From c62b8461c7de63ed99f13ab918af9726fdc742d3 Mon Sep 17 00:00:00 2001
From: Sebastian Tobie <sebastian@sebastian-tobie.de>
Date: Sun, 4 Mar 2018 22:24:06 +0100
Subject: [PATCH] Puppet config erstellt und CA-Managment auf certtool
 umgestellt

---
 Dokumentation/sourcecode/bbwmodul/bbwca.crt   |   1 +
 .../sourcecode/bbwmodul/dovecot-ldap.conf     | 151 ++++++++
 Dokumentation/sourcecode/ca/ca.txt            |  20 ++
 Dokumentation/sourcecode/ca/certs/.gitignore  |   0
 Dokumentation/sourcecode/ca/config            |   3 +
 Dokumentation/sourcecode/ca/genca             |   4 +
 Dokumentation/sourcecode/ca/gencrt            |   9 +
 Dokumentation/sourcecode/ca/genpuppet         |   4 +
 Dokumentation/sourcecode/ca/normcert.txt      |  16 +
 Dokumentation/sourcecode/ca/puppet.txt        |  14 +
 Dokumentation/sourcecode/site.pp              | 134 +++++++
 Serverkonfiguration.odt                       | Bin 26090 -> 26475 bytes
 ca/myca.py                                    | 339 ------------------
 13 files changed, 356 insertions(+), 339 deletions(-)
 create mode 120000 Dokumentation/sourcecode/bbwmodul/bbwca.crt
 create mode 100644 Dokumentation/sourcecode/bbwmodul/dovecot-ldap.conf
 create mode 100644 Dokumentation/sourcecode/ca/ca.txt
 create mode 100644 Dokumentation/sourcecode/ca/certs/.gitignore
 create mode 100644 Dokumentation/sourcecode/ca/config
 create mode 100755 Dokumentation/sourcecode/ca/genca
 create mode 100755 Dokumentation/sourcecode/ca/gencrt
 create mode 100755 Dokumentation/sourcecode/ca/genpuppet
 create mode 100644 Dokumentation/sourcecode/ca/normcert.txt
 create mode 100644 Dokumentation/sourcecode/ca/puppet.txt
 create mode 100644 Dokumentation/sourcecode/site.pp
 delete mode 100755 ca/myca.py

diff --git a/Dokumentation/sourcecode/bbwmodul/bbwca.crt b/Dokumentation/sourcecode/bbwmodul/bbwca.crt
new file mode 120000
index 0000000..0929ee8
--- /dev/null
+++ b/Dokumentation/sourcecode/bbwmodul/bbwca.crt
@@ -0,0 +1 @@
+../ca/ca.pem
\ No newline at end of file
diff --git a/Dokumentation/sourcecode/bbwmodul/dovecot-ldap.conf b/Dokumentation/sourcecode/bbwmodul/dovecot-ldap.conf
new file mode 100644
index 0000000..f4a65f2
--- /dev/null
+++ b/Dokumentation/sourcecode/bbwmodul/dovecot-ldap.conf
@@ -0,0 +1,151 @@
+# This file is commonly accessed via passdb {} or userdb {} section in
+# conf.d/auth-ldap.conf.ext
+
+# This file is opened as root, so it should be owned by root and mode 0600.
+#
+# http://wiki2.dovecot.org/AuthDatabase/LDAP
+#
+# NOTE: If you're not using authentication binds, you'll need to give
+# dovecot-auth read access to userPassword field in the LDAP server.
+# With OpenLDAP this is done by modifying /etc/ldap/slapd.conf. There should
+# already be something like this:
+
+# access to attribute=userPassword
+#        by dn="<dovecot's dn>" read # add this
+#        by anonymous auth
+#        by self write
+#        by * none
+
+# Space separated list of LDAP hosts to use. host:port is allowed too.
+#hosts =
+
+# LDAP URIs to use. You can use this instead of hosts list. Note that this
+# setting isn't supported by all LDAP libraries.
+#uris = 
+
+# Distinguished Name - the username used to login to the LDAP server.
+# Leave it commented out to bind anonymously (useful with auth_bind=yes).
+#dn = 
+
+# Password for LDAP server, if dn is specified.
+#dnpass = 
+
+# Use SASL binding instead of the simple binding. Note that this changes
+# ldap_version automatically to be 3 if it's lower.
+#sasl_bind = no
+# SASL mechanism name to use.
+#sasl_mech =
+# SASL realm to use.
+#sasl_realm =
+# SASL authorization ID, ie. the dnpass is for this "master user", but the
+# dn is still the logged in user. Normally you want to keep this empty.
+#sasl_authz_id =
+
+# Use TLS to connect to the LDAP server.
+#tls = no
+# TLS options, currently supported only with OpenLDAP:
+#tls_ca_cert_file =
+#tls_ca_cert_dir =
+#tls_cipher_suite =
+# TLS cert/key is used only if LDAP server requires a client certificate.
+#tls_cert_file =
+#tls_key_file =
+# Valid values: never, hard, demand, allow, try
+#tls_require_cert =
+
+# Use the given ldaprc path.
+#ldaprc_path =
+
+# LDAP library debug level as specified by LDAP_DEBUG_* in ldap_log.h.
+# -1 = everything. You may need to recompile OpenLDAP with debugging enabled
+# to get enough output.
+#debug_level = 0
+
+# Use authentication binding for verifying password's validity. This works by
+# logging into LDAP server using the username and password given by client.
+# The pass_filter is used to find the DN for the user. Note that the pass_attrs
+# is still used, only the password field is ignored in it. Before doing any
+# search, the binding is switched back to the default DN.
+#auth_bind = no
+
+# If authentication binding is used, you can save one LDAP request per login
+# if users' DN can be specified with a common template. The template can use
+# the standard %variables (see user_filter). Note that you can't
+# use any pass_attrs if you use this setting.
+#
+# If you use this setting, it's a good idea to use a different
+# dovecot-ldap.conf.ext for userdb (it can even be a symlink, just as long as
+# the filename is different in userdb's args). That way one connection is used
+# only for LDAP binds and another connection is used for user lookups.
+# Otherwise the binding is changed to the default DN before each user lookup.
+#
+# For example:
+#   auth_bind_userdn = cn=%u,ou=people,o=org
+#
+#auth_bind_userdn =
+
+# LDAP protocol version to use. Likely 2 or 3.
+#ldap_version = 3
+
+# LDAP base. %variables can be used here.
+# For example: dc=mail, dc=example, dc=org
+base =
+
+# Dereference: never, searching, finding, always
+#deref = never
+
+# Search scope: base, onelevel, subtree
+#scope = subtree
+
+# User attributes are given in LDAP-name=dovecot-internal-name list. The
+# internal names are:
+#   uid - System UID
+#   gid - System GID
+#   home - Home directory
+#   mail - Mail location
+#
+# There are also other special fields which can be returned, see
+# http://wiki2.dovecot.org/UserDatabase/ExtraFields
+#user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid
+
+# Filter for user lookup. Some variables can be used (see
+# http://wiki2.dovecot.org/Variables for full list):
+#   %u - username
+#   %n - user part in user@domain, same as %u if there's no domain
+#   %d - domain part in user@domain, empty if user there's no domain
+#user_filter = (&(objectClass=posixAccount)(uid=%u))
+
+# Password checking attributes:
+#  user: Virtual user name (user@domain), if you wish to change the
+#        user-given username to something else
+#  password: Password, may optionally start with {type}, eg. {crypt}
+# There are also other special fields which can be returned, see
+# http://wiki2.dovecot.org/PasswordDatabase/ExtraFields
+#pass_attrs = uid=user,userPassword=password
+
+# If you wish to avoid two LDAP lookups (passdb + userdb), you can use
+# userdb prefetch instead of userdb ldap in dovecot.conf. In that case you'll
+# also have to include user_attrs in pass_attrs field prefixed with "userdb_"
+# string. For example:
+#pass_attrs = uid=user,userPassword=password,\
+#  homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid
+
+# Filter for password lookups
+#pass_filter = (&(objectClass=posixAccount)(uid=%u))
+
+# Attributes and filter to get a list of all users
+#iterate_attrs = uid=user
+#iterate_filter = (objectClass=posixAccount)
+
+# Default password scheme. "{scheme}" before password overrides this.
+# List of supported schemes is in: http://wiki2.dovecot.org/Authentication
+#default_pass_scheme = CRYPT
+
+# By default all LDAP lookups are performed by the auth master process.
+# If blocking=yes, auth worker processes are used to perform the lookups.
+# Each auth worker process creates its own LDAP connection so this can
+# increase parallelism. With blocking=no the auth master process can
+# keep 8 requests pipelined for the LDAP connection, while with blocking=yes
+# each connection has a maximum of 1 request running. For small systems the
+# blocking=no is sufficient and uses less resources.
+#blocking = no
diff --git a/Dokumentation/sourcecode/ca/ca.txt b/Dokumentation/sourcecode/ca/ca.txt
new file mode 100644
index 0000000..36f5c96
--- /dev/null
+++ b/Dokumentation/sourcecode/ca/ca.txt
@@ -0,0 +1,20 @@
+organization = "Berufsbildungswerk Südhessen gGmbH"
+unit = "Kaufmännischer Bereich"
+unit = "IT"
+locality = "Karben"
+state = "Hessen"
+country = DE
+cn = "BBW Root Zertifikat"
+dc = "bbw"
+dn_oid = "2.5.4.9 Am Heroldsrain 1" # Straße
+dn_oid = "2.5.4.17 61184" # Postleitzahl
+activation_date = "2018-03-01 00:00:00 UTC"
+expiration_date = "2028-03-01 00:00:00 UTC"
+ca
+signing_key
+crl_signing_key
+ocsp_signing_key
+policy1_txt = "Internes Zertifikat"
+nc_permit_dns = bbw
+honor_crq_extensions
+
diff --git a/Dokumentation/sourcecode/ca/certs/.gitignore b/Dokumentation/sourcecode/ca/certs/.gitignore
new file mode 100644
index 0000000..e69de29
diff --git a/Dokumentation/sourcecode/ca/config b/Dokumentation/sourcecode/ca/config
new file mode 100644
index 0000000..76512d6
--- /dev/null
+++ b/Dokumentation/sourcecode/ca/config
@@ -0,0 +1,3 @@
+export typ=rsa
+export laenge=4096
+export crtdir=certs
diff --git a/Dokumentation/sourcecode/ca/genca b/Dokumentation/sourcecode/ca/genca
new file mode 100755
index 0000000..628eca0
--- /dev/null
+++ b/Dokumentation/sourcecode/ca/genca
@@ -0,0 +1,4 @@
+#!/bin/bash
+source ./config
+certtool -p --null-password --bits=$laenge --$typ --outfile=ca.key -8
+certtool -s --null-password --load-privkey=ca.key --outfile=ca.pem --template=ca.txt
diff --git a/Dokumentation/sourcecode/ca/gencrt b/Dokumentation/sourcecode/ca/gencrt
new file mode 100755
index 0000000..f7f4cf0
--- /dev/null
+++ b/Dokumentation/sourcecode/ca/gencrt
@@ -0,0 +1,9 @@
+#!/bin/bash
+source ./config
+if [ -z "$1" ]; then
+    echo -e "nicht genügend Argumente\nnutzung: $0 domain"
+    exit 1
+fi
+sed "s/DOMAIN/$1/g" normcert.txt >$crtdir/$1.txt
+certtool -p --null-password --bits=$laenge --$typ --outfile=$crtdir/$1.key -8
+certtool -c --null-password --load-ca-privkey=ca.key --load-ca-certificate=ca.pem --load-privkey=$crtdir/$1.key --outfile=$crtdir/$1.pem --template=$crtdir/$1.txt
diff --git a/Dokumentation/sourcecode/ca/genpuppet b/Dokumentation/sourcecode/ca/genpuppet
new file mode 100755
index 0000000..b778aa8
--- /dev/null
+++ b/Dokumentation/sourcecode/ca/genpuppet
@@ -0,0 +1,4 @@
+#!/bin/bash
+source ./config
+certtool -p --null-password --bits=$laenge --$typ --outfile=puppet.key -8
+certtool -c --null-password --load-ca-privkey=ca.key --load-ca-certificate=ca.pem --load-privkey=puppet.key --outfile=puppet.pem --template=puppet.txt
diff --git a/Dokumentation/sourcecode/ca/normcert.txt b/Dokumentation/sourcecode/ca/normcert.txt
new file mode 100644
index 0000000..b61c818
--- /dev/null
+++ b/Dokumentation/sourcecode/ca/normcert.txt
@@ -0,0 +1,16 @@
+organization = "Berufsbildungswerk Südhessen gGmbH"
+unit = "Kaufmännischer Bereich"
+unit = "IT"
+locality = "Karben"
+state = "Hessen"
+country = DE
+dc = "bbw"
+dn_oid = "2.5.4.9 Am Heroldsrain 1" # Straße
+dn_oid = "2.5.4.17 61184" # Postleitzahl
+activation_date = "2018-03-01 00:00:00 UTC"
+expiration_date = "2028-03-01 00:00:00 UTC"
+tls_www_server
+encryption_key
+cn = "DOMAIN"
+dns_name = "DOMAIN"
+dns_name = "www.DOMAIN"
diff --git a/Dokumentation/sourcecode/ca/puppet.txt b/Dokumentation/sourcecode/ca/puppet.txt
new file mode 100644
index 0000000..fcbd9a2
--- /dev/null
+++ b/Dokumentation/sourcecode/ca/puppet.txt
@@ -0,0 +1,14 @@
+organization = "Berufsbildungswerk Südhessen gGmbH"
+unit = "Kaufmännischer Bereich"
+unit = "IT"
+locality = "Karben"
+state = "Hessen"
+country = DE
+cn = "Puppet Zertifikat"
+dc = "bbw"
+dn_oid = "2.5.4.9 Am Heroldsrain 1" # Straße
+dn_oid = "2.5.4.17 61184" # Postleitzahl
+activation_date = "2018-03-01 00:00:00 UTC"
+expiration_date = "2028-03-01 00:00:00 UTC"
+ca
+honor_crq_extensions
diff --git a/Dokumentation/sourcecode/site.pp b/Dokumentation/sourcecode/site.pp
new file mode 100644
index 0000000..129e4fe
--- /dev/null
+++ b/Dokumentation/sourcecode/site.pp
@@ -0,0 +1,134 @@
+
+mod "oxc-dovecot", "1.0.1"
+mod "pcfens-ca_cert", "1.7.1"
+
+class { "ca_cert": }
+
+ca_cert::ca { "GlobalSign-OrgSSL-Intermediate":
+  ensure => "trusted",
+  source => "puppet:///module/bbwmodul/bbwca.crt",
+}
+
+class {"apt":
+  update => {
+    frequency => "daily",
+  },
+}
+class { "apt::backports":}
+
+
+node "zeus", "hades" {
+    apt::source { "fusiondirectory":
+        location => "http://repos.fusiondirectory.org/fusiondirectory-current/debian-jessie/",
+        release => "stable",
+        repos => "main",
+        key => {
+            "id" => "D744D55EACDA69FF",
+            "server" => "pgp.mit.edu",
+        },
+        include => {
+            "deb" => true,
+        },
+    }
+}
+
+node "zeus" {
+    class { "postgresql::globals":
+        encoding => "UTF-8",
+        locale   => "de_DE.UTF-8",
+    }
+    class { "postgresql::server":
+    }
+    postgresql::server::db { "icinga":
+        user => "icinga",
+        password => postgresql_password("icinga", ""),
+    }
+    postgresql::server::db { "sogo":
+        user => "sogo",
+        password => postgresql_password("sogo", ""),
+    }
+    postgresql::server::role { "tobieseb":
+        password_hash => postgresql_password("tobieseb", "mypasswd"),
+        superuser => true,
+    }
+    postgresql::server::pg_hba_rule { "sogo access rule":
+        description => "Gibt sogo zugriff auf die datenbank",
+        type        => "host",
+        database    => "sogo",
+        user        => "sogo",
+        address     => "10.x.x.3",
+        auth_method => "md5",
+    }
+    postgresql::server::pg_hba_rule { "icinga access rule":
+        description => "Gibt Icinga zugriff auf die datenbank",
+        type        => "host",
+        database    => "icinga",
+        user        => "icinga",
+        address     => "10.x.x.3",
+        auth_method => "md5",
+    }
+    postgresql::server::pg_hba_rule { "tobieseb access rule":
+        description => "Gibt dem Superuser Zugriff auf die datenbank",
+        type        => "host",
+        user        => "tobieseb",
+        address     => "172.16.34.0/23",
+        auth_method => "md5",
+    }
+    file { "/etc/dovecot/private/dovecot-ldap.conf":
+        mode => 000,
+        owner => "",
+        group => "",
+        source => "puppet:///modules/bbwmodul/dovecot-ldap.conf",
+    }
+    class { "dovecot":
+        "plugins" => [ "imap" ],
+        "config" => {
+            "protocols" => "imap",
+            "listen" => "*, ::",
+        },
+        "configs" => {
+            "auth-ldap" => {
+                "passdb" => {
+                    "driver" => "ldap",
+                    "args" => "/etc/dovecot/private/dovecot-ldap.conf",
+                },
+                "userdb" => {
+                    "driver" => "ldap",
+                    "args" => "/etc/dovecot/private/dovecot-ldap.conf",
+                },
+            },
+        },
+    }
+}
+node "poseidon" {
+}
+node "hades" {
+    class { "apache": }
+    class { "apache::mod::ssl": }
+    apache2::vhost { "sogo.bbw http":
+        "port" => "80",
+        redirect_status => "permanent",
+        redirect_dest   => "https://sogo.bbw/",
+        "servername" => "sogo.bbw",
+        "ssl" => false,
+    }
+    apache2::vhost { "sogo.bbw https":
+        "port" => "443",
+        "docroot" => "",
+        "servername" => "sogo.bbw",
+        "ssl" => true,
+    }
+    apache2::vhost { "management.bbw http":
+        "port" => "80",
+        redirect_status => "permanent",
+        redirect_dest   => "https://management.bbw/",
+        "servername" => "management.bbw",
+        "ssl" => false,
+    }
+    apache2::vhost { "management.bbw https":
+        "port" => "80",
+        "docroot" => "",
+        "servername" => "management.bbw",
+        "ssl" => true,
+    }
+}
diff --git a/Serverkonfiguration.odt b/Serverkonfiguration.odt
index dd90b2a109fc7015b7d706660805b68c5aae4a23..ed85b0e87379a7152aee9680eaf59a7ba5aa38b5 100644
GIT binary patch
literal 26475
zcmb4q1CS@rm*=-_PTSL-wx?~|nzn7*wr$(CZQHipH^2YJ?%i(eZQNx<zRIesPrg_A
zA}b?4@1?8+2q+2w00{tSG8#x~4Kcuy0RVu1>fc8IOH)fj2Ui<IT^kz<Q+-_rQ)??)
zCo2OQYh8O&dm3vSLn{MoeMd_}D+d|}Ll+0xe+>o+2??<LJJ?_Re-!+`Eh!;IK58*(
zVcLJk*qa(#={h*t8QRmhSXwNqi`}P-$8~@61oqSB(FRPy_gx<2IUxcA@k6#q)?A0L
z?9L->ZB}n`?VmcIg5(mGGf*;)QhBAGd~PqbxiJra#xze}SMN5@oU7RWXp-A1=<e?N
z)0aMf-tFn)ir=`aI6V1cG%`PgU(AiCg_|*X^L}1xz18>?gK&-29Tn`X|5A0icSJed
zE;GI*<eC=k^%(iNIb6xz(e2s!O+k%4e1!{1Gk)j9x839kO^68UiwK4Xljr~0yj*>7
z^1RIOyp4#GgBU=HDENjb7>JmVK>!I81;c%$2g#1xvCBsmJx&&NTbso0(x)F0uiX?)
z)GD@yaIMyDn$G!9?(sa_k8Q?jWcd(QHP<vfT=A7^mGmmdg~8<dG?}}djyRO|8~+y~
z^nP_O{>6K@=sPiVUzhq@k=6T4v)9cwY-)7>h={9E#=z&T&z_32!q?{`os|-22Nwps
ze#Mq`P{HN-Zt!h)DbGv3ERD>*?uU>ByrK7d)weNHleW|?#Gxs&f&KFfKN*)~_--G$
z4MTBL7mx=I<{POl5RcM;6FC;Bk;6g7X2%!b(i3jV?2%zUrB+L8JSo=<HZ04XQEJ5P
z`}K7%ezPlrm;D;g8!g^2(cHHJ7o;_^IqP7;t>8YlBr>YK=<uOMT#0e#xJwr{_+yKI
zh<etMRFA(AwiVe3@(E#n$j)n?_DO_?Jh!ekW~)+b>Lax6D=Na0S3KG9ShHtB$Jaa@
zv0WxHX3%dsFo7(&Nf&o;ha1(6&yIqd5lat}Tj<LUw_eLOlQUdN87tC#$*en)o-T51
zPvp4|c5QZAQ#226pXnc;l;Cxi@du|1-t0fXK_B|*s`mDqE_-dxq7(O%PhR6Kx9Pd&
zaqO~aPR#04ftDdBWv#;IpTj%Zb)mP|+2+6r2S`NsWune4{NZi#ibO{nCTMBYs_wb;
z_LM8CHc|mrq1DCRdhKI>9<bGZ^jOQh@-WJreK<5@Yvs_B4If)FgC;5sFw8L{_P7!C
zpr7|{2s8vwJ!$&>OlM<Fxpiu32aLwKhZ?FtN6hdQgc1me#o`^neH7A_-LvC0(|q0U
z4;<sluCu^N+}0WJn@7Y9{#rAhk+|Aw-Z=^UW829fKwXuRPdXOn4=$s7Ou7%V5~D48
zM72}zPfS#%mQx4M+yLE;LZ-~J$hUvI2#C@Swr(f=ypPP(r%S-^GtF2mJHP*G(3GRl
zzWziDNUq8OJJzjr0_ut5$w>EGFLndg?2&(?s}<t+ye--k$|cJ|e10!uf0keuKBVnr
z>}$g8Cj0bOr#OM5XZQ&N*HC2Uk()<OAGBD2>~p=z3y5kDYF_?z_!Mpsx${=D82(s7
z;vY`B?Y^a5b!V{Za%STP7r;2X$87eI1`;iJ^DWR>ytK>!53@H=t(0}+-j2+NhoZWE
zVijD2AV(KdKXw6p=rH78leX15a>3RJDV_={;@*1w=s2ID<U2(cACHAXsPdky)za<B
z-^J>bqlxSn1L>CsvWW~)CUgVxil=|Z+x_Jm(%(;f@WO=~lENNCYgggRO{n`aJw4tO
z<fz36HXHHb`MYAxy!N#%`}%SR3(va?s*l;=l}s9J{}+7zd{7LB>%7v9k;Z$KXDkZt
z4_P1RtT6lNCmmjU)6c@1H|l8ae%DT(vuLl0{oU#2AD&dG{>Az~=MMJeou%Qg2z!DK
z$|hj=M<<!=z+5Ce-;H(=F`n8~vlrdvem>YMJDdiJw07NQ;j|2eXHXVphI>9#BmB7;
zra1h=ck8NaHNqh<51T$08*|U;gdnPKy~&8c6pzwQV6i}OlF~v4>F@|UHdDCTz|=KQ
zwv#c-6eNq_TCSaDdW|@2wWeWs-Hfa(tw)@^cMr{6xXu3j2WG+9cpX_mps}Y>fmq9i
zJs5J1E+gP#;YOZ)t&3dJo(5%a(DME8pm<0Bkg4Qnv=6U;fJ&AxRP+mDl!@QqpHy1p
zV*bF%)E%h6_al}U+x>Qm63N(^VW0=V-WC+%1IZZ!E_#|1sQTs<aY+}mKSI`!!UF-{
zi*#Ny9ty<IV3)8UTINx}21p&}YbbJagg?I$wh?iODW0u|1d28u-q^7j8$QOFgR5l2
zBSBWIy}t!QxOA@i;YGv(;`u{Q)UPIV-j)LR9aLKmO?An>&P=+lGI^UI{+`hb^d8fE
zHA;VAU}=v^wS!CfHS+VGTSf%)O9s14ywG1>X0ri_s}1dr9!Td^^S|Cs+9wMmN05?4
z#v|#rMYJ^}#c+aVa=Utr?}^V!v1c*mTSc4wy=;>3j_;^mO^JlEAOcw|w^QxJOK!DV
z<^fPEz)650Y;?Qix$ql5r`$!>=uDv$g@c}GHc;G!HY`2LHPf{laY^G&vK-QnlQuGj
zQ{!<CK09_E$m!lTGPcnl&*ZhLg<zu5+6(uup$)j^0=7yFkAD4|nmn%>3yCp`H@|Td
z_Fy?tiw6g(5A7cDsK#|qOdd*Eg<L(=7`CA(jb`h$y6tKAh=6Nwi5uDXs`a3QZrseS
z3y&@|{Y1|R4S(ac84|_5k6&jq?gv}AR1d5lGtCNR-iv(OtL$nn4xPUgD$EvNcQuj5
zIhp0jw0udN6KX~K6MeHDs$8!TkM_T8A|Q7?P{FU_Kkss<pdpwR4x44T;ka@Zp@ADD
zahjq0D!U{xN}{Q-Wzb8?D%p%&Y=B)6Jr%gNChUTo|E!4^MrizL9x=0^Hpa*~sRW+t
zsydxIGe(Z*+?OS=K@)p2|2`0d3zW|?I2VIhV6hW1LS8yM5-tRm84Lk&4e><l80T}m
zVO`dc`~X2Nd-&P#idvQsLdlaH2%XlcR^?-lEQILLPA5N|YG%<Qw5^z}urM2xM_KCd
z#>Da5*F~#fHKp$DYZJwve8sAlG`xtK4kYaZaM=Pqay^h5nPxtfFedjD?-11sbH>ju
z^61}04xwo{G&45Q@>2qCQM)Qw!Vt+@lFz-WJgI0m^=*wQUBlsRmQ9&-_+9DTzJ83Q
zFmB`+ZrUY{v4`bY`_!W_Oq-&aIt)}mpvqmf?sPgTcRDs1%CRTM3bn8Nmc>E$7J<DA
z&yh)D%J#G&>>q@yEyN36_fDlnM0WdZ_4I<tTKsG41qx>4W08}(9_a^+XW9N~X$&1y
zMUMa)wfHKpQ`@n*EvHl@2?GUlEu5{a0pL2OHH%q@E&JZ@=>&P8xgCuTr~R%5z8^f$
zkPn->%Xu**Nsz)uS_a0!AX|?d<5;t%+?{Rkj&Zqtov|t4u2-~x;dzZp5FxE%v)$o*
z?=!XKcjuT{;^yfO$DOw!3e4n;6V)b9uvU|`B~S*eW%Tk@pbz-g6|sR&Y(TLE!YHZQ
zSV&nBiK5mo1lZYLd1<0edPM{}MtXc-7P96LhVc;Bp`th$tV8|iu5!h&l<}@pE{<@t
zwF0;_%+;woykjcC$th2rQfm3u@0Q}W0wpWzi&#}dKK&^xO{JiLiQzVim7BTx5JpWs
z&h8uN$wGwH8U}m3R`aAJG$ef_Egu$aA4THC=));)J?#QGww&bmKxX++Y0Y<+^3e;z
zdwvT0VGR!rY4LezbGvO<m0qqp3eK=YhN0_AkfN)UMbkg6SrLMbGRrZn$LBew<Tb>w
zG3s6|g+XMz&w?qtbLWs5jp(#9dv9hy2#zFoIPkRf01d`<jDn)g!(g7-{h|yPpUP;(
zysK7~!#lVnMbF68W4oxCk6lX+X^d8#hDSs@bS0w?ep{&^qpScTip;RW*s?z79XI`G
ze}$+l5x6gcu>i;!&9!DTUdpoEii21|&&Lj)AE&wIb`6}&=cQTBDoP{NNp7>D7Xw*^
z#4Coy%D=Q4vwZj3gSak(@)99n+b#1US0S8HLt$%YBMm^0f2G=U_u<G{<<B+j@OK!I
zhY`y=TrZGENcI>z7&-Jc*tmdLAhm4*%<`Sr!b}YK<Wrj)F$MsOBh{dbYI|!DGXMOA
z77sGkDn+FgT|)J?b*w>BND$uoP-SGjw?rw>!iu{3u9S$@4{usgA-I%~`lv&ST5loD
zk@pa#1!x~fC}d*-J1vZ~ZE((9C5n09{DxD}(`%3BBd=3ZG;X@!=>$2S>f7`~J}(qd
z4DBvG^c_`e2yjA&%klc@W#BQ%)T0xb_axxJ<b9qsJ*Av1E;l$82aORnAHIOM<KPQh
zh*ItN3dKdPFM&>K8B?XuG0{0A%bzWtPY#OI-_c<EHBy*M$M(($JT+9r&nnsTb;{?e
zR0>K^B0-I4Z5wz8NZ+YSrtzel>I~TWA8wWmqhRxw{i3njiviB5>U3=4T8+sspbWI)
z8qK#{CnJ9Bcjs2Nzxy&E?r*R=`e8pKK%22~sM!HO0;I7d&IckwI$6}PllL(N$f78L
z+$S?XLE^G2FNrCn9NIG&AV$!Fn>g+4PZS<^Zt=M0z38VPc^#Ep4*mHBF6ok<Bioi&
zL(s_`_N?o&M3PI}ro{=SdAGO&%;Q=(M7S7Fi<~`0<X#{B{P7mqtg1@MMdY($9{_dB
z#e6~}+VzS@cHR|&sj-Rl^tz)@USSlci>NFnzd-1Hio^9v_1uFnN*07%sz}DJSY5-+
znPH`GD_MP7?C_Wy){4{7pmYSLjL8|rs+7gEppZqQ-o)&~zf$Qoc(tI7R`am}f)<ZZ
z;FHX(y(sRzV9HVWVkdLv(6k+xtvA-^$A7NKO_n6!?2d8j0IjjejM2(WQT|LLnypo_
zB2Z&MG0ax`>~TAFBO24RKDmj=AR=i`)=~}Hm_$bmZ=Jn!sebiXNA3Aji+If9nv1nV
zzv6Rf6>h<-vWg<v7|)wI<nm(^x=MCwNwT44e>88llDtB18P>ccT9(}JU8ARj-U791
z9`d`a?+(~X_;CW4QMP`FfBAS#+}%r90f0nCaYFF0HG$KvxE|X|b<J-Nr`=}j$%_%K
zomX6}Yrv^D?KpGXf1R8#ItVj*v#}{;DjPEe_FA$V8ep=uW4cDIM$N3TW@4IZ%XmZ)
z0w_QxG(W>l&25z4oMwa+sKulkdbQ6m_7|VOO#RlivV+5ABI^|ux*4;);#}mLS+S3q
zNrkHFa<YnXpO^fJll2?4GgIea4+|_h;zh|A>xVL!j&>pIQ9>X|lY90m!6iO2<vCQ`
zII7?Vn^T<Cbt@DXW>w5GOYOvtUEiog#(eH2o5pz!igDA9nle66tZJwc5{t?00to`G
z^qvFZqAmCpsVR>`#dTE3Uf_?ENEKPrT?Gj-7UnYd;Q5pLjL^Quqh+d1(e{Nfy`or7
zjkc#=ng&n<tYHE0TqOzCIdut45a`GJ5uf@q?FI>JnI6!AI9p05yHGfb<cy7|+UP^-
z^_m?&<muGiMvC+a0xqp1ywrxAg6YM5q_=X1P(kMwC>(6f$F@{dLsZg!pqPqg@MN@y
z`?IFA%L_xo#%#aTxZM=TWW`5MdNvz4<Ko?^<nwuUsfMo9`XBT+YUEWWzZ}rCUPOE$
z0QKb0!BmDZKc-HD?klrwG%%rp^Cw&9C>uyoWP(QSG0Wm3{a88%BSqdZew#*IHyf4T
z@>NZ#+TW3g@Z1_)@JKrIl#vW)QLQS2vY3f_B6a4cfYNH91+IcTMBOn|4`HazO{I<|
z`dw*UT|w?P_Y`OyikpoptF#HTq!@`oIdmCyDk_W<IuY~^yE*X`@*!P5VdO3Fj$<A<
zU{R%}1sjp0^fhL`QZ#DxgPKV{`TgFx$V}YGeWXzY@ji`%Ug!q?pso4(JU-ja(M%@2
z;@Q~i!5;!i?5<lQh}Qlr#QJ9UD2&7x`(AA9$7r_Bf1y2nS$^KZ2la^iuI*wI-WJa?
zmmS!B5eVLK$3MUiU4M=)`8J|FO+0)y<@B<Y{9MmA$iLZ?i}!rR`=EjDZZvBvt>$Jn
z%R`JPf6-55@wxef;qeLNyEBgs=?S8XCfFq~;!O9N#Lfrl%3nM0eiJ@|z_Sppy?OIv
zjm+CuyYuz+Ih@7(K`Om;dV6R;#(NIZ?-wMP@eB1E+UsSFZsZnby!PQ}((hB}TJNUv
zD9f*v+qVZ*?={HxrkCO;uT-vu#;CVvZ~GH`<?o(JFBF%B$?Of!7@jR}Y>z9OPj@ah
zP_nO;`1kMRUGHtXcmJf}N={gXjqN?|=W>K=T%0^^1*Yz(-synp__bU9F!!7KnC@fX
zZdag>W2?6>$u$au-)!uD?<wCYXFREu?G({OH|+!7eb8U$#_(UnUfh??)<N09i#*aD
zUmQW+XzDyE@1v{z=$qdp_%8}l-1FW^nmojp&l%i9Jg?_t!QVi#5)hD8je3m{$N<1I
zApr1i#1`N$vGos2rh`|%#{~oc#DW3<sQ)LiWvOdrYGi2d@DH6;nIL7=M~4{roI!Zk
z6t-DcMg<I0kmZBd<2ckC$JO-Vzw_is2wX~0CTMs(8nOL;Bs6N|+*HKQ7qX@+uysON
z3Me#Zc7l85^jNqyXx6l>;H@Me<;E+sL)fph5QQJf3}LrJK_irj<3LzpPo>t`<2ioa
zaVRGRnA;_?z)$5{oxG42XbdSAFnBWi)d%OiC(&*EDkQlH?b~V4RC-2DV3AF}wP^(@
zv5>qJVrL29I%o?9RH8YyxtN69Y?-hDYJW62jQB{a6qo8CHU;e3OgzB^vcwkNigGz2
zU^JlO)^v4`7+%Ys(gXu>SEa@v!zRpuk=jFYxr^QTo_=>26=5<yK{A<B6hn_sj4wVs
zGkj9&dAi3|1rle`x_Jr<lp7T&7HOfm3yPL{?B1T<&}+g@ByQGdcPC!{{?GHR<uNX$
z_SX|%RR93=-}$z8aJBe1&hS$6Pkeq0s@HV2jVq;VKe$En<&<P`oK%q$B}cr34BlNr
z9ADF@j-ane^YgNZ3L?KwjqUpUt@PqliajwduIF(c%t=4Kmh<io7^$gGUbKL*0RjZw
zT@1cpdUU_H=cfU6khja*Bt(N21fIu3Z1SZ}KqU%3e+s<lF1hEyKy*J<C?1li{{uZR
zM+&#zHPRqmTp*s(mB<o`cOQlMpA7o)LVAxuOBjVMd9@m|Z3ca1iFc@#W@<^-Q0c`z
z^M$4xb1Zdp16LDt5F8Wvjv&5=%YB=0+YeT}>*x1bF9!ZmqYJ9!ar*otV0Sj{43eMw
zcb)XGKP{<nIf#s@T%8g9o9^ValnTh#D|P17nF0P|B}KI9OCc_+3nfGAeg(`d81}9%
zWM1#PnJ;FmxIOD>^lA}2KM3EqkF}wxh})Yi<+kF=I*3F5ILF(UA0qL$mNWo<%aT@^
zug}weSK3@-uRe?U=;qb9M_%ATc53XK7|Ubr+7AWv`_ZBl#c||jR#m#PNb5u(XTa21
zUFU>2ZESQjxu7qlqZf)VN$tH0D-%u`NJ>TmHr=3hzJhf}?O70d<go!qK~bo>l4aRu
zR68sBWAW*5m~nljr0E-%)pBUD(lN3>Q6RPTQ$Q0y`IRqf75&5N5Hn>9Lr}%xNFcC!
zWYtZ!Nc5Q@)!G-J34tY1cqj@bwg{!jR+v1rzuAhI!i5p`@P#<UXB>iM82GD@LZi%g
z_{M{^Qn)>LvZ%c|ce+bs@Po7Y8h~;caS+i-)tvZTViI;+T0e>jfc)`e5g@(;SVMer
z^R|643cHsvU*~suOL1PvLsc<eSSQRC){7q1urZJtk;AuQ$Kpx`kReuxq^)r~_`g#Q
zx<QF~Yjp8FgptZnHTD@tHtTh?v-~&h(J(<N$gOh|jpcXSBGobUVLFLTAR^*AeTa3o
z^89TG#Q%&6zo>^KUHLO{i8Rnc<{RbOMg2w{Hdq}#l%u}=G4K)@;OLIzbh8}MGMM~3
z&eg7IVj3gnCH^HDm6aWO=EMl_lV8SC(#+x`Mz4jV{IN$uHf+h|#`@+5tl4AXZ6p18
zy<s^V95tap`_izZT7b(`@us{ueia{D*l0_IT1bN!ZwFjQ?g46dWePDbT`y2-$GlYm
zE8jLjDtBPW#Ije4B)*XjJI;(n46&$gio(&A-DRv#gK)IFd}5&9L|itc+CwvWoE4Pv
zGg>T5;ELNPYlFxSYhz+OCPLDB+Hgtb+{B?CA_YV9@VFfn!5^$+XEa!;+9t&v6qKV^
z>r3jo%nQE~aN@i!Ksp*<_WH2`O8v4hh<#4m3oM26KF~(!@+=WW!MFu8Py=pRWLi@&
z%0Yn{YRLppTny6@2=V7!VKhVKNRr}2`9`RGd_V?&1uA!1uyLSP5!xm3&n<_*<C<#_
z0Fz--K`ABoAr8>FVSR|7L}BYcQ4wzugJ9o{1Yh`y7y+~Xta-WDwqr&#hWK%gJzA=I
z9bu_%zz;!~k2FV0vRW%r&#IDdp(*dZDISI>fb8`lZy7_w5^%G4f}|GD26A1wWFWl>
z?v~GXdQ97|HzDq{HS}`NhsVMnNABq!(oCnfZy4A^wpu=Dpc{k>-cEqtO=7oCb!Rg~
zSrFy>5ciNCv1Mx_(V*_d3(J`o8B@AA@#`XrhFZ42z?9|kP?)}r!^Ik^gQ6+NL4th;
zxdnvJU^eh~D0_1sit(wkK3hM-OIyeuzCejz5bbT1EI*uYUc`$Ra4O=!ufUsDxIa*9
z=8^GaX<}afbWL<?yd8z+B?|{p%oQx;@~B*ul`i0HE<Z)Z)Ws@AxYv9WfRodbYhVZ&
zwLRz!kX*}nHHAU3?SffuV}Da5MXN2BiYxcLH;J8y%jxzIE0I3NK#~t0odzc4E$KdB
zVWV#6PVg1Zw;Z4-K1(`9M7u`k<%{&({{ZdUt2M9ff1J)WNwr0nYb=G;9`*ljdGb~s
z;Yp!$q0+hJ<<EnvjZQH#R7f^79K1*EOQ9i*516$56}rDfMDf$xm|#JnaAQxE9lh28
zKET~ZG&(RTt!387N1`I)gf+#CRn}k9(Mriw%_fUwIIi&gh&@gVQX4{5pEiv!8L<E?
zJb~G`GLhxDB)K^xah?X;hygh6Vc;h#xe<fx=rP9b=#!H9pZcbv!MaXrSe8GMKcL^6
zCrdRr9zXf-`V}7LcHH^Z4Po4Aa~CXq<%{7Y|2%()^b~D!`T0381L1a7*;F38Xf`2D
z?{lX278yeOM@oWRxXEb5XWbh&fTkA5q<ZZvwqtoBwoZXA%Dx=%StXlLG8{Pk6f#fv
zz<IrC6o~+>=n{^2V9ILNH)VpzYhST8HQ7v9`8l|VFS;v-b)(cVXreq(cl(o+*)`@W
zi9$e0WhwPs=*QU=suHDLMvSR8-K=MkxrsIBh^2moK99ywe3QZ?z9)~bDfF%;2l(X&
z$sJKZbx}HE75!qLMJqWa`EF>EA~s{8PvsA99CbDxYyYXLO5|Z7ef#>&v=AYWhIWic
zvVa>)_p7TfSJx<SttgB2({YhzeE)V|obdVIX6z1Of~Y20sdibuV>ZpT=BpU^R9n*X
zCW)+9{f?2lZs58>eAD&M`x5Nv;yzwu&a=M&-cVsA&kSGCUA|)v$`WH24py{K#}2I)
zi8gmd1MtZ6SKK$ZO(mo2a29@Dr7wS~3I=+PuQf!W3{a`!Zn+}&N+I>%^q0UsbK{s~
z^f_<jnh5=0`}>N#rD2V}g(TS;zQ#_2k93}95XU1LI1{)WHv3r7Mp>u1;xspz(fk(?
zM+ZzciB=bb&#$2hs&fDlxiS!!<#o;)c#MhmIdzY8Hl3|c@K&AguRjdqYur?~J0w>2
zD!R(D@TSi2)2&O~L*R;cqU}xI103zd+G46m)l&v1`h_0h{KHt;u1&A8P!7#G;_Me3
z4hLM<>}x^+Q*qqK%PJBi-E);nXCht&N5fm!46n#TEHkcF^uQU%R8wlxUkNeYB@~^)
zN(@cDQ}gK*!;ipUL;@c03&!P|gg`RIxchlAPYv0xK3yXQ_}bcM4G7XAe>kcY@GQod
zS`I?-eg#^kkwr&sdW~KouUR+=NM@qn@O%2c?3qz?`q&9~rxK`L)Zgcxt*Y+d_Jend
z${+6NAh4ysk*Yi^c$z)CyI7MY>(EZkSIDj;;5mllB7gBPsxtX>Pt44}rqdY5vwj%c
z?akZSdY4VromJ$#A4IY^m4+@EFHs|c@0_h=In6s|!;4%(d~%ooOuQ_t5I4ZZ?*(_E
zqu51TgytU}QuZ+JeeAX(j@V74C|b!TKL@r|*@_r@ohYHt_hA2+T{Laza?4pvIKOh<
zMg%lFaj%&YrFGMw#)Z0drI9U9)uTY1`wMN8|BSqn+w1<EvP(wcC%Lza%avD;xi^Fx
zn)%w$!$97=A;Cxu>%hacX+)8b)|$rjtTcK55tE!b*l~(HKz-b$7kbCXb-E5e@pd(b
zL~ed=&s-=Y_|`4owLJ^JoA4fW@fCxM>#kIOst@a|^SdjDK<`LSQeucB@4D-)>E~y$
z4l4ME(sRF@YWak-$#$;i`pnn*S@%r8UDh~qtmTh3HlFmq99EOF!}hG__=y#pXUFlP
zGu<|K%DqylQ&w8F-zM%O?)o-J69`V0LxPyUadQ0b7TSP=+!Moj%QcS8RUYGxORNHr
ziprZ{57dUN39HffFIMoWKfUr^%TR_XuGNTLGtn|^SQhOTFptlX8P4#=#{At9bCcfE
zVKS*1J3Qv%*$BqXm{V7YyBApq$D<eU$3!+xMwz=4VHvQ;X>-T@u5+-*qlvqmZ1_`G
z4qn0cu`=sy|7Z6a?D6T}?n|JlV{fc78P;~sp4M!cHS-d!GVU}~$}W~gsB?+QXS>t$
zZtcZUl!?T1{Gzsy%84{fLnp&OshSJQYhGJNneAUf$AU(-(s&9AFCJ7pO!}|8W2#=P
z_~XDe&3=dLkMH4KA6@WETAy95cfW7n?~VSXYOg9ET~8@n&0afeMXP1h<NOOsn^xP=
z!jOc14L|<-;`#C~%2TY{y5d9X<Ew5}IZ34{@vyx<5&Pl&e(Lq>Bg3P+$Oa)@+=(#-
z=B=?Q@q#1c+Qus2-oB~tcL(h@RyghzQ0tf0_kjlDvqNTK7ihJ0cQV>~<bWQt=j<W%
z!^ecy<P-u=rSn{u%xU?HafSgFb-RaR)AVmQ@1mH99FNlHKbc{y%e;o8)w%MY9lM9T
zu7>eaU-{Y)8s*NJpKovM2a<brjE`j`%4)*h#Z%VA2fwVs`g*E$b@7F%yes(j5$EU>
zYrQ49#^6k<2S<{sc@=~zwDgR~ljl`O$5v|Y4H?pugHNn87#1+pR!}cK0@9p1h{l}I
zz7^B%T4CINg_4(fM~ISyCR<bMy-t+#?FR7I5E>j!pB&Z}nK7fu{dR8=)(v@@X;y~t
z;(`V*&z*De`jdTkcWv^ulNQk<|0|8zmOs~6zZj}fI-8pLvWrrRgJ|8A&P=^9K^p-*
zAl%&TZi?x0${gi#YSPVUnzribltbZuB6I1aHOD0E=${v!rkJ?0Y0a24WtpVx`v#dm
zZ>pFsqb@?(aLN+mib!_%(z3c4rP^WaSrvb!6|w!j*Xm%Dnx3#y|7qfu)fpPE)y2p>
zo$TmFL!OrRPdCjH{B~d&8IikLR4_$hfteVq$f99fnYWv@w0KeOEc=SVUOfw2FER|e
z`K2GOBRS6OK8io+A6kM50(Y1&t^_azAux+Zaq52U%)D{625x*;Ozd!5bST}|Fe;^<
z9;%#*EVF``o(0LvaBY)LY2C+g9n#AXacJrrcK`-;NC)T@2DFh>c70;GB`rBrD7;8w
zv(O9fHXdxawL4mLLt*k<Ai|T$(SS=&k_@;7^UzT_{h1WPa7vhvEQt1dpiX6cqBA7T
z(&+ezwi@Th)IoIya#zZSo#s8oW(Cg8$5c?MUCA{^e7D`q**~)7=pVVW`&YINe{z2&
z+<PNEWHyJtQH$KCjlFCsKpuY+2it7Xgtn04STir`ScWChZw&tIvFX9T%lb&omd4^#
z_{t@yJS{G%1ihqY2rO9dT8)~R8o8zb$>zmU9YJZR4a?A~<O|DeCJd|LR&%`Xs-+?|
zw~`y97QY>8!JrnGZg^5h&p-oPRhf%URz)M(fr&6#o<kcn5~4qNx0K*AiM;h{{KZDw
zyxg_JKMQ%&Wr>_1<dy!@*yXr53}paKzPVIic|ne#=?^M`FumPEb7>#5QZANox;T!4
z3VSF$^TLc0v=N4W{Pxf2SvOplJimui{}-|7><a)qrv&oZ$JKFn_6Ku}gr`Z-JH%RX
z{%W0_w$A%GI2n;~?Lv6A+h)#=l_z@@jbL57HopxoCJlmWhkXz@snmT0Av{s*c<jca
zadh+ELeY7`wc3I*iqH=+-T+}S-UX<EJVGFoGhd9d@)0VP8SZ6TqH_HWpUUoP@e+L)
zj|SRoCyH!QSh27=3V42cW{bF<WaA328;iH$fuBoinnbo>bNmudCQ}G{%CB)2j<PQU
zDx75=8f$l@)Rjr7u%_A)!?a4IEU<76wi-0YH$Q5~vZ4)yd!>DWIa-V7@9<FO#!(&3
zA+#hMLOC%bUT)d%WWqC<^?QD0S@LFRXXhwo@SBFpH^g3&qc6t8BZ-{w<zf1X4NW5q
zvV-H*6g5+(s+vt-0%f-mbm3KPC8hV!HK*@g)Vc-KB%r2I%RV`cZxkpoSln7n($Fs>
z7$OUh-xzG{TYjBrY$jSUtxqxnnc}hj{0ioH*2st0Gc;M5fk!@$iKU~VBUWN`PByo$
zEE!sGoi%^zFBvFC@Ics)-O4p&4Sz9Yz=sEwKsp>KoV*yKE)4QNKmkC?HRJ+^6)%YK
zL~=(gX2&%VRk^vl-GYEZU1}FH3XN0^neZVx2PP6V+xe#0ZYd6&0Y?Y<^bQMNhz;5e
zmxY`&;l?cN-O=|#2%PAW0*6+q_1WAXglO^vewtP+^lb2_hV$%k5?72-*AWnQ;Ue;q
zAnGJ=atZ7OkH(wapjHBto6WQ)m~jJHV+(Tnfo+GZOhe=`=_z1Xy(s@FlwzktegpW+
zNA>3<*^g3lCA<6@ccNbYJX?uYIJRZLl)@(+KeXdcANv$_qc01{Kaa9VHo)Nb%09N#
zz)q_?;7OdN0p#!Ub0=}6#@+DzX96nX*|#YS8~^~J1OQ<FA)pK$989f@|CP4ZslIK$
z#)|0G-A&l<uE!tWpo`2N6u<%p1v_I@W!<O6i>`JadjR<UtTf1B1OC-G%N6@Fd}Y?S
zebr2<?U_ZkcLJ7hL|#o<Otv_NGy<tlL$;iF-T!o3Ja#;!t-^|T4|zr}tOh)XV@?-@
zH!Jecw($7z<Vd1W7bR)0nM?(w`CATGA*Ou!tU9}j!|*k+b?5H2je(i85~A0Fg(KCI
zm5&)pnwFLp#M$}LB*1Qh?7eI(+p7{9X*uiyrj=e=tx}x}=I)zPM1n}WwMf~t;-g00
zYu~Jt;G69T9Qiyw|IpBU%`s4MNt<<INvqt#{kr@5Bj;EE%p%0p&~cbbzKuv$nj$iM
zynLrJ;`7i+$D#?kDk=VbK%a4w;-$mQ?Y1`Krn-l0{?cf<tg&95{?z~1)ElBg44?Vf
z0q8?e5K<n1loBqVfxKv6ngw-=iBku*y&yVu#yy-zTGegB5Y|3qo88<!pw$@?+pIQw
z{CW>gp;2yweI4AM&-hO(hyL}${NbyqZ7WCZ-D!o5qB%FRjY|z{ZSZi@kM(URWSHK2
z`MPuySW*temt6Iko9vL$7(vURb(F+kiLvY!zNx0UBgn0xXN3>Qw@DJ#gxvVBOV*!r
zMzMU2{ZD3m+Z(4qkRh-GmO|*9DR^Tc76C4h_Va~=>}aAb*)=9|ysJs!)%L4Z>*EhC
zpFm}U?<&_H{6#50X>Q02J4B%7A5@{sD(NtNMp=G(LmG2XTe5h2v?q@z;9mSP;6;FW
z3Cho8uBk}n3S=*wIY;2=QhJHoh8Ty|t!KxR>>8Amsevpa*IOC*+FhU%Kf!C6g5%D6
zO)~8t4u_AW_#Bvg@Ewf^C5>${#$Oe_2`zYpg)QP**yww>fw9-B*T@<Eh#3eiNLW1*
z$3Ac75Z9jD7#*g<^cAQr<^?n|)6>JD8%xoos$azOl#D?qnYBpC*PHkvauu!YW;Pg{
z1=tE87JGID|0X#^p#HAPrQ9o|#PeY=Iw1NyH1oJJ!WeG0SNAu_1EKN~5wrb9fa)7(
zh`px>K9&6=`QrEd%wz;^0fx&T2mQ7V^5PI2$-6;y41uRSyUck-WEECaQqIJ^WLAt1
z9oLE`9tS&?6iGHXS9KBfl}mM^3sq(CVC#gi<3AkZvI()K{lz~im-P+bJrD8(%yU;O
zt<nT)hX0Y=vn8DPv6i@iaPUW=NHPU;g5J)>T28t)bmQ`azz~U=hzUeMo$Ca7fuw~~
z61HK`0Cdk=ErzVjCVyq(5vpschRHj`ioWT{ZKg5GU|h^=zXsWNV=|)h9CvSN&l;X^
ziJOw7@{mnrB5A2}!=Pt&n_D*Cq?w#a*z^vcx+qd>OgyDXk1xHzD&@AP8Qh3ZvyW)2
zC&jRD7}&}*eIG;5yt~k<ux+J@*C-;epNLda>LtB(`lqB--HB@+T|9h{Q`ap=Me^}U
z;YJ-ey&Op1WI5g_LJK*zS~4f=vwMs+%nQ0NQInB5+7!3O_E-YpZTUz;H^_uygFX?K
zK1~iDC|^0As^FPU2oXF81{kG;BjONr1GuZ-Z3($jCs`D}*^~ioeC+6o`=^zdT`yr+
zCmLyKW7-0ahct(13L^CxjyrEuV$fSiILx=Zn1p!BhHYQ1OnbZ12HG{Nm-ftW%Ri8w
zb?qJpI<C&-`$amSL}Ndi=9*JN7<MV^*hlub8%xNAVtsG4m{at|44^HHiYkiR=bB2m
zfhBI37R)OuNVjFe@RTfTZHSz#1ASSj-I^Bqf`hQDEPq`_4KF#nD@G!7`rjD9oRw+Y
znf8k4lOCh&B7J}cHrwB)vx&7*V6>U)ZVkuDkE4<{G?aG5<5qo67GDD86k`_R>RCwG
z95067uMPVhdm~IprY8tmg6s&lUQ6kOt$*cY%MLar!J+OKSi~7~BD~v>g#uDZOF<5+
zjqN5@(VvnV=7p<2tA^^RoVQy2-z0yXM1>ONj95gG58_<v<`!ptgb!|W+;1}M(R(fu
zA{33q%{?-03+U5`IBlJ|Wh#|l5Fz%l@{kl!@Jdypr%9nQ1-1+m{i*RZu@S|jV%oe3
zL|+cBR^VjjnQq$GGYa8`!1T8;pt>f=%2k;la`=7?4Zu%Wav2CX4pGIsRz-Ldx4g<Y
z+oVua76>Pl%8gFV`0<@MoRCPZeb?wCE6!8}w!%e1xw1;d6OqzWEjO0kZhGvD+navP
z<gck+!}108pZBbWXOlUwzd<U0kbm2={v$SJXJ9lLKWXJphZu0p8E81Q!b=MVW=B5O
zYL?x@9Ha_HdzXg1)fE-5ELTu=mc6iFCCs=T)sTLvi!%~lSJJD<r2mU#Ow^?Dl#;!j
zrnPXLeQl+Q5<d<1*37>!o1)Fxih@l$DUkX%ti^PF9=S`}J*P|uVecZVttjkJLlh(w
zUL?Qi<ADbj+tePEk&2wdc}|S$GXYolCVOd49kgzfd}nYIL98!tB$VV>fP+6yo3z9r
zW754GTW{{=-mp&Ryni02&JAVM^vYHUY|)|CPG`-PhX1xlqKVs;zMJFx;O#b1f=&j*
zmCRW?hwJz87tQoH=3aG!lb{9fRKD?B%yGjVzLH4wzfafSEcgGCtd8|}ix;rAGBP!G
zwEI`iyFCM~jkS%V&EG_KN80~84(Gqa*;yO^O>no@)3y5_kpG=V2Wx8!8(k|yi~j+K
z@!x3t$H@O#+ds+p|MmM!Ep?3z?P>W<9V~Ti?EgPi{$uL@tn$Az)X2hG*TL|APs_gr
zSO3}u0RBh(E&m)t_^*cQ>gyX?82<H(wH>X#qn+J9XAk~{TS5LKM*IKfPkV>IClCIM
zSN@6Z(orT%l>d$R{!{-kTG7POQqM}))WV+D;oqAyHde-=veF`O&{+S3BjLnE1?2&N
zziSNuXoUQ`+yKEFv!s8&;!{>qQAl0wkBYjnwziR$j)9@Nj<Jr0k+G?{xt*1*lar~j
zy``;-wUd*LslB~}y{((0i<_H+ox78(tBbR{yNA7-zpZDOr<0$DhrhR1sH;zqr*Eix
zaJ-+JTY#r;fLEx$k5{C>M?#3FzrVk4Kv-aCWSGBySYUWWNI+y{WKd9SP-J32RBA*-
zTx3*gaBO-+Y(hj_dQ6~Se0WfNcz8y1Kx$-Ud}Lg5bXr<;Ok7M<W^7=3d}Km=LPBC%
zQfg9SYFb)CLRw;4dP-t?T6$z+PIPKvd}2;wdR{_iNqTZldPZJiZbe2;K}LRAR!L=g
zVNGUfU0!lTeo}m4dVF3+dTB;%Sw>o3W?oKaX<1fYaZYkUUS?H6d|7^GT|shfVOniT
zT0vfZenDArNpV4Gd1+yO$-gdTW##$BH3jAM`IRkYg|+1sb=5VMg*8ouHLaDk^%eDP
z6>VL$MftUbW%U&Wbrt0;)rBopC3O{bEfuv5HRY`}MQwHE-EHOdb@g?PZOtw94Xs`6
zjdg8}ZJjL*U0q$}O}+JvJq_)B4V|MM&3$bh{q5bOjlB~cy#pQn;~hhDeNE-Pjg5Wn
z4gH;Mqn!<--K~9{{R7=&qaA&Ny&dDdO=JBXQzIR-Lmj=nz5RpZ10$2;1ASwIW0Rx(
z6B84CgR=wU^8=HsBg0E$lk+1}E0Z%*gEQ;nvkT+%>ys-R^Mk$f;{)@PqbrjGtK(yH
zQ}eTvD+{y3i!<YEGlT2%6Wc4(b93|a3+wYMo9l~nYYXces|)LE>r>M^6N|f3tGiPx
zC-d{W^Xq$yTPN#Fd+Qr}E88cVyPL~92aCI>8#@OZ2j|--SKG%oTc<bsixay`^E=C1
zd+Q5(8|x>V3n$wfdmDQ@+b1X6`-i*hCp(L0`x{p$+czg0dwYBPhiChzmuH9jr-!GP
zrw1437yB1?=a;ufHxK8xkC%_HS1<2(7st1kw=WOp_xBI?kFU?KPY>@OFOLr|PcL5|
z4_{wjzj^Se004YbF+n~>m$gezIEO!rnPlxYqRqxBxp2790_bT>JASD(E+ZCbrA_xw
z3l&30`EvC2TR1NK_~>$udX0@G<|wbKxB1Y(qdCJZ<sqU@R0+4KFOFF~k+KK0v67%>
z;b6Y8s<eEHbrxbtR1#~)Ct03vHI*+gYDuFpCu2!l!=2ym+uxsG-S6Gco9^4pHxvlV
z38=ElylOy(VE@rT!HnYVt65@ejAoeVQ#-SOoD$ZRWfjBBgQB42uOXtB5P?#Vo281F
znv$Q58RwOwgGS{GbK?=m&+(Hx^L&HseEl*|mn2;Ys;LpMbm$@44;!!WY5Fo<RX=8m
z{vruOPQ1Xa1bHUJt@*)3G=cwh+yU9I^I-&!FesZaY;7fIo}RrD%7E}4(;oz^%TX==
z1Sd@`GIa9t+SxqT&2`srSqI-x%N1`^H_b%d|3RF9i8(r64yXr<GtWFvHoNWrCcpO1
zK~GM%oT<35Of-MHBXj{dP_WBjN`IfY<AyOM&34nWQ*?Hi0H!Zp`Y3op^el;HGH0p|
z#|!vAr>|5qn=)F`v#86AgN}fj+eB+;VC!)j)ym_LBkipN9)l*Q)R901&`E0d6zA2L
zkVv<!88hC|)yM<6l{};7&{eo-(h@)N5d|z9U1xUje0p}YG*F`YOsXLDSz`{uc@INX
zCEL}+4qBswg^wsMQYnT7(lRwrnhicLzOqyTaF{^xk%{`;B?q@7Jiv&zTp~5&IeqZK
z&x;Nk?htOYxwI60NiyTMIOw_>l;sDTE!Ba_lxIB2s$)0DDdB*jJHn(;T9TiP<mnQ>
z^1E500WGff6J&gq^5p}GYqT$lC$&~opDLhG6pgCvI}h1mUvm_{pG!qyE~g;ZZ;X|Y
zsmM*1bE*w~iY-G5A@5<`#bHaN8v}c9<Jmq5<{1;6ql%W|xw3%@<YL;2GTCzj>yl%J
z3VTsrgw3ooK0J-?rphw7aihRhib7*+#2T2mu%d(tP6d;*_qm2ido}ek36P;>WkLz*
z-pz_S2y@yy83l23#YbVV$xLPx-iHR9=o=@G!U&m$^0Q~n0*DwD4Tkt^$c)KTB7#Z~
zf^hL=b5mu>u{2#V%YXUsVNqBc-O3)h4HbgjfD0-qh1vniI+8$src=J*L0IxvJ~UZ0
zi#8zKAi*Q>u@Wxc6^JE}yj)wc>vH+4`IBSN$teU|TBFwhNuxuS>eUJfGLMz*<>2_5
zV8{75kOFiUH|`16Z-v3awpu}SkH_<6(Z-nR=)pA&hA}`(LKJ*YR-48^FN~E!DsXD9
zuP8|Su0&u2dctpP${QA=_s<(U6!lrO!d1$1{U2U==1U3q&*nJN=;6Ts6kut>bXK<K
z%;LC7*HsiLxD{nLa~V$zG?_3_Q>*&j7AYr7bLYwR3B(DElrGGoWlGs6B-wW_{Eq0_
zD&=!<ALZ8EcvA#Z5jS3s6*0&<Jw}vwD^Vz$1x;V`2gsloMki6jm=$2j%fNV%D9j0z
z`60>@Jd%R!24>2oEr=wqRgC8qm7uCm<BG{+3P_Q7H>c1fCN`sZj8<ICjtJ5)%B0cA
zzoN&ENW``oxVy?h^YilYt$wVF4q)a9BnV_g3k#4D<&L}~i3S=ET$2&uXB9^xz>CD=
z^NMZ={^*5p6}#lWCAJ(J9qG@2rw~+_q+4eGL8!=-&x?Vp62N~f&@f4+BZ?s&q=7Gg
zY&<1Ej)f+yG5Wy9T51*&pb?I~dpt$VgAo<LU7+DDWh~Sh0!d8)EU=5I9uW@BR$@TT
zj+yp)13L+wdo=TU->|`?W(f?Wj&hivVa8T37C=ZY0c>VaIpS+oT#<`vxD2xbNuj_`
z&}wZ^((A$nJrUtcGV-O%(PIsMVZ=Qq;G3KqJS6O+JW9+OHnV)nXHIGAUa7OX=rgLb
zxIn<+ZY@lR2w(}OHrr}KsC~8;fN-LFLqAweXH^XpRg|0m*&SqEr5Bl_12Kh_I|{g&
zbqi1%wE0Q{a!FKz)W-`e;(K?5WS`JcTPP>Y=`oWnO*EUBJ~x@4YvkH4PG53}Q<sv3
z=`{T_zsjsWX|E)!?=6)52KsG{m5F)!#{hWad4Fr`coVIh273_^XWpbjy<Dh#zM+5F
za=Nj>#3u5HT+$TJoXu?31mP6H^guR$Hg2)tfj*K2@5MI!$act~s)QoDD$ru~v;fQe
z*qNEWvR!8WIir}-1e86a2!3c?oxw>mY+=5EU=W!-TiA_93P~O}!a58DIW>%hGueBl
ztEiXcE=0C5O1DT^UepUiQ;N{bG&5VY;F&y)Ubx@J${|-4PsZ1a*B7z}G5$7W+{V)$
zqs!K5#WsMhHE6J=d;EZ77m)*pw8RO?I5VI>*C_?^2h!BCW<j_4ijV`VCY>((o;>kj
zkuASx5*-_kW&m(qh|_ND4LBA{*@$l8C?C$L-J>%SVjj4Wib~#hNSaU2=mYMl-wgAX
zx7KCOG}~f8zBU)HHJoEAO6Vj3uNXFlbuiLyqyUhn)Nf0XSZN&tNYJzObD+6j{jvml
zHtAN2&@-D6EKJ%!6stXO8aGU`3krf@YfBN#zIZ`^Qt%RscDBrzKhaKCPN-XGF{@|J
zjKsjb@cZzHzT_tDg`=w70)Pi{^pfr+CRq3GWd(&uJ@^sJy{)_HW@kkaoqIT$->aAD
zygp6?W{p{-(XErA>euuVk&@4^V3Y;XYK~Ur?|u*r9mJ<iSzS8J*T|}subDe88g~V&
z=S^|d108K#^ppkru@3wL=cL8+4BT^z17e!HkRkC0wF-FUi<YkGQzM*ui=umN`O1_y
zw&xY^he-j`mW_&z>W(v$tWU9n<s3^e(U<eBzXN?bOic5oCi)Qz2w#gZg1%|@-Gqe|
zC^MoD%%uCz(y^`JrnJ*MdSRewesFe+!OLPo4v(Mx7$^_}TGRyHCG3&{RWsfJ&|ApA
zM0@DGF)v&3OS9`jj45T4SI{e3+^bhU!8tg>A(Zo+@VuJz4gDO5?qJkX6&WWr1M;zJ
z&SwTR%qmmz8k*ccYP>g!L`wD)Y62WMT;7VIg@-RUvdjQ2elusONu)XeQ2Z^L7~3=o
zHz%keFd2|5YT$f2bp!JnSsuV`mn*M-o4!6#!(vp6zBN7v8mki!OIu}|XP2j~`C8Se
z%*Kr6XT_4Z6$x;|yg>%1ndAA3?YXHll}V@0=haAqqk%b+PhsWhp7@`_Xjyc7aN*_N
z{Tc4YjXa4cpTNj)?Bkd{B%g59vETqbFxwc3$nwEGe>e)X2quTp1?X7SpJ;fPvdtjS
z3uG}o!U$>bO_Y*-#>36vK<OtrTM_s^cQKb#;4ve;Ja%TzgdM{0;>0P@rNpQo>2Psn
zUFr#gy&``;;y^mvU62a{HtMI*w~#?gSoFCE-Teqq&v9c16>eE0hSiyD*)>w)1>Sg#
zthw=$XN={4t?f!*7wB+u<8C8^?j%D1#pJEGBee+$e+K1&NPY_#zWx6E4YPZDYej)=
zQYn85g#Tv%C>aWf3a!sYk;b1k)%Q-BG+xIxDjVtNrDLM^_(4dPE=Ep-|B}7n=Y;r?
z1iYf)H+fSDS_>y+4>2`okg!(b2{sC+SFm8;x=hrE*qG7vb%H3dT`4Fl2ZDq6>{QYx
za_Er^=cpxu^5c_+7-WtDDfrKb>cwT0X&jEM<teT%#8+rO-sjhbN(5>71exsE{4qKp
zPaB3!oZ^1TwTshj#KuOio<lw#=nMVLNhq#)w|G%d!S|nFP5K;(glIiA)sy{3iUUZR
z*A)RZ-#j%w)3t?`zT^G?4T{-K^62hRE~gx!wIPMxq;9s4qjL80fe5am0LzdZp|9U}
z5Q#O1?4?)y7vh3|PirlPuNQ`Qo~{-{X|xZMi}FFBpn95Rj-Sh|G3Iv>P<7mj<)M&p
zj(T&4gc{evq>D4J)z?9!na{1jW6#yRpgK9DBPMza#ee$V4OM?=17v0SdW(?&E8f0&
zmcVaJ2sw4;KG(GH82&1Fzz*!0MJmMtLn8_Xv<r{3>B?|fywdn{^zbH?-ZOlg=j`Q5
z_XP{i3m#yEIzQJ2=5j+fRP4+s)KrVKO+hnkTc_r}<${4ex;iOQ{NjzLgf)IHL7n)7
z#v^^FI^*IC<B*DeoCkMDvtK!e^2e*705<@mSXk@b^Z;S@e0?lfQdAtXHyGo`Fg4cy
zh$Y2b3CaU-`83|A#Z0-qG6QnvaDHg~tmHdrF!IJ0*TOiRH`O|ARL#ALno_`$pFh9s
z*Nad+)@&m^Pst2u)A#hWx{Q~{J#DWu1A4RTTOC$VXr(#c(GyXO<3`M>d!S2vZNFp9
z`J>CwnIoI7K^y8@ncF!I;W<sQz`df6B^y3G2;YcUhHB=AQ9{S&OK3;(26Sp=OA27X
zbh`=ieIHzzuJUZVggpSZa_p@5dOBkI3CZh*AW+u$L|Khi66v|%_uFkB@7Wl?b#n{D
z;X5Rv8$7m$jF_WG+VeoFbu()vy93|TVYg32B?mvo8P%(0%xATfauZ=@4u?Rw1a6=9
zH^`sP3qyQG#G>Tj0MbA`A6bMFKEAeh3L=7jAXvb`B+l+{h_V5UvG~i%eHJEXWo*i`
z)}63tP;>p_KW?+U8~cvgUjv`6uuDUo-gjPi`w&H)^v%sfpNT>Ma*Lj8Ey;Ae>~P%{
z`E=a3bg0c$xt^A|uL@?~X1#iU|71^!Fihf%Po2SN)FGN_T*}4{rQq>ze(9c7a-mkE
zWlXAyxNg+6%t8&m|JB%8N5!#hdw8%g!QCM^1b2tv?(Xhx!7aE;a3?syU4y$j4DJpA
z0>R;N*1hND+}v~4dwc$=Ueo)xYI>?ycUA3g@27s7`DaULkufTg?@G0`1si^059D1Z
zO=eA@b)_;Xex1!a3VmoQOvuk%&5l=IZ>D{pimkU@M~xse(mX$f(k@k-wLt=#?DN3w
zZ5wc<f&dEawr9S`-=7PtGZiqt_Uvowc`3B-^9msY4`vTVHCZO499)#Ff53Elt$zEg
zH_Ig^735c5;mO37USCmCf|BA_Gm9s`sPcG3yW0pq(WcU?t&1m$eiRZg1wt9c8c{Yu
z^>F&kg%>4S^3&Mar51QVcTNQmPJh-`(g*}smb4b5ZxtGcEKmUKwO*_eVL0t)hK8=5
z<Cm#J=9|5cviSjax$~drbcGm!_O6Z51O&bIdL?KKlpkp93V2c4&_D3qn>g@;lhYMK
zKaz!S`=PucYjdj(#FIaWCt4F(8`vT;EmNr5<nCwByh0V8Wkn;FP3T6fVsAs|x(Sxr
z^pYsy*uSqq0ub&KcT)MYuEAqssoN%F->BkPsrx4>5_aC`%>sZ;{Po+We&!uCkZ@TK
zWAgglKh`GuWjeWyqv88kW&*O|qmuZ+mNo)G%!atE=`k^Q><=9*2u&R9>>t!dhsoR|
z3Z?g*_=)d!o%}x2mKna_rYl8~>|9X;F$FS+x&z}6ByCl}Ql5_G;5gAB#^Wj0960gF
ziMeF4j@BGf@XRu_LIAX#)Bxd?KD1jwd^x}pBu_ryVs${{A!z2-ZNHupKx{PjWCWak
zI|+je<H9qBo+G}FL9Bm}`;mcDUHU0N;AYa?+S%NA(u(;80gAm8Fju#4Lv1nFB!SYh
z%2&F8zYsSddni7lTNMPv(%GVKUAN2rfhNF1<`_87gPO6<1*y+pDBp1&DM7<lLLF@U
z2|)w7S1GrFUm~G#lTUz!aPw5am?m1-*2<Ekj(C4pkUvZ-ASfE~mIpmXW?=VWwZ!7P
zS6kn9l#U4y3!moOm`@@SzY~A0ASFg?@5clS?F-j8@q)Cn+B$fCs<kd(IKtJrI3rsX
zRlsTYzi#=dQ|-lFX>K^f^>0^CY(9F?xTrXEmJXdkj!J{)5Q^w{<Gn6?o7`Zhe1xZo
zpT4bcu~$g-NksPRp%{~vE6uNO6&ZT*IG&vg@l!OuPZR|dt9;mQW*@baLCZc=!v>Rl
z8>6z_njKqQSSbr>4!^o5AhdOE_xYSkq!WDv3<^GWFv@Wd*9yP@*J^wM7GB;Az9Xup
zCzOoOPmjMNU%hq^CbgYAGEvFIF9=J))Poa$Tq#<px%Yq-pm0$1!JaBZM_&Sw!mz!0
zv4{~%<ID9<u$|J*x4Ip<+Os!o&ja#qmod>R{_soJI|dAbQ1P3CvyVm2*4A_k?C7vw
zY0_o<6Rc8;qMYNH(qqA<o-fEB2c3<tUHJH%-#;Ms3QMjEaVdGy$d3$D5(dehFBu&q
z)H*c3B|X8d$A;)2k4w_dwhCD^T5r`)gmyKRl8!1X0yGGYqYQyF2DUF_nMN>1w`v6>
zcI_r*i21W-msV6efvE-SP@CJLmaSD5)@Zlbh3Pvg&GA>#Tp$(`YFP%44f+9UT<Pg&
zCf}$j^pb<-=Cc}%Wto&;r&d1QmD6^Jrr$*@d7%K!C}1|cLK_w>^7rEms@bvFu91~t
z0Jvv_=#8*0Ip`wM^6|xDC&Q0jBbt0qjAr&Mtl;~ZYwIQ+u-8NDnd#@kqV(OnG0|1G
zZ&G1G-cQI=(Q+<dglf?kg|P<^+=4JiW_qS_%(#%SWZ*oeCln?)i$r@+?YZg^z{4*g
zY2*BxeR}3{EWN?hH$U3mEU^y0L62Q*wI-7m4mRoUr>(GV=H@oHO)Q|JPQYr2Gq67l
z3Yf{enBJ;=&=5%N<EWOFwW6pP{U9MVy)Sxc5|d<~vhra7M$``jhfNc9u;=MZOy;-d
z{n!+bl_Fy4=O_|>6+aT?{I_su6#$beNpnS(qJ?!zd9b%xZaY?!+2y(iPlsBBhOJg!
z+c2H5_JJ@uLdKx>W_yImB>>fCUPeDJ6rXyJfA9d}hrOM-Jq(0?IOuVrPd*YvWb?in
zz=L%FIMeYrZEba{LL}6bj$URZQ_M4Q9a%^k3IVt{+Ps#paC2oxB4!%qnNz)`;oa34
z!q)UMzV0h6o~w1qm)|dc<lORg(eD6`)(u!gD``D?cm?B;sXFLqvD}ZLyrvlqli!UG
zNjz;Cwco9izN0{=9^M(Gskdhk6xg@6%|yTV9hCFsO#|VjjH<mOU_tej^WvFKbJD7E
zsh3-vVQhCpMhMp|)x(fV(L0bu@H%-=(L|@()*?8c?|7uj5vN%g4E79+EWYS_X<{Mh
zLy2CoD=Jk1PmJt=Qfo>UY3;T=yJWgcfh&xqZ>xTJ8x$H=1&F8>`?$`Qq;TzxuzwLO
zw*0*;fwfBbuF+zUwmeW+rb6YDNV^2Auf4&T$O=9Ba>s;r>G;Q$%9~Gt5CVr*{ns^+
za;fIoj{^2Hz$z=l$L~9F`j2m)BG#&j+Uh?XS02TGaNlnto%Xn>&!(5-DvXmXz+7sN
zc#$h<hnd6IH^+LV-`~3Hzkro!|9E_v5+9^+cgL4;yA31iq252w9&~!p%)Dq0%+jWT
zc`S%qZGW>(p4D0H{)6+9;!q)Wc>BfKHun4XpFC&FEZ|9}xIIt{;CB+dqDyh?x_B${
z`w@;$xn(n2xwP2Oq|>vd+RpE1D(rt^>ZzytxbE#(Dv43GB=05Z-&>>YZk3^WUC?)6
z$eS{c6fUQOCh5wg^y13VRCQ3^m8yTvI_4faH9OAVvI4U)_qQc~!<X?6eji6D8tBaV
z2w7h|7*_HYD+5-J_8m-!Lf*4G*11r2Z6{7hTF!>Bn`Mc+*N_pAmX(Vgs_2<MLtP|`
zEq*?`r-<$7uDf6Ui?{y+P@uKjUaJaw$0JbPud1KhxWCUfCX?@qATJB*P12Zgr+u}?
zg-{P4sysSdg{a*o*77#v-j?KWVh`_rNEEbFk91-a$9VHT2d!L3O_9jq<^eh*y%Wbm
za{23Y|Me|URdXg7nc;Z@t3_%#cQM;03Q@Wd?AQ)>$ET{;j}eV`ma-I3q;_Q|ZqvHx
zeQ9|v@d?Oqg}sz3SVf5Q(8E_{buwks?0pIy5^R|-P61K2rD+vXr*3vYq`^k_-1WSM
zj~{L|)mw<{2L;YRa6_@~L{|s3;&5>7A+{yOi+tgZ1q;2Ft~Hg+1h)M{X(%kLSunF=
z3N0hl9m9)u6hESGbGg+JHtT{iQs^BmeKXD{kG&a-+CIg;6$Xr#9kHD~<SL#thdXn2
z8WkovB<fU(Q1n^a=RSc%&jIm9l<(uy<&u?p=IF+EDy73JFssxa)Kr)aFj?y%7PXHZ
zvsdD%?hRsrwpzs)w;kyf%5+0i3wAZ~S_M|g(k<Gl%1bKT!fTSQcu<9u93r)9Ex|vZ
z?9}$yrOpEaG`6v&J76Z>)K&uho=c_zGaJgj+y(O5F<q15_q>4sjfs>)dtY^x3<c%K
z{}95yvj}sKr+jqLG!#{S%^lH|6`g>s#+6*pO(nO6lySM=|6W>l>e8Ci{S%qHfG4p5
zVqsq3!Vd_BMOiAe7>>SB!Mb<`V(30{ZZRrIo$lbD(RN|zFrDbniAaW){dw#|#GxrF
ztNa5E%Ly_uYs5||NI_Ma)(l=!km!P6azTsZmQ5<fSUyeTb%VEGi9o9#N>vuIUDaSk
zpfd&12_BNLkb8c%;(qO$kbP7Unw%v<<2zB#jai}c?4>XB>`HRWUjz9SbHbYiVNK;Q
ztWlu3gyE(@KXJO3iDAKT*XG@mzlKqOl<~!TR-M6O1K7iY#(j&KWn5N_%nuZD;0<>O
z)@$LrKdEFCw_(z*-o3%~e)Lp1Sa0x!@P!bu;$i#dqh@4-j&QrMP&Jm(4^3bmh!vx7
zokG*U{{u(kGgbN+vDxWT<!l|1HD~sMraS%sg~2=1DxRp5uTMN{FHNZB8a3RR2NP?S
z2}>NVEKGN9$9^V|j})9S--YaqUfSw|o$#0FlV^v|SY6nrQN9n@F85S->hL_f%DWq(
zH|x1?H1vPLrFK^&$gUiT9Pjm9c9n2b<fbyP+XjJTBQQ?xkhQji<Dd!R=XezQEb8jk
z%{#E;+0X7V$D@XIJa6}|k#a`co+%$t@^8CMe<q5TaAd9KHdc>LjjnB;_#1*6$qO(9
zJx~`qp%mQhl)IC1x3Gyo;&%#4?`z51m63p$l3-5mTVVx_EG3saV`jrOZeUWEbQ`Ko
zP1&08U>cW~==a6QQgRqaa#{tvN<|2JS|;tg<#QOogp*Bk)90=P`i+sqZp^lPnwg-F
ztkz99UM@FHNEUncVcGQvz&@joAK{N&h)Tzi%RB|g&|#a8jj1Z^><O$Zm6FB5z7n7^
zDaXLPLlG?vY8PYh7Rt;OQV8Msj8@wuyQ#MT1#2;5<CU-&l>?K=@~k!yg9z)Qd{=5~
zo&es^pn|fK<LXnC)Uj4)gq%GA>e+8hf&p`33s(+Xycyv|l)QBfjcjdSCkOM=l>wY{
z9%R{_pW+Jge<82ZuZ2~WknJIBQNJOxEXd}|9^g(r9hbr~`Bt-08mDhy115=K6N6?|
zO9sz@*C4W7LY$~Z1D-&fe|h|QV~>dz8C>~xoY(q{+^#<uImae(yYJhZ<{coG(sRv=
z%64)jz<TouN@~)H_C$et-3Cd=InYe1BXro1#J-wl=)7CjxxnJKBq+XC`2yIfZst>d
z;7DfE;es5EY7jz#ymkoWe!#D&i2X9XNhtVa>9Nd-?Z`2H^^ocjG9oa^C=@w8felU}
z4KtHEd7G0q-m`0;8GsjHq>YWuCDruvD#N}xW8!{-tL1TWlS`oKo;vtRxMRe`W1$PL
zJA5AimJTbQYRAviT`X|SZ52$y?ifW$B?P%V&;WLh=GvkWT*v5*LWooc0$@6aH)z>n
z*z*se`$a(3xe2tb69Z7ds2;iyDbHEVTSW>h(d-o_{ms*+Od}oYIEjRy9`3DWv^Ah$
z`~Xky{S8D&0FANvw%ObaPa3f&Cs&#@^NR{m1CGO6<m)Hi&&r)!_1|n9wCa2+6CqoR
z$_JdY8rRvfiRC(yDC@zMRi|a<Qy^w$_7;I#)tW<oyB{4-<Tqy1i^|gYj@4uHNiuL6
zZ_AA4VOTC&#=nxR8s)1L;l3vT!~QwQN{yPl2r8)jCh0ripPT{uoS2W{5pj835OHU>
zI@kv!owi$)c+FC!NeO+GkzcN9!{wTUh1dhO)FM}CR{r%NM4bY6{qQ355QZXHmdl^Q
zlib%XAh5gA`aHlo*<naxa`OYWyVzrUX~elu$B=`+Jx7ad@zc{r0a4+SoHM7sTqrs8
zK49~*sUICOVk1Vb0z{^|@ze!|I2Bq47kR<yROSN*1+J@91h8OZx8wGEMmsg+>FeuU
z^B!(B&&85Z2FxJ95yDL*5dyUJPkz9fLx>GrU1OX@xAXPefa^otpJvwB{Ume+gN3L&
zJ+)3^gp^+%{VHmF5~T67kA&ZS*wKT_Mzg3}Gv$axqV(E-K=4R$M`7toE{-c=xsq&P
z<?1_7I#%_P@{m`gn^wS&RiIy-iyqcy>I^xmAGa#DXyq*BOx=%XZ{DIT_86apcOLl?
z{Hj@xTT+vDe!~<wM`y>cSF_@$CPjlOYqLH9av89i-p8@Q00Ajt4&vj{PhuEtN66yz
zKIH1Jpt_P8>qW#Itu*+B^9YR(Iahd{n>Q!Iocc;8AO>*5&E~~k?UQu~@V&h~lusKg
z+7?KYht!k+y(t4!2{m~C(Hmg}3vM+kLi3I^LHh#miuvESp#OI-`ri$;Jn%@-bVdhO
zYC^2YkP-6#^L&-tmxy6PI#9LJA3@3h2@zT03PFAUKLeKj6<^~=o}r5N`hA`y008@X
zmXV#U^S@(gPIXotmz&Vrzbo0-F@IwcdE#uCUF06(3aiB}I$W}uSv%n;r8JNMhXY8~
zWSgz$)6YZr<x_?yyw`9vu4F<L>E(pJwSTr3_ZvQbXJ();!+;q$RV&&GvQ$rLd5w5;
zp1<86^L(hg*uK-#WnQPCBXApy5|S=BWun^DgUv6&!aC9**>moUB{bw$2<_u<fxs|G
zlZ3xqf#6NDK)$3armaZ*F^w`|tYgsEN*ED*EjB;uZV{7b@p=p^ITrCyR&g#3*)YL>
zY!FELJ|_h#a4n0qUr`idAXT<#%%XAVcF^MH!COp;xzn~EvyW#|JL`A@P}&tZW809K
zz}|~8*H`5BBi0-bfw8h2hji+*N}sXvG6{Je%v_UEuhm1asV<A%LaE(aMRGEH9G=?Z
z&TKPy?sL;U%MBF4JigQgUGeZP=~rHvp3G#kNE7))zqj)6jWd?lcutwySrx|Fj>L=;
z)veSZ9kiy@{@0aImJKWJPJ`_*$C=TKL}K9}{sG3FNDa3{9p7*F&Zp51p?jk{2Bzuq
zM97&|!PF$m<5!ED9ERGa;TOjg(p9PyJ#0w^^7v=rX*JPJ`-wH+85Iy;5I>p80kfVb
z)dzP<@pJX;fteWZP^P5s+L{$}RvppgF#0!$e~?ayfw*>RQ@Tm@PbJYp&5-wm<K%Pt
z-oWzieB;x{bxtkQX(qrx;p!4dW2||f=+cvd4`WXVM8kl0oQ^n#Ks38<QR?dA=~y%(
zQfLx%Hc9=k@_0m<R-PoL4)`4BXd+PLkTnk=_XSc|oqxfo^4>9A?y)5t*Gt#VV%6Hy
z+~l*;CgKtlXf+U+memkMSt&>euGM_z-5k6Rb6>niml9Nv5c3s5M)jp;N}CT(JjQd6
zRQh(F$y&2^X;k`rf?SwmF=#;K+<yozC7cgyu|~ms!W;OA`iV?|JLzK|WhtcY26fjr
z6aDN;2{-&16n>{+CG%YzuB+o>5$5?xSTiCj5jKI01FyO_9Ks^B)}3k)X(=c~1Q4gp
z@z$)xk=qiR2_ipx+%Ds838e0X^|`gcte#MWvNCv(_s;Sd^@OIjh|W$i7`!J14%aw@
zYp#?lB&eY~P*Fl+a59@R-tI{qe>gyim-I%zJqo<et5%_dXH^aM$m3Q~5uT1Vd~2bN
zvM~Q-yc_ha-RTh!%mK9L#%26uDLJ7ms|P|xlSq;B7wP69%W5$=&S25IZl%ll3DO^A
zY^e{y8m2tZ1sh@|(fi7+J!6>#m*W?iqX|<*&$><9AID4PXsx7UiKEM`8+vw9=gZlb
zvXmjy1tN=a7|yfJ2jYV)!+5QP%>!rRf+KsrmcEr=Z>0gsllrMpvlL~AB+hv$eWh#4
zM%aqQs58Y$PE4+&;5uRTq!`HQzOHUt<w|m?_4R5&PKqcuI%M0da3-Po-VnWuweo2E
z+H%#;i}&#*p?T-xw_7*21{~Q%cq~{rvJKqbM!34P6r%a?ow$(wYW1=}z+?>^$$ThJ
z+^PB1aX@2foe-o-X#Yuj7K#O(0WQvyd+X>fa2jpfvfl6Vy&xV8*|#m>L1wu#t+Ax}
zI1J{9Ak8GSO^(k=`d}Aj?=<h_vclr0)W2>;ZF$uiPX*)(kr#M)sST?(=M=<`k3|LY
zryMsZ;~$6Y-^@I=f8CMU$L2Pwc9{6~J+=5AtYSa!j$UdLVM&lAI@dvx;fUE4y&<lp
z7igMbFd_`|Q(jKuG=I^RaV{NSbn8Z4d}|%_6(dBqDCbLUa1400{R@~;jW`;vqPjFv
zNp{Q6v;l9G2vSIQ%uQ>aeSt%lMiAdAW?y|KF07>N6vtfr_!}iuJ<ZJPOs$I&<<t6$
z5k>Ra>e(pA=yk60bsr|&DMQ-4w_#0X2Fyj4Ta$VyVNh}lku*tQUpP+5<P=XE@B(^b
z`b`Bb_*EFOTX)?Z?{$4VU<O%qVm)&jx#LFb3$`!hd1u8FiC;Hnv^=CZ2q_sC^f6)!
zS7jX1vSoZZoh_Yl-};+}6UoiGNEefJ7p|kjwYb)A;%;b|ykLLx2!z2f>X87=j$omP
zP2wMax4QMY*?4HZc>+u+z)6j0Z2PcTVLdV?K2{t|u7BWDEPgKoA^ZIk%bvSBT0%`v
z@vywfEQ)rsK9$H%nyu=aVmIa801u!maG*!=>O}j+4Rv9n;WGlAul=3b{$(Y?+`^Z8
zE@eGW)EJ5ox5pp7MlRDVW)yTl^R~I8%&a=kRiRP7fD~Tdgs703iwPCBpQSp_kM*3W
z6_ugsH+&znyf@+rt6*ghtgBY#-&wcT!<?SIA-E{OPZ53(sv?tA92gDUIl;iJS1$h`
zq@YeTMd&%o(QJ04?&T0+8fTXq?7Xi{bkRom1EZ6)8rC6qh0SJ%QHDgj8DYS5n~F@%
zfX^%nPf3!&P6!lEU@$R0OPdfPxCNBJfW`hA3O2V-qnvIlrCbs1oeE(P{5kzvdm2wz
z%W&|mRU)M}+ZP`sqa(v~1<&?~UgZebY)1C<s4xi#Hdcz|(GgdTz4Bu`sdPRq`)JzM
z&aNdZ&E*oF>QtoQ(bf?<WwmBCakpYc1VpE4J}0BN@_}G1k*>^B1F)ZxF7eC^_j9tJ
zI#S)qLd27CX;*iUk)aOgbgl*5Q41*S$z<4U?-_wPqYP3X?|@d$F7X6z-rDr%*Hf9=
zDQXJ!P*U}U_##8N?}c^ji}Q;mqQC4dsYGP9Uw~v+P6)h4l}4O#GKY@2_4^XY^pKBs
zi6h2?3>7LHk?w2RoC|MiH@6VzWYZ}Qcgym|-(B55MXpI4hE))=f~<8XizlXzCU&H4
zE|97%Xjd%hCP{-8A%_fAxD9w1#PA#gNX?d2ua>;>;9HXhm(e6YJ4Xik<-{-m0@9jl
zeTp!TBigj|cAoBu-_2t-YwPW7-xGhp6yZp(*s{a)hDcNM5cPbPCGhXf3?$wmuU$3f
zS%KUYJh;Nyw~qjWl|VU&3%~8|JQjNYkrSCnGI8J|d+(A>#`?DUEdSA0CW54S&b|_X
zrGUFG$%wFl1J|tWUAleXO@SMxsP+MH%c>D<0mQS>o})!`@e{nFmf9$jW&DM}0LP7z
ztETf64>uLVK%x7D&Lk|B^saQlm$!RUHuQp9>tJCmhK5*s8Ml>?HBh7-v70fWWf~#Q
zj|%q)jEDi>fRBQKUX_0JpcDWfMC*-hVysS6!h$4<7h(5l)vmoJNLE`6BQeg^xETy)
zs`n=n0yb|AI8!9jY#WXzp@=b}5egt1x_z7J;8bgrR9_^nZp=cWzo2~03xit!3$P1M
zjcE{l_71My6=OMdhCi?))l+<rbqNybw$c7Yv5tB%+=v<L7R@bw!n72=W!Pn%+x1Mj
zcIk<$KDWAfSLGhfx;IO^bb{PK4@tVOc5pGX|E?7&PTNJJ&*S2*g<!iVf?e;(!Kb}s
z=(f+e``Fj(>yVw723q)>3h|4-cuu!S9l^su=_9G0x~l3t+fZW`(<tG!TgXx0Y>Q}W
znMs0SlH0Qcp0d3PH@~j{m})C4YxCTXHZ6@A%WNa}$^eUSaO|0>_~q@PnHPV7#EJ28
zkf${3M1c=i`0+~psav%_N*4$g?NoK-{@jH=r|rRGW*L_7!60?*qKm=P0t=W*i?ipL
z91K!CT9f=%w@Ip2ZXD9(ie+VlVS6KMsYE)k4A(dSxVwM$cxTV!ROBVxP5tf>inQ6u
z%)g<j_6LwKQ;4(4I339ol9Qw&%X$*f_l)*q`DrjJbDOt%K5M5x8Am*X>f)1x?n~>u
zP}eF1=W6m}Gdm6lmry@#Qy0*jm23XNuT6Z0hg^ftJZ--k+hv90#g69rCZr89l)FEP
zZ}^;6^_%U@VG+@HedxI!At^fx1U%?=_Dy<$*~br<_oYT}A(WoZW0%0tRYS!yPs6pp
zPd4Av`cBcD3>`Uy7m<JNsT;ce`CT38uY?uUrMK8Hs|t77?GlP0+hQ0&xvt1NvT|%x
zDo15zmrF|^VM~uMah5<Jai&ZlF>g1QkSSq%lUDStyW054s0mcE6G@V(x2b<A%6vpK
zR@_>TeVvZ~R9im>UCx{o{(g+tZ1cp|!$cQWyfXZyZ}#qwOlbeA5Ad(agYI^@v*K%X
zJ{;7)>jRiL8~hP{AC)j<yUc(T{M{QyU`&O$-i^c>iZ(nq1dSF2^ME#IsCrD5Smks0
z=SD;kT9qxd;?0PcJD+jE=*EQ@6>J_qHo+mClwJ-vex|-4p40Ak4-->dZFFlka~G6Y
zNEPZzpXwB#lHQC{!5<2>R!x1Tv<xKrtg0VsB0NVZ2Aew5OL3Gqpg6eRdTwnagJikP
zW?QR%h$_jJ4u3g?ylcI6B$}MH1t;)U=S{$84gr#7mD>)Hk0))U1+xjoJrB9wEoj?#
z*BxT_`JD9YmYvnuj_8U~dC*{|4-8mK+3-B@5e_Xn*nRVuJuLFap@XSk#2sp)?QseY
z`MOBu#FGX%bo5_9x$JmP?>mD&Vq#y2KB!-KcRYW#YbTFr?fNLt#!^F}>i-_)5$4?$
z0pBOcebtsGWN7$xFJ^P>?ZwrBxv1E&?Wc+BOP^F|=8g9GBTR+}hKlpK0nr2=$zT>=
zxf5pK;q)}qB`?=C0>UhZ$Q#d(NDNK7N?PNC)?ONcKX`THoFy<yIY2ZueN<W|S}cb6
zFB5RJ>UuMEF#Rn<oJml+jaTx5y~-rzt!q`7A|i6}q0kEWEzf$T*OAiXGBfdo*Y0pM
zwM5fYV-#FEh*aF%5Vbi)@=4MAQa8d&wN?6-!`g+gEIP(SIB9kAa|P)#8w;_EMN70T
z$g(H89Sa%F4!v~Bml)41`X^Y`-AVYiB|FML6!@$-&bm27pKgS7d>vu^ZPCkDW(0q*
zC*<|}i5j7s^H8bIBb?f2KR621aOmwl`8%)XU{VLK-E&iCy^cFDa5TU_SEl%5g8R$<
ztW)u)*PkUQ{+h$@59;NY$-FlIkAf6`iv3gCzh7eHsDBarU(o9HzW80@_e^%bB$8f#
z>aV<Zzx(|TApi2id}U<*iX;E-`8x*o%X5VGm6Z82Vc{zj_RI6{37TJ?_jLb_<@}Y8
z`t{HKPFDRvNc}P<`oGcn4_@k@mHr^6ewp>(DE*b6`e&U#7@uF3|2I0nc&dL^`OmSn
z^fxO1#aI2a*nf5jli|NF(l6fX|EnVNH!8pQt3Or#p1}Hbc>?}M<sW#g|Nm$j{u|N1
z(pi6Y?q3yZe&@4(bq<{IpJ}aMz4`k^uwN?MO8>DW_PgWn55QlJg!-?y&A%Uq@={Q*
U*#ZCnl-JL<*Ce4ShJPIW4=mBEI{*Lx

delta 24672
zcmY(p1yCMM&^7wt5L^NT2=4Cg8r<F8B|vak+zIaP?(XjH?(V^z+`Qj+|9k82nyoqA
z+uc<=HQPILcFw23&c?wI6{H~`F+d<#5Qx`BD;7~4=0B+Hq80DXKon2OfC2Fzu4Q2P
zpI(50<Nwu(;>8%z{s;f(_soa}1^Zuu_!vgf|FIr3aQ}avo{T6^|0gHQ|N7Oh&{2Z{
z{}UpE(A)W|02KrxDFuPPfIuK8XLlP@Cwezqn@e5I_;q$PpKbkIC99_>G)YMk%O#f5
zO;Y-Hc9*(u$A;NTC~%UIRQ_WA`HDUtd!#~tP^c7#BfqK-Vzz;?;^=eW!1%dtciX&g
zu|ygnLm_)x8$5b4I>ekqm4|#@1NvLI^`B4CfM-aO^t9g-y<;3ALJjJECh|W1DBi$R
z#`BDP-VVOsO2jopjo%HQ%atN5MCz&DVVAk;4ThS={6(bZWYjLaU0Ukx(XGGOUD~($
zwDqW-CQGw1Y3DLC{k)=7eWPs+;(noY6a)GAy}>8{YUB^Lq1_LMmQ6btV0{)OR-Vh2
zJslF6_T{3$%Mk4)a{O2DOh`kWn+0M;?!l%YLfV*wyK1bzNxiS4@gfM}ODB#%H4e$1
zyJ{|uIbz<>iowLo)%VuPcGrV4cMecB&8rFfyJ+YIknJ;7gJPSuB<Ai^=19z7vmrB8
zc_aZ_m^X*8A(-0IWcfP;cyI3OtTf#g#}AI}yIQE@>2Xzx%9l-@gUx0m#e?=LVocmX
zwRJWfjW>i8!Pr%aF?E6wYcMW8Y8=AtUhAM#t*atlrZXkmiwquEfSrjlN4D#h2E!R9
z(Mj4Lw-=FODd{IBr}8S=E57{9cOH`##k)o0oN>tAACA6mVJaL2_&(FwUvmG#LDKAK
zf8f{RjMm+}XBOOtJiKgsqMm&C>a4sW8Zm&#pgtf1DL;#+MwH+93LSRxC=IfXbF-6*
zmSo3S)EIqZB?KFYg2aS=lik;dT-cm;3c6+=2zU-qpc44`Z&6_6NcFOHp|$d0Ufjhu
zyG!|_`7w`iHQb5<Uv$_N;f-x_l3{HHOHHN;Z%+)?#5qw0qD)A<5Je-J_3#Kt*31JH
zI~AygH3zBcFFtNdlAiI6yvPkN<pM81D2VKCUSyb~e<!`b1@u70dTRLvbb=78pizuY
zO7Y^YXtoEj?S7YSIuT>!lU;ovd->`WcCmJmn|U|bB#MXt0kOH7m;Ggw!UcD!SqXDN
z(lO6QpA^!V#FfM-ReZ$^?t}Iukw0R-8b(iGS+W@6<yOatUhoqu2VRTsx5HsSc{=+$
zci(#n6v|w_%n?D%p>5hrDnfr@g7*P8nb{_m?jYCL#1UP?HrhYTwMP=4DoSXX4^4r5
zhfXCBB0=&4M9j>GaKyIsMNxZ-D;_J7UQ*e|sOsW;>nuy5mg1O$;=Jd6SB5M@XJ6C%
z5zw5#2|=cGIjxzIj@kP{l4!yBB^(P6X!;RU&BsK9)rJxhI!VrnW&Ims1_vU<#M1-)
zL=7ooD57{1a3qW&46Vhw!V8ra{}D+9No|O=UlopkA1odjBZZ18tO!c~N$nF>uC`04
zW}1A5B)A&sXb^3$kfbjOcmx3;wJ4bJJu<SIw8*HErgEOp2^J**hp191j?Re@PMK|N
zjqIViu>h8dbT?#r@XP7@QV2sKeynOL^PeRv)uM&QV)e8*exECI@1*)W@}X=O$8O9x
z(bIE4w<Q?toS`3vK1>gh9G=Byd)=+{88H@@+%EuKkMI{lL1MvX!PBFNcHW``pV1Cj
zWuQzYxtf`)GrKfmeDG>RBF*55-A*U@pRyJIIl5Edh#hD*KcQt0(z6S2<&**Is6*Is
zgYn=p;6C>YPFGorASxSVIP=~coQW685Jn#`tY#x>QLZYd#2Wwp#n8f_!QV|b`Lbm6
zvRtE5A&}ZbL;DXx-JKUod`+BIw9J}s3V3o_a!rH>2eD*=ZUq~2uB9<%&r4hQkKxwT
z(^$gf1d$<nO(JB3l5seLs8Uz%GAgy|3H-v=Y{%P@Hw>16w+nvjlPtTxAiwhGwJ|;5
z`1P2Oc?=a@p|KP}|3@D|)5|b;YdiD(1+Eo4A@M#)$mPd=Y3<}*DXq63V-d}7(uF!3
zA)}(6y$at!&7N(4-Hz#Fb<X=VB>us;psh*c%5>Fh{fv7IE6j`#Ss#<DGRe>a^FH<6
z+J>*cM8Z)Dz#<aZOe+)E4@;6ba0i9}+lyj^eNr4a?;7QboZ`6X+S-80;yGt>|GvBm
zwtF>e85qaA>jxqgmdkgUy*iOJ-F+@EEfWZ*DZd#zkZ?KN7u@D|n4Y5c?~h!TR*+h+
z6BA5oFEUMqV=#v7Op)_55sKK<2iUf1Z?oYg$;GpHr0*2y7Sp9J7#;*a6Jf0Y$)kX`
z8qN2zk(jw4j3}W$u`(_C+=0HsW931D5+Ck-!J-ftZ3OOeJXXa6m^Z~)gh3Lu!&t*+
z0g~+QgY7X12Qe<FPzX;)jYS?yp&m|Ri{W@MfxQ%w!r3Qt3#mM<r?8f(t}t9<W^{j(
z&&3&k6TM^N{#D+AhSje)<<~I+)<#CXlI($je8SSNX0Z6$yxu3cR07ojayn6XA!Vsk
z5=$QCG$dyE>8nGe+a!V2>(@<BRd>c6=UxVBYU=n+?gSeMCfk&rg+(IA3@Uzy^}<v0
z%HQnRU8r#PGY8L0&nxkUE8FR3b>(~H8Bg4-IsvXjQLvd1XX{k(KjsX8_T<z)!~S`x
z%&}IbX)!5J7{&0NdoWh5bzegBgHFd3cBbq!=?+dr_aU`7td38Et{P#40mRpB#1W-I
z%0dbjxCc?PgYO|N$9X0~uV?M4l7I0y)jq;B)-7LxzW;r#J*zS+p)M>WS=3!0{Ob+z
z^|%#L1?$O6(|i#@C9l~IfLI)CKVOEOi~j@}pUla<<y|Bny~!M2l-hiE)-lg|OCk9>
z_NaC9?*8(r6|jG7b<V@-(`Db3bJewocd<2{ds(A8N_HyT7T%kqGvUliiJ!(08h?xL
z;>AC%zZ#Q}pGO5VRhQMF3UWaE#l_R5LHHbGC#A%31EC22SE^_NP-Se&nsSOl`s6hK
zIiYp?7Wyuxdb&^+SNq_cHKoE;f%&H!ZjU8}-r9Em#Qk5%ra!ePjmmTPh8o%EexA32
zNp&f5kt5qqPAGL9i>FokvU!W7*0t)zcZso9@x&~XN#Ve(Yj}TPHRjFyQ?xymQ1YY>
zJ?hMIY6@xM7fM_yu#Mj+Fj>Uj9l#)~1lP1jItKpoYgWEJSE%nVNq`vQ^BuzXOdU%n
zi;#YRxR?%6eQWp(uXOContZ2)X>l64x6vec7Yu#X<xd`4*HecDmznNP9N(hjQID-(
zIVw>QQ<o*3q1vob{7+QBnVu+*7cHuSmTsksC9JO?{tg*s15=Rejg%EpEH)*z=Z+z#
zyfy4whx0uo;9Fy-X63p@pMKHuN4uw589Fa=Mi+Fh&>ztLDs5u1o}aec>_mZ5M=zuz
zM9qZ7<(QGVFR_B#6m7dSw9FXptLwW~^q3hPc=K;sOGhE_@;nh-=U@8ShP#ZQZsqty
z*AXUOw`TAu0qb%5udT?Uuh&f5l@`GcW8NYzt|Lf~-gzpn-aUvbjS_EzDXm!ZaW}yy
z>D66!KmM+3KjZ)9^lZjjqP|01<FL@@XaF?d;l9%zx6-0$F6XA-)x%v&+k1;VA#N^5
zUIot&YwLJJ+&u(v=_XnomA+7~Oe${IeBjhv8vf0R2c&R#*YVa}mIw<X>WVdoz4v|V
z%`3r%>+!y{lx@I(%k2aU_ftP*`{$cy!YAF56DJrPb$UI^R7=;fu4En9rEvUKvleBz
zusFt-Sp7}_(=r^sF`U0xB~k8e*swO7|BLlyY1T?sD?ibc3%l}bYqZ3934UcheEu(I
zUaiZUdjMCW+_F)eX55ici^h>4dg&*h)-aa%c?(3tRp(8Kbi<l%PGdU!4BO0<D)M-p
zX)<M_|E<nlhR*Amb*dIoXNSW_S7CfgU%?gzITm}+sHCir&iU=o_os?q2~0fXBPAnV
zyeijcxgM^DC0pN-RsDupgdRLPA1i38D~)TFs{viTXU&eshAoVuf8nRrEJ4=yYnAHE
zX2Y~5Dkl8+W%V8<Q}hUntJVQ$Up;N>X{v3r=B$%3eK4!}syTvQf@BRp*JO6TbUrrx
zs^H@zU#c3}=+z6;j9!fNDcwZ73tqCvt&|@H*T1oIG%hhcM^E1N#s3~L`&$ocAvx=T
z57^xxcA{d^7RzdUVddugp;nvQ8y)k#Av3le>LYZYEx<k9`bYcw#63xn3Ft7nNWWZV
zpw)v~`ZX>3tWdg3Bfk15^+3R5cSFgW`K&rQncp1EUcB^rtELal17HVMqK31XZuy%1
zgEkwJyM+YzQRWy`Y60o4J`p7b&FLe3AWlh)whKx%j-jwNBdE(TB<ny!<04O=v#^?}
zPDr`t&RBUZHGpsx`~8vb5DEHqC~%}q-#0&Q04o=|*6T3~A46^g242|gGqS5!Q>|i%
zc+4zJ`ryq1Ue~yGzgpLz=7c7(I68|;zW}Mo)g=`bn_8@%TyErEXU#&ma?V@?kX^Tz
znqTT^xRPS4RJz@!h3^|><MS|1YbyR4-c)?(VRlNPe)k+z>TVQGbDyEeD(3W`gS&BB
zmYn(5v?<E8BCg$ov@TEOv?iFN5-&~_DlS>+|6IKP<uE_&&y|{GorI%UzQ2gF^iaAg
z`s)9$IA~_vzyC|gT|EaliO*vEci*|`_K94D4<}{+_C}%bK!px&xP)6?=|Ns!D{PdN
zRl}oPbfYm24WZVdb|K3|vAqwC?kIXv07Ag;VjeGvl4U6T%ZgQES_m*Ll3Z`$PVb1e
zgw@ZE*7u$-RpzVL>Rabl7AxalXGPsDE<A3E5V5S1Xeoga2Uz;)(@k6G?T9+`D=?O}
z3#(Q&@#T+DaN}X{8}7)H@ytxqXH3L36ee%rf*%<e1+@$($$Qwa4IPv-o$Z6YrPQ%a
zp>-XdcW9BoQ*6sGjm(eeYw&uR-eSoOXUX`qR=LNTVaoA$)!9+wg?RomPce2fzre$2
z>!rR2&BIm$GM{@$59{~JOB_rm+Q+yLxQ|C<i8pH^u;;j8L=|^XsL6r*jlnn-a*8a$
z=`%3ck8Z^FqtWj+iq~PcPf(VU*Anc+4QwMAadvOyxXe5x-4O_0;F^8HMLCUP1@}g9
zN*4{7u|bWaC23EHrtF%I0Xi;85$Z#O7BNl*i_4tAKIiyI)zwzEan_;lG-Hlz1g=TC
z$!g3w`{b`;)uHu8(qmSA{kupOF_QmQc?xJPvTYgrod|oR-{_LFNWO#;Y=>pv7xY6L
zOf!+@jtvNWc>J-2EpD^O|A1QD?={hLyR3LIw#@fqOFv(2_m<MLXgMHMOXM)K*MBw$
zLCXNHYaEOpq*GWYS;9G=jHY26AyUbz2VVr%$GXvq>GZ;=iKAhoh@(r;Lmz0sXI8+7
zRIq4QYYKGL=`&kY+m_Wo@S+ulaat_W1vKIX-jCvE9bz+E4Xrf9vS_03ypB`u<-dh!
z%+*VW!K0XKF~cZ7gqDn9kws+oQB-kJ-u?tE?_dHOlrU$CZ6`DDl~Xl17G?%VD-!yn
zdXhLjnPEL~p}t(iq{vBY$4D|@*+(I|jn0zY7HscRw2lZMx>SULQAlh1F?RCn(QpRO
zp%q#{%q!{5k|PrTp79f9fsBvLCa7+Za_fofqE{YLau-EtS%A7JRDY<PhJ7vFG${r&
z7U!*6K?NJ&rq;_7vN&A*n3mFyeRV#c(b&Sl#dDVfuhPv{dKF{P-!1Vui9bVlo>cOA
z_DoM|P{BhwdCL1G`#Ae!R3;a)7%~g<(&~mH)anTerM$d`lgF=5afQi-xA>!rKC%o(
z#kp<{Xgz=apfaT3f&zJARFwD<CvpR)!@cdfugY`m1FF@?(_I0Cd6zV-<hXSa#tnp_
z&2hIR&9}ZvmZ4cui{J32p%JzyjNV8R(n(fZ<odxRC-L>syk<g>%!p%V*}|~x@abxM
z3u*+A646q$N1Sd*r$mBPTXFZH2AUzjOJKnx^M)yYyfaF|dFapd1>`|yN>c$xd=5)`
zJra!9G^lTu5((lqU;4jpFH$W?@`wu)7{o;U#9mOMZ}l`mXE04^GF;cEz4Nizj1~{L
z*|gx#mZvaoeGuFBPH<?r^s|hI6&bm{ZHclLsZYEwo?HKBz^XH1(rQT#_ZQ~>P)z?z
z_e@9JuIYn=K$K9x|Ikh#TT^Gl|Ja_Wg!SL^j3~j^?%|XU>6}xgQHy3lfhbsnGj^yO
zm3W?OIA}a8Q)W+>Kjk(rz{03GK918T1dQcf)SqN8H~rX!M?0hYN1g<k2ZMMoKdwWf
zdzZSYw=WiMD6vthG?slEgdmbU=v8r;gC2c~$rKl00TEK$9+dG=D<OI+6WRFMnSzaF
z;m@r%b8BsXh3zN9>_Dk(6#8)Rs9C7Pi@wIpDv59wNH&D82z^B2@I0LF`pOXPO$7;U
z7&w1M?=|Ru=V8eH#d<B^s@AvesfBYyDlP2I^!=>7p1iDv#(z6x-s}}`#hqkCT;L{l
z7*!ZT1-76S@dj?dBuEEICHpC-@@|?%s!e3<!RRY^Mtog8A``cfo|SK*%sHIq;CC$X
zJq_4W>fFSqZwImj{iW5~-f5{3^@r6I@Wpd^qFe<6(|_690d{xmybo$4w&jZq2AGG6
zzbYIskJlSQo8baD=^WyYdW@x5Cgyna7g29lfdS*r(yo{(jLLvopm<AAEK0e+RUy%r
z>zu1`Ka%&mtxwN4N%%O^U6*=I@pc1<ztdmJR}N0=$cNf$xs%-U?JQMAdQ>PXc{~6#
zF%fwzrZh2C#CrFtCK@z-R$2M9rem@g3a0|~H2o7dmhy`Wv=pchZ0b5L^38|S={|o;
zfXXRRFYjha!YLjzt;wbSX6P%~W9}~kFp>;To1v1{gDF%`{ZZ@ZdB0lefiK#~EroH)
zlUOemyDd-sD6-RUO&>c+FuF8rEfFD09JFGYU{RP@7VfGg6`AY1#+S+C@qw0EaumGI
z0a+CU9+%4MpHTnzOa#0%7ebPu|II=g5D4Kv=F!yI+0xGZf4Ij+Ep4YYZWJGZZsLB=
zJ~GQWMoI4Agrp=$=pQV__I-MS6m?4^qeSm-^>K(4A<}VcCt<zGx|f&h_GJ3r?qP$o
zER>Uqdg^Bsjbo@IC?xde%ZVXBkDr|m$0zmGIWuoj(olh5ON2Q*YsO&wS&93$g~^M@
zUu3FvVKPpe3AE6gtcK|5G3Co?)!BC3rmKlqy@&I^OzmXmD%7wd21obqAr~vOx;r{5
z+S<z{L=u$w-%83ZPM6D2epZfj#n25=Sua?bFJ1tLl==rW%dFHKGy)Y9-K}F^O$3HF
z1Z}*X67+#4>GrCau_Km{!8Pkd-RqCPnfmu$IlfU$r4?5xroyg}W15FWdVjrKR5z1u
ze~$8{q-Ew=A0F`Ej!d|I;s4NSZ=s}k=lQeh^;CDBoXzh|Pwve+JcvRp#bPm?n&G!K
z!zhH&V{$lDf)RdtGM3aA6wDK8kbO^u{@TA6ZJY$)IeqJe7hRuP%QU|FUWU~8o-*D(
zJEYX8xWT<%<dpA5`E;~pnXe|mK<{eb$VzXW9Ui{uMZEK8ac|(2(w@StrCHAAYto$<
zd{nPn@gMQay^0(OACe(sw8qq*PAWwhln*Ot%Jbr}Lyq+|PNxrbbK0TuFy$Av-Od^o
z3YVIIXJw9kn+GJgFodGSEEKXdvdItYKnnzhBKb^b>KG|tsLvG4l!v}6xZb<jDRAQh
z#C8zf{O3ZrEQLt;4@IX}&P+@;PYHX(5sDl>3Nfz2(>l>aZ`*5EWc3YX9&Dbr*-D@#
zC0Ru#wV06RXk9mnjB1O--edwiA+wq-M>#T(cB1wx5*>*oMaABUxwu@YK+rmd0$Vn`
zwNwJ{mMAP`b<yumiF#$$pAv_0a453oXF^R(#g~Z@#zwdvm>ksaeiPW`r})N2W?t}f
zNU_Suj>0DAqotBm90}w1{pY6+D2g#S6U0t#u8I~ue$2ckeSSIscVXXyp;SbWJWCKz
z>fCBDd!<$zMA3aY($fF-yQGGhKcF5A!#2{G{E2Z2c}I@$Std?e96BD%%FgihPsG%&
z3nckwf!$K*T|H*944pvTPSq!z6m%L3*AG(*rN^Z>>4JzTQYKi1gS`Q8s!}e_#V>K9
zv~<4fZunc*B##K&ka8&+zn~&c_`|IMQA^A7mAWK}!8pZ<z(2XeW4868$i8X$tTxcc
z$NYKS^%E`w*=X$!_qJ|6rk-TptC%I;e?}2Pxx=BMLeY1j5_G(yVI3jgd%~jM$50ET
z2Nvu!R%KjR2Jk&tizTm8!jq1$;E@NNx&1k`tlDOUP7A@d_V{q5%;TwRDys#67m24s
z-?}vka*G;g91Ke$t4{wnj#mRXQ{7EtbdCMr**;gPSuw%Y3<<yD!tiTG;0<$f?!_9&
zBk?Oviihmx9(KMBY$x$pWv}UoBl{5>jj9<$&Lub(%qGP|^QKFtCGqH3uCM2u*W}W8
zr(wh5jD9CXU1>~3FtjhGNyO3wYPHI@a?1}Te^wbp{{G%91dH6>Y8|geN_1na+(nal
zO^DL>5m?z7FJO{sn~)~)x3Yr)P6STS`|C`!3NF9y+RC|v-I1$Ikxavd*QrpUwR4wN
z#&`)4y$`s}&%gbl%OZqY{n>_*nlGN5p$?SBzo3|{;KWJOlvaa_Cq+}f0Qw>$F?DvK
zEtat)nOITc9}R?e7eo=k3v&wL#OvYLNfA4eIm_q^R?>Hhv-xEtNmcf5s{!u0ErEY<
zF_g}Iimj9Pl@^+u)I4BBc|_y~(Xl-v<H*=o&1OBsVOf`TSNGQ>q#GrhX?CaRt+0}#
z{3&EzUr|*}%uj2LGXA(H0g16858F&E_NYDU<U5ZXTf{l0NEF#ZshFBjWBLJh`6#Sc
zeaoCo((5U<;CNfuQVolS0U@@q^%yzVH<(4VU-^}mz~#VaeM4O0ZdJmTgk0_3Rzkea
zE?;0XGuv9t2rPKuU(ep`o-7e5P1fQM%_kyfDZI(`k~)YR^IPjY0VQkbYod?2u-d3l
zoM^qqyq=Fcq3xEYz>r`i+*ag?6*5;{aH?6(*V@0KMTC+Lx817?ZuzZ=I{a*Ye@3w$
zoN*{OorRrz8D5%r))n4v71A^EXNGx`T8H<>U$KYc(RkPqDd!j^gf{2YDYtldsVxUx
z@loOGo1U3_CZ)EBflRDEhmE_&Pofq1zXtX=iAnYXGdG$x-yfCEumu=O1B>v2Zl><4
zL|*z(`#8LBLbiiiuDQ#!39QwgyoWsQ82<0i*_?uU;v+l=#P0+G{p&!+_IA#ucFzC%
zBkkOAz2)oYcJYpd`Rh2wFDIMQT34X%oO8-9qsY2h_RSoISP0G<%>bkj_rdEO-=%>J
zip!%^EVBE3U}e5k>o5hzpFtxCe!EUUVQ3J=h!r>+p;f<CqM6b*LE`M7`1bbE=&kp5
zb1QG3dX0|t#CtSER5a)EE%8q^)SSva!b2XW)0*)Ql-YdBfjo*${0K(bLJz?GDhq$S
z0rmx31#@}A-7<`#uB>J+Ggj>5jKun=qhWZq<)02!cr@s(rs_rvzHXlLz$hGtp&$b;
zOh9iXLY1GjA341L+M;XjwZq!JS(RV<&46P+!U*4je)^Y#@1jAU<x;xb7_L!R*`9KT
z`wv#6w-j|X#5jwoG9%WK3jj4=D9mbuXfM%Qgk?Id`BIg`etmpA_y>}-jpNk@xZ>ZI
z57q}Le6{b=H&Z2Jhooh^vi+IK=8>lV7D;dlh|P-@&UklR!+d&U{70fjS;nr(b?uZ6
zEK&6iv2(uFr=XB1i7{E0VfAnnGH|-#7#6eLM3;|;$N5a20irbKc;GnIRyau1x$Ik2
zqyqQ6a>#z@&s3_R>MX`ytxAM-g<v7~78<KD?wzdWn6Enx-(kIBc|Aq{Jco4P%Ax73
zBA_|Ap&80y&|~;&Ci0~m2VnNB(Nf>Ys)sh|K<<8WNX*(K#u6Qqk{nVimb;`Tec!L^
z8^!UW6ljXpvGH6%8~_fr<N52%#=X>97_6E@krZYsG-D`~l42mEsS1y1le@|BGzD0Y
zwYv=^DYa&1vlRyh^ur^I8qE&5CGhuEj@Kfzmb86r7PI+!Fjx@{(S^-3rfNh*+hR1m
zn0vRJMg&kt`eMF*Yqa}jTG#{c1@B=0ZRMB;ZEMgOEQjiltO0O@`TnZ9koS$|B&Z&R
zPLy3ZqvWukdI#leVhxx+l!cK@;0olLIr*xi!nfgwK240(>HSfOJ+`FVpq{2C@TFI_
zU|uc{qKV5Wrfs3jdz2>^_!R#09A|qxVk*8uHp|nUXyHAF{MoSaRD-UD&mcQSszr6b
zYAFr-$jSy*l@b79QQUP*4ONmSoUGudq>lDeJRQUR^tXzqlIQ>sM?ETfiAQk?dvHx_
z@5b*L(7Jd<(qqZX1#FUhinPBNF%x;#8ehZInSGlrM|$)r(W(|z4BNPQC;#wC@0GEJ
z`);e*!8ld@YImM5f`Q*x0|BR>OpwO}<)AzbcmV^vRbzlSgncpHnj~B9cvfyW!8o#X
zauwT1{FXDlZVkN0Y*{VwHLu8_IREKe$X+E}4f8Kel$;-+@+N7y$?5ZsPrKYDLkjEx
zBD#_l)+uXlOL>f~Qr9Utq3v?x7t3>vw1=zH7cGsdrr(9SAs-7`8e8_?$EgMeR{z;t
z4f5;lTmd>-0vF%Ij#(Y}@kylj!g-78pu>Hn`&%<v+U^VDqUHO|!LQ<`Ti_@bqxnCa
zT1_BmLo}&0NLG^w9sG0_pjf{$-p9T%?$8!x&0*}9Y4uRk3gazlx9y3JuuNy*J_Ikt
zVzLYhCsK=XMir202=bnX1b;G24~!a6I+4*@CIPe_Y7Nr`D#%%wb%~e_&U3A;u_&<0
zoAfHfXS**Stlibr?#tW;=Ctfrtxw-W%d&U5@g{*(c-I+B90v@<;x|wse?6C^3kC;v
zZzQu#>W^OhGsE&s8<397gRuw6jRY;}4S{VVW{BQ!PHse6G`QcLS}>C)X*ePkEqUky
zGGNd1FmLD7W*-}kIyK~!m1x&=K6z)SsI%V6o_~N5rObb7!^n2idRD>VI~by!XuY4@
zI#Xg)>UoIQ-Hg-y*G4ZlJTa1-bg#~TGNUd`1dt@f<ke-V(|``#Ye?pmY+QGQMH0YH
zgDV769WuE{Ivzds{3N0!oOc$=^4+o#1DKbSeh-U0*pRA@U39U9K=`9MA(}y3u5Dr$
zzpUOTixi7D#}bAXVc&|{4hOaguH3f=3O!ZnsY1IctpVZ;1i68OD-I17XA#(F5;Nb=
zx7GiAJkCD3UcZ6m1z<~!i(OhWmwtO^N_?+9nb{WLS1O^Bg^+s^#JOXo{UWt$2&kBr
zFrR_zv>IrIUJ&lp)+_Rs9R_&7x*`l4Q*m=H3+N6%)N?3FBnz~?_qM*L@1LEwymD7{
zJ(A;3|GsgH95&{?lI6`J*uTM!9(LPEce}vfziCl_6WA<g!#(Hxd-F0ddyKqtoZK;>
zxBva&3j~8ZMf<ql^)d3Ppnan{I$%EBxb?GAoemA!iyp(d29+Zs_~35BJ#rTGx_3c@
z%L9+_>u1|>JfVh+Vo$CYvF8Y<yV04W(M{ku?e-7EQ@K{*J@@(kS6@jZEMB=(X4?ZM
z*?mc>AY-R13bJTJeym13WhqAU2V1e|8guh73Cc~8lwi`kXav;(-!mu7GJr+eNu^3|
zGX3s8I4=D`g&AlP7>+?-qE>9N5&j??S{P){f4oOQQl_JSk8I^CPfTGoFm__<*=U<y
zLRZZ+rWdg9<!ZVBm$0t3ur0pdk`X>(xn_FHX&ci$ILxIE;hm6tn}`xq`#@j{_m^1j
z2fs+f8yfF9xpqc*PES>L1QN}=X6Iz_Q5Ajh=W*c2aH;tGXe{e~&PNM@BFvSsv7&2)
z&7V#i^CvwN$HQcKTA8<na_L$Wtk)D1I%0(vphBdQP)6ypblxVs3(WS+<adm-s0A&Z
z$&*WZ!>Ocwvh&BqFf&=S3G2fHSF%}iIlS>v_<8$6?p`%tf6gf#0~|b?cH;Jh_oAAy
zX}0W477I@?_tOV*N;mY$mXjh>bELu45hg$D*^PJ^B}AP9NL?Y4?zMnoy7sscd8!1`
zb8I*;MFK+*w07sxS*Bhk{jJZh*z-j({t9}>`nHkbMKK?$a0hn1p>5h%XjX=Y$fNsm
zR1}jdQcNPQ)P3$DpkG#HYCx{o1&+p}gjBLXg8Bd+q8iCGcRUPMv5dE>lYGhL@)mA5
z4_ryTQX#iVj!F({4u1k!ijEvVf7|^xM|%c|&CMVBNX~iGfn__0sz#q4Zy{ujy-O$^
z>yV*W>p;t$+>-(D<ploJ42>Txkklrja<l?!+kJbeNZLfu0IqUw_n)Hy;=abtTzDn#
zl3QJr--eYmmlxsnC@Dyc*=Q+P<+xL?%D%6CNnMf5%ox(th=E|kd)fxB=k_+a=*wYZ
zrU#iCcD}-_b$o#$;_?-~_au-JdQp5a#C2~>aK6(J+dseEKhl|@)#UwHJ8FX4pHtHp
zB$2DQ&NOzh1m;|o-%QyTzxda9`Cf`Cp65vZo-{D{S<^U8KEBvFoYuKoYDNMHHdBT{
z<J6^#3H!sfEznP4FCN6e5oQ4KxEIWo66qzz_!TBLPP=jZiHNut<BWN!eA;ypTR^w-
zO)2W`&RcAVfn0O@<5F47XMa1d21l3t78#bDT1T|J763XX<!=+oTug1_yUVHi5tO2u
ztGinB%M`_Fz7?jBA$249ezBv0IjN@XIhzz0vwIl05>jheJJ#SoHNeRi9CH4%_vm(W
zFJP>2Sf8$~%&^?LFfH&i(RTHB#McVuj84H>8`cVBflH`_C;e+4PcRb!+IcQM95V()
z2%>tieqiHbj!|1`Q(Kdvl55m7@q+Ui$=G(J@A9f(NzAcr(qSEPWcj?^yXWVQT&qx@
zHt#dd569#wSlgS$NoYZ>;lrH_Tj2}T1B4cjIw1&*H{%I{M-q-Exu*dw&p2FtYr^k+
z)IW#0`97xL^V$J5kBb&h!sEBN+$V7oPY6hvd0-o!(A5~@5++97GEH{wroM<P!P)EO
zTI2mm;FgN;3Pt;sb)Z?}p>6ZHJh&rZ_-%Ao>cle32ifD^VSA22)$=z*_wp{_U-Ckt
z^{PIMW`=XtPPE9QVHgxzP_O=7UyiL7krX8Qp-802&=I(l5+1@C*WU@J_J&Lg*-Ldm
z1_<h}!Z$t+1$!l$<FPMGCT=xf)CAuWQ{dgw9Xd_wuIu<DakqnUds?({xmvU}{+V$u
zfB$zK%sAI83tVSRXQeLzmxMg*nLi8eXfiVNti>x^zcn_q=i7BIS}^dzWz{CgSe|jQ
zG^5YSAMFXhmOd{tF#P{~EXx0!`I9l`=zKpR0)bA5;&GUS00@wRjEb0!x~8s~levzz
zxxS@^nT45+v)wOyYiAEfYfBd=8+SK%JGWrxUw)3>L5?0_9$o=}_iqoMcrV|7Fw`?R
zF2c>o&(+c2!#U8)GtAQ^%)>JlunO`F2=(_&ivhwz!~KHd{6o?LBjN+2(!zsdBO((b
zqf(=iA|imel-S^axS+`R@WA-Uh|~!Gw5W)L$oS;A$oPMfke-;Dl#rT{o)DLwkd~2}
zl%AdumXx2IR*;dCk&s&upIe@ho1c+imR(w$U0Rk_(om2bo|_n-mz0^8o|u=BUXq+q
zmYGnRm0p{bmY12ApIKUwnOm2gTb&bCl9ygz3}od0lY+9sl7fQLin4;dvcj^8(t`5x
z@`8f8{PKUTwX(RTq^P~TqOQE6wW7A7sJ_0SuA`!^p`yN{wlJ^0sI<PKpsu2#ts=jz
zvZAq|uCDT5Yi+5jYp5w`sI6#hDQ~aIZ>z89Y^`djudi=tYiw<7Z0%@ktpA6Aj<$xb
zuCDBwzMSgbvgX0&s-F7B-nxd7hPJ-?&au|U{?6vH_Kv>x&e6uM`KF%suAYwSzQK;Z
z;f|4|?zyd|$^Fimy`GA!zS{Jjs=T4*(!R#J-iChx4Sk*M<BfHr9Sx&hZHpacvz=|d
zU42tMm3_Sp1HGO7BkkjTjblK6$5LO_(n#yhWc%S_*Fb-N-{9EbNdLgd#Mofp$k6D-
zX#d2-MDO6-!1!GM#Om1O+{o1G<lMyg-11Cc@66Ej-1xxU<k;F||Lo-K!tBKS%GBoE
z;M)Ae?Ck9P;@aZs;==02+Tz^m(#rbk;`;h}@6^ud^1;&F{=)kH{1$M!wz)U6b+fg*
zv9@=zdVF`VGPbv|e6u~dv$=P&v2(RMb+of|u(x@>JAbynadEPJvp;=%vbz6Ij!utG
zjt)=HPY?GlP7g0GE_ROp?4RErUq7E;{W-XKJbZY+xVgW$f4zA9xVt#GxjcWpK76`8
zzq`A;eSEopd4GAl1KwU9K0iPI?Vtbt{hJNr9|r>A=SzwTskp6OdLwJ#9;ceG|H7e2
z);*5o_~|J*x)&4LGb9YAz2kAe;4-_9e`<>TEthF>Y)V*dKcj9|>)W?n$xV!FIgc^U
z_SM00)>X1u^wlX!r2-VI%Ulht;84cg6qTm5aU&dLn36zkJfH?T_uAcVfZ%Re5E8Aa
zdT9hR(yYr~&*$#V=lacOn<Kjm%<kqA*Ag@bDggTd5d%$#D2U_B3M${w@ik83T|)eH
zW&IpqIlx_l;fL6DH)ll%%SMI=JxiGJe*rK7SJ%ml=t(Ybw<E0Pc*x7it138i>v=@z
z9K#*;rNZB{K-Oe*J|FIZfKRPC#2HA2CVbDFfRFtcq3{}P{Cs9wN2|45%3i!d{Kw%N
zQBoyA?K%!oxs?-?(rcC<^=4F(=M%wN@#}TTD66JjL)dTTi9&tZmB=+*1VIV;1l_Zg
z^~$H5tZ<U&?X1#2J_u{V9z{iy8yv@xF4;?uSHn@Zz~z=&#>ex8W(MKZSr|Fyb6Vne
ziHYaGHg}!FP3UHFcXQQ<k%!r}N2L+HLuKp)g*Pyo!LJaDzCR4Ms=P_*{Qn!63MSC5
zwpBYO$Y0hXzP@}bjxz1`HAd_oCo&6(-CvPqQ!f^j5R;6mrjJFU120I+aAIUjd+oq*
z><A0!*9?v#L8|>!G>Y8G4AA2lGKbdSPGS95$7f@n7U;2XWsb}yz;+(uDmE9YL}H9q
z%e#h5w<^7h?Y=_KC)cz`Ca5UYotqz?+?mXQW{Usr0T?QmlS!P)eIV@$_8)JrZ4#rV
znsRKAI(F#ix<S1Qg)qV<$Rh0;8~e3v6w`pOT3qf0Qrf8$90Xbii8Goj?Oe7JjG3&K
zz!3*npSXr(`g59x{=Jw+y)C3z^^qxAVS(y<5Mf2sxQ-zd!)avY4UYQrnEnL(9}>79
zWncfy8}{2cQrp#P4pY;r!hsq66kz!|c~jcAtBK5%F{4XrKJit|)5wiUT5ZTTOvW7$
z`C$58Qm?O9wcAT;w2P~a_k+g7JdD!fSCeBT)Re6eeZUfEat#r3D&9^z9?0cX&MB-5
zaI*YkMt#tz(Qd1_W9J0(twX_4e1U0Tha|&bPq8|FHbdw`_mO@^+Hvxe9QW9x6TM?p
z2_lk9gGD<VvBM(+iTz&t)}O!0*~b+4jxSL%A-D(|neMz6f;J1n9r<}lPr26hF_UzN
zQKg7vaL>bBfFt(T<J#DQf-&!~#!+DZY7EmCHTF7ElQ!f!fZAG7q_swYpB0zZG`qvF
z7H>p?4nUOT0fSb*RNNUz&kzP_RFXj$|C*NC@&7JRBBqFdE|>3-2riaA;?V$%cYDrP
z#d(K}B%9HYRSBXw+wUgDc9%}Fa#4`e1l$j3>(qj1Q_F7QF~{RIz>Jjohx6bD!Pvls
zV$9R{?i~?okkI(j-RJsI@Pp}Th=-n(Xr=2Sqa4-6Hus9{Xhb;Tuf)gfv}ZI$BB8ac
zz*$8YG0q!jqaZ!FnkT1}%qxM&e$!4FPaUp*um4jx1t)Ko;O}jB$7AfQ;|Vy%+$!u?
zD!5h~zu;A=Qh1T+?NL<PUe-5JR|n0rUyaInWJuAMj_^W_=#V1NaI-}?{jH*Vz5@sK
zitp3<vTK7$Sii}0*WTYZdr#htZ(d>Y=P9Bd^z*6iXs~}UBmJ0p!AS@Dgr#G!{DrB$
zVZIVq3i0=a1Zn6OKt$aJcmWz90)z*|$N**cOkn~6Y0X=w&cox_T|W)|fL%XSJ#1*y
zZ}S2}A{{*ufV=gBV9IgOUlMZa{5SWWr#~d`Zj@gZ5S9q82oPZ0|FpL$55JU$MK-FV
zV!Dab(j~0D^?M6Ta4-OYFO1lDNFknmd)GdM_s9sye?BT;qf@}biskO>M+d>!F_c+<
z(4gd3XqfuK*Q<n}h#D~<ow($6yYIzDiNWTrL&?QOe*`v?Xh+br#;x-6oReWNO!i)T
z30Bq!RM?Kk`_Uw}@NzuCP?H+trTkrvZzqVi@8_U`gUS2QdmI923m{ABxsVtG@cmG~
z-w$MEXT6}_J`<3zgduq6mZ>yZbNFMK32YgRj45=gh3_OfGWe=`Xk^h$yMY|nnH|sB
zw{lBBf^Y)f**YZCW5OHzql~@{Eh^?xp^gOM<qa*{Li3H3{Qd!3XVAz+-m`hjI9;xv
z5NDxX0!51Wgc-n`CRq-BUf|k>>8)jSi_~}0eX?p5T-fyTDFy2$*CsT|q9rxn!pmnq
ziynn{u>igDJEO6?X>3>}U2{$g1z^rvO+YV89*qTOM@4-f2Qk7@6%#_F)y8aLdqGg2
zKKH`nx8jlG%syS3%vi<pl2%^O^+^Gb{FO=CiG?GA#s$#-CpF0S?ku>|+ozP!(OIrk
zSsLy-J-*I&vXaS6mz?tJR_(y_?^6K)aQr()1G6tcF2MV7S}GsE40>RkWqHq);fEYJ
zB4=l#A8XdfKR+VzCSu<ZK>2<_fDMNj5&-cL@ZrVD%YX#?5JKSwXsFbq5Ijmu|Jlu1
zQG<CKSOQMLLIN(ca!Sa<jxqE1RNq8k`tlfknQpYaI9d5es6*Ty7?B~f2(G>%Q-ur%
z3$@tK&D~6|4aZMG!OEB}^pp*YQTV{lmKkWYy4MF*hM2G!ohzC32I9?Lj&Qed8HY3#
zm>5q9OhiHOtJ|ucJW)*y8eDwJQcploU8b{I_yBN_L^Wf!3cSi-B)0?ew6CNp6~3tG
zO}d>z@1^P&zKIq?9*q<t5kE3l$g$mp9r0$Rh-Q^KrI2X4(}{R+Ws<<68s=@-jXAeo
zEj8I}sl6zMZ}L1(Y`w)2p~*(f@Ont?#J78`U^@z=>^U;B19U}S4)%TMqSR5lMK~DQ
zcY$9UL3=H&HEHBlHv2B|>68^sy65%D9awa)A4}ZumZCqrIzAb+R9{r=*5R~l=hD7)
zbc>}==LF(Y;G7H4@vPP9Q)^jSeUr)pQ#ZETK{s|FuXC^{Gkrg6`QiFr(JJN{pdR47
zTrqB+iTE){Z5&qI@8qgAC@@Lpb`-rfsRP)K%^f8SfYlevBCieN?F8I8sgCdlU5g&1
z#Q6G<*UBzpxg+abWO#lA-;AC&O9=5q%m3o_cH{r`0cIk}1$}&IOUC{Q2Qwbdrq%c^
z;a(KgU6xF#qEx9;@1B__mZxI=ryBp==aXdk*xbH!bA+Rgj1t`Xuhef_el4{ebz30h
zR)z~Gu$fXKP6c~zHOfb2N@34}SkaRRwkW^R8(B~0g?LP<`Of9g)UGi|Ku@=&UMcdp
zQLK9ZF)pH&+F;i#1Z^uuYGwS{s{E`t>H45wMFereA!T}a7>YSn5%cS>a_vX%dqAs7
zE;m7}%1(`X2qkNanWq>NI$J`b89$(=Rim5R$<3J=2)#qxE{nyD<+HU01wy*N<8K!Z
zT8;y|3l@_Pqve1v8uU+CI06s57jYLX`PKk~7M>et2;$^1uWs&VVYTjAe&8g}1#9ER
z37J*Goc#T$!sm@QzI+z!`&+?NmDwq($X{(0$v}_<%w5mGAz8$6$VRae5dx^d!oS5)
zh>|ibXIb)NP|!M}e&7wVJOeG|Sgoj04FPsvD{Ep1gH?IQlW6!BK?_(GhohFhXp4se
z)SKb<F|9j1*FU%7!3>dVicMg$?qV8ny0&8!LAFkwU$_@So$RNI{F|d~`9obQ;UGrP
z*YV#Tb=xBdUitIH*XV6TngGovv+b^Ym7xQY^($Q%_xv{ARvG_<dQ|t_0GLDO7lQg&
z&u%!P%U%;!K`vqh;o@jNL$FBXzTv<c#$La^5>TIil@>}MBjvw6KF-sF5d!tV8!XJ*
zav&Hx3O?>{SYzS$vhFarzLlV}m6{d?Jtb@!9xQNSn*pS#NT;2>2*7aG7M=tTd)?EA
zxK+nsY!zwxIx=OQVHUTm4Qt=n+qxKRpe~cfx)6-L?OP-3@?Shr+QCZv04|4t1q5N{
z?Dc^Kg)84d_)oENAh)ro-;%Tg)Og*Tl3{%S6{=iBK8^~rUv|gQp2hEa8?+pQGnc)>
zsfmVAv#@03S+0j;2XKYpU`z`rXGFPaV>AZ;QfSqT$V*z=jZZR<!hW3xm#$n3%S~}c
z$I&B!ezz7$ZWxKYT)GmatA^S!Kh=WJ68mC34jNnD@Uc%`KL=yocWT4si|VDsCgj5(
zx~t0PJ8@zQ!EP$`Q4g7)bTdZk4r%QluRw(mPtA$CXY|xR0T7>|{fXp}-;Rgh&D)le
zz*v8nh<ezGv(&2L2<mw<8D6saDlp>>`zuTIXJ~$#f+mEl<<m*|eqx8!Ij(^_9pV<k
z@C8~^ex<dgw^TM*iJd*gf;2R>mighPn8_Q;gc866HOOd}a1v3qX*_J+f!G%F4%4zP
zKRpcqji{wApt&g4fZ3Nk9-gtOe=u3%f$wWc)+~P5n#_^GodsP#4)57rmr?eT%TVYg
z-!*><`g^;8DD(iEL5}BWe^+_8*xC{|R*Miq&Z<JXz{&oahg(u;lDlrwk)VZJC1RI5
zwqOd=auP|3P8c=o*H_GbFekbqp-yYtKa>5w;>)N6fF04q7&lgbOCEin1Qve%cYa`;
z(V$2m$J>Qk^Zc-p<C&Y$_lL#V_(Vqn*PYIu=gp;c1i#Fj$`^e#OSF0GTdY)qnlcO<
zQ$9`(Hi(K?M9<~{UiK~HQ%y6R0=DY8>p#Ko!5=gn&tt)H<Wu@ffle9LoKQFpZ6}pR
z#X?!c0HOtC8N=s6O@|J|_mwKGBlf=E(C?Dt$h6Z{8#@|@_T6xnk5?69Y$@#SpipV;
zPqXxsSfxTR)P~>_BDng|OO2uOSVSXXo4P#-H95hXFD=8;+A<h-a(b>`K(LuN#GJn+
zl>2?ZMkA2T2cR3<H{j}clRm=``<I)63V#z{0Ud&d$72jq-m&tMUlc?=)(;av25;|=
zQ=2^0OWV-40uI;B{H<~bIg600ce&{LgOH|17=}-Y`6;PVh!COh!wHTpQsv@`=tb~)
z6wn&>GU>8Et!2ou7?HevmG?GPD&4wxR&izMK)FTF6=Em^NLW?r&>FQTrSgXK+0&Hz
z022hgt?Cjb)ke}~l6esb{<XO|d*0#;6&-DE0`%oCBM{Nxt}aT&cwB`JB!g`t_pQDn
zaqv4&y;2Y8?7m7zGHgMm#U~STyu9N#pD;%l^bCh61Z8v2%8#L1?pd73A|(iq_K$sd
ze&gjVuqMZ8m`u|)r}CT&vAV#YIJ7VuKt*bv^Ogx1VfTt~D}t74^l0AgGs0RLm=j`|
z*^kWS3tcb>Sbw6Hfo}%h#f7)d$6HV8Vyl-A!7Q48K1s&(PrhV%GHHTRBK#0!^vXSO
zsDbkqj3Vb$3rzp>*yGQ~S@osgU?!B*_mCna<yPR}(}>N$kT=Ga0R&#QGdeaNfF`_o
zSuryNx1Vp*O&D2AOJKF{;rQuz$=Y+|qGLO3ya3{o`S?raUv4h=t;k_TZh=q&``>AO
z-eAIIGIvcCWxG(UnoDo7037K*FbeGhnn{Dn<1N||U@AXgLqtd(Gm?X%`~AX#lh<2u
z2SMkEh9Ex7E=}-U+y#OfZSRIjU=odYo)P1x3nM=AIO+5AqbwU^od<M6XQ(w3;^X&J
z|6i&{-q+q5x}c~HVFbbp5q|3BZmu5<$Wcl@+RNssb9_GVOa^tN1pD@yh=h;#((S?h
zyPsjZV7b}RdK3Zn_|Pa=M9sPX9x8|{K99xa?_QFzFJcQlc87<|xx`N+fZ%nDZWwes
zgzbgS)MMeky}hvZtE}$a1Lr?|L$9X!?j>)&Zoiov;)LM)sySu#)a(cNMjArSrvaNU
zAzGSFoFz%c%?s5$&D4q&W>SB$R!h)`&M7H&M%dHx<fnEGgRY&HoY&mcMeB24e?%2=
zJvFr3P!g&796}8}a0!^w9krOs>&ifoAKX0D`YbQ5cY1O23OpN!$Rir|n){=6NLIc?
zyDg%&iVQoPoxvYh=hAj7{buoDs7dF+P_`bPafl+<ySv|S8*qI1=_P`FsJMhNliLk5
zKsFMw!fg;9MqdgBDY$Tx3SZlFcr9hY55nJVCRjYP27KD$)q%`+=Q^v<Y5{1U7lOYl
z?uZaAiQ&Nu@E}JrXXmo*C<WQYjn9PzJK7dJkp0WVbXq;b-5Ig~*gztdTPDPbA8T6!
zw2X=VSORoHi4xs5645V*hdl%h2SxVxp>e6|IUWTn8dhgHX2N>t<xI~-_`e^0xZG`h
z?qH(P3Dht{oq$BRi|nOzRAQTx>G4VF;TDd_IGZ2-it0qtS{VjeusY}?D6m8k>H3C$
zqni{$?S5tf51KaPYETrNuFa@fsG^5x^7>aX+Kew`rqn06Y0|!v8hpfb$^_Qm`2tn1
z?lY>QWukE%g?sD2ro+}m<kp!B4{lIKoAcHovwK%_5kL?TjuLNt1~tAwVoK)nw`|H*
zD`;BYNr8+SteiMgQ2a?^l_4me`=70ntIlL`c?8Bnb5%Iu0CZSgpBi#FuZ#+t@{`7<
zC^vA!z`>m(g&Eon&D@u5DGuW62`RIwzZ1MozEuzy&dD@Y%G}pIrP)FowIpm1A59d5
z+9=2cpfyA#mEcJjRNzyIByE8vXF}0OF1U!7F~I@7JM_a7?YFA1`YkXCYPA1|(eTOs
zf#-|COb7_6&<!8caNIatDrt)8gj+IyN;!y)jxN$r6z`$4*on$eg_c{6*6D##tryvf
zi>Bb+`rud$2BpyeS$aXTc}TTtu>5`a4Fh-};Fnm#RB(VYDmQwpqR~JVugByZ9ZM}w
z?-a1`CfuPYPiN$2xHW)ogb^iQg*0B&3F6y^pBX;_=cCB@N<yS8SP3^|J})?lGD$_H
z&8mr5<M`4z<mtmbjQFL^xJW<C_?#wMPCXO7MFrC51^9bIfC-LLe{6=iK^Af^|85FM
z2V+o8CX|}aJs@|y%ykaN6jXd^H_tSTe_KC3f~B9d%H1m0>)}3yx-|#Y{7#}mi0g|b
z!*)Qe>&(NqRJIxbZMu*dpDe)l;B7Hw(L%s>HA=^`tbaekW%t;fl2(nWEwf7l(`0+z
zbqeV)&898b6ojD-DMM5^brHMft7!%pm4E*5!&l4u(FG|y^e0VeC3Ey5`+>MgZ}HnK
zd<XM6)EON^-~<b7tk*=KH-WA{7}0<_w{vb8b=DWqUIej!U`XPHaku<0`W@L00Ry{P
zrg)3d(p<459$j>Xm{4fa#~Bqb-Cef?f%>HC6nK<-9Yu<|{bAgFd-y^AD<~X*;=`9t
zPcOkK+-xs7QxjKXg0N!1i-Ga!hSsRapX*`pE?SH(>KI(zm0WrbgHQYaspBl8;>fl=
z-nayJch?4j6WpDkfuN1MJ2dXzSg-_wySsaELU0M1#w7%|mpgOc%)EQoJ6}%KIp@Fk
zs#^7>w*0OR{lcm*V3WhTo?_f!Xe^9+(*bamC?pmosUl~+vZy5t&^%&3O#m$i!L&Oi
zkc*896J3aflYp}}DZ#Y)(6Qs}Hd5Wp7{k1)v~|s7s|K8>%s;^@XZ)I2xWn#fno>42
z);j3)3HgxD@)0HQ`G}@(7=Hbe;YC()&~yMbVXjtjgX!mkF|`#xe&%Xeb=UVLtPH0o
zK0)vI5fqJr-IxrAp_uf11q<H!-pB_}le9eFm8D;&j<fkWjpybODF6E5w%YL6;niKP
zhX&yFXrBXr&hdSYjlwfSj`{w<kIe>g$=d%H(S;81vX0q8l-2}Zd@ny_>>Z*2M?eUv
zXewJyw|%^c3VLUB2)i7vxq<vskqqJOmhyKJQ?BKUm5@psORf`dEGKHA%PpDWDpzvr
zxlDroV#kms!kcY|@r21U#_6E&gL7UZs`Pq_eELpskk6ix$$et1`j^C4B5MM~AC1@L
z7^JS2rzk5#y4BQtgNGy^@Y&eZMh^~3T%!-34%`QX<}bzYH|Js(qqp7Alhp3nR_!V3
zd^wW_o#XHeJwYkV9hr!kJMnxIi9!5XJ+K59H<<Z1W;7hhUlu6(zLWuS096t*Sh;x|
zBbPN`<8B(;l^#O^%n4N;D2VQMv4-L1?p@T7`bWTa^7*LNEbEAbf12@ycx?b504?wS
zE#8FpnSZ5NpbJg6;`g*K3$bckK0-kF7qWQXkQNTP;`EyzKC{4Cqq>E*Vl-qr>!*OT
znfICml!Q!2x=tNOcfxq2hZ+!+;8TtF6A@0}p6@;*{GTF$Oq_5J6~f(32w1f=UWOZO
z_cY!WS}97d4nL4Cdvf31IAM0TaY%(f+dPAxQ6U2#QW9J2dM?=&Tn38IY-$o3fP^iU
zHJlN>r=3+_$-Z!;UlLNZ?j)M;02@W!?1~@6PByMQyQ$sa7#F-BFk7;p$4`dHM%OjL
zmnt4GzCDB2qjh5I(g9~CQ|ot;XR@BE`j7h8AmZ>9h=IGoCH>cSzSE}TsuqV(v+(ev
z(~y|~FY_G!m|}aB-k2N@A0g;{rK_VL;tV!QnbdXKnYxsahaq~*VJKn3O8&`wCUII@
zj7#GCa2qXS?AvEt^de(E5t~IqofS0j<RgOo!&G9|^eDL;*CC4a!wzMdF0s3eNb%4|
zjT4^K&qWzl5aFW3%w@c}PnklHO53}*#mryR)?$*{nKgK`EU)$5%1FO&I%L>o1K-10
z9lxO0mT9{>XqVLq>uf`uTx>TVfP)E(Dndltq1!BHb1Eg*9kr4OZo7uva%BbJi9)$h
zvR-*~7Ip{OaZ;c{?<d}mOikL7!isX~pk7y(G&_GT3#0p3BK@)&?5hp>kJdzV=_;7j
z>ak-Q<0;`nmC?51A)1LppSV%|UEpbZ^5FK|Us?7TH7=z_e`4=;)jIO-T=}x+UXn4J
z>p74SfrC4fhA6q~CW~93^NA)6e3^y8Dj#1|3tKN1LWTe|^KII9pZ$spjoLVIjqER|
zP{ju9GXG+<C_=@rLJ+I=Mdv<gNH;;&>_#Wnpq;;Bq9)Z(CX{z?@8kfl3VjgaY5AHf
zSJ@Na{!*7ybthZM0%y-TVem4^PoeKCh`&12FUPmWp&?o38d^pAYEg^{Jf6ZLA|`v<
zRmGv3Vvw1*$m}M()j#3K-RyMo9ve<)nG!&QB376AbAFc~5KBrI7fIP8#}_Bi8r9jv
z#J|abugG96b%}-0Oz#bxb;cNylyP<WWHC|DaI8UgrbC6_z2g;$c>aCo8$IY`FQC6N
zL+iuE(PU6wb8vIRrlko0%yq#rUDxkn8FaN%_R+0dJvKMGUT(GeBDjA(^!*rw+Sj*v
zicC{-XYPA5F3L5#gQB&`TAeLoQmv+;t;vdj*cgx`abf4FAj)x|;#fttgd;J3g2IjK
zgqJGMsESe-`3fxSDG-e)d*TCBEFuE@{KZlDO}viG&V(r!>7*J4yj%c-xL}?irw?m^
z+>lkyWk&|LqElsiTU8*N!o5lq4`K}nY+f`QatWF(9QkHl`o?-n7#2*(4n91|cv*$<
z;ff)7X1y<^PSWsJP5kt`1vqv3jS~y1|8vsz#7&(mQMbX1b~&L2wd!fjpp2#f2505l
z7eQMVWUT}2R_Wk$uvmN++K<joT~#V3-+X<m-pS?Qjg0Y_Sj^uYUJrTxmygFp*D*VQ
z1X5&+Uqg!!icaU2nc<rN0()o|8|CSyP*&S>!d3&B*hCZjfI}$bsTkppET8Hst4+`b
zPo6EJ-jIG<PWAaMJpV$SPobgps|Gl>@$k0Wg<*6=1E20}@TFJea#R4ws<0#XmH)&g
zxdbJDqc0-cdJ+PV%PV+s=@{A{Qy;%8qpi2?Clt1v#+PCO_yNt5l4Ts=$)nx`En!4}
z9#tX|pOTI~5Td;?GT`rBUABD5zf>kY=l3q_{M7!YmEetJb6!xao7u#txj96A(&eO)
zfm#e6C?_g8_^pXQgcWeE-n&<JW`_8%a-w=Td-_%VCdCn`fru4BDX~YXrRR*gy)HMY
zA6wkLiBznQ@#a@A#g1z6QiveC&({((i=;;Z@6*UBd$J*JyM;mYJa<d0LC@@RdETRH
z(YhCvW@%VTU_jUc!H*A@#L);|dZ-%kU#aUsy`MbI!MX){M)Q9-n`x$y>lg>!d)3?`
zEfYhs4;T%1J4`b|9T^?+NU}k&PNqx-Qlx^g_Rqt#O=QbB?_<TI+OZ0=vyan1wNRtJ
z=YVt!D77kheS9hMRAb*MGbQ6%o5s;0Rl0_2>6tY{#p*632CgR2D!t(l<nj-I&3~tv
zo&{#aIx?1^O5J}9a@IqRY}dI2xQr2FVLRO2Gy}bl7EJ>N1qqD$NWv9F_>eMKJfWoZ
z(<SOnx)m@^qcLox=sp6eZ7?Z29X*CQx0-PZz}~1b-l%*U?;T?C97%2MbBS*n<=|)r
zbv9$aJ0T!d^s2XJ6{Ryf+|pn~#dgCqGT2PpxI1oXG_@P+!ol^N?b%@pUZSSZ{;mnF
zRlDUi;J@;||FzIU2B5$^Lis)h7(@~ZbI1Khj`+XM+5jAjPF`TXb7Z`FV%(zqo%JRI
zD9ETvS4*0N{NL(wIxZAzF^C{89XJ$-6@DX#@Uyw!v7wwzo*>OP<QJft7+1;C{*IBR
zrAC5UT{}7?D>ssO<6&b|{p4W^kMUf>pz;f806oH|#`xi82II)-pSj0g+2y#U_+g_Z
zQpw*3oZ0PCL|j=zFvw((g5|zc!P!?Tlbh`JK=1b5s|WxFuE~4^_X>+G{$QN9e5SN!
zdEG=3XT3-H^k^-LHYoo2K%o=9Au<UYI17p!D6u#_NRe^7j^UVLu@m09k!fdHLM6;i
zb{sn@w>EzVW1m|no;b9Y7mbo2%@IOrF_4bJ+$YXaWyS3yR{A53Kj|5IWiplIEdEJB
zvrS9Sieh_NycJ@xL{7R=p=e%W^^N~9Sj6Yhq6<m-!u=e;^+WCKj#Q9L^Cn(0yLa2Y
z5Mz~;p&ggKHos?#{(G4BizCMY>ov5c{sHFCmx_#x{4d5<vOYKXT|>5F%I_|-{w>m3
z&ag?0?Zy)dEMzR$It5rGhNYVT=pyFGh{1Qyn>gr3Mg?+sOl5iHMCC*|CvL#)$Xf!Z
z;@YFR_WN6cK+LWHT%ADj-^t*MlSz>-;m)U#k`hdblSB(W^t1cd)oZ55{m+x44Toag
z<Q<1?o)3-S>NRfg@kgYWHpl+Mqd4gFKwju;Riu_%zNb5jGBwJ$nrY)U`hgjd&`pu)
zGpk<#>qAtq5?II@o1#=pB`??4@kIXqto1MG5)>E#&s0drt^vq2>c}Bd$o<!z@{%)s
zt6*b9=@}?ubK)x?a=|qp2Kb#Q+8|50Sb#vgwqa4XL18vn_;?{{fVwP{-yM6=P>61C
z+MMT#@WMnLnsDZMw{Zv5>GI1LXNv1V0MDGg^q=ssB0rQLbkv{re{bIiSY+hDpyho0
z1w`!#2<_+RH+;Ok*3;D>NnE!I_Jem15M%3qsyh`2A73XAJmjucGiMK*iai$KJxKNh
z7(b*9t+RuN&*vh_qRo=$yd^RoxMnwT@`=Y1T<$&FIMXRZWoZ!=)oxn>%xiu1RZY4u
z>AG~(B+!E|43`$|2+DewLuqetgRt9dA1`*0&POangTCWE6RwXpqD3~Ly!h|EpMp*E
z(5@w#b{po81bnEfbnH^CZK*~?8ZmA-N;^;r>|+B9rVx;Q6F?Q#Mak&Px|QaJ;)=eL
zfBh*2MN!FEa{OR1)ve<7id^?u$o{l$lDu|`Ig#oB9hyyOic2%R^(J*kn~myLuwmQV
zUGp&?7ZFe=(@*p`Oi!9^WfC_*Xa5wPd*_(BBX^se(yWUUm}aDVUA*JSCgcasDH~76
zc{vZT?zLFsi^*=V821z8gz*Ba!!RBX=P~8y*GMO}Y~j^?$^A&*fW|f$&0WAiui)kI
zabT>(tfp$3wb;ac$oM=2e&y>ItyyL>vfz(r;^E)6YXs#5TEQAeF!&lyu#2cns+rsV
zTYCrw(mS)8&%VQ}S4QtO?)pS?{KrC`TbB~R9{BDGzZOWgj)MJ#;BoyZ+hSyvQf6GB
zt(HTdo>FeY2Wr1NgSB5m4PRV)M$?1Cs)N70&aq4mt&OmsX`~#XO_1?oD?oXvT&Q$a
z^5biC^hD?5sL&%O6|rHbSM%t8e{#Q#q=BT0dAF!){DJ4dtH2euCszxsqDgT(n9SJ*
zo{h&mOqh7J={^cvr@%MkwTpYVg<+6R5T1b};JiZKPqPtpzoeM;3S+tAr@ONnaq(IM
zg3ewhMc?~M?uU$=*_w*22bm{b9+N;<S6n`U_^(!s6Eqpx8C8r7yseuaLq2g(noUzN
zT0@t0;M=zuC=+P9xwgSxwFrJfgHb6AU`@nr!g{6vi1Z!cuBc;BdH8F^TH}7-mfdB5
z<`DRK=nH7*bJv~}Ndm7aEZiy$>x9B5M*}%q=3z}qhfW?ZX>!tb7?Z{Xs*5Xs5s#a?
z?1xL-c}i7i``d~w>-YS0>*s=Kfz0QD4{`qa<aacjOkQ%Wculmcgwh>zwNIqS;L*i(
zY)<@6aS-xPuR+q&Q2}q8Gh`ys$GeC+Z4`dFpcz3J(H)b}wZZ!LlT#+~xNBO<vN~Qr
zls}w)_L@K?C^C4HU=?fJCD10yv4rb)AdBFmXZAb4p&svm_prq2)8}M!jtZT3oEB>j
zNW2#_R#Ub{IJKYa(vB94QlW4|1M?2Q(xAzPQ=&RjuqOKA=r?Vp^C&_%z{299Ilj(S
z;u7H_Buu<^J@2B?mPURnM;@MdB6fuGoLS_r#AJk2oYl(pdXmgWNT7%;a$V%@s_nxB
z%sf*VAF>@ivc6E@p_=>bMi^glqD%FYIOQ1$vg~61`pou0KiVzcy~{X_IG7+NbRbMI
zHomE}I2tj}{7Bu42-`2sCUPX+MMu}K@l<<^%&=qaFmLFGK}MZ9s0~AaT5W{xn{3+7
zq@8ya*H-x$yL%l{Y82;*1c)m}9SuuRJxhLYj-m4F(2lZkB@vaJq>de`{D`8U7pB07
zo$ZbL-q*%R?99}Y@tx$pXK=0a^Xb#Dt4AcNm(%MztQN#kM8S~wGz9z4wNHY9y+H`I
zD{*Rw$ubsmo)~T&5^CWPFDxOiEUICnw!wfIR5R>t#J~i0{>&hSi>L}W^srQ2|2EK@
zsWz(j+Y60whG!bTQ8{E3IBZ{)M?QS4ZkF)VaiWUeXzWI6MpgllgTO^T_>?S|HaMdE
zXF#6Va>of~Uv1>OY8>71I7U<gam@H;SqjVrHp?hJ(LHD4GMW4<b210B+sp&u$P>Ps
z9A^q`%JS(EC1U7^{q6`hYc&V<@NgeVeygIqqA*htOzTt%NP9eIX3M5aw*`rV8%-Y@
zBcsgm_#I(OM3T5oJ{UJtd&B?<&u*vWR7$q++c0SXq&1UpDfQ<hZa{rBakExh(g5)r
z5tWsQB}t06CWd4tCwx#YpwKxtsKEc%L-u;OuQ=x>F*61Qr6G!jeAg}ud7(Mc8N!!j
z`i|{atqhfGgne^G?-DhDvvd)|+H-f(xb8H0)+u~Z6E^O?T;QK+MmHk&`(Xe0ILd;p
zP`v6I(}JHYM;NDe+FNa<0~WV$%l5aSHAT^-6cw9phmS?>*c=ai$=&X4LvG|UWt5^X
zy<19?X3(d4j0XjNLHRGapZmwMEnPEnY?AWaO4El*>-RGAR%`oXqVj}0UFQhaznQQX
zd$sk{-S#VcJb^{XMANcLfhFb2W(ix?%`>BeeL^~s1hTG6a0}O_Z;(2boM@%^;Nv#R
zXwh>!Z};E9aU;6|o&9yhq0fE&t9eFH7KL8TLminlltVZXjk}ZDb_ABaDE8({WuJMS
zN!?zda}nf~c*;?z^n%V>A^Nffy-%xDUs@`OM^5Ex9(Zg5RIaAz73`cY3AGe6`!O>A
zqk<v<fN33%J4fNa3@uJ^59h%<8=+S-OK~IBH+=0Zj1=<9VP%Xs%hCxO;E6+;zYr13
zly<A-Y3ZzUA~0YtpK-<}zL@k;*`0@@#jinyo&h><X0_u^&Na9&W`7W*GsL;nHN(rA
zf@L3R2R`yW7?rU7Igd)Zo%{|PM0l944_t{z^S&XylK*P9zmx`hMcREHgiO~G-GivJ
z>o~dVjO&~L>U8}~YtkAUn90aaXL+w40b)%CqOkQ!?W!p1_w9HqW!QgL*^~cWy8&V~
z%a_O8pb8LVO>q}3AwHQAjH=-u0xj+I_pzYaf$`G4J%Alkfr#Je-Uey<XXY2W(W&(7
zK|>5r#;NgEwH)I3UaQ@OV$0hcrXJvlSl2f?h0KN-kS<5)(-rxz?ZXXe=vn-TQ%P`V
z+Au_EV;a-<p&>~pY*+z2A}%ilj~K!Q?SPP?g+9bav5g3(8Z#sPn%zjnfLjM@Apvo@
zz$XcOGP2?aKD~|k97Ufc+m=4tp?;t#?yL}k=E3t+&5=x^jSRa}KnLZnh67D5a!an=
zb_ps%-Y)Igyt<{iU<s%nf0D<|w4v1XX3Z03a4B|++p$zFSiYsUwJcDB^HbSgqmyLo
z<v9=hCC-BNbHra*R5GK4clI-Mb+2>?7EHc+^Q42D*f5%Fmc0JZ|717xnw{L^`eAL)
z{LE#~4T%-=!r&>WjMS2EEQ=F~J>@L2LM>;mNEZ(;lNK>bWziTkDJaph|GKYj4(s+p
zR5%YOT^HAT^i^_kE%<|KFK?S&m->A6t+Sl3UJ)D;+4!5(QiDUhGV9)uN)GC|DKHeE
zLOIpG6_%dY*nS*vO%ofJt<XF*qpYOY`E68>Y?Rv{u6h`opPtM5M*2u%7keu|yS7Ru
zkw8o4!z?Xo`;(Cq?N&aE8L%a0c?>$4PVb5yp3oBF=l(HlbXB?{m06X~K+V<RMAR{>
zaF<n*<fvEbCcqQ>9Ifta+9w|<7dY!JM=zUEW$1hUt+*ZrrWk2SXS>~AO!r<3Ez8<R
zfd&EeO6+zc7~3NL6*OyeS+nF0R_Z92`g9|da<01~68(2G^T(x8%uOGHiN2hZg;jgL
z_60^${0g7cS9d^9K~;OFZDjgTo^;i@x`x)3z!C-7LfFx2>k`b9q)Z54^aPLgLz3>i
z-(8V=*6s%)@#7Rud1ngbQ?PItwxuUT6GO`ZQejg3Uq~a?Rykxf7__H`HNw>x!f3ag
zwWS1hM@3D2F6+pe&fiMrZEhKA8hu7LAQ8T@=suy6I^n3r=4Bc>?MuxwXKDF%x&cS-
z$pE>a*=Ce89cN!A6XG^^GXQsWf8_3>vq&~(D||IB8IvnxL1&+QxEEs{UYOLoE1kZ5
zvE(iGakqIjAMk<lor>4_isd!(=Zv^l<$iK7*CGohyLW_bxUI-vIp69nY)#sY#;xoe
zS=J-wt95m+qHmZ)IEF&jf2HGy7s2Fzb}iI4le|?Wo=j7@2+OA(CkO&pnNL@vkyyFC
zIe&{!lp$pX^TmF)SgM*JfQf=^Bj0LeG6DsrwD`OxCxdx^9dpQ`$kBp(lNgm;0E86R
zXTjzO*^S0cT1cGZjX91lT9F2RE4E`|=`wPj$tM|C#V58<7@IA?5O4lDGhVvMQathA
zF)@4;w|+);csenc^z&P=f0G*PYbeE8-;NBoMYpIFT55%eNE)n%lb#Ej(((;Pe)7<%
zp%5mjzWwKXc*a_q5}wq3Is-+)5pQfdM86GFD??H)do?3&%Z(76u=~9!MK-q7sc(vN
zmbWr-pGM0yT;iw8b99<#g_z+D>M3?ZJleT2Z{e#dXbUsaJzS%}mJ06sbZ~TT5e28v
z&m{b^okY^zW%wr_lijH3Th=bzKJu>NnsFntW3;3wEvmrgAY8h5;#-x&Qaq6ZPdo@F
z4_OWw4ISati?~$f7UL!hixy~yoCLTlw0O>AXBM7t4q@?7H#y#ze%oBcS!D|IOEYyr
z)UC4CRJz$M<en`88`_#GO<SW;J<9u_hi#NcznL0pmpe^v$S(`yoU9e0iW}gRIAS6q
z#?b5db=bK2gu}xOrY274T4qAe`~62Ps_0Eeoi!(r)qMFG$BwURzHxL3#qG@nfDZRj
zLzk3WLMg31mk}#MavjuoS@DsvOL^|<!$ZDPBQO595eUI0cr(rL#76CB*P*BncJBV>
zHVYKBO?!TS;Mqq;eFs2GXfQ5d-dn?>c~I*Q+bn}DrIVF7=zEkREZ-qK(r+)}+8q-0
zCS2#6J-KiJ(xhn7UT!9%v*_k7y|T^Ash)jT$!(=ksFg;bx3sxzjKZ1(<TFPZxQ?b`
zt1M#PSvaNx+%4FC9VDM17V^azp@>BETdH#jqK}<3iNiDsxIKL>WsucpI*l#cn(hi(
z97txR55NiEql#CLS*EluDsH3*Zx6QWRq*5-E9yw>MGgzGG$;LCK-7$)<BM6B@#|WT
zypNcEC3-8BhS-C1gVQZC&Q@K$Wc%WLU8WVjbDfkCd`<LzzCMf2Mle1Lfl9&ZnlIq(
zbgbd{@Unupt*|#PegD>M9%$L)&U%FR_{}vxhq3-8@ati@noe&oRMS)DQWLcOfz$;D
zpxn81(pgAe*Pt`^G2V61#fFM4eW65>eI_M|44Y=!sx(dqRsVuyk>U!Z7f#(tJg>jq
zrI%9&KHNl2_uU+w3E00Lw)hR-QMusAO^}c&=Q(T4!!TN+JBJ|ce=<rXkV2kt0jcat
zO7QbF@rOCvnWWa3QGYY9QdFV0RpuRm7czvXGL`xKAWhno<ZUB2<9yZpu=!a_Ef&R+
z7nN;4CX|6`cc3V{m7CZ23Ar5OhPbBpi=a{&Sf(PL)9-Xm8lf~0;nvvXDRS}Hw8Rj~
zax6-m54|2p82g^tlo8?dtb+zV>-ic%_!Z3SAr^M^K=o)K^7sUID~$N@u4k9u@5o@x
z?W%r;GO!fOzb5pN)#d3K=L$1DWh2v(FmhnA{~Ki>J?ZVVpX&8qz`5Hdn05X&NY|eO
z{0&}|h+s=8eIfMRkI4T4Wf{Q-iTVtyKkUMa%s1lVhAF&T@h8k<|IazhyKP;b$FS>V
zqfK4A?&rW{OO$Q}9?ydZ=l!{990?#o{w92n+;`fZ6Ct*~2EKL~k}4Z~u+@WAwyp7x
z8~mE-)%!WgrItRi`5UD(j_NjO&r7xh7|eekxjaG`;kWU)ye53NcW1EE)PFT%>x!)U
z*v)YBqBii-wtFqid?QzPHd4#e&*2fPM#)B2V8k3_5V6U+)ug%1Sy&5a{NeGE?K~U5
z7wlAg=J%GctS6@Lbj|NYsr03=#XjaWTJIUz%cR!1*qPuh?#o^0M%5wsROe+y?&A6*
z!=v!xy~O(T@M+KJGbJ=wENwUKxncjF+PY`t*T(Y~V_nfFOm!tB<bvMAws0H(;D!bO
zP*;M1#RL3Bj)#<(asGvluP`TtRRKWw%$fdRz)x6^!iEDNSQZR_+?xL0?EpXm%~}51
zy#hc!|9kgeT2>gy4<H50|2p`S8}>Uk3HXf-`(rTvd;W6*!9X}IdH*mb_}f)E3`EC*
z{V&^47|4MI-M<0!|FTXF3mG+M_&2ZqJBSok8y4~iBKm)5^nZH_gZn3&{_p4iPpsLW
zRI|Tz>iB@a7-#>f`UinZ;|~PY-?Dka{|lu0Pw9W+KK@pwQ~U}4fM{6aQvHVV|D(eX
z03iDN-0!O<76=6w3I2cD{xjGM1mVNZDMREylyv_NSStVX3;0*G`0pX33b{9<h3Hyg
LAQGDXYx#cw?TM2j

diff --git a/ca/myca.py b/ca/myca.py
deleted file mode 100755
index ea62bc7..0000000
--- a/ca/myca.py
+++ /dev/null
@@ -1,339 +0,0 @@
-#!/usr/bin/python3
-import argparse
-import sqlite3
-from cryptography import x509
-from cryptography.hazmat.primitives.asymmetric import rsa
-from cryptography.hazmat.backends import default_backend
-from cryptography.hazmat.primitives import hashes
-from cryptography.hazmat.primitives.serialization import PrivateFormat, NoEncryption, BestAvailableEncryption, load_pem_private_key
-from cryptography.x509.oid import NameOID
-from cryptography.hazmat.primitives.serialization import Encoding
-from concurrent.futures import ThreadPoolExecutor
-import datetime
-
-
-def parser_factory():
-    parser = argparse.ArgumentParser(description="Programm zur Administration von Zertifikaten")
-    parser.add_argument("--db", type=str, help="Datenbank die benutzt wird.", default="certificates.sqlite3")
-    subparser = parser.add_subparsers(dest="aktion", title="Kommandos", )
-    newca = subparser.add_parser("newca", help="erstellt ein neues CA-Zertifikat")
-    request = subparser.add_parser("request", help="erstellt eine Zertifikatsanfrage")
-    sign = subparser.add_parser("sign", help="TBI Signiert eine Zertifikatsanfrage")
-    config = subparser.add_parser("config", help="TBI")
-    for kommando in [ newca, request]:
-        kommando.add_argument("--length", type=int, help="Schlüssellänge des Zertifikats, sollte ein Exponent von 2 und größer als 1024 sein", default=4096, dest="länge")
-        kommando.add_argument("--commonname", type=str, help="Name des Besitzers", required=True, dest="cn")
-        kommando.add_argument("--location", help="Stadt", dest="l")
-        kommando.add_argument("--state", help="Bundesland/Kanton", dest="st")
-        kommando.add_argument("--organization", help="Firma", dest="o")
-        kommando.add_argument("--ou", help="Abteilung", dest="ou")
-        kommando.add_argument("--country", help="Land", dest="c")
-        kommando.add_argument("--street", help="Straße", dest="street")
-    request.add_argument(
-        "--san",
-        help="Alternativer Name für die Resource, kann eine Emailadresse, URI oder eine Domain sein. sonderzeichen in Domains sollten bereits mittels IDNA umkodiert worden sein.",
-        action="append",
-        dest="san",
-        nargs="?",
-    )
-    request.add_argument("-s", dest="server", action="store_true", help="Serverzertifikat")
-    request.add_argument("-cl", dest="client", action="store_true", help="Clientzertifikat")
-    request.add_argument("-co", dest="code", action="store_true", help="Codesignaturzertifikat")
-    request.add_argument("-e", dest="email", action="store_true", help="Emailzertifikat")
-    request.add_argument("--ca", dest="ca", help="Certificate Authority, Zertifizierungstelle mit optionaler Pfadlänge", nargs="?", type=int)
-    newca.add_argument("tage", type=int, help="Tage die das Zertifikat gültig ist")
-    return parser
-
-def initdb(cursor):
-    cursor.execute("CREATE TABLE IF NOT EXISTS \"certificates\" ( `commonname` TEXT NOT NULL, `serial` TEXT NOT NULL UNIQUE, `publickey` TEXT NOT NULL, `privatkey` TEXT NOT NULL UNIQUE, `parent` integer, `ca` INTEGER NOT NULL, PRIMARY KEY(`commonname`), FOREIGN KEY(`parent`) REFERENCES `certificates`(`serial`) ) WITHOUT ROWID")
-    cursor.execute("CREATE TABLE IF NOT EXISTS \"requests\" ( `commonname` TEXT NOT NULL, `csr` TEXT NOT NULL UNIQUE, `privatkey` TEXT NOT NULL, PRIMARY KEY(`commonname`) )")
-
-def print_wrp(text):
-    def wrapper(*t):
-        print(text)
-    return wrapper
-
-def str_exttype(exttype):
-    if isinstance(exttype, x509.BasicConstraints):
-        if not exttype.ca:
-            return "Keine CA"
-        if exttype.path_length in [None, 0]:
-            return "CA, unendliche Pfadlänge"
-        return "CA, Pfadlänge {}".format(exttype.path_length)
-    elif isinstance(exttype, x509.ExtendedKeyUsage):
-        text = ""
-        for usage in exttype:
-            text += usage._name + ", "
-        return text[:-2]
-    elif isinstance(exttype, x509.SubjectAlternativeName):
-        text = ""
-        for an in exttype._general_names:
-            text += an._value + ", "
-        return text[:-2]
-    else:
-        return repr(exttype)
-
-def print_info(cert):
-    for name in cert.subject.rdns:
-        for oid in name:
-            print("{}: {}".format(oid._oid._name, oid.value))
-    for extension in cert.extensions:
-        kritisch = "kritisch"
-        if not extension.critical:
-            kritisch = "nicht" + kritisch
-        print("{}({}): {}".format(extension.oid._name, kritisch, str_exttype(extension.value)))
-
-class Certwrapper:
-    def __init__(self, backend):
-        self.threads = ThreadPoolExecutor(3, "cryptoops")
-        self.anfragetemplate = x509.CertificateSigningRequestBuilder()
-        self.backend = backend
-    
-    def gencert(self, länge):
-        return self.threads.submit(rsa.generate_private_key, 65537, länge, self.backend)
-    
-    def sign(self, subject, issuer, time_valid, public_key, privat_ca_key, extensions=None, ca_key=None):
-        if not extensions:
-            extensions = []
-        builder = x509.CertificateBuilder()
-        jetzt = datetime.datetime.now()
-        builder = builder.serial_number(x509.random_serial_number())
-        builder = builder.not_valid_before(jetzt)
-        builder = builder.not_valid_after(jetzt + time_valid)
-        builder = builder.subject_name(subject)
-        builder = builder.issuer_name(issuer)
-        builder = builder.public_key(public_key)
-        for extension in extensions:
-            builder = builder.add_extension(extension, True)
-        if ca_key:
-            builder = builder.add_extension(x509.AuthorityKeyIdentifier(ca_key.fingerprint(hashes.SHA512()), None, None), True)
-        return builder.sign(privat_ca_key, hashes.SHA512(), self.backend)
-    
-    def request(self, subject, erweiterungen=[], certlänge=4096):
-        cert = self.gencert(certlänge)
-        anfrage = self.anfragetemplate.subject_name(subject)
-        for erweiterung in erweiterungen:
-            anfrage = anfrage.add_extension(erweiterung, True)
-        anfrage = anfrage.sign(cert.result(), hashes.SHA512(), self.backend)
-        return {
-            "privat": cert.result(),
-            "csr": anfrage
-        }
-
-
-class DBbackend:
-    def __init__(self, connection):
-        self.connection = connection
-    
-    def insert_certificate(self, commonname: str, serial, publickey, privatkey, ca: bool):
-        self.connection.execute(
-            "INSERT INTO `certificates`(commonname, serial, publickey, privatkey, ca) VALUES (?, ?, ?, ?, ?)",
-            (
-                commonname,
-                serial,
-                publickey,
-                privatkey,
-                ca
-            )
-        )
-        self.connection.commit()
-    
-    def insert_request(self, commonname, cst, privatkey):
-        self.connection.execute(
-            "INSERT INTO `requests`(commonname, csr, privatkey) VALUES (?, ?, ?)",
-            (
-                commonname,
-                csr,
-                privatkey,
-            )
-        )
-        self.connection.commit()
-
-
-class Commands:
-    def __init__(self, backend, connection, args):
-        self.backend = backend
-        self.threads = ThreadPoolExecutor(3, "cryptoops")
-        self.connection = connection
-        self.connection.row_factory = sqlite3.Row
-        self.cursor = connection.cursor()
-        self.arguments = args
-        self.wrapper = Certwrapper(backend)
-        self.db = DBbackend(connection)
-    
-    def get(self, name):
-        try:
-            return self.__getattribute__(name)
-        except (AttributeError, TypeError):
-            return None
-    
-    def fragen(self, fragen, typ=tuple):
-        antworten = []
-        for id in fragen:
-            antworten.append(typ(id, self.frage(fragen[id], False)))
-        return antworten
-    
-    def frage(self, text, typ=str):
-        while True:
-            antwort = input("{}: ".format(text))
-            try:
-                return typ(antwort)
-            except TypeError:
-                print("Falsche Eingabe")
-                continue
-    
-    def parsedn(self, dn):
-        namen = []
-        if dn.cn:
-            namen.append(x509.NameAttribute(x509.NameOID.COMMON_NAME, dn.cn))
-        if dn.st:
-            namen.append(x509.NameAttribute(x509.NameOID.STATE_OR_PROVINCE_NAME, dn.st))
-        if dn.l:
-            namen.append(x509.NameAttribute(x509.NameOID.LOCALITY_NAME, dn.l))
-        if dn.o:
-            namen.append(x509.NameAttribute(x509.NameOID.ORGANIZATION_NAME, dn.o))
-        if dn.ou:
-            namen.append(x509.NameAttribute(x509.NameOID.ORGANIZATIONAL_UNIT_NAME, dn.ou))
-        if dn.c:
-            namen.append(x509.NameAttribute(x509.NameOID.COUNTRY_NAME, dn.c))
-        if dn.street:
-            namen.append(x509.NameAttribute(x509.NameOID.STREET_ADDRESS, dn.street))
-        return namen
-
-    def newca(self):
-        privater = self.wrapper.gencert(self.arguments.länge)
-        jetzt = datetime.datetime.now()
-        privater.add_done_callback(print_wrp("Privater Schlüssel generiert"))
-        subject = x509.Name(self.parsedn(self.arguments))
-        zertifikat = self.wrapper.sign(
-            subject=subject,
-            issuer=subject,
-            time_valid=datetime.timedelta(days=self.arguments.tage),
-            public_key=privater.result().public_key(),
-            privat_ca_key=privater.result()
-        )
-        passwort = self.frage("Passwort")
-        if passwort:
-            encryption = BestAvailableEncryption(passwort.encode())
-        else:
-            encryption = NoEncryption()
-        self.db.insert_certificate(
-            self.arguments.cn,
-            hex(zertifikat.serial_number),
-            zertifikat.public_bytes(Encoding.PEM),
-            privater.result().private_bytes(encoding=Encoding.PEM, format=PrivateFormat.PKCS8, encryption_algorithm=encryption),
-            True
-        )
-    
-    def request(self):
-        erweiterungen = []
-        if self.arguments.ca:
-            erweiterungen.append(x509.BasicConstraints(True, self.arguments.ca))
-        else:
-            erweiterungen.append(x509.BasicConstraints(False, None))
-        if self.arguments.san:
-            alt = []
-            for san in self.arguments.san:
-                if ":" in san:
-                    alt.append(x509.UniformResourceIdentifier(san))
-                elif "@" in san:
-                    alt.append(x509.RFC822Name(san))
-                else:
-                    alt.append(x509.DNSName(san))
-            erweiterungen.append(x509.SubjectAlternativeName(alt))
-        ziele = []
-        if self.arguments.server:
-            ziele.append(x509.oid.ExtendedKeyUsageOID.SERVER_AUTH)
-        if  self.arguments.client:
-            ziele.append(x509.oid.ExtendedKeyUsageOID.CLIENT_AUTH)
-        if self.arguments.code:
-            ziele.append(x509.oid.ExtendedKeyUsageOID.CODE_SIGNING)
-        if self.arguments.email:
-            ziele.append(x509.oid.ExtendedKeyUsageOID.EMAIL_PROTECTION)
-        erweiterungen.append(x509.ExtendedKeyUsage(ziele))
-        anfrage = self.wrapper.request(
-            subject=x509.Name(self.parsedn(self.arguments)),
-            erweiterungen=erweiterungen,
-            certlänge=self.arguments.länge
-        )
-        passwort = self.frage("Passwort")
-        if passwort:
-            encryption = BestAvailableEncryption(passwort.encode())
-        else:
-            encryption = NoEncryption()
-        self.db.insert_request(
-                self.arguments.cn,
-                anfrage.public_bytes(Encoding.PEM),
-                privater.result().private_bytes(encoding=Encoding.PEM, format=PrivateFormat.PKCS8, encryption_algorithm=encryption),
-        )
-        self.connection.commit()
-
-    def sign(self):
-        def delete_request(subject):
-            self.cursor.execute("DELETE FROM requests WHERE commonname=?", (subject, ))
-        self.cursor.execute("SELECT commonname, csr, privatkey FROM requests")
-        for reihe in self.cursor.fetchall():
-            try:
-                anfrage = x509.load_pem_x509_csr(reihe["csr"], self.backend)
-                if not anfrage.is_signature_valid:
-                    raise TypeError()
-            except TypeError:
-                delete_request(reihe["commonname"])
-                continue
-            print_info(anfrage)
-            if not self.frage("Möchten Sie das Zertifikat signieren[01]" ,int):
-                delete_request(reihe["commonname"])
-                continue
-            cas = []
-            for row in self.cursor.execute("SELECT commonname, publickey, privatkey FROM certificates WHERE ca=1"):
-                cas.append((row["commonname"], x509.load_pem_x509_certificate(row["publickey"], self.backend), row["privatkey"]))
-            print("Wähle die CA:\n")
-            for counter in range(1, len(cas)+1):
-                print("{}: {}".format(counter, cas[counter-1][0]))
-            while True:
-                antwort = self.frage("CA", int)
-                antwort -= 1
-                if 0 <= antwort < len(cas):
-                    break
-            try:
-                privat = load_pem_private_key(cas[antwort][2], None, self.backend)
-            except TypeError:
-                while True:
-                    try:
-                        pw = self.frage("Passwort")
-                        privat = load_pem_private_key(cas[antwort][2], pw.encode("utf-8"), self.backend)
-                    except TypeError:
-                        print("Falsches Passwort")
-            ca = cas[antwort][1]
-            dn = cas[antwort][0]
-            zertifikat = self.sign_cert(
-                anfrage.subject,
-                ca.subject,
-                datetime.timedelta(days=self.frage("Laufzeit", int)),
-                anfrage.public_key(),
-                privat,
-                [ext.value for ext in anfrage.extensions],
-                ca
-            )
-            self.db.insert_certificate(
-                    reihe["commonname"],
-                    hex(zertifikat.serial_number),
-                    zertifikat.public_bytes(Encoding.PEM),
-                    reihe["privatkey"],
-                    dn,
-                    0
-            )
-            delete_request(reihe["commonname"])
-            self.connection.commit()
-
-if __name__ == "__main__":
-    parser = parser_factory()
-    argumente = parser.parse_args()
-    print(argumente.aktion)
-    datenbank = sqlite3.connect(argumente.db)
-    initdb(datenbank.cursor())
-    commandos = Commands(default_backend(), datenbank, argumente)
-    if commandos.get(argumente.aktion):
-        commandos.get(argumente.aktion)()
-    else:
-        parser.print_help()
\ No newline at end of file