bugzilla Bug #223343 - pkicreate: should add 'pkiuser' to nfast group - Bugzilla Bug #629377 - Selinux errors during pkicreate CA, KRA, OCSP and TKS. - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from OpenLDAP instead of the Mozldap - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #658926 - org.apache.commons.lang class not found on F13 - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #665388 - jakarta-* jars have been renamed to apache-*, pkicreate fails Fedora 14 and above - Bugzilla Bug #23346 - Two conflicting ACL list definitions in source repository - Bugzilla Bug #656733 - Standardize jar install location and jar names - 'pki-symkey' - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #644056 - CS build contains warnings - 'pki-native-tools' - template change - Bugzilla Bug #606946 - Convert Native Tools to use ldapAPI from OpenLDAP instead of the Mozldap - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #644056 - CS build contains warnings - 'pki-util' - Bugzilla Bug #615814 - rhcs80 - profile policyConstraintsCritical cannot be set to true - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #635033 - At installation wizard selecting key types other than CA's signing cert will fail - Bugzilla Bug #645874 - rfe ecc - add ecc curve name support in JSS and CS interface - Bugzilla Bug #488253 - com.netscape.cmsutil.ocsp.BasicOCSPResponse ASN.1 encoding/decoding is broken - Bugzilla Bug #551410 - com.netscape.cmsutil.ocsp.TBSRequest ASN.1 encoding/decoding is incomplete - Bugzilla Bug #550331 - com.netscape.cmsutil.ocsp.ResponseData ASN.1 encoding/decoding is incomplete - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #658188 - remove remaining references to tomcat5 - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #223319 - Certificate Status inconsistency between token db and CA - Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory During CRL Generation - 'pki-java-tools' - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1 - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #662156 - HttpClient is hard-coded to handle only up to 5000 bytes - Bugzilla Bug #656733 - Standardize jar install location and jar names - 'pki-common' - Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review - Bugzilla Bug #623745 - SessionTimer with LDAPSecurityDomainSessionTable started before configuration completed - Bugzilla Bug #620925 - CC: auditor needs to be able to download audit logs in the java subsystems - Bugzilla Bug #615827 - rhcs80 - profile policies need more than 5 policy mappings (seem hardcoded) - Bugzilla Bug #224945 - javadocs has missing descriptions, contains empty packages - Bugzilla Bug #548699 - subCA's admin certificate should be generated by itself - Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA - Bugzilla Bug #563386 - rhcs80 ca crash on invalid inputs to profile caAgentServerCert (null cert_request) - Bugzilla Bug #621339 - SCEP one-time PIN can be used an unlimited number of times - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #629677 - TPS: token enrollment fails. - Bugzilla Bug #621350 - Unauthenticated user can decrypt a one-time PIN in a SCEP request - Bugzilla Bug #503838 - rhcs71-80 external publishing ldap connection pools not reliable - improve connections or discovery - Bugzilla Bug #629769 - password decryption logs plain text password - Bugzilla Bug #583823 - CC: Auditing issues found as result of CC - interface review - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #586700 - OCSP Server throws fatal error while using OCSP console for renewing SSL Server certificate. - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #607380 - CC: Make sure Java Console can configure all security relevant config items - Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be generated on TKS instead of TPS. - Bugzilla Bug #489342 - com.netscape.cms.servlet.common.CMCOutputTemplate.java doesn't support EC - Bugzilla Bug #630121 - OCSP responder lacking option to delete or disable a CA that it serves - Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1 - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #635033 - At installation wizard selecting key types other than CA's signing cert will fail - Bugzilla Bug #621341 - Add CA support for new SCEP key pair dedicated for SCEP signing and encryption. - Bugzilla Bug #223336 - ECC: unable to clone a ECC CA - Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned by Reason Code - onlySomeReasons ? - Bugzilla Bug #637330 - CC feature: Key Management - provide signature verification functions (JAVA subsystems) - Bugzilla Bug #223313 - should do random generated IV param for symmetric keys - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #630176 - Improve reliability of the LdapAnonConnFactory - Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on ECC curve names (not on key sizes). - Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple Certificates from the Same Request - Bugzilla Bug #648757 - expose and use updated cert verification function in JSS - Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection of signature algorithm; and for ECC curves - Bugzilla Bug #451874 - RFE - Java console - Certificate Wizard missing e.c. support - Bugzilla Bug #651040 - cloning shoud not include sslserver - Bugzilla Bug #542863 - RHCS8: Default cert audit nickname written to CS.cfg files imcomplete when the cert is stored on a hsm - Bugzilla Bug #360721 - New Feature: Profile Integrity Check . . . - Bugzilla Bug #651916 - kra and ocsp are using incorrect ports to talk to CA and complete configuration in DonePanel - Bugzilla Bug #642359 - CC Feature - need to verify certificate when it is added - Bugzilla Bug #653713 - CC: setting trust on a CIMC cert requires auditing - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #499494 - change CA defaults to SHA2 - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets as expected - Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for validity - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #659004 - CC: AuditVerify hardcoded with SHA-1 - Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA. - Bugzilla Bug #661889 - The Servlet TPSRevokeCert of the CA returns an error to TPS even if certificate in question is already revoked. - Bugzilla Bug #663546 - Disable the functionalities that are not exposed in the console - Bugzilla Bug #661514 - CMAKE build system requires rules to make javadocs - Bugzilla Bug #658188 - remove remaining references to tomcat5 - Bugzilla Bug #649343 - Publishing queue should recover from CA crash. - Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and pkiCA, obsolete 2252 and 2256 - Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added - Bugzilla Bug #642741 - CS build uses deprecated functions - Bugzilla Bug #670337 - CA Clone configuration throws TCP connection error - Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time interface is no longer available through console - 'pki-selinux' - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #667153 - store nuxwdog passwords in kernel ring buffer - selinux changes - 'pki-ca' - Bugzilla Bug #583822 - CC: ACL issues from CA interface CC doc review - Bugzilla Bug #620925 - CC: auditor needs to be able to download audit logs in the java subsystems - Bugzilla Bug #621322 - Provide switch disabling SCEP support in CA - Bugzilla Bug #583824 - CC: Duplicate servlet mappings found as part of CC interface doc review - Bugzilla Bug #621602 - pkiconsole: Click on 'Publishing' option with admin privilege throws error "You are not authorized to perform this operation". - Bugzilla Bug #583825 - CC: Obsolete servlets to be removed from web.xml as part of CC interface review - Bugzilla Bug #583823 - CC: Auditing issues found as result of CC - interface review - Bugzilla Bug #519291 - Deleting a CRL Issuing Point after edits throws 'Internal Server Error'. - Bugzilla Bug #586700 - OCSP Server throws fatal error while using OCSP console for renewing SSL Server certificate. - Bugzilla Bug #621337 - Limit the received senderNonce value to 16 bytes. - Bugzilla Bug #621338 - Include a server randomly-generated 16 byte senderNonce in all signed SCEP responses. - Bugzilla Bug #558100 - host challenge of the Secure Channel needs to be generated on TKS instead of TPS. - Bugzilla Bug #630121 - OCSP responder lacking option to delete or disable a CA that it serves - Bugzilla Bug #634663 - CA CMC response default hard-coded to SHA1 - Bugzilla Bug #621327 - Provide switch disabling algorithm downgrade attack in SCEP - Bugzilla Bug #621334 - Provide an option to set default hash algorithm for signing SCEP response messages. - Bugzilla Bug #539781 - rhcs 71 - CRLs Partitioned by Reason Code - onlySomeReasons ? - Bugzilla Bug #637330 - CC feature: Key Management - provide signature verification functions (JAVA subsystems) - Bugzilla Bug #555927 - rhcs80 - AgentRequestFilter servlet and port fowarding for agent services - Bugzilla Bug #524916 - ECC key constraints plug-ins should be based on ECC curve names (not on key sizes). - Bugzilla Bug #516632 - RHCS 7.1 - CS Incorrectly Issuing Multiple Certificates from the Same Request - Bugzilla Bug #638242 - Installation Wizard: at SizePanel, fix selection of signature algorithm; and for ECC curves - Bugzilla Bug #529945 - (Instructions and sample only) CS 8.0 GA release -- DRM and TKS do not seem to have CRL checking enabled - Bugzilla Bug #609641 - CC: need procedure (and possibly tools) to help correctly set up CC environment - Bugzilla Bug #509481 - RFE: support sMIMECapabilities extensions in certificates (RFC 4262) - Bugzilla Bug #651916 - kra and ocsp are using incorrect ports to talk to CA and complete configuration in DonePanel - Bugzilla Bug #511990 - rhcs 7.3, 8.0 - re-activate missing object signing support in RHCS - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #499494 - change CA defaults to SHA2 - Bugzilla Bug #623452 - rhcs80 pkiconsole profile policy editor limit policy extension to 5 only - Bugzilla Bug #649910 - Console: an auditor or agent can be added to an administrator group. - Bugzilla Bug #632425 - Port to tomcat6 - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #653576 - tomcat5 does not always run filters on servlets as expected - Bugzilla Bug #642357 - CC Feature- Self-Test plugins only check for validity - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #661128 - incorrect CA ports used for revoke, unrevoke certs in TPS - Bugzilla Bug #512496 - RFE rhcs80 - crl updates and scheduling feature - Bugzilla Bug #661196 - ECC(with nethsm) subca configuration fails with Key Type RSA Not Matched despite using ECC key pairs for rootCA & subCA. - Bugzilla Bug #649343 - Publishing queue should recover from CA crash. - Bugzilla Bug #491183 - rhcs rfe - add rfc 4523 support for pkiUser and pkiCA, obsolete 2252 and 2256 - Bugzilla Bug #223346 - Two conflicting ACL list definitions in source repository - Bugzilla Bug #640710 - Current SCEP implementation does not support HSMs - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #661142 - Verification should fail when a revoked certificate is added - Bugzilla Bug #668100 - DRM storage cert has OCSP signing extended key usage - Bugzilla Bug #662127 - CC doc Error: SignedAuditLog expiration time interface is no longer available through console - Bugzilla Bug #531137 - RHCS 7.1 - Running out of Java Heap Memory During CRL Generation - 'pki-silent' - Bugzilla Bug #627309 - pkisilent subca configuration fails. - Bugzilla Bug #640091 - pkisilent panels need to match with changed java subsystems - Bugzilla Bug #527322 - pkisilent ConfigureDRM should configure DRM Clone. - Bugzilla Bug #643053 - pkisilent DRM configuration fails - Bugzilla Bug #583754 - pki-silent needs an option to configure signing algorithm for CA certificates - Bugzilla Bug #489385 - references to rhpki - Bugzilla Bug #638377 - Generate PKI UI components which exclude a GUI interface - Bugzilla Bug #651977 - turn off ssl2 for java servers (server.xml) - Bugzilla Bug #640042 - TPS Installlation Wizard: need to move Module Panel up to before Security Domain Panel - Bugzilla Bug #643206 - New CMake based build system for Dogtag - Bugzilla Bug #588323 - Failed to enable cipher 0xc001 - Bugzilla Bug #656733 - Standardize jar install location and jar names - Bugzilla Bug #645895 - pkisilent: add ability to select ECC curves, signing algorithm - Bugzilla Bug #658641 - pkisilent doesn't not properly handle passwords with special characters - Bugzilla Bug #642741 - CS build uses deprecated functions- Bugzilla Bug #668839 - Review Request: pki-core - Removed empty "pre" from "pki-ca" - Consolidated directory ownership - Corrected file ownership within subpackages - Removed all versioning from NSS and NSPR packages- Bugzilla Bug #668839 - Review Request: pki-core - Added component versioning comments - Updated JSS from "4.2.6-10" to "4.2.6-12" - Modified installation section to preserve timestamps - Removed sectional comments- Initial revision. (kwright@redhat.com & mharmsen@redhat.com)  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~      !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcde10.5.9-6.el7    pki-ca-10.5.9LICENSEpki-ca.jarcaconfCS.cfgCatalinalocalhostca.xmlacl.ldifacl.propertiesauth-method.propertiescaAuditSigningCert.profilecaCert.profilecaOCSPCert.profiledb.ldifeccAdminCert.profileeccServerCert.profileeccSubsystemCert.profileflatfile.txtindex.ldifindextasks.ldifjk2.manifestjk2.propertiesjkconf.ant.xmljkconfig.manifestproxy.confregistry.cfgrsaAdminCert.profilersaServerCert.profilersaSubsystemCert.profileserver-minimal.xmlserverCert.profile.exampleWithSANserverCert.profile.exampleWithSANpatternshm.manifesttomcat-jk2.manifesttomcat-users.xmluriworkermap.propertiesvlv.ldifvlvtasks.ldifweb.xmlworkers.propertiesworkers.properties.minimalworkers2.propertiesworkers2.properties.minimalemailsExpiredUnpublishJobExpiredUnpublishJobItemcertIssued_CAcertIssued_CA.htmlcertIssued_RAcertIssued_RA.htmlcertRequestRejected.htmlcertRevoked_CAcertRevoked_CA.htmlcertRevoked_RAcertRevoked_RA.htmleuJob1.htmleuJob1Item.htmlpublishCerts.htmlpublishCertsItem.htmlreqInQueue_CAreqInQueue_CA.htmlreqInQueue_RAreqInQueue_RA.htmlriq1Item.htmlriq1Summary.htmlrnJob1.txtrnJob1Item.txtrnJob1Summary.txtprofilescaAdminCert.cfgDomainController.cfgECAdminCert.cfgcaAdminCert.cfgcaAgentFileSigning.cfgcaAgentServerCert.cfgcaCACert.cfgcaCMCECUserCert.cfgcaCMCECserverCert.cfgcaCMCECsubsystemCert.cfgcaCMCUserCert.cfgcaCMCauditSigningCert.cfgcaCMCcaCert.cfgcaCMCkraStorageCert.cfgcaCMCkraTransportCert.cfgcaCMCocspCert.cfgcaCMCserverCert.cfgcaCMCsubsystemCert.cfgcaCrossSignedCACert.cfgcaDirBasedDualCert.cfgcaDirPinUserCert.cfgcaDirUserCert.cfgcaDirUserRenewal.cfgcaDualCert.cfgcaDualRAuserCert.cfgcaECAdminCert.cfgcaECAgentServerCert.cfgcaECDirPinUserCert.cfgcaECDirUserCert.cfgcaECDualCert.cfgcaECFullCMCSelfSignedCert.cfgcaECFullCMCUserCert.cfgcaECFullCMCUserSignedCert.cfgcaECInternalAuthServerCert.cfgcaECInternalAuthSubsystemCert.cfgcaECServerCert.cfgcaECSimpleCMCUserCert.cfgcaECSubsystemCert.cfgcaECUserCert.cfgcaEncECUserCert.cfgcaEncUserCert.cfgcaFullCMCSelfSignedCert.cfgcaFullCMCUserCert.cfgcaFullCMCUserSignedCert.cfgcaIPAserviceCert.cfgcaInstallCACert.cfgcaInternalAuthAuditSigningCert.cfgcaInternalAuthDRMstorageCert.cfgcaInternalAuthOCSPCert.cfgcaInternalAuthServerCert.cfgcaInternalAuthSubsystemCert.cfgcaInternalAuthTransportCert.cfgcaJarSigningCert.cfgcaManualRenewal.cfgcaOCSPCert.cfgcaOtherCert.cfgcaRACert.cfgcaRARouterCert.cfgcaRAagentCert.cfgcaRAserverCert.cfgcaRouterCert.cfgcaSSLClientSelfRenewal.cfgcaServerCert.cfgcaSignedLogCert.cfgcaSigningECUserCert.cfgcaSigningUserCert.cfgcaSimpleCMCUserCert.cfgcaStorageCert.cfgcaSubsystemCert.cfgcaTPSCert.cfgcaTempTokenDeviceKeyEnrollment.cfgcaTempTokenUserEncryptionKeyEnrollment.cfgcaTempTokenUserSigningKeyEnrollment.cfgcaTokenDeviceKeyEnrollment.cfgcaTokenMSLoginEnrollment.cfgcaTokenUserAuthKeyRenewal.cfgcaTokenUserDelegateAuthKeyEnrollment.cfgcaTokenUserDelegateSigningKeyEnrollment.cfgcaTokenUserEncryptionKeyEnrollment.cfgcaTokenUserEncryptionKeyRenewal.cfgcaTokenUserSigningKeyEnrollment.cfgcaTokenUserSigningKeyRenewal.cfgcaTransportCert.cfgcaUUIDdeviceCert.cfgcaUserCert.cfgcaUserSMIMEcapCert.cfgsetupregistry_instancewebappsROOTWEB-INFweb.xmlindex.jspca404.html500.htmlGenUnexpectedError.templateWEB-INFlibpki-ca.jarpki-certsrv.jarpki-cms.jarpki-cmsbundle.jarpki-cmscore.jarpki-cmsutil.jarpki-nsutil.jarvelocity.propertiesweb.xmladminGenUnexpectedError.templatecaEnrollSuccess.templateImportAdminCert.templateImportCert.templateadminEnroll.htmlsecuritydomainlogin.templatesendCookie.templatecms-funcs.jsconsolehelpfun.jsindex.jspagentGenError.templateGenPending.templateGenRejected.templateGenSuccess.templateGenSvcPending.templateGenUnauthorized.templateGenUnexpectedError.templatecaEnrollSuccess.templateImportCert.templateListRequests.htmlProfileApprove.templateProfileList.templateProfileProcess.templateProfileReview.templateProfileSelect.templateSrchCert.htmlSrchRequests.htmlSrchRevokeCert.htmlUpdateDir.htmlbulkissuance.templatecloneRedirect.templateconfirmRevocation.templatedisplayBySerial.templatedisplayBySerial2.templatedisplayCRL.templatedisplayCertFromRequest.templateerror.templateframeCRL.htmlframeDir.htmlframeDisplayCRL.htmlframeList.htmlframeListReq.htmlframeOCSP.htmlframeProfile.htmlframeRevoke.htmlframeSearch.htmlframeSrchRequests.htmlframeStats.htmlgetOCSPInfo.templategetStats.templateindex.jspmenuCRL.htmlmenuDir.htmlmenuDisplayCRL.htmlmenuList.htmlmenuListReq.htmlmenuOCSP.htmlmenuProfile.htmlmenuRevoke.htmlmenuSearch.htmlmenuSrchRequests.htmlmenuStats.htmlmonitor.htmlmonitor.templatenotImplemented.htmlprocessCertReq.templateprocessReq.templatequeryBySerial.htmlqueryCert.htmlqueryCert.templatequeryReq.templatereasonToRevoke.templaterevocationResult.templaterevokeBySerial.templaterevokeCert.htmlsrchCert.templatetoDisplayCRL.templatetoUpdateCRL.templatetop.htmlunrevocationResult.templateupdateCRL.htmlupdateCRL.templateupdateDir.templatecms-funcs.jsfuncs.jsheader.templatehelpfun.jsindex.jspindex.templateports.templateeeGenError.templateGenPending.templateGenRejected.templateGenSuccess.templateGenSvcPending.templateGenUnauthorized.templateGenUnexpectedError.templatecaAIMEnroll.htmlCMCEnrollment.htmlCMCRevReq.htmlCertBasedDualEnroll.htmlCertBasedEncryptionEnroll.htmlCertBasedSingleEnroll.htmlChallengeRevoke1.htmlDirPinUserEnroll.htmlDirUserEnroll.htmlDisplayCRL.htmlEnrollSuccess.templateGetCAChain.htmlImportAdminCert.templateImportCert.templateKeyRecovery.htmlManCAEnroll.htmlManObjSignEnroll.htmlManRAEnroll.htmlManServerEnroll.htmlManUserEnroll.htmlOCSPResponder.htmlObjSignPKCS10Enroll.htmlPortalEnrollment.htmlProfileList.templateProfileSelect.templateProfileSubmit.htmlProfileSubmit.templateRenewalSuccess.templateRevocationSuccess.templateUserRenewal.htmlUserRevocation.htmlbench2k.htmlblank.htmlcheckRequest.htmldisplayBySerial.templatedisplayBySerial2.templatedisplayCRL.templatedisplayCaCert.templatedisplayCertFromRequest.templateenrollMenu.htmlindex.jsppolicyEnrollmentindex.jspprofileMenu.htmlretrievalMenu.htmlrevocationMenu.htmlprofileEnrollmentindex.jspprofileMenu.htmlretrievalMenu.htmlrevocationMenu.htmlprofileMenu.htmlqueryBySerial.htmlqueryCert.htmlqueryCert.templatereasonToRevoke.templaterecoveryMenu.htmlremoteAuthConfig.templaterenewalMenu.htmlrequestStatus.templateretrievalMenu.htmlrevocationMenu.htmlrevocationResult.templatesrchCert.htmlsrchCert.templatetabs.htmltoDisplayCRL.templateunrevocationResult.templatecms-funcs.jshelpfun.jsindex.jspindex.jspservices.template/usr/share/doc//usr/share/doc/pki-ca-10.5.9//usr/share/java/pki//usr/share/pki//usr/share/pki/ca//usr/share/pki/ca/conf//usr/share/pki/ca/conf/Catalina//usr/share/pki/ca/conf/Catalina/localhost//usr/share/pki/ca/emails//usr/share/pki/ca/profiles//usr/share/pki/ca/profiles/ca//usr/share/pki/ca/setup//usr/share/pki/ca/webapps//usr/share/pki/ca/webapps/ROOT//usr/share/pki/ca/webapps/ROOT/WEB-INF//usr/share/pki/ca/webapps/ca//usr/share/pki/ca/webapps/ca/WEB-INF//usr/share/pki/ca/webapps/ca/WEB-INF/lib//usr/share/pki/ca/webapps/ca/admin//usr/share/pki/ca/webapps/ca/admin/ca//usr/share/pki/ca/webapps/ca/agent//usr/share/pki/ca/webapps/ca/agent/ca//usr/share/pki/ca/webapps/ca/ee//usr/share/pki/ca/webapps/ca/ee/ca//usr/share/pki/ca/webapps/ca/ee/ca/policyEnrollment//usr/share/pki/ca/webapps/ca/ee/ca/profileEnrollment/-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches -m64 -mtune=genericcpioxz2x86_64-redhat-linux-gnu       directoryASCII textASCII text, with CRLF line terminators (Zip archive data, at least v2.0 to extract)ASCII text, with very long linesXML 1.0 document textexported SGML document, ASCII textXML 1.0 document, ASCII textC++ source, ASCII textHTML document, ASCII textHTML document, ASCII text, with very long lines?7zXZ !#,] b2u jӫ`(|WmW  \8+K41kOrȣ)$kHU*#wr\J'O=>|c Ké]1LsF6/ڕg5XpJ̢S&$Eo[PAc?E%qe5v-1LOkR2qڵ^GX*~G;^i2ʅ)։l_qYA]FF `5LGҦKAT AĦ65>W"4&ꮼ [X:](M4~Ni>#NŰ0 VV 25(@&ܜ*oMta|,QnΠrϿwMz 2xAC*WyL{HBlPD&x6__V:`&],WlL%~ pu7OS7ArVP] ̙~D@CӒ|yZswoO^n=M4bL:/T,B/56oƯ8NJ*}e>$Ճp _/hx7(]jT򴵕V:o¹.s&lwYt~!p. ?G8T0an"G #*Be-=wftl<|}c4:>G2-}ے{p= t&{%B8Ms+$*:M)wC}N|/FwP碵Mum`ĬkW\SntPZZiYo^: HkDu:8~6`^^lM7nrq3 yhq}ay@M^R1a +b^˓'_v .Ïj6CG۱C\!Q&@V,AN%Bjb$]2HRB  .u~Xۓ aed},'nHi:ћd98Ui"ڋr[h9^pI䷥~FZFxf1 * 􍔤)+$dJ˭Wg8\"!0hhg 8E_io_$x~exʋa܋}PaAA,BYVS$<[ ſ$ 7򊯓NT_is-zd>x],80J~m|<ԸQGzz\kPKEo- ˤUwUk /pJe M(m.`#O5~OgUZH|5$rJ&ȏ)~sϥ9McbmæJ -gi4ѓm1䮓tLtB ۀ$Xd3.h (,Ga/# GLXtAdժL6<46mN]bs@L2}lK rKy| bCo'E4MH[`vkW#+<5P6[\+ky'8˫Q{7Dᥡ`#mҐb{_ә}`qHtHQd$2pw/$.LA~](5 AS]D>)P]uq=ԊRvHX]ab<<І6%I܀3/*u5Ru%W~0X"f8?Gi<ˣT`ߥx[D=b)kĚy!;|tNx1ŲoYPBbᔣ$n kBZ2i1 VH8Y8g4[eG4 YQ]wb4<.UnK%N-R*Boo@8GY& )|}nv_xw{!`^ś iB AȰ0 XfC:vIVjHVu5ybځ7"G BIkWRE{t|!*pXC[Lј.ޜu@5KNj6?^#3[>tsdᏑ !3];8[E"8 E)؋b}pp'nOLɾIL :_Wj4TڥTMyS 忧Rڜ\P;*7Yg@9i+ BbވH+5p4z؞sJoKj xO>።REr[PbtKmNP[%^mw鲸"X"D-uIM<躦).) u 'j&Fpڄ^#`hZ[n1"klҡ V}BT\ ʜ%F̉,;㟂O]IVg4l?t:5Vny>DZLz/G{N؎ܵhad{($Y}.ڥ!sDwGbj+&oICdc5|/il|Y-GWAۢd"*&< JOt= Q4jΊ'l۽3ty}Ubb% /³pWD0 יtq¡ ( ̫lˌiqĂtځUpKyEahAJO䆑g1,!9'M]AlŝL};uZ6X|eƴ5|CaG)ί0xY\4kh6LeA_q;l ЄΗRuţ `N dی k)( Xf_E4eeQN:eRȄ'k00o؀3oZIP@SB#áj*@Z ch-^@V ֎ '4<0άk~UaԨ-to M敖]zwrqgYX )1VDi[W M!-zMGT .F1HVBe)kj!g<Ngj`6_Kffzܧ.Qc# -4ۊ Ǫ4 s)“-k WU4$VA[=L,2 5AܲR;+2-_Crv='b{Գy7?5ur LK0 ^dLV%ާANJ);S2~@^lB2|'Lwk ,2NMҝ/Zzq.F9G4g~c6*3'j6] i}%8F6|TN&f ,P!OUWF*KL@2b; BJg;,ذBi䣝4ײ&_ӯğlţ?F jfۖ ]T {4\QҡSEu?%eiWen6A{K2q8;w㏄~u#GK16FL7)j9%X3}fd 9oGZq n!ԗ+H8_)xv.SQq i}*)W >,jdDX(7 L- Mo2o/OuDH6 a.;P')f cKbkk䥻DLX=RSr5d J'DҮ?L|mQUJDAU t)=flqBE"i@]r&CCP%l|֥ cs~.3@vH'8T}ӎŮWZ9X~֐w0LL;VVgYte*2xA%װ_RB[ڿ_y0·?灙M "A20唖٥*~L㼮*xaEd8XaSK9Eq<Ԩ^üv"!{ "~!t dE"rs'tfEkvv-ro*y=k?oxzJ@e@[*Oz[])`Qv #PiiHm+3UKp^{w5)<}]Kvrmn 7xb!Prو?jf Grز=aE܎0M ?g媕7颓YBϖR,Y/WVXDzi\ڏVY`܂־y7rMl|Zm+eok )sz T!'+̚_i|L\ҤRH[b jl|s-G0Bނ+>L98ʞ8="" H4$lU:0Xmb{1"tϑxl5'^) SLLc$YRo+63;%YKx 8 S#Bni |нP+UW 5.jS! d5\@.]zІ{3Eq/B[?P uPM y0_%> =kqݜ=tTa ݏ_7u_xTq?a 10R.8B 巆gMy. h?mocbL=KPULrT"@RH;h4&0\ v{ZGzu89F~(G鍶ݼ lvτ2v6Oʇ(WPmC$\A_-TDs UuD9(FpssL^z>F}>x;Aӫ-0ʿ@D-pa=w$Zj @/ߎݚWSc8@YT%> a̵ h1RR7Ϫ#T.d4ӟk2{_itZpEuʺyBGnǧd ~{s3.r#aiiYojVy,qy aTgY\>yǹ4^ YOɭp_q nFUyV~a/2~ -.0D1zO%^fbŻj~<%3$>zג| M 2QnæR"kJ͜KmXyd}`jFEtiVh#!NoO"A;P;Y#0-t]Dh@7UNQNtWlC  Ww>ThoDwBmJ~*m/A:u!%Qw*+XJxB͗nP̡q"Vc.`il)ŠK`]<_זϜJˈ>\ HT87V[XTt_ҁ= ,oi!Ov}q(yՓ4 u,f=oX7K3[(rJq2&46 S ړ;r=9{ƶit<&܅eLÅXWaA1*iYWFđrّ8n8KH~8\:0{񡙆}оfA:y(n0 mk?_ȅI)ݛͅ)^CxpZl1PI"pk8m@)<AAթgxbaWulb-~b`r>[H i ߕ;^k8eLk!G DEe%p? M%+Vχ]ʀaw !rӸ-NÛt-㒄@Lif5pQY65p\E!b4+ebyi&&@I_TiM1c(Iw ˦ty 3/Q9o4h+b_雋97Mzǥ3RFэ>la:.N=Pl*CD7}]}utlϞ]g[؁a>sԯ۸ݴ+,yvq]\6yڐ(kNьkϛ]oyz f+_/hH)L86.%QeL$d/?b 9Ffb6LC,i)s> p#]wΩ-"l?f;R3͋ l+x7w87@44Ի5hxU-A3^k \/Fy9mWPr3 iDyс*oQ'v7I.^B gwI1"FMtM"ҞAS~:sIq@`f{}̰j#?%1R$c'8/[yK/PԉN5]\nxW^bT*@>0AC5: r jDe9<48G俇#ʿ[8T{;j@4QE\`E9lˡ{!!Zܱ9e$p g$/&xi,U0?=*kdNx?b*X!X-k%[ZRܭ6;'Jh>$/zv,ƸG Mbikqg5Ao$u_fv5XrڱrbV^VCrˍI2VmpIh%p?GjN\T-qۏP^ *Jp3? l(8ƲwK~إpP{x'(h &ʤv}R",K{%uڕՠ"I!H#[cyh)s"'LjW2 t7d>Of+L##C(R\pV̭ r꘲,|TNr1§-_4@ W3D5$i'(u-N!R~z[C+j WC ʌMA$xټN4^b? RݶþԈ[ uX:GW YA_)0.cA/w..h.O:QOJH<-ͥmAƺؤJmayhov._(o C;GKB'lP׫+YL9 H킺'.eH-+k=iQ*,eXX I2.G FGu"hHQT#&̥ `'ȫQ/GDn+,8scs & GujlFtsldjPEvojޙ G,I`KGDWσӵD1ZZp~nYٖ&Co$&H,GrּN'jt572c8z#H_7E{'fSJ=wHR]NJ7ʵww+kZ"#~obG %S<8ґːKϸ2ZD~.&(xя'~Mm-q4L;4Vel0 pׇP_ͮAAzrEšmeh*dsQ{&xHrp1)PCGin ǁS򁫷T@ŤJ@{ qGZ{7^yV@Q谅T^)̀YOG0eGPcשXz6طdHRF hBKY׊ qϧ!ɼK KFhl(+>,iK(VEgtfH)"=XU/4M Y?=z6E_"7ӟ~{k/!¯ k"GLYq%b yÏL*6tfCf{.{PaK ig"~piUn ]`3+WH^Dީ@i7wV=UP81CՁ*=!^ jD_!J霠!j+E1C)rp]_Mvn ,wB :c"8pVm K0S;3ٸH%cIҧrh#RTb0g^7~tOU^P*$'gl= /}8WTN\9ϤSidC Gsݣ*_. c܌U8|V4FU*u29ݑݜU_+3VYl]Ə.&aX<<<]/ M'm7!\^qb7<eUOarڼgH Xc9ٛqٰW\X|pu]&Lf#$NBS3[TH9D(o IQ2Cf޾{_VuBbTUSWV +[]KWjbӥ[+7ZzaZ P|ag'0`]Mq}mW AtJ85[I=JXv28(K!Fuw#+l :s8|orlu, ً>nSt?c岸R]ЛkZx[,}ېv&ߟi}0"#,itKPyMIٴ {Q`i3F FʗSPmb Y$|Z~amVrp=`Zzzbe_9 4r؄F,;&3A|,xqs])8omEk6ˍ^ -\a[K*KDQQ;E! V 4TjW;l͕PLO` -—O )e5N96X^!jTδU1tֳ߮Y{44tǾ%0bnN`oR=XUDXxxs̅~;JT5N MӁrxZK[*I9|4Lr+A'ѨDsk9hТã¶)lCMG*n8ꟸkA|=,j3Op#]aU2N%;Aa,cM,swgߤgY{ (6#R_y!굑\O rx G*Bk*~/ɠCtNP/aFw]l)=\F20Zl쿫 E2jǬ-/g%9YuM[hD`ݸ-l^)|A_L 52 IRH'`8ْ!jSNFMR^RbFla|t%TцaGۨ9)Jo]/Dyr åSK8JiT`5#jhI7x(U3Ub$bp&}evRb aj3AO 5`acHqHuQn641}\ce(ǕmrV,͐LW#jgfY8ZvA2u#8wV',h>?LY?єHf:de!̭iPj=CmWS}[ (ȎvAgjSSh%;H!Щ3b卦4v hpܳ+Mڨil^D>^C"p `\ly姕a.Smt\*<6 \=AI$Բ6ϡ$zcbTa늓Uh7 g/A`=Z z0uč"uT\[#s9ɦđ6aoUժ}~Xyq07p\*s)ߢ@PMF84mg NIG=EGyj[lgUm:> -5X#QAFƁUQzPu .ZiKc$܁(M4ۮ?*xOS9X$9,"ڊS͋o<\(",qz -2V#fG˕WC_k:aZy"rXW r$VJkAfk ÔMA3lj aŽbRckt`_īʑsQ坵)j"[i"=_T6BM-ReC4YےNC{|MVV_#oPjA <j12-!E4oF{j# @w!A5$90iɀ$J%BX iR`%D^ZgүD,O%6>X4IQJ |У !N/奿֢%v u=[dwIԃLz-O3Vꩇ u(V21UK|N7-EpL^V$F8uS<egp}OI[4H2O:z.h2XAyw`&aך'/cfͿ06bg%6*]ī.jU׿׬k\ J0 YWˀ%_Kձsɔ5T\g@b=s^sÈ"ODB['}ku58(kn711Pe++`ySQ,0$yMYrerJȜ k5—ư@N\&s"ʴ6] @eR-r_6&fEK٘@#1h1GצitS鑞tjnYzO]{Mf[DIN LOB5OCM?Lm`xŋ Bf|XV N_PR'Fat=MH|ggzq* @%\\ޙ\h ZxG$>]srDe0Fm&a;W1bHme IT* }9I_4Є rx I *t:u;C%E1}7]ku.#[3"jn\~٧]j*VXtg {[DZ? {!ɶzGddpGJC@У=esS.ľSY[UI6 tr77U5[LΚ`^ uW!NvFdJxOuϧf#nW:^R)([̮'/\5*T [EL$Z sM2~ko7SP;b:y#yM{j@x>&jjUʙe7&5t4(=XPUz(b}o{O'*)MfH.DeXz@'A2_p+o =6?m!8*7Oo8FG shX2sM,ZͽB os}aA `j͘@jOC d j 6=tpg+Pwrdڥà33z4\qm&,uk3`/RV3' mWr(|wD;+Y^=X-9HY`嶯bG~kpݧ9)hMUd`5'az/'.ЎLO˜vr:a]wh 8FՁ!R6 Ƴ&~Kf2d*#F*r?Y'N&1ćtl;xldN f+$]!u=$.{x xB;բ$ ǛL\ TdߦY7 lCK\A.W"0#Lٞyr׫CP~t˕'Ůvpb~lMMS5'޻(.c&fK-pEW -zo 1A4hn2Mm۸Z+zD,po7hn0;@2h !LΨWa n.xR։;B%{  ­6Xkʆ=3ÓtoSNeձڰF䍭.G |AԜԃKϹOY$ydi?sMRz~Lx&/[^m 2f,:e-f*J3lFN"@VWV`餩d.Q0 :SPyiXȞ&~DË́}*Q!92,M|;3fLQv݈a0xgYyJ:\ -7Z4b}.HaZb츇O(隨|n͋2ֳ4 Dy:Lfp=n/ "rNŐ$ |&>~w k(7ʎWat>lg..IH=_by a.i65l389rnUKdJAFnP!"cqxQ5eQqH]B:k{nJ6|!W уl5i φ9@DL- lBi|:7>L^8P9Q5_mOy{m r ȈY ρߜ?إC|&Aτ)meLs1!`GVJq_IpMJ4KOЅZn w1c?Z/.dYrxGMC$14~rU; ъ>\g?Zt5U2a|Bz{g~/ctD4N7:B9',$cb7D2-Ɩ8aVN[)I|*K@hrD`Q[Nk'!xrVD5Xo %N=Ty^nWQJJM7^Cn$TqU " -~x?LҩN$-]&ϚɇԈXb<"'Rw&sք7` N +P꽫G|.,<ĘJ4]Ȫ?AĦ- ?8VE2k;,yӊ5Ӱef t a5wȕ!E`9S6^ H+91Bn<@'MWql)J݅Z'ce0('lRW ͢:jå_Y 0W]ͲB/{'ODr!TYf]aǼ3gL0hzɽxYͱQm™ׁhDCv΀:&OWE OM/Y#3dAaMYI7I~kGKjr8.D\\ᴺU/.IRUVk0CȬvf?.M`fiY뀌A~Pp5]QDÆuV%p|^"N?ӜgQ/>$p}GpOl:(XFGõĂJDjp>X]"Y,bVb Yw#LFd0]/M#@HXgL/'_z/sA(´=I2YLj%hIWv@+'}ɚbSpq;Փ:>gq `_J %K | k]*VޜWT 3ۡy/+1q/l'C9h@\ %剽XPtž1& ]J¤evMK$I-dD!Rq}֙'Iq:؟+mZtGu8<PO5D^)>LDild@*b{- gTd}sh '<F4DͶ#mF&/Y1;R{XUnPo-M'~zxCQXy,9t8>g}d%XݗZ|b >3c|Vz?$ymQL˖~v/(kf͟ 5VyZ_Ts툶ْXh=yT|5\x'_+-Y{tMD/'^ RDZB*.qD g4 &TëAk\@46uϜvFJ}o?0Zeo>M-~&,Ai-.&zF^ϵyXW7i%!LƢ!뀌Cc.~r.br. $*8fh\xKKR!҄]{:mqPfqt2`XJqlD7p3t.j4xjbIO !aՎcg\(L鿭Ů ֙h=v|WKrU骂X{67yZw#HҞRXӦSb[S@Zj98B%cX aˏxQPlU-j 3V%o;8q Pcha(XlQ)4,n9LMyN.9, $F}Y>.BzeSz Tpzu8ΰ0FxǶ-ɷɬ2mGŎzW]ptJlzΝzrMxۣ;ᵹRF %Z`xǔ3**P->MPfbC|sF亏eir15 VRUWL‡8 ɒ6 @骬:*{5,yf. { oh*Eq% 80|\[B! Fwl,!N2D̃R?QIGq p MO">xq&Tx P_/95`01ܽNi\Tvmz$x p-zwxsh379gE`fH@O / bb,N}-N&7oS)qPQ#Mr%VFFJz~nk %jv: [lEQz]ѣM|e"fW1|}dWySyq/|3|.ȚG'zRHngAÊDTYlxlL$[+͋,Z9РgAYbzçIA \pykXؼ#vv* 90g,$Vyݭ8kcIy1}#; 8GNI=k n-K1*}XGQM2j]K<dAuM Ϟn61*׫XZ@5.M>ʾ; 3PL_+(/f˜㝽.+ǁ몢Ux>bܪ]FQP=ԉRWXm>_fkbt#Б'~_ gfv1oPCCZ6}zV}D̦[N%v+5Ԃ L cA6yDm.xA!-e@(׼Mi7lƎ_2,!nAYKB`4t- 'g Ictwjn.,4fZ<*ԅFB_p]Oy?O+Zs'D,#J/-o#L9̉J5܅p,E95̕PS#LcvWx!D #K0lZ;>c ]}BӠ̷|7& S7&L+:P YzLmUjzfdxJ=(vR M'j0.MuTi&@>kMy89ګۅ\ߥcb9c) Yhu`p:0'1LJԊGXR?Z:B'Avt x#|oR^щ+Oo!)mQ\ F]P|r:qދ@U^ M-Kf*J٦W8*[g<,L[{h p d#dtւ웘MAɢC4!A(9h9mOI_8 4SCtPKh\L&t |ҎhUA*.{=-% *'9kM<-}FvaLҭEF+/R"am8?;zΟ&(]ꄒ. mC*(D"-1 k*_fViC+vn]kAj-yX>OljD"3I*HVJ&tewVɗEA%>Z=.D  Eg:\Yچ萫лZQT~XRi nЭ|N/.r`wh.6@X9"Ad4NbMk9W%NЂmβ>n T8·o@ũa\xڂ5̱ ur򫺽Ɉk6 Kp,g.M#zg'7DNHzo]:B Y+r'VQǰ ě$iُ6 A+?5j{d_|\?|AQNǬr+!lcѳLƺ"0QbH7@۟+@|\n[|R0TKM(W\Q|WE'ޥͱsCϵs5>VxwXԌ3!dq)JL#N]akk-pC NΫxW0Xu :嫾3sl`*aGe ѢÎ=KLQs\;ءBh/;@ߚCAyTPchd-ޢM'E=h`ߍ$\P:]mc6a*\YwO8ؐ4ŠC&1ck7Euޗ_2Ś*U5{u3GΉj> 5) ʾ"S[ *EW#5W]jyQq]Sc5_<97Ekhz:{a,E Y: &LW漡te d ۲~Ս=Si1[SܑN iSW~PsJ\cyc;'Ɋ3XSMW~p"qXM޾Չy |lu+AFiu[]'@"7 + N@(@q2[PΌVu"amW?F.',plW5'D=a,rw/{>=80L],$Y$lM ͶTƺ# }]98I 9'l6 [1Ժj2sύrt*JV(1Dt"+h c#(nؾ?6E̙ɦd?sueo%rVP*?桹a@H^Qt]@:g$Ie3?R3nIh"2fqAXlyp;im'Q:icM ӷi`UEA鑗;af 3f?g^QyЃ^h3@`\sRN8@7j找7n.YגޕVd˱WĜ㹬Qr$zޑIK¶ sT^\&/_&?UqӢy²y] -]'6v=a6;2@"J{5B\/8f1dE?cȋPux:a"5 .7|x PHF2 }In߀}HޒG&'%[I^$ՠ6D/i>uu70]o~P"8 q/v Pf #;v-}z$e=S (0%!=cu܋BO AE/ 2+!>v݅eOv0;Y1s{б=+`Xsי/~&ҁi9Ӷ/8Ñ:YgciG0@oM#lU32_Tweћ~נuVDݚTMs-&7o"FB,GG7OE:OV( ԁ.rTYS6ew-j;G/E`niM[T<}oܼMPmPt9s jNEIO3KjSN,rIO3<$xp-#Hqoc3'tTSr_~\lXӝCDȦ.yPxbI/ڡaB'q`al let5Հ^H]➟ {CzYb0 AP߶Z?CnA Hp%`.ui(PSVd%qpY\:?3@^?h:- Aӗ*χ3>JCqiE<边c2#X~W=Uݴc2,0ŪObQqM)Ul s'ǙHshdhJJTbm4c>xz M6?SA)%Zy& pT8UĬy֚I^t'wn2Ξ2~T&\%?ͧ\c/|Ay9Z.ʓw^Q~Dt98,p--~. IR`P" pGFX,+衱‘6`5jk/! /ۜ oJ/>\H.,&iA1mobyHu^wqQ V%塉t {}aެ[ fŁYA>tx"25MjFˉp&˪pNkWꠞ1E|@0[ӣR4t1Q|]XDlry-O2TwW%k~!ʝe݀WNtBW%,;pEȐo[nrA$>"L\H1&BaFAU=Y6# <`w`ҒE:p:y)*5Szsy()dK"lwnOBYEgB }:) :x81>"Ya%zީh$G4aIٳWݽ![ %rw=T&g-g]ya3aбO3+K✓M {7Wǀ꾠Ļ:T]=Liw&ZVZ"k$rLS0/}l.9JWn>IJ5ݟ"# =-v!e6Tb@B:>?=]UC9^`sb&oޙM vo)3raF0VRks`$kOJ?Pa4E;6Ny+VmyxmڰI_ C#x`5F#^I!]YfpzU b2i=cJaoh{~G6fO n>{Kٙ^Ϗ _Mg"o99WP]`X5U)w̴ɣX]u,'̸U)k(L pmԞa>rAJ!&is?z?bJ#U F}a̜.ݔmPɤ3 4#%P7WZF|[0I~]gow. Ű]@^9&mV?R>)<[œ&S{/Tn7#wrVh5P~! T>@zZӭ\'Ոqr$طT:7c܏j?/>[]"Hoya?@TVVz HmCk`vzTOyj_O2PouyNދOI{W()qm("m d~GGM#oqd:-xG$[7m0,J`eX9 -4&C&"SlݨzUҳKzW;Fu_4;6tyݱ~cq)(="`n P4N5rHxfo{8As{;.:8zG ,@ܞ(QI$-'y D_KCPc8 aN)u4Y!\Ӷy ^8qf"n1{[,]{g{k9s;8bA='Aټf ٽ|n =#\7z q9"#R7IE zTTQW27tdK9 x=\g;]u;xXp }׈fA=J-%MޝPB5nlvZ$K}nEdWu*tt5jނhۻ9.&Կ;~L9 K 7]A1i/Z6M۱B j-j/Jv&o'4 |z؂/QMʬlBG%Z!;\-ޅ%އ˕(xf^mtEdh̀@>,wP붪L +*;/b698嫳Mbtz R s.6YJn\~*rAJ6\=QzB Wp!ﻙvˆsPc2~-|9G<  aʄ@ `?`u+T5 3,`'oFZ_ZB6^+H6 DV/Vъ@`l9O7 pՙ퓓g{ PÌ= VG\qB@g/gG\ys/%XB9ns)-_p4~fG> İK} >m"f8V+vYIZU$̗LXI?m]35IA u:/02B^iN[Sطݛf+Շp6Y,:A7~)]a0JEI01!36oQɯ :ዼ{2T"E$ϧ/᥈!|`Rym6MkvWʊ;uZDIBΗ|$z)+;b >mH'2MݣI1çb]K+1,qlnZ Qn,6Q:oo0‘hnDq ǮlvkWzZi:|eJ # QH4v]PBؘ(ؗħ-r/&) X:r)=.TSe?qn }ט jߢ9h^x%yB+Y۰L.zN h{u?,VQezobRaIXlEHy{=Bh&Ǜ$UT sJe,G!x3[~5- /;?Pxѳl[$Fbн%K:U'GU:u0y Ovϕ{կƹ9!}fwgV!33SFb@3 zcH]KðKnr(gI`ƛB<+5v'oXT Z2$ a\Œ <!7E*w<-Ŏ}+'ě F{JufN81k:U=y" :L?;|@eB>z? +x2Ջ*;ý I 1ܹnZ%H73!~*?ǣb;G]֓Gx`'4Ȇ'9 h_"c[6XG9>h>ZzvS( ,2Υͪ_ _۷Z'5W+ >lT;Wv;-}S^$`Z+Lz$f63ށ-RZ{"Y1-|DpHk+hLG}u3Ni8 vAxϔIoR.͗8腏‚āL%ػ!Gdv:}! ?) 0R\HpL%n}~FȺ?iR%\O)\nHPBZurP $ڽKb 1LVK 'eHeaHY+q~YyzDZ-"6gEYP*Sd1D!644ls0:1@j}48#?lg'u eͽe?wLC;^zd417N&.5yfls)X>JҕG03s)J4%jl%dr'N@&<+ϕm*$s|lVX(|n /MzIwŨgŢ7]JAڦo] UkJ_Ҝp2MV[3tYYjRʶIZ3c!\nWAC 1P`9% Qhh~f#ZkIOˎ_Ӓ L {8Re l&Ix~ߓJ}ngMF,J7aSj (Hcp&\I>0^Mq^4#Eij6sJO-&k8!/<3 SИ~ӋCpaj7 jMh@L)1taHdR׆W'?N{ t!q$WU7p'+ݵ&3-Ce*Sqf`x?Eh!z~5֥ѧ7(ObXU_}#Xϒ$,f6mqu$j(%e\k-ߔ.r7h_dKFb܊yF vi!Dd1p>\7FR'446ga=OiyB;lݲs}gWȲ@t7*l%^`Mu ĢZ^U\j mqhZp\'-w-  ]|9Q1r [[QvÜ LG^ қnV&; \8ç{9w@mp?XiED ?>~D$_BV_E6֘ig~fQOԜlv!\u~NQn!sw, ȍG&g'ΡHC<"lojIMXE&[r~ %}X?v1?cxjNY-lCʆT`#[@$az'3Zl4*Uجc,sGp(wX vtL~S y"pfwlq+BiXd~6?S=k߲IoMjh["zߞSS*ݻV{T ]OȠ6g@f^;,4DfA2MCq sxR/qck1W+Mp; fGG"i|ʵu\͏D~KHru)jo7_5|Akb?8 uAEr5ay zy%u杵@Ӿu^ P |ҋO*L^f<10Ti|i)#4=BẂt8 ֊7 M}ׄ2>HloH!CemyIm46V3VY"&Zjb-oZTBN.wX6%lX~.D%a|0MOU^A VCjqGty7W$PL%QTc(@(G9߫;oa =`hu%wf2OHes T-|N2δҊE@Vy%g\T(2b06J4H|&rՃdf,7N^׀''3GH{ԼN~ےlGbBv1t~9]~lo*YHY 䖟è^wmhnDiF -S ]]Ex.GDt@+7UiOŨwt S;He}uӰg?!t"d"RN9rgkv_Nqn.wǪ),1dtZ [w;|.'$񪥁@oS?|4q px9E&u-v+m+ߡg&~؆e7<@Ap\Cc2h]{Q8aDB XȖSD5nDIɠs\h⊸x^QUU>NWjrʤ`!#G9z7GWT8A`|fv4a$Yݼε|5SZ^>dtrHF8Mk~0>8PگѦ(R&( P9pY8i<o}+/oȺ {93}]P[ڬB- 1'T;*e<\AN*Lz>-G`a|vbQ_ohZOܨBpw..drfxDgM8ѓ0Ik~A5T-56ؿvڻ)j a]Jitٺ~Q8s$""KJ"<*'dXftX׆&>.R<vʭ ~"?2Uԥv|:[ 43ð}Y>E?[HPAd 9_BK8Je{?C.g,?m? BׄW!`Zxl)7VNK?cd“l~~0̈8 ͘.?VC0!C,M`#JP=$˛Pbq:3UNAzG@V?>. T%VH.W d]4b.JMĞ;N my>{KZu(UG>q՘E nBdG % *|נB:l~o}[wt"/d8Z"qrκ) ::c"W* sadI|$7PBnU{ ꓣ~gEg9 =nlUG 6T3 $Ѭuέ:ߢtw6Z>R#/\KMr.u=<sjn͔&$?D9ZOE9fp{.WL~[Ui2K#Ua*;$$x֡Sq|ɡjԸv040UAyVSB`&pCw8Զ喩6v^AAUʿ׵L!Ah2DdD Om.8y<߀_(R(C&DB#ǮfOH]Lun1@F)Ӛ|vبk ӲKXVHėlV̇δ҆бo>J8':,jmr n o'@ KKzkc<XJyU*~5Gz!Xk)Wr0XTOӹ8 Z&sp+YdT.gb(E%|>~>tqvBMy4D)G쀈¡?8)SCa\N5d.&MF-˃KAdt(YC<O))7G[2Y>{7FX4O"4cኟGBoy $) `7*+}׷c:駫ƈYSVW)]uMhec6ItR1r44*34Jh<*.?{[Lί c6PץǻdϏh1z+$x#fr2<*SwUԩH>:8kQ D?Tn.#A=G_z,yVx]@ pk Ǎ,0WW[#:2 (we1H`໒Is D3 lr$1KT쟺 8(qn*;d09•KnzM/\sODvsH^)3ĮN D5>@?9@KqdHemXp ^ "w~=Н;wOG yp9i E#7w U-&8 EkgQ:4ij)7Ud}]P%Ħ–$ZoML&h0|V *ugNMptb[7\Ѵ|ERun;"B%tH$b\qt'p"q&*XŴ3f4'iu\ՙiBTp}HٻWr:8Ej%󠢥 5UН[i^jOcTy~'d[;p2u&ڤ= Ȩ9l|H⺭dds3P5+m9v]n@lJĉsiPjsz:󱃡csmnFC9џIFRi4*vtJP3nk$2HI@ue~*Iљ5wחz TdS LKce.EC61m|}2` ;t:!2MߊtRG|UE-kw#矘"`.wJ"u#bzG~pWf}KʖاHjYwnŒDiuשƤWY6 LTBAh2Qcelbqi U3ʞ%yZ |ڑ7tm!NON}Sz]@bGcKhhqBBh~b0Pt!) a0&w_6Ұ0 fGv2, U)f9jхql34dҒiXܺDf_FP]Ahyo \p53|Mb6S|3qiPjPV\~(\ogV"KyFM61ߗfrukߎv]tpnԌFOmASXR򋋣>oS8\y0M1$&8us7%^}(2;)xk:c,=v? 3$f[I" S;: =DuS ÞhSm.t¿ ߵOl.4;+A3/syUP|S_}/g~YNݚ3k"'R}5;r̫ݨmLf׽3GEE&\._8:lW/3\#TFcMy$,=OAK\^2E=(KKV 2_4BCYBЁth#z(y_i 2!k '.? QpsR̩:#ئ+G1HGu]q<VPza Xws!&>AS/Ж>1WyFMiE,q4.ooFHa~:N`MR+{'A븟*ńM8OVuCX;'M: gm呃1`ZfbUb4 ?Aǖ/Y%a|N~/b%e插H}[qf$3sFxW7(GzixVyUN].h`دc?Ԅ#?Pl>ME*jA {8)Hϫ嘢StRֱ̐&$܃VE[OM2 pţDGB {+_V뽂k?z45YsD]%nDYx=@Fq4ɯ 45GgڎZBq3+nE(P Gt4Ӛ|#2}Ax%6 uJa1  U$@5IwfHq{*+-S e$?C_{uytn\Ț:.K_+b{ArwKK-$^+ՔHҁ^͋ӄ`Ct%O67@7u?94M3+2kz$t;6?\a IضV,YsY*Xŧ5Eai?TaJ ~pQ_zW VeqF&yCSQ!!^.$Ū{4j89Xbk`8NͫU[Ν(yl'-| K6BaB )ņS0jal{,LIyE!mhDNaIW^ Ŗ]Vbo00#rI!cAL0M*mQ.loz!TOl!${*I^g]'=ֿܰHjME\[ Hz\ž3,dp#W yE FEX󠛺lB3;%x=0Gthʉ7e H6Su(Hw[i( @\${7r/ LouLjQcʭ+tS} %֋`|qafGpM'@J!HLO= =Q(qٗ  cx=߇ؕ`oFް*tT_3 7iT(`c9#$M@_i `]t5ĸ@ C:Pg3>EyyH4朎'IrLqԤq VGR mW{ÞFUhQcؽךůܴ\E]W]RIY(Le,lÙoblD%ZF}V'^>LZ[}U;+r+d?8 #~Z3͑ 6ܢ`Y@+Y[KԮGdEnf\"ev3N4/RЃ2B041LC*NJAdDs3Ŧ9[B'͵8^+Bup4T_ (T]GQ;S|۔Ai7 BrбMhzV::`(jMZj{3@/X'4RkT/P0T%op ]Gb]&^M4-,x1/0]zd(7r3Yɓ80 uOȣj ʏqd r2p\UDxQ< 2pIԙ<#)nA4iO'3^Jw9/qiEƎZOKwJܩN3,yLah&X)I2(un׉*s(>ڹ_xxp}+zEW%9i&,i\oԺCx GԼۿQN ^BoaDXEAyJƔzSe]ϬO|R߉#0iPc0Lymzkskd+}k'j/Y·?>7^94ԧizia:N0&c4%R9 1WШD^sKbA8b&jApvet0{"F֜йZŵ[Ѯ+T?u sǃFH|)R k) ZH聈7 8旌B+SߍESǔEXH,wU8AAy|]mviyK6[-2~H, }XrCTB>֜;L\SO4쥥.Z,AbM/Юnzj%lԵql[e!e1, , Z,mxIMWpBedIq'($``>Y6 \[J)0AY '%746b4wb^_1SgvaozU8^Iiߢz)Y@VxIU7p#I4۪.S y.06'2w0DhMqB=+.ۣw8 Q|oǩ r fW pz&љޚ5Э0"# wa#'Lgvhl_'͚H{1[u$7Y+4H/y 22 }"CjD_VO;<4OONt$"VCjZ%NEs7cI2©_Tk3[L 5>1+D\F9vW<A)!s *tYZTYaR=h~%s5e꿖BC HT@i[|n7Lƌn+}3lvꃼK]1dl@3\atnY@?d3jǒQjCe'¾^!he]u֯eyod]Tv nf7AR9KLcM! L< ph$y`w4<=;[e\;T"9t='8l׻zt ;uaf~Ή ۪޺D,4N6z Q' -¿b-Ij M뿊@oUދ4 i+0@yϭR60WHѼ+{as";nBR#@pg*,kC4|*hSjq/լx;bgfР0 Fb:4R'9C̵`sKt+D{ȱI>N_! %^Yd{X/^'af^'&+v.u]-jJksU ׬xg] ˆb .z!;gff%V\a(]BO>o3Ȍ]A3.FjDqJ¾پM7#Wfx&bg.gxXI gkQ4%tt?yk_qѥugw{cv-ƾalF)UNA^A˦qBrx]10|;(0eQaxqI0C]k klm$«4V\00[nڷwKc8M;/n=#M7&+Ӓɔ<6@GAWQ]_b=۲a!;QA\;{CGBjQCJ#0r^km`FԼ`RE zC\@AX`E\2e{7j!(ϨD$⾯LyU^}sv+ ?Z3\4~MJi$sy5(gGaY9Uh:U9ǃrXP>XBV Qf?#ߊu|xnE^ =Xֲ5F[A`p*n=clz̍aO:(08iG@Xh;>#  K،T"! Kܭed@A}r,ѺD j)EiT^؆m]qMPngZsO⇻^J!a ^sϵj_t^}K±0Kx6ɚU4#n#2wo0(j`'!zEzN25 TUK?f'uIb 3d(]E464*'X#5oicwUu׺nWx'+Zv3oO9hGX8x eHdԊ(wqn],6J12"DÀ}!I!sb;y,ueF ̱N1\SE^qRr6kV4m%hMx\ԠKk ]XS$ϳ\ &1ue ~8P$WjzO?ayJywuX$$AD{tƕt:@U N d y}iؐXͰϒ,NOCR*i!&7%MKVp42PpX.e'29zNrZl:G 7f:ŌM3n rFήgƊ2[3j, DUu.| GMz m\ʞ?q˞_.?^טiK<;LS[m .D9dFh+%Z%`40Q+oĨ*C]yT=t)5yJj?f_6kr[5/׏/8/4' OV<%%X\}mHE2G|8*Nޞ?OrLyN7xD? 0wf? T":OhĬT' 8\ǔ%bxoOĴqz=HQ(DxXt-֔G \A${U]%FfAþ?<-tRPwZyHrQP^~OP3fp%DKPLj-^nZ^r7~8ݴ Vs[HQ)1 K;rtO5ݏn "|ǫUd|7ǘԟ4v;r=HNE]2a*m7E$(:DB% 96BIժMb\}#c VWO_lUck=F}[-ӽ}( [E1dAqxUE%jL0oDY`߈v 3G A\bWp7ᙏ%n9A*9=*OM/K͆y ߸jvǸqrKQ/n*\"!CrnZKpےŹu Z*d{+:T*gnsh% ~,xJo2|anTcm͜~o]]  l]t.r'#S K> {t@a Pٙ[̪yύ{ErvIKֶ 2 @SnB`}n:Mb?^B%ϊG.@0hڒu M}8 1$)(ZV|=:*(i1hnI|zv+ tɍ0dYεg䋢46o3ʨ(}p+mG/; Տ #[;HYG"{G=rZWBCS%y\p_}v͊sgy꣊[ GUsZ Jgߊ5bc#kbGsj`D4`pmvpC*AvGKDd,:Wd7 AÐ9ϋ;¿\cj\Ώ6c=:kYELGT|_{4ԘohѻԶָN_ #@EPlSp;T :6e ]NN(hvd@ ^E~nq}WЀ{Z*g(re!Ԁ&P_tB9houNHQ힞{Xر*#NFZs3Ц{`\mzqނ"-rLn!ٸTe !5ۄ ȏZphۆz_' lC*j۪lmR9yMرHUތa-Fe;i ܼF~pʾRىmd]q H(_cӅf@,=GtvJ)L%8\ƫ^؇\! X}JВsNV( !~SӦ6|gWrO҈ 0S1P;,XZWp-'{|b_Bvm< Q ~^Rq/FMWcCA/atn4f8LHM˶.4M}E~Q > nN5VL1g 2*Gټ}HJߚ}Wz䱮 -ܬ(?t*^L5CoWZaɀ q^kA@Q|-UA0ݫQ"aY򸜕?ޑӎ -؎8}` "Aq x/Gb񧞁w i_Jڎ -0h7z>; dPAi洷R ɟfUjV7!0;ifG-K)$1@"ة@^yu{/tc2/y ?¸OZ^,<{$rw܃4:!sbL=P'ĩ2akGV9x7JB~@l, o̹$uG[ /-f _\:԰LXP+pz0lgn#(RGR290*Ӈ1O"wpú@ a^$ocgPŃg5fAEBExp$'콳C8Q 7yxK_fKtAJD)Wj!d?|S,sF^Lh/8=,]jS[FlQc3BԳc@oi콥}9WO㝗dIu8B~aO\zCL{"(~Ӭ.ormVJ)Wqc%'xo^{k/p<2R뤫UqAb& ,CQN7:ybv1W铔GD$UϽʨ7&kw`G%a2Jш9" iJq~;sIj$ܝyIKG&8|FEald/ڭҀ t:yr42&K(OwQS֩)ͤ!'¨f1*4@Ωģƭ%^DžYduRkvM^6 jF\bVpll-u#k 6!D郳,p~Zz! ?ʬ(jH@zt)f0RTb-SNbb<0~ (2 3@_3(] N(CBjJHIj==i=3G SNH7ٽOY7c򌌁}%%KE1_:p-J/JtȦ<:]Dɖ ЛVQ7sWBz .l3}BB{ى߯GY'@ܫA]D[/Իgr]#E^}e 8-l }1s=Y8#?!3\=#lik#Q Q3g1OF{^& UTr5r9ZǞ]`nR#d6„eRznX|N̩d~h8-B 'Qu[_GW7l:-&_2jr?уHɌUÔ6\ x?\|Zw VIT]Hɡ߻A/|-Awnl(7oFvՉ]!~R5NM 4;!c-Q!Ycv%~GЉ{Pp`L1w:Df-Ϩ*҉/U9P07ugrgͅ;j9TaP ߰V;Kho%zye5yV>ވo~\qU<OI=6oaR e+`C_@[;S~Ru؊)oӺl%ڏO=RZF~ЯeU5X%M! *Kw3ʆHWp9D; d[Mk˃/d^nFsh+\q8t~C.6 bx훹+ G^c08;jC&5/'||8%Y/aF\UwKKgC*Z@1I`9V3㉝%99]I.m(D_Iq'\v!)QkzqavOʏ҂k|J kA*E51 ݽzxKqd{<-U[_oA:Mp3 c6M 8-@UN 2{ Kn=R8qs!Ez6{|G/w+&vӋE L{uH䒵d5 먾||S >՛X*E03 cӛV6wMecA# }J?~:2Q,UCfAM Zf_b)=d%B}&lz8XaWB.#=0&nb_YAy`;Le\MèU Ρ|QFæ ^=fÛP%K0ݝcFP*M7CwW~ie}k95֠RR_Y\UU ܶ C!Rj0UZAah ޲"Ä) } [ 41$&BlôA"S:SA鶶!ŐՉheW1ul)/r)zѣnK Yh VuݛT_!v.6R hC>i[MuVC8I 4^xNMnݰ%LgĊ]_ˑu坉#-`):)\z0X?mC-0}P"WOA =.)1K, GvmXMa;sN0=>h+͚BXUBMm1PUgC&e{oʘlF\4&Ȁ`TJwO&:+/9 -+~%ֆz۰U0<".U<(ɗ['/ a ,ٿUWpi*T2+WHv>>sR=%?ZP, +maxa-؁ fʲlX;{"*^/N*WHgD SJl:i&|ܨN߱nrAbcAVzar^FG^#Q*M0h#hm[8#:Z4eyFu6kk[*F ~(t~+C`D)i~^8Q>D.Ih?/{YRg8 }y=ŕƦğy XD)A8MIQD;! m/< KY\@%)JΟ֓fbJs_Hn# xS]Cն*4%7vI-6A!0,hWs9K :z >_ Chkxa3MSmҕf+Yp-û8+ q?d^"̓/ԞɼhS㊍-bj)y2 D=th{rEosއN޽۪^)tDNsk\fM9B7MCa0}7Rt2 Gm(N +@ԜM݅Ph?( 7"GC3Y>m HˆrsNM]~ tN&8&oILJ#k:S vԔn#<(Z%%Jgڇ-X !|SAts*`-&ܽ\U)z6zx #ͫ&&U:+7N̳MMoض;LPM7;+Ay]JT'gnŶ7 Yr$s:9|;,\fzv# Vd:"sc\>%]+0vJSD$S42- %U*Ф=\C b$D.&iA7[SFjJDyPQ1AGLa`XǶԛbHRecCT(8gROfR8P"+sa׾kS@sAg&14ao^`XŶo.h<muk 7,g͟=X2Px_KBWnJE=VW6zeEKAs յQ"G)&o_aTY C~hꫀ~? ϖ37C.݀1GuCrc)A@6"$M*h g{z쾢9~\.&,LoHHdz9*v= %jkl'h Me b+U 9}vi$[W6~ 0XV[}3J#/:tqh&szAq  A?yLpI/{z풬@,yԗAY+w/s;w-*jN?ߘFka}| ťD9Ŏ_2S8Qg}Ǔ=ghOKCP[)oMq_!XOjd.{. lRa3:DGP&NTUYkYvSo [CKibc6*rG0nױ([w|^{o\zt|믁Zփu %HnfTQ&dA AA1uUP g%K. QGӉTvCM$tC }fu\'|Vi=nsB=[B%xc 4M6:Mq.pL!>B'[lZ(t <)s] fJWbsEϹC*Rr_FiYY;4/]Q5ZV5PiwIZoDCV 1/2ب Fqd!LHea=^w{- bve͉z ªpcbd*r1TZ=Cb2$CbPCy'zY6ƳI!|y{Έi9v:)Ζ rH"!zpf{~gm%,|yOhFA6#Հ ALn-oE4N_Rg 1xgg 'Y@ʍtz:1@[Y^kHгh qT\v``/WeVHwXqR"I߅{{_?ns\))~*#Cu?) }sYv!Oӗ}5\ے\>wvXtW&i"u 8eWG!7g\!p Dmaya߬OG;=&<,{EM;\)Нj|%WLǺ,]9`$ _2IIF)I \yORdW/G4Ө*@2[ZDPڣ 2Sh^/&` O8ҍ ](FÖgYRNY٥kZ>,sS{++fy6ГoMIJ3s T QhZMwXpm4.%Q!z @cB0Vʲ-z+<}U,D/8yǃ^gEn2*d E/9P0librunӏcJQ_T>_ot }>bEuxgjioDZ:i!;ahف{\AN=RKQDYZմTǘ^y *P+}sؑG$NbC.y ed2Ǣv/,߱Qֶ1i^5Z,ȸLY1fLc2pHsTW~:9f*?]R/)J.`fXat+>m;f" :6d ~W 7xETaG9-,]úpۊ`"R [Wv*ס4S*ۏ,W`JѯFfx3"r. Oqupם"}@%=gW+Z=ט½߄4%qXpRjx/毸,g C͕ޑSA\:8kDiFXg3'D%9e/ʕنPCohOa*~pCiPe^fKuRjxqS~DS`^]U _ߪG Mu^+^%ZPF>T@ BjP4`SPƟ&G|'^kaOS487_"\Dum;N?hk*uGpnӲ,mM'%Rx`%G{Eѐ& Vo2Ő>RӤ hsTT"ОD;`I#%&~Wo)3B9dJ:q|ao6~UA_L}.^lv#OEN7GW]3|akՂ4/ 7-s\:2~ѾO TeT>r&/zMpP'Or*l#T9RMwJ?_aBֲIEq NI"7BC6Wb2LPik5XCG^6p8S/Bz|_o/hAZ8ҍuq]18;,9&#Sf[58\rf3o0yaG>^&|lL4WA5;Ҏ9NqުsOх$K֬(s}UȢFS^b$ !9~8 jF?%{>rZJ)@k){b8ykn0gJ9T$}yTR9a1Ȯ?&եm9>$\]^kc;+3F-b"?$2$q|Yd$cdLk:']oYgy/ȲRIˁH=,!Ԃ_e`CLe'=Nu (p3}E"wݦv$B&o=ON_PŒolŸ?C W5;5^q3޽ߣ.Π*f+Ie&3&-]# `ܬ :S MBBN7R/GnSn#E)=HRQ}~pܛB$ }%KݬS[~^M39"sƿmKYzqo=UWCcy/WAՕ#6i@ I%&1RRP߸}te_{wngf]k[7P}H#:gr5_|<kiryc-Ip߱)  N{8πТ'0S9\=p~Ds|x.='{ۃ~;3Y7(ϥYE2iUKʥ-͝'mp9%GW\HjV0Ӣ M0Iu5C/RHM]42"U\,q#L*Fbs!HSH5B]aaGy^x$O&,7 Jېc> A orlidH1?kt1r'ꖽP7g*><ϲU/s>l ↇL9KCBOT$EO0Yd9jB^zѬ m^,Ƶ{ش@`d!4x<2*1,h0)`m)6\E&= n="Xfݭ#ۂůGBP%m$ݦ3EE5msw|'0Ps`,v8}5./^VD7pg$P8֎ {i R*B6iU#$l1s13z?fbԋ ڬjzri?(Ui+7˃+ U;rU>:2-}<2=E?S* mJ8")3gdɎHI0xgskf={Sv( ,8BJ {y8Qrf51Փ)`\;#ϣ8ݞ=V{tob}$mFM.VYA&]t(55  M\ bەMK ќ"N6?GWsPN?J ݱ(i bC\\(cL2!:B׮&'0hfFʠB/ҫ%7m%Z?,S[Cr^s?U=E 2Ϋz͆iFǵMiq&s P0fBICM Q (\ E0P­_M7o~ҭ Wqn l{{ݢhM6j, 𑛺]9"1.x7>d&ȂɶbɛLkbR%"։禎 Iy:28#ؒgf J]PX%%{5Lq V/Bݧ juAy? ?Ӓ"BPd>~!Hk2 42>Ac~h3ĈL9?};a; a8Zn[H:|8e ʴ"IF~l#_X8~U P*V=n4|i }A/}Ec0n2l\J|jHL^kn*;&QoXaE~Ώ,A/~&J}1_a՚|}6 E69é6At$*;gYrjհ|!'r-KEZ5s+a#vЇ\Iye-óTZOddVK6Q᧙\%:' ~*\ e;$OeyPfXU!*Sm/w: \kIV!l,aI^4]FN-[z%*B~`p:&JY( M荞LŤD@/?Qq0!NYlFդSaZL+ՙS$+hsؓp `ԏh4i{#IgԓDȺIbnQs['=%{nmoNzz/OB6g=U:7+IgSE7S٨e8p#9lU/ʐvƉnAMS /#k'bc Ea0$J,S9l1>ƒ<%|c Qu$LNWI(#Euc#!|E~vHUS]4)vD[vRD*Y?s-U(szGXHνv^Ĉk_9p̀(T+3^Q/)8>SQ(X>@qst`ߘ``46AW!<FI}rh=$ťݏ{5-Ǚpfp'캛ڒY@#Ҳ , ]v j_D_n7IE_ *ᣏ>9_5!HnUD=8$8Va}!!y~ &dEkK211w%^\j$,34H %Pfѕȕ|;`3R˘#p ΘH}\5 Kf ێ`*#y[W5ǏvIs27_=e6m'#>A 5B]Ϡ1M۲v2Vw-F.7ΞxU^btH."RW,e/ho?r$55H y#Y?jK}Tz BK =(eFey' /]iH8&|0ȓD  Sk?CEƉ[J25R )N#16XeRo+ҩ ycK_g$eK׸ᇘ&tġi*KFmJ!Αe~}O191c=I 7: d)lwFB%08HkVW՘T ~8HX|% @fy;:'eˑ_,ԾGkF+.qn)Z;|#nvuW?4m7YcRLq>0$m$Kԡ~e&9DqL.uOT3  } 5F]ˊӟzUL| )zH3V5V"ǣ׳ ya>XL?3!spR&ޮb/ Ց0g [FI zhZ&e 陙ȏrSGbPג~c" VtΝhb߆rm(po7߾1[OPg[f̧KtCWԡat•2 v|t~y.g!J{Ji,̣HS9t[;gط]4A:[wOgIj 1,KS,epiP>k/l 3J#HC \{ :(T4wD` <p9VEGEopOpQfDa`,(~גJF,G1%DjBӨ^~}- bd=/1wnp,ns$yk)gw)/gS'J_ՄFŒ i\<>SKT#A"&N$cMf+#RW\ TSΉ&K9c}ǿL}G5 N{<[xQNuBh ճ~GۧgSW&9^1o5+Yˏ4X+cP|9n2Srm+Xqj"Y P(o/TDs4ȘM{jЉ-4,%L^V\g1uYK2(%kV^洠a'֓HCѯbfεVH`uzM*| qJa^[,F(Kv%eس ho6.XsvȜִ>elgGLR(' ߰fڿlCԭmH: 5 !m e hBL.F8Y,IoMABC8"Y#) tu`b9&)Ո)W(%eī 񟬟{w`ěJ4HHië4򣵥߈S9 NU\8K}98 ~6x679> fJk 9 y8OhrY@{Z޴LfٿYr%fЭhB j}MBhFZ"G֊%8R>^ eTɌ qy۴DEUܿ8o%˷-گ U="K΍s X-M41#ƻӸgTt&I,3+˷/LjaLkk] $_UqB7ɛ+! ݫcq`X9Ä_L x5;TKэ4eu>vV_'7|Fζ􅫪;٪ #|2M ˼  2 wdTnF -)K\\*Mī-|&#(jw~1!+0y|XbV{6Bn? G#t V3۲1/$z"`z\lnt%}fO~~ WϹ_faPwe^7eu$[H&пq>}[ܶ;ݰ O@ӈk5v |TIo4QfsYOmDR>VNqn5;WrU'YT a$HԬPB? ZS`~t Ϣ]i1@y-&c/y?=bx$ -$\,=]P3F[܄oi (ҿg=Ɵ8lA4#ĿG+"Ɵr[]ƝqҟTb/tc:(B5 NgK:;(L(4"!q;}G`sM \yF4/1r+ {Z1\YV.!)kmD;t^P|xj zh3~^ɢaSR4raܽUA>h_L:Zx"\>w>WxVR|,M Dv|wzRAJ.ksN{QT@ù|H@Sp]C &l9k)vCOrraN9ܢ"߃o!Q%ظfјP8j.|S-K94w|cBX{۸Ts[M"\-@ rۣp|Lء)L:qP< i`|g 1W*ƱR.a sFEKj~1e!3J-`_ F˃Ls0SoÁC(CC,sX<-2mCEX@(0(Thd|XZOv=ip @P,F B({D5Z 2%;`9U;Q7}V=Ye&~ν(xЖ2V@.טсJ_:B9dط1^v&atp/,nQ2]ո nݧJudb5Gav`)2@rw`\B੦(Ͳ7Hޅgۤ?A/HAXXj=,0!.H0ug1gD 'Uϔ#fWP`@QSǭ~`/@sMN\6/h\;'_KESg YH6nmEc8T.gRq<-p*IU(g, m(`0zy^k3mSY0 ɒ|q!+I)WTDf7|]f$]<-Iк>R ճ@MlF8Y9FDr4G,q g0j}%v1en?0 ,E#ΏS(}/'pQ=3usJ!-EB# ;&}{1l1Y6@)Ohs{n'֭R Q4 ܞ\JxɊL8) ܺcy甼o~;= gH],Q(/*_]g EY]ܺܛ)"k={z)+CǓuDvZ_YlaOz?9Ukj^‚2-PrĖQ:c, -Ѥrߞ-_/PKc4%f|?"T)c_2?2Zu)Qd1C:EFUHm=K;+n\ <Z2M\8wxk̃1bgΑ[2ғ-<3{hyyaSŶiWW:` '*I*+i q:uQڄp3P:6䵅GqB*H6_X J{K 3G>B\sp~'<霮%_2ᗁ]Wº Z_ 'F\xLsW~Ev@{sw#Oj6 G2V!^u!'ݮX!3sPdB1/a> wfq'.@1QKf6x3'ss ͪVJwcy `Dnfy1s h#xeH j~XEn43D͚QcU`3vcKyr a)AvL m13HB29 d8}2]9nO()3u ХY0?@nUQ-E,7BTvEiav1I!D6 M&EmϜyq% -6R[a dXyVEjoS~9-&ŀ ڥܹڨt MYG) bKxzy fe^҅o!hQ1Cj=NKqrV&Y/-^30..ZkMMzќecy3{y/HHخQ ss-]i}m u`v8wAr ы&R {IT^~W ! i߽v60 J2r! <&@ ڷ|eE'F&1yrw0[*;'A⸠gMp,Ժ7 [ɿv2G7Exs/ש6χfAK/#!tvZZrA u屏 -@"n aT+ekݥ( CL1,Pj!%g.7O3 :?=_I+o.:00י~8McLϮU\_A,ԛ*L2YǷEוz1Qt9d*lg>13sK,=uZX±USy: G,=fQ Bq-Qb1 NRl[^xE'Ы#/M282ږHQu\qY6Zcd:stpK@$b)pozV2EfI$FvyO74+EHϻR4Z/NsU+nXpw4 햅~rS4ȉ8;M ]85 s_=m7$ i[&TO1ݾ`%7{8P<9|< TS w]%GӠAd:Ôoj&;cWx4ܑ#m x%#9uoK닳?@BPPyU!H}u,f$tӣ)KF$aJ"'z׫V Wà2?4v7#nn]bg;T,Q%;NI1$%,L*Pwܝx؎fjg:+C|A6*<5 3kXeS6x{qk5z*8Uu1p!֦!xUM$JcޢJp66 ee;O &"4 zLUKQO`ivzmg[ 6+lN{ՓcɆd2fz[btkH{l:[H1KHh41;1b'J"%GKM6hDO¶LG{ X;k4nWUݜM4KCqVuҖE]ʟ,=zaYV<?3LcNxWvU7$aA^1Eg\<µ_`8痊|X~h*G n^]협2h^1+'ۡB/ DRf`P8٧ ( `c}'>㏴Oj%\/ z 8 qUHt=5A5au'w0~ DUL#w!LWԴ;9$tS}3ldg‹l=\㴺މ@)MX3NXPR:Nem̏;{s}߬Dϴ*ds/Բ7h5n•: E?,>%&<Ȥ 6T8aRTb ?Ǫ4tχq t6\ гsڥR Q^/vV$[4$_a(BjD']%id8y{ќ+9l3OTp&_}%!MVXnn2k&pcx8ÏѺl2PkSapJ9 CC:!4^%YMC(aAfW4}s"7ȯ#Bܕ $2\{ w#'wG 7k;mc>ҫ@\P݀rrdq/\yw_ ZbdY͒ebvuF^l%ISm-ɞ[b3x`z>QoLOק$d>^`^`WPòD(\{+7Ջh<C˯x"YVׄhH]'5r?1WO=$>(t ܯX͠ *#Vw?Ʃیd<$att*MNl)Hw0]"~׈Z2$ŗ%MrU*\A f#ŸpKde7s1L+8֥Y&+fv2Q ~Iw[0.Q{ŀ0l7&:_ҐڌLx~mu)H~x}RMOejq>k7VzE#v32Q^\SbD▍d)ZMMLEϓ8P5b~5;"pW.8lc)Y#c\f!.(5 R$ek S{&CI牼5KYN\TzRbw5X0X=է.>vi0J,dֱa"v1_(r[s#]kQR ˹-B8w5V%g qop(^8=ڠ0]~Yر T:y z%D5 ;r6uǒ&P._*/S'B(C?Xfl8 ,/I$([9ږ#t0ȿ*>e^ḲߜݰѺh5?<[25ISh󐑣JmlG H6{i9 :]4t!J&[V.ɇ~k};VaT3ߟxA>UߺfϾI;s¨NEF]J8|Ѝf\Cb&uQ5A_ݬD=>cC8#rO"́^+{kHTē=jdM_ #E!tu \lWKݴ"-:!/R~PhPs >odﲃq@} ֵ u :P:- _bC1i~ &U-ޝ+3Zp(P1 .ڬW dt?(' @aψ.v ,g9If6I<>@m?yZs]#C͖*^M5Z=klo"ް UdNOMzH~-o8T,- q {F&h8($b+ B WXEKzN#1@00dB^d*/cE‹1 fEd)ArKL-]0h>qEߑZ.vƤ8VaA9i@3P@>AqMfnklbcף 47U9ǦeY ># ){k[Mt;o9Nc$t#LlQaOT]H"oh)u)v QU-/`0GV(T474GքƕD~+ޝkN\Ë( X N>#!'+0~lxsMuc$?76f7*R*wD[r<6O:b8:n,5I?coX{T)[~>^«)!} P9) -ǵ#?7 Ї,K_Yk-Z;0p% sԩ+\tZ'wϝ&oE*pLxlüu]vyv \Ο su,܆U"eLcj[Lׯ>4g[VBP2}>k d?Q?UAm#h7.!3SS5FۡX UN%VKUgج%ecK̃O9]9RH@=@猵3J$}J*lEVCGdٗ*xZL5`MېE E$-pYޮdklV7:sl(3ίV^W{)]p2:5KZ+\PVYY6NblwsRM6]ϏuBR\[>b%c=l`̐1IE@><XBXuAnROaT~dhvn[o=[1 u7i9$E5}ڥi9Lf6aQ+BKCw|ݶjfh8/'ݙ8/(7XP!0QVB1SwGG5->(&H52H3Ao)}o®U%|a8R=.`CL}ЏU::L6rE*)'e"` {nO_ ntiu/QiHWR*Os3l֚ jr5ޠ|L[Xn 7=uPMpJ 槡+'-6+ɀW0~Qs29j/Hաj 63v_Z 'pϞ)Gѐdii h'a@r &3ูӪ^i03,-FmGa$FwG'TG8Q!@)S%.Y:P3sbtvSpQt'-aw8c.4^fcpY}&9l4ytJ2JK|"̃>RA^QǍ je8$%=fjIAW_lBHZ3Gx@~mnI>pۑ!^S0Q25s*iWη&&ë|iKK8g=_fd}!hU37}$ƾ!F.6ud;7 9>|dw_ҹI:L{EU3$[Ξzv8sXl,q;IFo fa{ 4^a/[Bi,01x)8L!עVJmFN/No+ˆ D ^sߪZ$}lۺς"vl+j+CKf9MmhgFxRM%q6kOf\ّm9}!ޡɓ &b \w6o*ůG h2<:JҾQ -jR~v&Q-5Wtc*v+&3{:KC\2N__L?2W2րVg\hCC-h`r͛jWAaK0#|#[j=%Ĺ`@ IܙW jKgX9>Abg :C?>X,ɉyY!߾_Fh|"~E>YS_Ep͑YV'{yv2ߕgxpK O3!j7\"|5!?} HPViB]VF6Zd9E$1xV x'" C(gv8c!7/ (LS4%'+4˼>|YK(FLB>±fE2Cv7CdVuzHw.W& (ܩZ+I.gVW£XӲؓ[.ƺ@oË쬗eɎG6d t)'6Ó),>j1A\i䷉;`l? ǢGFZVq~BVBPx='7bUW⌑U+%$0?|lzFv%|~|1g2hr8p54)ڠhg-X]t9hP&&Xgҭ毐OL<#v]Ok+BxѴvSX".{Yশ !ԱS~LD3@X8'.6oc=9/W܅Jdl` a3X1L:V~wlN;c"\YJO aw׽Yx"4% tO+TH0椢뻽~=)d1t`nUt3)h6S']fRc@ݷFՖW0̀iieΘ|֫qF}f =l7`[qpm Pkr#FCuvJ>.=n!F!ӡ`* >XXc:{i*pEvu=7A~E؅!ᣄ vTZǙLc[h=H9剷Ԣ}5F n#}֥О3˝TmK4M WA9}$'#5JUlO/CWޫ#6 lV~xWX *QҫeCtHaS7#z5g|*RR!j8&L5FiPMWSA0hwz"g̓G>D xO?o`B=9 <`3=kžg2#޽"򃉘7 ,VpPTu&bBN_m$Ā@ŧ4i&`'wxmҚQO_eumo@В?scʶ#K6AZnYmᜭ*HFL_.gLZ/}2"k_]Qz IrQ@9p0>4{R װ({y:pBYabcރc7hPX L.CѬ|f?Tp׾2Ga3)P{**Z5MS.G;ㇿkr'VcmqjUxkH$ .gTsB),/V:uVgͣ=4,iFeK;My7Ř\R~@'Q4wQ"ϱ*!y&VmO޷Qc=IK˘/0. h̯R~o"QMp&;ČO[23T`ESPYOH"Hr]V7bvDEMO7s`R<ѯ8}Ki1uy@=:r%\e4~. @rs,_薤])iޯvy˼V.w%S3FRlV%xB J}jyްY~eUhj^m"Y AY`7yވ߃9EVd@盁A]"a)O "5<^$*J6yi-vn"*rc*|SbDK¹#M` P9EZ=}4f=ϱO%_ȨJ0uJBM5W~\vc "L".X-WSN\4R"J.UL؂Tt67-HN qY|QԆYOڢ-JP4 `8M]G* ؿZM "|wr6,F>qf㺑ȪuDԱ>FP wݼDdgiW"Gh?;ŀ <~b:33pu.ZcU^ ׄ8;lv"L #ѴoIP M{h gԈMJ?9Jh,ܕe=HYg.I QD]j~EP!(.| b ՝f!4|6TB1Ƶ)hQqkkx?ȵ3~(}t /pT._ 3qCoPf슪IB?Kym>N*~"g*Wni2$ 4T,Mnd:[b`UXiD IlՕ7 zxQ * z%pI;(y76Otע%nYҶ.PJ VmsOE$|7qWw"ָ`B ф#&P5B9km- MF) go%oTlaiS 2j( JrУ 1c_ۊ0ٱh.+N+}miT<81R{FiD *ha>E]Үf]c|箩OfAd[XYior%p5[}'e`¼h̙ .[mK%Nm\dpHlr< OjҪەW4e8="K"~Qs}`OΝ=ՙ7RQ92 | 41OS?~c`_G7V~5OÒ8 C}ߥ:~.\P#d._0Q|b2n%kW$xɻ&M"#mų ^5=cr,h6S_ V|I>y8nY#;K v5x@QJa!}i^_AXGa9`OF*nQ(i\=ds m|:ej鑥3ךqСҁ7ԏml̟gaAeGUcIGr E!.TQ~q?h9gI޸ރ)~3Cˋ4C|sX]7G0 9d:x"^t f#cc[~03һR۟FV>AX%!m7Z^Ż7H5Z ϡ՜|A]RV"m%"1:C"ƨ9Ȳ΄5gunRVMFez,na[ƒS;Qu [[jO^6JS/zx$o=9MTѨ j Ҥ"cF`Фo4nj6 Vt6stʒLg"hM7RA;$ */?54Ϣhu.κu58J@ǫ%O`'=>_P}E$t+:],Q@ޯcNaA>FC?՘ܓAZ\5jqڌ܏"<3w$36 Wu̢I_NbF6nXt; echs &*Vޞz|.芤9UNGJ4VɲPqT+,]/Gy@jq:l/)&ܻ)3aCR4">@'=XJ.5Ees#A`3Χ'W$<1򂭹zM@r5xZ\ykťE#3vE s>ǁw8čw" w`sFsJ4 Nq!K˭ፄ= DP~-`3$ڻUva Fi,}{F<+9f0"Cqqw@.~HVؘ( 뻐}^gd++!k 1w~zyl"]#Z4kcU46ߊQ !5+A`7Ѩ?ذ l֍sa?ڠJ}Y ^[oR`>{h+^R]֕-%;{wb[,Nf{gmo'jxf')@+V\D̦yo<[32qQJ8p:sɽvUVXRA.!Z+с4 sh\pfbаYI.Z4zq =4$xe.=mj^3LvEf\CFX\Q#"&s6TTEn<6^I)zG$@n F<trr8&]8)TllkkX*'A+o~ӏ)V•-OElEU?P $\uC F^sM3NΚ܋H+j_ ^DĆiuSeAο4MCz3jju1u*Mi3\ߢX.󜾕xJPNy/q+eX͐iPOθߕ yɈJGUY ju>_&-"#=pxm/ϰ戯mz" gNa}/h7_W|:yp4NzX\XI;"j&G ġt8D}+ |4mlxEBv!BM7r[ֳ(F~T#tWqqWUc|lK}xńiuP9s[+1#U4 zO~,{!cy1b58׶0b.jF0qnϴPǡBG`5o!R0sawaށq\-*n })4.2a;[K7ύ<:o]9}~֓QK)Cl2i EG0?;'/She(68nbalL쌦JC^#RdX~tc`5$8l+M%Dq.024w! .:̜]ԟ)d>C'>2;xhqUy2{XjHHv9 " WEa2vx:(lX J|{'eioZW 3ϧΛ_q\YHa3!=%sg]hypMe[_1d~w1Zt I/`$4bn?%1z^I6)ƺIBW5=GdoGYg+ZpKOyrݓQh7w0AvV<R-ɌEsUq/vDyzk(mfS67$>k.zAD}St_+Bo0F,>raD4wj")>FHŞ.6)&:T|2ل.p1"r!" )06$DpT}YD# 'yȥdO-},;yHrCLs?O8JuSH"}qQ3\*>c7}K}|\r~Yqj9 |҉6(gxց_;g?:cj9eύdznU̧24ApSzpsgbGvD!CnyM$6}K0J)BzRP^Z_@ ߬jB49' e`'ٗX25|v\2%N@H{8"3A|/M3W³ӎȨE ~POcsT|Mϵ$Gw} cѱ ^r~vncwM',;m'P'fHY>C,DvR' p0VRy^?- z[VӤd((VoH Bu+{ a D1WxTޱ[Gbn~N%`7W:|G|fq~m -zQ)K7+YvysЖʿ`8?CSD4sCGs1DG»0##F0WB\XG% uu7?7+3O͓G ^^w)`nv">LNˬz`z0i׃r{т'@;#L% *_o_NEAݰ*ͨw+ 4Ć]c>U .nO%ݯ^{׆' CQq}?S{zmI*aAD{?t3 W] {qqO>L% 30"9؎+2:ֳOYt+7Ʀ?keFCHJnJ`]8u bMzvjG/0c +\%(Ў%:\hW("@!r+E^2? RŰ^njQa{fU^Mv6A_4\jECT>7m _(Kkh 3XhQ7ߟXJ Jwh]\X|Ԯf@qM18tb23$Ыw%瓂GI96M7"]y8ʹnW ʤ\cP]J:Ea} :Pf)dHyklmi?bE!Q|tp"IwpNc8̹hXY4ѿV4–tz)X)_XNVeJ {ܩ ţsw+1Vs ;'AZ^T[~ݺSQF_-n#o<ъ ߪnk0+.3K-`Wӯo_$ÚbrbEٓjڨVZyd_k`dxU$z6jy{ARrЖyacdTOM"g|m Q׻X/_~zwhpEM ,Ry"8NDKTaO fwv[O=+w%>PŞrf*~EiAxnHۉK;pkءYo o[T>4m;ޔz3!0Nf&9U'0]gaAxWC֩Fe2UKVRRvH lUl2|'D'(17WIbVL,pnwA&pa19&Vݝe -Fs'DKJ+T9 62ZT lAPzaـL=Chn7hIj[xXuE!pQI n"+\]|61կ!`:igap_ ^[sj0*#VӭnJLOH6ZY 5+Ò ׺$xT7~e3T%V8=a[ !)=}tt"UJ[$K^Cv\ʙ̵ ' )OJ%NʼPR T\+/#Xtvb4 "'Qvfu$K#g᳄ȵC^!1Ϩ" HA<\x)X*?<"rw+/4?5cfgKM'G2Ƚ8U2)!+úZKG<`ˮ(&Ƣ`P'.h+&fUq?٤Xuh`P0f_)I&iS b06 mD>/m Ȟi7(A-W9⤡c$HQT'$L"~Ňg#ߏ !b+vC1YۉhxmƉ]^S!,y`SzTH&lz%:$ R%*?w~s=h@ˬL#V)YFo V* Jky\YA C?},cװfAiCqbx# i{+>}M}X遇C嗷芟H <4@Q=5)^ Vuߗ)$u96(0w`f"̵RELÝ͹9nV K/Q?Cy\p&4dg^ݘ ߅z7iy5~=b%X^(LHxJK74)FLJ5bޣutP3A߆J4]c['͝0oSaf\Q,ӰkkjIV/oD[U` &影p53gk\, S-,Aڞ)~ȓֿD[F yE?[1ykswg _ScJ"s dBBz:is/w;$[b4Q2}5N{k$sin; v@AϚhA4#ke v}Xn{"|DVcY5[d3ʓz_AED !P#eu;Oi`I_g`* ޫ@2PAL> XF3CM8ZNHgf:jT䬓^8L)le( }naCE2;GWfi_z4Q%*tibg0})ZsMxXZ?IQihSu3ů$̰"e#4 *,F8lW1N*=-&IOkͣ]\ 〙! i ' { 9"6~^.\db~3 twseDYI'ǫ8 .:x5DPU;[q3_5Óg5$uMM;KN+=x)X6M&#Q("F m:*\GVx§vg{kR?Atc/w_-0AuNtT\F &M!Q/Lx|T,Yn-t CPܝP?vAt?q("H:j`)G 64v涏ffӢ+rZ)J* H7;;)ӗ4v+l~Jmgb[S'[(,dg Z &pш@ځ$ai2Ȕ(!vL+f:@~Paft`.=կ/4)h 7.}X}/41\9{W_jm2 S=z#Ƿ3`[=kT4*P>TqFh+uN[h jԼy!"r.V3^OhUhB!w!ý T4[ J pBI'UEK6d#3͚X2(brOHN哶#2uxIa+ ;MFLje_bF4!+˳ 4y2].&.$\sLWjغ$ 4Hz@]Lʜ_})͛(~di3:\` 3I$ +PODHBhN},zZۙ{&1U,&V "~X0m,Kk$-(G!Y0,۬ʐ+VrqM:`XľWx V;A,G +@ ǣahf {{nw7ZVe}C,Z֪S\[\ޠ${["*t,q=E빝?s꺊Ը,6(%Kk-]߅8,.GuU N|>vIey/_ dDtŶ7:` hMP/z-tyXt3Cxn'\՗0/hJFQ69&pC|^y6i(rml#rQvoI{?:o2Xc $tr.akep2BN I)ʐ+t.Z>_MgEfg%>n:ɇCTǰV+O1w{0X=N5 UևḨR4V\2HӜsP_ZI̿V Άv>۴}Ʊ+4x--aW)x@[JAM^TŜ4#p\X#qICwDž.>( *5c΃./;twTHCݣ *WB#YdA+EHauo1m U Imx&I_xRCX-bq,R2DndD~yWm4DWZ,򖵘| =-Y Kt7&z^b^_^vd&fQh-Qs],$r0 %Ig)ȥ]v٢ )Lkp76M/t䤜sp(T}X|;ȳxU~N幟f4 LwxW$4߼"ӑ}dZ$k)',͂WI"l{TUZ_OYw-|?Ͻ60[ =ݎނUx HGp>0*M4&|J"X[Yу?"iï*=ĘBpX:6=Hm*LFnM1tho' Rsݶߛ֕lX7% zZtFMΒdBFj\D!e-tJ)C43wGڒ۵GGԼvO6ǥ·ɯDUTYNiMk8f~@ڧ-HVMMv@'W,}"ix#Dݥt2}?ov, i0 , EzlM{5-hϡ g]sZşԺW[c09Vv'AX®/#,48!S&<$ToF;ȯ83w&Jnȷ 4<`is\:`bJ ںEv牭}z.W9b Xe݀uOB 1~ N{ nfJm4,r]oi_HL(EhLQjMD\!12[ybҷ_"ZGd%haS+]x>Uxߑ8]3LpĬ`` "P-.p6S%HVMT]44c-)܄4KG :/iX󳵎mVJ=b-q:Eg[e[E Њxhy+PgNBv0GDbBz:&Z;!eK*==|@1.j Af"uiy,.."΁Ob@ZNs4oME"֏HFo( ==Y.&$QDRp$-'.Tv+ۡ9neԗW;/\FŅO8dPzR8qIiDiȳ )еYsH-IדCaj?xdJV.^X:YITqp0BQ3 xiBW/yVy~t' rX"F7d$sUcv+Ok%wZtƏjנӅqf.̇np>z ?|AS=M6>Tf))$qwGCLcfK;g(SF&*-Bnɫ͕+T3/B ʬpL;&} a 7ԯ?qG)gξO4v"t'>+ϔݵKB']5dk"􇂏>.i9f< 1-e/S}B7KK#ajNJ-2t( 5)$"Tsk.0IKHd2{~pސ|c\\}&>Ɓm?3qoqCϙ%37oZZԜwx~zc]-կ5<)Dϥ'f ͩsk’ר˾&b|ڿXquZz_n]OJPG aZyh ?ΆjLՋ%=η>닽R v%ϻYzȈNefd":Wf~׽4f bRXRܷɎA2vi1, ˡIAo"c'a ;'ZٕwIUfB.TaDwn0>RDP멈,8;LmZa3 }`?[PN)L%>gv~rh^2XV#nw@c.BŒ9ug4-(כL7CNA-˞qՁHc kXHuڞFJ%)[15ĩ8d$HZ^boyYk[VߞZ PYKt=l8C)rQ,'11[zXXwF6?A|zl>RF%PA !Td~ntY >b{W'،kU xvR/5ɞk 63|EUXu33UdG\Ȑj>l ?efC,'w83`IZϰf@3G={L4fhd7!$jlg]v\<˃-5gWr75pn#ma=gP6{cu0nXVNsXh2]",f"Dd\g"i, N;hf#K$v=2]naᐋX^)H#Tr|R>%+j O8zBG[`% "Ue'G|s$G|;(%?AMhKA3!>S" $93:i4N/jA0Ȭ5jLumZ0?\% F; T1B8~6C&sB3[V0fe¾[sN'{؝R"|Y/ڲy6Fs=|Iw4gJwuS3]"nwA01Eo;T OŞvQ걡 k6f˦' ],n@V(-qR V$Oa9!8oERZuMxDs~QwKӿ Pȭ:e%"CuoS]}|$ %SaݴmΖY!#H{ApP Ӌ)* O~?*nB7;-Z|kf@_FuQ&eI;j4톾H PcEu8qw>JX-hH91[oGwkIGvP=s :R+{f4w|^0j͟jv[D0o]Z[}iMQcFθZzzskv`BbW6L^V^ N}S sgnm x+WRb{'T)K7t<5_>4W P$RoZOoA(O-y~oW%Tޤ|#t_Ebk0=H4 ʹ/uS˫ȜPLW`ΡrhhiYɏ9Qw 21xc<i!@[ RjPi@%uT}ً{huNSy b9{9~~{g_&~) E3tVY2nGQπe_xl`QSf0f{nc(B^>hX6)L9c'A&چ{kǂ 2sۦpyd B,JҫA J{ހ%2ܺ":RO_qc^d+ g7j|ZTKGRU^{Y fqz8󺣕~͗I[_뭿 c h77 fOiCiǮ iR#Da1ueG>q ;3FmKsk"|=gfwe}ORӀYzڸ=ñV{y4~=ƥ+MVu@&FR3J~TPa֣} HBq! e"Na<72U82҄{>p^yoyUPX }!KJz_Ը2ojQ61sT x%$c%Tԯߴn21nXş}L@V9E$.ȷnh!ϧ ZPV1Xll഍%\z32I}L}A{XBةۆJLEvX&m?[hۤB=GD.$],(8 +_iQݫ)'N+މfnv ֌OcK$cPIQS\mZ0f2Xs&!z ;zk{=f 'M_{f;xp+݂ 4;'wUODlC)KZOc(yV iA<"5Wk{n)BƵ(鋇\#2`0Mc2VY J/ +B?%C[XD ij rǫ!uĈh4%9u'8UG0P+GF6SB:íZ`8;L4PJy0czq(.,uc8-el:,Iwu)zE篻VS~B:14t,pTܧm}:BtJ1?q๯Yxdl&^#jz!f3*V:/)i Gs7 ?jd vE2n1 ':*us"cQ}۪Yc":d,7l2!G$i!FWn+sx酳WZ^ώqtv1e1ۇԹz;`,S˪]!!ɢL9Ћ$%o%YZڂs!K$*<Ĺ\}'t/ncfcE IfA-~J!}aD[#  1^$P@?ln ]+nS#~YFbAЖLM2E([K<=ߛ }HnW?vUK]]OGbKH5S`](77R 4hpηo(kFefVίk(|u2Ė\u޸L0vP3ZȮ|4~G}]"b$E-iHxX(_O]Iⷥ"DE W벉.!A-@Q>ڰa4. 6>ز8tgF+YĎSս"FG Eq2NVg1zIRby"BhDn;}Z짗.c h<\o3 :dZ$+jT )})np.l/e|p$} JTs>8ze8rxx-sAgWG?c8d_&W?g9wY=}2.7.m=$$U`UZݗN2|}9,SWr>z|qАAQ$ $#97$z]r1 64홲N|L`6NYʋ>v{ 9&_璋a|H~ l9EoI;w ÿJeDnr`O(&O'e%[USvGh(MAvn#tUUlKu/xY{.wƾ292k\¨5VMBqD!"BU']rM* ჭQl 9zo ư21/.JuD. /]!>ZthE3^d 7^gM-um,WjʰOԎgl#gȌ]:' *rEO5C"FC_3+6 ljvafD«rA٘O>6ac$`M&"r\S]>]Ft?]!%;d4#5xfj8}~g|:\/lYo-3;'cEe`^)g\W^><!_xЇg8]h uF${R=:Pnu@Ցhc,fS Swۢ9Yı6vmRl=5HR6y^̭m`BC2k;[/`&aAt݂ /x.IPBc%An&8%4j<.1Qk) \*BgxLV7R:ۑ͞@]np Mf+uv-5wXܪq}TV#: s snD Q%o+9.U^:-ͬpM3۱PR{L-=twLDV|^>Zىs`GcX|duӗB(P g`pAiGPu{;b6}3S ; kr{zQZ\(1^%*Z[ ivqx;p pSbY2=+^u#[ir԰Su&fSE-Zr[! rkWU/^Ђp e!zq=3i1+׼R㘸 bSd6405) Ǯd;tMz72dܘKE6 .#Z@IE`'g̐0E>\jK ihƕ?#E֥N,Q3XvE'geʾ' (=%`%Np$R~Oi6(".8UPW / @R j%2:A6"s_y*C!D$QQg-qi#P+ܻFE="c|eE~Q69%'=t!&1|#NAͽxarA87%␐;iO7բƯ%1?}C; \KU`tG{jpX"/&P ;϶Vz4Gs3e)F$f Mm<i&f|$үhIL`lZPDNl?2e.M)ݫmgOLn!M*Π<,!D֪ ;SPv+ߖc#~FaQ@N/=xM @gg$Սm?UҴiD(?2 {Un:$֡10+{+C;Ce6 /+JP{U͛ 5sY4.S|XhM;B-?H@$8Je!Q,¤TmDCo x3=D ocm_(*Xl3ŭH= fT:r|X!j򐦈&Vef5 y!;9lݿoQ[ 䂍Rܴ=KؐU0f:ٞ|J[qlcuJQNq^ 5%ل}X 3vzR3ZZLjL G-+#\p*#Q{#} 6eȍ#pz7Lil%[X`\=RY) I8 JUU*E;ȯ"  LQAᶇn/f#>CQ#S?xNZN析^d zx"3&:.OS@[DmAv@F#kҴX ||Pi}bԿ^7 }}:p2p̋qO?" 趋(/š'K8JE%o 1+4O5#=?Ml0g!'SX cٳ!\YG6C1]>~#Fʂu71륖jE}6Žm`oq6xٞ(^ 787XDPF+~8֞h Ӽ)3"ד b{@E7R4m BfVkɩS[m*ҁDtX?C; ;v4C4V?@XW]Mec&.TD~h *K B2 E>-R*HkN>ǣS9VADZ1jtL 083# _~5TKKmT~y w4ԷϥN5éאPeTW71uUY?+sA$;f$ ;WU@(i[ b#? :eM3ZF\j? t j@W9nbߎHG qs=/z6!1R?xR {`>t2b N$YRklepi,U?E3_<%2y,ޏ5/gHw"އ /y:n. [&N_I7h{U}Zn3^j9IzHt9,%Buwy:}`"r5]*rx0q Di,HG?PL,,i$ּDG~"/Au$fn nZq.$_;g+D_Rh>kl :NɦN^y@IYuҔqt.&'(F)$fL*F)Y0hB7N_A;oRf ,ܼ>m$ ^EiB<`ILJl5чq*uh^0-w7~ XZ ƈAd40k=mXF\>"+EVULsKh^U ev_lM33l]vʳkr IJ6`pMp?X&'G`ODz)p? fĔ3,jW\hU2пJ^:lpGVۍE߂!lJ0m,j"G Go_L vNtuFqt &0/ :x@d͏o:=#?5PtJi0,%@8GzĶ ԛܪLJކ-e̓r<  Cbz2xRHZeT3."IjFJY4;Cé*q N3P<)Rci8Z)>IlCd4P5|cE0ZZx,-NmR%4`Jwt.)%7Pzo ߝ12ԯ R)!t6:h(RcDc[ 9}v9=WYvxOu*<9;ē1l%>Gw.eTݠL c9LVӻ0 &'@ˆd@yr3)VYFiB0~Zl1 2&}݆]$i\kNph5FQmPL-`||؃%ń]+U6 8sg&0 \ϭn#"BD lR=vM5G{'Do߱FZ஥?cypM_e/:\"u} LK/J [Ż o_l4.C:cZr){WA*䣿r0s|<{`ԹsxרΜ}}28xҐ>=bhKdr uHb_-/' V^FV99t1`0-;ĮUfHmڇR{ )JA9HZ<$b+(  ʷkSvY T,&<58.lĎ %kqLEqAM8|k: s+hKd׼qKza[х ݖm= ry!`Qv9GC 5fkfȀ-0TثA%@jzNekg56SN,Ƈٖ 3G,D e(-U;@;KBas sGnR|՚q2qc] :yA ;-kAN㞜?nCˀKϾ me:tcE\2re!a`UY$rL-?P "2SKd&p\,5(eTAR=>{b '{r{ݥ7YSPۈ`xmeVG1&z:ʲ_3q8Mo[<㡒-~^ԻcXچZ]"{E.mAW8Y% c,b>w$d>Gn$e.?~yK[ 7FNQF^D'Ä[&;֐1"A"GaR57A : d·G` T=tߴχ;n}-,nMj*wk@KdgNCW/$(ʧ85yP'6ϙ+̲(ώ)VuyѲ5+&{f'E'= ܹ=ݔ::lM UnAD FLp£'GX?ڦ 'wK :HKbGyމMJ)zAzˮMHXFKY5 E zk3<}ΏѰ@͜PC;vQ44I0oqEDE֕wjkJA{ypQh`EH-hi`ak|eid, MI~ec.B=#_d[Q  1ԛ@5f-=a̹@X.A|lD[rؗ90;T]N46{AEޑ%`nS ߨWe<_SϺ[B, TԬ{&೿ƙ#_BgR$ Tg)AqW ?d|3Pљ}ƽT1(}2IvKrDY*T&MA Xt4HZ2?tq ֐"U,{ ; %&p]7?m@RKiiI#!ep"7}>2`ܸe NVN忥^ey]m!Y6Z9ĵȌТ|GNI!iB'CX8ܓ&LWQw|AGG3z5Z*ִ40,Y`!ɽOyuu@ KFrG"}R*It-]d֛b6!Ĭy#dgO,Q?^=R_j` E*N'F,&xU5xd%GER׹/gh9O0U1bNѫi&OD&JI~STf^TBm{@V;/ћ9 7ޗ|Y'V WܖǼG'#VSh&YU}43` 򪛃Dȩ)9"^;"? "۲2V{ݓb5R$AlS~k # ,v~}(ee=Z.0]_еOe\"k.Z.{bO)m>IqhaMaAOyvv2%r߂D~!ѹ&F}R')/Vm(7b=ziȸb ["n#!GV`Yx7V^ iI[0yũu8Ffϻ'z(H{9v`qy7O$LwyIFeV~5%Bm_!rNco6"QaLqdH A:VSǓrn6@?YʣumPCSvJsgsV2:š3NiXFɒ笈Jyב8 ExOxRW#йv[QYN"4W#|c^JTD\G4ªCaADZM1'2"E;'Sxpfbu, ,;K!VH;{PdQ4n2!?19@0w3"ffFXx}lCHGEowQrd+C.mT,qB'Ww4q o* bbsg;fn&{ɫ{- Y^ܽ6JHg-+\.^mF璯6h Fk8Rk_T,Ӕ,2%Á,esɏ HdwCEl$>[#$Ȁi01[_lO Ʌ~ь @%u78p [@YN*>?vees1":}k*'"?k:)['&Ae*zu\lQXlalCE,͢;<(vw$MvYV<\IX*kKy &PP[&Ȍa14Fe AUTB{IB@GVȮ+TSg*R5M f @΢m?_-`$bդCa? Nz?hS4M{a {\!V2T9 K,^,5u\@N讑4RݠHפgY!c F,xi=t7EYS9X _XGSuZ/o#"Ǧ\r-}4ᣈk#s4DM_V"K+ik E@2Io' 0oo/ nAT~yG9ӃR3M)7EHAq3~jaϯ*J@7Lp7k R>rhp{cTU ^fW, jVC qSή[%>DQf |`#͹ ?3#cӿ.ڶy u0/شнc=G1]9oTӶӌAQ9=w[(n*pP੤πJC {Ws 4dk؞=jTW%`gvd_rx_yiVPh| xYtB~+v+cϴ>pGo|(.>)c:33w8K%2a0ĺu/1(QkDoh{-2Hn6\Į v&&{c`:O`uB2` Kv>r$dk|1;R-ab]pRHTÎa!>d ff:+hg~oa# ,7,fI\eyo˰&p1%țM _!*ܫ0 T[/cjR;m>?bhĚ8G#-2ߵ_>_Of>Jt .btcG%JEnp 8?`-Ѓ `Tz9M'Zh; ^(&ï%ɒQ`rƑqz2o/ [{8JM/P2uk 5UQ_k|*26-ȏ8,$O]Y @2AE@'E7>Ό2)  uG,ΜagmV,լK~W2NMUI~Cb=[dD4-x,0Ӹa?|Z(@tkJ͞7yóc. cbHX-'=c9^7kp4ȅP.wz&}q\J4砈ٿ8$y[73"3L?v4?tʸpjY I%RM;SO~͍|D빵d܌^}O׉H" )i`^`Ӄ 3PYFCP Q-o,oAAƟ@vI3\gj jn}5"Tx]=(pXF0_8>auKԷ/ t҂dc[U)GRɝaN)X}ȅ52R H_QUH׋OPz(ac4 фxu&6Kbӎ'jr?:C}n.=KN]Cj,!,tJ+e#Qy4F7;(>`l0{OCDr&AqCƾ먧mG3rt+؅QӐz!G2p-r>)gZ -Nf*pw2{rQόa:1`۩i҂(ceSMHi~󒦪"uZҳiޏDi蘋Xgf+r`؁x4 ̇"@\k _:O0 I!g]qKD@(BlL,OYBKdu" 6 9'*\H(R/ ]nM'M?[ϫTV1* Z5-YHFݐUG׆elk- =K'<tt3C]HZ)47ly3RA:z*FU; |>smˡBuNeO@S;hF"w ݿ`>yNH(.p)roڳ3>fsfmA|U]N $~ Tjıt[J|CF Y0/9Cdut Yl$m%NMl .(d c0&BVo}`K}]T-\fXnJ&Oɇu[ A ' |אR.zͅ<>~%d־ՀGwT$/J*"awA4S WaFL O8/iLult܊l0mX0 =awʻ 7^7" t+Poo=jPj#c/P>ښ+r#!T6rl3D{- Mk5B*!կPX?vl%T[EEeY |=$ٯ;ԇB 5ȾWC^\$cȢriFb^i#=z=Gô-=u1~K eq91/is.QVN$8d~8 {hat.{ֹ:yIV@!{_)x D/&>~ -HHc)gWBulmS%r )mXD8jcX \_ 0v\f.wx(g~uGg᪚PXX6ٝp&au6'}M:<]Ws=6&l M[@=4rtkcb6s |y>lm n"үKDR92yhʥF!*fK^ZZl/M-Llc" U)EحUn7{2|-< O#3co**5236$e aJVߐڅt$mƂ+҇"=Dk5 -"=@SV[~+}7V~<+k~uɣ'xŜ`M-z 1w{ʖCt6X̮[*nL_[Ӂ*$b\éU19`MgHuPJi|5GýF#mЂ6iWVU~*V/LRʘgxmTk*,Axq;ti{م+N]! x4DQzddC:'ѠU^‚Rwk!쟃PVy`UMOj?VѮq{bC'Mۯr_cDyvmɨ멝qfv;D7C,q" #2Md3bO&H T|o6<֭M#=!?`.z}ђStLr[HA-)s;poș+Eb0\uT R˰=`GK݅'aQ9_xGY.WUmڨ4,z6&^>=YhJ% o i߆I?J` 瞻n)X ^/\|\a?WOVy^HʁCpN\NZ6w=_ o,!䆇=vΊ TYWoW" XP`-c5Ap ?tR Z#yY??U%Opk^Z@E><n%@Zum=CvЗz9ڱ;E:Oxo)7xAoIjIL̮2 b]*=܀fW6e)9 *JI*Lekc ޅy]bR>([6NQV~ bGJa78!,E]hƔ#7idPE띰ܡ7 TCI_:XgA} o1@" )F{%OUAU 06;bN'ފ_֊ńeCH9ֿ&IfEOjjtj5˫0WHmDşE.`c3DBEF]Pq9=| š=yRFPP6΀f5UVظX_]#%C u5۩'ă!lWuhj1K!'AV)FWGy4/Ԡus˯泚or &X/ A캑ԻrQ> ߰b] +d %N"CX|Utl!O7w2]4h&w^P,Z|p90>ע{*@ 3M(_CYw;j\9Eys>sl G,bӘM"r<ō<7W͒x a:}6lpr|V*"bj6ƃ80z4(v3ཫ*I~t:{oTAà exΫ?XC seQ:AW$I!u]RpНW":qxD W,CFV| 4"bye}K hyLO-;f )eq4tV{-a.d9@(9uʸW7q Y:ru(bPr9§[%׀ v*a N})]6ѨKauکcmTt_ `TCrԣv[>G@L9> 8:Ӣ=3K`fstZ(˳^kKk7|%@jg}j[7CH"眭bdtDpc-}WB#]Uh_]-]$u1ZjV_Q`jVD&ܽ׍]V!hq饴gn[;X@OG8iUҷ'3{A;Cg!) nSHM)OC!I5\w8ЫJc<ԧPx<%qXΦ|n+dJz2Lu`IˣEAx$]Vv;PmWJ3Q]&pL4 Z;6#Ţ3BgNԝ!yV@ApxlM6bՊʟ;P|.mD6Y5>N?lr_hwbn3WZXY鈹yYfp1DejiF<ȁ6: ӈƹ'G)omOWVaJV s7%Y 1~JP 0}*e#p_\ߎ>M;=q֘w~j3tR/@(\J:-zWJMfSlY>wCV¤<(RU~NO$B$e_Cwp=B؞i*(!huA[Y=n 8E<9 O2^HƭQ U!'HN Jr4x##Ac~&(ic4K,Kd@HqI/߼$*JȬCH:W+;Ǭm&x*׮F*"oR a\lթ)E?6K[6x`d:4!_Gl7ĀiE&EEW`A@ϻ̅ڱ'\>o>%Sg@3a/-Rt!|T(&Ӫ*c'`o%a>qb~^C_x%ZQul|$Wgg~ExIV4%Oi%蟟 1Lk/8ʳ?G>^`JZL2gZYZGTL)Znc Ö1bYHR)GB5 UxD߳^flMEVW , ibrb] U텀 _@pקo fJz-DRДͱ1ZIu5G@@$7hr(T1.ag d^gGQc&¦EJ D#> w\<`Pfjm>.j-JZmȑ|c 9ţ 5·t-S<7ʵѳ7 ni·WBE+>W%nI2@[GNF|6ey>{o>ECȬJ\[]zLѣv5  1ja͐kɉxHl{r٤‹1Y~Q{A#)}TN:d[d\f^ڇ^!JBYn UìA\cgmܬ:b^o!`D5X+$ xGUb^J\o4'-nL}"3 0iOȢ2@I%qG@%]M{5ڤ9L<4/"؆2`%wD) !ޘ7ck"SőQPN=frgjmbji٩ Dn'S̬ϱ|?lEj\Yry3Tg}i_#SybKG; )j=2se$>霵f<7P*Lf%oWJ@K~U HhWRImԎywu+jCت' :(}O)Zv3! Y:LKV|lFTr 3j_1/l7gGBlu-TNKtۓ)#8!ڬ-|PD@x9NQ[&"pM=hꨃ`+ C?n=/}^'L_u%\uv02Q`pbBRȧaLQn el^4<&~${ XdR*/KĘ/FܥM."4DpYkvK1(]3TJp|=>/Ɖ^Zāf}veH3h +q="$U%͓Xŷ/bAI4_qP~ cH]1w| n9WVK +`(@cY5;31x>\ެܫ^Xxh@b4QC&%/gdž')DLiyI0K/"/đs&(eQHƹ} xIȲ~}׊!z8. E^4Qh%.6'~y[ ϣ 5%zуg\Mu%f&YSx\Y-,Tܸ[ؗrw+/-cꠋes'!CDap]G"%5Vc,DzzniJVo1ByJ+vz+tB0.] H{W<*Wi 3דE۞oJ Q4~ȽbYAv76=EIHV A.-MY#vWO]1D^l#2^ #&͛ [ޟ[]XHiF̋6_VkU G4=̑q dãG|1KNJJVhS,N =X Fyo UNR-p~?\ԙy!(TZݰ>aEn.X\ )ۤ /3V&{iRDzyZJyÈZy6sMw{Qɤ09a_r;?؉H<~b$}t/zK6R rrA>YjܶT$G=[#-<n#0'YӞ7)w'8 ˜4uB:2JRy/ ʡlF!S`FV£qdMٻzl kz~/jI 7 ,J221ˣZ EйV3Ux4\$Lv؎C4 7»je=uXI1޶+)u@yQ5adb#x 8.BC5ebmπs-&َCv ׼vȸ_>\Վp Cף^Gz +EQᶻh4/<>^ Dw{F?yY"U J8\Ez ݏ\ro&L=8gk@: t_7 '-󍎇 y:[$'  @9ө]3\C#|m?FHM ٳuJABdZ &tg`ɲ)Rsȳ4A#XrUn;M}WƝ7l>d RʆJ dt1 p}D߫??ѐ][G )1ܗw5&H1;`l\\|j˸(R#q~5H|wij.v(h;;7"I!p8*z|b>hyp߾ϳ`*a+uXbWqrE].WOʺAf\ Лwt +GSH\A4̴(d\^ν6?ܳT13ɈJYe9 (G/6w5A(>1B£TGtF\J,g`+&K2אR7cY!p' 󶾏'Z,6)|6mzeYV/ wlQ<[ZuL5g31pxNs:lQ{jAѮSi2R'fpݢumgQ[j/`ѵdyhR#ૢZR1 cSސ53ſL438LI<"C*2A) /A #n@LTIΦ[Cd.2@MX/HMi^fɗjj0K8`MG e61G$3{v @:%E5# ߽{=jBvmnn 52Zn(!f͵-t谭ٵIT bYgJHnwO}0H= 9kbaZ5PV}QѨ ̘f+=,BA%n4xaEoU7H(0`+.;EPeBW57dI*R`<ub)Cp95\SUUw= kPxMǏۣ k,zD;||,'ufQUwK.B\JZ0TΥE^<ԹoboɄvIlcի*-H1; 藉1sI|:?Np"?e82K!Bү{{ XZb: 8\ ( hoH"~\{QNzͳ0[ޘo;yBU2~~+̴_x3lfT*%LJ搛4kV~QK?|T ﶊ̬r 2yL6BX)+f`l0,H̅y){nWJH[dKY^N^ū]FA(i@ E/SXã Jew?\izF&uMD!\H<^ya 㫖@6ᤍ{`dMޠ7yKK[GF&œק AfW+i0(GNϗZ_Tg# '`0tX%Hi5rC7=$A޽Dr+.5P}6&7n+ w`-"o#14WbZrykTޚn=m #q`rt\RXm=~nIJ &7"C=_\kf脹kL;"m5 {L'] +:3e~][=`ݨ+}!VlYG2;~czan!J`*D{3yWgj@B|R`3Z>=[/>oՑ:=~1MnqxjcWdXAv˗Ag:2" i dcxaXWBմzC3WihBRY9> f夗n#{Ujϊw`&:J 0ˈQH:_c#H=t|^:u1( b/7w,.TrEW0c+,6e1\je ,~Mm L\~hTVuxrTL8A2`[SaabQ0x{$Qk "#pZVI*'׹Nw"Pj n+/gڧ K+!d /ǵ1aΕ &fY7_5؏s8v';vokϕ MhO?b\4v IE >U )#P_yyLEf'R"=Tn02L>2|8 e[xro4"QSW٨fTr'RkR_,ޝƛGo>+Ru b߸۶_UIhdjT4'^ߗNՔc-a9> ib.ޝ{'?]`@ ƫN: */)˚2PN f_ʙw~tF5+y FP,uw$'n Os4 J$՜HNGRKO&NfS_ѺGykQx!nbL7Ns I?KÎ^."Ѳ2Q3vVI'A(ٮ+/aŬ1psTؒFPխqJ73E8q. b@3 ( ]pB!mg >4hN>M0nw4!Sұ#3OKToWGfqedrN< 4wsOEZpF ¹w5RbHH Q8GfHxkM,X`Klr,٬l@a+d!m1֔U:Gސ|'ܵer p$uNP{&A<~V*Y$y_9\Nu2U(j>p.GYT[,P1RN7T sÿ >*?j։5|#+5:*H[ %;+[bw"! j!?7 KQo*hïp"]H|+Q]~ nX*h mQC͛ 56 A*z⯋gYwr|H!2%~XA@z?Ĵ-qwiVPvĬGrti`$PP#ݮJn2$xq n;YkaT뤊43gs 4ɯ{ EI1cp3R٫nWi~fViebD(2\ '? lmPrf>c5Y+\PF\\^\su ̦36-Am{S񧼧 o1A6#uepgXUkXr)2c"z>n]ڇ5TǷo>/0#v P&Hd33cߙ;ܙӕ3GsPy럋)6saKqa_i{XU/C$@Q@(G& @AWl*ux Zg<0 TD6etVs(^ Cr? /K*ީeì4Y6wl<X\m 4#]=0A,V1w'uh7Y3O0 ]18)鄧yc^eWAn4uM,>O`#GkhOVҽ>zȼh6jp(83PBN壘\q`.&x/"MPR>t o$iS+\sCqScdr#v`aao8!x*_y>¦?.l;y7"R&0?QA׼F ^q^) 0&Y* "׬| C(S<*!=A7>,xϢفoSgLut 4rK3b5WPWUg.B8La}8n!5IhXgJLY#OItѱmwxf7&BۿVϱx'$j$d`o^X|}d)As 5gXYÿ$KN̠C=/!B \ ?Iahp2|H ?a %QjȯMt*0߻NaIE%j4_Z;8x˳skbVŐXgmÈKLqt&lb6 Kg6\dܧM14Y"/.#Pim YHφ@f@H*0Ê"԰#YH*ՠ=XY76+L|NP'lzBms?ۘg KhB&֏Ot%>1}tTTB W U=,Lg(DB@X߷NͰ M֕IZB`R֚^,4cw&:\)#/_{*aˮ`r)4Lʎ/eѐd'>.1̣FgF54NէSuc-b`,>͉lK < |u~y#T q7u\_A @]ޙ]s*~ ޔEυ:NV/#;L풺 +Agk"G^^}0q]r rc.~1OBNp2c'Ё>ZC4,{wLLGn2`f\n:Vn*BYc#pک??skGN7Ml | KM:c7 V^Ώu׿Ol)ʅCإ[M v&%PMsh^YE$J:36]7WcA)J/܎ =kH7*f*m|7h<>xklRۜHW:>op/!U@%i,:q9qMjS a?tn2ҽ=3oRJED ~߳(,3*>z4ׯhrdm\xq97Hnp+%rKt4guZ^} )+Ĩɚ+P5[הk?9 ٱ qn޲^S7BtVEvCA&_ бϏ Hl11yrC<ZߐlT4o3%;!>؞']Qhtvt(_ъu_=CȄNz}d~,/qο[B7-H"rm၍c&^’aId\/O^Hi|rBr`>x^X-xϨR&YЉSgŬy{z}-ـvĵDI+z(Oz5*vUNIDoICDWMrKE?l|8?K"^#G+KG?,aE6n\c-/($NRtF9#}5䒕y~̉ŤuT{ ӏ.z2'>vߘ<ၹI.sXbm{tjc&gyX8ʋH.W-ӐB'P Z6a*Ss=F:J<,aRSf:Er3M^L2ӝmy/bGDz Ӽ/틇kbsaIKᄅD@[[ACkl2Ɩ_d =QJ(j%-Ö$8 (x.x8$oJMOfRSM5ىB`砪/A}pǮ5g6.H>NvVLy݅_l8!mjrs >W#@1+H~k\ "nkkPr{ݱ:x*Vo-kеkbg0232,R뎞ӕ0`V\Qv?1r+IīZ]* !3`J}'qU$Irx6󭻢rKΜቒxG5)*4r`m7(Ba*Y6#_^Az1ʝ+c\ CxywcB 1;ߌ6g# d]%y7Uk-#\E?y }an&)^GLG; %'vP: wwI3d" bA҅wJ7Yn:$2YS='Ȑ}K~ښuۮ DڵRnBvPS*QoY%n\>S[=rXOi\0 -?wLbٍ*ڜ5hqEwڶ3!/'}cZ.`)7\ P p87$s޶"R R3EٻkLM a\'e&'fέMkPaSY;3?wx#?8(K{ kJ6INpگtPeGXv`:]d "5vA(m?<3-TjT" ?} _TI{U~#pmn` )'{te3Fh-Ņ7.HcW~A鏵 rşB'DQsJ6/ s곩t7S~Pӝj%<5!Mv8XDHq}ߞ>_}7Ii#~~di S(cej0z7Ttq3%p٠fG8GAzȩv㳈Z+IрOa@+l4k-FfcA̱bOL M& ʱS[fE_/S]X9)0?6W2a] X|䖮L[[kM(dx(Ji85iSsHčy"ïW(lOǿǐgY"g Lscp gy91s yf:5ɑu`tvx1ݦkrڜiY`Q `~LSU)S`@ YTy -bQUb΋"B38.%ܵqzFHfhT_`cqQ.2p"ݖG *[cɒ(>w R:qp;})W@0 =|=Cz>Ya N y?P6^(1S1[9AlgwXLtE@L61Z|Ơ#}wjK6Gb%&s>|֟`;0>["@Y6/ L'bl *BkT9e`I8fj:5]Y{~[uiN7*E dܴX݈hځngham}C޾[$eG%%+t)`:;)㗯q'%P~XR;_o~C{TnQ0f[3,8wf=HhΥ,Jkѯf43NmVHy(ף@}ar摆ko 1oleRv-z4trǭBz$wFQ9FWyGgAOŝu Zm4Hr,OY&4d3ƳUg˫ߎy<[{¶ W`k7ZO̯*o8*FTiŪ`*y@0t{cn KZ"HGH*`,=T\5Vff&Rj}KO`}+*_Ùc !;![CY9w~qwC>Ve k7K MUp(¤ -h"m?sꋁ8*7 5~yf@]YabTMW/ q5fDꇗeC=c\'5(ce~{0X- c>(bLRJ.p|q}ɩԞX)636ab]S1\KWS\JOla)`d!(\C&&qwf_f`}kJNV;RN$Sigç^ڄo?/` GHz M~\r9uOC&CJW+Z$8Dk7ym.O}T,ݏD:'e -89]_!lH\q\k,Zi&] Jލ2eӟ`*:wbiC +c6ػ|O6"G0$i2(XNa"f'P 4:SA^)5"N!A~hWC ”&jtn3'["w([Q~巷FI~,A1ZG1EᎌϣuׅBׄERHK;PB(LnD&\oZo%st qkqOΓ]M>O\`޶4kIY>H_aMtȻI~)izQ aN}<v RAԼT=sf#2YkEoi1dc$bn&0ݴ._妒/,aZŝ]hH1 R [В%bbli94 g:?(xrvHh7t_x`X`{j_JıJQ>GǬ0iBEPsl kl"QҼfTuExȉ d><&!E7vYVL㘜VQîZڜG_9Z%yBmnTK^qF/~V`F^0 W(6xﶵC-+HIsZX Ó$2iC"oo=*b#iI<J(zf` j:յ;VߛfwsfiJIˏ{HI(F+7.\ ZS>RIU{ΦqZl`@7n%tV!i&_1x~4sԲ]3fycGH=Eޑ֘fFP:KC!eØZ[*K6gR2*NsTGc3yJ́Y.ű W]:ZC"؞/YʐF9.㽲! ȋĄ5D4$RO$I 0iK&)*Ư7B.47Mn~/Eѐh(A>m 9--99v~kdx]?KzWI αha;֢Y/CP ^~˵9ʿۜJ֞A3?e{QF/=|fl=\ȥ$)ednބ3T;{e_8T`Y1gyƒ=!RK_A;EtBx12Xg av,R](W6̀!A[td[;w DeMAL t)T|*lB65q#8G=?Hqgۛ[1k{]Ū8<JUF3UXs:x0_!~xD/d֓)0Mx:PO=Țip qUpo|!{3 +)+I|:Gw!fi/uuZtD#@@{pܮִ|R͵2x_-ɯBC9򷙕?*+wTzR幟u#8N0NG*O[*v+I4Xg}@Jp/ԒS-YJOsF/nǭDrK&gp+fɉV@уHw*ˮkk +g8l3~fuzB9-U< 9Ķ?5Ѿ&02?;KFtr;?'E+A䙔,FRmU_٠l#[E0i硪i`ؗ0Q+Gf@bo1晤#(Q'|mTIƨCh`O,[@a-Ɍ.]լvS-"k}y\Ŧ+t/N_y46sm!lʫ%ھWv*}\`H<#m }*;v/.n "$ז@M0>9գݎ?yѾG-]m yU78!W>c^G {JzHƻ+wfw Iu# *þrYFSoݶ֙Ok8`20 _H$aQkw;~*?* VĞ* A8R뭊MR ZtrϚ VUũ6 Iɪ{}{2?H]팮cnCns;lrZ"cu/1}+F֎Μ k_ҝEi0d7Ad`acbB bNRRՑ`ҷc균Qk%p&v7fn^^YL5$DK2v>8G5^)kYZ^䳂ӛRKtu;$zf4Cl lwCsSxk B8v=*ZMøQL0%3ao;T<)Ď~RX9GQo; m"!i~~@Hf&zmD!}G[K 5Ndt ]30.:k8 Z"arKNх1"P)8aba{iN$o۞xޢʶBs)zF6=e4ΓdžաȅNO51KѴD |?L818Jg'|s+suۨj4R%ucai I\&!|;ȹP1ž7,ӡ5cT䒴BzUR񞭩n*M4IE[Tխ)[֒VOаr X|vk&H7vGBAަ꤇| 7w A˕W;OZD}R3$.wcFvXr3 QPi_f Ʋ `&XyпnfݛYc~`RŰJ@GmK Й0qD_O*ܹZswe=E?[Gz{+ȃS@hWS}79l=ND=]3M7ըޟ;Is$=hw<5 *bԢ0H$hOO#:38Я!N(JON 'zWϔc%dp9^]aizAJQÀ4$Ѿ&Qa:ʸܞR-enwcdq  ii\GtR!0o["i!YRd&^$VJO+]I{$X("~_D3d|Ŵ-t3qmj%Z{]o>H-Pnʐ.wsccĻrΔx Ulj?_ޖzE&S]XIﶅsxjvBH%C^i[D3+ZD3{%*o vʸ vGs3ɤ3 Iֳ4`jD핂&l OQW;pim/& lхC2̳9,6]@;{ͥ`Z=Q%x<+s\#Qk®:zR^;oE0RfKӚYq!`݂ᓮD8˅n?}Xu+B֡D᪑,>?as_ f&T`ćIvLs%3$%Jiۉ'~v)r=*W}V0$|m00]OCB+nt+Dﴤ_U=0ӻjnJ˟)2 j37γv4^~W eۄR'hHG6ѷ׼=GSP3XX,BCsr?޻E\ ~10Qv1T.S@lʚخ+ǭ6RJN}evCAL(iRz" uqL4Q;PtN(" N9cmrf^.#>T[}lc]7,X*Q7VBMd{Hjq5<5hx ܫȓakn\3ӿgɩZ'G5 9Y_OVP_00spFnHg}-` Ux@?uKzl Sz=iDUk69ҧa.D)Wv"O+aB$ߕɃ}#u`-כɺ:q405_NiQָ<ڪ_PI_7mGߍ<+@1ׂ^dUkp']6c2 !(fFVX~r'wQpě<䓾"ϝErxXjttB v2-C?9Gh+ƣ93TeN7S/N ~w$xDe+;ձm v]#B\ z_nĞӇRz{wS![BOfТq.2<%и+',.":"F`C@^b$fZ Br@x;.`PShPHo, 'VmJ g}*:,Z#Ҭ~4'#*WdS9+&&Pcz#aS=<~_N`hUCpmjsd[׭"S>~(b2L'C;i~{ά:>,&;))! bV`:V{@O\xJ,&ǫkr?"+p)!,sɼ gM{L]bd [I<"廔3ߵ_ @y߃}M;TKE ụvbt3i`r3 ladT5Tݦ%8"t47<kyM2~0|#gۤA6^| Kݪ|w"b]:{Q-tap<;vZCPgi*A9A^X9]tքaE`~*krIҿUxcmz?5C"gj#hT^t8 fk#W$^ňߗ-#vpj@O/Ne46VQ `M}cnҡFwP8L *ÂN7y"4Puj TV=aULY;`bv2<;t^wIpD|Zχp j^%1J$Mkq`o.hvdUpP|X'.QsB![h=χ'2 -M]$uk-A9>/+A3A](Uw݄Ts~*7FŮ0a|ȟ׭abRUQ@FHRs1 }4 09BٹvL8}!mFXLYb3RmIӏyC8Rq%jhyMca#MVk2n>-{ax?n{A-/_R&ym/xQa.?gI+?'GS8˷`ɅXDf.q|-%{Em$$rўqAS~2z>> e:1z:wfu*6FoDmE`_L4_풨QQ2C 7Z,I"sr(^i6NJUPcYÈqNKX/i&e$D9[YĚn-1(S&g#&t}޼XQ|x}mgf GɊ Pe*_o0o4]*N>94H„{lh(X?v溸`Bc `YI0l<49@"&Dl a5xdoJI2Jr^&y1-%Z/Ow1z8bw@3눎$'-J`$Rl3JB$1~kNsP8퇧 Tmgnio(FD[.~J%2 8g")/E֍~}M4)@?ᛄJc.nJW(O)[?8rL*f ^T5)k]jΌs2T,iزC4NSA 7"9&hrEwl`96W'0kIjCd@wK4隷KXP0J(0FgB|\)Q/E\@~Rtq.XK|Spw˩,m=HiQ8Bk}"BeM{J8!]r\qm{g7$FͭyD88kik]yq_lSMQ?%h'15.qzh @9rBvɶ͸0̈fN@dL{eyy;[$z/0~S:&Q@:mȷjtN8Cp;Iuu3g!vZt.4mT|u$8RvGu6>)M<—!\~~ɮ1 m;'v}ɞʆm)ۡ;E~=NcM@Dn1UUuL,[ʹ,1\3%-gTndA+=?Y׷bFi-]41L2p㊭T{iwHѬX?{a]ukD=#%"ɑ r/wVOҏUBO L<{@4;Yf~1.\x#Sm|{P|;]su=3 #6pk )6-E ZTC^#[,(&C͒Cc= 49.\GM2˵zqRlCkd4M}Z=1G+J!pE%nBӏC&$MЂ% ?_҆Zo 'E3x:v'"pj,5Ovצ@'qTp?]` >kG0;)_o>|' $&BKn>IL._{wͅk]LdV28*2z+UM RV`?M2 m|4`ƜKYZ|4oh pޖdMNK-li([@/Kcx L9wf^b݋2bgD'p`!^ oʋLO8a*E hۡd儹I(%䈎3LT pwQ%do A2I\4fFeXܾvdy(IdrKIxB;V|q+֣IBj^ .Tid#w#WBau =t7$'R였9EZ~ѶVGM @DLT5pLºAJ+2å/mJ%L&~Ub#s8)~~]Gko ^#tXISh,M!Eu8hJMNA 53iN @rc\|A6Ҁ הt"G>+SEM|.DPП.i0ڃY>sڱnz.UU1l KGߕfv^ώ$7~dx$)N1gk3m\2kj*e$AJy!gනۘ(![ILT9ZU]UؾeE[_\OK!eom## Ƀӏ~զG^_yRIq=]PlYI2ʆAlbM T{͉L5x8·8аM"Kvnh"8}g'bdM˥;t↢|9ir|K`!w dZڳxeW|vJRDƞ *O.ϻN<ު~*p:199zJ/zq hv?LMM5{ 䍉$J̰/TЌ 41vS6#:On<߁xod Y:e!gmr -'tXI/T Z|=3,q cTŅ+n9D`EeQ$>mb`kY-8ѯr 8:<j 9&TcgJ#*R%J5g$2Κ{[~} 3ӂ*5a6K9氕V1)k@\Z/$ke,AZ/wt*=S,C+8PL$STC(:^&2I}A֬:5lzb8@aÆ~ȔD+yy)Lk"=RKFMPsJLS3;P65bZUQ(uoRo:T:T&.pHЇxn8_T(Bs$砑/ˑoBP1`yM]+,E3{8QjډˆJ$ƐUߩɘ!Q5o)E5%cHwkTM.(*!)%J<'fD:M .umChg+"ܤHp) ϊy X>]EH%)Kgi/ Fi>i4?jI3Jks1aQbc%."l6h{] Y_#7N{yJX4iEUzd+xwZ+B7%]_U1m`p[,즽#QGWe6{vOlT[s?]) )N݇uZ~oF#0w`-- 蘯/ a Ք|p _<+ w"W@s GU>6Bѐ  ۙQK9p Tm6fҤܤ%va6S{ei&xe2t9OTh)~ yMf0PP6Hp:3rmjg]79ǩ'İ_LC$5]X8l#Z9#pzPhKrs"p.yF>T= ^4?<-^yfn[b;t\Nhg"(}pHHl<^ǖ24~(36cy6,0`ÂU&`^" ֋ziAP>X|uI 9S,XA±5*  i4L`yWP7=.,WC-~U xMvS^;ؾZa382XRuH~ήkW$k'κemB^aNF Ɓg}g q2|?O0Dkf$7Cp!*aF=}ϺzqmS[ɖ<Υ94Mqh 7lJ3O~ 2A$; F.,go^H!R9(*q@=@`M^~lʻ;ذӔZ+^w~0.0p%"N>T~X7 4 \2++BS6a;D&kձl,w$2?øSbb۸Ԙ P+f@:6{ѴuF.'txMROo]XqxU!lxm-R3zgݐ( />k^>Q.8{]oQo>;'j=`V\_oQTQ~T@/rz[ ٬t\rlZv 3kQ5O~ J#X6nNA48͕O>Pֵ,Hdv1;KoyρHʰ h䌟'p uJK(Fާ$h@i5$VIѾ)1䶄 dGDZ:ѝɠ^6Rmܴ ZvF[a$Rţ{bylۑTR۲LN4w?<}hKG~*uƫ0sN] K^ic%\KPxQyOY5P0(v, "}uWէ]##Va[K᫅wTZs`1KQ<Зl%hL0Pcan@7 7|j}B'<ǟ5LDA5_+ ?/۠u =$9sqQ(+-$ƿeYYNjc#=cjnuqD8+\tøoK؆5_g'zZ.Í}JRq@ (7vwL xweqƽaВI@cbt/^8( Ӝ2|`5`zGvaXbCMk:Iov19f.4,4 ;%Ay]}@`m;@/enF)<oky0^/ l.!`EQ_Ɖ2I[f<@]/F/r3_ƃa$!H=as0yd,:C-r]@Y{ݱDiJkv"su'p? ~M c֜%^^2 #iGg֠KNX֋z#/}[5yD_{t|z@f k~^"FD5Bɩ޼2_pR(V ^ZulY)[Uz,|d`Ant<0糼.i<>!K7~E%ٝk4# {6L)ްJ6!7pc~hu݋PƐ9z(VGt&1)$5=%"elH(B9bAs$x~Gֆ/.E)Xf-YU !8eGs>k7lkkNݭ\ }nEDkKP.[/n<)j-jRB(KU /vV,!ZJ`3 غ _ (iv 8ծҳ p-u~WfcBL/!Sc7{F2j2a1'Ѯ-4[+]$.Q8:5 rL*eߦ$Ϭi`}ӟK;6~Ӥ42W>ZgtL ܁`Ee(1A.NS~/}[^fx:ȧ.z7vBN@ mfEzè y5KN{Dc7d5^LMKq\ȸ2.:@~D7u8y>!Llrβ TLѓ >.AZ4_K%}N*=:kd6!' s ssgC{] 盚 ȘfFf+MQg"[z|79 e#58)gX o+2EEG@l||)NW  H!MJz0^FHrHH|>^D{slWߢ>*9yq~Xq1ߘCZCJ}9x"M/gJE%-bWu\_G8z,p[Dxh R#vA4P?4njbCFPEX@3q-[wlBsgԐou  9Gz^PNnڭS~"79jLM?ՐOhq80d1,S 1,%)aL9B9˧/ɸk<>cd \ugQwNy6kZfIJ́;qZ)Nסw~!Z%RgclG=Nn푟-ކ0 WVeLdOJ j86D#E{͹#YYH.|OW'?B1Sr[nUL[PޱN=w`;bZcaZ~204=J[j#ͷB6PMvG|٭anW,ϒ{&`:\:7o0NfiUKBU-ʽi9;.vzOXzB0`#E6ym$n*zمV׼0Z\bR9Mdj}a/*w1Xe"WO%ÑtNquILh PYQ ¤h(tYZ"J5J/j>ݞ$Q`:!Skw~pX\o,F6`U??_F~qN2pD((z]Y@.iڇ7[(`P1s)m-TaGnlmS.hFCF1p3̮Tc.Ђ9*j  3cɄb08%<""ӓ%;@ҳ__MR-xmx<Ab(WLZ$FD]&v#99,g]T@wZ$ lh" Ɨ/CpDM iUHZؓV<ޏ†ͭDΆe6vbz]y!e,3WNf0Yvs2O 뭙p!F Q[. 7Iasd${aY.NYk>w!ys_Jd ӍJaҳvl?;r#%eؗ@YH?oY]!̼n^c'|^}EO.hb8t#vF'v4r E#bxԾKr\/TdO%W|>ڧOެ*82Ymm|@Jr-~ BmQټfw'23!`=OvѻS u4o!c/K|Fn3\ Iuzzeȉ D".Vm lI a֡+UW!נ? ),w&5BD\u6PIY{ gڪ4R*ܗb9}aQČl7qm qugs+{mޏ02D#H\ƇџUOqIT9r@evQ6ĬmFC-D9Hze]fQ Ƽq$9r2r핝d܂\ۺ QyԀf+ 4vuQ|,ROG? ppq؋_~9_ȃ 8gV>l!4"^P""|.j3#t3VR&=h̅D,&KvvB1bmr=nGL0֒SwQUN naGYL08C9v6J5<ԣ]QQv9ҳͱCjct-lyJIb1Fסf:xX!GߟWSUAP/*F:$99RexB=M%E <1|rKf}u aH~xp36EMrE5ZStRa= GG$e|+N@"RGQ׿ܸ(:a$dʁ-MnT1[q oGټ,N#tb,VqUiGeytj~Y*Ԡ!.ڿTCLH-I(q;e̟V@ٺ}"Tn/BZ@hw Ō%{:ESJnּz\EjZ}:^IN8Kc\%ǜaYʫuκwwju-|)S 1&wք<&!U]+o$6C@)5٬YuUcNk,gI`7ɅQ<44z?Ar+ՇXU_A&-)uTkx-ΒAfagQ$8wO4d ޶RQ9'ǽ Y (+tb)Jw`Ek hD~ ƚ*-BϤ>xuqNҏN3Ig7ФTq +A\T%&rap j5XX:io+d?b^OA]VOniwlRRC&sz2 gozdm{;zA13wT ^pLʰ x5lI#o'q+Jb'fp}7m utí mn^:wgh@͕KɌ6Q4cpJ?j:ܯF̓h;([4K#}i٧"5rOCL <%e L1bln?]9g 7\u\@I\"8הo@*{TAhv:C>-V5O l|Dh@>gKPiicB֔hԤ]'ڝRK 4NopyP7 {r;aY0 E gŒ[=[֘Q̍l<ڳҟMb8^p[X`ϻ/v BDޥ-btVp`#!!τh7^(8f_ GW֑UQ I)')NţF~/:V"&),l3|ziִQQhXj /Z6K.]՜` 㗮;p؝ZRo"GiO`Õr`Tg5M 1zH'Y' <7i?QnٯHz^=wls'NT=p:BO#aG4@'\iO/A-tᖇ#&Y VYW˯S~A%?9 -_IP" t! 3ήyWLs*{㮵%V~}˸/g4SE/_P.rHK[FF3F\EArU+v\T]8#zG('*d#}]ȷ"k]&l/U$(Kl3L@y֒}qAmID8|WK)] ,w98R4kp6r8c>F49K\0ԢLf ҈h\[um`R'{uշy3Ԓ:f@(T uj(/,}SJvu)p78,[rׄƲWU_a}\PO)_lH?Zu^v`XL0+wiᕎ>E^Lf?R3PRR̵~1[c73>C;<J_PÓ*i]z[3byF=~ȉβM%>M|ҩDg(ϝ'_JhVVpS^"L9"H͎r! C Nk)ftu8Y`|* 8 JDewTmi BWX#9(ÿ'ʍ{ &mTیl!_#h'2@kam*ZnZT 7BKۄaU3~!{sHL0yUb)+Uf]HB H691#=w8mBEP 5K|j'S8F`ڟ8U7ot[x9f']'OźgVd(٘ﶹkQv4)W\9_ݠ0'%NJP\&%RX0%fc0C*, A$iuϒH#5 >s(ݩkiEƈj< BYKci MB# Wz hy4ye%6@.č{8G@hw%Y+z;]X]('3%BC`<}Y-馱cUVobӐ1%iR Xpv\Isg[dL %l(+aO@EiO}yoHp A\5սϼAdoJJNo(ب?ٯB p$PSaBE3wN~/@yFn?Qg='rW(,Tg֔Z@a(IψaDMLgEDs3@1}S`#VJ&,hEU|d ܐ3tISњ!9I=35y^HG6pQ}g4{O5vef=9EX]oc ^XrRoF!:fq+f k?0>yoa9@jhHTq/y RKAY!IA +R5 #^)ž$ G ']S-=RL\?r]o1EЗֳDpssPMc泄[ ~{;\EZ[5\D_c^ 9@{/ RzxnTpKZ~ Е2|tk;ᄍʌOSe 5n%qGVaoLq4lHy'st%.]0!zMD (tm'jck}lPcI^9KtRU?sKE'iadB1*G)A_el`Kt նp*Ɩ:ݻ1\uX(Gsh9˒֞hFpj맕TBB=f%y|*/}ǃgf>Eq}"]V>pp6urgq[AVl _B<|!- +_H{<b}fj_(/>d_:lI63Z C)a5%Vv2t@ت;K \_ik9B4{K4eI9|V eAJfYU9X!#1LEJ naS$ǞQQ"皊Yq[*/`Tͤ5)kߨK.By$t/#[-)ɞW @APP2P5>ˬX{ "Ei[KxZQ9<ٳ75@c DWe _8Q?S {k? ;MHpʐqBd^*(վihoak>/3.3Qa&aP~(15qu"?$ف."s)u^ոc .HsAW/FZ^:#E(YXEeWL$q !M. k@=k.MSsXv$O>@BGwS2{Fӳ>!XӑϥACƬC0ځ+NlM4 ; @ʗOȅ?]GdN%{ڔD%w_ w %}}Bxj' ׃ܟ"~ nPJܛuvM/ĐNc߄~yyLL;Z'#|oAB&ҊyuURYUlÃRCZAqxvDE8<.9'S7f$~4=+@ۥ>H ,S(ȴĥQkU3wAIg#O)[_%WҊN"I#eGuZ)%<0NкDU؎)ScKMfIվaR(13bvmL3:5m/YxpQ^Є^ >FprWGjc(#.`XyDTn|"&^j ¥ dHoRg%aQpf^ZT 2qǙqNa׏b;e=1[|ʲB̦,NمŞUGWL{Ü2·-JfF=JI_x]Xsx8Ʀ O?629g'Wǻc%Zn~*EU̕Ol)_Zzms'KT5~uQ 26(E9K_J-(yxစ(_+֓;O3 &ljًMf5pzR%} XYzW]ҕMTJb2~`[WծѮ)vh.sAV.27>Zx1p*|DLOi9UkaIT* ڐ-DyS8BL $5uF1`$9# - L=lSK{mۈۭM#ׅ߮&Qnl7To ;7jg^'t B?{>]Ah{w֬I*Zq/5>KB#P8+#w]w$`4PD" L5iL̛ iT>i3Ǻ7PьX2-8,%AqӀl&`x(e/!m;˂r;GO*s *2J0C@ӣ?o!nm!,0 m:R ̗ޞ';Ju4 :`i[٠z?5=wYҵW$u*%rXߕw:/hFs0 (׼MÁ<"MtD5Ű_CW7e ?p!Fo[N+.!G/z3im*t'ciW,B\Y3R#;N_Eb>%͚y{פxy~B;bZ?W 6%v؂n<2\BJ"ϊ+}[eQ,G(Xsxѐ˩N![QnMo D8v_l5/ aئ0z kmײo ʌ T[}:mp¾[G^sP0WIu;6i!vL>: _b)n:ѹ} B Wh +gٍ{7V>n}84Ȩ?-Yf䜅|Tv~$@ZJ%"$G?N(:]r(N_|:vJ<.P9z/TJq dlN`>LU30Aɲ] *pX [ bv&_v;)<:}KWYndgZv\  d3KP 5sݭ2Ũ5YT8k͚Sx6ps#*~IH}ɱ+O٤*svG,0ݠCy(C`췪vWLS)19kPwTbݩfx./xC:/֧*XL~.GaY Uɉ$f}x̷~A>9q33㸳 "he6{&>Ig2 P:^ +v`3C2l 9`aS>A}nGzYsJ : .C!j9?G5jv˽Lu37Uu%%͛6 vPa\D zw@w>۟n -P80 ԢIwb3*\\wf-2>&vXS ~Q"-J/\V$)<6;7h6 4wyN`Y;Z,NH:`Tִt?[P(4^k}$ؠMc X/2UlV`02oy %昏8 a+|6_UϖO%fm‚{E%G<>dx!K}wݮkx:5{`ip݃k03yDTJmK?q(9\ ) mn?J}Ryb ]]ΰ2v~5BWY|/='9mQE ݴqnFח/W;TfHFgv"108`$N""4!pe7J֘ܢH!c2vS}_ ~{ 8lɲ%d#=9ZUR%9;֪Z+9l R{vV{D(l* '*Q zw lZa&qpiE ~W]$96$ Z$ىuON3<(,* }媁*arhg01:1j:"jn8ͅdesll^s@MF6I8 G#)l<'YW+*zyaUЈ5[%RjC#R`gc&I VwۊcY\n"xn9b@AS[9 4jO;7YD[e__+?l撠s( ^UR "Ś ?>+ p? =E5lč =_Rg{D駂)g㿋؃H?HI`4$=ݑ,uhb_ wB Fa|͔=U/\uMIK0 J'Y&j [0DM=tѩkMNj@^2낷FCN Z0̿GiYʲM?\?HfH6Oxzu:[ sWZ]|.+d@*D^,`'ey#Y+,+{Tl7f̌`iSDYhiѶʏϔ䰏R0XLV^%+447n{ (zcD_p!@œUKJrGl?q٧pJ۽ 3(g脾 ~b:eT& 3|YJsA%NEIStʫĈJEͨyhIR'Ǿ?Im<;hk.'*$/v2b8$L]C>-e9*o^RHL9bîLG`琜Cw\_ Q&]8u-l1o|p}b/ďReU%`ƈ mj"NG?b(yҩ\Lyj{;^ GyRnGP6+OwhKFBuD9d7|5iO좆m|Mx+9@{?~NGI!rPFP-mRD?d|\a@;K"MZ0 8qt[ee6FyFv}5Il0XEÉ1Cp%-iA@H6I{`s2Craˍs&#ۃvjhj{{.Q-,KYS4ۉQѪ=S6},?VC< _Uދ*]}n,o)m vG.OI 88nr C+dEMm< F2σԁLmxGe Y#-,(̎`D P|nIK'VB )nqUP.}ͯR,0t_w&%1q=c 9xs|v F;CdG-R |'&L HJ}kDX7Rlϓ§2!C& ͂]Thw h!Xdŭm M x xX~b x#a;(ﯽ,)}@cmQ J.:K BUy&5&oZJȽ$F"\>Ĭgɓ*rV](j4wӜ[ juz+(p.c7dn$ c08(=gN"OheM\>N[Ctg.tNx9B(u4AD .wZjLkqO yB8t%|Ƽ.>&x?[C3t<~% ekPa_hYWx2;{^C#W[wޯ ;V:z){Gܣ$w:g26Q%Ey[ B*- e^Y]ƥ!}? TګR%97>udϼچ9*}9*<ѣo ]J$`m !C.y||K%` #O܄"/ "eLH"Pv͏,ꔹ5 MWfN>f%\Gig^mJvց]['|9qgcEb ~nx4f8t(։!qC"u~ Óٚqs! NLNYÓSŪϖBsAQ' ´I@)aja,jyX&qxYfY0ݦڭ&F£d}%9w#ZH9bm'Y﫣}j,[O ۍũWl oh0wF ӽ Ӯ}TqVGs`05,C3ts8eGI.Ll.DاcJJVa|gҶ cMҫ-M^ƞo~zZ 7c K];v@A cegPU d|©"LYf <ե MWKO_LC&5nF`6Ѕ*[!,)]NoN)Eʝ/tLdJ0Id+4n&oV"HHZh* ^D)ȊtB@ǍnV7/MV[p<:}>vP޸ :UN1 pVGz <t# 0CҏƻXXZ3{Iq"W9舨fgQ*>`%nUaD5[mOdxq%IT%I 4;cbY-*uu:b4PמH%ΣX+Qa`Pùx6N?y\ F?nśA~?fdr" B~Rm̰!#w(A'X1$ڒ0w Q@ᦱjNيS-1}^,so rFI~bJQdZ)4AFe%xL 3J!0A* GHILUb?= 93FV##[wGdJod☢, vIrk 8@^*S*FM~3TC<fnrI@DC헩tIe|/vSׂ_k {+ NA9wgDc^ Rnq{ylU@a=6jA3>Y!r[.FkA܆r'kєfB$dW_*(z!-+O+a>@σ<pLXtI(\\0 6gw4vizZ=YL@4 l|K2R,@а3a)epXYCх Gik4,2Q><_8,AO0'`%]8qm󰰥 kMgpƦ3:Ԍ괿Pc0AoRM9E摀Qϻ\}f'{' qrMg6XrGj/떹{ V;sͶM B$kfӟ.Ks]_hzU6zINnir]#"dmy#ǕWhWʩ58gxS m7A b}4<(1rt ܃0XXO21׆,%|z&vrҥI`󍛕c3Uմrt_9`ؾWH53k^FؖY<Լ8DPy_ e~yY;4CZ *ouD# 1rASeMљk,p\c(49{>Vnſrj߹ c!EZ \DQY6Q殂ݨVUH7J="þZpjU}E^2JE;V%tj|w/=_* H8G J2;=S> \ v #Jb"N_-ؔr}mM8|=S~uYXDMPp^\ʓOiq G5@'ADdUZ,m ӌ-}W5ykIJxV:~[9N^qv츨 >&G< SO)-1ڎ } L,W{]!־Mõ'Cڇh&,pTs?VDmUF.;I{7K!?[v>{Q5/ ږ]l/}ĕ1:dl< predt90X6H2oZwS'a%P} "c-I_[Ѡ#GqòPo7ts$GvV/-8G-\:Nfϑ2BҋgRTBp6}o j\%qy&clY5!ʍ<\e$JѸj*;ThDCB#؈VC I1H'=fX;뼌䊲- mvE 8Z$ fjU;BG,ڍȧY|o;A_Ҫ{A`EjE/c+! t< SnN{0-(e6o8:Dskž L tz& KQwh~_;n9ޞvB0AIlγ⤕Tzr2C27@gQc)l(|~D9BZg9o-V-EcAP Tmŏ 32٣V{tG $̌gxL34'3YkN.mɑB^&w;8,d}d .#O{ _)Pj@!uL;5Tב^um/+>`̡0;ͧ4.QxY}PxUz:;[yFڋ7~l{_*H'dnP 2"*Q"K$T Wdj ~K91f+КvNm߬Y,TC|cwWX{k@ѷxz6og 14#v&Bu4N%A6b5/Rr9,˃';ܯ8XGvY56r@yp(V8l1G-x ;KdXS든[!8`dCV5ł`ZCrl4K$vẲw|v9^߾7Dz{L\F_'Dr y H$} $9jbƺ]ڃ % ZŎs8; wI KvxYPqtYc!~4<ؾ+H4E@tT_WW>3HU}c0}0ӭZfei s ]3:$\jQ0 %V@ֶc½{SlܾZ._'9~*O~K^L\ i:YopgcU; VZmϛ};Nإf_fuf WӒze"q˲!m~xav b#Eܸc -CN@|\>@y/u@/8wPETC7ٛv=싺m1$84~oEWKO;Ec7a@m$|][BHl^]s88!Opa`GxBQlģ݃: $t D\xP"bLl-湳ۻ-y͔B^uLoq;V1WoOU1rg9Vfzq @9x?n2^0Q2PR)W(瘦8/( OA ` a+LeD%fx }ߴ7lu!Ҿ6#$1jUqZ'pČjW(~ܸqqtoЈwӨ*>~ot)H%uIx=uGܞW b§B|mCŧ?q1~MhR #<QƊJUuSQV>,.4/f gF[ɞR:F] QqDM͎9M"0ѿCS^ZQ. W^OC8t R*-FI2ؓaQ|ƣZ5aqI1z)fK6$`z] MvaQ6 [k+8*A S/\\H ;_68G7:Jכ=f2ݢA kfރh  &P!a:9}1$VMCQY{.ow)]I$ 7Gi%l]EH\@ Os3V-_5X_Tozu$u֜&U0k+gV0QªԤzi\ ɋ-ore^ɟ)%+&ipIr~[Ay9 eaXlk7Iq0aWhH%wѶf\ Un7:,`1`.NCDhJ/n/̞io穖? )ʴlJ2:H$娿wMcS,%@um6U |[﷥LnXo2TtdܤQI~7=, e~[PRښ;fu+7s7-!pPZ{~^õEWYo|s٫Nq;yʐ ;5u w}R?jM 6龰Z UFFi'\lpȡ3ǑX7 [j4/ɭ1E !>ċkwKh9K +v"|L.5#_ͭJ_ U 8,uGjU-qQl>w X=3&O,F\1wNMNd 6vnnZXE!{(0"iu@kT&G%2렴+nf}GN"ĽfCs3;"B8B5%zDaجH N 90b/۠ݫ T3k^M#e)]Y@v G$Df>B[]fnBFQ^%+˧gQpYŎeFƬRſKݡX $C*X?, ͟Էػў2R{J'5;~pRϾt{m{0hoFUDЍ"epaV"*y(c6{f+7e1 .Fg簼=bqKzDts6aoT_C db=YHŻ>*CNB\8 #l Pchw-L G?UG&^3 ap9@)s`@yꑸ5^Ģ^g^wp0rz /~"@U.MW7ix.Rl#3;o)!j6uԪUlISC0CfFg<Ђm>L/2Pn˯gY_oBU6'2dcܒ:B1Y멚immoxd r6ω=@#f"Γ>uţ/gV%ϣɗ4!6zPZcL͛΋oEIȿ߫j‹\x+xPJ( y}T~6 CDQ鶐tCdVPRl匒 mq1\՞ZdR#qh֑uHETW E-L?"s_wZZq)l<`P?bُvrܱxR'"9& [eds|ēr{v'Lo3>EӥqG9 HOܳym9j*y6KV\zYn6?㉉k] rMe,L׮LHʼX2KV0Y@s@_:N]y8\!֡]sYPRwְ p(YL-4dKUHyչ ]C_:9MrodcK|N/[8AHp#Vί3'/bjW/68\92*>@cVtYƦ\C{FB='ʐk~K9'4N)B#k (Ly..mC.E4kڤ^S ,l \!/ @]LC42`Rv! O%0"Kt$ ;:CKf[^E|$#pVp^ 1 aLԀ& L *Lyu &jx2dw8Qy(S%&\ %2ËvTf v߻GR"5wTuEU uL+hwUMxC4TaMkz~o B5w]I0T.\DC[F1^f)u;kIMṣNKP蒾g/ip$眆]X {!zr '`UYop BO2#'vl3Y 4 ւ9ڹ&hp-1^UsZr7Ĵ;6]*BtG"8eu>"TX>8Z%lxQ&T&~7l.jx)Psn`iJ fPՔ0UZ|8BNF- k#By9.Y PMy*"6fndP7XK>'l"'NlsvlrV'Z(-J{`-wcƝNMu <2BSWzt@۞z&tRj2R{*@=<4\q$Eq]iX-l@Xf"^1@a{wkR8J]c<4AJe (#}֮ !C`Fу>42y۔Ve ^%ya/"N{\R3fzufcP5 lTɡ_-| 6 M 7._EFGO<grNg%ʾ%$G2v(RK>M 8 w>XN\ G.M\@cav3dv%8==;~jw Ϯ/od`.-dˬŪb*}^t$ ۲~ ̔?= P41~|sORw@&[euV)hrܷ-djX8)*@-]Y˛O9(lOEDǤSm/]G”|K4tUo&wA4;<39-Cdgz:[F(0o3S \[[t"-ȥyl zC={ S_+' >FYA2oSy "GM} ؚ^c'ht[BZO2o(&qC$Ssd *t3WOrB?ݱ|x8W5? ۡ QR[S+ N /3[^-?Tu>">V̞>"O sqK44^-`=O{ F˙F t-9@eDxSmM8 nʜF/J!DgyR r^12ph+>=b80}&}d[Ϳ:[HH2x/ϋ\ `NP8Ep>Sc?#T8^hbt&p[F& )Pxtq^HI1?&idùS4*^pXuѽ0 t. U%~M|qW9TdC8>,,!0/qz_!{0%\4{ "5/Ho0fg/r{ K(bYd*ebzZ!9j[|m4֛[<W?T0ZzB'vK`sjl/q{]\\/k3ݧ5-os󩔢ׄ, 8݃tB3"uSR= cڃ #n*p] M!>߫R>rF<^Ah}+q,1(X7zD4P@rkwuiziw(jV=aY}`qp?YRae'MFE3fh``h7編ĉQ0f<#2:QWќ3,,2IfiP `錦Ǫ>Z"$F a NU .YuPb>oHw1BjLg|?m|a#0(hIQAf^F}b Eeq$P"̌z4vϫNhƣT&F3Tx7eE O\CJjP}%(F]ki(uI_ޮ2)DqMuxzP'h=D4>RO_C~A 02v=`=>rשW]ZU1ۉ^|[ un8hޅ ZVs`^΋i<Ss@2BکpmOȽES,|̜_hv]\'AyӫTRzk)U:\tDX:DIŎ42E^ z)GۚKͦ:A>"`TQeF\:θyN&yt5zUTzLk% pwY Ӫ0@(7u95+Ѽw+?EIs7ơ]7> ?@<*9 XJ;5}SgyyC_Τ/[wnڳN'ڟwQL@LdQƽAvAA#T隰'TEt찔*YsIhQ9oy5xSq]8B沸eh~&Jzn8X]w8Rjy|0݂ƍPqta{l䉏mIX=Es|q[(EBaP|v%zd 5`39 PCb=oaɚɔ*@(@R'PT^>yEy|oAIs0(fZ VM@g\7Hmi}O%/pDcFqd 5-.5%/@ :mb7BxYʮ6c^&,t%1`r?;h62&wyS=N^21Ϟ'(Hpig߶2yZVy)i5̢@+ڏ1dysoz USitaK8\?Lea3Oms0vu}Djq$],L] ّ۔rxrISi!K/=L.Œp;|((uLsۿ?)@(ͺK8tJz@/("#|X`L W&z,l1@cPI%c08$Ym&}\%x dixi]yg1+m-30\Tp}dZ^K([6ŸuQ`Oif"Kl.ޤ$[N?i.u*eDMJEEK"SsV {oEq8Bc!m/bs h0CrPz?|vZPn?Jc /v[@'P|tD<}J @ SN`Su)kSgx،+vojp ݤjƒH\q-UcM^FoR2bN@ե3+83%fqZK/r;o"6Q~mj)6to?W[8 &ӑkQ.`ZLugh.-l\nAn8+\OY1(]:($LQP i:A++ٲY'89dcgUD,MU1mךrJn!㌯ZTӋTU *D(#b7< 6>txRf g?p^C6 W2Z| -T=党 TԀ$ ;48M?s4@NΌ1u}TptxaWw*ҜÏ x-GhM=39H0TY 4X9L)3ВgU)"(gbl{Ej>:6N/8!2.>A>\YCXp8oK+gRGe ć&=U}kjϤ(?$qX烡>9ݺr=P%G{#oG`O29%Q3T.Kj7!Ѡ=Ӹ4lRt_c6$=GkYwT؃cn{`AO0cSZQoaäBNZ5Sƛ՜pS+Syp/IRL77>y 2)/ lTX>MdǃPľƣl`'n͓XRT|jg`ZOMOyOQCF6D+(U_BO12-rKÑr@>n(A@%(BTLm:.?,Yk_jފ!L} p&\pY\^Xo)#E<,H?U|F^hʣfd%Xw@*ZSkF{6"7[P7Axket=Pހ|Z9A. 2CJ):sLc[pEwυ]`.Hws_vo/a=H;YBZ 1ws-UJܮH |MD&WL6&Ϝ>õڠ4רFIaef ?h N-ᾖT{ye' =j$UAŨ/QEN8dcdwЁFx_ߕXPQMΤI f`FۑTOnAnu/PlvExH/ 3@ 1B7Scdc= V=Z|6k 6},qNHī\Aw թZZ#]׎X.28PRt9)*v> ]BM~Ц~z"ykHqkaAFheF-k<Λk I-:7)@(㏟ݰ׮} 92rkNgEC': 5@o,pJejp%{>sRyPN:9Y{lb[ʈ@zxdz.QR]53%av1dI,&1=kkO$ze}(:#09! cC`m['[49i]Z|u{t8ghB%<2XSJQ9%>u|:nc4ʻ\1a,I`1ܺ FG[XdQ\wޒ-9͔@QWIbN;軨: p4U:dJjH^fӶ{I> Tc-g#Q^y#ɘӢ((>fq}!pOy÷<>llSuAB6[uDl++L>ޅMa)D7pi{KnI'$fH!mjBz}қۖS,28dlbSqX?I0%R?~rwU7Bt=@w!G;^<Z@/WB^tis# 6JqF";q_국Hk[cETbkq0ZŭVW&6q@ 8gbP"<~\k)Xل'/_`Q*_BƩKݪnHu`cJ,u `#e*tfeHO !'n|ҁu6\6Yi,WTv@|TAm>''aў6oJ 0r:*b #BY"B!kxt3roN0-3` ])Ny| ЪUؚZ9fNTU۾1~)7-‚Sɂwd:FFR n_s}wqsz!<28ߘtUZ%_ V0 CY$xYUc /i+Vς\ǜ"8DJN|VeNtS0($1nH 8duez_j% <tt&۸&HTO (5o-p2s)'V)Gd;S!X2AM%t4>q o1ՔF!LJSrtsa' #,A#o8SElF nگ(f<};+H$[X!gnDkW&V)<Y*1c'3(ٹ;?tVJ &fƋgL`-|]|V 5k8 4uk O%U B`AML1Oze!)")] #vqaMn.w摋/f--őhTWd Oa!\`~D9<^ k :4X2S^IBݭJi-n>7?UFX+?!Nb@jy5?76%*4y= ,I2S(8RCyᬅ[j_`0G8=AI".>,r'Ƥ"IczRsS#*ۦ^wJ|zHoǠll64Re{چ >9Y`}f?H 97˺˧{Ze%iSŃhyv5J&O/3ܫ@܌@t-XSk6WиmSx y)}ndeNG[ynH;E$0OY~:/_CLg*m1m6Z1; ݃WuJ1^/=28(F;אZZ,kG@6Cx}3IHCJIUp!Bv!*|k؎kLɦ (p>a8ٖ{B92mܣBڰ O@,Lw/Z%2VpYX}l%@hvQO<ң!Uz80~V7:{oRc6j9G b~`,eI^h'9-ADqH{( J4 X$<`FȽi>+;D)GyM72vۘBxhI|/%w{ lхTm <[,=!l M'0r/n;V`~86:̬eEq:keno}P8ͺrP/3/-ѓ9ӂ8FJLrY E3N+3-M)0Lbxa/dni%`bL,-)6ֲe%ODx Jw}u%ht>~܆Chk7fP8fX6)K| 彻)* B;XiKD۷rO=93Uxl!ms)]®-Niע4_j2{q"v:!9ʋi69>_6ES"i7f1xeCJcˆ "wo.{kVD_E'`1F)Q\W f$,7mNCMeOJo/#P0ݎv2ySB yB*E(NA>>H{PIZV|]a+ias9P5anwbR([>/߫ V 7<3 -Avrmw7=#Ge[ÂP&̞OU v1 @3}ԝz[-1ddfP#$lO wcdlsz" VԌPqi*i퀦.֐+2S'ǸWa*:Tႜ zgvO}`Z^3^ Ao2ZW/HQqDl96f/R u?f̙ A\&&`}vxNk^6[=E 7ﳆ^VԎ%ضzwà("NT͡GG庴Tqʆ]- zRgwX[P5)0B 8p(BjpM3 lP4]#h[wjaPzn#;ŷ]Ƴ1[H\^3͇S93_:`\3e6N[(g9\S\ɒ ZLlAu [H]"s4ޜfjkP*oA rc'ЂQ4 r[t?5ֺ8UzqlR9Xj!}y~ٛ"6u^tK0H 8 [[*v jU6B/־.\v)MSRߟP9X"QOdaB<+Q"w}j<#u}'fAj%91 hְ׺ Ǣf٫%6P^rŒѧU*4jh)@["[( C|]nM:` {U@9%S/p\WAۧV1'?@lA."FCӜ>/L=Q,? ֚D3V7"yzy mBo ;PUhC^է0W~qQ xP hD G.y(\㜸eY &(.k,_$xƦ>[oڦڷ2/,,bdV-D\g}S0vnu}fܓcl"341e}6EyJt)*LUR&F_=sEՂv1`-?K# cSi_wBKU筁z7(wxQC\mq25@]㪬C;yZ$-#rϒƔWڎ>?3uv= ۟6A{=ƴ<3#T))(, b׼溊vƿH2^h^<3 .yD#6;Cەl*kv`<=1:DIP3Ȯ񂹮9Pf)EX6-O}էp)꺚DumȨ:JA(Ԃ'ps)^8 B |Ju"lMbeͨ5U.gQ%C[u"ў# ~k%;1SG&Ŗ`UnӉ#22^@ߴxm% ^0LfSm/ S6wt46t'(&i JpE풴*?p;ȥjO^#*J O%>n5 E U dj ]P靰9՘(4 ]q$M&8u*Bak,sH_𛻖)iG8lzȸ6Ԡ oT*=Ե X\´Hy_ ^4I8ETwP%6,ɼnBtw-{ gB6 "ـײw[? Q*SYv_>ùxĪpv>Ara(~ә'jF)ZB~j*F8_O@l 1 Lۉg3 NM!c'܋^=Ry#kv!%rDn.%kDCus\1q0bH Jvd8!`܂P\3G G/|z'c‘ڱ6<}e6N?)Wio}FRم{ǝ~LQ  LR "U$%QѾ1 XK}mȜ ~ѕ&Xgd.bslT1't<.a0z7+{_>s$BFiy ZH& tCE'H]9}D_K/SӼIm߼b%s8˳rYRB^ўsb`NI1g8o7 hr \ Fvbpίe js.tnfH{m~%T P#HOB׈Sd $NiկV 3aVx >ѓ)2b C5os>q,~jA_ȵjPxMb̺@\!2B>#M% Da$)$[.(r.H\K=qY0\Vҽ6J 9W*b@KNg 'Oq!}6l{8[xDZ@}y/x?CŇ`}d>'76LF:_y8"q ]zΆ!%MkaU1F"׽ݩĊyu!+7-dIE9`|$FCM5t+- c )~!.nvߔ|7D?~4j+, M.IZ=H1TUb mD' Ǹoo у\5xd54!I(xqI/-U)gid`zv[6rYi]E3  pi믡1LR~(P*`oA2ʆ#)\svypbݺ:1'pySÕ.\nȂCҿ*nN7@e"㬏zA#TzUݷ#1 6d{IMS@z[1km~f$ tU,^]^KĂ:/aE*Ms*.{Fd_Bb4otJT}z7Ãc֐npnLY\)%dL "۠hFvpmy4ÞE>^8qĬ5 .I2Y(HBe&᣾MN 2_8€N>a0kq!wAyK_qBʣ}r0 5Hq\D/Wx ϛUn4rO><;O:$xl%83,\]71"VMˮ\I&o<+-b7zyiy|`^&n08,&փ"|2*Ӥі>\τ4xulɲg;ɢY@AOaJBҐpk߀`8iKIa$amnLdd5f WȻe~WNc  רrn0!?=lV,t(@ՎқC`F]3ob$h= .U C ߑUEa%<8\ON٢cR'_$8DO*R;4XcM!/ >zV/9n Q0)4Ex`& 0$dõܛsB+]·[h5rHoㄾel-셶F`e^B$8_-u_ Dq#`UAX@7Jo5)!gLLXy_,gDnb;}N1Xe:3,j[Q0n_e1>Ǧ5['4 |B\+"bEcqeRjX$Ԩ޽%-v7āo ]a~tܜkD?Ld~KB6#-QG$3hѵآ>^1% #Z1R6CZBWP} O!25K@۟)lJD^PC%ZyU鉰P"hݾDD$COnWe'e!:VםyCLJ[w@ץe<芀=q4*=$d2`x͝jx TPQQ SV6oi IU`G7Nz}+vbM )?IfȐ|9 +܅?G-k3Еv7q#~ tGHdY!uFb'DƂv`0dby~j>} YcMIك={ucW+=*mdSΦnNc\PV{t3AE?C짳 1dHƣ磩CgRaJ*ȪK򟥢rydjuڱ_L+m#=xFcmΜ@/c {*yU lRSCdu0287OcP>uk\N?7[ 5ƘE}c N@t%Ĕ!*t;SO?p:@?vSCO ~W[[eb#FGF6i ]ky<4m@p}ء,/)'-z@vgN:Z@N&7GV5j#"?'Qޫ  ϴS71*IcMzʣ~>?Uq\rfʒDXK-jdE#7$&GD~aA2 EV=hH"[jl 2AjoZ%؋J}s,lT^gZ-XFRh_{(򵧛[Z[D 5STͅv=*'t. ZGkE9;ϒCj?~x58ݖŊ|?d"zTvTF RL'L;i2PĊ334`nv:;~Tljsf6W9#0}tVUaw4eMd2x~A6 JI4D1ǡ zݪstQf#}ClK8?ᐈQAݣJp~iBZR?dLX-7$˰E i3! C'PfT eҕ~ YڟZdQ I%9jlʾ)D&/#xjnzrd`BP}uĐʇ=9DW{ sۮ] 5ڷ@]AJxk뀩u 4BK!Ge>( ^s[U}.ĥbS17%2H'JnC ]jF%f /ƀG̽wYvӣ|K.W>r^T[bq6>5DDv6M:fT(`1pTZ&BZ^2yBh];իk*JOU5Å\Y Hr{'/HGnBU1s/_ziUUSP +^Y@ϔT7zc\XߓUEFе ʟZymY0K/$hloP`cGwШ$ːv+.,&  :w/e9/s]ZʒNJC${AuЅXcRװitUV\H ^e;X쎢ʦutyFm.n$֝~Ԋ6$#,m{-1~[n)Z@1Ed`U]mF W9PC-{FXE)%Nȯ 4KwQfN@4zRx0^7d.H@牟zAK>mZЌ~ )R=f9 $F"IuDfWs L-/1 QHL泶d.z-Ϩ_~Vfa cmÉAI&AF9޽o౏<|E(+z`Akw}-bv6,&fOp 94;tk*¡z ~P0efN O6(/:Y'*cBfg>(3ɦlY_!*cP#Nm;?)^;6© ,4eG[vY{cԚ_:Fv9r6 8#ZlXV(z7X&6m::$nFwYЏUơuǓ"v>_OH`l6{޳')W@48 ҍ4Cc.NV.AƪU}@Z:o.6ͱlcIamtU* ^pkV`Q8R-=~tNkS\tU٤շ;/F諦AIp:a jݗ)D9敛vR(s 9eҋN7U!JJCf *DPg]S+߃]73cSâm2ycH beqۿ5.&Qicx?:eg^Wј}xY"mk!eT/:zxF}@J뾣Eu-tKf/U&;gSkrX'1< UmZ;@7 2biV8mLT'% OE1uӱBBFsMguːQ5dʹ<9$t pǁJ+:_n?8-ҫ(7b{ Y_wP1 o%L_Jr۲T9$_* QDuoBW )J\#SI.3Ԝ( yR#pSMRhVrIr~Ur#:[T !b3T˳KΎx]_X)dţ\5$_dkj.Ҥx6Ңmt<%o|"OڝGJ鋪aêˡtUN:̀cp DtQecl9-eRڗˢzG*|,-E.C#iI5Ǵn8u&#a;G p&ÛL>hۀKLުj?2J nIQo;z hޅ7k)Fk?O,KL?4ۛLhWĺU-whl]_.ԱH6'sx_ {gTGT3ZZh;GڒFaő|pCV[Vٚ$qBaJV㕱[[ q~h9$ѣԵ7âU}qߞQ;рKq%+کR# xzV)+@uo,)}jPDt;eai}͂@w ~FNy9|DlZmㆼڮz5E/wZ}Ce_1Ph'SJ hBN‚׮#9Mf 9I ]lh C5`qY+;;o -p1ZK?fZ`5l`'ӈilo]]eeLÄ̈́M|%Nmytdބ#DmWl`v<(UWx"+8'uM./rA[ <}[ ;,,V=N9 ClG%٩` '3!6S]9V~1 j;ï._8mjȬܼTI@ (XZ9C |N!T~!Rs ]ihi ?x'8aě}h] y[!f2; Tc?l [wՂá ڹ -g}B5Mr:\r} l|bӷ_)2A[Y3ԅי7]+wddεa*UA ;xc2賋/@0Ŵ&m:)hL-H}} աʚmG<1#|"8RS6C7Y,,8 'Ew;+@&Ñ\Z-„ܵq_dKdà[d6ZM97a ,AFV;*hfkdb̖"5'rYƊ9 *u V<Q :wm$ΖT+@9ywجFVmxI>dmJEѻ_ЊDEkcrBt͒E~}?)axgtP[`K03'' 2} cb\r&hxm<%\~9$យr_@1W ױN cAhe#(G . Ѐ%=3kmv @bJz]l!x1k<d H e,xpfјz 9߮o֑QϢk4ViV }<\w'nEY#7Lbq[m_To%.1z*:Ţz`JUGYHhǹ< UXƶPOyuqVo;ԾOs 0ȧRDy83z+3BYoeto\Mt6xzw%v뭉C{!صdr:X˩]Hmy(PDʀ=Wg(\VSsw|JarX| A gl :MGSR ַg#eU]5.puy^C|'Pϑ:ц^t.@1H!\ΐ'هV7Jocř9ؽ+PA,~M!JczHu#6n5hܞncG@YHcrs1;HO]D }4L5Cv?Qy&x˖Ek%ܸ> [7C%эE^< j*S:ër'6֍A"MFKYm/9FȻyU|r/ZGWiahFZN] SE0`A&gjW}"=L-'0/6IIc\3ȣ`HOo{_p5Rh:J{zP˥Cp[CԱ"NQh`9]'<^DpYطoZ:h"Gt Pe<ՅÁv*>MK 7=3cЪL{!,ya<[ʹ= tkRZ edA:[ ΰީq4Rw GJ!5W1OsyEʬr^ƶ 䯱T$96U>bawO:w*̢Qnv(\ jǗF]8oؿP`ˏgt:6EmW&ayvg<(;='⩝ K{k5߬EUpjS6KR՝vR=}Kݫ.RD_!UnA KxB) Kʷ$XCBY3{mS-yW9;ђ{V2njsF.5~Ęm@!Duzj*ς|缋_G?آ9=S+Vۋ:{Of!9˂feT N6*Thx}kaT4I?i,f{`qH(։ 믢Z+2JM$Xg{xiKuw+كq=dn&L-CgEۆ> 3;AZ;WkRҮaTׇKF;~R01ϸyzXjcD^^~Ė=eǵJ€I4#42cbpp^er`a䅛ޓQ\ Иmx=¡pͻ`t[6z6X>ԫYIxn8:N)\?aKx|/MbB i@6XUe=c E-27? mXbaa 3fQWKk4MOlq:9 .H '+.K]7W+`F%]Dr!g'zo+s [RT/'Q'Ed]gF>f-;cyI,r:LM&tv,4ОOm #gt6W "j9~/g7QOtv*4?TF~6Mo@|y:f&DhiU ; fZ~~ӫÇdeNIM&H'DO`HgXӞٴ0=A2 7D*рTbp{e%R]@ff} G u{r|^ _xICLo#'jŘG*a+F ց]Սpܠ*ng? 9P!uL:v5Nrp\)$?{r&}dmMhuXb8v\T*"Fn Y~ݫ-cuMyҖA]D|'hJ#'Kbo!+1ўM"Hwc.4R {%ˁPͥ(H"JCz8%Bt07[>V7_ZU&I^5,؋̃ChR;nbsÀ4%脾VIH^S[z:wejwQgbbQRS5߉sh1{hX/cq~c#Yh!/Qb%}0k:Y;7OFس8 )}g=Mȁ1Z_H[>DA:81VO&3H+yC#/}؜Mز֘:}s9 Ӝ6yY26.,TԨhpg*똧D{3a@Nlhntn*Qð}86ҩ~|-h#HcgC0*mwCeǐl]b2 NUtG&)+)2'Ȝ4Iܜ҆jMZ R5U 9؏t*) ]d@6Fi;ا8^ȍlؒhrpqAڻV)D"HPaIbMirfP˸y oZbvH"Z:TEΌ!+[{w@. N|;1z&ֻ~HDBh$zY_0_oň\\6cޟQV g@p~ # }dA[wVL7>fO ^ȷS;ӏ5|Q-Kq9\yP qMZ4V ]c5I;AX*Ѝ2~ULbOƢ2k!6 ΑeXkVMI!{W-6kCYjAكcq(`(cKҘuКL+ƨJ9Y$/,ɶE>bDus'+}1 vsgBoa0W>qIJ:}6̐M ڗ@ 2lGgtGF2[.p{I7T騘 0,'2_:1BI:@h%7ղ(;9~H0FKq‡K#s$m~S=*x%h;>OֹSC3PB{/!'F5 ۷tW]0K62OÍ x${2h08݌:fl?g}"geۭr8EaҕS^  8 Z|6agDeXEi`ՐaNE!7[&d+#1JrV{9YU#47Tt?/3ǩD$PMHֽͽp"Dlz1\[fdcR٩/4\DW}T{lQ#ޓ_ǗԐs$_oې#ddNX,elSjQ,S.ϳpqP-{HJ,Ɏ+$*ī) ,Eˡ1W0ɦz1B+2w9CS;TDRpӁZݿlEbKcyWV%h9!J}8ScO;%h}E˹Oot}) ڽd a_EŽ\8'쉘uvv#+ɻDcv ~ݴgNfd;X;{@0D1b3˼/ס t1ݛbA_ΐW ^9-˅/4⫧ \[ϗ)Qі,7m7݈6]ED?!|Zkgm;&wJD'+6LˀnL<"my!z=EfvIPW:)ם[юBE׈u`5g6)q-wCOZ Ie| A76 q_RX>|-L$/m(EC*5UzC6m5mڅ5*$&t)hiVb4*.*-9*2u|l7Yԡ0Ҭ)J >mDn'| h,af,\ s|<]@<(3P ifp:}>Ңpfcy t-M&}2@"=7rg(p]lE0J'WsEjh~ 'bZ=}gBXouEN4;ATM[+0+M^C473\EGxhKBG*C>{Ŭ QUBx|- ,+'fF ~CTx/,Ϙazub>ުIT. 2J}7 v뾚`ukzFL5='*c5.=%8U,Iگ=:İe6୼1 sNcώkC CUlibAf5!Gf#!giUN߉fYQ- tkێRKMe<' 7۠dP:hЬyTIJDjL%L1,EqR4MctcW 6ug8սuOy%v!PzѨL6`.Ǻ86Or eQp!]]+ڕh)YSy|N3ھ^4URﴥ/42e>&` &[!3edx_1Q>' `  K*!b5RnP+NɆAlz]JO j{rqU\1ַqzRzaY>Mo%_/,sf9Qb%Mdf0kqQ)Cؗ<\гsә9ȶ3ԥX+A P}bo!\5ۆ4k86J6 těxI+*|M iSUHN| OvhAbMb<+#o]H8Ln*C$ovc׬1Q"Y8wYC~8Uvo8Wk ^IMN2MxΦ)sqzH}92ǻ4P)~^Z;^xna <~ K;,/QXŖAul;y>Y 㯀Y3jyZ[LflxL#sH>M`O/' m £uT^Xga6C9|DG&?$ ƈ,9 <- ڮ$˓%侶zTi] >~Xz1JbUczazLj8"p>2fCE0mӬLzPK`s^Oq%:*^_4) 0߇^bۂ',_!ĵM2isfs"-)FIY_SG/BclN IIq4-fi8JC/|;t}Zeg 鈣F_ʗBl' rSR;?S H1݄ߘ Ss aǮԟlF8v/rS@Q/~5G{mh˪lis'-iUȹJȋo U"q{ ve3n#p "z\^|~7K)X3% ӿ"MQ/y.[{cĘpٴAWzW=nfu(E:1h]_YĶ/Q`38x%Bf^' _5cOfwrqYhrzIMW)_ `ۨd7R] -&&~Y=ᐘh\)8Q?a*k|9˥ulWXSЀ@1Rs3?)f*JY n?-[!`HB33j=ZuڎXR^JVX^S?gJoKclkmfwO" J{Ex[jH>3M\6NHUۛ'{ p#kd/+ byRi2oYwf#@%H[suG?]Q_Ol('͘gYOgw9eR$xW7(LSBuKju,OV|k2K6`ߑ{ &XZA"&pe~?5r:LٟOwb9F8Q*1{st\mɵfSvbOh.nHP{Ont )9Co?׃f|S"?]Bh-$ڄ潮ǔv*j_-Q!4';(5' t[nSo9͒ :膪-{}ڱf/ǿ()W-s^b #W'670`>= R= ~x!@ /P$'Q+FG:Ԉƚ6`̜p뫃/!P2Ofed8_OC?L`?B( 2~+#/‚~eTV@d {'GBqS[]٨ա2Oe^p̴][ڥ jU͈_G#fnp-fߨw* S#a( A Zt8"4 _SE .M_HcR7@I0A_M~| #@aR^x&_),["?)YUž GA:o:x\~r`Id[pl^t.܊͝#6я"DILltz%BkJ W {kCZˆ#:GOͷDn~?\?› ucWǃOǶi_4Ba'o>|9*5o`<ϝ%FRCn1 }\ v>f[kgG|CY?nfIg.qha*e*"@LԙÙnJ |{)%\j [Aݺ\ڣ9eXO~+w7_q>9_yos27D\^E=+_A\WG>6Ÿ^~֌31˸1pmk 6!ǀQu_nu7C[́|* UrޱJFQX_0oH|9zUT}Gg. =`%jO߂C~aߪ7byX%"4 /l6lAj]UQw+bwgY 1gȂᾜ.⣒\G9oRYt_ CPPɥk`05|ԢySסC $+wP^bH]y]UGWZnyŵ~wg9uis۠( ?"Qg9"I5.!w$b#%?(:|Q/kl&HI((׉LeuDB$|Z)LO=mZ-EIo .*Y^#1)UPuT& RS6<ʛElGVҸ< %&)\g2&3_ 4!y~k"K}?̊ண-ʉ8+pZpNjB y1ʒlܑD*@%W-wSCka.'ܕ9bW DLB^hK2NGiYꧯU?9"q\K9 c.#ܳՋ sjELO 9`I!:=hQ%Q C %ߵPr:@_MvB:H mVtO]K݋BPCBƒm8!u&!~{ns3̽[48X%]V|s֋IYl`Ar%f˷#]@Tem6h=ia,TcE\y9 Iki/8VZK);ћmO&CEK31mèo \ &/KУ=l} >5 )igLW)'qe]è |MT<_(Qr1⍒ϱPrh{fћ6\zoj"OVf3£,6{4HDq ee /-өHju3]o.eh9@&Oaǭ]֯:={3WV5fU"j"ЄOr.#e>yPw]!ЉkDTbFfϨ4WifQ—Sh}8'A v|H8m=+$9PkҮ:=Ԍ AO^p~Q+)Zv suÆr7E !qp2{sZY1EnKT.;`RWN!{dH̾yАu$)6?L@!=MF(kYN%v4T owd#z]dl{zEFhqjfT%ڝߎt稯{\fP%ySirFu SrvAn51.@ğ!VM]Y#3#m}%?p=2u>>4oG6F{䍋Y!# 6t+)WHg1 Jh¤m:ru Ob4ak Ͱb4v)6J85sR:*-cr&/`v&Lr:9)!!9m~r(3y<-`EZfQ}Nn,+7[oީd-pvڊ*WCޥvj"7j"3x+o"yz!sW-^{ZkD줏ABӯ ܏!O|n+YI0X\GY؊Q*h:2KVc}y.5ѕ-V(*૒*jlp,XY- qZYLL_zgPxs;[#&AjЍS|T(qB ף'zAz ඪ (iP^Ȟ\k˂0dviiwG&jNx4qW'Ayxǹ|PLШ67xD4{`ˣMU~=OJ/T{Da6_0&(M.bG+!̶m9=De&{(%8@62R=a c=aWa; zqy4s^\9ݡTz#?]鮇c H{#fx="LEŦ8x/̊I96&0tMl:{Q_}K5EJh -`Q;M}׷r-~f$ N1 9KAeG,:> $.}/vF#HS2|ׯ[VQĂ2oûވdj0 oS@Lc06.YNO?WU.AS$tfcvDhARZVX6$\'~&mm?6v5d%"74J[I#78ɁD !-s~reMYYJ#&qVJFe=TJ,#4ސQ%qr!قw|f*לS/XqR=iLʨ>9$05qJ1G$DmlOH;H*&mжݘS,@Y+*U9*80H}6n8'(;jEhr K²N.ڵ)e^Cq=H<[>9(on9rhŴf U+ =ܼZኤT$ʭhӻ(ut`ʩoEZ%{hU_5mVm _qmՋ#In kP n^]hUZiukq5W2:3Q\? ug|CyݘE=TjHjtZE1['A{ݿVA}q6qވȾI2cٳUxCcKoHl\N;I)Q+.E[@#ݑ#|șK~5mnB#[Pw֝WA L]bJ9'nx-=rؽ3A"!HdN;y_"6Fe@ŰB_0N vJgn0\q䊇4{Yݒ 64@mP҂Gs/r]S*vj@Cq^PK N\J}ȴڤ194ʍ; 3`oJ.tTQկqJM=Z忰xY\i7"%mν+&*dXf6"n#2XdkgL{b$Qۥl/ b] :F sd)4uWnjkAxg |[]t>~è+?v{Hdl_~yu;y V"!qGKStQ``i@#F 뢑q]975tm,6х?>־ydLa>r-xteMБS8mC٧LcqLo'\2 9ŒG%Er>G ű]PJp]Iw^tAKSԌ'E۫IMib!R;)cD iO=6)_nl%ӢC !+MX &,6Sek%VxLnYg7I`vC1@jn*͉Z!jfu ޲O]epz`{9k#U؃ nkjQSrg5uF:E)U)d gOf`њ&(Y֝Tɤd(q58^rw8f18ߵPlTLe;V[TʕUA~ڬr :Ndo巤]R7%M -vmyErcX5BɱQxI+/aL3?T:*ĺأP gcG'r鲚߆[!oV7@Q+S' Aeץ3`d  懋UoG/A:zڅk Y9ȇZ2)'qwX4P(!O7NpDDDS~_ q-Y 0oQiVRǯ^}"3~< ;8EmǬuKE8Fɢ/Z} c|`EЮ B'P, t _-?x@l7ml\50@+d`ij:]v9vD$O1>rȒ̇dsRsCF.u)叼LLB";>W?a9G»->'L"Q4Ȩp^W(E}&"9JAqulANm&bԆ*m86VXMio t0뾯OGn)a;x!Z9^G9ɍyfy—(yC@}6pQu0we.8$qJq!d_ꑨm(Oºrp*}A`-mdFN]5CCYnPug )"P7#e F /eT>4 388n'ꃂ`JU@cTАlsAq/=fAruf!ͅ"p7̻9/~\A} L~[B6HH@ )w- #B{st\3 Ȋ1L(=J k֌1ͤ-[ E0۟7+ZO(P܄Ef`4y^]}cDu_Q[H:y?RŔ& *OV%{bWumM*'JF_|E`z,mLoJ0 -Bl:j:g)N4TM|V2 NJ1럞4ἴ<6$Dv&0U˯mwn6DQNV USᅤYM05fΕG-HF; eT"[ZjD{\Ou?lum3Ajvto?!!2Z7څoָ_Kic mW82Y= jp >Y+W l%@tl!1ȇrPyO ϳ p۶ /!ǁ^NY4jqRʰ_s&]# QqMydW1> C <#e`1ә{w+)JY:Rt=ot҇$b@W"U&@//N[1<zL&Je"N%`k`a~GHp_>]jge vro|n[^ZoL7}3T].65╪Uf:Vr*-(ͱ3Z)aFcɻfR9)+j{(Gn*Q+0D7($%* L-]֋u7/q ZxYWr4x`h=n>k pv 64qIGBo=_Un{峖=z<'U%R4⹋obZUz 6;?p"ޠqd-9\HhZL5P҂c\ %D[r-&<\ueJ+ 9 ZSPXԱ 1'IGW v 8pnTW(Z/җA-̢DgFJ:儗pN1 DgVWajV5SF$d)6"m@DSQ/dt=6ν'3 y.Fr=(i@08:p&дk9:}p2s;[$">_2UIq'X%CP:`=ԝcth zNKeRbDwkvYP)aVWkOyy^ -P 2ae ~`U\ R]QV:l/U>lC*Y7 w۲ q~>H(qi uNބksv@!vXtե~0\7j, ϙ.b4>l"Umc4:>Y3I1'6e`in9_! E%?0i!b]U1pĴ!ZJ"bVotUQ;@qrL:p^N3hw$KZ:R^BWKyh_"8QX@0-7c¡?6.}.MJdPp^Q3 'P{t Lt"pC(OoqʘQ盨\,J@4J/x"!殯}I2w]R#My3' B1,0?P=EYwP1t#qVjsq׮閨lyBбB`w&!Uv0 5,Xd8i!o9xppxn?дH(T*_6gon?kOBwUuwFZMzLB̘՞OB H&j";?n3%7<Ȩi %/'\?R:.fk!H63dl;ᮛ9鬱ur}2.iG/WRpeoNl)X.MYR18{CD.Z8v&VrnU_<)j c),ʖm>J3 1ICPAZѯܔiiSLc4?o?sz i Xo1'E]4}@`1caI#Hɢo_"QAM=bV(ոĸmgi0Z>""L7U//k2D1l0?h$)%l>4\ ܵij9C-64ϗأdXԹ>\ ] jݲᝥl><{o1?hmxm)].j#ěcS` Qhx/2|.2[ 41d tlE^fw=C9/ K>(Sdhka)j2f450p"u)2c}ҩAW s:!D ٖBZͥ'Dli,Ӈ{P[MwB ~eo1V{9gvC|VCcWIIcv"sl^XΘZ4uSbXVm:γ|}.*KW#']Ϩbp[ YV9Ʀ[uTc+aM//Yy$~*y&oA-,ic2-(_:@-k^PS:]IA!m]pjZ?fߨܳ"wDqXۃ3rZ} rP<<]9Qdj +Rٟ"}t96^T)k  }Bu) wRJ'Q0)Zo7iZpZMx-u 6xJpB|+VvtzH_ rL|W)+џR,:$[x=Si z2Ex.(>lU yv;KOCOpLk%f;ai/ٵNsү6@s̈́D4.U/]GQ{eF |?{"*Ew+/fBT>B?ks+Ui_%.ȌkeO("k@-Z 54YWFSߙEs_.v/ tPm|p=gA{s Yi#1JON[*Sl}z/IɞT7~%ڛO2ͦ`m:@WݚEzR) QzqQ[`-hUN-oƢ\C{ݻTԼLc:UoUsl qYCV[CKCAYf#7!/(( |dԡrvvxA(tYs~5lz<cg` EY Y>EޙUf~;' \(vV\&xֵA"gtB\*RWI{*!`Z}ًa^mֲܫnQE(0) J "u&⬋̝*G@Lud o@19b@vSj ,4`kMVvO8{10 fsp4P _Y`}L$ T!mizs[l‡zC2m|*U6'_z(qinUcծCE;g:IM3ʹi|? j]"d?ĝh^ƀ湲9EN(憎 xc {j_;C4lsز{f ?vM LhYfF,<\B)s[ֈ}@pym >)DX ?bBj+[64ȷ3QYV9zQ~8=aV Ma⾒{G_5 Ɂp+5 9?Ү$>6Pm>=,q+P)Zc|o(6 %C/Z}нn $͎nqYGߔjV'<ā5G37}!qٛ0oW Ql`x0E_[QJ48$΂3j5ԡLJ|ͮ~6E q}P`[݀?"ozr!k~jjL)vIC ev@ `Yd㓔F<9?SS@UU lcJhaOo1sqnNx.ikc~B\_#-SK$zbn-cÈTƟѾ).j@2$V8,E-q$d띮j*YZn)}V]L |TMNN&Њ>?M.n=pL+hB+\`_4ax*S24O#W t<~FMc$8!NoV}ZU 9I'Y~$?qF}~ɥWcS7P5.]iuީ+Cjm\j]BPf ǟ{'N3|(e[ꯐ]TWMWMȹwnp@^ K,hD$[.xI tQ7\;,c\K5}/#ݗaSP#4I #PA֨T'6I0p} lpbl.26[kZx~Tw8t{ *z1C-c~x! n&=qnle0'iQEVcL#Яgg]qhi19d!1M" ݜT cB-sUr-N3وfIhA=4it#TaT1]7L|c"&(fG毟PÀ^W¸AL H̢ZuѼY푙{N~6zg"';-A]5pw=4Nk$IS8IIH֮p:'o%^N&p9̦v@FL^kسsL-u}XRXH!D+e@t>)Gio&Q @:|0q]%Y_t3'TliM?p{Taq /*-4b g&5}-wclTq2E0vեN:1ő1Ep2K&c "&p^D%aS o;2}.dT}Oy1ɓA@K8(0OoeMD~-B'gQxPo +8!܀ 2ٖܛ^y¡ogӒF0s X"aTUEt('[ܸcهŎ( 6c 㢡5DsU HL~%?ݢcPob)$Hib6 >(?PR7nvnA61dG:h".!jV2i#qς1NxiUPkH2\9៽\(K*ZMDY `EA~6X:->)`&(3Pb3F(Լw){kS}U=6`gǽpAtg}['P#oY.e*b gh,Cz@UM'+"|vm bU|"kڏg2Z<}M84LTI F~=SVc WcZv( L96zyA2/Z~PrҝT=rrj밥J@ˎoI|2* W#5L"gKvZѝ@Lny1_p]7Pœ m)4Se%[WO W)%LJZ&T'P:N7b=(j5G?ptL^SrqL2!cR;|A%[!I(Սk]ƛ}Ϯ!RB6jfDĶ=Rs[rbUbѭ WB_$gܮkʋƄԢ)ße"L>Oi| 8#$nwiI}<D+Wa3m:fs$ |_~n0h4r#7Ofg]nQ ]?[r a'k'f/Ӫ ~\i(~WDAÝx8;h[>(jw/PFjՅ]b +!$n52b7DcIx 6n\t֟0g}1j-vn6qHWFpՄiHErw WLfr7L{f3'p_DTIts+X/}|6&dPZ߻gli}aIԉg+dV-Ha'2}"3|k#th+aMà4 Bq(1wT,h}4$g63?_c;f<|6jE?eQ4  2K4nmw\ v*6lp)/fX}r^1csXwPD8+ zIb^cht7+&v6d.kgJ"\.I̒m:UL, ]h*KX&MNv"Fʧ~K}J4PҙcPS˲߁>#V ^'E5:O>_ACPgyCEq(x/ fyT[%>_l) "H X][jyX[b7l NPlxQ% @6k챳(3E˛2o5쮋EѪ~$&`?sދ$(2.ۘJԎr2̷hGeYіU @T~Kb8@>)--M♟_-5U(o V"6-ö [@/<%F-_TSQL_ϩw0Nv{~oWQ9I0"u%k~nc"ie+kteYX]~6?1-_?Q"KC}1EO|!b֥Eun ϚOޤQ4~^~ϒZ^.ȭHm*85J3dj1S.l|O~>Fo6 C'ʙz ΎjTFJ*E^0Lk<F% 1hBt jme~# j=1zO=E+9tȮ3 y86B I Y>O^z Tlػtc%j% R|9&yVZ P\k]s$lFP[Sr_?fP)t*za#ih2Z nAu M\CƒGw|ya? 03A./cZF+bKPN]u?@@&":lvm%I5NTA{p2/O?sḐ@]>Mu!tFΞ\rdÆ+4ILdb?>GE6ٓ~g*i%)Lok?~TH{bߏS(A4x{L x_򗊸WCG|tpqy(**%F{k/Pd`]-ᡤsE,,@f:m-nuJJf i2׎ĺ85}TP泍i}D5Ruř@i7sQbeTu]s5wX{JNF!n?W_!ڧ0R) C]Y 5#q={77Ge +ߜn8@\/ԅLvE\lfO1 rjfړ;2K C'T VBLm,IĴ!W;_$iPS[l; (3ldAY[mGI ~k8ɽ`Ͳ(5&<Ζ6]o:\!.Sa;OM, NЃ ßAh Gm.WB5φWLZTkca TtI6OHCx25gZ|`gGw:QC޽T |Uc3k9E*<'A} ]C4vn<ŸD rELmR3Ig] ȕuEMl~UBReưPUٝNMaB *1U<ȋYmuI zX4u|R#G"Y1Pf[+E 邲F98`,H-DF1@bUd3c7[x~h`A jP׎xv 쀺Y-0Zո˂.NXNTX.@Pea #g%M)ٟdzw"6\gWd"DyZaV뇣" b5qX̯mJB3Fݵ7(pGG[_' Vdy;僪q"nAȽG,f(Vx΀R5[dWQ6fo,ܙ~]㑤G{*7wP8߂G7y`u\.D<i/ dWP&u>KC/&]uKG<ҳT1_>E}g2TCdj/+#gҳ̄!.zͰCM)nN =1{GL ON^(唬feO| kE > n&$7WߦsM$bzZ~T;.eB 5ez|~ 5e9o"(Ӹ_؉IQIcSt rhNhUӨ7gh &BmHv `C'&z͵iRrIk̞34rۜz~bM #rTSr] A 2s{l uzz&B%lz]3o{H"W#B+3986 `,ug/ cdjR$U└H43nN*Z o=pDK&0 KI*O_෈|6/fQX^0 8__I>44E}W67ESe!qݛ tblZLʓUc{7øɱ[D<.Tg>#~-zwA,3LA>#7gNdf.e.x@7g_52yL|tRdS|H8wT{P1 :Bb U Mo6:ȧ@omj4*|1{ǤD$Қ %$."yt($1@58d 4Ss%@qpv|] $lܒ#^CR&NbVDآelm* P@Mb4t*PBn%և&lIRG<:=[c/q mّSrN%E *Q0@P u>r]B.$l0x ""Ѡӄ^Hdľ*܅!W=(C+zrO3ӏnu]1xQYM(T24K^G3Rh1vKW.F 97XEx=O n`?m|«O{m.-IMl[(.; p2zF:n b%5DŽ<1ϝoJY)X{=.g+zʸkЅ M/"-zs>x6flYܩLc@`J0ה,g^% \h,W}ȗPgww帑;Dy=)}&U\]fE|h:I-H^§ћlb E$@Bx)[4l n=p<:>aj8ȌG̓LuI]]4gL4Beƥ,}"i4ֹK}1B'pK`,>3yht`_o('@ k_yɡe  .01M$'|XM4/O(9'L?mYUC!#6Ww_qDt9)ś4|N^Jϐ( A QPFg޳cEa++tx^(0AuUM_Iq`-ʸ]U4k"NFlqg?8.\}OV?eFï4l)xU{.5&vKQ2E)pc=L\[UXI$'i'Pd'(˫~JK B RUD'q<,JMbbPϬi_F~"I*;)D7Og @fX~5Vaf2w}Ql"-uusV`X&(>Q6]o_vCB)/$# Ħ p웫bX(G%O'FL霃7""КWt=ᆈ^[s];G 2ʫUR},P@mcBV5^ŸkVVhh$GN© sLcHVfNW?oЉǙlttZ>nΜ2Y#r6G0s):G4K j[ vMdGp ~OIK"xe{#z9n8m`"~tLLE:}"yfK3`yn\Lx =pIx8ľqsv6ϣ,-P{@e ٟoS[k-$JtFm5mcʈ?7 fH!)ٵ/|ވK =ͥ]IBe_8˪{"i;[02V OJ3oimldZlq[Ci(qAM#5@N-{…lrj~v$sɻ܁ac:$T]-ԖAPmsu. )&N>: QŷQ37M z~qU UnًSn|6azϻhOHVPEV"@49_?%C0~&bPǽOCAJ#<)4X ,c_oP/?C6Ssx!uSG<)$O=ž<< Jp=&qMPHd z|8]6ژBJ<]~irq4v((-B' xQ<su v$pQ|hyFB%@Z;ڊ,Cexo]E1%T9mviqG3tl3h;!D`tT.憋Q`jq|ݔetCM1cA[5c+8jЙ{+~ž0lSnqUWK+= ]_0{U[*A`H؋G2S`gf;g4u%} 1ldg9A6Ec9Gt_o2AU 1jMYz*˥-Ȁ*E`iC[mͧWup i%Ԟ(Y(ʌ}r_fQrK4y"ޜΊT/7 .ڗ5cVifXᇹOaW0.GL(@bI5mW$G^]E_Ɓ 2|@m$l O()x-VĆ-L'.RxOُnk[!KsSաZdhL 4VSW~f%:]:ʵb#"9ۓn졃cT>ܓ)A]Ku[[@*(GSN$Qd-Ae=`#=yDbu+۶} TiĊ:1d`Kىj{%tuKĈ PW\Z[p1 暱f1ʦȏ,`ɡb9AF3 ҇F` +qMP&YCōvE(^'A.i9_ Xxk\Ҿnаˬ nUIwF %% !ϝ[fpR9EY6k\'J+srμV{D}]ꜝ6bXC1ʓӶl k19oTr2ߢWJ@V4.t:%4ԧvHy9MCZ}(S4#E)y%=s.lREF[oW;zLF:)CFѰ1Tib˽8bM iqpH/Xyk,fVŵꝫf*#~vtl#uk ì]S`eY%;lEy'Nk/]mG要UMw:wr4||L^r(>tl܅ᆳ `j3_zgD`>sǐ@#ж#>N?$h֣y&4 H3ri뮪>,@Y\qOH 'eDAu8+:Q?FUcg˶i?1mAbQl5A7{zjk|\kUȐ!6,+#&-w;DCIokiOL tOY<diK-OhH@ &Xʛ}b?db).G-('-AJ8o^errE w'|vZYP!_"b/+j\c,mA=Iq"]dY3eeߝro)TyfGmH!)geMJf|lo II2!^N:”.MHHu-hHY0J3-'x}hW*t10TkJCž#f>YF{zMru!yu"qgE5`mشu *fX,DkavLlv+[P' zc՜Rb2]})rj42 3_ gwO\zܪ!6ɟ{qK=[HsC[S͞wWgQ} )]),x)h[~}x9tfVCڣDG֐{`6zEӧй-OT}S%姷4X5W~LN/>br,Q Yi1 Me0{zn ^E\-a/9$}֢E($2af y1y:~qRɡRUS^R3n GJTjSRf|uW$_XU2p>j\KO5-#7!slXEZR1mYd}1ht ߟ(51_O R)$h%y:G+m'7޼%̪* "A^gҭݗxC!+eX_q0%}MH7OVjUB.<-VG7;6՜YQCrO|*8ou!#)[ҢM;:~q[cW:ԅV_U"x}P2S2Glr뽖t*^5+BJ&v_ I$cW dvg2(ѽF~(*Ԝ6O?BHv!ʏkOP2!SS#{gҍ4>Wi|JpN~{J0v",G$3s :=e#|Gs;dpe, QJcuu|Kmc7:BjwCQRJ[zO-)߱>+:쯅!d|G e˕Jn/{Op+˔(3Pgq*viFcɒރ/㻵WFڲG^,h=TQ1td*q%{?4T~kz7n(g348a"j5HP!뾟^wFќ}AU'.(*W1 |^l- C&ķ~*vq3xM >h^&rsbڤ /oj*w6鴖5'BC)lՓ_*[(NRAF8Ϸ"093ɾ!E&Tݝ(ڔӯ%ʝW&!ȟ{N] yf+~dXifevu6@iDM/DXȘjEBKF +T;qb}'L㻴 GJTv5u&PʹGٛ=#T;ç_4лQͧd?1/:|ۡ:-?LV#b^ofBpyC5r ߴ`[odEvRq0iDƑv`_!\vO)FQR1\a1G3u9G%(X4vxo AA RlRCԨwHeH+Tmia`pkl zd9 TƩ~ RW?Z{l aW@/8dy0 4/IۘUHZtmKюH,iy@J} %zh'=M(VF/}1fҼ3=$`,6aU5}䃿*[ #0-k_Ov<+ ߩ ͙7ƿ;|9Wb&FF OFV~ 'l$cJ2[z=`1ا]Ef(lR@\i~"A}{N ]>*Ca E<%kӿ2%Ɔ._ra /C(n4lMes% Q07cCHq 뒄ґk7*Ljr̾7`\BaE*+ĒS…oz[!j%8ș+qn; 㞡b̹N:aWR{ޖX zP }}d!!Qj9D8SsjpsI-[bj`'H"׶x\FxI ?vlPȐ,id"6-s4e}s|ɏ4D`0U~o%7B0w;)Ӡ\*?E 8D9Vk&*\2kJ$[3FnYM@o7{8H!?" dxy2n $Py:ٷyLvyMlҍZ]3aA.ŃRehdk %֯O |֑vs@wx=ܘZ,V*V7hNVFР! 12EOct1joZ'pDƽrasbD7g`eC!Уˮa.3:R"ssBNFeCsVs -?A7gz eF'\O|Jҙфk<?kU(7g- =(_$$ԐmG5: 6ӉpR"8ågEYq cÁ$Ay1 ,wfѢ~@i ;8 EFez@fӅb@؀PijH_c+S'# ^LGn9-'pnݓڧv9EzgsP`IBwLu/z&Bՠ\GӦhॼ:bP _p7Y* B̀X b5?Zy -4._OoɓEg tYx?t$5}tS:Ǣ`Ęl*~D00~Gt ɻ6,{Uf`y&:+\Ujaօ0r=i ]!V[ǜ"(| [o?s<-Ze,s0fP2 po3L,pB&Aņ<-Dp g|>6>%*(%1Z8(j!zm0+bp(,)xf .] 'QJ9ؾqqwBU{#F#H`Q_PBTȁO<]/PE*> ]}pKEt AңPQm+('bT <]b2{AQO(а,u.8>Dr0S̕)$)\r+DghMF l0efS fe&qd@2jL0UYߘ{g![3ۯڷ ]IۊE@Y1}`ISܚd<ȾF`EZw dpL0}߾]&FnHhfRbV$2YLh\(ʹHݗC> }ͩ1Ŗ!"-  Юx7h]$ͰtG }8ɇ['%BIAmpHȬS;=$:Ih FR$llg(+!b|J {tG4d1"u8<%D8T|@vy.U,ߞ/,2}h/)7r*#X.ݍ9sIy UK@ Ǡ`'l{j$˨9N?bi3 Xáhp ~*p$M[Mځv*55S3yaU|6MDPfE@K*#pn M_F@\9` !$6 EXGN^TJS7yi!tyCDk5к]bѣr/~(.. VI,~׾ۼ;51kb~nږ]J{[4pmջqV#.ձ;Xj_׷T^|,z4`y4(WE`V'ц.3Iz 05z5BYOV8tObV AfŠ-C+&2f=y< ?yGfV`,ɳyE9׵5cb_:b9iz (r88Xx^2c8d LD, Bkv/ 0k+e&T/ }D%B~n/v2VQJS\iZeRm~lLYQ >ĎhVhj,|g;jz#K[j 5qc[j7JF?{K[bMUdzB8,g.X7إ)$\j9};lj},œ=M?>l' :w Sяƅ?/AKo0+QJ]}yu !q qEQ_,B 3u}A9K߈sH^'T3c_^HN 3|o|g#OnZK"I72u^!2+iݭ Omf֏7$h|@J o's}&sY}OV:zcȽ!zE0DTugF<@F3j[x9]X-w80vIG8IBvMo%BQy/׉3hT2|Oc0@C Qv,o;3FUv]KF$QL 2(!VQ%zx $Qն),ZHo9aϽ}cxeNg@▧,N=EQ27?֞)[q肥X賋3ja{媏W691$ 2(fYn6×PB}7(*QFQq{GR$^qzhd5X@P;{*OK9Pe^HbO_B :YB͸ kj] .M2 0_08y% T+.rau `1`S)\xH̕J}4p͏˞xQ6*n:8lױPV!P@-vKk[T\,piGSy\ruITY|t?TNZ j̺¨NоD{@i/jFDmC&+p&x#^̺*,e(-RuKe4h1ҳ;DIN>${l5!3AL !U| SRnJ":b j w) 曰ď_\}ʍF\!{\mG= n B@£kFKYX8zv C"$+s޲,{ q;c:],xpqE2 @uoê[ oVb,r_'!qLMrߧS|0׹T2:ZŎzF ~o@m9>V>Pɿ#2DVI[nrˬI)T| -rٸ(sP*7"7vw j9]3SfKŌ|LrUNSl3.hk.NGǟmRUfM8U{4|@vCg6^'i*E%.um"1 |Ij|?ӌyxc9ꪅRŜU5-ʯ0Mb̖Rwb^ꇋ~DPW|ͳO׈xH5G}&Ǹ; m:fK[щ v1Zs"ϐL{{?}O406wR´B߾2r>hY+T8( := K5Hxgk2ᘉ CORn&ZWȒڕ~0!bҘoM_ Y#eaB"N) _E". /t%RYM*ރRRfvM EMG@&e0dg-2{¶} U=Tuő+@mMxz`=?lM:^F.e2r܅,; @ϙY{`! gV$Zs}?B5[5!$W$47Z1x2I&jE(rAїӗAkO3bX_&+P9TiڴALWlj!^TD ~u10)g?/zdA5 pw :ry:-[e87us0f3Ŧ>DQ\{5MBO 0ƌy7OQ꣠jO65?0tK9[.ؘ5 5ZT/fIԏէ";AIo u .R8?# ȝP-K{ͦx"rʪ^hNAd?W*٫<.jah;چ7l)U фlD<գF2 Fu(igbv1ˎ5!ҽ8]\_r!]}[+PU,(/u >-{<&NQ!v@U8I7, O95ζ6sk}{A5E.ؒmNv'jtk6$9ТMoT7CI|azģ 9&i^vuv!kFp.*y@3ccDhzCNp"Iv "V{3}3klG 杌c ^'H31yT^BD h9C\un)+J:)+#xL[R ?xScs㾢HD~"k@،Nԋ xXb؋/c jG71uD|4PSOIcLX=COS*Fb=J]g7uHڤ˼wy+vqwgzWz 1CԢujUxQKw\Su۹/@5%%T/֜6"q}ItTg9SԐudQ/7yAj1w|;ro{i xB3fEK,q-)Ssѕr13_5o7)VGΗU~=чP?qCgTtZ|=Q齒nwС7b9eIgOq'I$l*!!(a%`Bm&ǠeA>(g=XlSZ[+C(\]p>\䓀‘#~jfOCyJ:#4z9o\#1^U{Gii34yJmPꤏ K @4, W #Iwj^U' tU+6@.D>$n`R7MyMjDIPo%;b"aDQU:0M\>7ќnt?b[/%V@w׆мϝV$;Kqiϴ%D2?kL[$HЀ  Yh17S#KQ$0ZSҹJae=5FN.Єobf`1|V!cB_݉` gN \.rx?}~; frc#kMA'U*'Z"0ڃs!sGRw2MUY6:aW֙xHיgB\aJ 9)!՛˗O;G O> 70XKK}bX2Qk?f#X(m$rX~[9~ <\~ZS輻 ZQbfbC]ϭr[= ND]1+܍͎qѲ$}qd'B~> G%Hd 1X2K'iSN Ვ̄"Y7DvhJ:nbeO-p}Ǚ곒";c̸k9,X斳jYL#O#O`+UQת(u uըl(=U dNRz,;+J=w }9-~4!oSd=C1O khNBf 'qe:8EP56&-Gbly'`5|*-q ڃ3Eak1ORM!vJs_?^T~nuU>rLoWSn|T 6>jDVI-Pػf90΄L}4΅cN ӴI (Gz΅1!JO# +S^ ɘ۔JG_QɖBUux}G/ZA(G_Xʼnd앎cqd假#dۇBcB>LzG/ރ*Fff,׵XBjuP!'LN~3Av9dJĘrozZƟQTcN+_{ xiow(2gP<ôvhȺY_T~Lb0t:[J@MbY4CZZO B$;;MHwy 5Լ[kGS[797&e'KQ}Hw rE(^7v,jLpo[h"g{Bgl>(c"] خE8q+R8`6ENX7=uC. DS}YhF*@n;b,iP!XҼNt,9/~o3P~Qyh7Z`Q9IEqmU٩RLF5 mWS5s?t#xX.yjrwbH\c0v,|17v[Շ,q}>ܙ$REX yT/d߻Sp{QΏy[ Q1 1H\ B=5}i ؤ}NT;=? 5lj5NFškq"_TЍ"$@7`}mkv'va4!@.e荩TC#4F*[j3)N!O~YԜ(~I: &~'&H7 1]vsNj}1F9MF+Y+H6֯CMgdqoYk\aepHY㠙i+cBj=/TP [B#"O&ΈƯQbp fJR2,}S`$zdYVկ|T<{;z헍f%ACVL}_=2FԱ"#2]t]Felހ7]Gۘ(Zn٩n H:6NZL=zRbs͖{A|6yM޼ 8=toF18AYVt0'bӂ! iDci[էhPڛ "u|+!s1e❋*3%צ/40Af-c~w֓G Sfc7%L/vXc<:ppDB[q` ]s>:7H195"8Ʃ_ְݨs3e٨i8ֳ6h仈zLj[Xy,Ml`MA)0x ]-V)*ȔSgvg&DQ7">Z(Hcv(vsWD~Y$^Aum  }= za3 /BHAf1T7BLP0 E 2VdB2xiwM5dW+h&="겱;*tE&wG `v3UyaV+Ixc8+Q$޶A]ڝ1;N1_q )b F:Zs_CүzF,]6'mAx2¯֦_F@I@7#:&BV1JΕA; 6Gqv:>.(K +|`-;s?@t#oOi2t` .yQa-81]FT?ZSմw~,=AdeP#Vɗtڐb@ ͬf ոC|ARrN/ǥ|${C1TaW@Lj@t ^vrkhLg4?B$-0J\oy3w܊\a-a>ZOsrW:3,.x |'K'ENG.i~ Fel;+ Km8 ==bgt[I`|dH䜚[|oI j 04,I4UN!I ڈ~+!pW%w U|M`kac^і+xp&ƥdOTp$}#LzYG:s%3|\u߱WС|)4mո?` rpZ1k7$Mp)9]YU6u  H&q{ B78uƢtl8,Fv) <tL>OXRdJږ<"FT5gIv}aXǹ?~'IukNyvC2Wylkme-Bқb+ɔz@7/:ǝɅ)B,^8M3QN'<7:|,@9ܭ2g`Z!üe'e eWΐb6y`5kŬ`G6[L_POX$p,oڶ$cJB12hxN pdAd"Y6gu(­{`N ]f反tNj&bL] R\'~7ӠQR)=lQ'O{L/s-B8Qȱ\h`U=ezzOf&;̬qSeP# [Pˮn)efm3s7K&/)HihjJLꌝðM;5[l.B].FUw*\/eXdW+FO:rP&yt\R{4萪px֣+o 'WNl$4^TI;ETV(s}5T˒?Ew5`jj*2(wbmYn l衣~|QXj5W:%ye2CP{JLx%P-gRݘ&Gq,…-,ɼYH*I|cAΤ:o?<;]jȜ4v:>YtGOO_|9Ґ-dNl<%^%C<!ׁ)jl5 uX.HmxLUa}z2Ya  b0]c#}G}/c!4`v%)Ġ^pO7v;O@QfO5Eg}|4p-֑KtZ S_bT?t _vi09IOm=V|%9ҹB_=ݩ4cwZN'VTIؘS) -uov,;ɥYk2^I`:~a1_,} "Ã<&e :YR0&A׻y|ʱ4+WBe`S&A7pl0j`g:Z2]q+&=\K5KM*5Mɚ y5']%@ՈI҄nEl ])("0rΓvgDUt=a0ibF]xlAO^mUo.&|迷0_nŃ1MMPfgw2qv~U:ZCvfL!:Ymv}_֚So 0 ꨎ{vǛq;^oP b\:ָ"wPMTI͓fK7Ѡ.lݢ:) .b7Fhv7f'' &=`ZWD[N* d~\ezsTCm~cܚ\<R{T={͇a/B339ϰaAC\/DIc/A^+ %w,P +=rbW L*qjj7T.\0?ܛm2J[m+2Ԡe&mSX䮞ŕ;ZItM `VIz[{W r6H_n{GvXj<&/nd#90w򭔁㼜?de(1lֽ9%VN? nj-g}ϝ.r( hzXCR"C\D$e y"'q ul,P~Uke,2HĂ@q$*n kެxg*+xlSBONsk:%o}Q o ~#1pw6=A3fޕ2N>:^AG,!&)*F @zM\)!%}Q" *̬%܁}Hg*hdngSJޯzGPKuV6.olJb j,!FݗM(\M |^ ُcףe=)S҃ppbX ŤTz: %G4`(-^,sF$8҈tuJP9޽)3|jbjp䍶8p {>%%Yu9{!rQ>D \F=ok^e^gZutΟVCO pk*fs΍\loҚR F+UR`*c*:Iu^;b:\:~)@Q*eulkqCO8hI3"nk,&AOUIDDXCصLhuRI#F4&v"XJ}77#ʇ]ﭱ*Ls25Fe{ [aBQڻy 4+oI ];OƝ=ٹn#ơP/?yMq8V6yqkJ%Dx7-AV: ,Hn67mI{kؘb|g- #R@=R!Zo5{jb6M6QL7g;"HvQ|mNV(.|WRN._ئIwy8|BKK^vgL~svw^Z_(*/+4q?#3 F4z+y=XH{V`R63eUO7QƳjx:mopj/0Lckq6uFe_5v_Xi26֟^ ͊1>Xz\TcZr< O?WՖ wVO/]9dBfN,X7<tŤf>#t95OF 4K!H`$σH#X ͘sV;Y-Ge:<4ߟx y`=+g:_@KpAF-={m8Ye_>=9"[>3D77*hQ6$'jp~k N')(><ƹ+\ {Ch\^.WFO:7I%8FƂOe]UǣiJ ^cI8 |A:4@ȦiH@*jT9յ }u7+su{] ~ \zP8S,@-5C(f.7Zis/jroS2K. /׃Ėweʇ5DsD"ǂҴ6-kJ5|)rX}DuВeR/8YUmT <%'9_)D^Vp-:aOlF0\^qRl޸M؃cU'$ f4Bw UC,=P-ۿ-c(j e?ƸQkʍ,EԊK /4xYYd*:z$P o49_L3.{^îRaC y H<8A.a+$W=pTU7&wvĪ='8EbO֕m\l=eGzv\ {,컪 &4]ZEanP[UF/^aƒ _#BkHYK}&{jN(ۛyG>et  7,/IB!*Unh3pD͑+IoqJdI 1buiFQFު/-GΛ=Ov =U><+tW :%ؖ f2#K>*yYfQxsdErChxAX(-X/(c'jF-Ё`[)jV̺ wRT$7oehe]YWG3x۪cV%FQM}_ uMZ %i!`)Aء2 jBk\^"CVl]h]:e!%Lj7qVyj]~s]qZdJ߽G #YHWd S;|̅E!f!rHRp{p"߲pJ#џvpo+r9Tt*  RO.Xכgfe&'CUX.}X\䲿"ᣗ$@:(켬/Bzcs1]'T{EFa ~$}U{P _8ydw+b3׵'ڬ_Y7煩\`?AXJ>j.Ne:iM?+Q6Zʾ-SW~tRZ56Y +Ul*AJʬ; vذ%\#6qȺdQyy,MOD tVP+³p<,EhvLѺ]9{Y7/e8af{~ }4k?b*x䓗)3H9q96hE>B7X}I4jE'tZWk6yL1 ! jDO戔liС=V 10EO(NDebx5hKubzIN4Ӊ/G[ Hwr`tag*bq 4x]IE;'찛v2)IGk8 3Awk@=0Am !]$}gRns1րC[\4 q>cbfP{xmJA@%nxWVv&_`4EE pG6 NgpUS> ~ܐeSm9K1w.#_D M*.]ࣥ_DZPny)'lيEzeaLOCVf?#Bwvt%2q[~J2^SE2ke~b$OJZB1p,]F:_Fk KN&[ػfBT?"XyAݕ57q^4VazC+Rx*D]hoiΕ J`O*1ژ@z2j=$6/0"׹adTFȊ-͎MHT80f ⺂^"Ļx~؍ILM:z#m0 iXvB*UZhr|䌎δFH}ُ\١աXQK^~Ά+!,5$կW慤APXTFz_t:+2O95]rw `KZmxz=?ʊ|/ʼ힨h998H޷ki})D5Mg]ZAx38؈oYq(;>HM mJNf؈r+X{VATG=Q3b\wdF;Bzߟۗf(=9^܅PX,.a'hWGX]_^2K}:m<p^(J'He8MɆ-=eXrTA@ٵh 1vy5{ i9eiO>X y:Pk$9?_y7Z1o`-x= 46Ӥ2/Zf]֓@d߇pӝv_%}y#fH笝fw_{}e7T>8ve&74)7u\p%$,lSA4zXf)Xx̊Nl䝉0ImYl.D#Ln0zh;:ULX,xsp BUz y^gMk)$wRQ* u\c:ym~U+,ʉp<*WHUأ [APD2wJPM6󡀾1KzȘ\q}H`>Іv3/'c>_;{.3 1\l% z>1]~V͈8* -d7T3(䃥 uH}Gvק5,/郎Y;ޓYcP!22AZiܿß^ҘZ,JgYO7lNe9>/2~k <|씮eAM[?\ "^Djo؞-١ } F?zCrxp6j %( `7Iz٦+b"T?ލXYDlgQb+t++PÕK Qen!]fvbtW>SZU(_LLX@vI Nw~^ț0(`i6ai$ ʋ9!myMwb U⸜H@э]Oq9䅩/ JΌyO0s⾰[?೹픯pnELA"1wcFCT{*gǠk!MѪ^ @C'{D œFjVjFy>P`؈5_iCT. )xFw)O.< >T/8t!X˕Y~-j2w9u<;5:LCEۣR"oG@s3@N]kpmJLKio5wsRD Bl>xNcT}6`&(EQrM#KH#UFOd~e[`R(7q$%Z \!Ck҆ql[!Sۣ.q Ή֎Ljl!hdȑ#jX؋ͦgNqj:-W}HFE-84%Ra# ?N,.DhԎ:^+d=g9CyjryO [)GWFr 7 BJӆȣ;v͓I7t%tAIϙ@&^Z q7 $eRO)CՁ2jBȩk_'*/\oMEeibN.$ ʘV3)},p*2qȤ_뭚HvGl]k@?:9v͔Vpj#Q$Y-Aa0]v|of{C_qQQްF7GNe5;iB6O&Q*Qt'se|#\<Ω +Ůr- */ڶ/z]ǔFt]0lհh3PΑl6jת X'E= }?a2&]GeT"o\T}!}鐰- M+Ѳ2ѿ*-ę7G8+OxiQ c*{7铢al߁Ac߻Ao[er=7iվ 0#0GmYn4^03>lB #+Cvc8_8!r)BF;R,oo#Ź1J0*DBN뜅rc87$,A\™Qy_ ׂf*\~9qZT*ۘ0Y5pTI  r:5VI's#9 ] Tk@QA=xn j265T9w~NDն= az- :m@GI?dO̜``T8@}Wo1pqS.rE$DDQSx%jcc ,$~2I5Pxr bPsiV'Hs|-*'2?Lc;MqSt.fl+^Ƒxe ?A>Gn=r"Z/U(DQ%;}IԐᤨ ݶ=3J? լA {~|XPablx@,aN`B'Ir_'gr #yrz&ط brMa3Nۇϯe&!Z%^F2gVwSчZM8w>t$ wc א|~&b{CLQ"Wr-7.O)PHL |" [Te){ػb'.,D5Qݳes|MOo iO}xٝ(vH)=/OV^D4 j,Yyx,i9ŽПXj\vGwݹZsoDv5E6tk $.=ccE9G`qFP+W&ȫCB<Ľ2Ё 1씓࿄k3Z>Ͻͣh_.|Fchp,Il9Gui})?_8U]㩛8$^Ӊ{ H^ ZZAq-a ~,h"_J1IΜie:=0%whbkR(L28&V!.29-L$S^E.Oi;k@.!»Ɵ~#yCjCߨs=]p£?lGv$[ nzC sK~Zf)`Q)-@h:4T[7倒2+IO./2Dj/\tMObbo:yoj)ͮY9]RKM+ejElJ򆐼kT",qƔ"P%),SML@#Vr39 6iӆ3ce3TEśbM>v~Ҵ'6ס`ł+<. ዥՉQβ%h jCp/X odɾcƵJDx( 5`܀WWqM~ba!)/be̋mؙ)VZ7 ,2{T[ ;{m[7,?s b*yFu0[/2Y*{Hyn~BdXwFȽHr SժB(iR)]p1րӡ#hMoݲD֞=r W:S ZMqOH?M]Q6HajS3y<;~z;W=Vߺ`ztv髢H5 ߩDiK=vAF 1Hxۧ!bo8m " 1obE2:-/ܓ]Sh} _KM,6x,}"ޱˏhy~*fyH̱DŽpc0"C*INe;jRՕ3uY^/3!s4l<=MGBSڌ˜3eyUpN-Я@Y,TkܠP7Źy 18>g#}ST0bBWIuTaJT`tr` {&^ˡI{*}HrW(p?ʭTBʛ9P\tEdl2x*s4O R\ ! %LE˩SCIyZ\_uS~qa\ؒ6t04-R%qw[$AtYl@zD ख़EL२p`%/UB]@kfU @-μ#rE_!M01:KnB5=#Ͽ~pAi1 6k|4OyU}ރVY?GVrو .T`A+*c>ˎzЍ"1M;Hh休a_RuB-&1F|T05򚅬9mp' B`/Yyt_K+XW!"oWoUUIR- wUi<+uY맑9 F&j:YhwW9~=; ewp|pn䎣 rl7  {ˇ%`z3Yh;M /gc>o+< V+D_z˱Go94A뙖O Q]rUQu}Y%X=$!,z'_t^IHhz욷 4MW^8^2)n~ڠqʆǽYVH!ly`z͝f$Qsm {õ"e"w560F%rBW9"Ϊp7N* ""lGOKwRY1ު&J4* p ? hvbؘRszҰr)rV|s!s;?,CxXt2/hs#.GThLk75ւ$f$DML&bκkby߭,Oܦ՜N0Gd? +030W#ҥtrxU"YT- F<{gF'c95 01>'mB^㖮gX(/aMںf ۦ{dVܥu[\1%_KciXcbG7{W>\V䠌ssh#Xggc( RW _A^ c)2WvZdxb 㼪*U,%)0'pn6 li 64k ̀!{b4;d彮-@nV9hпO1z !jvcEP h70ӓ~7?}=}Nڠ;foF2ȂflNi$sM֦_aO %Y߳z7j5x]PFڿј<8U;LܩrçS~7N1,Z\Dv_TftU?JK8]2a{M{w3u5/ .H!@ ɗIU)PδyU;dufl7$Q2҇M ''qpX% h\$ OU_6tL8lr"ul>Ib`8q3bhLeVzPJ.By@K_6*BV-`k۠"UbFg-A-r7g5} 1#p]<d>cWMc=Y}.A0̩/g}#mlX:Ԙn.Dvk< ߛ*qP"ٴ9V~D5HYX Gpi( lH=MZ:9pҟjPUH<Y[2=y={l0yq]Ĥ3o |^̤ m K!` BZf+H>W tH&3'(&SQ0"lY`a]˖ J?eTl*ɰ_iQ3ƴ겡BVBQwNJnS<.qIHOCҮ-bISX`?1@* jذUeE^"c퀰lN>Gw꺶m."绡ީ9IL{q\!(bUE4=# dpᩚ4\\cw]g ФHMM||vv8"1 ;eQm"iaQ'/f zل>ό[Tڴ)??qI/5 mW !eV RJW `چ*,g &?^Џjެ _u] G [t'g&fnwR./ځ_HXA'uY|{֢QO5lb4k[߯^tY$Uyq~X!VLm??|F;L!ޣ8+gw"pKDj$dOX3N\zo9RiMHRw\1k&c<h& <֩;¢B 1[\T ICPd{[֡G907I,׌0u[)?iJlվv.}H8D41 1_ZBywZ]SbSKelXSӾ*%3TNҗ[fGP󹾹!?SxGE bw# 'L\ ,w?Di|SIW.g,V!oЎX_܋^W$D(\vEm4[w(j(+CM.2 .+91Z&fe$~{h(5 7&4,D3W8C.h!k_\SJ7B2*2.NYY8ktu'}V4šV c.!ahjxobq1ml|&E&H)[^8ѣ_Y-Vx2oMȉGDw~;%%VFEZUFb^3`&gKH*4WCQ{[ꑂ*AbH=&+2aI(6@? _V ~[6"Ӌ|BWn#zA+s3/и;D~72gie%CC^o-8NxLg,-eyQŪ`P9 L%\/E ekrW] '<%'>MHM*39n"cCtSlZQ% l!mDF?hc8 ȦQ&LdT@ietq73w< w<->L3Y`>Px^صXU`~jJ4~)e4(0L}Cq+zSGI%]cm꽇im<|rF%zo_FU"vg>>TW#R׭8y tݗg\ _UI]> νy?ӟ\ִSI?h` L(H~7yw`͊?DqFl`HтՅ/dd'r4n'b4t$kuk@=ه^+|Sli, R(1u*zPsݙMp 2@-6MOa>MW/9"vO"4{u_ƍnd %zkt3`fOVWԃrj}\q|7tkr}o&S|ߋ3iٻ6k,\(fyRCA0Rk:ε-?H 4ThQ5 ~,Mi1y6$,U o׽d5yWGTUm$((QݐTfed_EGt`-D;ŏ/U/P Dc!WּQzϑsm([4a#15'[VcYԤ~?O6ՕG6f TDӖz2Ea^ΠҖoכ;(ݤBRTyB\!8q1"{4XҖJ" r?dLL9,%VU ;?~5M>Tx_eO*U@N3`Yj/ YQBB5ɲU1'!\U a6dυPE=;u"x^'mn;L>RN_bPz….wnޅrߩ ;'u+ "5@C%@&\W)=^Swɍ.T '7(?;?Ce.b}ceăk\nCŹ˜fTICydn>k}=5BfH0' LS>ydC \@O ޢZLf EƁU-|NI,;b5Ak_:T09;VUL~dGq\y+TO2?/;O+S1>paŁ|'hAY?u!6GUJ]G1AF΁\"DC^Dl`mD.h?r+LOFkV ʁn(L C,U92̕ö!@ڦ_L Ҕg+RfV /ly)叡2*2\K1mଣ㢰sɹssNpY gYV*&tye1}ɣO|QS~m^]{Nр{R ‹snfPi{OI+_ 2C[Լ(q}ݮ?o ZO!r<-∬s.pqwS Ibr`E] 1_ 8{h8!y6>ʼ$>'l6e R$xQy'uPGId[^V?E^3(5} @Oȥ$pk~[g_72Ke蠈c+ç K{`11j jaixYr un"Ԙ." Ub?FpypAs Ҫfdsad> 0/u`3afHmH2J ~SB-\%%Q{o=$^nbg~2DQ`- uꘇ VKjLI6h۰=g$8&y)>\.ԧK;:JQZvcyyt`f!m/ņ /:|PO6ƽPc(x5zsW"WW]UD!ڊb~F-"i[ p1n|Їk`Lai:a= ]&!ew_T&?g0닥 ;H|\Ag zP"wj?88^-K Wv&EkoٚPq1m!xM;XM]G.TU پ}*2$e۷n>a~ܑʠ3z>ڭkF` { )_)G& M`O &{;Y0›Nθ͆M9{ cE_m5Fl.-/4dļA L'&QۈCSy't;AуOKwԦteJ1Ct>Lؑ)b1Sa3]{PIbRiBS640ϫܮ~Wv}r!FC{rU)p9MEEBh3Uο٤Ğh}A0T]U?@g%dR!ulBCWXz)boqi FPcSYJ_*y :G3b뚭[ÏntqvK}Zq/='Њ({ZU:4LpJ'‘W9!}Ibi qtRr`'[<'_j:":04\j;)( o: T E-~'> nJPX&:[QQ@>H}MH= r9gz#s;ne 폖,խV~zrљ3.;(ۑ#GqgRğ((H9=^,a-,T2YqL&:n^:#^Zs-lѼ/qq0R'65-TZ_^a(WAQ(Z8tQ^=,IwėƖ\U"GfVf㧕>1b̒pҨUAkKb2̳M,?%ߤ ITV,yLεtWrb8?Prq|7nje2PrnN"$;'1k g7_ϭ$XW=. udYrژCWmh<]o;R!`K}[EH}P(_7O f5|`v/eMGp:$(LKX]2cWFFd6][_C?]!$7ʸcw\1~Vs.s{qa4gȫHWaNPgijz.pwt2ä*]?ACy {n?]<_bR@W3jdOa3g|!؊`m%\7$im*cg(kL=9dvl9.Ef\PҶbmBf"-*xez q3%^RdD={^4g_GΎqr2yp(R3?5j'-PJOPmee6z2J'f0lhDUbe T G V v7law7tV3 {yω53j#K]m:D7ncґL6owعą9!/2^&*/<+ȜwJK= Ua*g)'Wkrxej`|Sʛ@8~{LզM&w`4vقmJ]SHJ}<8yY1j}5}XG^kZSoY`1[t&{`i c=]~&  8xݘP *T #i>FH~5n,,ȝJm&wkG|w#ɟ0pkeZo`m}ծc+7frQ/쮧La:\eK=2-}h8tR+&LvĢ0Zrb-w^w( R3\Rz℥ `S,Jz_,^:sb^R>guW2ǯFvF6X B'z{Iψh OHꟋ;V50l5|Æ,kJ`".tMl*-8\G/3ԁ\Sk[hI_B) Qc΍ƮW$ UA4=y=p,KOćAȺl$0r߱\j`bIѴ6GBMfJ-3&_O3I lKXt:'Q͹d YQNgI!r_\Q jYwB4Ǩ"e]Vc[0'u!Z9/3[yNɣFI;x!d>Sȕ;93C a)$[TnJ{HOP̄(9V'EtUO2 ,/BsHb+]x࣐C0WiNy߾1#"?;H羿Zx;:> u0+3%& VnΤi#P~H~'hpmwpͼ)iҟu/H%2Q0Up<%bvT& S©dm8"tU+WaӶS' ՘d|oݬ9 caq'5+ꭃSd>O_[T-/ţjhhO(fZ0y^ ?EbOFeJojMhm%eډ %oЏ^(FV_Uŏy2QJCI|۸m#OJU'{اVFwew5Q\0EY u9 >6Js<|c b(JD2[OKFw RۍkLV\q%ȿÏ9T@<%G7IpU8A mu/䒘щk,#OJUTґVʎPY3I;u.G3(Hu$q=}^e O5@j2d9n׫{.F2z(P%ĝ矪\(s?R ccA ^swg!0θ zOAڛV^N3?N-Y#g#~:kRkި:W%UOZaع$Bʩ"M_t> x^ ggyS;6)M1ڃxc䕈O%2 FHh]3~a@*1g&,Id"Q>=j_0A˜q1Z/!ճR^a;ji)eun`QvǬ:^2ChP3J=f{HxjDΧ FVN9.%o޷5| > 7enr ;iuS SggT"%lr ۏ/۪yys5wdQy'2ȿ;RB;&)reUI/IvAe cL>{%}NaKV5ԄNa߸*5oc?v*ŻFy\Fy)t!()-׸=0YRDݐ8JYd+Gs.g_Fh¹#}W ,ڰ(j)igD"gZ'Wk'r 9HRJёy20M[_8 ox$i7 8 O*խߑ = [c9Vx2zOFT^d+8h=(E]+OI$RE+NVZ#9tْ+Go8>ı D[nD{>ѡ*k bV[~(>PuZuYT2n,yb<0;d7މۂIqM^P%)V'`Va-7%-0?I D+ %!ٞp8AXl{Y\6}{r q;r0: }0"n$rvUScNG!>S]<^z^lxzaNM s)8aor(%-X׸PP `J(APPCg=P,KWw vx5hNtX/ZgVwm8(6Unk3E`t4Ae $tB ;vXN$ZT.Rep#:jǥbp5DyeVk}=4($ I,&P aqnϏ^V<'V#18FGq $>\_õJ{=#AA1|x}'7iԳ`JR20cgԊpm& bEڪd֍i JFbEXں۽}baoxQf7|>V=Pd{mckƮStO7- ד|X^t;gESǸw~w4֨0{O$=G̠Qe)I!l_#C!_%rܼFԁ}Ό9 vzPc2HCхSԟXySGh 6W*p*8 bFU(7'r| yokNl+dO>I'+@ RLUvUBR|r AXLZqFrN!V9J f1m;HsL!ViU(Qęꆲ%kp9[(ԀTcOj0!~ivXj,j,6̓c6Iopeϑ+aqFj9yic]/iPsVo\\6dIl}L?'!nMXr 'X .\8oM8gnͺYԇBIjԞ<ܿ<+u7{lI yWiP;]  ټtY|6Ϛ ߚ g]xfAdn y ra֝G@vøSb^ sm"aMmIߞ[oi#m`G%ݥ\EڶD9n#>O=rr^حȢ38!f rv4!.qБT W1:AS!5jH"U sFse4M\)e^޷wO\0 ݀{},@u#Yo0aVij)%g`늃Xy؆s# ;:Hn[+oMU(nbw3t!wX7m!˚UfU<ʫD]*8Ɔ .JЧd4ⱞR;|ӜxI%ֺsXYU+@5K: MH&ByAZh]C)"z>៘nJxSS}1"!a)qJ'ĹzB71!ԋѯ$bb$kք%skF(U)l_[;]"î R-@j[z_hYj|}崾h G +Bֈkv01/ -3uI28mגC 8dz2fKkV9̜l#VݏnS5U 6~,y`Zӽ~0z҈^}'ËY{-stZ6vOi7޵1-]hs>@Ӎ `ԞُvF-;vw5Y*ʱ|l_2T}OmM{npaM&by< E/8yi4dt; ;|y&B LRC7lw 23CЩ]=}|=YG$ {`P9Eu\RJelR*¸`4Lαv1'ub ;o11ʑ]4ՙT! 6WbhWv;^g94!&$iGEn['NB8WZ,1x4P0ɤ S {oNE>-2RJC6ݑ ~$~zYsx ZmWFגa*_Ө铷k ? p =6 |arUL8]Yt 9f!ZsaVA * tcɁ(W#=dyk?ϻ_+ kݎV̋=u3ins&f}/#_PtKV |9Qр[8 jk|vBQt!ܕqozCgzysy6׊Ў1;faYJPgiGt;Ynz/w& :׿Ι JLxky@ذ+NgJ‹?˛G(> 6ެ h9) t8$Y%˂D]s+/aXGA=\~G 1@( .pVűo}\I9qIyT{ܴ*h蚭lKz u1tַW>sM`V9̅E2qvȾF4q{uSvBίΣsKC4?x ;EN+kH`%&/ ^Iq+6 AU`6Jb`%]M 0deo<Ż ]8|AHa|@Wd4ϽmdTd}&ðkRCS..1|΀ +Ͱ8%CTJ cj؃g>"Z5|,lXzs9;/6_#3*/EEuk,˕+FfrvN@fA{M?e1%E =G8wa8) <2[!aC4D~:>L$?j(Ⱥeeox̸ HlՖ?%{83.r膌qsBUqb2gw$htxw؅_Z2s78(C @u{j7cr r; ;d܉tm`܌#HFЦ~q8KӠ0kE2CXkV*[г_<[_LV[=쾦/誁oFl?Q'[++>Vl*Xt),UPobX)#B)Ŭݙ҈٫Bٚ> |*R-dn L[lRUbR]|b`${ LN5'巻+"ǟd>ll_ mH "1/`G|'yr CW*d7%uӥd> !̼x,:YڣF#@: 왅+ib6=zsT.η^yk"ց)ͦUɃ>'II=o6BCl9˱A#Ej93Mi`LXBRgfEtK!Cq @&G86_^-O9e7 ]uF3Qf0Lɹ@vٴTpǡ_V/4ghC]l`FԸðw1a ]&lnRcY=j ^XޛHy̟֗; ^bpU%X8 4itь'vw`U\}Hl(``Oh20$ cqtsf@/'zk A`4Qs=W kH%f~p1.2z}1WIlyCnN#-IRU>YF ;ᔫ6+/j&+ *{H? 3{;Y> 7'_EucLʸn97q$m.#]!J9:V@ 77-*D8}:VLvwhҬU?"Z]._d `Y&[ + -\06g6yXj>*l\DJOɁ϶uZىig]v/֕#"fg(k2O/:R1IsP Bs$t~`ȭhGYpݕ,WÊغּ%U)8mcN6P⃚"xܮ_ZT$,ɽ Ex9vY>` <:8#GX랍?A]5ڠ`@揫Ro'o)CH,rUKI6yB2|1 w#um0{א)$3sWܡcL=D/hΪzrVidIm\<]<@{\"gJGxτ"eA< Uc`:0fBeЯ96 hB6$11,Č(%a.S,* CM? .inI vX#6Nߡ+o n>Y&3xi;H=& Uh _= z¿~%v:;u& "ba ۯ#pZ`YX]0aŃe;ˆtqff 1/~IwI}F݂"h';8v 0Fʘ枌=W05K8iWm٬^㑯$UqgYI^PpSB͈CYc Eճ^8lMKC|ReNimAA?xmesv O6偃R:Vf@H6g D2r붋j= #;nazGMסEj!ɮ^T8v`Q3~m.a@SF\LM%:*$_u>净6>aP~ U̪_+{lԨ>*\Tڋ}2j•ޤIelwkO?ى\ȗ2GDI&>(|jT<1uϞe{WƒG =0g#.+2L[ulτiA*kŁNZa_H((^̡bur,{ {;n+3$,fȰ)ug -5uU @=\46lnau1U#B׽jY("q]gfbN9R* OpՎ3{%ARX͒?{,ѡ-ˣOIrH1-\oVMKA|VcMVAr/bh} +.>HMR;cZj 2nnRplvv kx6ɮ,¢ AԮ6sqN[> QȄ OKqdo}o$9\CUW!O=..Mt3#=ߊgS\U #5 m &[3NCC=O8($MGʇ>߼+dt6@.Ɓ;hnf9(j lSz:0x=xD[{ n^RfQUjl;P uI#!"/!*t#0\ aͬbL,2i4K{w)vS)p fT.E* 0줯,>hNScP(s:> Rw"GZW]7S6ֳ^>d\ $St[/u8j)eAHs jMMR,Y\$d(pIC; rLmrt.toNh$Y6ՍHx L:]["y~&AfΗ`.RlD96C-Dfa1 .L8ز7d|pd,˰VaCN1]W6%][i6%A4GmJ/JtROUPLR[:vؐ%E7FP^/ORo ڱT^j`f=}.j~51V)] gD<| h'B5z) ёHt?B'rC!Nzg B-tXAcW8,(lWMؚx^ӂ~zӟP*Z??+jt*Ay,]VmNCy$%2h}49x\ @ޠZ7\r!fv.NiZZ # ;OQ~EBfOGEuI }r&sbLP٢aLԫ2߭X.]Ќ4h(¡k y՛kxttn۹G.9eYY/+ n3J.dg@ sܕ"v9۬E}LªDPQwXP( E]}3I5G#nI bK?aAv'Y既BY]kS l+=\Ȫ=rU5|>ĬtvI>CҲF VasoN&kxiL,_^^TYP՟r W5 4AAU+} ;[`NqBD|ZP,.'m5QU7L*Fr{C%".6;7nbM@u+d%{RT^һҠ@ }qD&xwj8DVBnhhlf,fH-~ '#!_^$=z^K=]`ALKRiƄ>G~}"+|~8rtQf+P&{ )0 ݸ6GGa4v6jƦSFIYh3+0x{TrAi3m\8Dڶ+yq!sdC 8yX;C~G9>r[^8'%D"Oֵ9k ${9X]Y? 8-XZo:6Gޅ^[_L"͘s> @7ZX E/A5n{ۋUdx:@}?ݡ_|om/?~`ژ=鱎JyfCuM=jƜ kѯjf"f/NMM_lAL*xr˞TH(*)z @(gм2Xj=9y @P1DH%bQe(l:9KÉ0% QE\~5Y4:K{!F*<6 SӗuVCIs]}S~YBSp>N94]Ͷ;ZQpwGox@l УEs6H V.V%wi~[DJj ap^.p\_>fX ^Y{SJ"@+3B%eӈ}dD\izQ2,1 矧RjR&[1X IIKn2a[5qsЙ6-*$h`}&YVA(ǠFNE:ZR]KRUOB.aC$5Q6S_r~&f̏(I&ޏϱaC-+CPu)Idޚ&6\x̲0tk3%}(k90m)-QIսl+31 FV0U"pjtlYURa%5n dE#Bũ)e4_tR_%m6Et գ{ 1pVMx9cH 5|` #i& ܜӝGKQ6(}ob&L֢*`#U |q@pSj~{?IJNA1a'Lh<*=-VMY!m&f^PH34$DžXpP `&h: 1&$+e%pի;ϋp=f*FSO7%}L0{P}R=dzI%3@/ mӭNQ~amNqN˭dy\;/Ɖ@e4zّ6v"0̥~8Am&5ltGwv,dUKI7r:NL&lˀՊqOyGǐPhSH -Q OLOW*՟ޟ"OhPVMa oRΊCgtq<1v?P*E6$Ji)>#`; 4TY]+G}{el^@t5BR*ϢӼˏ#'͔l,YٕY,Ijk.R]ůL,/H`LqG%⅙Lt/yXGȤjD DD vx!_氥8ac^.7),"TEIstI)`Myr(\Ē\/%u?oH.![cq%XJ5D^T'NE,rtEn ү$,r65 ~H95z  &8o ̃b+:F7[b6Z8)^/(SƞbkJ$0ZK),RbΞf<a~3cPzpQ^]w{JULVCns,)퐬[X=p )t&["@P'w1l4~\qx!:щbsd2kȘaV~6y-#@xÀKhHXI&/ ;4jbǂr]TSW;aFe">FS4!ff>arg>fpW S4/Jko- C@9*0&]ת-e)(7ZKn+/(gI's.UxMk4r|TAz:sfIBɭ AV}V=pW;K] C7vjOVsDޒlEh} Xi7/e±1j=x$3X`:MMn t&d&8}`(F !m" </]$w;jhM\VAɾ^75w*@- #C$63ًlRAg'ܸBFƈgpB}3\IՔ;8m Vio^ᴌϊ0'es"g B%?%uOs蘇C"2DV3-0!DL.pN9.Fi|D<38a_Fq )Dz*Ap]+T `ZMy/.@Sxt?I@ AoVd KBf 蟎k v'pao"Q0ƵK2ׅ|{b)8>DZu\m $Ec*1Php=d LQ\8j/埧 ' ]N뎚;zWa6AMU'Bn&djQ#Yމ.uMe<}=^'C]3o6M7 *RR^ODP=XZ6ڻH{Y0/($L t5T d%o>,uS٤;9E%SEqcl BQR\D$Y7Oi v'1^f4*Пl }`0q>T1,mn/XnGsVqwsϖ?!$J.Q#8^Q:_ BD%DYSVqO0v||#D~Pr"|"\HI(s,((1>?C!V[c1/)G*I9%u.UmpJ Q+:I~̂'N<*1㻦Yԗ>_% c?%)M@ pk='99jN=5q@O\.Y{KJcSJ׺*[Iic'+I._p.<~Kފ~_oyƖ:'1q.Ǿ4@XKˤ'3pQgȁ\IJZƟ@UL@{k_Ens[p;o9a2[(*;b9!+85OíӚjhEԘ9~G}[QSӉ9m}vC(Ą/S?}T.Hي؈ހj:ƈ-oOܔK8 }q.?&}-/r/x?Eml ʼnHFs7qmDh_[+BaSZ={Qp/xa+c=tx0e$6H/IYSCS@`8ѱO5j4^=[F@Sx&2[Ɣ96oH vzHEOңOnZ3Ed?u71D<2ԀkgREv:@>f5j"#IYƓ=GLE:Z 0pM鲤ċ1Hx896y a֢F\G*:  a4qKCݡ{C YB m9E1 X549X߆oD$Ee[Q;vE2u}}pei$=IpemK ߅16l$_Y7=\$M#CCs(!)/}Uvpe9mV#h`f۫֨ː$-O$BOJƳX(JHF]p,Vʟ5(wmw'|Ɣ_taS=^!I7CU=sf`i_ٰlz~}J)MI ? rӿmcg0uZ5deM-oˢ[ʇ﴾4{Vl.uv/;ٌzs"/(nOqN)kkQVX1'*6=}A]w‚Kmơx1m!Sq]wɋaIXtKvP5Nבêgs>(f]a=loBR2AU*%/"kYaIc$A"HLNeB7.8%H^ŻL Sd':bZ TGVRhOR6T4Kt85 x J>5_G:FsN)QwFCm}]& ˬҭ6#_gbp;h`eizN(z;pcxHe- k-7L.ӡbP˪ jt0heqbh +8SE;8،,=VKi<\ƈ,S8% zHH64a3)%Ɛ{P#'Ć4P F,} ې%R̀{ϥ ~O%d$MؗP H;"&Vs|*c Yy&7i'Ƨ'OT!^:Э`avInI!_Qm]z9#EL$aN5 VQ+ ^`Q+ -0V;5: z7ER-}hp\{m=b.m\w߳DS1$g&Ϯ\ 9XS\},6lQ2.՞Π'i\=(8_΍*5" UkܾuNcL?#}o#l/V]^%nTZ#>@¯D,JR2dGpos0uv?>\k ~ h8}>^ݷߧ w!L9Vg-6BUbhP#(z*YRjW7 KF#~C87LDk7-F[6 j>)zMZB=R twVW0|F;CuCS&vn ڷ49g.п癌_𒊥%/Rz,ǒagw:uz)fcsJ iUX`LzBo[^"E⌛]A3LioyUytڣP:ub*;ϖBM\h20o2$q%/ElVaZOW# y5vu+ cޔV a0T*)? j}u7򧌤ItRW9wvJ;6pNW.Jx"H3:JWQi OE!/; קU+[bqǎ!#W+THb~1E*5.~0a@Vg4g@ mi-b+pZmUͺqTw:gV& E n5}Cܾˮ&bBY7sH^!T$%i&$Auꖿ)F"\uG x;Hݑk[Wۨ*Ļ)TKN偶U\MHz)N7GedM+ @}KZ{FIN@ڢeqp`xĶQ[k4" zLfm6 3Z+k ڀmה5"D5הY  `c"Jq—jJ8X ttĘq ]X?^4trjBr#ʀUB+~o~S`JAUQz_U,*;8ihPG*Psfr=:Ih Q*نv29WH(B{TQf9+ /vYP_ERram C[L/#B)rY}E17,[O[mJnN>;mJ? r2L^Jg(M\@Hn %P!ds`jjBԖ$:&.:̎7_RZHƸGP7 Ŕ  .IE"r3\^&cͷ^ATہ#Glq7u@kj)~Dzs^Q0(TQc3|%5F*ח^;OQjnF*r}@LlcQ GlPflT+|(@Q]eM-G-S;Kׇ{fi/Fx<('6 )_5:i))nƐ0Zꓴ^v56zQ9]KަثGM!#q)giq9JslK]`sSw!q룁*襔tIꊍ-E<)i (P?I0lfkTF}?6A.%j,R= A&ٕ&Oٿu%'[ǖyT69/4⩖~ʽzr'*ا1^6S [wx,Mژ c"HxJ7a0BzKaQTL6i0*M1++:Rc:ҡHfz$v˗2r^n峊lM;s/zՑ.ylvcAm&oʹrϢi)++obVPtta-\im O&XuEyee\Ȳ[c\L"?V'se=i~1838Of%n]cl^>)PeXg R )\ i5ͣiS͔2Ǩ\ =Mي_^J.dyBH]<&q|G]&.=hM#l8V@V]ȍCbm^HjRF::4QN\6OR#fƿ`٧YTFNI.VJCK[ԁn,M}yؗ1 f#ɾAOĀOZ,+i}V_*a&6ut)ذe]_pW uĘs31c+ ZxR+n SW ݩ|9\⩨/DDZ˿fi:/s;ބ,_zBP'1pSUiy"JA1 rre\DPb"9xՆ͞0v+ayB*YZ\h}2f$+CXQ'$5@>~WݾX u"Vֶ }7ȯxwoA8 0~9%a]ؽʍ?lsqY 㰒Ҏf`AU)>A2)iT·X=:D\y퉙=5C;qJ25aT; S_x+c,ǃ )VB$fa|`rFu%>D?d#Q7˰4UhN`N<0R)ܳΉת{O;*y\ii{E\Z׾v@˷[(ե2b˞r7~w,!烙Y|`^SU|?÷֭4#"?3E~TzK_Ð=~[Ü7t;8]r9b NsyҁvfqSt_lq*Z(})qJV&6 2ETs-Bg_A's)H2نTD}U?|3"hMm$0d 0ǁaOt~~E2L-t $NV!,+ϱ΄#svS)~H٩;mm(LPC[ b ' )m-lpN*ݯ2 v-i>nc1>lŜ'+{Cǀ(Pyp蟾h IF `Z cȴP=b2bi3\zR/<&#Oicv1c.ppE1ba)6ܺ>Q3;j9\bsieV •xV ~ y1@#|a&x\T6K%.)@JIC躜{8uSh,-˪ՄYAm5ӟ$/-\̖3/ #u# Ag!W9R˭ mO< }v!|~q|AɖJm!m^X)A@UwX956 찡XjM(@̨ / SHA}DpcKmռ\p60u {~P@beͣ;YrI8 R,xӐz gW<th4Px0.S o۬?-ⶮ"@)z5?zt.&x[tfp>5Pm'aTfw8p(ǸM39 Xd޹y T7J^ :P3'l7;QNQ9"y A)edhQSK.16)FI /J 6&ɆI-"8oléo9b0 `Xpɤ3I543 +Tg4MUIhƴK. Do>xS\bz362fp/x#o/dϫ+gAs}Qϵ\kNW~'_k2b.4|sh tC4"[IO91Z+k65(c;p'UemT9 RFz_CHX܃ AתruϹGV+TSݢ l෼SvNw}3pzv/R4rQg `;Bѥ  ~u)U?ŊĔ$So#aKc*PMh`_3(Q7ozOEAz JͶª՟jj)3~O㮊A~BြBPgWU-BڡA?\pO*ytHMkfSׁzH6oVhMR= gÆ-`}nl')T۝7O~JahN`Vj+:ɧ2/zl9?3t{|D_rě b]qoJ,Ë@wOqbm9G0ɵ Bg?1ic31\p~\N} 'F{ѫoC5LbՑca*: D>)z&7M;4aɧ MQpZ?O>o;* c$cѷ n({HBaSyښЂIvg2t; ͂+)qoփK;D 9:Ш\ĥM|zJu9D]* #4zY\Xđ8ʼl|"Jo/Zy'ObMgeaBO_eXU}̪KpQ;uW+BP奇vMXniP'V#:=R/9l!s> Sf{)-;$?Fqɬ&ϼK{`& 1}wW v>%7[ޡ]Vr8bK+t1GԣubP^6HX17hTעeo ;,+˲DT~noSM 4``HSFR,$8|ju$[ιUyl9A /^I(j?Q&G} o5c -n;%6רe"}}9 Bƃ ~i H0Z+2i(.a%=TbT+Ӗe8z;j@>dR Ϣչ`y{~%$.W?C|2L/ FJ0Š ?!=5@ݝMq?Rk_.퀢R!~b`q?_y G:/m\vod(\Y MK@8* k8s20 K9ɨS ׽8̬Q@6bN?|JO:v W[XŶx2Ghk6 wP7f_p`P+2n%g:]=JCrMp2ፀ1æ&W,$}dӌk[#87DKemz=\X^ey[a7i 0J\o.,$y{2+R1A+:?O&0Xͯ[vWK`TY~N6(\b_@) Ca܈6Czȝl ޴. _z*j<mD\Kf'0[}PTPnD, n} y'9tYcXd<ɀdJӇqbɤ:8|uubvb'{OA\̈́@;{Qk H@ؘMEa,ڄJx{GadWK{1ꌶ3vwb3ObNNV3KKqYnzN))bRB3 -VBg֪Wx#"3 Xp_R"?i |_0+="".Te5sz%j<}5RJ PRtt'"bf~6xAmt/Ho,P 'xKr{DN^#-r㠦Ac1sJd)r;ciE9 ?.\H4{ULCC@gQq@yQM &DRQǁmWZu3q̤35G--|[a~lݤ`Mɶ^#oc}N}3T}]W6"h, |DyD^W2p/ȁ5<қD$OZZiwy+cvkV4@_r !d\:$G{ze G9opsZ&{J@GI}LOO+d6Ϩ:BN2 xO+R dxn)ٛJ1}k)셺I z G8)m9hzWh,6&Xm݊`MQ{]o䕨VIB8:玹6PRJ}km (>|y˕'ch[YY^f%|Y5D~ cZqrܕ)dG#׃nk)H!3idSޠD匳%>iXDN^.j~8wP?ˡKG >0ڜKfP f;>CJ`#]%#]^WCqr9ش2JyF&ᇰccIxjs-72:kA0U[ы  PwOfDqHͬ;Fc]-18uI&q#gc0Pp ]V!]FGNً3V'&/MU8 u;9 øO\q)zq aМ(ew%m8Ƚ7bٍ.ã&/æU eIḱ1-S|f!- ЗOTFS_+%Ri Y'Ԓ8Z\'ᬓʯ‹LSS qd (hnc gfJ?5v'M[uWVB_\,kA9gfQEPJTL3MrgMֶ 5cT7l B //Bgxxd#޺9|ZuG;$ 1d* CV}9`!d?!!SkI q(D s/%EªJ$߷Mߕ!0ncBbiV㚥\}-aTR-C9gZMáv櫱CAq&^%j,+s91=ȎiuIx^sފ&'͜U+r YWQ Ip,.^/NW+=x2YbBQ8o̳" Ŏ50ɾ昉#mc  f .&Ӣײַd*l"A,WK qjx؁:y;8rُi&vR򹲮'd~OBRّ┽{9r s~'պWt Veۭn<٧T ^‡ۉV6f5q$?`bK^76̾:#tʹLNs'AjxJ\v@u \8#n}yyʺxp7U:m6FpJIʕVGIEbCfӞ>ӈ_ψ6DwwY8uUNSEsTkPRWQQe4Ǝ')t,Ru9w꘩ËgT3>ށ-̟тK x v@ehD@naF pSm r9WOMy3Q_ <-RM@.R(/*U=<|׾" X;4'( #gC(`@Z>z {X?uE>^`鰷S-W 00ì[{vIswU/q) \sS*=[dmUG{.C}p\BFAk4ecȄG!l, %/`m҅܀*MTMm.NHB#o҇R6#\c{u5DŝDb|ϪȤ?va(m.0>`jf1J+N"ϟlHXlͯ47Dկ@ʳH,$ m<oՈiSp; mnbwEOWR6ȍw"?T`5nFbu%9 PD3e5ߥp d.Z= /qsZ bQLneoM&lFȆn{fHUͲ([7-sYo?ݑ;a4褲-UEX#93Sd AZg1<|@]~ea+IدV88ǑjPj'{p7DnXQ)7 @U @ƶ|jVQ"C<&N %x Z688YdaնbXTRqɛ#]2? 3y xykUSW y }yxl 񳮿@rC`{ Dц| L;ϭmC?{!LssJQzv, >l kP꿂zda3)SP`OQ6:U U]@k#DA>iq ŸW-Rh S"r ? S+kD _XfT8e{f+)vMH$r T=(@h3(XDo0MZ\Y9\o6"|C =i7" }%ǁ꺐঎ EY_0f6/W2ԗ'hJ}8KJ5%ؿ$cozFӄEMYF7\5 li"R%t A$Y޻t$tr؛@v칾t&% zk&qE c]V$2~(ռRNs#i#vtk{V+ZA t$E9%b}\95h9ǼNfsrgnSa53.r+/ X\X(Tr DvLf kT%R~-W'ز_RNLbOw =d ,iG@>n !d2R="GN];\Ք=r3lSUvLt:^^\ދ96EAh|j-ڗ-ގԯ mI RӔ#*~vmʄV'sR(GSǗΠ;#o}\3Pcᥜ oM~eZBD aHakұ5ZIjjKBWkJON'[5gS-k^i7b)C;j5 h{rd\ 9-۰/F}^ TH5KS#LIHi(^3g%jo_X\Lmw  Dcd +<>?Z͙}WN1C{ '[>~F5?ʮe.MYsuG^5Yvxm1,cΛcoջ&|Tyt%PҨoݓ,eukYd/\GO[KfқuFLBV~2i6霻r6q@JkXH{[) !9U  MBp{b1HJu<MG",m #Ur՛$ДiDDKdGH_gyuWVpc"R޽p H;Hܧ VL<$ꂱxs eQI7cL%#*Sb Q|Ct0w;s[x) ~[|p5AYXHt e=rE,!Ic||kܪ; Cz5h56K9م@Z ?ў/Fqx]k (]+rlJYw~kKR`=_iZ;MG|n)d8y7qz֬)fd׹}c|+qߎ%HV R1 `ψ4ey) R{frxlɶkh5P7ܒDF: YZ