From 8ebf55aa2517128b4360d239046ff8b7b6ef66f8 Mon Sep 17 00:00:00 2001 From: Raul Metsma Date: Wed, 22 Apr 2026 14:30:34 +0300 Subject: [PATCH] Add NGINX documentation IB-8862 Signed-off-by: Raul Metsma --- .github/workflows/pages.yml | 15 +- README.md | 28 +- .../_includes => _includes}/head_custom.html | 4 +- domain/index.et.md | 18 +- domain/index.md | 16 +- domain/kramdown-toc.lua => kramdown-toc.lua | 0 nginx/_config.yml | 7 + nginx/img/image1.png | Bin 0 -> 43746 bytes nginx/img/image2.png | Bin 0 -> 69892 bytes nginx/img/image3.png | Bin 0 -> 32815 bytes nginx/img/image4.png | Bin 0 -> 17948 bytes nginx/img/image5.png | Bin 0 -> 77666 bytes nginx/img/image6.png | Bin 0 -> 68381 bytes nginx/img/image7.png | Bin 0 -> 29087 bytes nginx/index.et.md | 695 +++++++++++++++++ nginx/index.md | 699 ++++++++++++++++++ 16 files changed, 1457 insertions(+), 25 deletions(-) rename {domain/_includes => _includes}/head_custom.html (98%) rename domain/kramdown-toc.lua => kramdown-toc.lua (100%) create mode 100644 nginx/_config.yml create mode 100644 nginx/img/image1.png create mode 100644 nginx/img/image2.png create mode 100644 nginx/img/image3.png create mode 100644 nginx/img/image4.png create mode 100644 nginx/img/image5.png create mode 100644 nginx/img/image6.png create mode 100644 nginx/img/image7.png create mode 100644 nginx/index.et.md create mode 100644 nginx/index.md diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index cbfc154..0d3df05 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -30,13 +30,24 @@ jobs: cd ID_software_architecture_files mkdocs build mv site ../_site + - name: Copy shared files + run: | + for dir in domain nginx; do + mkdir -p $dir/_includes + cp _includes/head_custom.html $dir/_includes/head_custom.html + done - name: Build domain page docs uses: actions/jekyll-build-pages@v1 with: source: ./domain destination: ./_site/domain + - name: Build nginx page docs + uses: actions/jekyll-build-pages@v1 + with: + source: ./nginx + destination: ./_site/nginx - name: Upload artifact - uses: actions/upload-pages-artifact@v4 + uses: actions/upload-pages-artifact@v5 deploy: environment: @@ -47,4 +58,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@v5 diff --git a/README.md b/README.md index b3e1634..3710690 100644 --- a/README.md +++ b/README.md @@ -2,34 +2,50 @@ * [Architecture of ID-software](http://open-eid.github.io) * [Domain Controller Configuration](http://open-eid.github.io/domain) + * [Nginx SSL Configuration](http://open-eid.github.io/nginx) ## Editing and building "Architecture of ID-software" -Uses http://www.mkdocs.org/ and https://github.com/mkdocs/mkdocs-bootswatch styles for generating documentation. +Uses http://www.mkdocs.org/ and https://github.com/mkdocs/mkdocs-bootswatch styles for generating documentation. 1. Update source files in ID_software_architecture_files/docs/ -2. Build documentation localy +2. Build documentation locally cd ID_software_architecture_files mkdocs build ## Editing and building "Domain Controller Configuration" -Uses https://jekyllrb.com and https://just-the-docs.com styles for generating documentation. +Uses https://jekyllrb.com and https://just-the-docs.com styles for generating documentation. 1. Update source files in domain/ -2. Build pdf document +2. Build PDF document ```bash # Export English version -pandoc index.md -L kramdown-toc.lua -o eID_Auth_Guide_EN.pdf +pandoc domain/index.md -L kramdown-toc.lua -o eID_Auth_Guide_EN.pdf # Export Estonian version -pandoc index.et.md -L kramdown-toc.lua -o eID_Auth_Guide_ET.pdf +pandoc domain/index.et.md -L kramdown-toc.lua -o eID_Auth_Guide_ET.pdf ``` +## Editing and building "Nginx SSL Configuration" + +Uses https://jekyllrb.com and https://just-the-docs.com styles for generating documentation. + +1. Update source files in nginx/ + +2. Build PDF document + +```bash +# Export English version +pandoc nginx/index.md -L kramdown-toc.lua -o nginx_SSL_EN.pdf + +# Export Estonian version +pandoc nginx/index.et.md -L kramdown-toc.lua -o nginx_SSL_ET.pdf +``` ## Support Official builds are provided through official distribution point [id.ee](https://www.id.ee/en/article/install-id-software/). If you want support, you need to be using official builds. Contact our support via www.id.ee for assistance. diff --git a/domain/_includes/head_custom.html b/_includes/head_custom.html similarity index 98% rename from domain/_includes/head_custom.html rename to _includes/head_custom.html index d6892f0..5c6c59f 100644 --- a/domain/_includes/head_custom.html +++ b/_includes/head_custom.html @@ -6,11 +6,11 @@ if (altText && altText.trim() !== '') { const figure = document.createElement('figure'); const figcaption = document.createElement('figcaption'); - + figure.className = 'generated-figure'; figcaption.className = 'generated-figcaption'; figcaption.textContent = altText; - + const parent = img.parentNode; figure.appendChild(img.cloneNode(true)); figure.appendChild(figcaption); diff --git a/domain/index.et.md b/domain/index.et.md index b14a1da..2da5ec6 100644 --- a/domain/index.et.md +++ b/domain/index.et.md @@ -6,16 +6,18 @@ See dokument pakub põhjalikku tehnilist ülevaadet ja samm-sammulisi juhiseid s **Versioon:** 26.03/1 +**Väljaandja:** [RIA](https://www.ria.ee/) + **Versiooni info** | Kuupäev | Versioon | Muutused/märkused |:-----------|:--------:|:----------------------------------------------------------- -| 21.01.2019 | 19.01/1 | Avalik versioon, baseerub 18.12 tarkvaral -| 10.03.2022 | 22.03/1 | Uuendatud versioon, baseerub EID-22.1.0.1922 tarkvaral. — Muutja: Urmas Vanem +| 21.01.2019 | 19.01/1 | Avalik versioon, baseerub `18.12` tarkvaral +| 10.03.2022 | 22.03/1 | Uuendatud versioon, baseerub `eID-22.1.0.1922` tarkvaral. — Muutja: Urmas Vanem | 14.09.2022 | 22.09/1 | Lisatud uute Microsoft poolsete nõuete kirjeldus kasutaja ja eID kaardi sertifikaadi sidumiseks. — Muutja: Urmas Vanem -| 11.12.2023 | 23.12/1 | Eemaldatud ESTEID-SK 2015 ahel + väiksed muutused. — Muutja: Urmas Vanem +| 11.12.2023 | 23.12/1 | Eemaldatud `ESTEID-SK 2015` ahel + väiksed muutused. — Muutja: Urmas Vanem | 31.10.2025 | 25.10/1 | Lisatud Zetes ahelad — Muutja: Raul Kaidro -| 13.03.2026 | 26.03/1 | Konverteeritud to Markdown formaati — Changed by: Raul Metsma +| 13.03.2026 | 26.03/1 | Konverteeritud Markdown formaati — Muutja: Raul Metsma --- @@ -40,7 +42,7 @@ eID logini rakendamine eeldab kogumit süsteemseid ettevalmistusi nii domeeni ku eID kaartidega domeeni logimiseks tuleb keskkond konfigureerida järgnevalt: * Domeeni kontrollerid peavad omama endi tuvastamiseks spetsiifiliste omadustega sertifikaati, mida usaldavad ka kliendid. -* Domeeni kontrollerid peavad usaldama sertifitseerimiskeskuse eID kaartide harude juur- ja kesktasemete sertifikaate. +* Domeeni kontrollerid peavad usaldama [SK ID Solutions](https://www.skidsolutions.eu/resources/certificates/) (`EE-GovCA2018`) ja [Zetes](https://repository.eidpki.ee/) (`EEGovCA2025`) eID kaartide harude juur- ja kesktasemete sertifikaate. * Klientarvutitel peab olema installeeritud ID-tarkvara (täna, märtsis 2026, soovitame kõige värskeimat versiooni 25.10.23.8403). * Klientarvutid peavad toetama sertifikaate, millel puudub spetsiaalne kiipkaardiga logimise toe atribuut (`Smart Card Logon` EKU) ja samuti peab lubatud olema ECC sertifikaatide kasutamine arvutisse logimise eesmärgil. * Domeenis peab eID kaartide autentimissertifikaat olema seotud kindla kasutajaga. @@ -67,9 +69,9 @@ Juhul, kui ettevõttel PKI lahendus puudub, tundub mõistliku otsusena selle loo eID kaartide ja nendega seotud sertifikaatide kasutamisel domeeni sisselogimisel peavad domeeni kontrollerid neid usaldama, nii kesk- kui juurtaseme sertifikaadid peavad paiknema õigetes konteinerites. Sertifikaatide kehtivuse kontrollimiseks peab olema ligipääs SK ja Zetes OCSP teenusele. -eID kaardiga domeeni logimise võimaldamiseks tuleb kesktaseme sertifikaadid (ESTEID2018, ESTEID2025) paigaldada ka domeeni NTAuthCertificates konteinerisse. Seda saame teha käsuga `certutil -dspublish -f 'SERDINIMI' NTAuthCA`. Samuti võime domeeni konteinerisse lisada ka juurtaseme sertifikaadi, siis on käsuks `certutil -dspublish -f 'SERDINIMI' RootCA`. +eID kaardiga domeeni logimise võimaldamiseks tuleb kesktaseme sertifikaadid (`ESTEID2018`, `ESTEID2025`) paigaldada ka domeeni NTAuthCertificates konteinerisse. Seda saame teha käsuga `certutil -dspublish -f 'SERDINIMI' NTAuthCA`. Samuti võime domeeni konteinerisse lisada ka juurtaseme sertifikaadi, siis on käsuks `certutil -dspublish -f 'SERDINIMI' RootCA`. -Sertifikaadid on allalaetavad lehelt [https://www.skidsolutions.eu/resources/certificates/](https://www.skidsolutions.eu/resources/certificates/) ja [https://repository.eidpki.ee/crt/](https://repository.eidpki.ee/crt/). Tänase seisuga vajame järgmiseid sertifikaate: +Sertifikaadid on allalaetavad lehelt ja . Tänase seisuga vajame järgmiseid sertifikaate: * [EE-GovCA2018](https://c.sk.ee/EE-GovCA2018.der.crt) - usaldusväärne juursertifikaat; * [EEGovCA2025](https://crt.eidpki.ee/EEGovCA2025.crt) - usaldusväärne juursertifikaat; @@ -128,7 +130,7 @@ Juhul, kui eID kaartidega tahetakse logida näiteks domeenivälisest koduarvutis ### OCSP sertifikaadikontrolli meetodi keskne nõue -Hetkel kasutusel olevate eID kaartide puhul ei ole meil vajalik OCSP teed enam keskselt kirjeldada, kuna see on sertifikaadis juba sees. CRL tee neis sertifikaatides puudub, seega toimub sertifikaadi kehtivuse kontroll vaikimisi ainult vastu vaba ligipääsuga AIA OCSP teenust (http://aia.sk.ee/esteid2018, http://ocsp.eidpki.ee). +Hetkel kasutusel olevate eID kaartide puhul ei ole meil vajalik OCSP teed enam keskselt kirjeldada, kuna see on sertifikaadis juba sees. CRL tee neis sertifikaatides puudub, seega toimub sertifikaadi kehtivuse kontroll vaikimisi ainult vastu vaba ligipääsuga AIA OCSP teenust (, ). > **Märkus:** OCSP nõude kehtestamise korral vii end kurssi ka mõistega OCSP maagiline number.[^3] diff --git a/domain/index.md b/domain/index.md index 0be11ed..8089d06 100644 --- a/domain/index.md +++ b/domain/index.md @@ -6,14 +6,16 @@ This document provides a comprehensive technical overview and step-by-step guida **Version:** 26.03/1 +**Published by:** [RIA](https://www.ria.ee/) + **Version information** | Date | Version | Changes/Notices |:-----------|:-------:|:----------------------------------------------------------- -| 21.01.2019 | 19.01/1 | Public version, based on software version 18.12. -| 10.03.2022 | 22.03/1 | Updated version, based on software version eID-22.1.0.1922. — Changed by: Urmas Vanem +| 21.01.2019 | 19.01/1 | Public version, based on software version `18.12`. +| 10.03.2022 | 22.03/1 | Updated version, based on software version `eID-22.1.0.1922`. — Changed by: Urmas Vanem | 14.09.2022 | 22.09/1 | Added description of new requirements from Microsoft for mapping user and eID card certificate. — Changed by: Urmas Vanem -| 11.12.2023 | 23.12/1 | Removed ESTEID-SK 2015 chain + minor changes. — Changed by: Urmas Vanem +| 11.12.2023 | 23.12/1 | Removed `ESTEID-SK 2015` chain + minor changes. — Changed by: Urmas Vanem | 31.10.2025 | 25.10/1 | Added Zetes certificates — Changed by: Raul Kaidro | 13.03.2026 | 26.03/1 | Converted to Markdown format — Changed by: Raul Metsma @@ -40,7 +42,7 @@ Configuring ID login requires a set of systemic preparations for both the domain To enable eID card logging into Windows domain following options must be enabled: * Domain controllers must have a specific certificate to identify themselves, the certificate must also be trusted by clients/computers. -* Domain controllers must trust root and intermediate level certificates from eID card chains. +* Domain controllers must trust root and intermediate level certificates from [SK ID Solutions](https://www.skidsolutions.eu/resources/certificates/) (`EE-GovCA2018`) and [Zetes](https://repository.eidpki.ee/) (`EEGovCA2025`) eID card chains. * Client computers must have ID-software installed (today, March 2026, we recommend the most recent version 25.10.23.8403). * Client computers must support certificates that do not have a special `Smart Card Logon` EKU property and the use of ECC certificates for logging purposes into computers must also be allowed. * In the domain, the authentication certificate of the eID card must be linked to a specific user. @@ -67,9 +69,9 @@ If PKI services are not implemented in the domain, it could be a good idea to ch To use eID cards and related certificates for domain logging, domain controllers must trust those certificates. Both root and intermediate certificates form eID certificate chains must be trusted and installed into correct certificate containers. Domain controllers must also have access to the OCSP service described in certificates to check the validity of certificates. -To enable domain logging with an eID card, intermediate level certificates (ESTEID2018, ESTEID2025) must be installed in the NTAuthCertificates container of the domain. We can do this with the command `certutil -dspublish -f 'CERTIFICATE NAME' NTAuthCA`. We can also add a root-level certificate to the domain container with the command `certutil -dspublish -f 'CERTIFICATE NAME' RootCA`. +To enable domain logging with an eID card, intermediate level certificates (`ESTEID2018`, `ESTEID2025`) must be installed in the NTAuthCertificates container of the domain. We can do this with the command `certutil -dspublish -f 'CERTIFICATE NAME' NTAuthCA`. We can also add a root-level certificate to the domain container with the command `certutil -dspublish -f 'CERTIFICATE NAME' RootCA`. -Certificates can be downloaded from [https://www.skidsolutions.eu/resources/certificates/](https://www.skidsolutions.eu/resources/certificates/) and [https://repository.eidpki.ee/crt/](https://repository.eidpki.ee/crt/). As of today, we need the following certificates: +Certificates can be downloaded from and . As of today, we need the following certificates: * [EE-GovCA2018](https://c.sk.ee/EE-GovCA2018.der.crt) - trusted root certificate; * [EEGovCA2025](https://crt.eidpki.ee/EEGovCA2025.crt) - trusted root certificate; @@ -128,7 +130,7 @@ If you want to support eID card to log in from a non-domain, for example from ho ### Requiring OCSP revocation check -For eID cards currently in use, it is no longer necessary for us to describe the OCSP path centrally, as it is already included in the certificate. There is no CRL path in these certificates, so by default the certificate's validity is checked only against the free access AIA OCSP service (http://aia.sk.ee/esteid2018, http://ocsp.eidpki.ee). +For eID cards currently in use, it is no longer necessary for us to describe the OCSP path centrally, as it is already included in the certificate. There is no CRL path in these certificates, so by default the certificate's validity is checked only against the free access AIA OCSP service (, ). > **Note:** If using OCSP, familiarize yourself with the concept of OCSP magic number also.[^3] diff --git a/domain/kramdown-toc.lua b/kramdown-toc.lua similarity index 100% rename from domain/kramdown-toc.lua rename to kramdown-toc.lua diff --git a/nginx/_config.yml b/nginx/_config.yml new file mode 100644 index 0000000..0e636ea --- /dev/null +++ b/nginx/_config.yml @@ -0,0 +1,7 @@ +remote_theme: just-the-docs/just-the-docs +title: Estonian eID Nginx SSL Configuration +description: Technical documentation for configuring two-way SSL using Estonian ID-cards in Ubuntu Nginx web server. +google_analytics: +layout: minimal +nav_enabled: false +baseurl: "/nginx" diff --git a/nginx/img/image1.png b/nginx/img/image1.png new file mode 100644 index 0000000000000000000000000000000000000000..dfde8cf8476a2886e706b226d3f93928585dad5a GIT binary patch literal 43746 zcmaHSWl$VlxMmU(BxrD#;LbpBhv4q+?(P=cCAdp)cXt`w3GOlw+f8>h3c~9(%*(WyKIb<9>ek?j53p_;Li#CJhuciofqPx|OX zxG)!QI%hjb3Lk>>djlysfa_Vrg)QjCv5F1m{)+gLQkRB6f`|kZGC0LGa#7+lw`*56 zFTmH7IDsGM_Zx}r8W~ybYt1a&?X*VWxp^KFZy0-lLVn$HA>-_d(3{+f3+J;bWEoRAA@_Z z8de%E$Z9eTk|hQRRCLtjSi;fo2*3L|wIw;PSh9wCigE1l?Aoz21BqS$? zyuZIsrCvjffQSh6mXXBE1%iTmXrN7Gm}GIn&`?oPaB(Bdrm}m7hhc-^u`t<%1XEFj zU`KF~TX>SMIB;=r!heZG_KlAtd=B2}d`A!MY+wqYx+WeEWY$Zi+(7jOKh$z4g`<)e z%%lB%J4$yRpNlR3r5YDUM^wC49**mQKxX90x`zk%mW)Xmgd!wv8yObXbA2!c)V0`1nn)Pm^|MOT ztQ5+mK{5b*kzdaEb=Gq>`xVj>c7(Rsc0Hi6k(G{~9{6+R%8i|HcVZ&c-Rqd-%xhEN zlrO750}k?Q#HT!z?oi5Qhw;vL;AvHv(v$=xI~oho;ajTy(3Yc~kc1`Kvl^UoxN^$w z$Y7)YfFTN>sMgy*MhUF@Y*`ZbW4cBB_n&#y^k@{J;l&7; zh}2YUfcyoX*rk4N_4M{*x|F#GVb0*e_VpEb?XEE~Ft!ir^JmmWlE%b&*x1OB(!l6% z@FYQT)nDumFI9=Uzo};Q^!;sZ;#lAK#F`X{eBpV2mc{Xb8$bn555iXAF`l*Qf^@dG zk2?w+GBQ@6uSR%Lm8q8M)y_|F`!sco0NogDIfn=^~M|pVf`{9b*}9F~h-ebgy#c4XJP>oc-Bh%maA0{UhWQUA00)6 zqftt>?pgI{IeY(@4Q-%P+PQaUV`Y``y!zS17wULnfm6wtZ?TeS^n7=^vzeXgA4{lo z{U(_J`{;R*dpE||9oG9Od4aE=`3Q*`#zWR(*3JhPmfC`e*G&rFVu;VNwSi9iIYeiY+?4jaIkJ;HGd~eQd-R1Kfp|kh~zK(tH1x8@B zxSeOa6Oh^gS5{Z^trn|FRLYY%UVfJOn&ZLJ=}<{dB9l3M;QA({C30Oh>Z^B$kiTOD6PvqYZ6q5IL3 zQ>OF6qC+c|X!v)P4qmZb4yM*khxSAUyV${G7VuGGW0y4e@t&0ZGCS>Lql&ZM@uKH> zh{#X;Tye}=6Vi!qGB#^1UwFOlzC*?@%eWM6xuf-R-6vaHTa=YqA?2y9VaU{Z|3>;5 z0byXaP->2sYv1?n#m#!7LxX1p)EndWw$bgUhrocdT{)Y=sP{{`RB^{8tXj7dHMYQm zaIr*zRJl?U1M(ltxk9Owfght#sK~?ko5}mgY0XEEI(`pIChq0;lUdw`9-}FYjL^na znvIq_-QKt<%UAe*x=(i9FBHkKM9Rj&=LtDEIW01T10E<@>~@37aJG#h63_6LAl~IUvFz%TIqB>#YH0EA_GzE z(zl^e%91sH7mLF7SFO~PP^xD$8AY#^O0x@nGq~z02RQ$c2bfoBHOnG^d6tT?@I3@T zy$Q{9Ubjc&&^)>flWS|*;FS8B8k9HCdxpZBlHR>ui{fRVMRkVgy1S^)%ATGql~3H2cb$kl?H?z?pAFgk(h=l9+Dk+ zoGdu>Q|*Ty$C+;YR?s0PSm&<$AW-K!o-KZ_JL!|VU0!4!?CY~z$OYloSC~$o`1tq( zeylJ!;5Ckv8E}wyDQaNdv}7`QV=~+$*JV%NRKH_K1{b*uJac}Pjg7@Z!d)1rN#w;~ zG~R6a_m1GPsr#!1mrx{vfuHlZ>8iC9sSfFjJWEb#kf+#au~}^j_fKn9=9H6@iz47w z_0GcJOIM!5m^==(i=|a82wRGmO@plP^s-X4Hl608C0Cd{j~vW+7@10(8V3i8F^M`0 z9ZBPQR!Q4*`GtCzm+9jG`# z5z$YG@m^z6o)3Zo2fiHyw#sC%g|F_dgU-&*6m7ry5~jZ8T{~VfJEULNq$_Me9(HPz z&1U5r^`#&MK2gsgO#UV2U9HiOViG02uWVZLg@;rIjG3-lhxF^~t6}vABI7|cqHk&) z?hY2z@tek&Oo}n~vWzBV<;02EnRE$BYYbv5PQw;c0JHC_j$}=Vzy)TKpk{2=^CO%KS{*~cs4+t z#v}0sd%L@&42u;SEC8x2RX%>PvGx)Vb{?X`%=xQL@9XFm8JXEA*M0w_?z@W%l(C_E zPMhQGoWN`rvlw@z)ZO(R{BF#Il<;Q9$3L!oo>`1jejRh!2NaK?rcr{P4<-BKilPrM znf0{wj`kMFu-~XzS~ZYf-FjeXig-gS;KseRC0DvJ5N*at8WKI=(=eA))c3_;G{SqxVO4JO67xkH|cocGua& z0V3J#A+1sH74=4XQ+<8@*&pvHKfOBKj5q@D^DlX-0=Jd13j9L?lmh9)kyFQuTMGtu z>Bxi2IljZjuzDq=<(On2b!8z0Tj=NQ(ERX4HB=$R-QMW8Jj)9!n@5*HZ(=kem6t|w zFM75|$BXQwhGJVs8jy+G@@->sV2&l~`5&Ox2-y8cTQ%GWHjyBYFW7xNho2~cQVtV} z`Av9k4K^rlih$@OH9^%x)0@Dens_*-x)a|}UKZa&MrSF=ILHlnh540890&tYsn*ru zDK5hSNe>^yxGi2?q8++)TShXDEnbr7Z0mV(8gpyi8P1e(thw)oN{HQyFGEmXm#B9x zs^1zh(NZcwhsZ;oAYEZ~CH~0zqTxF^e191TbUPjlgzX-~=jY9rfsdVdi8`;NvT7|ttNM0dXb0C!1H-nup)R9$_dL2;3bRCAmrkmeQ_ z$%Nfq$<0sh0z3B_2jSiO9^RU^O_D5EtVzP!=|k6R{7uAvajI(=y$RvZ!%WB^N4c^H zKS)HIqWz1a_mm{@ePj+2A;>dMPBt4m>d+q@(tfx&ndd3}*FUW#M(!Gq$A6*jY~i8* zpl~|)=S5*3)gP1=9|$@Ja`7huuQJ{>=+u2r|H}yCVuSg0RS-s>SKTBnshf4KGEyb} zIo&@u$3jgth9*Zo_s^^DDJ5Kw<)OlONpSwf$B$$MFpAS#e>-8%NIy!jP%-?iDCxIi z(b?ZqWapP=--^NP?`aiws9T4!h z+v4Tq^7nxaO#(6G%l5H2ghIPU~FxTkS2YnfV!D%+TMZC zLHF`>+n-FYHNd=|h@F_9pI-|>rT}5D%NC|0Y;9c0;;d~m3pg8S*DBV1v;H|T>m}orqzgW*5`~cYK^r9>p9u~Kl>=&#D|lpUb$z zWX$TGKx{WQONiHZk6SM8biahNd##4PHQ0Sa4Rx&P;sFY6b^6iXWnB)|$GLl-OrSyL z(FKH$UamIV6=s4XQ)<RDL_K2@5Wgs5|_|i_Ko^O;cG{5P~bwJslYJ18>4B z&!`>r`1Aoj7J9X@e4zBp4q9haiNiXL!Z$p4u|^%vF%!mzgR3`@6?oBrW|BaU4u+^R<~AnR`*u-O*rhg z-WAE^#Qfc$P4=!Yna!Swg~IkvAW+r%atAox-!H5l+qARvI1?jnKERwNO+mJ;m%wG+ zJE3mz#NCt^%~vg0wCTYe8SmIS?B%r-wQ;L%VP#ZQZZ%AInyJ2wE2G~0(`tDhmM_#) zgR>sbF@U@Z5c2rSntp4pnvg`T{R8KiIyI&WP)~i0h}W_f_^JGnhvv>w%FL7$Yt&Fa zaH1=ZS_+%{#fQ2GWz<61if|5H0RtTI2qf#m1nQY7jZz1l(xhI$Rn@ptYoR;*e34hk z8QEK?(AZ?Fh>Jm~ziqF{N(Yf5*L0~mLZ|UPn*!nU$h1GSbIt|BIblPfpJn>q;)sshMGE%O9RjG6Zty@SC*ys6 zeFfBya^~h#v=ExB=m8m~^fD63adB~p9E4sT2>Z3z(YUOJ5UvQ$&8?`I&Oo%)@7;?7 z^dGS-HJbDBzU1Pc*2l5dpa-O=>l2QnLA5>TR)5jDjSySB32?l6+K_T|S}+FX4+xZa z_Odn9qmCIaxPS7ZI&r#5%1MpPt|918w{DW7P+)XMKBoV)AWEwz>7Nv7NXW0O-^NT} zy6FSs9NssT9EYd-3aY&tz&{lvgRMSbTX|zT)BX5~nyT;~D zn{=}4Tkusfj&IPXa2Sg4-|u0T*&oYc_z1=Sd<(M*S<5el$L^Y2N&^Qhjbkk1J*pIS#Hz$tYJ2w|{0x5A7Tu zuRw~nufVYqYP+dy-oiCwxU^3orDECIHkac%!9Zvb50zThge~9tXxqv$EWaUi#nDYU zoo1G-yehB3ST_LG_rX|tdnvf`!h7PE3JvD#IhATA40&ZhT_(m!TlTuoV|wSqIn%SA zjnZYP@*#8Jy7(G@k>?YPm5Kmtl_TxKFL7X6d^anGatmU#tM=N{S4&K{yBA_yuM&RRp1^8dw5CBukL94%dJUDrxN52i z3LRO5g_VkP-XoNz?wn4PcfnU0tojLVdIoOi+QxXHsscs{Z`xTrz(yTTC^ zcZR9Trh$HMDeK-hLF?_V0R$KB*X^p}$J z$7l9=!Q6|NKTZC;?l0-QJlwIY^ux&SOvYR8$Xt7#;k;a}knuFai7H@^ts3IP^_s2c z=^^MqYWeEs?k?Gpe>@V4QN2>LaS4LPf%h~dm@k(@L?=D|P&?1a4v>AZ;3}CxM{`tW zFtC=wp)}wM!t0ltY*q&t{E^{C-^fcedN#T$!eXW+nM(#uwXeMxsmh^z%_eSw7k-YX zHonrvSqQ0tLE#nXZ-516D#`-@W>Y>b3x+R;2{ggdLIGj)$2)f!C)3_`RhQc!%+jbs zwY1SH%ytTsGdQW5#8Z|m&0Jj=_fuE*){%Y9rIs&(UWtZ(a#hh9BGY_&~K zLc9eCqucH3ZY+G&oX2f1I8SBR*z&Y& zslMK5K^78LjQ_gA#NgGj?6IxY78z=469r6qNU z3QSQYSE^hG5y9#qyJF<|>FKG4xOiBD^5nyFWPdi$*v5t)L@`E36`ArKgI*I|rCb%n z$o~Uj!3N97r2AK#m|lOt&#?M=Az6;mBU(AOuP^YpPO)m`g{>hil1 zD$&RnzjAD2C{bEhFOkCdK*%Rl!W4M~^lQN@!rXTeSbrkVi!+^9b!|%OY?CeUd_kY` zC>%aj=+gF=?uIE#LB61pOic;a7h{JXF0}dx`t+pFKcxn<<)SZ23QDYLY{nd$`r7w} zBv}o~%1etXD7vh_ABBW2z4L`U$lKb$z+jfP=l5@A&m>-msD^y>yA+Crg(Z<*3sZ;~ z{d#wIx7L1J2$tUd^5uB3`f}ZEb2~-PxA$VZ|MDQmFXD08z}A+b^MjDEaG~0Y#M8^; zMJ`>O#xKyC-prU_jCicb!>RMpQfiq0F+CXUbP%AOCiI@*QY{P4Ut=7#^o3y; z{DOTc|EcWY;l74(qdR~e>3-oxAcNZMOH_b4$33xYRLMIi3z}}sRj+%(i)Zx`LIy$J z{(&F4T7J~om+)RjuD>F?-mlofVa2fE>knBefnwEON7P=*zowD@7@O-dG>UC3XR zgNkT^=FO<;^-~E}=3P8@P_P&~$HO#Nu+m5(<}Je^TU?<8y*!ZZ&Ic z>+BpP4CimU9u(&-W4p`dfGP-j@DZ(yVB{^oLJtO zXdS6T%`D(sJPpYKy{E5E49$jtPVHo=1`HK z8YqNgr5$o4es>@V6Mp%uR@EhqMB%``?LaRC8^%>bt$=UZN5>T`*%QvbI$!N@x^jF2 z6+7+7j;?tI)~De4#skQetgENDIp&)0LZ^u_?C_@H*XHnIoE!V&j9=gpEF7lzvS9eu z8@OYFB4P0+ir_Y4t0!Q&yrL&GY_PS^5yxI2l2=!OykixaX#94kA z{6QpSDl#PTS?ZN=dhTbU=ksx)h0)}kRh1g%x9ic1Ok>YurN>j#m&jw5R$qq&yG5%a z#cq>!FAYj0(K?GhQ^GD_Ht(%L`%o+Mwz@zV9&q{ItPpT^B+%4KN`yEC!!U1z)~svj zmeZ{-ccyJX8KZ0DztcL8?P^U-BtZUKsaE%-`gm%oytsK8=)|s3Be`m0p|*H_E`_qX zQ23+8H%$VAZLd1=q?gw3uFs3ls%NUZ821kbmA7p8K``i(RsGDdT)mc@ULBU)t5Hg< zt!X<$chV$F@%>Af*BrxkUI9BsYRs0Ui&r`in`bqu}|snqNz zE|9pZ+x@qN`YM+CW+sFEJCJ(+U{Wgi+vS{9pK2s&iW6bt{5ewndBh)B{u9g!P}{*y zF2QXE@A!H)jF^wA$v9H+pLz}thud$M`Rbwz|V0wIrdtHU<``|MzST$Xlm0uYz?!}oBtwx0S0(8btdl7uIJ`Mit(65A&u7#(bKYZls;t}V#Qpe^7B4Gx z+Kh(V(F7#grx(sc{R60gI^uuuZj0ipjOh@>M^K_KmjI0>8F9Ow=>PmV;>Hyg5n=du zr7YL&^lTfu_-4JtWN}tesLfCrBppyU%`uGE#*hzK?X=%%ZC6H6XxnwR=5&Lp-U!)V zFW2ID=!{&7Wtam52D{I47VkLhHWSre2IIDY#PpMEd>lGItr)HpcrpngbficFlhrKq z(!Zi)e`BI^8;-o|-S=ZRvM&Ez!#W$>rSV1ioSDE&jzNsJ{Nyxcwh;zexj7_UMh4*o z1g%3NS8Q%)-DQsr-)$9CcV{}i$QtC5CW`%V?2xIojJrV1mgh_u!;9r+0Gz199lVB5F@af67ly=Ag}nGy?qaLGQUIeIA7pB$u?T0Y5-5Hfv~f;gi!TGXX>b(kqropeSrp zP2Hu}HZwCj)LC$LartXy9O``C_+SU|P?A%WeZpe#6EUccyAZq>*7}s*P`(cVzkdA# zS4E&1e2%vwOg$k2;qZHjNl6$G3523kYQPRZUZ&ZT#W8+9clCV*x85))xZ1gm6#8IZL9p@w zUi=>UKVnuF6&SOFn$c~iO1G1yb9Mt_$QP)EKa^N(_++L0qi;R_y0H4m2yuzBwH7!$ zuE@YIFNJOzyQIyJuxE+rpFh#4RYe5_joTuD4gPJvqg>yrfiVY z$mhN*Q!f45ImZ2ursnP7KGx#<^0ae1NPVegeq|L6=~H?TS-amGAH;$RgczU^QyQ{| z5DRylpg_a8ZLFVe)?I?D6*Na9>^H-+6Id&2krOoy7Cl~3TWIHF!}ikLXs(G8rZ zL>T>Yq0WUa#V{ywel6aIAzf}AOF>Kc^$~OHar!`UvU*hPDF#*O3f&IlfGqdQR3A7=Dxvl^xlpKRBiJTSKPE)@yhc$GtYaiTECp{qZc64XqaWnYHM(kEO+!M7&Sg z6kT(7K18Dp*u3XrVv_eP=JnNWlg|^HZI305^?f6)X$+)>P=%n_JC-uvfNsj@zL2+B z@Q=~cY45AAQ57c14>gfd`(pqDJ?`|L(kX_Ep>M^gZrGbEZTjien5&XnlgOyCSVQ}{ z#Tle@H@EucDxVQU!QpscX7`kTU-0wbV;~^Tcz7iyQp!K?Zno+u%=aRM6a_1E-rHSx zr#xL6g)^)3v4ft>L}4G(FDQjaK+DK(-mQtT`e5u5g=9SS54zSwL6h|zDAXoCie*C_ z4aab0Q#>(4BqZ)0u7smr(W3X9YH?f@fFPX*xGdkRK&8^e#r4ula}_&h9lJ0GO1-Vq z`hINuXId_#Wu!M{2hMyDM5Wyu7=j;lh^@7g^isyu)P;slrqZ>;ZsM19y8G6POnKlc zeA_2+w8q(Y}tdxt`CxRawL`vQX_c5AN z#P(v)4P%_DZRp}`J565b?_}5eD2qrRfNI15Ya@+F!bD$&xVqu>1;+>4D63N5L~|v# zDDV5kjFP-}B)8}pJc^JC^lyKTH!Hv2v=*O8b;uFuBXf7y`)f|arw3%UCh6|j7Y@vR zH@rZ1uct^B_(oUiMD*G;Asf0#8V#R!8%ZZ93P~-$OEy_G($0}|-*!Rtr~X{*+lfco zbuUs)-<_8v6HzS`!1$`^L(o_R4j`N?nr<%nVTTnhc9=g_d+XrnCJ-`KEOv`ad2kz4 zp8qK-s#3meTfd?W%;2IEeti?51(3qVP3uSpZGn9k943I1V+I;z1@d{q_j`ckA@)+5kr~ z2JjN}W|nhbtk~J^LAwJo~Ply{pMQ`qx( z^Qf9W2Nz6->>Q|z4EzFxo>ffB=-*3^Smi5&OhRs#LmL6J6vQf zA`vWui003aN{I|*CpcvdJoSf|rl9OQc6%Mil)&X2=gof?i z4htP{?@!G7m!GhRBe|qgxv&wK2qAv@T=Wyx@fuCvn?sOm&wE%dhZJwO@EJyqwlika zg0~xPp<36Fp$!NtVo~( zu{Boj*z7lAWl)u3@WYQ^i zufEl7zzB8OVq#*>(r(R{tId{!#~`+f=O=YdP08vy(INck8;oT71bd1~V?XBI75f=~!W9WlWvrv~jbQ0^}8F>t2fUcVMp@zM}?b;iuEG z@e%m@zPeUmjl%$H9!BEBb(vBFdghLgJvkQRarmuH*fw6ILGMh0y5=rZ$eTNA-fXo8 zxD)gT&;w=D^b!a+FRl2Absf{{l9>$qeR|K18x;IeM(+GkXbWF4rZatczG*EthaWWu zHAjh_-oT@o$+qS^(->$jgfdu(Tv=Ybx3zpkhpX?BfoEznK&4P}%V+>S2DDAr9wN1I z=qzJ$k!Df9F@8i<7<)w^6Uz21FuYi0IbSwQ8y0Ike*Qqv^R4b01zzOmY@A*eD|}Zs zT~ER~ci{<-{w%(csJh|U)_Zl=JHUnrJb#Vd%LT<(p#KjIDTL$vSbEY>!_z`D*ywPP zmNy&sHCS<;`(%t(D4JyU9!Rpwft?KcOSRqB{N&;lP-d&;hM!3j}u}B z%6ltQxjvl=>{}S?;@1F%VC!kySNxU}qG*kjUqPm-uy-;!(Oa*y7s4(UM0LUnUtU5~ zfxzX2nq5JT9UTr06;t~5B=h?541(l2mm=C@+;r4ONxLQ6?D1>*Y+2x`7eV3n8 znabD(=8jD1gQoOCHeq7>LdvUA2=M~l9|v(o7m5UHYe!**ECi-1Fb{hT1Nn z)q0sZC^S^+oDbiRuP!n&^5(4n^6VB81(Q5iOyQ+vCit{>o(;>-FqKV81LMX$lg(H5 z>W=a(mTGt|&yLQ<5)^F2QW0zSPEBk=0N3c7y8XwD_V0!^v63}xZ2mr=s#J$P3+NP* z!opZlC12roH6?}h6?E76XQM|@kFzfwONN}kBa~R)?1;>T%@S0!^nf(UJLsJ=6FGNY zaa&GP30N{-tSJFfmeOdNdVy;_WCM?^_S8F>FX}7GLW|@ZVG6?#p8L$~gz%o*uTL>* z0IZ9&!wH+F!%p{5i_#>m8wled6gkh1%~xM0pqGb|^FmG0FRFg2m~lZ8I=3aWw88!X z9v3~pW4lP5nkd+B;qFHkn~6_#*NuYD%6ss-%tKuhEg~K_R*N0W;8GyOT4>qN>;xQ5 zaR(vV1YT%8GgFycemWQ=t=XW|Ru>b^(J(zuGSd~SJx>9gcjq6@6xqT)wq1q_rlyj; z5??>7T!+exrvjj!@6SVHW048@ed%0ry1njYPafx!+uOMrv|HZ&4NBp%N{&uw%FD;K z$aL9k(C~RbFfCN+L;{Qkb0Jph&Rh|PF9XkMKNGXznp?y}wY4wkh)$LuR&3h)j5cy#`cKg04^7c}b z9!~UY)uaom@$_87NZ z<%YNm^NEm<&=8z71c$bZ`a5i@-)Zzw?}MRHa8t|?Jp*I<4|=wIK%J^BjByD2ebsKZ z-^T}w{h%5#4mLMJq}8VHEMlLBA!!Dj*G!{Vb>Im?rX=!t6+{Vm@_L_k{JRv5L9dIh z$(8@R|A$XC5IXG)<*2%Mj?3P&3hnYmH7_9X7DMu)cWtGKiBTQ%WpaLC^fpkQZgJQ6 zo2?B_ARB`#)686`M(tqglb%k+27nM$ni7v9RQJ1Fjj_Y~5fze36ot@dg-%Zw4o=Q+ z!MNDzeK+vfc#T2-z}Y@3xuiJf`RRL%@ph=X7^Q)T?WhrE~{m()4}A!b|}%n zkO1Uqao5}3QuZeaH6W%Qj-NdXkw`lv0C?2(PrO6EXnj$U50cps;`C}*GktXB(PGC6x$)2+&)XnEwaz|@C79}_^lV|VvC&I>GWAlYv z=RYar;hMnD;9j#gHf_%r)=m51zsdBmmouw7Og}g3u&=^$Uo}T1sn2HJ6YI|W*GFPA z#tB;q(&co6em0Jy=6DzQMpVMP<}P(OakQGyFH~$sSjfm2$XD@-#+*dZ?B}dGVs=f6VqExE5OF&jsDK+_8niVE^qo_*VYuNdA--HTZ$kH$1ZquRb084%buR z?_=5KmJB97RP#_6zXA%Fy~{2R0TR050-L~FsIX}@hE!sxJ`XO8C~ z`^38!xad`IfL81Mp4i{0jdV7`4YSP(o((AU;=c4->|(@iPmB*FS5pocIPf8R*xp;S zEzw;<2%%u3TJ+{|+MuF1C|iC((Z$p7ZqrHO{Eou9o0{&YJx0P9x8cJf`a%0{j8UAh%y>I(;*U;X zxP{I3ku|at6nWy)zJ0|l{le3CaTb=3XJ90dwM<@hIm}!i>x^AAa(ql)owjbAiVrHJ z(4dJ2Zj{OT$3|9^z40m_sNj!7G*>&uvolwJXP5s41Fo8B6R@YALEU}^*}z||wjl&d z)HMg0h;T$5+dDQp2$(u{5g8@AH0PA6simhq5~%@O2()5xck#gNS0+hBDZZ?Ttl!)G3S?bjEv5Gz~5fi`~)e;oC!T4Xo~w zQV+(U3JJ^D%Ytj*AqNDJC0&ZltAW4MfYU$t z)&5{yL*3W!%ao8I3c+5qii@pL{Ij<9EkM8>1wUu!y7$5&-c6+|HKJL9^Lnla^Wr zVl`k!PUz~?*hvg)ePiW!g}AQ535w|le~QGyuPQxrRRK=eY3M?YzEZU%2}G*ZT$Bw7 z?-N2Q6`n^7@I7b{p(Fp3RFQvNy27qIL|JIV5?h%1B~NmdgvA#1j5B1Tndbr=A5Dz^ zA354UPq`9=TcjUjQCUVd#P>fmKE<=KGBUL=@9$~-Yxjj>O0;AjY z0z=6$y;1ODv4qbzFnanW`w}u*&>S)9*G_=NHen+(1ns0>zogfBWWm?1By(i7=8Ae0 zHhh=G{^b~52ixj`Rvko;{NDt|;Y|g3ay!0)u#38Kf;4Z(!6tolmPo){RfzDHDq9t+Pd3LY9M?*%^rb@E$k z4gsWkMCPjKIem^A?*4qu-ez~xy+U#K_AI(Z`IP&H=I2)`oTlD%vDY26GE^nvjgYmW z>RWy?4pZVe8#ovWOAKWqY`Ndy5u(1bfqs0xt%*)*LYqy0n7#<8$sAxt2)(>YxsKAW zoh7K2GcWl2Y#7q7dvH9>a$;JP6D--m3*|h7m&=DV$<%q}$|QnRzmB#Yx3|oZD<}zj zPE&l{AGhdyE7C-I73mnC{(V^TD+Vg~@}_fUZ2Fw4p&T_^{rQ=xBV6dkZ1 zVmKv4<7l;{A+ohR*NoF_&GOTJ5zj56N%+lFmT8+-EwyJr;F&NX_7U=<52uJS$RVJn z`zc9|jwIMx*JEODPhKo;`Ksfs!}n*TNuqr;r3X~R@-;=_M>M8nlYFDV+Q{bt;OFFK3qYDunvg!@KXu+Y0 z%?B6p!UsZQ-&GPejlU5!t=s;XL@b1{AKL7*yjR6;I8-QWkGGJqjSQI>?Q=T(cG5x+ zRMLVS^aw+&JT})FfodXuGGbuO`}}!^r>xu%1uZ4|;uXNp4M~OeUAT|s;N|xQkS?u}qgr_>2Q=2gozS`gqe$ggI;5!%AS3vH z!^1<)(5fR*+uDnWzVK!J8{@E;vYYxltvji{&Xgg^(jJrQ{}=EbIPUof=ilPBjHZhm z;PiVIw7xi*zhLCC-kz#G^u8!$-@XKZ7E8F$85gH_sSjr^ zr?scBM%QrBE17TKOblWfAZz6C`KW7adw-m! z_W>g-BatqU9q1AJ>SQL`L-OohGXw8*Q{DW*`fs_GV81)DUnWE8;w~_=$Um`;$sjI_ z!k&V3WX}Q;^p3}ovV?7T7mQJ%2j7o1qzOvKzF|#M&5d%-l+u^W^R=pyBYkM$xxSK( zXLk24DF>|Mu#5*QcT$d3^`7zZ&*XSWz^9BavjfI(&9A+$VVHl^m16z}Ihz`5#4;m( zP0P%CVQeUC0LAMQdc>Zwx*c5hv=TLB!w|c&&rLzKg+C)<%jUmVO9-gxnm_PumtZBV zJc_P5Mg*Mg!FTw$Vh0-ei42jfZZi(ni)TLN@ltHq1Vp=S5Py5%uc-Dz+ie^FAy&5g z^W)l+8GoOab5QvX0O`~-;D{x5*FhXsH#;lzN;iMTXA8PcLKNmvY z5yKK;_K%>T0dyDJZ|j{=C_;{95WAxSQaM>+&>sScWCns_?3)TZ;heM{;z|oL6Ae4e zYH`^Rm*c%I!*R;gtfkDv_Mht6BNbrkjriG&R3cWH(0D)1u{4@tXhj+NX~P>F4YUS7 z=G1N;rPWro8=`KOZ`QInan+@hS3pk0AEt5F&rs&06$86XDfgXC=JBP|{A*chSFQ0^ zF9qtgsoLv)Av@7qP9oe!r;5yIS|52Bw3f_SOCJVQTq!eBBr$1#UDygcARaggQz=iG z*_b-i+=}&#uz}sK&+?5VX2tWFxJB94I`qOy0iV_rkBH5HSA7l*XYKZzq=|$GFdM8H zio>o6)V+*0Zj_1cP&bSJHg=tfHKws!x0@!Wz2gO$7Ry6M=R3g2We68uqO_R%(;78Y zX7DAI|H_R=74Y$dFg7RqzCXf&VcO_Ri`NEJ6I%6_i#mc(4mk4Bg~-tJnnC@RIM6_c z4xvj-uFr7Xn+TW6#Zu6MXtXFOO_BYP06_$89#eWLJn&`Q^ zKbQ+|zwEuS9WM8k3HWt5Ig21>>>XjYr}b;*Dzzb(g$<1zyk~NA3<$3IN!LsbnN1W@ zojk>N_hQrKn==cg=w)oDk%!!Nq~I4q7f2sy#&`QXWAX$;6atM_a>A51HKdTIr|Fb< zi-aV15>Xl-<+PU1fg6*(CBaev-z%saT>zYlJ3hvUzIG4pU>nzTJzexZzx4nkqEC(f zp@*@zs3x=$9yd0vbFP)?C-|kiAnOG26uuo ze8PZQKaVYuT*d`@pMVWKKcR_&pK9Uj;|BCxeW#rdBPd4zJhZ#Sz6K)PUV-5e#|%SJ z-3q1M7Z9gNqs9fCN94f<%%zo`mNxd>JDcP+Og;}te{ho6EmYt@*xyGiEG%l;W-0}z zGn?A*G(-{{e__`*JJzKGbVH=*xqiu$kDlPf_hLJET8Tc}rXTDLJZ0{bADtysuVSefhJ;7$v_pZ1h^kdp^q)SAdrY_P; zK%so~l=q3o;(IyYM-0mRLJ7!vTPLCmDL_qR(7{DQLQ-59LJj1moFtiTMc9cs?EyNA zq81mRX!ZzsZ@ot z#A=7`&rnL3zS5FwczH%Cny(cU5I@fQ?3~_7Q4JoRdHXfB1+GYxQ3`sBiRtuC8EFP z(f(wulT0#)y=RsThvld%l6Q3_4WqI-Y+WkO^dM!m!n)7;nBMe$_W>j;TA^JpTVeV| zsi@d)Fhco!)R*rro_s1BlHh4LSBmf%zkB)pQ-$7e(Agz%e5r}fift+Z_&LFl$F$x~ z5>p>q60$wjnqjO;o5ExRSukB9eDr4HRh|y7o>RU%(D1uj%3`SkH-d1mSL@4oG3%vz z)8QkrrQChuCr%X-I5C-w_LJEvzMpoTEW!)!6pCGL@YhC&K-U^6gkMMORM)&EDKMqQ zAfX|}#3%H!TR*}dUKL0;rC}Y9J3a=rTl>7VRU|fkQ5p{RY%K55j9DJH6(M7gg(dmU zP0bh{f0;Wjrt9VD+4paxMF0sErU~O%zn2uDg zAjkiUZ)z_dXg`_)US~(TVZeM3#Nj`npg#{Y#$WK>js-@Suwx|(HXN^N%p%GTok zz06{-`=6?(JzAmlMaY66&iDQQS9;`a=-}Y6)BSJ#k=)7O(&}zUMn*>PML)87qh(U6 zAOz{f#U4Wfx$e(*^m~5`r6G*~#=|HUsQ>6*6h=lyJU&n8j<0>w(u7KfA6ci z6)T4X4<88LpU6;ebEamqULuy6MMd7xbNX9g<(THZTxU|E*Znt!LHchQmQh4hR8VOt z_1>q?=mLfRhqJc~%46HwwUglP?!nz5cz__m-QC??L$Kfkcemi~?(P;KxVyW2P4-%A z%e&Wm&Ug4j6;%)2PxtJeL+<+;VzGX`D|0{ZAJQXf{HmorAX3mKU5GT%S6(e!uJk}} zH#|H%5&{ft?f6%dPUz=oUg_@wjbu6O>s&{tJgsy&GDN?&vA!M&sFCDgtOE%F-~>aX zR)UR-i;KLlIsok6`XfoKlQ|K_MUi6A11h4N0!$dl-oi5)L}wop@j(0)1V!1qofpiypj|Mwp=Vp%%)VK7m5=91#I*Dw3K=mQko5rIDe2 z-5|FlL_Lt7eaD6(SY2QeAnsL&G?C=Mh!UZLAePMpI4McObOqKgPLNkxP7)(s#<+u=8qE8|d9U&oG z(^?}%<<$)Po_``bvpi1@pz>3Y66LPH*t&%@$5&Z_3WC@vK0P{rtL?!v@&SJ?IP5`XVEc#RH7V2 zBE!w7$R*$uN?q%2$cWC)&$cQ%eQgnl&V1i4TaJ`%j*fn0dc90sc1I~p2vIx!mt~PI z@$}YsC+Jaukz!DkTrLN@X23lobroN_cu0v7e&uTc$LL(pyZLq<0p|0`vu0&@S2qHEriDa3WH9+;`e9di5xV)H zg3{}@eY+N*P0J%$5b8Ex_hSJ&^-_qf!*XO~f`Q>NxQjRn;6U1y-6sV-O)W4`pR@fV zT~4=m%3PgUP8zp&-0pIvaZmC913bjEufV!*!|fXeuOITBL}ynQSLda+Uf~?s?Stxj z9-5Evy4+_Ii;s3Cjsoi?4!jv*+9Iz>#mxg;~CtGfDsjC z`>+cnHYOe%D1;t3FTcM$b6oPuj8z&Ek!DDJc55mjd^A4zjAl zpe`NZbY#21M!;#>Dcca>(gqB!pDNZ4y&f-4=t60;iMO_84!vM$_Cm2!VgC@2G8qXTsg_`x$?2-{oN zcMf6^T@_8rw#Szo8Vx%LZB0cJ%W{x|6;0zaAHh=vx=yWewZC?FOQP%!#n>d;g8Yyo z>T_S+aU+!(7bWPurrTvWV$d=%`u2d)1-9a%lAwUXl2vD z&s-gmg4`e!_;9x`kyBQvzrct~1`_myt!F)N`1{QG;{A5bt84ejEt! zt%uEK@&k_%`9T%}SslTkRL?mq>xKHSggyQaD#;teGj8f@ zR2(yU#ElwrRiF{mf#~KS8Txn4`2Xie=Ad(lE zTmc?pU3Dtor9#A!pf$xhtW7&YFIRP2Ac}r<{N})#*!WzaYrf6n$@E70D&a{@B%VJX z6UQ?xUa|+DwsgcHvkO-w-B?cw{Q-k^SP*Ew4Rz?#M|5zb5BcAW=U9AC?691aU25|N z_m(&g4?feHXQ<&SjJNhDZJn5u_?fS~jWg{SDY)ef;k?qKo#&^nyoS>iX>-HQ;#}>U znu?dg`4Y54#rj^WO*pa)qVy9Z#lfY(*t(eM58SB5tfxviOiea$V{hy){;j5*jX%{j z)Yjqa-W!dxGkulyfuBbunKm@2pSF(-XhuvCPv$R$7x;*HQWn?M(ZC|HWd;fX7UDZt zxzHAA;U)3*izeB| zPG}FQ-1sJxkGw}ZYoaO7um&HL;_>U}UDd9O=^;Po){5A_NzwC$Ytk{}z z9|@&W87jY*Lc;F(Ptag4;cBE;5ymy%do!<`fibn=hL&$_?r`T!hJzUndy_UcHj!ke zK`kB8A}3K07L=BZJ3e_ON4K=&>Z1I~ac3hLVqWUFtt*Ag?JcBSY z7uY%A3MG3__!NA&-{V$%4uL9Je7Hf%ndLtV*Jr3y7iY0lg2FtkKOZ_R4*_VQA1i$W#_f1$e^+o$Rna(LP5Dl^?iTH z(mP`lU>YyNm8D0 zpP_fwIvD;aIdk;Oh?<6dao`||lAeVSPi9F8QJ~@-bot!pcJHBw%%SnK1Qu5;DeqOy zzRCqYU@y=nYcM?jvS}gC@FO%_Q&Sh^33HAc_DLoAHKne{;0v>g!$qI z;qyZuG3e`VWlBPVAb^Zski{qF1L${(4Y;J*hz|A0#X(u4U^=H;jP->QDZ zDDBOv4BW5-YBHU>8j8IqjIaJ{lUYHxPfjT@uQ?vcA3}vYYKp!Gy6$n(w-gHV9|!Nc zRX~r^=Y#CW_)gQNnDkL=Tti*E;x^K1$F>1F$oUKdr8-<;Z5OgNew6VXrO0wuTB7H8 zMkuYsWeh_(MW~o0gkI0q_)WT1|JQQ+S};w3X5C%k*T~& z$#4OlZJh)+tZm#!QNtHKAsurFkTb4issY-G8$$18N2Mu%Z1KX#!tx2AK|}$lm_Taw zigNLU<$5;ZlnVYf#eCZ_ddM=X)b{hYvAV_<3G1ffLDOTkYtChEn6p!|Gzw1fV>b?B zStpT$A8L%qA1SH42}zgGmjr3Nm7L|EJMWd;)TGG$A|ELu8q4%oS&a$f`ujF^ziW?| z@ng-aCv{auGVeR#1cYx*E_Ww&yv*}2*_ww~58t}e#w)k<4!H8H?VG$M)~Aj!`+!+Q z*CuWiM5fWRc^;1G#o5!aRKJ0_DT8uxTTLxF2f=JHDs;sO)xrn@pw(EV z)>jW4ainH6bVyofjP5WsQfJVA)nV!1@;R^G>|@V5!*^uWYF3>4#F1P5y$GA)KSbDR zHXqwNSKTj3XnHjQv<+A~)6%-87mNy)3(!01Qo6cwM*i8+@8nAKhoM@$?>xw>wiDuy zDbxa)5mWKVet1CippwQ-0wF326(L&cu3A84#tfw=tuH2=ElxWyo92~{mJz)=umO5I`gwc=& zyNx$UUb+(c@LyZ_yC7t6>e<)PT_4UBurbk3U=Y&Z7swA$G4AfqXMg*}#qEinHlL*Y zR{^_z<&*kZ{bQRQ!}MHWYm7v4ad$}0nTx9A@5OZ@tR1pbP-F2@Ve(0sTGu4}iv1#XNhopfVarZSA?0`_XVwfDLY+gn*9pDdxU z)thzJZk2+bbLf1rf{gmF_R9J>xOA{-JJubAa-{R8O5c~Tos^JVt}iV|)$;U)*x+Sl zRUHkJv}JDoJI`@84lJ3k@SIH^ySFdWblS*R zoz+Ts6A|M#7f%rObYt7vg^afWo<)JQ7cYU9bvPOJg8HUk$7Q?@K&)TH3RL;s*c={d zi=C|f`IGTU@k0@hekh6pKi?H(e#qmx{qaCH6C;%o2Q$M?w$tY9SPH)5X8q*?YM5wcTC%dZxRSu`+q0MlIKbXV--PSm>Xfp6(ri z%@ZEjLxGYZ#BWPqL@1c9`kdKq)tV|UPMizK_c5hrcCW%^kncmD74_i`lJP(m%4*`H zj#8%YiF2lB0W2%fX4}KHHKN{?N0bKxrCn}EhWF^w9ck@j6~7X`%+G@o-M02@389qt z7_kV?PHGsG^bVEq>Ezm>lGWvW0hS1f=jUH@HzzCcmArU{{uL^$%WvP(*WlKqrjy+2 zSXrtkV9-?8WOP9&$qAzWRQg@5#SXl;dFhr)aZlS8PHSj@lQIg;VvAt3p0`_iP_u4KmDNNM z=qHcK=T8(`>L@jBks14mPIeE@P-QRNk|tl?Lr${c&QnErm{J38q;H&+>bTx;j9ap! z|9vs@Zc_+Tb?C4w{W0e+TNpPZF?$_RRJKe62WFmD00)F1-_V1V_o?&y?8aGvr4ntK zu|cqC9yvZ0()&RLg_&)&VHKI8d@ zJgnviI5Mo;=rr=B?HeziHYxMK9wfTF9Hf*68t~_n+{6C}l{a_ld|@tXmwrker{%*o z_pa`4>|nN)MTyUDW^g~{RFPBzTW%(IG2 zJod(H_XZB@#f5L2tZey|>OS!s6(}%(gme}QbY)r`=%Z;zf*oSE4=yAy@Z{1l+ZJ@( zmtGqo1&KpP`~E!pVW~1Q=`<{%-GS<6R9v9$UE9mWZQHny^-z+AbN{teh!N zc(`9wtdohUh0LNRT`eK0rxw|&9E(mYZ#+JZm2#jrCCuF#C(BRyuzLx=*htpi$V4GB z)`H<%$)yLi1%H%c1K55$pDJ}xt%YD@wZgP1Tb={Il51hSOw*krTbsHb&y_)GIQsC% z6+hK@lR@-*NcVVIO>)}k&%f->5axsP*oq(P?P(X`45aUrgMo&kPv0^C zd#w_Wr>kf-rR>w{&apRS9Z30qfsOxMiPQo50~+1=lMg33p%pzE}?aCp*>FY($0n(Cr|p| z0?etl3F!OxeyDCZ)Bx9_p#x>2C%~E8xPn$n>5b=gv!n*^Ausxzc-ah^Z&B4k)&rY9 z?8^@Pqn2jZ{V0*jbSl48m;A1>G(?49RkJ z6ZnRBo;wtsj)?yF20$cWgZzQ~)@YqJJVMmB#s+Qx>JO7usXpP|$afls| zp8Xly{3@b}AWDYUEpfN4c)rNC@Fe$hQ)^_yUManYYbkuKZrTrbZrdoyNeReDZizqx4!GfOrpDrbF3-^5DxAfto z0q(wb6nf?m5cvxUYgmEv2??QN;@FTrH98EBAk6p;IPUh0t?F+i9?g-dE_^{`;cH{V z{rY(8(X`>N3Q0>;bfD`R(GYhxe7}SS$JQ<}d168qeG3k~FCHB-e@I0<`26ZzS~iz6 zrcifGKE(tq6h4l&%r2ITzJWgpn1un3;^t?WI5e7|sO^YVdum^FokPppmK`_T|Q^e)e4goZtdL?TSyA*K0jmGX$^lZ>`wIH2BMes zmZ(tDe}0GmRD;>%$eCg6%kuP%2?mwc473fS48=O?`_xrV#-DB=UvX{ZW48^d38&qa zVJNakh3rmHGH?Rqto5^%$u$)#K#GK^@ow^`xNO`avU;iQx8OmF1#-C$iUMFgXemwD z#9KDHr`+B!O0iTO!i&<1SI}cmv}?O2=RZNW4n4^K^8B2PB2MUB;nk}5LyB((bSgQbwHT;iPec;8Y##KmI!mT;C@FOQA>10a6h@H9}gaVEA zmypG}4J%RD_gX9MBRhMK{mIqsH@=d9naafC3htxJytqp#{#U3zYMsu41p!*Kz?LhY zI&aeHVnRI5?!WYk%fC_&eGNCbbZ6gn-S?k9tjf;YT%mR9>z^L~u+iy$$Y3rsx7=5{ zdQ&7!^Qp4{4O5k^B44m=|5Gt8c9?bmZ5Q5tFPY!wv>z18eE)Z1RRBO^cNSIfX}^5Y zVkeZhm>wnDJPK7oI<7Ln-@U?HAP3e*>EQE8B~e&Em&L*S zc5zA#(bNome+o{G0jtGOIYINSKi~JmUV@d1Mk%m_OdldrFpF0%PCbFyL>@w^V1_`VSuG@lv!|8bbb#u~frCIB zIac)GMCnk!)>{lhsUZ?-YKGNlw#U2zN<^^Rb+W{~RU*%^$jD2bvq}JsylQ9?&G~bu zRK;3PiE5x^nS8ttq5#wP^C*g+0K-y6K>-zD()t6vU|+t$vuHj3`PmxmXA2kfz5vqY zk0f(FxLxgXRjVHNxV>m&$@q^R(vAcn*wyVNL30(YVTmz-=6h5B;_?#I`vYo3+c{tm zX&)GX0(3l+o6-_S{-g2`#Cm6_hfu?=>~>6l8eZ1@XGr~cIx8A3Z02i8lQ_I`-(s0H zFWrMEQHki9j>)$5>;a`|iyINakBad9vkb)Bis0~1eddOGu$Sfg z)d~lSIE|c#!056$W2~4BPYk`?s5huo7KB@o9zy?&G>6KNr2kZGqB&yZ_WT)>PB4GG zfDGv#5nQxcBmKpl;?Z(`eM51Me?5HY3vOtko0ae9Bc!Wf#)(Kx7x)!Qq(}W9h=FFY zhdP2k5Chhn-YGPYT*f87Kj#xojA?m35l>Mi_ssY8AL0jiGBm zTczP5pv0|(o9vrr6<$6*=bNcW$%1=MZuLntT3)v6<hhqRgp|xUwHj~~bVUgKGnVD6iwHem zvX){)p_j++x}}7$M}hJ0NWuXCu6iewQ4U8+q@0ijeO^V%X1EM&q@K}E^e=a zZYTW9s%yL=WjiiSY#Nsbtf#JCf3x)st(pStb07SAxVpLr@p7f=&{2Wb#%6Pxjbrtf z?-gibthk|y@hha(5x*TJ|3_|z?Eq{WpzO^J25Ra5S{k?ctY zFJE@v5&P{?tAgE?xy6wjtW}jKVv#(ypw|nYeo_pw+8}s2%_9EBy+S8UnYpOzgVWW) zFU+$RdN<2ExDq+uOU@1q?~>MVHF+<71miX4%KynqATK(>A|IWCvFf4GHPL}ijv6T! zof>NYT2bLk8X6X+YoP|MKh{IOZCtr5aX`UHUQ^#U&z{Re#g)*}-j3XJ0M~WhXFBR^ zaE&)q)W$Eso0-#Q0VK_Pige$azQL)#n=pH1P#BLsXCkaS`G)50`1Pd!t;!8WQTqOe zTen{U@~jw`LDn@trC>`(%|ebBLm3~_xlY|3;SRV0bz~PyRqj6Cztusix8KHv4n6A* z8OQw8`XQjBa0c`CLXhS8>YbLb-^S0@G{^@>!fjVkJ}C}W;e*N)|E(L0Ga3@`3I1gj z#T_=XhOxdY*h2CHPSkgs?DDp^$2gz*gjOfQ*<3gc8RCB3eR&dLDIK;5@iEpcU(F)u zd{?Gt3P&G$$VTT(;c_6&GqRq;oZ$^O$=!)jsIb-8h zl$hET^+=(XgTGVfy1W!&M8uDQ=p1i?!ioak(>xZ4$eT9hUb!7ID@bB(FYSC}>}q*EUvQ9o#w_tgBnrqSOXnRnqnJrbyqNE+W?E*U{SFKjVgM zSx>oM+gxTo50{=xI5C^foXl@K85J*EOQWPWBu5+Csi33ZvmaRO4WcheH>GnF2uk7g z&$6=XAF&0JwvG+7`W+kmDn6*}=`6F3+RZ*}5}>n4GD3MXPeo#V zCGS0Z-M!&>?+CUPW?Ot?whrQ+XETx|9cHSI2~cm|P|jN52xm_tmJ zT?H3^qVB-#DKQYi&| z1tUA&tI|bJRkr_$Vi0DwNu1Grr-hpecLTm9(>)6hFIB_X#SCA;$cW|i)3AXa;5tb4 zD-PRLVGuk}l8HDUhJX8H@~v7akr&oaGb}iCFuSxP^hWh+7rR;CEK8QQLYmZga<<7! zQ9^A2BqBf5S7gXPA!grx^FJ63Uec<&vcnpfA-a5Zfkqa3P6p1dmaWF?+=Yb&M^Qq` zO3-Sa-c`lfpVn^z0sqxqXu4GXj5AFb_X7^eCh_;88MD)vWCO6^?D_%XrRL}`5&HcP zy6yWvDIVt#huhFopCjsr5rx6ezJ*I28cjNJ(WDYo()juTNXHuJ{TwVqfw*uPQOrZWMj)8%ms#4HNJ>a{puvxf~j-|Xcn=VeV>n4J? zw4Ckx-Z3AHY3Ym*IQ?-L*{?L8WMYc%t^E;pD@TxE~|?0 z{&IOGhI%WtblQ81f8b0qxFt@mJ`sRjQGtaCPwSq<4rF}n zi-wGC%{#k^%kF!FQ2p~7flNWXrLB>6cHK~v;T?-l&j~pCG&_IM41%qv6z#5>lE{dj zv(2-djhu~4TkE%rvBA!oLfyEbd^qU^kFmd!wmsMmWcLs2h-k6*6f((IMoJ=-lqniA z{Clx`HzGwRDr{T%Dqmd3~%tv?4yIm{lVU$sUGurOWShFS6beHqq&okLk%xbv> zj3=o0J*))ug?-66_Pm~jSbmO`srt&|Lh<~kLfY<*PVMBRYB-BEz$v6VmQYzQduGolyimNG(malJxn8NC4bYM{c5E*i;-q9vJ(sFL*AIM%?sLXW@AP5 zM>Yzotd;S?`VX(%eMk|Fe#=KzTcTqYtnf4`wNF9SSA`=t!^QrmcLV>C1D^IiSZ~1> zs4Tz1sI%_-6^Z$&xz#6mY@<@k+Q{)z3oBWF7*gB)S|IwUMJ=lOL0(vkS_rAfatW*!O-6Ru+)FIs#g3pLwIR$jJ*#vINaOXsWy$?JvK z%DRvhlv^F^_i?G^5ULDffVNX3`r4iN?}!g$*HX-&hmTO=jK~-69N)ZIn3}9qPW6c_ z5}Uyh*8R|ntQkCv6n$C+-ujbav2_N=FZdyFq<~v@UbiBtjAtMY!?5>=-BCPN)j}Lr zQy#egz6qFDJ9wP|wfwgwo>-_XHDB#FkW@}k=!yji!tx#ioXYaD8fz#I3vc?)hkR5Y zX$P3gvgdDxRId7b=lMEO-2)pl%M*!caFcaCJwWO?%}P5)_qpOw?)GlJL>gpf2JuTe zU2IFfb~*sNU427C$IOgkN~CoKp~Zn3oHrYHh(6FBCj@$~GoCbNOap@xB4c|x#;x%O7_Gp*xVw}mg=-Wh~*XJ46CN&7HUt!h^@=nW0 z-+}$kMFmu=nKFz(8D4NedX^Y7OkKSU`lNGPbk24{$bVfzn6lMB-2PYnSd?9V6B22|tQW9bN9R<9CHqI7uHh}To` z5Wq)4Ar5c$0uX>PufmH+X?|Y4Zpey<`@4%BIdtH>1$e>k0O~q}`?Uoy6-(%k#>~fm z%qsDCzr(NUNC2bZNF*QAUN3$oXT(butNah$qadxJy={JA7rzMjlaV=6dyWKfRS%ImdMA*TPTV@!|# zr;brjMJ@}vyFvRQ+bZZC0~3qL8r2bl>5gajsp)?H{6m|SiA)6~4V+`?I+z9H6U%1m^=$X9hP&LS(fDD0>$Y$gV){+cJ$~cNX8e&aO)-i zsycm{dM})6b1e|kR6O0}<$JWAiP08(iL}R{w<{%mC}$Z&v>dQkk}??C?$!oC2ZB(xGZ#fJ+9)>bjjD< zGN&`k-*Do*HvC<4{&7e6kn06wsl>+_W3-)pYtP=0M`F1J=V3Ihd#uLMe}N|Wge|ov z6U5k7Pl=`k3MnUgo-u-lp!>#o;_t z;RQ{H25~I~C-ATILkfd&>c}I4guse?a$AhT_-b#;+&{w)3Az428t7|pnlLy62@j19 z5xaH&``WEuX+IZE)@!#!ZY3)AKz)JmNABw1zKgx=g3u}PZ5QaSjM*?Tn4XGvhl zhxkaUUb#Pd-a>}sewKRJsTFujtG+}zAaS6(egC;2>$HSF8HV-{yWQFymt-~LjrPWu zn#ZYyGc^B;$Sx_*RBAW#+%FbWT^3=0NEyE998ISz`pZk)jbMD{2BYaYQwscGPGYft z^CHA+=QvmcX7G$r408~FjR#=@+8b#3r1f`?;^4-Eg?S z+}~hm?PVK;^_nP5FjahEf~i(vrGzXdorV6TXZXQU*x*Y}P`|_G>sFeG|&Z6ou{cl{M)|Q$KBkcTxqCQ}{JH?I+ zI9w=4w;QMp5_K1(L%Mj|930SB3BJ1fh6(lzb$q^mL#iR;g^mIC6zzW%omSdG{4d48 zfFNl@Jt&t7PejhKbAg`X;!dxLWXdCZ1}gOaVC7m%FRGC9Z-;Q! z<+#+o4HO}Mf66=h%!r%o=`FCq*0wsE{{b9$b~N5A|4;z5BVW`~lOqs9edbbpRNfOr zWQ%z5w}Bh#SewER35*sjT4Hj>O>y(61SMtXXWXJYhc01c2!#ayn`W&p+bt~m!mV>= z;+=4>62*)SgOa9Kd^68AI(c3V|A<^I!wia=wlG`4xECjzMMA)FX*k2&lz*lpNA=Sk z?6L{^-~dyKlA$S#vax#t4h67f1?rbrSIm+NBoWd6_fns)%fFQRj2Kud_#3u2DlT-3 zS!4s=NiMc;?Y~Wdj6)CR^{p6HDquQ-=4ElB`U8Da{_Ee-H^m%lRAlka-KSHOqo#d$ zeT0EY3C_y7LU`u#+NvJHiL-D-emV5k;BGyd-2t>dCahkVRJ)&Du_70pyMx;}JDfM) z6uZaFNIT+sv{-fhNP-FNu3NAm2Uj+(5xTML#e5#ayKQLHTb`- zp-H=q4lt?3Z_&`SwS6-NltS?5y@i~0j02v$rN%Nms&ko$gl&nzUCt|noOJIZoT@vf zD19pqM~zJg&qA)>pWiJQCV8rX6edk?Vp|l9a7ff2zIbqx*SFenu_SHy8#{E`}#=;FI zL|Fs5vpE2u$T%@fDSw=s1Y3c#4EjnoYE!cIMn4z7cqu?%=NF+y!#(zZC-hGZGIhg> zz{E6oRI;9Ny+IWgFHhwBG*NycJk^;@DWCTgW~J1{s!-H(9X4f72x)Wj;aX$ct$ui& zS*+lgHD<`z=!|}y84TEx&q$V!H##TYa)`4PB1lcnF84It6<}q5^`g%%hVZC9wVrnd z*z#@EOHx;t_NPyjgbg34G~EyCxLWQ9APP)=caHxw;G!=2KPp0A1jUH{*+^I=ewqBi z>6bLM(Wmneb?Zf$TCARwfz1Buzn~#6&-g!rw_HQxaG|`t57SDZ;P`I9(N|M0-ef)!K3fZt(mB~BbQzxHZn5bV=LP0tpUlU ze-J*)YicAV!jI?ikb=e$O-o)|)J@oESg~tPc4YW-M)jS`v)Et~VX_$-?8VSWU%~=+ zvaF;aHuDQN4(F5yw`vM;0Ki+I1{rwG5-GI|ZjU7X+IFf5r3ehC6lS>_8}th+=tY@O z{>ujWU+rq<1*^c^su0y@7An+n*`f@oBv~?py^nyQQ#8cTP60g;xls%andxUWg)gT9 zk4E@%%T2r6`r9S1y})>c(e=Khq>Fp3aibTwMV%31@7o7+xj)!BxsFwspP&fBGG(n0 z>i-6e!vULlMHM09;nWx`KW!VnPkm$@qX@ufMLE0U>`Ebk^4{*`>>CKL2NZe$c_xADmf*2iH1RU7yj5sT99TE?=QF@BGg) z%d)0FlmsmAA+z#_I6>2&hK~o|2NJAjsJUXA;XK{5Paiv|(VOK*Pz8mlhV$e89?EW;}CA8e=; z1_$i8?hAO2-aH?p2jm`!b@h&dz4jcgSDj!f)7-nlsxQ6|M&-df{td}y8KPPzY(l34 z$>JC}sD_8CV__cjI<`p<00mEONx^pXA#~OWtFu(Z)J7qGYl`PtyCVD`LaTDL*X}y) zMpNdF5q=hp4DjGb_<-sIPD7G+r`sRksZj%cz?!HE2{wR!RF>>nKm!a-)Nk3 zN_0O<&7!rj0ApJVm36pJqP#hc5khcktFzq)Dl5Xx1u3s<@zrqnTV^;$pEpoE?z*q@ zi6-qUkB{r(@_UZl|IidJ+|%GB{e6ZV;TiA+h#2(KO;5^rH30HTIaR=G0MswB#%4s< z>X*LpWp3P7X> zTso1JzuUZ&{mCq*U%}z9U!jqI=DdGE38DV;cf*&LK)Rq;b1E+*hc{;rpg}xa?Ev|6 zs$~ivRUt6?nL@EJ=8t^ZNBFm5@$Qq{&DGPxO)d>^VtyXb+7>sgFfCz%-ZZ_3Z2*mZ z%To@?_^izgOjp*3;TnvQQl7&27Da=z91e&5IZRNC9?AjE{8o72 zf7I-+DM{cm!B;sg2{_onK0+#dyKIXv$9Fy@>v2+@=h0}pK+lXQ+qlN5Nx-nT$5P{n z7f!9^nW(cyaKL=Tz~_EJdBSlPx-rr$zpWKZq2HOLe;qUbNV)TCuJA!+wGbvT3$#}= zIG%}*o@O2YdKBwRUMzH1rwm48?<|FEHe3L0(-+jRpNB!eB78_wWwS4smPBP~nI4|! zZJhX?@0>Au<0g>U@cmNxBs*mJH0xoX@gTwpI>K{XWJe2`uxITACd|TQrk+6}5}7D| zA9}9{&vWFfw4OlA{_gEY`iDDhiqK%rYzbY@<};4aBaEkv$n7B>v3Vu)udcFjCR*=s;wq*j}Fj%JIl$)(mlSB$D?NifoXC96aj4%jy6-#ql#uAI~xBw|UU%()6H75xwDID#wl@QMLIwA`(=ep4ZXn|MhZ=OWTx zzhH9Mg7F2z*{c0!)V>+2+4llw;bUlEqNV&3s{6|v92^z8Pwx1j(tdKbN#M%ar-i)x zD=L=B4M*z0#0RhL-lq^-6b_SyKo-v2al*_ut-FhL^lr1Xu&LdLH$QyO+J{gcS-#GBKYx>N>j>L;s5tq8p%o-T z^8GYn0d_>VtV@-Txt_%;oKs3HL1q3U-Q(DQw`sEVw69OOlDfsH+Z_%bJCFOsE<~AF#yx9x@MOK1hx{ zDzO{6$&`ytd8#%?X1g^cu`-`7^z=*E<{ zF`ka+QnXF23sCZ_Dm&S()E+y&B3DJ3fP+mC>KcW5fQ2^aE4Iv z#^H#@!0vtCS{%)wQ9Vv(ApoB7=6{l#R7%5Il@xaU@MA-fymjAeh|LP6CobA z8BJAxw>hBl(8okReh%0UcPg&}>U2ANXBxS}-3N0n_B&+9-5`TzVY1rE7v-V+7NUg; z{U#pvN{g@qdmqa!g4@=7sAXXXIa|i7>g5Jw%j@c^yYZ}qhBK@UK(pWBl~an&*Y(?c zGLUP1th5H+YjQ(18L&_L32xii*YvodYGMQyiOV3Yzl7H?Peev6upKhSk=~hla5Lc& z4o|NVY5Zqtr2&?SXt;7-<#eiAb%IjvUAP#Qf){@MC4+By$_yKG=+om8?Ta$>BY{|| zN_e;ZOOPt|1UY&3K|Sp$t7U|CEneq@r~SmBS^}kM7gh{u-vgjyB%$BZl0oke70cUgB$gRsU6Pz&;CsKhPUbDdk~^RKdA~bs0BN_l27d|z5uRX z@;oxh@d7g<%ovosg8@WmQ|ek?(IqV-1F+;wc@UKT^)mgn$i&+@`W~jU4wpx6P)=0~ zX31pM#9`F!yiOv4UGZkfr_=Icii7uY#H0G`*WA+B*JLupx6huSKOAM6H!wpFXOSh7 zXZR_jQIS}ED-9IWv5s+oo6H?+&d;&706SeIgJ9|I5z-+jq91GQH%?OH-x4O3H4*h5%QxQbL!7K<(dM1+V zvc21@$A2%Mp|=JZyY?iMPQPx$RoHXtT);+~1!Kh0z{S~$44Z2qQ^lXEKy3gE9?ViU z@8HD6ApMSwIj8vB0;{A?K^LZa8zpD8bpR&_8!=(v8E{O9-fJpo*VDJKc9emQB@3C3 z8%YH`d$_|x%3oTf-aV@?BWMPM_vH)>*>G-w%>p;4pD6J6?U4p5u;CH1oif*$#xFm= zI3`QAk2Sspr(66wz>1nE1p<3Evh+)3whjG|*lKlm8KnMHjDXafML0V+E(k0}HKS)T zdY-3-xlrA|>t>T5x50+sObEJzMhjA)^U|m-wX-$xm+TZUUkc)8z5hx^C9cGO+flre zF!fmF7gJaH&N&hd?h-DY6YR6I)#`Q^Aw}?vNS#q`hA&NRB9bb!lgR`rm-QTM@bXrB-=IKm?Dk9L-#fyk~b5RgCLqJ_jA zccI7|*RvKD?ETYIIZ&UYk^|>jp@By#`9> zRrEVi6b&Ftjh7!62bCOBF@S|RCU@LN|KGXDL~_Dbe_1AA9c<^~X`t)aJR{=J4t28f zVTccyOgPCO=UmM}TOnQV5~f z$qEy2PrM`UJbk=mLFM2D1ySZhPe%fDzv)%ndwZ;ZA&qS)MUW4C@E+F3YnAmAPH&*R zK5*3G6k@RXW(L6xvJyn3BIx(1cKnGnMpFNDk8a4Y9W#!rr(54xNxy_kt7D)8E8e$| z;Kbjr%-1)0zr9mJo&pC$Qpt?`q#3PiRf}ndn~W-6Oit1@bcyd zf{qXDu+MjRZUio0%Xb-?>u(|MW9Lxj($)T65rqx?w{+m0w$r~fN;!0AkD_>RFGV=z zj|IG(&ZY2;USAN;8-}tOW!(y9^0_R+tvfPxBo*Mhf<_>8Cc5xg9q$(Z7JVl@wf((g zx);6|8km;`+!O6vyl_ZCze!|&m_#T`GLBGaj_d?iP9o-i8BWrJp7(F17=aWPoRt6| zbsD~O$Y7uhK$q{$Iy;E|aP&=QbIqE z=W_}Qn6P27<6X^jShiy?+Oz}x4v2~~7sktD&9~5Np8taN{r~Fv>ae!DXWatDiUcpN z#fkTKbgj{m!6z0&q3eT7sB#PcFL0o$qqJ1}OtEnArxTo~64PAPqX#aEK0O{2srBBYq3 zFQ|jOcKRmrHOrhY_cVYsS}6@(DDEK;r0d>=UxtJ$qaRW!|2LAi6vKsF%vS$Mo(Jp- zOIZ}}02088`1cvSRvW#3I+l|^#<+H*!2e-H#Es1%bN{~>bnInXW{3);rvRbId65kr z=sbzy=Q3_WCtJCFpsjI67$1TFh-uI4tN9gd-7}{jpTm z`hTwLk6lb9-pC*W8(cwn6F-BU*YA=aOA%(Drr?f^uFC&cEP*cOqC869@<`^12UfaU z6VEO0hGDO5@0)r?M+7qjPP{S^VkjBi=33z+gJK5-%+jWhE-t2Fkn!WeD7qxhcgEKD z_TIjKHq5eyFpM^Au0<%J@3xqjSXg*?Hw^M!Fa-PRxz_9z7o|ui0ptDuH)nNWVq!Yg z8D=x;O!zl*28mYcHL;Fo3Nihs9E}An`}}JH&SE$L`&zxhOoufo4@U823OjU% zrOgbH`}ghQC*W2Z>sokn>71&xEgIH}9%N0BbB@!A6a$Tnsd$^L8GO#y z05Q)~0&u(y#dQ9KM}t2jT48_r@E0t@kJKq9*1C>S%&?|0eJV$ zDWoD?_yV0-wf-X$x{)u!z(Ze*S9mFX%S+;`J#q0@%%`yDD4^Ixj-*3Z06li0YKum8RA6#sn8` zUK1J6A!Cm5qH&EYt*OJBV4Dr(^^*Cs(}MzMm&=J@aF6Nf_~flu1MWH zt*-g!x;G-7j#b{E!vjvvv|RztRZymtr6$+|J(B*DjH{Myate>1XJqCVvtDr9DO*gB z@^NQ`ro*htAj{fBA4T5l$8bHQqobZip!!S>@oN!V#FR##qt5)yY3Dm7tF$PAS4~k<}k-(ADkF2Rz@%rEDMc%&aSXo%Y3eZ2cMj z#EJU&oy$*LtI*K+V8K?n;JjP`fWCZt;;0qUkbIKKo6Shg zusau&fhq-`Uu-jf)W;T+OZKWG>MuR#D4bD~ST#DRF@3{g)Rsf}Vb3Kw*GVG*<@2S6 z@m(}}zk`qI&dRwycia>$H0k(;uSH;HoW+OYmgNUVR@%JC$*MN~WD7gSaQi{3PDRK? zu<}d9jHr=JIMNl$y%{(guFYRAvXk+%$YOe6#9CEVm6?|}nZ=+rAvh?AU0o&EyDwGX zWi5h5E9!NgyqT}hy8yR~YLgw!@p4%5W@i=Pfb^bR;PMC7?EGSi&X9%TWHyoKu{NU_ zm}l;(!+J#eV2Vw<*WoyQP`6o|GgxuFT zz;QGh`|gZnh=9DKznON$LXixdZqDgNrgPt75_Ny2%f!*Y94Y4vjhyFjoEmhnIY=#L{lA2w7WGPt^X6V3ZjU-|nDjPbuLQz$7y{t+jyqit9AtVjwu1)Yt<(A}+~YLLPx zf^K#J%G1WXc2FxBL6(Ay$qr)q30iNxY9!WB7D1i3zOW1WXU=gN1D%MT1kU8evGR|z zo?&YfuB@2-mU;ELgmMB1ac935wTWmR%B2s4UzYJ;^l#hXo=SYfUS=yN1Qv~VnMgA@ z5G06!&H?QPw?Zoq9N27Z_h=>kQq48K=&zDG!X1xVsw4edE}>KLjDwxt_-%pArz6GP zH#@bDg?Q|#QhFv*lcwnu0tzW;{f4A1IDW4je4Yen|N0WTRAi)#*6 z@wzPI|3Tn)ITXR=&>-6@uJQ>zV%4m!catewQLkndjJ|Pw8P3O&%wDRRFrw$ooSrUi>S?7wWg-!_lw%fS{T8El#2;B^C$_>*m7dDKW=m$1(o?3$dn z$$J4!7%LO@>4+s?+FJ3bHlTuI}_y7gKM$< zK7Z-uQl|YyoCyaazppc)01`cnoEwRqr!GkEIBUK0hP{*Gm-Pa!4onT)lRuxN1@%Au zK^2Hi@2;^wpD5eXYM=Jx)r9VoP>K%=icnK`{4c-*V4+2skg%yPxSGZeL|db zJyW*JoW<&DqPxseDBKrMt;=}J=@M_U zh;^b9@)eTvw?996Vm|&^894K10&069*>cP54QK=>fa-4`)7c1Y(@vKa(gja4+9G8X z{PlLBNr9Rs4kGWA9=z68U$3S5&G4W=r1g7(>yWEmf?h5bK>{y-9@&Sdd`#n+r7_Hd zcgT=79v|RD(OVBTa2)M(_@m)Q0H>Xl;2(wlhY7dk_Eh`o+X-g=aGwStj{{q})l-OV z$#2>BywS@1B=c~zHUZ(QY<-+*bY`lOHVyU)@Fm)aU@EON*@8Ihw>d3!SlB#r@EAOY zCS2g9-6evY?bNRbId1%21^L{%#vOgAoR+yiLyH(T3-Ffx_8*YLiTbUb^fx~3AkH)I2nCJMpv4#&w<MO|Z9q{GjkYBc$8A3Io5Bzk-rhC~+xlbf7wVdh-ORCO$xSy5_1fYHY+(e9TO3EHqf;6Fq;!(Sziod2`>f5!LTVvRs3oyRl zUvUS}`&cq-`YaQQyf=s`d%Nr}dVtPTWV$3fsiH7(_*ZlJV9 zfb5#fqNDcP|IzW(dD&D~I$5j^Ep?`+vIzQ;`t$MyM=(6K8{AnLz*{J)9?|e{6LtGE zgZC_3((r5K0X2r?#-0q)QIMbK_lU@Bu5BfUQvP;;rW3v@488@wbfys%O;r{rYTLPmVkaSf)wMs9rp>YX5x1Gn&DzC! zF?0ArclDybB0zH>7BpIX3x?6==m6boWFVeJVNP~EDeZg>@7a4w%S`LY`DvqKVgX=d z%m=MgZ)4x~2HM{>D|*-3C9ckYo-W8HK}4^AivA0(1kAwn(U zG%{HjRu7YF4l|(e_8V*QK}nq}`B<(lOGK5q<7VTGJQ(nyuYZ7=`;J2#v$E$x3hI|w zl^q&7(VGDOSl2lqTepltd?CzD4hgf>5_d8`_i7iuR?)B>yaQc$cf(^dS(*;5k2GiE zgs!nrtep!-$z{1iKf<)_j4IjCP@sNH zEY8iP4hjkBSzV>5&}*9YHgEsdjG*1&@OoUDZvC?}?G`ty_0*$9RN5VZ;pq&<&$1~e z%U+jq5yFtZQI5d_;+(_e7VSF^ra>;EIbjeUYb<|6mFIBT@cHAr4)k#3&fZ)MdhB=u z%&(GgBwB12-o8YIpKG>+tp?Ey!spR2dwdogm_0P~F8OJBIrcRUj;hJ_rQ23rKj+FV z2HW_zOO$cFh-*&IZG%3b8RtlVB8sdsI!*@PXA7sp5pi-Z}%es1%$aKTAz_z3YJ) zRS<7t)FT#lhnDHcR-*D&zag_bMIqn@hwABzi(j8DPU8ayk=I~Q0(KCX^0CXstLc=m z(z4WedX7S($k#92pj1dh>3Pr0y4ifIIlY|J#_i4eeFi9q>shL#N_9I5eNrTft*k^U zz$=~#tg$$Z{FdvEI=@RLOA1ruxYg7VBDs9)UG z0AD^VfRB?VA00I&3ZA$NC>vi)5)WBCQXd8z%1s6M&0tSn0Fr{8DC z`3FZwl}xaLNKl*%3k%C(x7=SidF)T`_%j$UksHM`qtBMJ4vg)bn^9!g!R5KwP3ZTH z1D5%#DXXYGr|^5I^3OO(Ss}5%e=ec_wP!0X+tEcRp{YsW;_9lZtNSW?Aa3_wD5K95 zI65|F;^+vVr>75-3=yQ;T4g{A;nYCC&@xhotv164mJiO)e>1r4^4u&iJS^{7O#^_^ zk8Nz2<`)&^<>ta08XCq8MR`)bp$P2jle9;_F)FC5ug@n$>4J)ueE8_g6&CB?)YPO3 z%+||Ap}K_kRoRS(Tb(+&ybO+x#-K&;zwy}EkF4V9e7wOW>1?oN5Jo~pMSU)U!6s9d zS5z<}!Jl6C{d{fY==JAxu@(rN$kU|{nkhLruw%e`#br0A!V^pwSS8X49&r~Tk*7fL z7x~!VI`ugr}Q5uX1Di-;P>n#8PScVNGr`?Vl6It_^ zR{b)ho||?92^UEu@qhp+5T=*uE5!`Y-kIy&^+0vtu!p}AfQX9%d$GyM{RfMA-&mDV zRg8*$I59%O?C={*HaFMe_G>G{&tI@`I@jk9kEeR=wB947-$@*ruqZEkkiKSY$Rb?+ z^0z7#ulE&c538YssV=r8M*6z7Y6D(2d{b3=cZsXXQfte$zJhd19)MU^gOWy=xTZ!6 z8{Z94D;G!gXk+Ak)v}rV<_iT#t=}qFJmYq{VZS$#a+RydzqG8X zD1Pw;UP&|UJM!$u`<29HWx`2CJ`xIZV{L{&;Ef1E*O-Ex_LpAwLZkan45L-C$)d_q zTCMEQ&&|zya<^YZt?dwTmIL@(@u<&!G4>JcO|}aA)9T5!F^e&Bb|gQ zQ%M_zXi)BIrhZ7Ik1oZJ2v#x*gMB#3 zeD6Z56o_hT6-qNG!ztf!ZVJB^%dM8`!% zR;Q_7*VSg@o^^M745TA@-RR>#M01zpe*7W|bS-cY$=aI6m5fv42@%J7x*h45^zFm5 zYgbdf)Um*1eGmjVVjMrb-05b-+w4meTmxf;GGOTS_ zhMuL9CO8Fi^|uU8^LF*;cqD>*hvqRY_*xjePXhK}(_vxqN_+cCCT6GGcZQM+`(aZE zKWteLIg5f5y2j=^u+kx7taMF%kjx3VS1VgEPE9blIVz&Qc(kOCAr%N%E)x+qI(#*Z z-DZPHAah4)J!VMCS51D*9ov2Oy@^_^A_E-OuYV6-j`x$&S7j$(L!CLh?=SXmjKdo+42)hqiv{vZ)?|~l2F9@0*DZ)p{Xh{q0f5aLJFObo50`S zjNMMuz22>7eYu{p`F8mDpAfTyn^Qu8jdwR9 zwl>zG!!*xs^(=@}CN%swS7sKFd^=B<9;GDFsTQ8w&h;jUqJRD+E64@eT|wd9l)9Sg z_;=Gu#9pJiuCLonPRu|6?J%?c;uG0y5Ks57oQjru1naYSEO0`k3x-4i2bo++aGZ{| zsO1mDz`McI-7{KVr*{a$ukhtv;+S{J&7;tN z#ro$3usd$*yxC&N!Jf}uJQ0gK@CBg7;=8&IPTKYG+_YPve)bkbLO@pTN`j68T_(NI z?X=zI%G>dyFtVbdeo3CW*Aq53z+h79|Q@)$OtA16kab2z%u%pc8O5TR`;G0;IEmI z_#?8CijxzkK(p$PKi(eti2fb5m!Fvp+Y3}dGq`^}W}HXB{~yZ4@zWAS=1fkIwHK=B z=%9x8ovhO36DG&h{Og@}c6Jz8caAaW8VWwVHL(?AlnU8_1iP7Qy_iwcm$?yM(@W}G4{-O*nqmmsz z?i;~^5fsqF1?WaeA>|)2@?7v~j~cl_AJ}de5={A3q-bxsFE|&sPj{f@$rtN!jDUR5%E6Rgj96Rx~ z!NG{kEG$%a_s0;TtguTqVXE_3y-mGgFYz5CFOI^X=j}ikt33Lku&OcElz{)LKcjCH zBKiCGZ$;S8SYi?_h_vIbBZ(ia*P9m+6fzUcf$bQc9AQ I;>H302TLvzD*ylh literal 0 HcmV?d00001 diff --git a/nginx/img/image2.png b/nginx/img/image2.png new file mode 100644 index 0000000000000000000000000000000000000000..dddd1b8f97fa32a3ba5e64841ac01f46f16a27f2 GIT binary patch literal 69892 zcmagF18`+s^e-6W#=2Y#v_ng{T zYis?M!sTVf-~iYFARr((32_lcARyqAuW}6q@%1I&>(lV-2iQ?jObDoY68HG)1%(>=?A6hIxu9{zOI-k~J! z4AWOe^<-Foz7G}lv_+#=EKd@Jy5mS!`#9!c6jl8YKnwrUeb&) z##XZADZO5s7ju$neH}qm=?t8~>E5+Y8$i-ODo&j)6-vCL{|*>ggQv42m8D8K=j)tx z!B;hx|E@(>+6bchT2oC}EL*1B!;}?Z-v&Y=%p)YyX{o*={-Yx@KycqeL?lS_AemlAv+7CFUj`3tURnPXVAYsg z9H2o{*ofVrO)q9?N&RE13l0MVqmg{#@30UBcDdCxY|+MHoj%9Ra-(*I4FP{`P#WD<3m30+dF@`EB)Wzw+bGp)Fkl#(#*6{G~gCy90>jB6pEF|T1zY($NEH=G5E4CAy{%k@dYxz`mkPV=T%NrLE z(nL;#ADng*XPB`1qUnnzFWMjLEx&{Q_C~${J$}~VjL!WrFmKONVS>55^-_||H?+Om*AHP_>M4uTg2+@nn8&oOt zfNvU;7F@XEvBog}+lRq`n1%+{#;e>69R*+^H3$m|u9@y*HjkK>JfGwHz5}ap$gKDG zuN~2RxzMFmrJ!WPtyG{*HNh-@Z@JJlVLIxHiW)6pAs1v8qRl`L+m;R$_7z~ z9i-yDz`s-n+%ygeyLzPqEU4GvUJ|Vsl>||9WhYyg6FJQ1n==lOAa;M7{TT>XZ+EHk zVDS8UCKkq>qxwS;#N6CC)7h+wThlq5B)(6ivn_mdKOf*sEFc`NHd?7STB0r1=*0+! z!k0Ba6kRX;5EuD&a=zAVbUa(M+-QYyvDsOXotnR)!q|Q2tkLPg=JWaPdcOk
Rv zZQ=!I&eq)*uqefSA(?`I+<%CO;K9)RxbG4p$7|lMlrI9^*xmfQo^vp}{kvHCaV482 zgjtB~&=TakA3D8um{<(HMKvleH4u$*Y3}p=jy#Rt?`M}svq0O>%~%r6$&=+u zg9S=QXXgSQxJTQ@LWLTW=YzHLW#-harpx7K6bgl`xerqpySeu>B8$DtQ9B?%>HsZ9 zFc4z@*df1mR}lRAYiHQ+^np(#xlaGxb_sa=*SS*`c=vKy+vczKq&i9dtR@hONfs?g zkGM**XS2M0`d-iSQRx6Czy?+rfKf?F$$84<eV#nNnCp zgi?)XLt|rbXeeYlt4039Z9l@d(uvL2$4j+O-8w_?FOCXy%_N3%aB*>`3&apu&8G#t zKkts`EWh2KEcEYAok*qeWq?5Vj1#nMF?aF4;CX!f@UGV?Wh1PSCaid(dI%8~`-fAAC5q(196W0SCc4!IYz1GmksLpzYxiNMW+LCyy z$tI&sO&UBmD=TYtTpC>Vhy3~dO1&AST6N|s?)%%bqjOA#Zb5_f3UZ_6Lf`)Hl!eKu zDLFdhvennBpx~1nR4x91_we4z0T~@h_zj5u^bM0dRGdA-k+&&pI#Yit6q6i zDby-}r5Zi8j19d`k0Sn3KNnJ$v*o-C0Y-i}E(?DGNx{u$u7N-wrT3S6r6q;c);*F! zDz86z3x$p6v4|iSkcXu`#lDU;3R_?I2m5NXZO!7(z<>a|y%D5|1y}ir%dd5}Wm_ch zeM355ZJb-5$kFqCSFwpM-kFX`0vOSeh(^l8%sQVgmhpf#fW{{D6bdB+l*|2n9yeSq ziNtrmQ|WfJyy*S>n(Y@o>N}^=V|M^t0^qXFXt?|l{QyR0uEAoC(c{ki{?hm3S?rww z?U!;!F*?9936tB2G6W8%SeBzv^oZGH43$>B7U*ko)jo^s4~|(_eG)sk1ta^42>WQi z0d6Lz$ne|xzV4kDS6!j>_$?mi;D$x$GWIO4$_X8LtHrN%g+WW57m@nbRw9>US#2sb z>~Sn6%4Q@bB{iY)p0`T!T`g=j>Io7SGnbuA={%YKGJkiXO};7(z*_FyY_q0n^J9su z2AVo?J-dY5r+iRpuJP-6N$-+RV2fgCM4y%g$_f*e37HoX1ZQQNV9;z3KTok-QddtssF5xummZEOL*Hz5G=s%r7I8exdZ zbd_bIQhAVIZ*R9#C*8M!_=6>E1#@qCI|`YZne*7q)vq6~mkW=-68Q9vc&L=;%)GE0 z+;vk?_p)-Nc%3FTz9!z+s=H);-nlmC%Gm@ z+xpM+pT{B<)6?>e2jasPFreI08Iw)L=~QgMbK&Nz*Cu0&Ray%Mib|eaUEXYJEP1fl)oXZg=TO*i!R3^YW zU5!k8T9t@nqMky&8$vZY>SOWymz!&ZBT%bw1mqw>YDG6k$G|oarT*N zHlGo~D_*oP(@-*y`h0kNR2z;d=4wati?*0!TXK?46OuVeG#va{wky(Tz+I6&nO-tA z2f_E+!c}mTn^hl+;>7N(OV4rSq3=CPgP(Yo1y=PtqAwEi9sbC8ulQ9 zSg$n~ffoN#K1QL!%v;Hz>OG}be-DanS5YQjb}=8N=w!aE0KZ^ivf7l9-?g+XWpa3A z)af_I3$6EXXzGjx?z-Dt*qdRI`W%~!nOiT4=F4!i-PzpcF^j@S5pv3?YkdM{lb;r`f z(MIV!oCD;DN34kTnX1;qjJ>KCdiZ zqA2*z41t$Szwm`u{wZuqf-(8tdh(BNg5KjMKchuA4372e?Chp_9}Gm!Qp058cQ8qp z{kjdg4KBjC8S@UD2Zhhl>ael4VggpGpTkZXP=(9qc0uR1yPa5NlXD_0Y;1mM{+X*b zxPQ85#2k9Aq7FIP(Us0{MZOLh)ZdXuXUk|7TjM6v7bj5U?@w#|+*U~P!CamuzjYtN z7@UYIxIR25PyG;c_3AgX1twEF{NR98E0^iL?9_>UoVjZ&y)wU49_LMlQet|{qBNCtHKPvx!P0hAo29vGAjbJfkB?wY{C*{+Y< zWPH~XptoT#K_h_g94L(6g4?e)ly};3d{w)j6<>KJq2>b6vFtNyJ*J_+i?a26Q>bm{ltNWjF*S}Q6ww}!ye z3%abedN?@BrEsG=mj|c)r6QRh>A)X}?V2Nppbu4nYUUuv4Cu_BGEkf<+%b%23TZX+ zF(`(+cLThO(N^27d9)4Rte7~s^DVX$?f!jNdcY(~%cB-nzAhP6$7HC$W;@2&J?uq7 zP*Qy42;@vln>P!pw{PG4$D%mwYJj^`G4ZS$PqNFeP)3!=c?^bF(rxZ%+chku2= zM+%7JK{|ucQ)A(;^&t_C55Z9Id8)|a`B2o$!_2+Qoml4TOVXo=mTP0xZA5MPaWzV? zAj8}K3KDQ4Tf6^ubsBa67Q?OQ*Ki0Mb2CP99!!Sg7yvlIZC$P);M(ZK;F@oRS=nES zmaftZwL{KAMc3j)4#+zpK;UY0j3p8p1srd30WWw{JNlz zj9ckUw6}O`9EE_VJY(z_`e&eU!SaT+WUPRq9D_%K1BR)L@t!(v4(6wp@eevCrfY3M zq5gh}rzoqvw+pU;dSxa>_jRfp%_5&j$m1M-9SbJXKcbkeF4u?}OqKL?^gDvdTjF!; zdtK8g{o>Gb55`K?ro_x|0QI*He~GmtIj zO!lC?Rc2*p2j%-3$q<}Z<5?X__3VjXOmSON^IDaGHY;#&Ej&FD(^{ypTp1~)(l(=K z3+nzP(ChFQe$9JMLttTz#-bBCEWWeuR>Ntp=YEph>Nj%b2YTI()Tig?xYMPYgfHDN zZh2X~&l$axJ?ogVgAR%}+?T{pg2_^G+he$3xMzPG+091xXB31mQ&TYXVZUFyZP0+5 zEXk-BscXEj-F-CGSW@#u-J`K$J3lqq#^8o}(g9#sN=)B8!eODjz{9z!A_M?0n%;gX zFKXRejsjuMQOF~Cb?R{#-qS%{o`OtxV?mmjZgqExl+KmkQ9+|kvmlUg@!8*2c8^qN z3JpK7uhm|EB{4_VD7Yf2B41$O8L3@|hJq_+Fcg3yuCOH?nDdAvLh-C`E|K;U3p{t= zyJH{;)PeBr@D7FV8P!07&cK8^z=jJW)dGjrA38IuO2Dun&gxd+4-!@uAg`0;45k|Y zK#_wJOw_Jao=z$)xjDh&$Bn?06PinwFM}^E?#>yM2%pE#J81#}k!=-J%h9of{5+kg5l!W=Z>3ne+(RA(TyFv^%yL-fBI2-uK{gBiKcXI3* zS@iJWEnQnM-Y{WFQR+Vz`2DuKsyiyfA9ftO7r$-wowr;t+wQwwydxP<;?V=!^HxRq z=7K}Sh&7s-JGnv@*6{m_w)9!O^{6HYp22A`8G)r-afep?1fHHNhYNpvGsr2Y61}gf zW-%Ry&gPi1JAANN??MB7_Wx!w{h-QKq+xZPuOWLTJ(lDP*Vu{~jz15zANq!N9V~l-ES)zJ6D51u7d^;Fu(i?)r}uk?}=_8|7y=^u!7+zcA9L#e^reW z40P#a?`6IrpP=_4zQewQaL2kHij?Iu6f(DD$1+YZ%s$nJFc)K4N%}TgKY5z)&@sKM zHA#2=3H|AEF8SbeBGA-eE4A3-D>XD+|SffO3Y5hNJ&=k>GG+%Oy*FO4%;#uSh29QI;C^0g=Tp+Ag&oe_D4ajm=Ja zDl03=LI?;E!xMq>COnx%U2mC&ev?(ElW|U{upR*+>2qy~gv&$ZoZ%N(H`C}P?|3JZ zAjF#9b8#IEPs1Oi z*pMW*vHgXkrA`upkpL4(An|%_^Qb}_(9YR}*2J(V^Z(&tgVbD8uOY+% z9o=B0Dw_Vyc|>LwPi1o^Gz#6hPUK$&LVMM^cBs&Vr?ueM=@lIkZC{|QwcuALRUtBo zda{e~Wh=$Cc3$gLp2uEP*;Z>ob_AL+1Vk;C11?s&=Sy5rEgZ@8_#m=q$l$hmJ}C{CS(>c@W0&Y(j+%^v z=mdt@l@PZXfqV&gV{XNo^<^)qFWJwR1nq6j<9^m^Zi zo9(<@Ote3%U|y=+pIl-*;^To@qj0)joyk2~QJwC=dQVA=cDUXc$3-uC7i#O(*N=$M zoz8>1e{`cnkv{0b+OFcmT&ngzRUO)~ZBs7F{Q!9`Fq@96d+s68DKA;R5*B;IR)
n(C6`P>E5oZs$ohusGnC+8w$ z10Gj(kC*$Q)ajLvjO4%2X*Tg>Qa#cm9pYnup}euJF&CqJhVO?h7h|kcal!u*xDrn} zSup)Wl@PzEJ9F8jo){X7rBYP5UijMs*EY3Prm(ONHU2cZFWrmg;k|qByf>ws^H*I~ zqPSKyaU4Oc@|OvnaLI^XtxB_K^DVRYsWKLFH`12*q!r81rdiXjsZKN;Fu|yQOx7{( z;3AAnKXDdwUvy|-!O<1^+e}y;IVz(~0I8PX^^(kyy9Srx?Qwedc4HZ5g z_?Z-!J<}`Vja*7k2XMLyM&FVZH2r`vP`SwZ3L8R(t(|X|hkpxgR{onp(5FAQ;Rcf> zk~aCvX=)=hva3sAS{@NBSx9Xq8@Q`h^}q*~GfcDafWDV#EtBQYA+&;hpE_{S8iP7d zFK8pR%5XDDvQb+oh*=ZffTOHmY5s%Z-BrDLofj}K?KhFkF?-KB%*Yk9kePP+ZObb( zT)kCTS8`9o<;{_1qxoRysH(zLJlrf?1CzTtekJ^4X1l@EsETPmZ#GS?)E;@$hyz{r zr|J?G*rOnZd(Wra4@_r7_~?q{?@&0Nw1a3K;|6wwlkY6h^eIF6Yl(AVpQWojfeKE4 z4RY?pjX_CeP)+;Vn=<$)sXZ$z08)1By39m{b!w{t!9e*p=xh$WVoDX5kElW%;6IxC%$7)~JL zh8e|w*%;&ZSqg@=FP7_sZzFms`@+g|RaKA-FTV-=S$p8Yn#vv$)Hf@@n&-5j%N?QB$Q4NCNkC+Egeig7VS}t$} zed~bvltH;#QvhW>-Gvs@tdFu*XyPqNQ#hACAM0C8MG+x?u%o(!h3N{+E{>XRszVA$ zjv6M;k>_=Dg7nd%Fg*AWNxZ%i_#QWu^9Kz-$R00XdM!+nOnzWP%@tYbQY7$^S>GS7 zE%F4~YHN$>#g<+NX{q)xC4Bji-Ojh`*nQLh{a$A!x^FRCL%6eFD4? zXnTRCpgFBr5a%Eg7uQI|W)1B)l;`YcTc)qXvt)t&PbOH_zeIhrZE)Y`l|y8jFQ9ZD zFtHFkrtcLDi^=F`z15ZVWt0w1H)ZI>U#goxLjxH{ZbBC>O-p7vc`u#=ekd;e z<9Fkiq9`MnY-UesEF-~XMM8`$Az@##T6jDEzPGvNEV6!Tv>4B>C_5`}QLrnL zR1&BEahlqKK^7nDEG&^QdoUnxD1BDpOjIBJjRG)XLw6kGHL~6n6&}&Z6o-vY@_?ol zD|p(^D%JATOQCa+p3R^W>RR%S}8|`PLK}zenh>zL(El6R(s2INKxSPYi}=g#u9`LPDS)KYoU2`!b3t*ApKh<5CRSn4=+loM7E6YAO7g2#4ZJQPGdG)D*LQB(&wfT0h}6SpWNn`5lJ5^q;AZvX4>lKNB8O$p2N1@&5-1{iUP;svqos zOnsRDUtN6{lTS#2dU)u|acm+{&TCD^Qz4zKNsEI1R^4O5^~iI~TRh(s;2v!7^awtB zcS{y`4fIOUER5!fB2HFZTk%2yKkVy&Z2UE(Xf-OHARR*gDuI~(pUY2Tp|Y>e25rvL z`CuXzbB2}BDArIewl$wvDJ6m^5vi}64}$IdidDfdNXU_ z$M7b*U7X~4d7+atNQlL0>z;g$0i&;~wUH1>e8z6Zd(R?FZL>Go;G$Hm7YTg`IgFIN zwrUz+)D%jhvKxGWlqc!E%74dnk6pf6oLo?K-)oYFA*!jsp&$>T5af|lXkB!i0lZS5VFQ5A z`{4Y*Sqd}@4XO2VL51nIiWxnGo1U$wii`v6uJ;!&*c^q?ZnJ{{$b$Y@7~{H(RN)uv z*-2-=k~E zR0sJXQ_*vkhmd?{8@`Eyf3P9=_Z}EB6U&3KOyY%R;y^IkEUy=*5K>Q~ft2#D9GQhz z$9Kbqe83alKDH>Ok`%srk%8JKDwDYTG5$`2YGJzdr=|zzitmjfS{JHsNH=+e2{1;n z{I~=!LaD>#GDRO*PCU21J$vm1X-WqZ*zrbb&C>!bl~Nu0Snfkv))sS~G1=eJNP#^D zWhjf+&vp-cC&lSWh9`7rJJSX-6}>_<&D^>I#IaJlb)T$mO?re|F@1o4%Z%%hl4xaX zIwXkE@@l$JZc7v!2}RHAD36V*{Vui8929EvXMiV_=knTGfm1V_TfQ<86*ID}^=g3_ zi%}^)!BBUvL!o0<1dMHv-QAT49loI1_n$viw2A)Q?JSR^@-`X{MhSqGAd8>43W^Pn zLpzZ>xAzt#0w>A^BH{Ks{k>kF;wgCr>0*29M3q==kE5eILk&)tZM9)Gq6j3F3=Dzd zfJ^4a_IYKNvBe=~SxWuTg+|0^)XL_CqN5KTK7SMB;dQNf;8(P9lf1uR-&ycrhZe8~ zL>qTWX`fQOInG1!^Ixv_ep~HTG>?ehYW7dN!S8r{>is;D5P`;>$*a)v=O!n%FGjCc zK46j4<+IDeW9R&P!|PE8Q z44@0Z7;f&R&;+01SWsBVOy~e1f-UW#fDW57*w#|6<1QBm8@bv_`OY(mvO9*^wgE}Q zdrpL)7kKGGD(%x>?rdl=qOBFhd$j_wR=SW}pO8=Gg?bjud z{4bKW1%}dhKZ5+RMtPO7BBpI1crjBK>i8Ou{=+zAi0B1{tlwsT<(5}ACH|(s?Bdq7 zhbqCq`!a0JP&>vK2#yY`=5NcLUz-}kHqDTzIENi403eAa{rJ@ca^)NKG#U+gC3ME{jCba8QVsq@XN*%Lnv)PAE$d1*!~??e)G62V;wz{uAT<@VE%w2nyc-2MG` zIeJ2Ya1A3a&;LuTIOk^HH?1?2m$pKDx(tE9p^gk?=8&1P;4-e-i0_^NQq%$sr_TSG|S$&&VVf zK8ny?{@JMRgquvm&}Zq57$lhlBuVV|lN(B)#rNOXUoO|6V`{QlR7qn>t`d2{$)W%7 z+0#@w&WiYZ4P%vtcZbCqNKLm*h}r};NuDIyJ={N3hxy6ZS9-@PA|_U$V{J|Q6>iGb z{1+c6Q?Gg7kKAKfW<+ z)5jRGe8bEmS#Nt34aHte)5>))*y3x2?2`L60ZJGS#q$dicr~FNlR);tVe*5=bLEPt z`G#hs{V#zO1g$y}ebJMH)A}>sSuDwO_O9M)iT3Zn?Kxh!?|}mZ0(v~c%30aJdkJy? zd3@_7^nFJVrt+?#$_Up}drZq-5r?C?k-WLiQpH@e%EQofSN#U~s`+Oo{h{k)HH4S5 zWY6#&W{<-402jujpF}JS;g(gQ`h)u%XFy62yEG)NiYSFVZ9-HmyQ}C(i9-jMVD}|6 zmHTeB-ay=MRQ;I+r_=q%Mz}W2uyv}5Wi*DfB#f5v!^%#&)(t;-w(9x*&Ha<56Jnt$eL1BE8$E+kb zIYi*}qFZ);GlSokAkAiyceXODz7zG*=0qJSX&z=$eMgmjpFwe!Oz$0;M^9R((4XQf zM=RRBgQ7^pb5#&yQQi5-52=0q0E%Z*`xSc-gQk0o*<#E`zQ7aF-TZB4=D<-9EdoXg zA~!sOEt1R-Q-d?lG9qsIS^l<=8M)-(UhrMEA)cYujZM8P3H9$d_Tfs`3cYHDgvp*q*wS%r)S1pTZ3@aafd%LeZSG^(HT9=Shl?J-swZhUC%J8dt}>DD^$A zk4vNI1eX6({=I7+@K?+-kC{FYQO-$br*#W2|8)hAWzzo5vOKJCJ#y*6H43}-@8X36 zWgo7j`nE|g$YxtweNq|-trT{3)bvi$S-bs5B6aFaKO=sanQjemPIc7K@6c+j7hK3X z)b?9pf2fO9>4O!_oDYri^S1tW;pUs-s#KfS& zpmz0jkqit7$|X-SS+N14>+g)JY;EDA-iN!`Q9KetPh5KH(J(!892Vj}9=QF96-;~0 zo=+~L-+84Z2X=j52@OUO$8VQdCx~ehE0i!Ae`_*UMIvb9Z*^@Wv`hGhNsISqgqksS zU-OMST}G>{Iu!3|`n1`BxS4w1t(yE)@U$g}S@Y%_`KM6M zJO$9xM{vaOp)NQz0fVxX`?AC!EDhnHjec|2-7-7gtyhdc9zxd&!=#xiRB| zMN0aabvfRUq6*|0+d<~Ls!=~GaAV&rj zryJ{kPoYy^<^_XE*4ZA&#J6)cO;e+WsD6RjTKaPml*eQ}rXnzE%_ntpLx0ghAAzkB z$)*Mvdv%^_35Uey<&I96YS@}!!~JF!y=WuZPncu-mD_+y$KOk;LPTrjETC1vlFI7@ zO>c(7qRQJ5ef3n4x_bb`!_zLUR?hH1Mz#xgsHVT;pFMH8vn3p}03wdH1M^J~rGfIZ z>q%jAEm~%Z+rSP+rr&J)r;o7qPW=w0L&jcJ2SLzwgNOMF;o*?tH6a+sUgJz*Q}rGl zMDvgeA`WsuDhN!lS1ecW3N`#p9Tz0wA8ga#OLcC~4^2qc=Mg(H+Fl>U9}EyoC-3$s zR2CNEb1gv$BnrQ3EgO44WYX1ywZ$2U??;rKvlJGE`cHW0jhzo$u6Ra3ZrP7kuh8Lf zJ&LOlex8ci^-ZH>(L~(5AAH#sX8xc^lkc+jS_anje)5{8Rttu*C)hK$UoqVbq`#(R zR2#Rccl_**Ad?wf-$lPVTEl*HJr@m%Cp_qL@37uPZ``cs97Fo$jzYhs9XV922`3dY zTOj*qB@S+xAj=U{BoRRQ-7xIdeBE*NqeFip&CfT17Ezd3RVdHMc><*58K*Q+zB4M! zuiY33%{5BFZJM_zI4fvxRbG~~@SZ7ppebMd1+AFqld83imM@~nhIdXCpl7tSNT z4B~}1)RYPU?D82SUv{Hs^jP}lMmcY(>yJ^A z%7bnKesk{T?9MZ?4Qk#Cho+t{W8((03}58Oh2m`1)0R9N{QiM54v=!M&?(cgWNm7K z?>o>z*s@G-D`T^x51qY11UoRiK}o6(q0Se0(v_Lh&Lbtj+r_ym4v#F)Y^@CeV0`(g!3?0_;L zgtM$gv2$IZ=HUVlUTeLDP(||5n|&p<{9J?OabE^TUGnVZ_yrMI+SoW| z*4@Nr)99|~H-WRpOjyEU#%J0bLD$#YKzACv(Ng;=Q*jY~Y=ABpfgPMP<(o09!sdi| zbL_@uB8Hz1BkcZKEVf=n{|3i0m`pHiC}s|ejFL^He{Uzvs{oEN%o^lEnSmiBrd&na zU!>D+$HNaN5ogfyu}5+qOWy6j;Js#WwD_v`@I!-|3>6R@tt2Ed0lPBx+_}X?JRH@} zv-3!aPbDz}waE^T^0;E~6jq#uC)~AfwwPQo2U3a04v|sAFJ|b0t@{li`sBGwO8(@s zxOMd5g}v&O6~&iAusxUo_Sf9Ljk0D(n2J&;#KUT^9oCn z-6j|~D}RU0ocMv~@%trnx^3VT$FM%*Pgsq+UOD21??uzYRyZ%;KM>wi)&(Gz)Y-JQ z18p`Eb{5*Pt)-=RYaV=T(E)FQbx+(|>D@(BN)(VJ_lv6Sij_ zD1t|@>&)!!z+1!o@qhrKaf`+SzCKAlY9`5k{R&zj6RYi*u^Bht0fSkyJgQ^Gv>?ti zO^YG=@@xnBdXVdD4Byl?)T#C3k-WM^BX$M9VNOFJbxZrx<;c z-7O6pJpT>cf{dgl!18|Rhx?H*CQOYkT)8{mbu0Sfxu1FN8VyAl#vPfH!QJ1tik6k! zDL93hPSKbLvGG}3B~T}=HJb&;-|u7)#CF?!X84}rG^foC0F?+(7M|~3}#&K z6;@Y4noKsP9S?xP#3<}8+5JvaqtrK_*o)a6M3@Tx*j4i2AXu^r7yWtmu3=`yUnC$W zlAAVGmrHbeZM=Q{dp;Ee8J&*gh1ihVG(<#2A@cL{8GS#zzEU3ac8kIY5r!JLJL5Wd zQ6q4?_u%Meqm9H{x$O8(Bd)*PL^dq^T1T2k2P*a!(y%Vh?_TWE245OJJTNfu)mN19 zZ@sT9kH&)2@`x5xMMA!;(_I?9otymd_w@uf79iLe5GcRMSdc_%}m1&R#E47+wxVebE0mcdPFMO8@+P6sWyj}%_Ev_ zc|{yIV;kLHK$lk5m}LC(nG19oCgKRMUP3e;vnQ0-0(>E9ojg6ax#i9Pt z*Yt%gCK=dTLZzkgQ8%RiL}|s7&!%|}F6wEtNFqAuB75Pp$Qp5noji3EAqy9qE|xf2 zX(7g?izH-g3X$6NQMc2ip#9GqA4C)+Pa7EQNavKM4#^t)BZ^R$YsK*9{Hk-Cg46_rw!t{`?GXR{S5~-a(i1EV~+)^vC&N6R`4G75I!W&Eu&8T*DaV= zjJrWt6+y9Q)39x?23c45As{GZtFH?28*b_ra?Rqy_Yw`YmYPV0GER<05{OIXyvGBY zmd_{j=&9<+({5+MZnn$lU@|J`*tM3Oc0IHF6e+=OjSqKmg>|h6qWb*pKbo;$Nq9j; zdR`8}a_+|p#jv8$k(f*Yu=u>Gcc)7+cNZHOtX7MWPp_{DeME8Am&TIoA01+eq*3cD z^9e1gFaB@0jKYq3fxPjVZ=H~3=jxFo($?aG?7O2EVXPOT*j#KKq*N>qAnuPr@$0Yk zz;*AF8Kf4~#`!plJj(W3;*j-YdrMXhFA)Q0_#)J+>Bwd3LehAr@dT=n-JUTgY+R3? z7>YHOa7=Mw;SDV`Sf12Lnpca?|I<1MbE zl{CmxTxO#%Ne5Vx)yD_&L2()jgCfS}(veYIW+y^JSxb9Dx>Nhf5DPfSE%^jxm)e<_ z_Lr=#KLm>PwyR4r$#%!I;;`px5YvTo;L6Q^ZT6>*XjT%+HG*gV-vJBvWZ7q@Ml!VA z*2GiJG{Ie004do3pDGdK`-21?zg$Kz1cyhiP)Kip|L!a|i0&#_JuMa|}Yjrd+?@1D=S zGze^k|L>s}{07G;1bpr_9S(jm1YhZONu3cG4CFpOK6@|sr+Z)7UZm{o$zERp>+zAb zNqpO_g`6K(8ll-mPM)J>P?;OR!jo#l0a6O$VVyrsoNM%*YM!Cuq!da_KuNXl20NRx z){Vh*q6Hes?+prD<1s+$hzbK>jZ1BuLDZX4qYIk#h}lS>A6-5F%+&N>HNWIq!pHkf z88%A$(rjQefJoil`UHQaw33po5B?!%-MVq7Phq9B{RlSb?i_jy#V00W z1D0c`68juelm%}PYUOrTXs-lM8JmJ~$E1fGRVX$9UAC~QGr(j0GrvUP?;lotlFN%} z=9Qo@HGyc=z7S9!#U`n29s(@IAn3Wy$?z0ZBxt`Y$6C+kUzY|--Had3=3m3Lao$fz z6)vtQu_NC{ogzU7=z!mVz9a-5o3DbV=>n&s4Ih%x$%R^ud4G&=bsM|x^F@f}s}<&% zTBQu5&!FkJWrR*KeHeb3y{&D?@a`p_xhltb`>m{Z!@%If zVAAqT4TB|Qst@5xn#1+VW@)SoP0NEqjyS>O?E_UUt}fMELLxV$s@xDY5Z}ds>cCF3 zP#mY&Xze>~eVogcloW_x1|gG5?e(K^*+s5?3duI3t&ZH$is`Aa#kzPg6M2Cd=mM^^ zrbBEjz{spR)mP00Qe8Cd`Hk6;o0f?mJd)z@#E>0@*vz%;`#{PbLl4}o$2()&ZG`0+r`KE4A#~U-m zxy3{hYJFfq0!d}$uf{Wx!Tm-M$!5J;mjFmhmGWp?G1_4#1n@~~p0Gm?_96F>!39UN zsXENH;jFna%f1OC%w+s0oUGt3^;WK+i0{CJ*H;;HXrOY+gLq4 z0kPWxnXhKZ+VoN1o2g3T#MnkcaGN=zdQ-hkF*{E|sv-1xuZt$^%zjaXoG&<0!lZTF z$fGr46olq{kJyLVHhA8#QQX{5f+qOZF|NgW#b=RT z$`#HS<;2RUf@b`yQqG(tv@`3_>JDxV#usP)AguKh+gfbtw&Ea81Y^RO+%>svDorX_ zB@|uALDMLj(NU#GHh0a8vI5`-`_LPpk;I#7@`z-JS+%^B+eX?{MO)$j&L%{hp?ZSM5`qMXp zE{POsIy_xI!cVn8uQQB>7i&wbBp&WS@|meRFoa92_0 z&6&T7+4W^F1Xt1;d+RS$i3;#4&(_pSqI`%$1p~aw1z>aw!*FG)Q3fcqH|nevRkp#M z>Qh4)lZa)qq+`FRTc8^}N6)rfXDJrD9l%v%t9a{J>@BD+$DJdmRe;&eyFDbI` zj)6wq_^9L+3)y^|>Qdr%SQbTroSe_X6Kupi zbLybOEfWk7=Es*%`t%AbkH2vA33J8IH$eHM&DmEd&LiB7klmDpqn{rL{y@|b#(72^ zeB%Qtzr2Xif&w**p)5chkVQr}o#u?lP8rStHq318<5GRAj>-40RMvyAo7 zX-<}WmoJQjf}px@NYS4!DZylEyDZ45FbY$G${nuYwBXC}sO6y$dZ9~BmtlD8*XA{j zpJ?G1GKLG%DsI1HXTNg!p9h#MJPq@Gb(2FS1f3nk%136;7>1J^2pj7tkV{GTx8H0x z0&@Fk?4j?Te7XwVqc>J>@qH+ zmL14+4yG#p#mh2_TzQ~cN=Ox*vTaRm*!at_ih*v;7!WS4i;HeBz$w023_V2kV6GJN zaHWy);`*BC^z<~x?qmtq$T1G)J?dbNaa>O4^Ks%Z#}saad%i7xZOTYM&nGdlZxm6? zS3p%%Z>9Ln@v(z3BM^AQqjg7XOLh?CQKEzw9y@a^jYPGH7zz6F;&OCzNp|A5%^A!o zaiiOl5+ZS&*J+$4GhVGPBMx(tropWqO$itV7I8%*DcV6>RX}4Un~=lrqHrqhkQ33RFmG)1}>U6Gs&O zSRtM{Xku}ZWJKOT`pWV--x2l~j$X`>NL${_!PhNq^I z?t6?PewP$wH7CGF6cx24Q7gP(_%z6wdXyccB)TM2-4Dhm>xl7wE`JJO!BG1HK9h2o zh34FjMsyhp4#x%cCam98`X@piFteu@i}Hgz(&fz_hVJZUDz1=Ok0kyaS807cJlDY6cijKSb-NxBgqUf@JzYeGj0YgCEIcA|6fJbiQg~L1gVf+O zBic_f)sqX)R~pHRHY`nzx|D2Axd1b(OHQrK@cSNQXMgD(0AIDsH7o-x4Fo1P5GmuW zI2O3xV86s@jZNAfY|1($7e_R--d8?p_tdHc28U~Gi+^R6D93`TkLvAY#{P~F+10ZK ztz+kl&rJSSa%{|FI&c%M>d`Y#CLv_H-KHyNxwL}#nRu;dwW}|0p1$pg>OQ}i(-2Rn zffZUUpFh)vZOuRxaOZub+lUax647fbs3$KGnsMU-*W{(v5h(-^`7Z~7?8Kv*y2imG zr-&8%IHuy$mQFs1Lt)JWfezFZD;hI!cI&tsNn7@0xWL;@RUm$0MxIqD3}{wo`ACLE0wXA@#cfr(vkSrcho zfh0;K?n4`FWcUl-SR(+n*bw$RAo+SURoJ-{9N ze+Ol-#TJN(*Hza6&_%Bi)A^DnFHZd`pIvu{ke@GyX#wdmv3nv~nLXK|t&@-Tyd&&Q z2&p3ajI<ll%fzAbnR~5yH_&r3@07{+v zIl}WJ6~F0Yv{&Mw4)g*oeF%T2Xp8pmJYvR0iQae>pXPgyzg!(yJhu$uO6u@dnl19W zwCiCU73x(%NY;mRTU{M0&h&=aHvHK7143579Bz(c_fX+*abG3AD3mC|10HPu`DQmj z{DJ(Nu+wjVoEGFi50B%HY`ub|X%x3yDRCG$$&VWcw!QAJ=JASDe7VG9p4@&!n#55@c!!L3EG8i%Y z0I!GFHpSaFkXPkm3W^*Vk9%K9PLwVeFYvp+fyutQfiv^z|x1 zs|gf)Nvuyem7eE=K$@a8H^$_oGHS5Gg?(jCp<*ez>bpLo`a^njyis~#@=`FN4RzKQn z5k|=MbeQf})b+t%n|(w#P}hTylqwVduDkii;N6OjrLt?@%$tA|1uTQ8bQW}%PJiCaCB6b~ojtjGrHN{(91pG19TBvE z6L2&DJojaM6mmsKMe?OZbr$A}RUls0`(yBlVt({GeVPjuS{ZrgpwJi@Zr>l1`h&nP zHN}djF$afvD;waa1AZ*$FZAHy;5-1&wbt#oMY$_6_SWN#dO#RxQNHc1X>|+~)a!qgA|3BxLZeUxfPk+%*1)8y}UswSzC+k5|-iuG62QEbex2?zsjJJCJ@HmJA;TtnlA|WJl%o=D%CV zuJHWZ$;P?xA5S(BMQ!Oastl1&q5i?sLMek2suQ2KU^B{7@rxv2$F3H-L%=?sw+18n zrH|Zt)lXFD9l6d_vq~w2+-)%ZWn@T0AEK&78d4m{?4zJYrc!|@)iUpqM{;|8{j zSJ2`+9;(RHwiM{Zy)W$0PFRNLVI-G{UY%Y9xXr$U>6LjESEMMeqZ zA4E-O;fiJ>ni`(|EVMq4D9}}6nJ1yxf(w&t!ci#PmHAQ^fu5An*%bh!!f+XG?e;M8 z4k0{4JbI$qk{@7m{cQXdI==6F#fHsJv%?i&Uil?!>?FhSR6?PQ)lOJmnyn0eg@T}^ z3X@b)fAEj>lp(~@j5y)4oyr@|&}hG(cGW2Q)5B<`hySOC(L|{L$5H3V{jn`QzpxAM+O?{IA{MOxBe?ky`YubKm^fNN>t9eS1meH~ubh90C$jARq#lgK?W_ z1yq}38}9Evto8V9Uk`O!P%2@8EZfNX`m4m@S3K6knJWclU$8NW97djNaD!5-Nc0@W z2f4r;z;&B;V&@F+MwqBQVpDzXfRUvlL)U_ws2oKCW`*il2OHmho}^BgZiX1Cx)Tq-&;$lEXu?Y$EGTs@BZn3G){eGT!-=w1>UW_szG>VcRg%5}d?`4-hJ(}H4{OdR zM}Mk0vCLY$+Pgj>o7E^O%msTE&5TA@MShCK8sHB?CvhIgxb8BBILnyw5zTMQv`>3* z4Dpoq%Vm`a~Rd+r9h@AO(0=^wIu5-p4KcK-DW_Y=G^NfbGg6VlR zo>v+HuimoTzI}|3HXb$_+i@TEU;Uh~f?4cUd{qU!t7dnepn@9ixdxk%OLxXmh;uG^`@H;s~282SxgF(}fqK2nP;rMnOc5 z_%E$fJwpmfco}AM8R^-RIihIw(kU`k zrASzH?^cE$3F)#mLYfZgM`6Zz5fdm}+E_1SM!vhf&xuq&u%e70{q4!U5ryxa0xnBk zG=kBv91%l&4hk9IeXF4E(j`Jl>c5OA>`P8WcLqy_%e8u!>%@PhCZg=j-)>^CgRd(f zM^4Uic=>eVk>^qhhPy3YOv`a8h%7$mjE1NbjJ#9Gd{US{NJjde{9~tvAPO?qkJL{w zJ^I)|S!NmZ??z1jCE?T#$O4a@df@LD>vZOl5%s9|Ry8TmHO;&D4CEF}SG`4`dE5ek zMPdwIG=dq*(T{Xfs+njprNK#2)(b5kQm!sC;d*e@e7$%5vfGQP*~5;!433%csFIas zM|5ynT1hfY(X+cgC`A+bq<@4BPN&(lbit6;0M?PqPEJ^{=PE1Qj_{mt#GYIf4QyNH zIVT`Swyamkc-giFcl_LZ=(tPn>JG#cp6d0`FdQHv!QVxwA!cq^0CRT>;=Ujb!KcfE zvBtsS{SbPlmFH|<5;TGI$!uJobe+ipoN99XDfUsZ{wIm&Q;hl-N4Jxjf2o;rAuhnl z!dr484>`s>M<$ht4ocPP6TirW+#AY0IWh;_rw>!G;zTqD+&0$#7zy1=jdkM)zHRQ@ z(aj#OcyS?9kkc{$#5&OeeZ*Sp<(v!Wfa~(SRw0pg9$1a@P(n*Y3@=PUjwPbFYrM3* zP3n&1fZc?+_8BOqPz6!Gk*L<9Ybcb5tXy(1|G5poDmB=P5V4cI{mbGj+Nv%OKG1E! zCKSd1joBfg0uS|(6AxmcPD|4g|p<<1IAAK=Nc4IU= zUsaSL+l~8q$Zeme3Pb|4dAJ{Jc-MX;iTzIIIjkj5Ht3uZhLxuyDHS&>h`z~kN3ET` zn6fLxU367^1=b7VP#X&uzEJ}jtPM2=5ylfUaAt1>O~ob<{a03~@43qrdtZb4ct1OE ze^t6$O}e;Bf$Ny*d#f+~EafSzB)iSf9gg2&TNSJ37_g;)Spp8m_;eB-t2r2SMvN7f2sTX zNifGZBuxP}M}=sy`D)GvJd&*e-?@wox7OY;cuO13HZhes;&#cnV!(4*?!}ISc=T)y zg!DG3+Od+@jXqMh`-Z2h;tQ=TLhA#l!5FlzsyU<;(?*0RgBkuXZ*g2Cl>U4&TIvVi z-c0b~O^)qA^-!Nc2w*vw!ms;h@>av!xdq#4#M+(1xp4i=wrUN~cv*kb;amll&P z-v-U&c;2Mcx$4Q;Cuk%Fq99}HbY&W_Bfjaec)G%g@$ool2odGZt{FRyxvSHeu9iSs z>0-U|@}zu(w)7qM%bqZJ5tCno{b(x*JHTXr#lHt^P|V8LUzG7Dd-w^l{p(JAz7u}M zr|7*|I8=m?0oc+EcB6aEfS_Vn2(neT&ZYM_1#*S#ZP=Aq)0{}G)hBpq#olmTi`G_Z{ai*IWKe#>eYND zK3>PRaKv|S1AE~1<(wRM3)2EvM-!K-xL9}DjWTX{%uD%E3yDj__$#RQFU_oiJAlW= z^Ii!}Y#VV0rUxIx8w&y0!0rXjQfbDn=XIq#FOKR~^pm@VpP+ zmWhdvmk+TT#ov<1e9qIOZ|uUOh)%bU#DrBGX$evz3%u0=F(p^d%}J z;szJU633vb_MyM72*w519{I!2FIRqG1vLm;C7LaO@SgC^i5C|xI z#*t4VL0sw8Fu#dYb*tii)%lii3k$oC^pPwq7T@VV2S&j-CePWz%lSBC8W5$gh3Yhg zw$QjdBcU9=sJ?qesLf9m0G~yhJ*8-AN+!^J)q078RX?OqnnD z^-~z?OzY{Fd~Xz?Y$T5bkSaBy z^#D&rS&zEzdgcqxj;Hx=c&I0tiC^Tq+yyRo2)nhferBWV_2T4RciU&C29{Tj9MaR% z=X*wYb|cDxZ=OI6H%8irh*B4U&bF{83RUY2fcFen8{e9lt$LmV4aIfwXs+Q9I+5t~ zo(C@2Gr|nMk8E&zrlT=2a6BKJR*l^5+e|%oMhcI~F$6Zp^bdUcM(4sOgOf_g3HJ|D znd&)9MU(kQs8uKKGn~eWw`zV4Ja#sq0;TN!=YLncgiPw5fl#0lJaRw6Y=8ZP_v|vK zBVC_fAvueb{iramO)-K=zC!ZsndbLImo+`UVDX4y=J&9@u%~pd^(a+F**!108FAW< z>#sB1*=oWon}L!2dm2+4HFr4c)t~`a1S%_i+Xwb?#*Peb(k%TW)6fox-cbYL#5oKu zHwWGfrzlOW5F8yIPTqKmV=}?oHuX zLOZ)B28@;;Y4>EXKl{TvoL?Wxkj0AJv^!oN#u*$&SVW2y=?i0ww5PGPa(#dMV6TiS zJv`&pXl)^i3E}dFX5_MoYkb~=3<1Pp#pkhXjm|RWJrBCLl3~o z;l9MTeqtt}nd?(sL;5osp^9oAa82aCRQHPhEh|dB=&!7(9QDItma&IjM%+J?IP{S} zlsKosepuX@Vf&sW0}wt%egx@gfMypPK=fc!S9@q1zh3j2fmolTYB* zbtZ~aePDGg-1L<94dw@!GZ9&o{g`z{5!j zy}9)C3$wAi^nl%uiFM~dZS9twIdJtLOu zG-rhI8;(-`n=aJg#}7Q{qGe%&Bb%!AsC#KsrI_ffAG$VMWu6Lt=3TY0kZecOxL&fE zPu<=4MA98Q7a*dX`SY5y_>%@Sw?GgoEBLh*;_K?)7EEYUNFY6569~Wn;xF#M{e_Sw znObxI`_koj+8DltivcCA8@BuF4vs4H$Kc*j9PQ8Z>i5TWb!;SG&|~?VEk!G)_kn0q zmqG&NPPHuS?Gh{-HM7{~ZH(wHR6QroRT_}D{NG)vY|SpU9WWh3+~Y^}_Mp|!~Pt|gamylktm zay2uQz0QGrpF5~bZ~ynz4o7j1`)g00CUDu=JLk1hx>xo-%JhfxHDR@s=6lQ}<1v~+ za21a*(>%Nmtv4@R4mkVaW}PW(a%&~o78Rfr;n^v{G4W7FDb?;F2E)%wD|s|(Hu6ZCH|Tz zGU5@E@Os^euH2@uejp}7d;L{(&1|A5h!AsGIIw1y0%6epRevF0>{)(inc;{zV`&U>CxU;@mEeft`gyRD%7=Kep%4=3?NjBe zIs+;goBI7(XC;`O;l5JxYbT@#2$Jd!5kl%VJ%}`#h@689H5x5<76@xOdz?ELD$u_y z8-Pz9K8197+N<;e9AMyEVd6a-uC*1qQi2QTg@Z&Wg8Ec_yH(xvmBk-kuPUZB@Z?>Q zN84XM=+m_&jqlnS)SycT>AfveN9hr?tPCuGB|Jsk6c@hlBk z5+<*v{uZqD0ExbKNa0h_kk?mrs!4Ue`fAH+y#?9n%-B8Arn#p;&Qk|Wu=_yo$i%t6x-h5#Bn6aA;7k?snMVF z$vxMa(_pl_OB=UMeEDk>OX0?rdVpU*L<%WJh1oj80lhaEAuDNpu-g-FJBX(FK_>Eq zA3(zNG`f>??oKJ%BwJxzI2B2_OxoRrS|K~u`#qFio#Ck-Ak~4r+e4yl+9A7zTL9a~d%Nh+^{e*U z;a2>3i=%nSBgJiKQG}xpv6SUQj>psqYDwybr*dr3_A>l1{VJ~~<1)+^Tl9=C7-qJ< zOIS`in#i|gf<71nqyRYW4xf(R67^*Xq5-7lv%h?ET%emMS{UZj-| zR83q|)79z02(AzTSX(_F;F|%{)_!|rqK96YOCom90lD&lI*C5MIXA>W8G~^_tn59R z{kwiJ!Z3r638v~*@dXfb}Fcz%x?4mX`=o%!^o zZD?C0))t#bD9;-?g-b=KtelJ3sr3swFN11m>cVl3YPdaeQuTRgchB$OvS$&dye!Ct ze$6*$ZD5`v{1H(R9m_3)AJy3K{v-h|QhZWm`?R*wanlb>EMnZJF#Ubg_5Md* zZK-v}tDJ)^3xCH;cfd0qG_{J7ZcEoNA2KkHTCwjNo>LZK5x%OmL56>rx5l~`uC#VE z01tJ)i$@luwkQbB`SmTr`kn$q8fU0?M<2|bSQ8Qk6(xE)sX!f>${KQ6nX&>(U7sqi z$uF)glkL>CbY~y(@`TkzSf+JGi&*&}rxt=HOFC_n z=!8(+h8s@247(lTj#rk#?a?lH+v{bbZ#dnEUVtBu>N1t=_vtfU7p;NTP#^h=XCZa9r7?~eM~g0z9fX?pAf zr_`bc7`+oQFwzuOhC1~#{)m@I!^9Egp6?;qAgHOC~U%E@&$iJ5Q#|@t0D;P;15Qb`j+qM zYpsdJ+tNi{aQ2%NsSGYf6|{VbVeyBX=ZW=9#RFrKZpE>MW`ALJABK~r1|H~h0~%%| zdsvoDE`nU@fhlMm;(QtA;;GOlVq&V92?!!%knD@Z*(FycPY-o)_aeZk z@zZ8SqP7^`M=HgTn6>UlWGh{gOka-J5TZWl6Q`o{Jjjk=EW*4Zl{h2eGZiM*fNm%2}UvXvd2s{z1 zzx-nN*Z&j-ns&CA^=a<&SR(rISmh~ zS$RzqB(6G2^2@g-6+?H#0C9Ov>A+d|ZinSLG2`b!J(~>QilQ8+m;}90=wstM9w!^6 zNWY$L`$_QU-SmDlz~?O(sa;pe6?$SjvS)%+_uEqW72dZncE9e6n^zN0T9POm&X+?b zdoJyRG7c9h_- zZmV5>#ZuTIihc+U#r&f>1YP5Kt&rUm>7|EbUtT32Qjz%>@5V(|kFuz&sBvPWV5k3Khd=MHlUptx(EE8|>E zJu1(h0f^jHC+)dS!HEUO`)G4TFnJ-exDcKnb=4r%u+ zfD-1}Lufcnbp2HoJ`6=50z;)c*OHrxHMO=yHoS%Y=A-?Lb*0xx#~Wteu;X<1mZ2=T z;a~;Mnf$Un!IxbccRL73P$piGk1}XOLEV|!kWi|)c?L`W0!XR^9t>T!By2&$oI9!R566r`=CdbsCTXR;U@bFmkmbSjcNeqt5ntlVZZmuyNOLn z^gS#!e;f&4Cn2nDZ#)NAT`CTLT))Ku&ISxSlweHG9G;a+oUA2}gILxVHrSnLy~)oF0KUA}O3H+pN4t?5(6edBn$ zuA`2oee8djc5-0@_V?OMrRk**k5_@_3FK z0S!%PEQO7CZ!}pUAm4!aPhq(V>#;0onTI_=j-*{Z8j%2&NQQzfI?}*qj6sB3!Y`&k z^aWf2F3Uyi#aLU6qS2o4CS??S{v(lut#ec(sf`36qkuFRLpg$LElJ0GX8Z^KY#Y`o z#X(B?dcb=W&p^t+E2Aw__u+w&=xK1T=|Y^)p81BTEY=P0m1D%NCG;PBg5VhPf7%4S z#y%g3Se=c7_S}9nkBYI13!yaUHx_Hpvi`!I{iz^p&O!F|RLGukBnZ;(T0PB8 zNw`ivu`arJmSl`^Dee_fHB>*6!(TH6QOF0q+mjG$JIQ8w~5T)kP0-uO(sr!B1OhEQ~}n>c=2NtmHa{?=nZ zYU{q+0NW{UYPL%np0)X%UrKoxNPJcVoHO$9k$UHW`V~Aue3ry8s8GW}u(SEcp+WE_ zEKg(cqi!KxUn|?AEITDgPVvi-y9obHs|YMT3}%niIuy*g&)G`^9Pgp{u9wZse+x=} z@=A>O+hC=Dx$Cgm4%UyekeO;=nrfZAo+;u8(_X7$A*GIRb97*-$$eHKy>aY{Ww-`v zo1)y=Dh=KO%k@&R*2aN$+zPZYVL;b5dh*5;uoUHyMu^Ob>dN$)75s2=K^_bgkDBf@ z&|G$jpKhhF(j}GdPxn#>#!HmLHar15mcsFsk zd<39N8ev5Apw^v$)m?|r&B4*wqF;b2&EHU}K=Pd&fEXOJCm@q~#MYuWtYN7aRHx&e zF7QFEDL{&%*!qZjnlvNb=s#&H>^q~$WU}h2ey=odg@%E2sc6cUi<5{a_=;kT7KF#V z$#ttVKB?DFPGy*+!#@m?rj@JSU`fs$IR(ckjYi7!tx1`VwwP)ESjm6StY-IW zpgY1(uek3M)UYb?e{R1E|2(y~e*WmLc46#-S$p`jo1vV}^JN&GshA7v+gDAc5#YF3 zC+*qfu?4GZSf)6mmV;1u>+HzC%yaSvax>~7IBqD^akL)(yZ$cfRx4{v zpgOmSTGwTe4HzyU{qfA*se@@~bu0{`g!mNPK+axXmN#9WpI5uzyoR9r*0MO-l72Xc zq`cX3!xFdfc1A3k3;I$iZn6O8xIIw~#H>UF`lN8uo80F;IsPHOX$Y|U72l_wB3y~3eSkk+d7$G=#zmlSSBTlV_{T$%4$M=GhMP>_3ohZ^H#W{tcd z#wVf}-n4#(!;~-Nu}4Ycap|jU>-j;U8kt36 z^INsE;(TY?G4dboGy}Zv2bv3s%)L=h9NdlntI2IhX*-MSD7`WFb=pm`(V(55L;NS9m?j_iW$=bCDAFwrJ{Jj~IUFeV2mU#Qhuf()P$n&6zQKYSDsI-K0z*9PiH`_X^Moam$M zNPmINgGcLZQYCWSHUW!arJeMw*57C_92+{nSce1r+{IaD;`FBvV0Z#gk$E7Np&39D zw#LQ%K*Z1n+g+oW;Lz_sgWLYch}~1|JMyPXu2$>~{#`N=F#+3rkZ8uwUKa~jn>2un zaW&lpTqEnYW;*duy1DrL$Sla?yMN?-+&i}Duwiu*%h5bAznWpw7hqiOhYTmr>FCu- z$6(IA^cCODSctFEly6*yvfk|WX5(C5{;+S+6oKC{j|p+LV)k!2)EAr)7I`Vl@dvcN zz6mtfhz>E3+{UY@9R8+?B+t2nhyplr4FWFb_s+CfVw7`!Roy}@r+1iHezbxs=Xx3a z%2DU%7FIV$a#jH7R+8cPBP9d^S34KEyb;;Mz5tc5ge0*!jyXQ(S6c&DR6){BQ#@0c1het^e#WK^~{>c&)D_!-HSTjotkxItA`X8CFU9!dX@@;RA%ns>=y%XK}912ccQVWB3%K)Ih(eZd`x;q zV}5z=ZER(d3os!Kz#i$^Jm9hed5X!&RmV>MpDuhZTOBEwPYlnt!h4ZP3HFa)u>dpV;?{zuQ` zElvsUiqFsI9)M4st5#HmhtbEp;;Ms^vpe9M=Z7oq%8WfBXi^nF7W~{`(Ev}+n1rP` z;@VZxNN=eXnIcxJXLnPf8|kEl{+8|D#6UXRhdfe9EI>RFRCkMh)&7fBpm`TRLtzrJ5#6iP-i*ts+N;Ddk1<;! ze4u9nz=cj^x(A}0SXUmj#>0-nf=BF!<9=tElS0DXs2E{9O;f$AW84Ctx*b@Xsc?lsBQ;AQNR{c*`_<_k(ZNF3lATdlhYt$I^}reW+kc8%fJ&bzhReC z7R*V{f`AyA$!1x!m=>~(Cbo5>N*rykXteX3AkC+GM7ou1suoT$6kHRD9?7g8xp-u& zPWC^oIPuF0L;aFmx+#R&sZa$pQKRnzzn@2&w`0qVC{GC_t-=NrTrwey++}Y9CKN^W zmZQuz+Z)bn%DZbpE?s~+-P602AOsx@{}e<$ka45+NDU&>N}?bSLm)n+4Dc|DjHDb# zazTzoqS+#o?KmYEC}IF!JFsatbn9oW5gU{RAhKWbb8_(5*w6uutmKPm5Q zksKiO(<%GEY=NO%(O5so{mubUL_*)dzcchp4%hh#@yBn{p*_P(N8cqf8q7?00m@Q?0s_ECsej$_`hmyz(rhxz*J)KA z&;l$~rpgAmDcdl*t(-K(CsAeNh+XT#jrDrXtdfH7^aw;S@=XPQ1Er@0lqUg zmggsMol~{M=3)Jf8E`PPmVLoDfPOZItns=ufah>!rwVJbQ`drZ3QZo}3@63M;`r zJ!|}`73bkLxx*PzJRG2sUbt)GcfszC$gVE zTe7)iUsL^&@6)0Io~Z~5xvzY{>d11MbF}GC`!H823ruzByEiM+Iiv^_7>O*>eA83X z9p0ci3Cnd;VKG#Et~nirp3ah0gl10%-r3oCwgP~|nU)#%RUs|dgL05j zROcMI_sde#eEa%(CyJ6kj@SwWL$#p?oG4U3LaVNW-L|yX$fhJO!F$^mO*mg6ueiHF z_8Tbl-K;ldtS9*^!LZ+NRLDwJZu*Daf2e@U!-4wTQ);caMg!w+f9RRJxr7qs?&8py z-x4+6{geX@8uB&hBN)t9=9;H2K@kJWD`+bu>3{))u?Z~Zzi$dExJZHjT`J8}+K&aS z``TA}3pjU)c*;`x#@3xXhRiXPSup&(E01t;)e{`bJ{jIquRvUMdp=NK7@KO?B-s)V zs~@;L??9)s3uG`*1lw)LY37fEsIu3hBNnf8Z<(FYZCABrB@qIy(gVA4WM5YrB1_a; zlS)(@qo|Z?0szGmIdA|ykB$rHXQN*Zml9g!xIoD7GxytixY3{}j{9PA`a0ZCFeZ1F zq=!2@7S04ev_iLmmx>|qstIu(G3PV)`uvK&!fg!eSgBGfWXqWmB@<(6ZiC$FXR|qc zMhYm1cS(!@4MNDcZs*kH|Da#iQ^!VUXi&l{wLa{?ymGP!QiSdKC(I-{2fxmx{T|jc z`9C`95%ovMT}E1m80Vk8g*+IvuJy0A6jtwy%t=UM^Fgj)MJ1=N&>iOmZc0T8PKiHYpbqAc*M5vD-M>kroUZUEt^^) zoD@aI#td>GpI|DokQSNT=0&Y$OAf?Ben@x{(!CQdSW^9G?0k8PawMQL??i*<3-1z$!LDD=Pe zby|9LS5;?|B0E9xzDUQ1?chU=98-+`!Q5^qK|%a2NQI~9RQQ_8J`i9G74KY)qpWlnP{ZCF?3Z*qklOFo&-BX#*G80R z7g;pGJuoqSp@6S+ai z?QKtJJxC0{RU#=IuucDs%_UUdSNm~AdSxg1r>S{8nJtOiakiU>rkrPUvD$!$fWS+& z*)BAN+dYj+wIL!@ijfQQ64OM4n?7a%5N;4CE0Tjj$_xi+mq`#3PeM8v5a>+>$!W_Z zK5YC*vkdR%%OsHcKXPSAGjZg*brm?_RmYvWM{RuH8x#;>w~H8#KnXmnS<0%?XaI$= z&bMU<g_?AgV48j%(H1)F8HCu?0S8n#^VBKIf_X>0ERs z&5pggW#%s|mCwy%F!Il^l^OJL+18H3!PA45UYsk*)2?$7hEZrvI0gRIB<+2;?k8$q2x`+lGH0Xh1 zgYby)J?|{S-JV%?V-by~?+&N)XALw#K|vX&S+<8e2T=5eo4aP^j(^lWnYu8DA7OoHgHrI!JUV zC3_|?XV~NgN`~LNkR84N+A`~~R+^dleCze(k=2@*d>7U+1+yGPjQ&27MNBuB~0?dVL@6?=+_Q=;Xs*HO`L4DR5!s z9lRSSoWUJcSH|tOMOPK=Uf5htDoYBU%RjQCf~F;a%QzU9E!7Q?zAHD5XdUj}CEb5? zi9-2u=2z1V7k`;ZYV-E?4lFOH1)OBLFz=Hqm<+`{KvdFliN;$1o-L(pRk6K9ec@BW zyiq+AgY!{VtH`qH&A@*VGFxkDQPdUxsUFI54s{0?*KJ2l{kNfo`lX1Bc1l2>Z^?mQ zAJc3AVc`vZog-glSb(`o^L;YAhZ_@8E~=f*Jfcnz+7 z*l;U_(>_uez!!KV}9fP;Nlk>Je*JVrW?(TMG{ zsZmUv-7@>cJwXJRn|j}o31Dax0bN(YOYQ@T?Jm^+7#NDq*>~XOwPqc|T!ynIrhY|< zj-hD$pd;r`d6NKrO@@k#&l63$BeU}gHo@_dA?M!*p208^8PFcHoPwaaZF-wdoxKpgSYjJmXcc-`(cP;Mj?(SCHp?GjDu7zO5yv$8rB-^L*L?E^df2TN#9sSulud9PpSX83ADWPAy*MfS=4ySdIja^vgNZ> zF{`0LqKEoQC9a7!fT~XVpLTI7=I|srL_2IIsd?Lx{W86CG&s{N!?XpcQFIsgcg}Hr z6qCV1jw3XNy14e@2CwEkJ!n2MX!D~L7>RVJKAK?W{)QTQU^1;jV(l&4cO6fEPqO?k z&ORy<)HKZ*EIbRc6M}}@24-{PxO+bXLo!$_(eJJn^oILGQHQ@zMe?(Ox1n zx$Rrp>br$D87$ABrpcLn zSu;xYmVM14ZgF1581@7#DFC0kgeJPBFgg$~G_mhMqihJipd&R!8DQUw!FLV^G@QL# z83BD@NXZ4dREg@`FNSf~u&PNApDiRKjv-_EpwpxR!9iL+@ak|*=%p0zaCcI!)I=+k zOq>p}1zm*s%KSZ7C!{E$d#{7}VT4LyqO0F-lO7wv{!Q5XB>W=m@3Ox=;)7a)e^0Rz z0qQEhMrVRpeTs$L!RyN(nknc)-JKj|Q%C$>R|~oHa*2Otbh7M~q&p_cX7_10zmH+} z!Lg@R;{D%##f;)cfsYI5Sx$k?9(xtKd*A&6t|%#8Tbtki&k)Olpj{4P#INqvuh=iK zB5YtEE)lb!MnSWbFfcF@K4_sAN+kznW@dtPse&VN3LAg@q2R6ihn~O`IN1@BEkKpq zqNo4E#T;yZDW5jw;rMk=72t-xNYHKw6osw3W8+WV5rk;~r5nVqN>L|WBr>ysYgg2#Yu;qO+{Gw$z1DUnd;BEWz9;b#xSSZ5A&R5 zPT|;)v^WGp-H{%z{h&tnqC9@?uy3R!`zzIUPW;Rs*|nEg6Zak-b*-^te2u#h}6y%NLNvRdf;tyJ_EPh#Czrd?L%QqDJa=F2zI%xoGqLJi1Hy{b2^H-=Up*=u;-V zmM*D|sh2J7jo?T^d4d$A?PDf&YlDg0aX`uDJl1uOF8g`j_Z5Zx=B$IgRvQ0#H=cuR zTHcJ6;*TR6v}Q{sVA^d_17ZH`>(5RP|)0Vmr})dR)_X5tuabDD(iDcq}H9D z45N<5hS)REeVimwJ&hE-UXlxWMbb?K|N~77DG2dz{QzhMAE%^|qsF$?(U)DyEuJ z(H&8I^8mMYyA!JZ(Nf-h#1A+VHdKLGcV1eEPko@3hjkjLCCcE#r)y|Sj+AlY-AbJz zoQ~zm&qKtyO9^iLN<}@!dCd4@*B<_dQ?w{QX!td-AW%AnXF3VtO zkH7gk%u(#s@fH{qmcQCLmRWI?l>ef=_P{u8JLf93HIVB2$(uL&$x~~!=G_}&x zUQ4-36MnAD7(P+ovLBq;(4$$|$?xp~>tMo63fH9v&AMH}a34RoHhYK)YEaL18rF(? zlL)|zN&3wD;q|7=>DI|H{VlFePD)UB;ujo zAzW;)?W|7~BMy1difMxNHw)Z1(gIhK3yF`l?Wn@ziebaT&oCL_sh@em9G-ofw>qHt zE}sw{R6f!F0CHcrdAtTT@db{aO$|AXejVgb?<|!|By#1jtJaE2hz$)L>rHJ&NRx}= zlUeXgrzBoZroo>IQm#!x&6NjTtv15$6WsiGJD;|x6ira^>pj#?of{zq21tVNp^2BS<&t%{>!co@)PAm`3zB-l)5O0VJw zZq+Z}&C0|QjdRw>%o!LMs6{s5wZ^#a4_kJ;s{=q#(nSF)+#6$?B^oZ+9gybJWCYpS zcI_!{wi3*FOLuyAV1$)7xwg{Dzp2D#^~;cvTW28)7g`gU?2i+B#v<2NOn!DuuZhd> zDV6)iJZOwn24Heb3KW-bewRc7-QSn+c2L=@hMbRdFO!_Ggxoh?xi!u3i0 zSQ*ttMn-lhK$|>MWD}N05k@s`mQzF#mRF(}0b%jm0|Wo_z%AeNEpZl~Pt_e1Qtuj? z9O&;V%ntT{-S&F8_SGwtM5|D*6=Zr31qC(v`0}ElCwn0d>P;v7_(1CmgoTASu7C^j zREbcqurtzv3We&RO`XZ+H;eHsXZo{-*lR{?aHL!J>)TWF11R>TlsMRz1CKMvlf|fn zMk_rwk^M^-`{714wiY2-OxFb3Ks41da@`b;0@$=xbpbM@Zj&*I0?W>sV5+YeQo&8a zq*5Ftj1KH9SRsMDZz~;$qC7vrrp{uHC$B8f$yi8gr|ZDxal27CrbWQIt>KrsZoY{| z{-m%909Vw&VxKjOj!mxuW_A+o_q9knZKnkXNve^d5ji6UQ8^INlLVxA+sifgpAOK6k|6 zfalM;n(KEsFo5B~kEd8>1y{5pC|*$8%Z`I_9!@`=`1X-^d~niD8iKZl!yh}~(FFEA z*%K)taV{q14@UAlYmg21M0*Q0pIw^0Yq)18Rn(lO^YISL_%fh@9}hP-w0H6C&B2yy zbO6A59b1Ljx;op`J)W@8Pyq`Is>Q03xoRXQ7Z>t}n^QGJ5Lug7ja0}hfVDG~{V62& z3CjL5(kqXMH?Rj$Wq{_W>yY}<8UG=7(rAEy@o}NkBTHgNGythjh>G~DEctW*wKch z7_*_l5?XO!fTC+Qp={o7S))?75F~l9crn;_IyBWnZ>tOytyK0v}3B<@$O-oHf@^}S*TOjE@BAC(@v>G_wxblR8J@vM@E6NBRJB0~12(^};4efU*H2cNDU6(o<5=-Q z#|$YkxOr6|ti34f`u0M;RN{>~R-INR9BIOsd+i6EC07)2QY!8abiakA@vh;sD^BPJ z2chlr%*jF%igpCPxwZ+Dr1L#|GfPW2VkXGhLvAqa*W0snnyN}`U+qo@=?@q2btUaNq0NuLg~gqADC+y=eV>Fq!##aFAl1J65KV5$y&;8r#e`2_WMm{K z-g=i0pGzi6sBno&dD0%Lh!-cyM8#lIaO01wp`sYGuY?~UrfgE*$b%TKXD%e!`A7z~ z7)WYMrj0A={_kjWP$z(k>bkykk%@Zec{}rf;>9%)i~{DW3w;# z&?iukaAjrX3^WvOkMGtJlymOUh20CssIk{rrAGtYq-UL-kj%=XB#h&C6kl3EX zL&+wpqek%g_$wU=(!R^ntK?Co$(v%P5VoDE_MG=*HoC#y=D?}p9!$m556f=LABSF% zLoKF*bXB1?=jZKH?WsZ*k1|SO_$ELN;&pE<#{E(4t*w2wAEkd=j&VMO?J*}hHA0o3 zO()&FHN4j;R{_xh#SD?%n2?aX$Vp#;-TtI^BV?;)(&gBSt)#XZ$8N4KP_EOmS74E^ z*4<$f-Kx(XmU=usfI|Lrt3NA>TY+QmmUM{Z&e^ z*2sh4x@E13{`ahh@%wBwN1d;eQ~6nIO(1j!OXTYHD;MU+->i=zt1NlDS(yMHPso)cqQNIRX{_de8DZ4AgGh z3B4(la+`tN*X8ck<2fQUocL%gdwVU-IUN-plqrEt<1>`-6>>tTZ&qdXioVMe^p4fKUqSx1nUu+0WC&T0`tIb+Sf>yTCBX~T~S?R!q=*ll=aH~a>uSZ?x zuwW(L#pZ4W998t45HSYwV?D@syg`JG_T!DNp?b}xf5J(ZaRvMNv}YG{lNWy9O4Q&Q z%Jd2%{TF$e$z!RA=rma@haK|RZc7tqSfHvMFc@O4{^L|3;{vfC?NsJA_ta&v+QL6n zZ()Y{hr|Zwu?t+x$>6Q-&%Sljs?B*PzKlgq4813NoZ& z?B^;NKL(G~uowW$B9Au}=b+IKC9iWYVuW;d`AzZc%lLxw+oXT?EoyaTbGr#zuQca& zl4f+UWbkH*c)e#Ff|X-4ps|!l;-T1?B2jq_{RG6GUS7%&9}w;Dw8m$=*^$ay5W+YV z(-l4{gF%wz<&gQ8#*HfS!H69IKgR_LkiJ7keF`z_rj97Y)Gu8?c!n5Ukb=pT7Ju0I|v*52-=+sxWfc-)+1?oq$INZwj9 zXeM?k*V@OQA7J>{*)hAGuCbFoXhA?iLgMgwYhR%KCO%KYV`F1myUefG^UjK;Q(sF- zNnv7R=c`rgg2dN?C+J^L|BCxKFJ5sl7lha;4gp&n^qs>HvA0q8O_BRnV5(4SPH8xr z(O7KxcuKtZf@g7ZKlb9a4#sR9o3AiUaA7?)#0T!kWKAB#5(Cd#M^`E3x&$F2CeYq? zU-j=w5iWS9N`wYC{OmApF;|Na#~+wJ{d_far_pi01NX?-XBPm3EsS^Gl)}2;;>8y% zg|?z%33_NM-^5OB;tCYj{^`NJ+^Q}}%Mxhl-UyBqe&#zE@}Eh{b)bETM9z<4+Ny0VQlA^28~eDG>j&!BI|-~pF94BaxE}bQG<|ORacy_Ene3>dypqR)2eTOrA-+an`GaUA!@aRo&Tk`>Wy}oDdj2(B zO?F(DFbK3KpV_d3a~D=#868WB|0+yZnh=XO9>=mUJCp(iwBDSZ9em2jP=jSdzw9}K zk7nZPk>?p)*8`z1-I6J8?C)-DvIh^XYt`q9`BYaZ*P^8EJ`#T&iwuxz6x4N2t9HRR zX>NG+siE~~P9{KF-T=E#t%k!Lt+&tF7f|PXQ8G-LLO*syOyr~>073!-v5UwBiELv? z&F1t+EN$$4v+%DI+ZkJBbfPlXFzl90sf!l8KO1|s=>t^8t=B&uZ0Vx6P6HBu*V3tC zH8*g~BUje)I#*(d5*Qm!%Miq54Fb14eXbe%IfAB7n<1l~)72h1#oy%4TrhoAg6TGT ze|$>eD`6euo#z_RYj+jUBb4-VpRJaBhdPrREM8{vPGKN!e3e9aS|2xb=m9}!{Bk~D zE{1uW0>F3@Pg-SQ!1(=@#8d>)2)2=~7enp)-O8-&UzM=jFG?8C25CIuy(oHPnIyz9 z3?UH4m9$Vm*Dj?w{xUX9q8u$+Vt$lU1=%P5#DqxE(ph|uvpjF8s7e&n<_hnY#iB5R z#aP>(qMWr?JP4$l30c3S5;kIrISQq{eH$M%+Q)3~p235x_A?aR{!T&SP*fo9Iu`7! z!L-$|*HyU%d=jm!ajxkyY#~8Uy#6U(_VyzDQOIT_-RgDjrA`T!lzHDh z5+m06Xm2+6^{wR3H|%Ewp&Zo;1Yd3FWV!2v*lt8qGd+wba*Y75`VA^)G_t@ILt*5q z12-CV$uWP`y*`s-Os>v)-5t>QH-M~BD>4=B!MTrbsT$3)X1=8~FlaIst4zFpgFMhk zsp5t`*n!_yV(8=8NLyeFmllj4Om#vYZ>^;Y&k-}%&9%J4xq>L*WK_xXx*6UADg}I{r;rV|_!c`J1xN;xRlR5}0vYTU>nr zBU7V$lR67^o!Qja(}xZ8&@64!-}#&F9>e4MO?Xo~;8eJy`l|!5*#(Y54=_8r2$SfJ zq0{s78hY_(bOJONkVHyY9@2EjKi{4Gj*y&l5G~EmHed>ux1E0B-|2d@X|#&z@W!pC zPSxcy60_=H#5Ib10_*{1H+6+3W%Haq{v2>>Ml;gVIkFAC$+$}QP!~c-Sv?`*RflFt?p1AB8BG$ zy0=j#+jeuIRkkq)OUr|0a&m2_Eg*AGNTLSc_dzG$6^IaRHNN&9-6NcJ;zh{dimZ$u z*&2yH!F+C-@9Bf=Kb_2dGheM2ZPWFH4%#yI6=Z8L>nSK7n9e%AeLeg13UceQ3V*}i z4d(vY5#k2~&%?hP*hCI}Xv%#%^19?!2v~zdG1X z85}!pppN<{)biwJ4}mMiiyeF}St|?3!Skq^xUOOc&o{gJNskNWFQ&N88~lD_6jj{l zjvhj&R#(jOd)OMwb78CY!j|%h?t?8wbW%AkeAyEvdShFRy@-zga;d|)F=LE3lWDMsa&o4tDetOU?40;o`63@S~W#k!?v%@UPzf0UpEUd->ED6$HJINbC*5` zLQ;YMbGxFf;qb&-4OSOQ{XMf#<>A%jW_n`EIuBl3(xd-F8WW`XRrQ&gJjs?WPw$gy z_1V#iTnQ#Vbe5OKqWuaswaxv;N;u?gc`%Q|9<8zS;otRqNn`TH@TPnR?crQ`G1g&T zS*G-bF+;4YuyEmLn^P!{FRQ8s@Yq+-->}u4^?XOi01gJ@aP3hF*~>j?mI=u0y~D^M zMzW@1t(2=sZYhD}jUtJy8gB8ad~>)U0H~1`1zWjF1N%zLaWH`8=f|{s#68!HkrU!& zf`jRNnl-Uyw?8YA@MbL@o2N|@G`039LaHh3^@MnVky(#;XP+&*I==R(&RHBNhjKnn zyVU4@6jd_8MOC}u7PkmfIC668nC}$AJ`wztcgcCrsKO}Ft|Lt$a?BrdWPSV>psCJo zHMBm2bBKTBjqe91+0{&VWlt@ZP|pJP^G?@_FWDF3STir;S}vU6k6Hlpn`DkPCA9zcXb+`mRNh!Y`cJDoV{h35?0gQNcKR{p z^W*zSlkDM&i$g-FtS9LWpA8D4#fC!_pRjIY-ri+1b+M4|!O<}>JQ66n+|h3*zD7Ot zl!AE$h$trH(sT7U(II)?(4MRz_^(gRrL-?XmMlRZIfGhQ5fQv z`F~V*eb<23M4Kid=u@=4@CLeMwvpPxY&i|hH=W)k69aJn zw)z2Uriz)y(c_b zf$DGRkYXr%P|m2s2?~rqG-l1cu$na8dZqsG93)W=*akdVF5YZAT6xWYZ;P?a=ToY@ zUNG-6{Orj0_2wS`nb!fnsp?^~f4=4RFnN2)Gz(%_2tMu}=BBsK`7u>!F*79N4Ykm0 z$Dj=?`>?*#Y>F)Y{oLgFDytyUO6nyemtw zEjSMmAQzXPN?qbKTF(Jl4E=>d>=RxVpt^kvWjg1V5 z>TSuY{P*IwHGzsWWfXOr9lTkIsXl*m$WzG;m7z&4t8K(BO&y5Pu#q2Hy@poe>E@#G z4ycbq*)-TI(ClhiiBL)@YpbWSB9zTw?#Suxf z^4ns`Xs`RVX^8|&IVjh2xKdj=0{Sg^o(yYRbL(lE3w6jvC^S~9p-ZhS1xa3mA*Zv) zaOz1DVf$~{<1uV&`h+D&(n?qH3!`-sce>5X{8g8ANb6h$Q)gZ%48(qJ%ohiafQGEa zAu$yf8PyEBogeb>RjDj)Yj9ulfhG}(i;K%6K0iO(Iys5dn~bN_6@tnfibJ7~+jOWE zb3YdP`-ORicI}rhf3Kae{-t(O`R`)tZx75CQ<`IRCj98$z939U>n>6>Z1!n;-x<5S z`u3lT1^$^rKGQNxJsR9Klth}{n4z)FStA1Ud$W#(_R^XO3Wrr%+9eGfnEB;ju1-Xu^TQ~1U0~#E9D1G2m zbbq(wkFxR^A#-Ppw1;NA61D;nxkVd9oVZZMjg2?t^La$ATLE5f8Ha?_$O}L5qQB54 z#Yo9)F6PkfWzTn67aZfi;^1>>UG&v6VUIHFXm9O5P@HK59GqdDz7oiC(ub5tPjq*5 z7_MDGwfXqXMMr*g4IHHwCkar6*>J|Jd$^>NaTtnWf^gthM5`JD4PJxgz<6UneVxmv zRdhE!5R6XQZ?%O=+I~lWbHsOT#O=)PM_)6+xtrpP^ z%ASTdAJwDHSn_q(b%NFdm*KV1%sD(hsmP7NR0O033)%g=cB?o+4_EQJHypqn*A={a zy^p9ThSfx=-g)uPQ_j^O;u!65YYi7x@Dixb@YD+F-ueXY6O63xbo-hXXFcf7-(uep zDM#c#mC#nZR)Wy8tppcF#`z%sZXsa>&)Z->2lp75>nvYU&C^DbsbKml85f!sHH`J2 z4tN63gSF6+_aASA z2Hl-_B;wWu^tZzZ>%9l~lV7iC(w=}vm$%F~9FJ)?Ffxi1cj|n6W?18pdns|^W~=Gm z#j8@|#aA@lml8dbt&R&9%pV~sewTua|4-QfsP0zoSdv^ZMwwn>qT0U-4U=aqjtWq| z+qB3XRUD}6LX8cAwE_NU9e1tssbQ)8UK`jxd)3-IOJ4_CsK;og2Bo3aZ7CW~D);=3 z?O5A(B-(6&c?pihBd>Aos+5lQN*+yw)rp0u?%Hzb zq9Rlg5EHsPP;k!7*P-iE`Y=}uA&F7!1n|@;ZN8TysUbnjC2$+%+2+;Qq9P;nM~HcM z1rE0h&sg1=q8@o}GGBl>TTO_L3Y;Q$eB|}#zORR8sKXbC>YRyimwPE@c=C&$f2laA zYnEgZA5qj;t@}ttIG8_ayCU-6y%a8c*xc^> z^v}#3#}18m-+;CW$|w}RnZUWeW-KAfCRQwWl6CW*TO?HAN0q0WCn)*tY8R-aSYkrfclznd2>3V zS_J3ozP5GN5iP#l>Kf%-$)XXRZY5`fju^S~jY`NC!hnq}kW$;q1$t8C-RdO?uSkB)`m)3q2SC5!G8y53xl{8>N5J>C^d$TKt+% z)Q@QILYvj1ZGSFNb93FGQhgQkGu1=?vaE&d<{#eWEH=?aL;thC3sXm>d^iO*6f}A| zpr&#w&fx-c0#jC2bxgwSU0y0r+<6fqpu_cZm-`}SZa2gDZxYmWxi2_N)O>?O_S4#u-bUHlgA=9B$ax`vu@7q@lFrvCWQTP6 z8sDHb;~WKsvM`--ih7N}SbAN=kOvE0wU($=XPK0QmpRvsox&y3^313HUYP*nT6pJh zFU`TGD9Top{?Edy<*%}K(m)vuRAOVOAg__p#WM{2|q*rIe*dJ4U`66hLC z{vc@%R+$Hn-V*+ANMZC=Sp^O-_T6vo8z^_Ww2mk*U2;1VQpbh|LLon$A*0ky48@&o zxzV_?Iv?T|{K@U)=0X_<$1tU=N`or^@0u|i;Pue5ToGVK@o_;{ocf(o-1&&W+FE~P zF}U%ld6gT?Um3?DinbXYf2TXeFUiW_OObM>^m~!=8NNsU;64VZox{DG^$byss=V=| zks1flbB{?vnmk223xCb3ZSF`zD$ zhN$8Yv*v>#S7VJPVlm$9|0D#+9B3)Y8w%Q5xf*BiaRgmnw0DLj=aM(1;a$&JAj&5I z6rm6#NBi9)AA1CcQXe5K$)8V#-YhO?fH8N{Zygg_PU6?poe7#;2*p;U`S=u`S7qu#Xc ziesgw4AEqS0(0(mZj~w_EvF~qC3fE)*?DF8${h`6&Y%83R>6T*=L&16vXU?&f@W~A zkc9BaAg_iAR~~?$#kmkOU2fTk;|rpq`&09e;>iC!P;u!_xb9DwvTolRI= zFq0Gg)CzctrKG)zDU>A0_3;wYim7hDobnx7AOuraF!8LRbsJ8Z)2*Q51_jiKjjGz|IL&n83u!)UZR-Nq%y| zT8@(uE)66J=(@Hd8)`_^9f9o&^`lVJ$Y1DoxQoQa$H&IR}VpNeyLExre{35hO=HmnUbx1-?Wz>BpG-gtW|$|Wl8cY zET{R=+267uDjj`!744frvwo~V_CE{;e!XU#@jM9KyVhx+vicp zJe^gT8b%Z$nkK(`;Hxp7dvJ}_WmAQJNJFW`}UQnheGOA7(|M2l%*NDUPh*;-9vT*v{_gZY=A!D22h=)zwr zhZ?#fR`pg!JL+&@oV#Uo#!`kfx|V8}w98UM(kkqVf6RcEcp_~-DCztyP+2;)-(`eX z1FuzE(D&TetYM241a00rJT~1@#(AJcN%Bn^C~Sw*Muhi$!9Ha`(;aUjQ~a09=?A1uPE%ym5% zJjF|oSY04E0(@FQ=*H@E^z<^)+0*7NYmRSLJImgQF;Jrqs$pbov#(OpU6?v7e^yh6pWPAh>0w_g19H# z;|=}_I2NcWojRYVKObyqqDu^lq6AAS4F!r>N*QJQC^$K2auNB!dxuCdl><1TiDaT_b)WL+AMtlN@N$ zm7A2P*LlvU&NHj04+5Y}L8=ZyLY6;I@^x^XY9K3`U8*RC%DI&GQZsz=yWPo#+9Ecx zUxj&0a!f)9>^JD@k9brp=C8_Mn~oc&87Tf0SQy6r7FaO61Qu7idTsJ!j&`)+|C>1^ zHQQ`^I*rLY`RgH6E;sWZ_`HI|Bk`r*cV_VRu-l5oZEazjZu@CUo51#yUrWmnGnFGp zbsu^W3A5On;R`G6%sUBWzxqxIvqP$ZubuFlMuw4fbKea5!$w^*i|HlXD_(zJBX1u( z4$lYezNRR1B%ESrHN~n@#S1>r)5KUI#RUZF-iTvMO`1UCzHHm-K24mI8DUG)G2{2v2`=7ZhOyU;e1zIX55}xN3I_-@SKrpY zCHjdAMGpL$f<5G)*w|Wc(ElBK?%i|B3DK-(5>%s!-i*aF3x8{KlE?@t&Y7$TkanC9 zRhhpS0BGKG0-umVDTOUFgeb>GVb0u-Tg;SKh=<&Bv)%!LljL-uAMjMOr#nxI2zu*d&_hEOU~WI82g@(qvD=<7f03mM zr{-%lyj|CTl!ee#)eSsBg=_M{dJR(d#nJuSBad_p=gPQ`Ek1;rSe9Qcw;3Z5dds$J z+1SAaFc1w@e88M#vO*%8BxiYiawA%+_&>K+AMj_aU%k<$l@nOc1`y~1FMUUuwRgI* zup;`DfP2e?wOsVIrMNhwT)mRIeygILma{M94`%}%6NrdvE%*~MYJ|R!2zhUvsgHjY zNK6-oRSGXZ7*^E1`XQddtqY6nxHBXt=2eFF6#6F93Md8+h_al$8*MQ2WN(q{N$Am; ztW$W??2H?Z2C0_IwvJ)h6l8%=(Jb8uroaHK5)J}JFS1uszn`xNj@nk+POg&7SoOxF zn}cSWtZO)+s76#l_sn*jbu9>FC)ddsAqu>Wa3Oh}^*MwTg-8LBXsrsvB-A<2jTKjbSFomT;mIvPS z@Bk%Rs^b`mKwx1$`{;e~ZME(c`Xgt@ni>A^`5Ym{DHhr`Cbd59X z3L&=bYfyHv*+yEdpYRScX=#mP_aLkDtEbGau>$H$WqvW_FF8u*RR-Zy*rwMvocv(8 zJFlP9AbBrRNyrF>KM&|4onMn#bCXhN$vWtXf;CIWN7t~vpGPLT-y|k6Dkg-c%Nq1E zHG~8T9;(+S4N&dzZgyDd;TW5O!7t8|2lj8w-egWa(1D3QG2p^0o>(}4(Qm#YiiOU{ zDc&U7W!^)0!W(tL8PMqZAD`QHM3>Jo^O_4n{Kn9;`sd~;(}FFq6<^jWGrZcHBg*KC zS(^b8?4L0tlTURZX%SS=+1pW5@iCDjU^R4T<;VZ!)q5i@072h$tDy7r7wO)i$)c?E zcNS?+c@Rz+1VwFytJ;HCKjKMs^qqZ|V6S>)!tKHn=P#_%Q4j*&3&a|a1a1*=i%R!} z`9yDJfF=~X+VmoNb@h3xU`s!?>h2Z7fNljnF8tXHCo#C${-MAW&g)ye$1l=-e%r4b zaE}n2YOyUeGH#%QzIDQFfqH{?0GV7Q6ciyDTrN>Gy6q{fUP^^}_il`(?Vnex&fz=_ z_)Z-6@~J?FP4utgIlCB*<{vHd%m+j1Lld@G6CSq!awJsLHj9F*$-w@HQWM%2iB_MQ zuyky;m&gS5;-%M_{Ilx4+5WVW)(Ib5B^{V7@(aC`T1hn>-#on2KhET5Yq2q#AC=f_ zP0yI;HGGczNgU0R0~v<2K>AL!;AZU2j({`vhe5_U5oAf#8%sf|Z)r%O{QUi72n7I) z_@S>k%^9AXAeB|dj#A_N&Rl0HZb%r#U~e`7?wVar*I37&ezvYTA=ww0%L`+9zgO$a z2_obrBqTt7J3l}FE6pbBNRZlP080Eus|RnKo+6T|mv2{tI$PaiMt3((SKBajb#>Xj z?wJAEe9<7uZ0RldJK6sAbfFsG{pKW6Hj^{=)3+}rO2tus@JYO1qHR?&UbHYpmDvp2 zi?mKOczk|(_>;9SyoG}Te|?R3#h+dH8+1SIKf&sj&Eui!rR6Fwk94x$RekrHf-Z@U z1U&;{_jR9ERP#k6aoVE>7)?YnaV!x1W7CRQ=%nM6CtE*2Ea z`NUt*DJABa8kB!B*U`&^gY)J&aCx_J35Mc>j|j}`Q6?_kbV}bZJWeG}aN3S#$Jyv< zpAUY%iVd7E7!^?=LE`9t|xaRWB0Ac1V3@53r3ON4ZmDd_Qomw>v9CW?!fJD^gi;R zQV!f$LN7eyXuE+8@S@UY{%8KdKh#fgy~%VA4D3>asCWG%F`3v|Tup$Umw}7Qp;r$;@c#C`9RzM%;{^=AIxNkZ{pYD1G{ovzN>V(Kv z5?|0tXY-ESFpzN2k+jRd_bZx^$y1mwt$T;W;}dApHoGnd|9Te`!p2myUwS2hX_w zg5T?c?`cz{TAQWwgMabK7c>M5PP8O4_R48UWz_^a@JkJb_pDKf4r-!=Yg7pTGPo1Q zC{xx~|4_Q8+SSiHdEcE_t)f*k&Vz+`F+!D|F)bdp;`kuSg71^sifA>Wd1HUJ-Q-NJ z)q^gRtLz-89x^!}b~wDqsMHQ4`r>y@b}J7I5uDdzYQVU4lG64&$mQkteM4hljhu4b zLEY?E;eK-|yV?H;!&rLBPOwjqV|D71`#M{jX?LQw&cX#QY*xr#Unv>2GJ_6Mi-`8; zJqs%bU2jJMFz9al6Z)6_M{(xum>)QDS#Pe{PkoWEzK2;H~4~QG}(g*qL_q_ijR+jG|4yzZuy29(eu*;UY0L^>kwe zisA!`>a35@H=Gp%z8o^lT!zqTfQzpuYl!qM?pQ+wqBW=OxCnS_>gzKw?t!?VmZtU# zuJ_>$)wM7n1V?V>-9#+F*lx@;lYJ+;=S#J;$bNM0VJ_I{lTe<_`YgE|n#h-H3ZV$D zO7e+DEifg-czqBo=4FD!;D~=;mXcXe9XQ{<{)wEYklSF|5PSGUP4_Cu>hzN!s5Fl= z)z-4%0Fd9!sw>VHa4qGT+e>#bMk=#fNU8Gdw&wWlN~yhw4K>kzJjS6?s#M!^850{Z z>C{gYITG_A(&EzF=%_O&V6{c)WTjn{_9#_ug*qipQ^`v_!+ri>C(4vgv1d5)v2{Iq zr5RVylQn{*ag;rN(?bu%%U>Pn_{{@5CTwg36-WqpkP5z_W#L^Z<2cg?*uSJ8{&!wC!%P-`dQZ>^n1 zOK+Sj;S;L-suY-5wi8WFiDF%d)0c>Ib_|UQ8UvU$-c`-%m=bZY&-#U=(-66E=t1t* z0fJgZD?Kz;&QsrjT*aE>@{~KJ2=@|~mgFSM*)&w((H=zDeM7-!*}kZD{XsOtDvdpx z4)k9}tol=R33_0AM<})&^hlD!=ld*q{ZGsl#KM<-V&X%(%71_y2=m(M1TACaJcVr zkLUw~KZ*GvBdb4KMXMON&r&By7{Da7%SSzQ_qEw+!j*U(dPsfNwyy_7KyO>m$dge1 z%ZK#CGXa(fH5rTPTa3lWMC96JI46Us5G`54bWgwG@fzxWkI`zQ+atpOhkV0UI*rGx z8>71@;++b;S1q28bc~gmxX5WPB$g+}xPIm0vsKUis*0&_+73}G-tT0qtnfrEM#e(F zfilmG-NP)o!xo#+_yUAf)FiF}yS952CO7iB=eL7}b`luH4H!aTGIbDAYHLNOTDdzT zv57`z@K~|)*;0Z_OaC8h6}jR~lM`))Ia@%$nzsas1Irt~p z@k6LI389Is%<#wPiygGV+qlZ1yMj2_cxohtz|#<$EbtN{p3rn@*%fYL`)W1)-{nOj z-DgaCoizUOj9~gV-;St%1>{prg&*Q}iI-!j=Ix2zNs6bQM~a`OLJqwF9G7S>a4;b; z?AN6^jbMSJ6~{?sP#G{>6fZ86wCu};Hqn7T(cSJtq&k0CsP|AW7HUg$JX~1~|G42B zr{7n;fo#*yAYv`gcr@v7u<=E;h27IHs<|=!g0D|_F1*Y#WR8Cke;|szM9+0PR|s-k z?026NHLB^A;>$Bv44~ZU<#+y-Z~qO+@JeGm*=Q0q7%#WE+xV-ekz0gG=J%e+uYdML z)>P9^O8wHiD7MDyq0G>!&e={%r7=Pno7z`8%ujO}I>e?E8wbM4oipz|p$f@rN@p=o z)~kYSjMl7gp$)35`fdS@A8m*N$HwsHzD@L(vU{N<{*H~0;=g#KTN<4UdSytp9t1dn z+(Rjk;R_MFqM?@cmI4W;9D>Ee%`w#vC3zRAuyd$%V>r`qWppYCP@z6D?UBSU`z3g4 zq&AQ3_t8-Q#<;g!q~hKh2W^X|nGj_vZghDPEYDTGq9$hOx2I-rL+D<~m$N^g+W3Z{ zg6aJ%U3B^YYJ2~BVu|Fu&uSg4+tV|EduFmtf0>3Iv&541(is^}*1-iItkC zv`$OE&{RgQ^LfD>J0fKgViOW^yVjXN>EC(rVQeEO5L`Y$#B%ETsg_-J zoG8H3Md3foK{Ue)G-aGnT!EGgO52%_i~AfAYP^df3=YJbij}t=*D!ymO7Is|nY%Yi zBeKgRMskPyjpx^)2o=^?zC;^FvK=O#ipDQRI49ItWE_&tJX5X{0xvpGsl#pb@E^R)C3M z;smytZF75V$su)oN}3aJPnKI+{to+rH6T8cWkl5`9GRMS+sSTXIxHb%w97kE1`uA8 zSM3#Al}u^#?EB@*S9(SV{z?F94I#bk6Ur_Q=lN0&Tq6zb#T|&fH`2|L2W6C&cFGT(o})UzxtHmZ&?6jSsKwF5G}WXu`+~H z5!*DoCwN~WgT7o2|kX*{5@R2<9m+kFcT9JHO1rq@=`Q0pB~S~iS6 zouL9&64wRX4vXJLbHY5M#IOB~G)ahbsW+Oe@C0@Cx4TnYi za3e*Qle+?JQ%{oJ?ml;*dmC_yp4x=$N_q4aEh?lT{u}I2Szht$IWVAnWLOm`Q7Iyt zP4kN6$e4>hzt^5k2F);{4OVr~%bV!pJu@Q)b?R${exWN9_oQr#pMgUO1t(JYQO&0? z8*K7BLVW`9H-y@4;^Qzij(QWKjaKB>Gm8w5>hYxiV97_Nen>1UoPE5DuwuGq*D-z; zDeZ2!_l1>WXlPo^wPGjV0W zH;lqJ-=4?6_}3qATD7r%&eU1{ zEP8&-0d-E^S_bwca-m(1U-UnL;RFODdqn!Q>YU$X{fW(JMlvPsKCdUvZ5)ld{m9)X zurk9JDe_m_3}m&6g{uaQT~~4`vsAHXlFA~vs%K`drdH7Jy`AJJaeZGZgdHCd{d>-% z2DMEzK$BkYiHqDHR7p(x$1p^~jk!GOU(j_iIbZN`LIs?qeE*LZz$<>KG-cb=QH`~Z z$dAX+@W;osu2P23PlbyEHc?MXXfl*rw43CDD$mJ$|59t~G^XY$Y?`&4;-ucU(BwjZvi-n!1p3j8Lkkd~2?Yc&uKp z@;@?<)a?JvJla6nE&K~Zego|N4_}ZYY&w#ECom_~YJ8Z;#2BN;eFXQuZ_xj7;d@*M zOqwM!eEiu(ll>RdZz68@6e(o0GrGOGf6Lv4lZyEc!rDy~AXQcV`Y(~B%E+%q@^6pC zJ+p^&hgW7u>NT407v{zOO|PB!DfVCWjsn~qLCJ^VEzT5Z2X{<^rDtl6V@`NDisfl5 zE~EdE5(M*!cfBvx*xn<>A9i(g*#YWd zRp_Wb|MUc*H~WA1ZGekElNO4}_7{hINvXB%5%OfpLxSq0wjrTXfxZ(P%Hun1xu~rS z!7{wDtzzB7SHw~oPec&`NN{!5eJmdO?7@2HO-6(p^(hX|1w46wP`1o^5v_?B0(-4O z-G5Spt^bdD0noFYfSPsWJ>U}44blFLnN7(hz`AITL!KJZOm*;{8?8Tc&;9JtyuQ4GZ z(6@hbidtG)f9mmNOMjQr;cZ{cf*Scind#}JaIN}^SzUh$&!N9KY#vQbr$_J7>%3B`uBy{t^{Vjp93qv`@l*M4&dL=dD%%oYQ5dvUcKg%!FA-H za{(tYyN&x{UAv2qP<;dmxa}%IS$`jo@5+ez^G%lZf4}6qIrP#|n-CAro%lxpTJe0$ zIQ=E0pS3B>^%2mKCd^VY6|x*&f0+gKN0&ix1>$6jl7!Wy8u&KS>HUVEk2+p{IQ5W! zJ4HLQupIg&vJtwwn$7L;d`Mu|scAKYqXqk=;EZhf9OY9Qhal~_$$dwwcH3{roC>Y+ zfNQSwprz4TPg(GlccQ`~%$K2}Y%ldzDK9KStJWd!|2ppdoD4T5PGEO1?Ti;#g^RM= zv*P<;=o)Bl%leIY2rtdra?TyQ+L;H5YIbdQSoB>^4*`^0w`Ag_*0iTTT4-gG$Tdez zjQ52l6|A8yF)&_Iq@AiLHw#`00#%h;siT1U3VeGd=sffM+zH-}f8t)dJ(9_O!dB4b zkThG7)91&E(MC{WPb7;lS}Fy2H97>Tv+wth^qh8s2I@Sh=1WZ+JqFEx((hHi{kR5Q zCl{>`8j3ylQc&u!hknBD7%UC&H6>N?0P|w!yu+9LHbFP_>B_0R z6)CsFT^y4wF_sTZq=A|#jK-AA!A|eJOoleRr5AkOYj7}Cy}%M%FZZg`1zN4}9k!ow zVR~^IN>z%%?HdIR@Alg+8=FpYr46uaHwr@IV~3dpwe!wFEdfuzoqWV9@A1TK>?)_` zdHC_Jp-PPe$B9*Zj?Lky6FnY#dzq^VDO1xuBs39Ew2sxb!o6>g*gc^Sq^JfC-rJc%+BDU{iW`T7-U6t6EnAz+emhvrONr#KV)sTS-v3 zz{`*!AR~o$;E47nFG@r`3RBn33dv%SktlN$*B2+0t^G2Ha_g#c>hS8-?I))-;ynqY z(c=zJD)R3*`~%F4^CWPCS;C*iFQG_@=A}z@NVA{T#sL2vR$ zfmK||wGoJxXP!nT_G$=ZO|nm$Hkd>gad_9#LLh4%)lcbeqhCM|6sZE(Oh9%RSGpOGzDJ+tlo0#e@sy^D>L}DHoqVOp0~1&* zti*fcWC3DBfD448*O3i%H|Xp7+Sa1{2r1}4qL1H?C8Hj7IWAwWBWhRO_Xd)rG4Sza zNKOf5#*iKct|}-fd9Uo}Cex)Jz}?Ij?pN?FWdwv_>o(15)X3OKl2SgKg;1XhFY-@* z5O<87sQyUFUl?b4%D&G|f8K`6W^Ztur7BEP`in4E_QkJMHUuq^D!MN5s|<^OZGU(>&hm6;Ha>ffq#!0=9!p znZGLK=f!o*-3HFk!OzjdFQ}Q3o9zT4UB9u;+W$)A_JI>`sWg|)a#W)BZ z6lEIaCBZ(@Z^jsb2dQd2CQ(3A2sFTiG*2iOMROegxR>LWqYUPdQQDrE0a*y6SJEej z%(*1fUS0xuF`cs=A;J3n;o=M^6)E(9s%~WQUETFsa)uH|O~Wror?X>;@i8NS7Q(c* z8x2o(c;hnYv3CCgIT-KdwYC1%^G%P`d{Gl|Xp_Ddv~>9o*1XWc^pPChbMaUETra-7 z*i^*fg@(LT6(O!Hrj}3^tJvZ-_AFOATUq+cn7eb~N@Cbobs@ zSK`4gU705k;P;Mv=LSWReUL%O#6hw1;98%lsX}*d`W;(HhDezs6vJ-+Si0QKoEagP z0NX|ERka#L%c<&Ud`I(wo_atY+;u$79Br*J*`qbMrGcCU<-?;{fvDDnSjSp-#6R0u z9og75kk>Y(tp5aYtFLSP(6Qb^QnGHR2+kt$;Z^16I?KCqxDqGLMy1Xcv^95un zhi8Gafm!V3_@faK2*{8bEn2s`Bw~5QhfnQl@FNeLZtIaH0q^$wet2olYUv{=jW(-d zJrvTh-ocbPj3=KTl?M%_EPHWjkc82kod6w$>S&sk;e7j#6alr8Q1dv~c|HzMiP)18MvGgn9jjo>S=FpS$q-o$<4z;ojU4HO> zo83MO8Y2BqG5*!s0+p>1LAh*NU7lbD zJ9}NXASzNb$5Ez+0CiD7GOr{S5w%%qKnc!JOxXfHjB7%_{Y$aPq9qjL?@d(#Cw$V1Mjwx6jMW=^6%9j;d~9`U#jW>VAbKZ`tUqETM} z-F>M#*#)2*4m^Gh_-k5!7m-!%!1*Nuq zf0JPS8t;?uJ=yb2J?vVA^Y%ZB^`e@E=l3MC5Hk^0FOv?!eqw$ld^=V~=#V;axN)J` z!BD;6qF+qlzS!`?VigZdHFOI$s7?Yvl>4usx=KK+z`ga3h9Ew8jgo^!j?qQW=+fMc zOdcEJ!%wLJMYldDdhD>DZ3`T{emF50c*4gkRP;8AiBY{{!@O`Q;>M-bAC8w|r$zN? z?@DJ=r+;((#f$rWD80^vfey);P2=DRHypfm7DatH5al%;U~{{Ag(Z3Q~@=9x0GkpsSX+D$@tvXVQ?(cLo==N8?6 zK!5p-$!<+iN#zNuu|+_WUs~Ktmf`G?K`a;XhJgG}di{~+^>3E3 zAdo{@4GfdjX(gdJ|BRVp@_##!%Wd{yf8JfVgcJ4V=zXkLF2;7V6ThZ@@wq_>4Gx%4 zcMy9HzvLG@Q`p71j(0^K+2ZcS?30_aXK*tp{Ka8+SyA6Bv4ovC>Pf!yz*h~?$IlYk zqMa=vIs|Q$QMp=^5cz8t3GOFLQby{XO+hLLk}g!{>od%`cwmu%zyt!2TNm5JCvE$< zX~D>XJXG8qq9kmc#qrwJTxR|t)Fyj2&_14tJX6J3xm$EWmt!bkeBB?;I_@1bg9nDvWC>3*RTSFBQ<5TEvU#gWQ$PVd=`!M2BYh&MqS3cRJ z>zVK-n>2uOvb00`M9^o=9^a(BYVcc$qX(fcoW){Xm`y8Nf@N{OAO+FU1YF7`{P3NC zX06zIzMNs_{7I`Lww(rRUoe5x(TPDXoh*=@aO$wGY| zm-u8qXJ9d}KHJjb1FhSxU2&ZMvw;7oAvYj9K10oMfxXgJ4HoLI#7t3cW9#NCiKXTw zgqbOMM3I?t{-d-lS9FxgqtK@~^Mp|b<+5Ao6TjqxI0!RJ zA3xH7pwYZ zCGBh9PDou>ERV|*>@gldKYxX&IsZ^`9g?s)DD+ap*&Ra4BpB_Yh+ws$cA~o5Cp^{i zmkW|#ZzjbmxnHg!UC{o0Pfzwxy2lm@xgjjjdDDa8be7cS+ybUg9r|UJ7|K1%Xs1gr zA})F$7Dzv{DdAi^RX^ZR!!0c@FTT_6t-Y9eie7T~c$6k3({fV}kbLIZwK(_oczqJ= zIA{tCRR!o5e{lGO8q=zbN|Hu#$;1awp9O6+*E0xj7Ed^DwvRMk2J!%LVarS_nb;0_ z#pqnTBTh5yiynaH7vR7tIQsARA9Uy{<9kw=5+m=%r)=w zlL5wltajKjxUsP3erN5|g%Zo!VVHI7({}i+phtRXqe!&1@lT=QE#68D%lo(7_<|$k zFN(&49dc=oCca%0%0BW;8sF&toqF?gr4toDJF$@98 zt5?z@c~WU}lb$qmr?>!J_dr)jt);0v_HahI!{ke04pkwU?)Zs@&1MGlo9{IvnGk%dJXuR31XYov?^VXh5aqJpIj>UfJ~$CMyaLjU3hmOXHH zAuv;ofTle8!6T557E5HCs#JA>>rEE^E35UZX!05xN_4OqVv9Ltpzki|;kUgZbY*3T zFGcq-2=YAUn;>E6JpPw_@i1j*6&Y(jCFnXDsIim6UiF{6r_n{$3yFSCs7wdt-q1DE z6T(Z0pu@Ujy!{4_X+bOveO~zUG>C_9kyKmDOTDPL7!J1jW*q6BF!+m2wUQj<^(gS# z_%-R%qS|Yj6k@~Y^#rbsiI9+9XN;i%wG@cRFC9Tr>@L&IrTlY46VfSxF@0TAFE4bmdbdoE>9BkFy=|_`zqP zZHwZwUn`mRt+#~jvm1=_p5F3)e|W5ooVtQ<(C{jN`>0-BIUAivBe0$vD-hOafQIn| zRsN?YItjH;?e|ef`Ii+qdrl2?^e%#6$;V#b0|N79$t-RfhqAiWrAT=p+ed^lM3^}Y;04VgJXn{AVxTE^*}rHw`+dg7*oOyM zJFHc4yXB6_8A)q{H$Y=;dV6u)qp0ZH&gr%A3&5T6Q8h2-QmM z!GhL5dppB@_yIyjo86A@ZZk?^t{wg-k0+Lv^Q!o5VMjD)5_j)e+Q&n!MH~U#w=l2p z5+e|}fvF1vNw}Xu#4@_g1rP|FM7{Y?8C)~WJ@6}(z4pKla&Fh&cpTM#OR*#p?_|PQ zZBp+|p{vIosE`hoM*F~hf{n4!8SwVxnC@53RjgzOackyP&&*=XgGxB8IJB6TCT-MI z(Lznu(%n3G>UnK+PC7NT~H3`OlKUFe5|}m zQ?GDkj8p#*MRz{7w@G!((0T<3z9rXLQq!xByB903?j zA~BJLq8`+}8Qp6|URdhkn2os(>4Hp&E{LGLnT|7SKytGlQ|KoI7bx`JnxR#`0?2Dt zF>l1{v5qONszCmO_>#fznjmwL7+3P$^665%@j1qb7XGs{C*cd=4N zw+oh3JUE<&ezTs*ss6--ARnyoZqC8p%W4`6s&G#jZd=U;iF!mG?qvMJs&MY6d%2*4 zytZ0au0XL@Q2Oy}5p=w<(@4N~VO5@CjuG_~FC!4is#U;AkvQWpYE2~Fb8iduXX$EIUVqs*!d?j$}ADCRq_^6Vb zb)&Y~Gu45)D8OWSpn&G?LOGUk*H7YFB6sd!{gs`e{j=!Ck{!K0gE(f^)PxTkT3r`~ zye`u)1+1fZ2xZM;^z`_q~KA!?^f9>~3;ub6lHyW(W zj*yNYkZYo*NiW!~G@K!yfs$jUwovRRpIvS?5?~u*?i-1M)LyEDsklJtp>f4#IunD3#|NMdcKC5Wys(3e=OESxAXVC2m07KGg434+wv-wZsZuav4Y`TY3J{MVM<;-j8!PjYA*fUUsczEiLzjzBY=l-ucFq-X zxX~ji3sSzJonD$;NEbWtERKGhZzL>L|$wr-OXEtAJk$&7Tp(8BYblhnwGu`bx2n znBtVqdqKJhjg=u;k4Zng2)>IQ&k&hPR+(h_QF|X~ZnyVdaoX{pu@(P!iPKNrCdZ4s zc*~WLW6}c&YxCmqFb9{qfNlM&uqRvJ|1Gro8n^a{;#+Gzo(7-Af#@$VL23W5G4nSE5VY8rbWz?3i+kPJCKg!I|RcU5hU91Cj)u@Iy@7a zgsD4Oa{K6fLxNuK1DOFEiNHOix1EGM=CH;@tD!^YC8sMHiJ2D?yp|t$n5aKR_Qs8D z&j{nc2|NK$Un_;vqXG=ufm?Q%@;}{?W*rm3Ya+~3yQNdQMdbD;`-JrLhynNe+R8@h z*Q|nl`ZDhK$5fOimqoE2$s!llZyXbTcbtnphBX12EtL9CE5wDqUoY$L1v>nENjIF= zdPK{zbFiSNjssb7k9v2VC^sb7U8`i?QN7oXQNC*l1P7j;hT4j^!`IDa(q4WTK=wu8 zL=fCz%L~RQN~*2j`Mn;^KFBzaX2km7&FZLr$j$k2ZxqvMcj!IXbQt@)?F!q@!GRPq zMc~PynW+AohcFul@Vgm5)wmvhBG|NuebY=a?a`gC^-@Z2XW5z+LC&mL4j?JHy!f#@ zgf1PG4g3NYS}KpTa2w^Gxb?kVfsfFjJu>j&G#cOSvo@I$F<295*Xx(d&pG8O9>W7 zW4X`XbqPuyTj<6scBVQ;KKuNxi}p<8Gpid|k$VdUq~D#4uuT?@P@SUJLzZWIg_3k} zI!Er(D?PhE!iBFSwRMLiOvoVDf7RdcOeEvd7@3cz%|x&C*x{Uy}HycS7 zbrn-F3-+sD)kPE2CmdW=BWzSh7IM5Il4(^^`?b%dF(rG`i{?ddU0*qhhzLbaj;ATO zzaQ%mt!(^=X#iczn1dW;pl)@HfXsx!E7}u7rd(Y0tWOl#DmJC4>eo5XvdT7NR4*pq z2@3sDC1tCFok_+x2;vpA&MAxxgwo+&qV70#jaL(K^Mu*y*fWy;(2NUnuKv_eWcl;E z;11-=WqO%9{q>>jj*cMTm7>fX zc^s>{%9?_Y1MB27^pO=CL4ic)%RyV{Hk+X|p~=vghzG~9_k-&z6uXl`me}J1>{)`B zrE0W*8gsf==EH{xch`XIY=eDeW4t?Rs_iN_%ut;CDglPwf=j-3j4@*y`>5u+%cGZr zWZ0wnyGuw{Rhpna1?6w$pFt^TJiz&)c&TuuiZvMH&Lxpu8vuRsOy30mux5Z zSYzTJQzkQcIIkErtyO7r#L3twkqtV z>s;%Zrwm%6C9~I94g@}m6PMb)ynBasC?hVSuA1-_GGY)$;ss;TKA&CE3l#W7O=U6$ zqNySlB1L%}DmYG>d;nbVHGy0S?SS1OzQ&2lX`*RKVu$*;jiG@T@5frHLw!xB-gXqU zm#UETit$3Rt@8<(@w7w{TPCBaL*+B$_V#{$w$R_t!nuQ^va5iP#}w3F+2f%Codh?- zR2I#&l2}JWI)L9o0CWhpbphSEb>ff1XgPw?={2}A$gyO~B04N-xtQL#Kib=r0h0gozUA4# zNd`7|ou4+h&-Jv}Di+943L`OrGB}Z+zAZg(_vYKfrGNCLT6|>|f@cEZXhL#A>E=pg zElHazS6|tRnq%qQ5}qpUvAkMbQz0xl@EH2V?;BOup=p&)9L_$2Oqsg%`w4vAsWPnO zGFoZlDbb|O!7Zz0THADfc%-w2fh9vt$XSi<`a|t7uC9LJmq#hJuWukJqQ$Pshp= zp*kf9{hrG_Zfs4ko#K#5aE?l%4&k4le*p><8S$CUH)7i_%cNsk;s~ebT&J}>ac!vV zgVvelW@;)Ky_i7nZ&8$bU+70+DuKB2uZxg?p}4+sqIpvC zI^dj#$0yII<}xekh&Gt+N=DDD-MJ z>c?UpMoqs_6uGbQ5vx5zx?57==Y0-n>z zDJn{eiUxUI+~0>+RM2N~+7xGm{KeM0kNv+y;(wL@D8WQo@R$Er@38;+kIEU`ocU@4 zJ@!$lFOGzSVXvshom?iaZ%(14Dh}CkNLR33^td~A6%r4{BHIFoV2X)Ka{hXYV_^?& z4i-TvF%c1m(5p1qxsH@KPHVxturL~#|4US<-V(a~Cf))=<0t-1cfQF(6EfC|Pb`E= zZPk4bVSiT&NfpJ#L;U_OCzhf{JLiG!*6cZjz;V|f>s6gjFHYa3zr@?Vvj6q$|J5uF zEKdg4An8KT1_lPUCbPJuWn=oGVTVm0h*2f=_Vqz7E-r3e%HBvK=)w*fm9o(s zR@?ufJ<@SvA;ORd`oPy|BYS&$gPT-TxCf}uE(?SCp%Eh^(nTdDg{t3V(ITVn=ct;H zN%%eTn4kav03JU6EZbH9V{lOsrMQGd*?1lpp$^go!yw`0fsNmf+NM!d%aXxLRB$e| z7Qn|PTx&t8QK1=HRz~|Cji~N%U>`Tj-WF5`2RPBG>sn@O@qZJXn4H|+*(ne#EHvwR zpQU8$SNAxyPpX#|tp;m0mK<1BRrT~CQb3zguZiK02W<*UjbV3~IJwGsdg%`EI$nU# zJgfRPMFW=f6?-n1hwCj$4;BWjj08`Oz)q5}91-P@!}}Cjxlbnk{W+s5;2%K8vAhp| zrAp{(xf$!0_Da71Yv{r5_11!p!>JI@dgXh|Sv^r|{~ktAwkDh)O!$Maq-5AWrh5Z2 za!HGsGMX+qcxHfw@qf1y@h!&kAiRXG!MN=PJc||l^^m<#u{>Pd;NsSO!c_@jWiUwK z3YLqKn7UJPv)R?uI2+U8di57jB(1 z&DgIW?>|72*W2C5_V?GHoHqfV_oq3L_0~FppVa4rIsT$Zc_gH+`-Rn`H821kQ~1F_Ve$u^iXxi77m~~w1u_%p#aeO z>>Ta;=IO7)*_Bq(d?tpHrD^N_hb+jy*I-;fLuYJ?1j(Ml0S{;L@%V~R3D*36){b-? zWcl`g<@z)2pKKF~vX=Q>AvHtNccag>Ov0DYiI&@l)Y{v7RH;Np+rH9Gg}JQ;~$I(q0RoLPp|`En0<2y4gEiPtj9} zvtuzk((6Z#RV%2Biozx?<8duy6()-D+ik{5PCYvAe_wgL7*v)1zT-l>dw5v-NDuet z;rmj}Ia;*C-Ce+L#|u$yML#LlvT=r$xq8kUPYvj5VObZCi`^240QQab->MIPt`G-z zKSROUQ}01zd^nSlxabcF>Z-QNoQ#l|x#NAFSTiH>hhvcob9Kj?^O2`O_G5-QGTf+E-MtZ8oBS(^od$!E zscH0Tr+-h#P<-ukk3#LiQ28EZ5xm0uWV6q{zv@2n`bIh&<)iVEG3%3`5Z>+QZ)noC zGY-oR4Ia+uX*qcNu^PG5A5DO}WNh5wUq{Wm>R=`wYcAItXrE*;-wNb9`R6|_4*F5QZMu!`LY!MhVqEX z3>gGW?Sj@O0us?5;gvA^>sz|B?Ei?$~F z-$4r|=38q3N(tK~%v1`?(NJF?FKC!x5G627`d-nnRA4zPR=;M&J?!++->=~Ly}lgGk`PNn^a^OD|60pGZHQgI(=$x=?IL6k ziyscN$xQQ+&IGQWiSfA5*zm*vH{MKCJ4LI*)nMd2;{q_f>zvbYr#57y2DwgEhRNxD z5R5dMDONSrx9;$nPgZ^La7iPT3&r%**%w?*sRDeni)nI+f`ILAM$@y=E!TYCB93=S z|DN6?;*B%aq0njf#Qo9a)#x_ot1u`jTMRAHwe73D0{G3#Q5!`>6dbgi!yR0s3B@4_ohLF>C^_Tq85pgsA_ z5-n6V=!zg}yW!;2VP?9WhLiP&1Et?c9IA|p?EA;PrT&_N2>1kXPbjA*puYS1=B=Nn z@B`Ez$;g->@1c~ocYLYx*Z@8h6d%cRI|80u@vqDem&D>Q={5TfM2Nm5nK&HJkZKbi z#)ud$nv0_6Mfpb%qHcarkVr_xiVSDo5TQ&HGyRF&`E!7$(}WgfGe%Uk4RX|;WOuQj zr%Eb}Mwa{UW$R)>Z_D2%)!5@Pd|AMs2)4ytY&vk4^#E-6O_~LbJ&nxxbQ`oagT-(o zW9mmH*@zx}Ve@QylEsTB;2qxsNs154kQ1F_#_pbr&s<~l<7E4AqfUU&pBEv^uz5%c zQ@1~zm!(w555c@yt~arjVy3X3&@29H@FXZPWBN@MORD4W(DKXIua$n?G=PWa=iN2? z?gbyP==jzc8V;^vb4(l`ww>92xi)_vliL=b!|tc{btGL`PmgftxDmL|`_XC7KkVea zB>$Ew|9{%ary%+WlG0)O_AR5av9WzXJKT(?V1(+YwZq2>`O`C27A8YJY(V^O#jL#O z%a<=7Qe-)ETY%#MuZ$W_C&1}J+Tfsz;2=ncQ(d&aK2Znu6PCM5{qjFPH%I+-wY9>g zrbYXh8W`y4=(P-hV8D4JeHx>K;+jz#9A4bsNrhO`&mm6Y zgxUnY!ib|oJovcfiGbJC_~1@KU9eUY+>;Y_dwbghOjds4BmG90rDVU^H3*iofYmbL zvMF?d!$17}r&0r>qoch@?$0;1x~smVLU7v(*16tofGMK!@mfp2c2Y(5KPba}cH3&K z`jM{vJ~NVR0shP8de2j<|MtXscxLV&qO|s3Sg|x%0<1!Rk401qaK3wDTXUJr8N{X* zwk$Nu6B0}5t<(`Jv|Hy(7>_kFrPP{E;{N6fg`s~BkUuvH+#5(+{&h)s_aHR$@;5?9 z1-C;qOcypl9U8LD<5JyB81m1CPETPCmZmg?MM`F_@z3J>!<7RAubd2vq1_1)2An`r za=VDTSjG=~*BJ;QG-_2{=1$;80xpnI-aR!4C%9&3qLRcvx{p=PI&gwJ#w74rQHzRenylhP-iE{Q_EyL51CJa_w)1WV3;dbW@;EzpuSn1dyArdXJ2kK#*K>ZbB*wc zy6A&|*t@a}Mt$og(T_;1hiXUQ0dt!xhnwah(jWC`u*%`;v@5&%^~e+Rz)~Zychgbe z>jV;Nx7c#t1j@;^)95Jek-wUn+B^h6z#uRN`6GMjKR`Xk49a{)S~mOni8<7FbviX6 lZpJhV&^WAJnR?V4R1QLTo=@v#$UE>yMnX}%TGS}$e*rmU@eKd~ literal 0 HcmV?d00001 diff --git a/nginx/img/image3.png b/nginx/img/image3.png new file mode 100644 index 0000000000000000000000000000000000000000..b8024ef5460b1a67a6532fceef62bf5b3bf1aaee GIT binary patch literal 32815 zcma&Nbx<5Z!#5a00zm@79fG^NySux)yIZi}5ZobQaSiSeJS^_c;=VX6&bN7<@2>8y z>b?5@*qYj%*`A*6p6;J@w2G4SXGDC&ckkYPmX(oEd-o1zANu+82@d*;x7Fw_^Z?_o zCN1`^W`ght`sIVQsG{h*cXf$K&!!)t-w|A7blu;*L+Stbff;r#vv~I|ctBP{RKv#z zybf=Ixwinf>CN4hA|mq(LMN$r_~8c%8PSIh4N(}Z!S`h{s+edWRGH=AKYkEZA)gUX z+wfPWAq@||8OvkOicpkU*3j}PcoWXZTejsVfQ&ut=irG;NQA#nE3|pDQK;Pm-5BL$ z_LRIeUtG9g(rYP@kdYNuvEU*IAx1eR>}}i=shNrh+I^`%#@`eLmHIeH1o1O7qoe941(xM9lYc+k z6YrmA^+^zD1;;gwW%D7(Q&3UaxkAni*E)SM?9inR405sAHUvaxgN-#bFcGonicrze zRJAgbtK#E7pMt?#o15R>e?+wDshpUYSn*LWQkp4wXbN^-Z!g|o*bQeGS-5c)6MIia zM&`2B_tD44=ch)wnu~{r1sN3?S^YN(y^-RB$$~}10(43_n}@lDg}V?6N4aCY@Q4W7 za*TS7frE*>S*sd@wyQ1%B?$=$U25N(-H{YMSN(Pm+v>t}LVD6@UG$r-fq<7sPs!wZ zirxEr9|>vcoq=eKGQB3cwe|H|NpxtHm1OrA5ZcWKV_e+aLi6$rV-WSw8>R(lhlhr? z?=N@C)JsuP*r3-jxx2cGrqOA-?EXb#Jdis}BV=gP5u>vMa2Ssg%mf5J-q;FU4q)iP zQA0atjheSP;NgnL^Efr#UvWhDsxCcKalYPwj@)shDm6MP>MFgmvQmo_)b2?yX_oFP zg-1%-HB_NpTQeyJeHdR^y|T%CLH}C2^Z^D_9}A};#)9}&&AiyuCA@4qjJM!hD9L)6e7N&zs0I*jH5EpzXgo& zDjlU_Vql~k1=1J6Uv^m(c26iKj(W)yY9m>IjY!=v(6hAphZ!8#W*l>(qKJ*vK1xYR z*=3AdrH6+rkk0}IN)Xw&1(a4v13M_-<(athtQRI&M?<5c4lgOAC6sLC-2T#KN$-!x z7u~lyMpC%9ftz;CvXte=uEc;I@(FNJuSmPje!G8@a0PsRd$9`d2|k!2AR_jGg5RnW zVHRo(W3$+;kHsyFBgr2kDz4~@uUp=P%jZ)v<*46TI0|uM&v*{W6o$J;U zU3Jsa%G*TqQd0`6Iwc8@O$t3J_sB4TGu5~;)wPov|6Uq^vTOkExhXDioa3n-|Pa@KaX#5S#Mjqp!^esP6Sy+yPavw{1J{B@%6>(p5l^&5;lB?F|W zC*Xmt*%?%$oc8*he!N&qVif%18Ss2L?DKe3+7#I23=)Fgs6hHIKH4EAF2yt3qPaFa zK)IgTLKoV|RgwqEd+^rt6`Hs_EARq zO{mSN%P*7Pn+e(wB!LcYYU!?SD!Ch+V_A-ow4^zGG~%$AII@o$f`?{fKxRro(7Dl)Ni7`_ER-8lx_&TFq+ji(gw_}!E>cU{eK zwP~r&)fnnOX>VZQjTc~Dkvxp&aJ%l0;W@V2Oc$>7qyrs{qmO1w?PU!s-t6WpY+G)| z$3j0MHEO}OA%vZt5O6zfUQY@uL;O>~KhobVTVLJlJ_xu?Sp^aEH&|v1#f}-*TgZZ~ zP~5V=GB7Cc-zSAtL?Gb^xghSjk_9ujG4hW-Gdn~+!~KP+d>)r^L-n(s8>MAXHWIIGln}%;xBY&W*pV#_D-yiiSG6nLvyJ(E!(@b#-mFt`28s`i!c?jK1#+glmjh^6OWLy>z{hFKoi71C*c#?o`zr-W$`e(`&EG)C?183w^ ze~Eo`)bRt43S7NJ$Dte(d!|#wR{#t9^HZA!7~aG!6e&cp zY1Jg206jjJg+g3exhHADZsq%k*bHTf<9y}$;k2}f%*@Qyx&{@B^KFL2}KjI3gE8VAxS_;w~`WBnULo-n&&4%a-2#%^R^f4{hViSWx!%B#~| z(T4UF(ckm$6uj!U1$b>ZJsfCq_E8j*8Ag5x>Lm)(8!2>)=${F==DJbKH}`(h@Q-pd z5oe;L?i%#`_8^G5it%OQ0;07)Bw|eWQwewXN1`qom7cwsR8YA4iP-8X9h2)`1CRcM zz&=)5sL{&9v&ec)3S7r&rDbPM@G|N(%E;HKB_Z&FXb%Jx=j&)mKh4_ne*NnZBtPOM zYmHmZq$t?F=Vvzin(S_J#amBy+s#H~AY;ugpS3`Ha9sSziF%~ygs|*2YYY1zu&ir! zJZZ*9ow>~WM_SkKK+>HII?QSvB7Lu$G)Avho^##x{=LmTlm2gcz~CFV{O^CWWhM`5 z3_FBewE5Z!syK*9gaUNzE7E|n6XN@DM}rJRVMS~yb}D?CSrc!FZF8~aHRBY4- z^!iP9p3FtojTe`fqG52K8{M0(NJ<@A92!{i7E?ENvc?ODN?@I2i%Kl$;6Ej+?6vQl zCPT4C?#*5LF|S|=Rgi8$fb-SE-W8keQJHQ-3AS5MyFwP5o_u(20~ZKXKEi8dJMshj zqwG``V+uox>Ws|#6R&3xb%R7|`sr9o*4jqG+(D{(fxD8jR!jf=?V_>0bgsmL6rHrX zIv_eWHg-W?JLvClJVEL0LK+==>FzrbKfF<2bzW`Su7C&+x8!}bHf&WoWl{v?iRx@I zKS6Hi4TGFvOt*Y(nX4a*^=r`e)jnEM4|X@Vlp|6;r7IV90@^RK%$i5KOoEvp|8qgd zHFagd;urekh3d)|`twnblF3x8nFa%)SdA=zbmBsKiq^T#gM%2Ij%l`Zjc&%t%-&N9 ziT83rZ*T9)YldsNKI?90o53~XL3l*2*q8m)qy@GSwi4K~#!N_%68#K0BzU4Cu30>j zM8qrZP_Ap zcCvaU6UHT0z|$YcIuneelpM(t@~JexUJm6snTXI7Tt|yVBUn4r=*5 zkBf*t{I%4YiPcHgvJ#d_{{f53Ym?+YUy}cK512NK!e->N^)ZmnM)+%TS@DQMkj$=# zXw5_VWDb^_kal)#F?){2tJ*jaru*h6SCZ#QeKB8#V+x6CIY&`@8bQHdfuNuuJ+ri1 z`NFgZb#0s(QB6I%UE?fcCRp|nn=A{whbQ^kb8)Y~5Nmt;N>p7Y09fYa=O2NYN%x7aW;T4rMF1>I#EMh7mEpFS7tqzXAD4 zdtRHuPD)0xwp$kRYxz$N$FA!ryoywe)@qnCEUdG^2?nEdT{e3L0F8hv2K9%Xj9Ips zq+?a`adWqeBx2i@G~kVD|3GeV(ML(AQ1a3!H!(W#wq2GEtoxmIqH+xPg~>P!L5mp& zTH&Rca5|#kT|Gly_y-y)OHyI}6+w6~n&&y$(k0a^$u}?L}5CS$>CN zw<#_K;?}^YIJwhGq%a1>+*;w$Sy54cV^~-*(9m?zsH~vWguZV;K|;bp^52c3s{VHI z2WJt(OG7Vykj~Ff-xp`d=Cm(S{)gBfB#9|=oXpa>qoSf{f*nBJFChbC?*C`ye!_r0 zV-l9B*+1q(_J3HJC|4+m)@k=B7m|VA9yR51R#{kbXDI$w6k2b;%s3Pjl#A=@S$Js0 z4^6ju|MN6vQ0~T#j*fowzpt^L%pX)1eknpl7o?EGWFlFM_czn1Np7$w8xD~N-90gO=hc6lofp5SykZOXIZY1FcE9|ltN8>6 zpVu2F;{WoQtkA;M)%6n!$`BMZyBy6>LTmYzj!w>BSue=k%&c+IcYJypt+}~*#U2L- zr?sO40EMb$MqPYR+=lA!KN{Tg56J~mjr2G;c`Z;kv8ZXim-QKQza=FO}&8Cx!G#?RAq#2 zG?C!KXaEPZE@ggH2QM@hcr4maQmgqLF#Rq}9rYQ#GI4P*S1(~Y&%Q9KgFIJIzR+kg z@$xBx=VhJ4qP|lA5WZC~!d&QXVkq!3uev+UL`4SVgo2*|dFHNg=ALKtx94kArF?uv#cI`E?Qlj@Bs zucbEXB#J|*S`gOM>z=hruM|l^Y;w(WD31O7U;_#Bz<1aKS9(5d)x}AZ;ri&q>p79C z*8GLY=>EE_mnr9c)q#>rubE;=AEDpWR5fdn^xkG@L{I>hksx}2EnY`OFgmI($8%Ss z7nMeEw;kXkaOHmsWzMA0KF4$AdSs1W_3_35mmj$tmVPFVe20#0Iw;mso!hO_VNzOt zmXehm&$`N~`Eyv^_;go!n|~Hb1NvAI=W+1|!mMz`&;Ao!rrt zP7-T!jhz;!HnG#N@X#?@8>%MX$SR(l;REKpv_RZ}R>Nn&N!G_4AkkhT%;4OMsfvS~ zhq{%6Pz@o7L(=x#UL(W0Qp3+W61`H{Hu>`EN@v^FQcm38v#VL|w(e=XyCsq)Ab(~= z^))?)CTy{ELto;iwcY(7VFpUI_Kr#m77BykUV%_fm}c1FMGMso)WyWaQh)zuacnOt zn(J9>Q(hoFN%jP`TM}64V>9X%Ip)~%`$NvE6*KTgy6nibn;ln62nBpp^z$zpCWXXT zn;qxZehAJOII7f`gL9a-N5%0tR*%o}@3Ba3?PFquoLpR7L`C1&%G7GH{60US_&2J5 zEU|JSxJN})JCQ?+g%$oRUBCrXX3+U%jSy^dvIz$QGEM~#d4H9#>`TxE9Q`Hro++;< zx89fAjzGxI7yWL)2XK2$q)Oq573>X*&7^(6%JcJR)!57ga76>U_f#M>`0RCjrNm$u zx_ z&5j;!ld}%Nsh)`%_=`eRdI5{bBNZzaPOs&e*ZAAfPTDlj!vx-{d3GC%={F+R3tWV zY}BpMJbSV1{`0eZEyp?Yc?b)(O8(=1V=_$&rIALE--`Y!c49hvsyf0kpLgKTITw}1 z9Rp>&9_Fy*n>)nf+7^x01i4seCQ4>ycWs2A1BAg16Tm%0uOj!&I#aDr%CJ^9f}jTi zTU=4iH*trs7uE$inOy3Drlo9)GsFXbC-v-P4=(znSeMGu zTbe05%!lqqTXTMVi|UE|6&Ha8SVJvVN#y16IznV3ejqyM@`xm*B_yz#95yZg5HC3m zsf@PKpZd0XGQ16L6V1FE!dW6Yh|&XCnOS&7?hY1}gm0arZuC#u`C8l@#laZ9oUi** zzFuhi>{N=&TpWF8F7*mC#`kA90#X{J0f9p}l7Z*JxCEd=JI(TLnf4g@l@IBR=P*FW zDqm-s{k(**-VQt|=G6#u=@zrIpVV95aS8J{F?U)r`Gh3MY~u82i8UkF?acmopSWJ! z=n{gise>L`$phw2-3u5i0`Hm4ws+8Kht_-Gens{6d0KiKQycb%vKE+Y7q#E19fNw) zXIuS_K6o+Uzq{R}qTIvQiYNXaVU1y8d?`7$?vK?XhH85BhkEk|X3V^~@bD1ki{M;O zV!rU!ZW=vLlPj4XR&rh?@j4e_1n4e*@IjoOrLi6G$n8$>#-N+B#!M#vlpb}p3Z?6} z+9JhrX*b%u?$`T@o!1lmdZmoN_N8gn>ii*2jy%+KT2*B|a&2JUr0apIdfF8vz=ji*i2EI0B`J&qlf>3mE!>|Sti^Vea3=}*!)(o01$*mw=sbTMj@&nk^- z`khaH1g+)QRD_^Nalej|x`FHa$62k50naMjB^Z*j6OXb7Y^!cV4BHY!O2S?eZz;%; z^cQRO_gy{tp*0b=pVcsq3n4=NHMri5gzRYRYF17DsY{2uVQ68nghc1c<}NPZ!jS2v zqtX!=3^rg3Uxx~fYsp4T62EzO4-XsK0mKI34!Lg$kSl&#H4HT9yk4W&RPU*tu$~{p z%5W@gji_F;zNCq0FdCxo6*xqrz(7!W6p*C|mX=oR4Bs5%j_)i?4Rtpbw zqb`uhF26b+93^fC1<}k};2PO$i@bCqZm*A$|MZi^tert{?lwU6I&KY5k#<$H8V7b$ z76w>vY*m`{hCWtSwYeXlBoGT$V0}ff6Xo%}vLNL5Qjnhze!VB(HC37|RUYOB1pqij z55hAtGG6KSnyn>kD6Gom5WOGYgF02-4;>0-3f$NeMl0)bQ5$x|Oi6g=PNSyL`Bk{@ z=9(uJUT6u2BzwT4sg~R>|C}40y)Y%W{>r4K*u2MbSgBeDF6+tbBRb8#LFP+XjdKZO zUI}<0=sxih_8mOEe_v385cX><*5~aZ`RI%xEDWPDplX0@sH#mQI$rk7wVH~QniGmg zJLk}uiHBt$0*1)Sv|H|99!~9lsuF2?8dH(o%-ODKQOkDvd>AI1J2t4cA>d{#T^P_! zN%ORHG^UpCbVI?hD8+qIZIbInenUZL&Ko%DIBq=dot??gXE{FTi~m^APls2lHLk5z zz|cL6()}9I1lA@y|EjiXM2`6M)Td==JCpZGqN2eHe2uOe#GYr2t)#TvQ5j+2dvn%t zUZ`9k?Nr zKqken8a05V^Y#=(VI1njgfiR%j!!su9#F&-+YF!Ad0fG;;%1K?-ms*1k*lsiS5}n7 zIM^*R0eRq0$T#?oO&*>dhEE`!l?~%drsNc1h`aFa2Ax+7{GgwLn-5De3yQ{OW|p2K zGF`zs-kwcU6&phwz4O%D{*s}Kmt7Q$9mX!lX%l$|UM-Dj_L<>+5jG{ze`yp`+kOc& zGY1eWl_`u;kyTP@)P+4?9V0>ZRWsWlYgtgN#@^~0QM`RMVM>44P+ zG6;GDaPx(ON-+p7;;SPgDTV1qdyBH&0#lE zKoU0vBmYsDjiI`ydCwkD64_3Vp=@UF67?EZ5S6kT+O*NbHE8#%ByoCs&lbJ#iz|0q z)lN=Z!(kl;+Z@ILvBsUR59F=nyN1f@0p=FWieR4Y zFQAjOywLjt!e^KFi_BY5boeUY#f>TM7&e2PV*E6T2vIC32f|(14=wY^cI^9_4dsu9$;ZsFzY7 z=JbiNxa+b#%KC4eJZoPP?mv`Yy7-@Z%LdH)i?}bwO8`9Wu5?o4ONl;Vj6ld?G~cmm zYVoK%qHaP49d@X7Z;X%YvL;1avq&P!#_`q8Z^!L-amN0*I1}f?SJUE`&F%PRc=TFv&vXg&6cColUwVOy*xpe=o3V%@jr!MBfM%c!f@o$t~7d{C34?9sj$zw zzR@2fnyl`Ne{!$$FiZ!ZzzfCdBY8OP6xZ+*`wROMiwCcKSJxJEJvvQ;N1a;B2FTNU z@~6=}bGB1Uy|%(cP8tstyGz$yCw|mvzSfEfi*XqFH*dbh83#Q`b_CcyTjhQs&=wCQBhD)ot(2>eP(U)EoKgWT%&!PPH|u zkZE;W$je8tTV@dfeQMC_NQS5&?;U8@*ZfTl?(euTMM^1})SD;}1gTw;C3P}i$>65U zf0FebT9i^nl^IL7R5=B9S5$SUzut1$GBSIO$I6K=Qy)L)PrjA>Jq&lhPCXlRP-is$ z92Tb5{pKuJwoJF3proxgT5Mci!s#PeS~bIDt)3d?`I5F>Z`1&Zk1*0$D5Gz%Fibx? zX%v!wKH>$kOU~$YOH_;&Zzlv-HbP{(j42&b(QBR6-q0oWf=Moc`H)H)JHhHD?%cxM zh1&QS-Dzo8_OhowKta762=rf^r;tG`YcbdtfuufW9|IM!>GYc&RL#t8NZx5WI8>#> zf `IS!ICIqlPhJom>AMin*;n9|^$@SRNpddx-+uGCzlBACqUM5<|+BPBN%_QZ8w z{61GZa4-4%QRhd66YgJ_ixFtKqKg^u6EC9$&=PzB+2HkUohU zzef&wAZzgG`TcVmcG>AUjI_TsX3gCD+Mow&uE1HCl7!v9n(Z%DOYO+!1&(ou5r(GL z=1A0&+htm{n7M!y;THYM$vQW!U=DiYPfE>PE*CU0b}*Kk=#@IZnMNU=dIf{cH%K~! zo!A9kGw7Nx>!!~3@YLSUn6+voj*p#DT2|`~U?60exwn$#H9|z=&ONLP>Wi-js5C3l zH`Zv06wq1M*E>fa_K;T7wLh#aGhr6Br007uz`{n`VM8n08~?Zu19k1e1<`Dbn5$yu1gp(PE&fqC7ue zPu`!@_NY-<$_~9eL0V{NW1*5y-{hn+i5yilFSnD3S#*HH*tfv8lEbOrh;sKnf2Jph znIh!2N4#J!_egRs6(hykybz%I0m1xsFL3s@o*8Lc&6@S9np=M{m*dKz_(&0Y#%}KN zo>m(v2}T1W9pnk0zL~JE?T3rR@F3aMqwc9LJ4P-1W5Xgn8roiFN5>N^s#Sd>!ivG| z@%*he#Pf6st-HJXQDtLfF$Svg(J)I&O4=?m=cHUW>uUZK0ZtUV>85eG9>DK_S6iA; zp^Dy(F}M8!1NhP0eYuU(>iEe3)aokUVJjPCG6K}?#w&%*#AL&Plc-%J5ukowm{4lVf0W52(nUJuTpm^aMF+B$-A>PwbfHw9jYioIuj?eJeXJ@!bGVdD;02ew=Wn70@tgWpz%2Y)4rGj$xx&Dclh0@6YfO$JNPLh1VE_Mz& z)K8xoF5z%m<59@wkd9 z3Z`J2V*LIrci|r2ydbVR7vDY~d+bjtw!P*-C02=i8cP<7mkiF1>peJZ8{T4y&F$pZ z!@El*oxylTj7gJmW^2_0fUql-0AU7~lEi$T^UuZ7jvs7Iv{6e}FzrDuSjD3`5Cet2 zqpZMb^8|J&I75l02N3JmJ9!Vh)(@n#Zti~9(6>}+SJ^CqKP>IsTS~F%y}R3$SQb@S z-L67KLpg#r8pki{V@&l*4sH?++iR*IA*`I|eDv=&VQm}HhkO^jt8vFBK@2@6WNd+O%H)8oQB2ZNBCU94`kV?*WY8ih;qAP0D9NG zIv!e#P3q3pR0Z5#AnLM%RYK#usTP_eL~JkSh{qiW=|ahSxF878cVSJV>dd@N%{F!^ zA#EZY@3UUchIsk*dgR)!Zjwo+dqi;H*ef#n-OjM?TVd~0!7pz~ZyrCPkc^VfXvC8e z^R29>@%Kj)1?dCypR$+WVJHQ+wvXelLSR|khpSVc2j+k~eP1I%qO?@* z9~{LQ-ygfMvu%Y+v2b>`EeNG&FDTNclL;wh8x-#*nj=)Yl?>;YPSTv%8>V}Zte%&! zo+7*B&Xr5kx_5pDZ_oNzd67MigCbA70j}3e$RBb+-vSqBZ7wEvuleSDFxcUx&1R;~ zU8qz=59_%vdn0gI%q>0_b&6L-4HqN*qETt*5KtufddU!kdx4NT4Ki2x=pSgowzuze zDxi&~NPyi5@r{3tpK2X2{ct{=Q^}tBCd#_>;!1s^w;Mw`nz((uCzv_QNT|+t`-hua zkzW9gf7nZ;meL9LYSh%A!xIaBQ9&}%&5tsF-#h2ht)V&5?Znvw0}%z35Zhw@#q$ys zStd6^TbMT@-PozO_%AJ>Ir);)WF% zCH6@(2Zg|v%h#6)v)-Pl+~f*j)Gp8$Qu*ui`1%1vzVk8yCQqWMLHW_IrUhn82eTLZ zhbf2r=9u{&3i;PUA6vqPcdD`WSoia=U1o+Tx3<@|GS41JOFS+EH%-Woq-bjT;e#T^ zUpX8CHjQ~;7R8;*-K_=QV9%=h=d!#n*5YgrAw_zMewfnzqz#w8mE!kiLtM8%D1EbS z8vvIxW3^K)=_Ce3hAOQAl$h=d=|7qkGVG6p)b@@+Wh4TGj;80Du(il`kz!6*Xeuo< z24KQX!{ARwjsZj+UdF1BLSS;B_)TU*Lx-`&;4sK}u~Ey-9RuUqaWY0gc?`iCb-PRr z*0ZvtCuD_VtK-r&Fc?farlMC9IG~PJ%Yosc7S}6?OhbSQqQ+_-3FT;IkE%Y2FlMLc zXYR9?Xukg8Nun0#@Akpg*nx0`!?`KyZnC6>0Kl#G!ss(A&@C+a^lxN|!|ftJEn4)^ z?xKG#|Mu!E=_dr%LC)}qfsKmpbhmfDimZZ2VKvdITYZaqfDu|4AlOk%V^A*Y z$(**ia+;`J2u zz2vsDMMa0yQ_Cp_C2FVf`?J6bF7L&+1vG1=HqsWSF{ zAHOm$y>hEL6gQYZxQHQVdSTeZHXz27n}Z->}hv8rGHem5M9muZL@0}#OpA4Gi=hc~@zzHTML zh~+1ZL<{)J@nB$J6(^}$U4hZeq#J6!#TwP=_70x8$n`rD;3zlS^g+qk~C5NFfnt(>Ts*3huv zs-c7@$6VbM7i9MDFYiF8!r~AzAs@e)(z3ea&jFp_8a<~7^S!0Z)`xB6PW6M=q>@30 z%B={|rr(~=Gz@~i@UB~tmpiKkJBRAxQ>Bd`v&e2=-Rxr*;akh$>6}frURBnjTf@N( zaNE_w1%LGW@x}PZ&!)9rUO(SE{b6}-d}2Er7}{KD>*AqvY�H&SK;S1m67N+V2P1 z=rJsFOC<98;zo=>jR?0UUVU`ya<$@{U%4Ir5GJi!qiWRRwY#dnk>+mFbAHa8T3!1I z#_;pftf_wnl_TLi5w+$3_E7_@)W~T6S|pvEbKtvn-e?`B2j! z1gBfUNKmW+tJy6&GJ`o^eM?&5j)4@bGCcu>z+Bk z3=ue+Ty768wYgJIUtz;sm>1YFaKk_dPts=m@;v+%K;9!3vpCpup8%p0Yt7 zB_!|=kdf!m^L(X$pZ+MZ_uX(iE@FTt783sx(zUQqk})G2lBchqpWR71 z1=H&EPf=J8@Cp_*?;C80BF~)5R!8T;fUON3?3%>CbO4f- zxctyxp9PW&GE+TJkf@m@%cFC?G@5XA=QVsW*K6x9m$ODDT7gx@{(BW)MpAF{q011* z@>yWZ!5N948ueb&CaT7Hyf^>11F^*ywCP~EGb$_Jn#%@9v=%#7E`bY=PM*_eOG>iU zThYq*k7c=Xo!``PUR2eqe~zpFR;*jV6{;Yhdp;nZOo_6mPVBXx@(W*!mfCH?Si0~3 zqOtS_qv!RE9O-smo&?Pf6}xrOu6Ah}d$85?ZuguYntRms>a??=TeMkQv(l%D(Q6Oh=u#KV(&(Bk~ zs@JVb5@##`qlhxupB#2fh|s~>ZYPWUFns##y;g8&+(=ACtllDm&~I$cNBXl+7?EeW zccSi{9G4G514Qx|gTD3dn!arN1V!2(z7?l35~q7T(tlVrYoZqD5R8td+PwG5Yjt3C zxH|vQ9_J;*rD0*Qg8;{@Sdsh2o-Xk`W~e5SZ)-lDlg0N$Q^H_1-qzFG%%)a$iF#Qf z`p>JU=mlXntTvz!&D9A*$RTqgP~~$C4bjwlXjnjE6#G_nVf|ZCPRGS{=y+?DB~W3Z zxTJ{j+;f0lwD@vk1*6qCJ1~vD16{Te)A>$vs-VU(WJ?CkZd|i z*=!*US+hf5xqq7=qQ6(J#4Qz!OEY8mmFIDxmu@YlW{?!JSAq-60O>?>kfR($g45Ec z+Qk-V|*g5w7J|tax8o8Hh{12uz=8Sl^|x~YQ4mVB_2C{ z{>%I?;*$%w6KEaZ|Pd|ItQwqVFYPltj$H~Iy_4Y=ww7G*cc75#uJ%zXF zC>VCCU#l2GF0QmuS0RFz8osmcKC@<#6<~jWX!&~=SNhNuW`+LL8f{kleX1rSxV88E zKev`ab$7WNq6|U8p%5%-0NjRMa&=6|^@53458L182dwC*_D&4p_~#G7kB!oic6g2{ zys&GCPyPM9aLrD|Q+F?DHolaff(sOty172a0wiGkJ?Z#;;E_doR)*_dK)cd;l%pm= zvEBS+WI!fBWMpJ^oWV`+nyG#l$z%HJx38E^) zJsAQRH_*|XokSKE6PT^t@eB+Nd|elG<_Zo9@`g%r0D-bhO|HGE^R&k$c5l`R3aTw& zecO`O6PAGf0s||r_drXj_!o4u82e91!XeB#`xK%j7$>{TTYKEy= zwer-hLDepPBWk%CIE3xKX-{`H_SLV{0{3fBtxH5R1n}a6co`5>2rSj-k(vkJu?#TQ)@&;V8zu#CEUYLRyeG% zL1E=t_qq=MbG?oC9#jK+fAmCdBlwg4`9{m?zepYSB#h*+J?{kCtd2+cK7CHs6U~xs z5#w)!BE9&WTeat^kkWkd(y5P`E!>zVi+LgduiK={S+Vm5_v`Pq%BGlfn^jFLMJ5c$ z!sjx%!Z_(c5ji2@=KijY1G7GLp0=$ceU9s!`>7QV!mtky>(CV};fjW}Qeb7fDF`u$ z@Z!Cdv~VnG_4+Nh1~HiBo>!Uym+w%k$JJBlwmdb*SZ z_&0GtldV=ycVK7`bm6KtCnpEnSBF)&2K@^ZcqRNlffozZOh~fK%yif96H>4_jC~(L zw-cdwdoiB-N;B966|=F;fPWpEn^?UdpTj|jz0;s!Kzw-)7qtA3nVitnZPouzjP@CV z?%u}~SALXOYLyGzU}UV8dVd$F1G~4e^g*7u!6BtMS5vF%jMn}jn;K~@-Gnag7O{yi-0ZSUHb=!i+4UK5rg zWB^XSF;S&*3apfHBc9+#aRMJ5ALj#ubj;9O48NaRs;E32IO2KT#->k<4IM_(!~==q zdOr&jsRaZ&RheAA>=VY#fjXJDrrfGx9AcSn<67^BOApn1C znw1RC7}kOyZB|p1AP`oFmOr zdL$ZmDumKYn;?tsV)H<^X1n?krrG-Uenvyt^>hIb262Ks0d?W=1oza*tl^_LDVu(& zEE5wuYr})4ELv;c9FhDP#aB{N-ZLk^FmGORG9ayQRD>QUJv8wzch(AEI6N(xdwWhz zE=y#^X@Hm)*C_vFyY&gUiW(RNhB{HEeN(=pW0mDj6W*||7SJ7%c6I-)Nx1fsW(VCg zC47pYot#{%RVrK?Fh3xEbSbZJSu{WUvuXbBOVe1BoLh*IUh7ueSK_< zRO=|~*xuFCDPQv|s=q0+?Op}e;7!uPP$JSyBrwHTN5cUlbLJn;UIECpDl+8{TS}6k zzNhUs&5hdQa*yYul`gQXz+2PISl2JMz0^nB9SFU7r9WL)y5!M$h0{xshl_oMLWfB+ z_cnx%M1#2+S+~|%9x)oY%uGOA!)Qg9VM&=)Jxjry?yFq!U^zB;BsU6lrt5Vb>4)yo z^-T8fx!*>zgk~^+y+e@{3jm|nV7rS5F6gQIfpiixuCV68q=LI!gp zJZ;YxUR-G7UW_o_ynq?V3dvnuPf&e+Rp?ExVv9ZSd8&3)Ey6190ms*ud~3+Exfp!T z1p&e2989jbz5ZwKxg=G~L&<9*!`J<}T(_IPtkL0pYZroeH!bWEPGcL+2DC~FFd2T5 z44En3DzBlK^*p{Z%Yqc=8dF4sZ$9pwPnCQ4&e`1x47~>6dJ{VsQj--j009GpiA3jG zAq@a>!dsW%V*-P@`ZV(V0Dr2-$iNuW0_FZ3fO6q^oT`tSTlvtt#n6Z?J7-wW&TePDw|D(*CNb!}H?R}D$5slUWEZ4D<3#}Sj z@viTXmnN&r2L9NYwiHo;+DyEPK_u!kVh)&#faD%W>Cf$yz6_hsuM-^5&IkzJY#_0> z)yGk|yTA)O@F3`$AH>g`lABk$5ghu6x~ua4(s0#=E!veFC5#wmcY7Zq9Knfo%mToBY<0|<{Z`77_>{Xj5`kk)GlK(D?fjHa@rj-f5lqk>&D`*S?QnT{SZ9%jCj5H8n1bBw`J5rSAB5f*myJ} zA}GOHy18G%dN}0_t2dbwnIT^)#PC;M+#eg*JT%VvqFIN&{i+jFZF|GQWnHP&XP5BfZ4&<=;r`C!lbD!->u1v~>I+MC z{w6Vo5T^#OohhIxjsG@MW9`hl^D5L)7a}QV5}zIX8Y6aoF&SjdNXISk4ubh9Rlv=$ znnnQ|3BXSvOnc}Vm4G|=-EeuW+11(ZKrJV4WQ!QuINM#{ zo@m|%&x$bLy0N%@bI_d%218OzU0l2)1N%tFju(kv4)TI7Cd``WFZzD!E%60mrssEt zwO;h!UxFuHZ^}sz)mJ`+S(6KB?tJOa`Tf2WFgKZv8NDMfJiI0!KUI<+mfEb-%|__h z&eiT+gDuCSl|Yo3!#wea-_zhW$%;+aI-h~P;UUd_>24I!LD(I`d#BL#dVnv0Er6;o zKM2NA;Kml}^!s1!yU|M14yZ+lx*pxex&@hX7fYnj0xv%Vy0u{*(n$74^=xXh{~zsDW*0ED0dRQ znx=DGow<1_ckT8Oi<)15uy@?Je8IKxYW2ZKvhAtm>VNfimSJ&i+nSCL2p%+~un-_P z1W4hM;O_1&Md9ut1b24`E*0E8KyW9x6Wrac7ujc@d-pwO_r2ZE)16;cWYwyV$GTc5JsoXreULD8Cwy}|j@=*VZ> z(NDB^#HM@)X|yeBi!@`g9|&-@!@C}0$Ee(~ANz9ig$6J@C=?t2*a}i4(VVAU7u~{f zte225kY**3aIB}F?WX&(eLQbZxtSu`p>3VU?@g33U`f!MWnUZp5%ai6vwrBCDl;4$ zTps%giCEnyQ?IcSdlkx9JIU>`w0ox7Fnc;Xq=ew*a`lB`3tM2J5(U&vhCm1>6ICAT zIX637v544mlL2O5;M*<=v1RaDYi9yvSm}Ct0~8~+E`};JcIL^mwbZODzyH2eR`df( z8>)-nM%-cq{a)1}Jn4DpTG8E3koY@_@(X%Uc>SNMpZ*c+b!+Ld;1TV=1|APd9|UB8 zMoT{>enGKKJ|t%PMTu+(>)2#EDh3eRH4DFC6wWUd4#A%eH^c_tDK1xm{0zT90zmSk zHF6&=%9oWu&DRlz$%==RLsr1rU=G;Q?=RtYt4)lb z$v+IZv&;)F`M>~Pnce#c9>^OO2>A&?ks}pFjgo}CS85YP75$Yt>Mz?SkYk?itI!&` zqdzv8-GK$Efsu4qSAjl4;!%|NbM6K4U51>&WY)bmQjk%Zw$U9)Ac}Ztb4zgC3ptU` z^ae#Ry+IBvU=&700JG$gC{|7u2;qZ6^M_?aK11Ace94TlL`w?CoU}rCAR@;#5bYG=`|#3(r{|gLGxfsFFx_GUSmERpk~!%j#f*`jzsB+c5^XYnow)ULd)CH5Yn^ z1W@FcRZOb<@a)Ul0ub|Pcu16!II8Fn=~%c~N}6nDB8Vx(B=4SPg0$Dw<}yZM>JCC6 zn^_M6m=n5=Zj_26EH`rT_hh{`p864jdrS+vP8aSTFGK^3Z=DkbxZ_ ziwFw~`$GeYHTbvE)qi{sI8)2%%1W*)#PsPde))cx9Fms#}A-q!Z#n0Hz<0}`w8q)! zWvnNdXu-VMi%g%Y;c$@AZEEr;G8GUNCzI7FYrEqN4-Ze5aOD7FS)-KCK>>_(riP1|neA(rsf6aIZ_ZDFi#@UMo?jZcYcLep< zyya>LhR2(`(h>Z|0*~MU3gt0>B2()`Qo}yoGTwsP6r=w2K6v*zvl*zl-1$kWsmv=u z?i5{PGxUkp)!~{20XR(-I!%=(E(}k@r#YxlA8L<1D?92>n3eU5b7^5qMRz<83oVdm zpB3*B48k3wUI%PCGJy0DrEJER*gS4-?n=1$2|y3aVW3$irCJSK9r0qV#)=%Mr>CcR zUA^PJ-u8Im^!B%&Tdk?k0jp6*DLK82vtq-HQp+h?+ADp8P_2f5u1Pqu4#77k8!m3F z-{@TWIiAY**0_&SL8q*-3>`iInpAiFB*$n6_#94}wG{siWlI}W#tk~<{8IfXDeIr)TSn^e&Ta0NO^kDf`z zsf~`u0dLNI>?-wqw;dvS!Kp+i9HQlvp=Ld~A+Ivv&&R#CIGIgTC7T-&%-oTxvMYObN++?XsXjJ88?nyv?MVYJ&_DLT_s=M=UA6 zc(bdaUvb-u)0 z@6Vr0{;Qm8`A4#q-IJ}!SGwDaXw72%j85~iKPZKqSlkgv)r|JLItE~rVmOEV!(!%# zd)wxVIk=06o##v8^F>g~3%DmqTwa(y$X`FSM4GT2pxRLt5IrH&Y)v=@B>r!EgVe$R z8B~P9!QaZD7%krb5AQd6{~~Qlc^TVV@K!oCSidvWwEGgkTz_;$kTSYo*#Rgys~VP_ zl#{dbX0e=wtI~>vd{qlPy&xpLm-D#Pd38Gvnj1FwxbuzRQlUlmZyi%Ng>R-bZD+i3 zQo2~g6RR@EPcUuPK2*`jHX{36<5{;<7w3RDsb43W_O)Vcv1cb=hINJpNbrz({1lnA z3KNSp^z~VQWkH9dnYL^um@Wl2?|!a%viTFCxbX}WO3YgnA}t~DqqzAlklA>^q)k^> zSM9S_sot}u+cWjTzya#bPeze*WNFJkpz>Sfw3ChK2x!EewL>#C?xw7Csc=S?b!_G?k*h42dg8H1;SqOVgBLrrIG&F)|iSp5o}FQBxHrN z;h|>Qw%Qw4nH1TV!uj(0e1D?Ts2_0i0YGA!eesXpFAF9pAFG2I{R(eTulYKR*Xr#@7Bi&G}WA2^8}WPhq)P#I#Jo&?wIIPI0I8WX}_1H zRF6(4`upFBdt9!*+&#($zA|?zi#Eo5snw@aq!=@9J1QH|ZF3}>&2cZ8hh=}2AHR?e z(#QoD!i6GISBXJfnID|dbVs>xKLMSq`bqzlnd1sJW<6`+rq=w93+d|nL^F94S86}D z`GHWiG{x7#Fw|&#b;i?nKqjb)-7cmm)W|ZZztYNoUepNC&G+!4HKtTr4Q%r++jPGf z>Bs&*9xRYTbsnrha_giyLg+MVUU=Rd`tiI4MxzH0?Llv6Fl%n5@xqavY)2Eqcdc>4 z`RFrEH+-AzkQeR~tH$Pj6Yl>UapLV&ELPzC2bbOE`L+Td17-(mH7 zIc`xA@1E~9^>uB_dWq%~xpv1;58JRcv`M^RbAVD$(UK@bw z65*uF%F$66$akKm8^p4FOoC}O*4=G2g%WbMPE05h_i+BPQMfQu&uQ=4N`tu)4rO@R za`DMg?AyJY@4qScU;scdoghx?9Vld!Us%5ajIyRB#gCpo*lKVytxR>T#qkBm=SpoB z(>em?eYc8bSy^N^2W{wp9zgFmx9+O}FMbm0H}*Tux4JxUk74S+3fFW z+58L#LNL?fes)gI2S*KH>4k$w!PBv3b_liXP9Sz<1j4f(%h1r!&3O$0diO|ms907^ zbURS@erGyD2H^c{+5>b+coW}LGn@OQBc7+SJeRNT*lcqq(|y@7deSM+EVX)5+Yem1 zG}18(hkpY444E1*93rA3^ffGUB!mgt)>!e{lPrC5Op3d!S4s3_o1}If8F>qhtQ=z} zQalN%^LD^4L?Q#(X}HTIvoa_70gFJ59$;qM@~$PpL{767_NK~>u-s(Wq{R&b`KEditIV=hmrtTn8zl1K7|D&4om7Zr$@VC?MfL_v4c7(HUa; z5NqJrG^+!hZ*UIWuB4>FwBB7|bV5}N3+Ej6Z*X{m?}_&r>6-ULZ)n<*jK!)a;GY7; zTNRo!?2R2mI2M_G_06rB8G?KIDJtq^&-+)wI-r;;^+UlF-wbK?<`0Z~tOf6~RJ z0`$mL4DSx~6Y(+5t?c)1G>6bk810D-uBNaxt}k&E4(^G1;K^lBwa8uHYc6iI!4+h6&!*m7efh1GJ0=r_U%Y%Rn!$;Q7e7m%q_N3hlD zk~U~91RewEVN=sfW_-eqJddb@Vk&hI(yv+^-RY1{Qc|hKptlZJ`1xG#QfRg+Og{P3 zC0T9Fm-1ns?XU%GNj_PGsy|=d9u?dz)9UVD!hJW%-rDlQk4^ll%J6Cmg>v$S|Hfkn zK4bZfwTr26va9E#CY}OIXwI=QAfWQ^Dge9^PnQdA6#oWfC`WE49oOlpmcnDP#eNdR z**2b!rxxsiPROscIN`ePjcP@+gN}}XKUo*UH*+rhbv5SojXTTwZQg;tWHCUz^a)qBKiPeNpJaIlj#8)WT z?V*DE%4cS2(=NkCE=utMI*2`{H~LT9g1w43S1sZUisVqkXL8M*p=snP2N^ zkd!t95~|Z$W)~>FmPYZ2DrH|l5o>BJxURsk&%c^HDAnpnI?TiPp%N$~yIMvpo>hRk zMnsI2P2D{|h>)L}{&0nP@4M7!!w2l(87j6XkaFW_+ePj9`Tv108xFUG{tc`UMko)!3JoqVQ8J$*q@!#e73PFvd0M(#U!z zL*Y~kqnQ!#!IwFyZ|F^)*b#~5-PCzHlMzerUoo+@b~BhAiIP+W(=ow2@8imubUf z-TPUCr78<6+p-2^&(L!^jA4F*y90l~;|$=OCrb4@Pn3s8zxu;1CEY){1mpcZT_J6_s-ocC zpB*}zOWQU0FTMT4WoD}mPKwN@#3=309BF5rUJXZ1Vd=lXiu1uv`w2_~Coj6&C?!^; zVrr+7=>p0DAKojOfw@N4moVkxalhZOIKO-qDWtI)1k)R*tnQDY(mca0D%+9{oRIZOS3Q&;?S2*3%aJgUdk5cWRHFGfNU4@#N zlBEXclncfv`=z@KaqXb*gy81j`hPKFtJ3FmNNq?c3{*}mqd`mZ-V6!Twad(~a-{#1 zVb9x|kk~Ji{b4PpSh8LB;_kR$@(5y&ZDZ{PGZqZy)_w{OWLKGV`{S4n-a|$==ADgd zn@{mA8@$?sUg`sSU^dq?T0VaM$~FDkk+)RcM>hOKvt-hVk?XXM8$%z7lh~b;vmTsc z#twl;*8{*!^%r3K`W;X=7I9~bbzK_PdMP^`Y|5?uI{)R((TD+d=WQ}E;1CAz1oS8_ zap&m@Q<><#-pq>BHL`zYQ&$kBkI1MKl(NnhD32+GvxWEY-Xgqs2;4fe82WR?H}|8U!TD=!O#<;d;?b>tfgGa;17QJZ`TpcFG530AEdaiL?IzPbK>P6+Fd0N5Y6u zj1V|)zQ08WJQ@9F#p*O_Z2+snVa#+gsPhkfq3J5~pa3k2c~^K_wUt->NAbd{9xeu& zsi~>cb>soP4)0Bd9swRo?SNly7`yFSR>DR3XUQobO@fY?RQ8a1C-{3CvzzMw#9xS6 zyY_7aah4h#YV>KA;ofUiu8?#k1PB~de2lLHhZs^VO};mL(S)?t77Ua<&u^TM<%2w|EI-@Q}s&0ofxKK@2^k%}~k1KT_DK#q)a5a19CEuqDEG;GqPTEj~ zBq>p2OjbiMsx+5Uavt`zYN4mpT2kXmf=!J5rNV-lsCrj2nqd~dxAhc5)$oKrX;}VU zg_rP=dq&iN?$Sy&CDaegU#;yJtP-3pXrDazE)Tz4avT@q51l|LMB2!- zp+0;frFkMOS^1eox`m}(P5&a#B2T9{>|#*lM`cv!BG`nRZ%=^qXc`fEqx+nC=l&5L zr-v`U+ZG&9<71deDw|V36{J`O(cWE$@(8`e56-4p9@?CW9U_{Iw!-;{<&q)A2+$^% zU&WGG50CRz%;ng_>aF>d;i8YdlDxSIxM_4R78oHuZjXN^;(i!3%-O_@z$5-_kL9bg z_}vSS&455jON4JEdkl})1tT;`O2D{+9>WoyW??@#QILCaWyOa{5?;SMA(-eW{!`n+ zx!{NHCssCR0s$_K2b2ws-pAb$t*y;eqH=I(xDcbF*sN-a;m>}DUg60V5+}FK!LR;{H$qxIoRU;C! zNUZbZ!7E3jnRvz0sb?4lT~TgZd>HB1yl`$Y(imqle7h|tKl1N%etbfbok-ZtXBWTH zY-=!Fp7+An>gX05zq4*86Gs>|9e#wN&ayPxI7{Ti%_)`P67`7fpXf!LPnfv^Z$=6! z0gAPMd6sq(WWBIUd@D?lLJw*5kJT~->#Dmx2>9BPKTVn<3 zKqK!XZQ?OjmY@(zgvNKRDeu9o2#?u zucj{~a_g`*+7A4$3OiZAlrELp(nZNmZAYfk-SR!9;v;$sL78hG)A*57YNP(ytnuDY z>N*JTxvn|KQ-5;$xBsc6QE1VbjUfvNmvST07Nyh9He~2B&6$ipsq1<= zu}yv-FT|d1;(bC_47apj-rYTsqXX#4bc&@65%xbl-cY_~tGZ9R$tyQ_)n_^E2v|8z z#UKQ{Dk+>tckea-K5MA_I$yN57G!%*>(k_(_9-j&-_sK_4SfU85(>p#we!8|6n9V9 z%i3Onx0Qr0(!FcGdFXg6bDp4Z`NTA*Oz?RA>Xw`|GWooQ!zA4f!R<`7etd9F7yNmz zh*Bk+!f4(D-qthiQ%Cn8(jW%~7~^GKK)6{M`0oO=xnrZ_^>tw2Cu}`YKTwivHqOP| zcM|IHj4`9E45u`puv?^5Ifs~QU%Cpa}5}*Pi8V=1&RC7#)NKsJPaZC-?5ZiP*%(ZqmGN zZuWp`im-EZydshLp&IWqUNoo2<(X;i;p2N(_|#zzcsI$UxG02Qre+3~9VBS?z7Pl< zc*zuQvI4USeKiZ-UE)hz6sK3(mR#QI!`3zU4mhlDn5QwHITmTQ>~5&cHd>=>zddW~ zIvqPaE9rPQR%r$CZDC;7X~}Xd-LPV|L$;G7BKCYbiV3e~KV&X(*3Oxv9-W=KG{(H-OLhZw1!sG_0)+myyYKTR>6)ZD zVl}?{oK^bk-APjgPT5rTze?ES=P&StSgDa5*Pl?Tos%Z#PwljXTAG&Rv!N__YT>AB z6^8QB(_5W>^DkXD`zplfw_rV_KXVftL7^=g1kX`J|rw(zj*1llg{P9uamUb$ortg%1~nF9>ekxu)amOo2M2>UYZB zsk^(ot3T>wwCg}x=bL|QJSk~^Dgh7y3805qUmPr{G&q(1!;RG%Q0X`UmhgW%t)ijb zmzqJb9CRflJ-NWk3TGCkreMsH{WcKgdBy#}5HN0ZVDRN| zZ*DzPH*#zYuF;)Wm0a_CMb5J!+l17ZXe(&)5YFROx5YIbbm2iD zGvp|7{KBEysVW@n;PahKNiZX7Lge7!zg`=$+4JlSD<=}<;;MrOq8 z!{u+D!;80rL-iT;bwv~hBhjp~x^s54Tv1s~o*>17n(3dXwmB|B6yCoXFmLrkB^+bTDBaGKaNEd zYljIgEfv38j8fmYo>3JL5MKN>PJF1V=KdX~J zm6=$-D;iHsCY{cJ-B}@@J7AUSoh6y5cU-otT|()Zvz;{RUIaeL7H^Z+{Fsxr{5XFt zER4V54T9Fy47Gj)b>4~#sB?hJiVf(oqZ%$8z)r+DU--mWSeR{V>28#@CeIL8nCtRP z;spH~yNxH!msL1TVBuBfLDq^~$m61C$Zccu@Mu~%Lu)Cu7qnKyZ>48~PX=Z1|3kO~ zQ%vQc)i}Y~)1CPP>gR%mwrnARqIcqdVfHRC zVSG&mIWy<9BjH^5P0idop5nEZl1F%Ad?K7uXTQ6vHMwC&mrU!FHyh}80?ebgyN;@?Wbl&wBH;l(LecIQoN`*6iuD1mh zZ`Wr`er9{Q`0E8E)5^E>OX?4$FThu%vZ6D@NxA1mB-pK0=YPgPZsPBi-%pQd=HwEG zTdYNFUNVVx>@koAF6vphhoHXINwK7VfeNCvCvCgZu~xrni6V_ISh(xnIK)=i&6NX= zge0fNx8wlpqAWipQA6zO%(pqV3LCth)Qcy(u=n3Nx7(OB{Dx-`=4*UmYwHeJ{A0T6 zPS;MYc=d?Hjdj>#xqY2^M1zYljQ4FF{lwp`w_x!Noa~2Y5B%qlpqWMWhpM>z|El6& zfTm2X4+&-QHd|3n5X#@NeIDYJeco(C;E4tcCQEa9F5(`V?C)Q;l1{cZd7Gx+H7gh2 zK>z&b)?Fyc{<9^Ax>twvcXRe|M2ZD(XryH-=v1HKpm3J(u!#{z;i_X745RMfSu(SP zly$PE6@EWOVJdHdp>4%*1oqEZ%!@CIDp%3Z__P%C=VFUT?}9M0Qw~t zLeT1nrL<@leWe=p#@cOjJ>E4RW4i0KXJn<}H@G@7FsAlKy;q^N)Mm$N*3BAzK7Y9& z?0r=CdY7Gt=E&R&f}3M?6xRa6ro)@(wn9qYDR)EwD=iJM(oS&Anvc;O97>px!;IsW zTL+1CK)!k-<${$l_%|+kN3Mb;Iw#d4drsz`mbM_lCTdT#=5dCdr_E0^YM$(mcWpI( z)A;vUxlxe(TA~n<%S9Rgq|eh*%5R6@f0&<_@DBib6EFvFeSGRQ7jj6KzD!O z*AJyi7aeRUy~gLhY0=RvtBlZYIWGLeS8A~bUveE)?c&pQhK`62^%yh9fn#p~*S#-$ zPX{Y2@B1Nt;dn2(bA2JomZ)8}Hv5E`zFSumSdV{RE|++ynA$hhIXV1#Thr7)P_Kl- z7ehr5`C8fW;SSMK1Cr>oXV@dfBacv9MCYg zGeY$*NGF3)C&w?IUo&`wvDC)%19&Y^tgJ|-Rgv57M(2a(RsYJSe z1J#c@@u50`$u7s0NJUViS|D8~%_jWl9L2t576}WYAs|S6Vk3|;JmM=#)Avvf@qpOL zkje=ee3S*Rw@}&k)(nI#A^6@`4%=`Iv|de_}cL z$544vt&mHIgrdF=NDj;()209x*Yi*hAs&m*_bmh|j)ucA9E%Q`i567@FH>Hr7TZ0E zT6HVzfPxKFc_0AxyBY(KrnRD&6=ZUk$^}NeU@@5WN7VeTwlR@G7Vs8~q~(u3(HJ)=R8DYD&+{0CVx|U_ zkV>OcF;vrnScs~~2sl6~(+^ZeII`0y6>h0!Uwb>OIBx#$qbLT z!z>G|HA9#nD2kaepw+Q1|KvE_9BK{BrevCX@es?g@ZHEkAs|_#T=B#0*AGPV*SQ|b z%TK{siIpcBJ4|3Q#9neaITG<>TSc%@9tl3hVJs-}t8f9y1P5=X5EyI#8kV_NE)tGC zUpb=5FS{LM%Mfw|1I1omh=IU3L$?Z#cXDSentsYC-dEq`YTPmj;0Ms4*I>2u4&B ztl9zKsgkl7576?(m`xNd0V!_b|BhY-z_q}wvDII|l<>x7GWfxr8B1E^ocj0MqZJz} z;6+dB4!IF~=M@_QaG8j7AB+S4>?QKo+2MgK_#ZSN`Ty~uV4!tTE5JbgNzeiiN5^7| z_dnhOtX^gW-83-T@lUS+&E{d&IhBfukRZ! zE)C*8P}q&-WpAMW*M>JRz>{~cfKEEmK(QkoAWN<&AFd<=pjUkU{Q0K`1?xHHF#xTd ziUL^x%4Uf)9&SNBqjd>G~93`RgI=#7GLDr({sp08D3VYwHU_!VrK$xg`_}8#eh8 z6@}H%(6G3>i|XC-wK>M>j5Iyf*4D16sX5>*`Q(NG;JD8LcjqSW zGQ(b@ZO+A2IROLkik~FrX9WTrYK2er^_*CreGGWJ?;>yCUQ44{WNr0RU!nnhOc14| zrK4$->Dd{9J^AlYOlg-b7~FR+*f;>gt2qY-S8KftPe4E*lO=-Tj$-Jy!<+ArO~nC| zSnz6YZszeV<3H1OX!afjIG2s|h~tD2H%WGiYuPhnrEac2UNdqoe1rg3{A5Ukf|Na1 zf}LXB2j~!ULeksq`1)9G03cb6w>d=~+%Jhh?9JWB3AJq<9q<7G0axLx7lbRRJ01x6 zhcf^o`A74d6TE=VU7Gb5poHW3pUyrH&XzW!Tm#>&l^ijz_Ciz0{%gO%MC0HxbDQRXFJ1tPA4+J<9}rOt#!i$lG`Mk ztK&c!F3@jPxKOPU7-yHGOs*86J7sQ`o>pL{4`+s^q9fjmAe!r{#RX+uISMBA!n8dJm-`82N zgjp?CVF=ZF=d`@SQF8#~inICht5S)ow`fE)#}mP?nBO@a=-iqEcAYYP&!AV8zqavo{$qQDf2JN)N6%`UAc!HR^HR99OB2`pOE`HQu=+CLW3v@JNG`~q@b9b z$*b*XL0+Z7_Q_Oh#HC+(!kLLm&`6X1SsJBip~lQ1+~8ATX69AXV-_?bO1VNt$hGg% z(69`c9QKQ0`QQ*Px=-uF6eK}4&Xw$o()IfA@al}%rl zz{&HVw&BaD($OLOG*2EpbF>HG6@y z3Es|P;k{XD0x|5+!V7HgmD||Dp{7oqoBa^rGUNs$^JC1bfpJqu#x@gy~f(5 z8J0KMW{t{^*_nhYE1NQY4GlN=!k1_VhsOdt{Yf=2sc7t1zUrdSmgI-HeonX5mr&?g z_>yqkKD(vBLjc+zR$5|VaNGPs*PBbLmT6Wtj;^{mu_g$;J)!S_XJ1N?Uej+6+&{D^ z=Tte`!@F^zs>K!OI7jA5b44h8OW$7i)n0{VnXqC^=|zw}Z&OhBb&u{4D@}>Tn4?qU zh^z!*{UZvj3e|2Cg>4mbK}?oB9CIUd&vziAG>#EA+ck-Yj;BE8bU2g0)*a*J9=6~m zlhhR+^6Z>fnrCAWOPjXv_K}vAHDI1O*bvfUKcLfn#2-G*x@m!(VLn%}rjmK(847u} zw+?xf@wwC~hPy6g$2*ZHw8WY+SnW2IzpbQy(uRKB@r#Qa`Qlo?)ugjatLj|8kTQc4 z$ny0`&LvMs+o{=-7462eT$Dj+JYBP>FJIuc>0ndQk^*5>w5bA84K_%|Skzx#1j~uO zTM3OpvaPpAMQ7!LjAq0%45@i#{@5^5!nDJ&@{{C~iVt$2>uJU|yHsQ`DovT=vV zG9Mz8g|jf!dPPQZ^Gj7DD43tm?R~4%{*NMCsXUpMmukzEnivX2IzjR+oYref?|&_4 zTHQLmbI_*xM2&-NoIHs_e{fXMQdw?{K@{hIQD6On$oc+T1z1P#ZH91cOXl-HHtm)K z+p9}$WGYi&f-oK12r{zt@T*O8;ExCrf45cp@#0MTHV1@;daxE5qf$G94J$F)VWqYNA--bc?| z#CZm2dVPL+=-;;Fg~E?nA|vmUgByk8qF^Ds8e#EwH@J5J$}>2nTu2 z2~u~55l_YI3@UZWr2)U?VbVUtN-YmUuZiZ)E_9C{yuwAVxqyO&g=R~)rl;PqDA=oj z_kf-rvBqT&Q_m20{gK`NO0d0rF3H9y-E2r*Xd4Z0Cu_Y}rsD*~=;%{2pR|sapSu2% za^ZOPIJpdh-v_2%ITStKn4Ko_luY@o=*Ra0=Ve&EuCevS30=9klRs0(!&!XqZOk7W zfA}nw#sehIL*$=IIJ3N|<^68WGs*hM2s;vm$YipS8LHIeb@(x2i{LEp;+H_MxyQ@q z;63l$G-r%7IQI1QENiDakt1oNU#sR9OWx~4>4vryTO8Q77Vlf?y_3Exa=*x9-(Yro zffusS(daK#sJ5IC*P%0T2J4ey*Ya}ZZGvLX{s&A>!?YVzY_VQb zzD37y``S~&tR`}b2O?&e|Hp4Jn<`^w^nC5`+uzN~jeFX1G`=bJ{SI`|g|`Tx(L~OF zyzyJn>2A+)gGOr^GJOC}|E2U%3DrxpZfC$W4^TAKe%Gk$>TGW(AtCvQTi{H=s;ejHt0QNe#EPLnmpwWZPKO)ZXa?t_I93!**ctQe#J#u6Du9BspbpF8ix?*y%U!bY+ zlA;L#mxr&bf6)LPa(RG5s%;0F&nuSaQ_U!_Cq-7E;6G?B;wcOeO`BN2`oO+<$QZ9L zE;b(8)+hC0l~b`NQJBc%J;Y=p!VK~;(D}_Eoa1Fdi;lhZ_1uTP^A?PXeK{-8EjXjC z=SFwMOGm4{fk02?0)u0*1kuYw66u1&^YaNmV6d#&G0E9Bu?EnB409;-z?06FE*LY_ SH~10oPgGD!pomZB^Zx>y&A<5o literal 0 HcmV?d00001 diff --git a/nginx/img/image4.png b/nginx/img/image4.png new file mode 100644 index 0000000000000000000000000000000000000000..5146895caacb41d417ec33e6884e08ebd894c57a GIT binary patch literal 17948 zcmZU)1yoeu_Xj!%h=PD10+IqM4N7-+cMph24c*NkNSAbX4<$J?3If7N&H&QF07G}@ z8~y(N>%Fz!S!-tQoqKYhU1xvxjnq(+$H%3>1pol}iV8AX005>o`nu}TL-coU^4T!@ z2g6NEUJ6h%LbZv$!LpWAl>`9l;_+_GvC;RBofQn-004sCzaNYNr}B>gfNY(jjHHgY z>Fxr~dy>g3z61WOTnS<=g$D(%74)MXNJ3%0* zA+3p}k4kwt;rF-`ODYI!0v3o8b+hvFTii`z-hHl5d;nR?yj6+lo*0VnvFDiA9??vnBn}RyKvY zm+5p?A~FkNR2bi7EWaPvs-$**v&Vjv2=ttmccttXGCOprT6F)?ydwr`H|rF7Jzh?? zP;PckBItB74z;tLT$gUttubTS_VrXM)eLFRtl1|tyKfA&@=v5IV~p95wcr$1RugVt z|1`?P2n`DK9XP)|+OQKJr>#8K8t^F-UeG+LURp1zwit1504uPS5Z+)=rwn$w?b zJ3I8+ww=;vT{}qx?cDcEfq@^Z=G5am+CHxoGHk%fY6?_^8#Wg!mSC3RT>%XpJV%}Z z;0dR!CCXY+_YBDCqR0J}Ntb#p`R~D^=~Vuj4wS{EpdS3Xhw0@@3DulH{R1Q?TlJZr z23Y*q?Y8ZLY87?2{6bty#`|r+@s>eTs+?JA?cCVyc4%m$FN`kJe;YuNom&cG6$aKu z$M-Fr$ild6&Gc%rol;0trLRhKui6I(7~Dv!$|hI#1@GD8AK{he<|Ntv`pR9QY!qx1 zZ8KwZc+&+D?e4l$JvrHjvB6U=ET|K%}s~6;x%q|mzB2oL*^0gXGdy{9|_ld${$$7WkUHprl zbN$KO-8h*7e#0ma4QhFJa|bae$l(^d26WW zDE87R95yZP;Av2r79#Ju7HFUH8?h|rXMBVgwYGa8#&5jm@UFe~v|vXU9AV5T+%;m7 za??Y9sMIvk7dY#LUt)6nt&C@5Y9?jt^fuMwqyxT2S z6z%9Y>Yf38?Y8vJ$GF;LKDDeQzvXjJZ}1Pls+>(%Gg#>_hGb4LO5kpECdlqa$u3FHO7o=1ZMKQ z;nu)xXi<9B+Jc`*;8*H)-;Rr)HcdwB=ZBHqn|Sy0=56z>2TR|wXz!%%Vi&zOKHpsb z3N35hlRh+pPv36LdAOf9EKSg^v@nS9DAWw3iQMl`gI&F;Zo0^xkvftM`*zr{SwfhWu^0#K+u>`mC);&YptwGvgma)Q?@URwD{2PV?hmv znvb)_vI^7|lLcg`heE5#8rGO}Q#)6rRaM6R1Xi3}NvF*Wai5#K5_=WA8osEn%r}=? z`?2om+pr zGKn)`Ek&{SBe0!x+*LI2iCdrn>%HmG(s3(Xez1GZ-)G@#O^Vbz@$L@CsOV85RJV`S z+9gid GVva36kIw^U?_CoH zl2=-78TJ}xT+wsEX_{LeC2d$MYyUYa_9;&|*Xy+79m*CcVQQM2?q%|ml9`325IGR9 zEh&kyhC*o@W>`#fdByO*=XNQ~d|Ilm|12LFV45O`*44d&mpmsOXNcCEg1O>+PT@*v zdi*W8+N9nY+^pSZp}E&xZJHF(ZEdG(S1S&cXFUwBErFcImYvIJ zf7$lo^yze{_~t${0Tl!1ULnZtA^4$uSol~qgWsS}r*R_dzJFb!+Vj+j(9Sun^EgFF zbA2}-RlfN2P7+w#sjEI5;xWA7qAY!MRR-2nw3Ur@r*pSDGdX(qYqr`DVNBKSFFX8kDtBK;ArfXm9~C)&O< z4c3IWT_^lTtv61yO%`R%mj87mM=vB6$w4C&bag78)>A~haXAB?fUq078ln*E*(Elx zks=c3n+q4?^cB*I&?V0N{jQs^DBS4Pp?~cGv8o2%zs6e1!vJvCJm^3t3 zePKi)nOzrLv!ISK5J#P44*B}^OR6k^LO1ZJ@vu`uVe_jlv^rZ0w5H>qA4z6)nXwtbMXN8am~vI_e+2 zUxkK+X(%|Cw}{h`kZ;@t0)kLOFj#qcak|ov>r_rWTs#Ev{Zm@moA@_qmtl?tao<52 zpWSRW?#e5(MGRD2wXV1s1*_QVP%3CcV4i&}yXUj$@* zkzs#UdEV8u{G=~q5ah&yihq4)Uq5`@XkuvGzkP&CVYkCT&jRr^s!%)mDYd;_>;yO- zgp6Z2d)wE|kP^_c^>&h{{&ABMNYUJU8Pf07fxk%V1UJ@H&D2uTV#URKtj!D1pzM*l z49Hr6U#D*731&w${wbdHlQK55D@(i|-2F>)M0V7Qc71qU;FF>>&NTb_aAtKL2V&V_ zWM)zyaXAPQ5AB;`s>*tr^|EHWPm>&QfzR)Be9gyFPa%GSQjK!$`SjPZ&TqCK z68V6q83T5U0!IkHWMx%G7}_qhd7S)`Rv!wrYB5$<(!#}#3MtRjFx8a2Za9OHa(M-Z z1T()D3}q8Ye;}~S!cx`9X=j$QZ=7?7v0D3fb$|CS4bme8?Z}&yw-tz%3mQE}HD}vc z!|8iN1{*%Uiqj{ycm`rqc(>^3=0fRjy!SKp9hCqE;_#mgR%qV-|4;K ziF{N*%k4RFAGoL@AOCzzH$({Du5Mb=q;mLJXP)bHr&qmVk~%c(Gn#(Ny!s7i*3|hc zi63}T5%L7~hRWxd01+>V4kw>taeYu5_G5M(bgvpoG`{PaLfcght94;wnR(fIum#-e zK1rJS1wET`uk&6CCW5NM-a!gV#pjTN#ww&G;18K@H-8ghc4nai<-RStk8&VQXhp== zSv>9Kf&vhv{w+U@Y*Lu3%1NT(8+mqNqBI&J< zOdq?}e098G2pc_5WQb@|h|r90-}Ir>wx+ z$45V#KY(|KgUmd8d&U)t@Hdd=bsd8Tt57(GY>83mOZhpb+Oep?@l@R${WWF+7R+$d z@^uzv@$S4Q&*bg{E@PFJJAf*3(Gi;uylR z#_R{Kc$NiPC|a`T@jz7{(D9XOvokUVGoj49cLSU^oJRL6<@M6N0&rwYDd6h7qy!JF z*Oa?_&~yWR!fQPcAClHuA8_osHCvRG32)nar=B<9xjUD!$bq2lm+%k@L9jY?ZfO`b zIm%YgHP+~uy>4()Ml)Fc_j+u|raDYZTXHBpBgR7QqA6>sEyd2ZACXpJtD~KHvHCId zXomsu3KCiFr^r#suBRO2z~nAS<*R~a=#&3=Zz9c%ezXXeiGzXW3w^#6a8Nm3{Gj{^ zztzHOjClxVS|C9}JBMpG`=x9%O{-9?g4u{klXGkDv{%2!GW|wd54+)fiRQrft=gr9 zZUG;^E9BZYThDgDh;Q}+yx?G)>1Q4gAFWG4=`(-ut*}9I=8^?qb?t*MX1yfF-5~bP zlM_4y8((T+QPJAT)#Nr}!sz`(Pyh1J5W{&W*5I1!=Wc(Z;+7O854;m>uOx2a>A~MQ z3GGOiG;wvKN^hVeGnX)Jv@|93k{ zKDaCK+ReJU;O1Gof1@iD4k^79RjE_8(!-RKPkK8?TTBYcZTqdxA#ljt}du~ zL@$L|+MxrbamAk#R(AH3Py&d{(IWF_#_1uDE47YOEf z;gV5xyqf)nASRapVlHAGWjsc6GjI!fjNqMb8YM4wHyME4l#n(gx3K?UMhlFS|IwZN zQMk|W$o@)?_{MdeL0Qf6*HzHh$2ERO%V2l|r-2ywI3xvyd1j9@+(qY=-#pkp*ulvjrQnNXhT~m zR!8R&7tSxvOXAj&WS{4zdQ5K2;s8unpp^X7lTT+@LOBA_^)+DV%|LstO%p=8CR$S1 zq4YcHf1IEg`FpPCG%3~ED-!~^aosj^Rjv7d1C)QFo@o2OUD^e1wjV0-W1?s7ehMD@=w) z21zTbOeS^Ae0&6{M+E7iyK3GB>6s6L+L%PxOjKJ3mgVodvT&ul#%d~KOVNf1-PWL` zbto$&v*RYIaepjO@UxG{A)mK#*^zn$#dJ?E$lAseaG?4*++1lzq6DhtlThIe&l%*ek;jmOYYlWmjirs&!SuWbXFD?%Yljp3j`Iredr@7zEh*_< zCYHj;MFAAU@1&4}!fhUwTSL@1aK zBdGp0mOwtIe8$S1$coYKxl3Fy#DbIW?bI(!GWkl0J-9yx%vf%DoSICY$7IYREhWWF z&t}5@cZbR;aief6ii^{ul%klnZAhsFT!UQI*C8c<$uvKf`2GdIN~)k>oV-8Bl_!!+ z=-re*&N}W7Cm{{v2#hrh=d;#8HI9(HSd^LkI|~G78LrxR>965Ni+xXB%*j4RtV6=A zpU*<7^oZUd8eeX&;bOSXc6s({7?{XRF9kAqY)$b>GL;RFvx+1v@fXSfCn~{Uh`(|e1ZNd^8&R0alVbLOG1?--t?eYA z#yYzsl{iPhC-`o$B{6Q5N{{!?GqZZ4GFCMce2G?pJ8F;ZbVx5kzd>AI|5N|!4u`e& zfG72uyQC&Y!0|TW$y}zTj>(olml%2g3E)7;!zUZ#@ipYmk3+*jWlZ)nt)Y4jrmxGs zyZN&`#R=Ow7~tCqCPLP{!`J2jTjNr6eaU~{#&k<>{N?JfwuHxW9eIL`D*2~2G&r9> zCmUZ`6Ni6vQE6~rtF5om1~F0~te;}zw9+U5s0{nScaJ1pDSg4;9{%jHO~B*fpehbK zp;d}>iPSMLQQ!htDH@9(ISq3r3kIyEgRVti4j2$6>m&Oh2E zijVrNh)hZxh2069C^xF`YGIBD<`vQxZTzgW_ub0bY_y#wZTi8%G$s`}yt4Vrle)sG zY>y}3*varJV$;z<_$T@-vovE`eDnZ4($>?tC6w<`xNq;s@X1L#oca1fQxJ3-)PPg| z`i}}&$*#~iw`(}e(>wg_1Hy*ibyG7p`kB%;gGSO{w8v^BB* zBq~0xB;xBMT;fv``aX9lm28v#?MA0@In%P)AMMJe{-;)zpU&TXvwgQc3`LLtByO#* zui4(LE;-!pdr^DJU{&1vi)hnazv^ey%;UZ;fBjyEa=;XyU2CT8a`KcP<3b+xITfLY zRZ?Him3g?C<<4`SZd4c<9aSKfBOBg7?kdf5Yt{R%?iHucaIi>dum5;<1jfa49Ld<#ym2} zF)FEO-P%r1R2t6IyR}OCu}uiP{>yISm*?}N;VESJ6tAMi563o-!Ix@kUN&Xal$Wr+ zH2i{T@k`F(t0PR~$f!EnXMO#BLTpH`l`Bn91^57oT&ZKpZD3FRc*R|gnSz5g)7HG1 zje0S9+y;K=l|1dyw=@9ma5D4R=k>KbQ;D)AEdt%DgFCJ)Y7bK@SZh0@YPyywc)hNg z_J8MUjUJdeA7J1AoR&>9QGuI+CA%U`b5B`rmlz1g##lKE0LlRTZpY76=Ztq4?Y}n+ z(B4t$(iDew6NQ-g(29GYj)4JrEV&!+0{5lZ)|@zS(l-p6LY!B;j$UT|;lUDytB#KL z7Q76~CbFyEU27;;Vp)O)Khz7p7eJb?YC3&*b_eHGkHv3?it0U(q-`HBUT@8oh4X&% z$Q&wqYebX|S#JdVkR>D@IrhzoLkHKKWlf}2b(aKDX9cAz9uqu5N@~-o6!_Y`KcbP4 zaRz33da23mz)zBr$+L8^v&GGtyiJvcCfvR|my92|_s1D#8ZYKT8$p*!QFgf!(+gZ- zG`?q=;ZARFN_4eYeOg^mq?c0DhfMx1Z!qQO?|+9N%D`qUY)r-Ac`zeT0MYIg>YepH z_a;tS0_SSL&1t+>deR>_zO3iF*=nqKEojlM%y_lg6?YvmwP&K})?eY1x1i!SWnTsq z)-^mPYMos@j#f=oH+$c`H-dfA0r9l*UAU6lbDNGQ0swBl4S#BdJ~Vx+p-KdFzQYC$ zi4P6IY>+j>u0pQ`WlgUz<9$0Ud#&JqKI(ZdbWLa<g`lPH{v-T?Z3@D-u%MPp69Zv->Bw=J&zRG)7o_%Xs^ zqc`D3PzR)k^P!Brdv=Ej)FPw<(HHHDS9dNB?{S&pD^TKI-U;I|iy6ij^7Bf8I z+xh{K;+jF^#7#GwLv+uVko^4N@Fr}&QROkeG0ty*Ra z$sMJAJ%BtkD;It+kCm|#RLU`$aAiL9R!EpPx4b2}yfH@Tl{|b!o}=XJd!h~&7KBme z&NrLZ>P*ia8-fKlc+Ls<*X5Z*gl8oC`AH@7WMpPmntuX%vavF zc^77q(%gI$Tq`*(CsE7o?&7qx7V2v5$KO-Y%!qdQXH1r+tDIr&KGjiKtJ{c&uy$soMjhYkb;SKB}Fq_uDCZPS2 zMr6KxG+}nph`*Pi%h@v6HG`oE8Vc%7W3q0FD=9VqPA?PTquC>kS>cyuK;+%`Q1wCP zW;2OCyM;$WZpMkSqwcXEEcuSuF-M)5M(nVe7 z=-a`LvaBDen2ZiP%WurF%a+o{pjkcR6q2r5!)ct7`O0a&si&@+^Q)H&t`T z1~z&eqr*nG0y*1=t1ylrpslm0=^C;1;a2l8Y!f*NGHuHUbB`?i zHJLOilBH6~T~rSHlQr4#-WSN-e?8LI+B8@!OfMcMf2~DQGR{=fuuECy5gV`D{P6{C zyJx$d_`7*)%7N<>~rn&aW%HYNZ7)|Hf$Hn$QO zHn%F}C%({;!40i*6jihMN_g$2Ci+#gYG^ex)So@*>6Ui`Mb; z51HE^(?o0BR+=q`;(^jQK-YIbfgO5Yec>C5QVv>=k|$an3|Wk?(Gf@*S7VS-?TOob zYJ|e>aPKFG!?mYt+nd)-Dy0hp*W=q0@R%E`Youo&bDC&_ zGi4`l6C}YXd3d_;kM)k^Cna@p< z70Inr6`V_BM2NKJaV-lAT^%zDDeguNPj#2*u}S);6_!*aazw-03;VO3QarB~PN7_E z4#~f9K({{hh~j%~JdK80abwS=c6FNUXu#W7v0SJO4fk|_@OP_R)%3dlE;Hi~TIcS&zvV$z;d4-x!ryIpDxHaCVYbl59_ zbwauKXa^6sS;kFO+V2mla2jB}hQ6k@nG97B9suD;Cj~obrcQ$Km~g zN#%DPg4mk0trg9!^k(UWopB)<@cbgx#dVAmEaY~+a(~8sFan0i24j^EkP%bSbBb!} z=*aka?Y;|eI5>s@Nu{NL@j=?=rybWe>-wWJM!{Y8zSwJW0}0b*o2yY@c@}7bS3R}- z#!5iBPv+*^oC`!~qk3n(dp*i~FAycQg8i*M(y>f23qL_FU8N)qtSJ09%hvLSCjv)!Tl zLC%(I_KVIsOdVzAy5b%)j3ve%+JuL~rPaU~)p5 zoapKMo@4sixZ72Rws_1K7hq1CI_=yU{F-O|Ie}wTTaIk=^{doq#<$gF1s=`6 zTQb`PDW>vTLWixUen_tXz8jrU3w2+;@Jz^OgHt1Z?+&cb?D7_J$E? zD({3ndBK)uX=OEmu!XOBK%{9EN0v|@E{BHLMVp4_dOgJ6kPHMh`wb0TZ>8sL+hf2K zTieel#bqB_oRvqS5Q5w@T%T{I)mvcG!I!giE+gYqzI)@=3#pmSEJ!D4$;)nuy$exc zuj${dN^;?Z)TMg6kUg!RMOUXgZq1p;@r5f=J~KQ$hsI%vT>DuA&xo_&hz$5~ZpT?S*n*&dY5jlN9LM}BcXektpt4kpwmMuebFE}@7Ecgd@# zmith&K2I`d`!q4!6S8x47Qy#4)cgfB)tOAxBH|Eh$;qikSk3RN+OiF|B}!IP%32== ze7jxB6g+Zg@24>tqABHTHstx}t*0&;fr(q})Zi?VL8vKIhyZZr{F9GZ7C3>{N)bav z_6{0MSu?Xad`oE3>S!4l$Z+1EWM>(ua%r3j-&*_l4@HjmEd*H)kl{({LXGs{%e(>_F8tkOP|dRI z;Rll%6q9q#rpXg7J+g058oI-Q2eq4tf4Z{r{NOfKkF+u}Yl)cT_LBAgMNYaZlIONcrSY3*E2F<4AF>UZd_G+uiAQc4ic7#AMk>f)A%HgY3X~rN z(tdqA;j;|V`Y2$eras%YRx#0=w)f@ik3nP^9Wekb$uyZ{Y zYcr_yRLjtONxQ$6HZ}wlJURGDgJ5IH&g8`}VyqPnpV}9dd)*rPkw_AjG1F{6Kab=hcWNKYrcH#{`d4QQ5Jb zr*b~sqyg;`?1%A%#O%KtmE3RGLy?Tb?YSOXQ!|$7D`qJp^KChNRfg)Yz*}w4Q#|e$ zj~N+94{xd{$QH8XX1acEN!+KuOiZ8%s6~EOJUjSkQ|C$^Bt;-n_al%XwHRNd?#3=Y ztK{>!?Rcq3xElz<-yz_&j64R1jrWCInq>Pqd*R{%TIC!^kOB?+Y9 zS-qVfV0?5_)G^#><2gB*HLPt@4x*2aTu5iWf6B3eK(oeg~V?D(ln0~x%u zgNMSB{D~Ana6+nLrLIA8wbe=JZ?fJesKm$qxtU@Ip-(IWY^!#&U)K@Fssok?1Q!{X zY)8FjnUMLE{#}NdZ~z)j(MZ|Yuu)P_$bZJ@YP%A0UpQV=n-nU41cSkf)`y=l2|kh8Nwm_LyFi9(%#IY`TuBE0dT#(i>CLXvAA%J4w`Vk8LgdON z@jk*v#3M;{T}F~wM>zv!a@~q^?zuBKQZc!H8%GpQ(2hIyYKTx=NYMUT*4!0}_n1*p zzd~>^>?Kh+OLhkgIOv*+u}C)k{^>RxQ*`O_1^zH(Y4??**)t7UPfsD=XVUL^u90Nq+meiHF_g{*IIY32FUK zDRB1q?KfO}T7*A?b0 zd>pB!|BGx~_JLKGcZyMrT~B^DJ7lF?+d9tFhpu<;-;;<+VPPpt00IsVQIPeM6-Q4D zQsrtKW`;YDonsurV&$5);ogz3TQx$9TlqN3ITn_G@!Iym*g!ofgRM7RuXvh=8`E5)lG zZEDAow7vMEKIj}y&--~-UICPNvxXk^d?xp+Yuls*RDJ>S=_pVI13=LMx&wBb@0=c; z7m>1=C@ckBi>9Qe3|_r=*>S&IOB)|6klsi$0~ZOptq=K{VPiiWj{%EvLa$E~FLg9l z*RyFjJ8oy}XX`wK9cKQx(^uooKVzzvrnv3izL`#9MT1^G8B;>KrfrP5Z!5ifOhl{) zn1Z_=@4eQm^Rhx(D2O$qTyRb}?=fW~R(uJx`aivVQ1#s1a+3ulw_cWVu`lt(=I8TX zo0FF9wG+nuKpF8ssDj!x>>#VQR4qqn@OY)=;G5r#ft`qooILY(c;E!p z_C!~igos$KQ`qBt?kD4ouTis4lQpJ>b2)d%roZ0s+ew!m_qLox7hKhwIen3j?H1pT zBB@wJKXK)9QBF`%2z_P-*ziCuy>4giYKY7?$%OnbA|Niw>A$l_#KC}oJD<}yL(Ywv zJja$3A)!>i7}A@)Zf(|!pgYJr24*%kmB|);6CE~6svDm_`@nQ!$WLxcc6M9YFYs1e ztI-BU;C{WzmQlg2fU9bBYx@`^{jd4HCwW2Hqr+a(Yqi7CU^vZBlkDS@&<)9uu1l@b1n$))2k; zgFfm9v0Us@PGs`(+F=DDEXaFAIC6mz|F{)U1J} zJ1$+3+hOWn)1wm`vyS8O42=2J70x0Uuy&cIspK}`#3q1Mz0}$_B|byxpW`9S??+pl z?oDgE6on21N_4*JCa=E6=@$uJN?m+9MAbuQ6EuDvy|c{ioBSxS|Mrp6-@pSwHG z@F}s2t0YX(N0l=r!f$2%h8iHaT1U-WnqORT%pnPa$pK$HcNQeg=?dJJ(uFGwwFjKY z;?}9lo*Pe(jX%r1hX~ZdrYlA?HjZvzEgH-#{moB14Y_G&CyZ&jY-8hSd$GWO#ew^n zpunLWI-Wo^4IHDOJ;d_8ppw(3^C z_pjBSg2$J$dr1~vW$w}X@%PCOKwf9AOlTQ(`>|Hfc1e29!3IUuuw}7z^i1C<2Wl3e z^S(L={!WQ6koLG;xs&Fw9*wh=``Lr@`aa*Z0|^OYE)7s!@4U3(Ki?#$+DvZuwk^{%KMFh8I&qU{J6#I#Nb}(uF%opX2nW`Fnf!qs*G$iJx#iTVm z28!@p@zVyrCX+zI3w`jmCR@{}_<&HWYaydL^VgQt!ct|pN1Fz@VDQZo^ceX<7mcB% zL_TfY2(O*KTceEfPo-%q#(YBkOX%u8gb+E`vYkk1OZl5hDA{ z?CdPJeTERM#^a5&DFpo`!B$$*Wtj~;E;hMUTzgXD)Wt3aWU)f}A|dJI?9EKrYcl@g zi`7TwxE;js#*CY_ogXbS=;X_yFJCmG9^vW#&B_3%b)!9077q4;#KaFQEX;+y@`Ug^ zhHK{Yk2OY^-^Ay`D$sBDpf|P$o&AI^K@0@iIYJ)w;Y>u3x0z_y=o{8wmyItHqA{|Dv*gi(6|S3E}l*Fn(R|9|bb zmOJO@bN}BGm(8s$D~tWV>e*d&ilofTSxAG*mHz(yJ4CKwuXeJqO4Cha8p!7<;IZ>N0iA4N zp$Yrf?AxgC>Av(p+-mtjaY|=~-$s>~sO)CJ)KNGc&tWg2&3ckFqQmu)B=d5agkncz z_Ya@%I*iaJ)l_BrFcCI))P2Y;mT$eM$KCYA{I9G7^24wmKAc#_4FAZQY#MmG%s5+T zoApG8e_nLNax-^P*`W_JEl;&Np0;@2F~p_=ax@}&6|kzxW174a?^U`yQt(8D4sD;& z1yLW9cbEUXn*-XUCz#fYQ(vweUjy2O;P1gRU7@O_zi!!?sxzy38k(t#BhvXm1oM*V zf8j)c0Dg1L+^gWE&b}do7GBo3ObXS8DRhViAcy4$B3Q#Ud`_p6Gi>Zf*Lb7l_#DWz z#V@lH?@yZ3*bkVls2fye0C@Mqbp~70)G)p&m{4E-ujz1gc;fL08_6BkpBUQ?>>=N8e8ke?%n=&pJXW~yUL z3dTxYoX>xfj-OCYdddgN7-w#tX0Ce59QSd}@nI9F-){2P-F>X%bS(O`;JSOh zYbq^p!tftQ2Kn0ihm*S7WYLf=p4C<6-DX!D&P~{dXgqPGQ4J4VaW3>1PSLB_Z8t8p zRqgHGk!@|*`x?%j+MTgp`LuCgM(nx$g`$H6;o3UvacuRZGFHb=g(%0$tx#!L*~ACl z;lk@KNsAA9FQlG1DP#Shpuy@byicq(YsI48Yx^aa{C9G%f^(tL zX>OHd)Z!4MyvA=EYI{e*HX}7tJpHY&x8^F`q4Ts|?g3R4|H;3E=-Tf-^#R~5eT4_D zQyBmBXa;fUXh@r;M^Tnw#=3n(GiMS?yrL#xFLkCvl`#5k@28=xse-=vYGMqVAdrJH z!%@B^=+J^iWAM}4nC=|jpr5~~$KxOH+5diDU0$AFZ48|_&%06A{hO)-;4#hc^BRIR zPE{OD=v(ZyM8;WJ!p1K<5`J@KtUN>7j%3k7C1AL<=XB%kD-G_b9IuHC>s&>2+^mF7I&4gMze5@W?HD%b>FA7|?apmptKXIB z{cqf65K3rhaInCG^=#GuRXUs761P2C9VDToR3?oMeSnF% z`3Z-{`H6OsT&z~*zfA!EviKY_?Ne5smV{SKR_ZhSZz(O@<~>+5o$=u^sGd(--#%gf z--7l|HpWAyYJipNJ8yaZrlg@Q1||QJKXlo+>9`L|cJ>%i|NZq1QQLi|)Y{q#8sT`qJKNOkR$9}#PN9qc-{Y9kjM*kTGN9jX zlk3YUbY9SSFg703L7ecOcXn1q9JTNp@G#kbRd)zz#Z(y8bBiyJQSf?8*hguEAS&C! zDPy+I0!QxnzhydeIW3BSmbyB3y-H7(GJ6F7(_8>CiT~S|PwXl_qCCF+Jae3YxglLQ zW@Yvo<`?j6$0S(e6SyU0R*`hLbI3&$@Tk`858qDJB6m+A-_2=foV1rXOXDZayUTA` zHfu2~{_$UsAo9ybzb&m%DdLk&H?vGHYK*Q)a=So~$N!F8$4*s2{omO%EJ|JnsbFtfP64&Ux0*y2e>Py#%gb~Y`+fn+$EUxLi zd|DW^q#0BX+T@uDv}j@osJ|6FCfO%D%@+D;q~wM={^6h5PGbAd68a-O(udMhRV-FN zl?%MT_ic=L6D8mrpdFgceA{u+FK)-NP!s-u@OA9nEKPaoNdxrNVe@)isdWGK8vY^q zo9%&Z?bJ*h5&Z(``7@pot)81!Wl_fh_=Dd%6gGHbRA&SUqMTOaT4G1EVwn$TX_6mt zPg$-Qad=b42;^V3je@l2np1*_x=97zw>^ndbm(Jn|4^>%WQ?Na{mUl^P1CT7Cy4`h z_FLbSa4HlrfMK<`L=@=KV}z|DQ-*Ioqy4~wLfy|s9xZiF)R31DbW*4-Od~U z2@GFP^unjnF3*!D8+=6}Fl)Q-TA3%EWF~}Pwbow{CM^Ozs-PIT{Ob||zA-L_R>YL7 zd^O{q-(f-=#CA(>$G|Ujjg*P=yx{5%>YpE*TH)cTp?EWLqf=yxmJsdE!)5OV;pMvp zgDJ*z9p-jG3N^RIlQ+qh<60C7NsQ`x)v~!>w94JGq7Nr!wU%%cix}ZHJ~%&+h%8v? z3HOe;3lI&u`*s`&j-59M5e|CiCd}{CWYb!D2j;YU3uSLx8gH}=w}yF8jp#p%L48*> zhOj(GHpfo8Rq@-MsuVW64wO8j_~*5Kqx6rdI7aJ9&I-5S)mBxA-R#Y~eN8z%we+HwN{f;@j%)N4zu3BJX_E(##&JzZEh7u4bK_jQ z>j&SMa`KosjcNZmQ!yYB6L3KZrZO^pL6_*aH52{5mChR`rr@lhi-CiSaM+8CnaJ2 zpWYnLq5YGg;~O#?yt!X_!2Grjl3OO66lz6lgQl~`2ABTz6+AQPCJxi1`R9#E$Mz^* z^b6Z2#F8dCEv3+GSG+uP=F*TFbu z-zO01?ir5;lc8hHm%2G-L1)$*lYk%u6G75ZCvS#mzhvjQ?yvP+H@7Q`7Qzr+tP}nX$e6Rf>E&%t%O|N{G8`>fv{C zwt2+~HLG`P-a%|qa^e$4vM~#{GURPQr_K1)wc1?M}xnyLL2E`YqL*D-R>%7|fvWXoDa0A)Vdbmzk}!1wgC%K?_(%b)3`ZDlU{ ztkp`UW_M!RSL{Zxm}+e4Cg&%4($Ee0W!G;ZB|Kx!?;X3%vda=h38ec|iIIW=+E=aQ z_TPWk_r&`+8uxx#qd=C2Al#R)wN028 zJ{8Z^;Si}g=Q3@yk$HRb?%GGkUtHui!L0XG_bD{oL*JW3rU`Yr_c=^bduIppeRiq; z-Fc?JzCva`3X6`JJ-*x62Vy|zoU0!Qav*Y2u zlf4$U_QA`o&febsq+xC_86a2=sv3Cosh7=Z0$7XWaZsnev5hjZa-+?V*v`IhH!ypQrebA%Kc6! z?B~3B+b;sH${UVmJq>nW@bO~(=kD(5_Ceq>_kzbqg)}QH?J%)qV@SiCVaKw$YK!M; zwN8WeTNQA(+VU*=jTfGWwS}-W>+)VWFD(9Umpt7b-VMHSNThBLq)D>C$X5HM{f*Vz z10uhGLkhT1-S@m-)rv{F!9|CX7T&oNvlBR*1OgMzcr-RPZe!C(PM*ROY$Gft=2lr* zxd|%kk+$T*g#gR7?HY5}&X#XqDXi|d0z6az?11+ii99K>w3sI&l^hYQ5OWg~-$pUpa!^u-SzB+Q)p<<61T zk4trZ3OoDymNhjoMQzKGl(nmgSO@9RUzkzQedW{B)0+17^OKU2aw}_@r5zm{m8xLRHMF%!PX)Hs+$=3ELHlZf>v|?R zYH4VA^wpeu*s1?D)AG>$WxlghW`J6sTENt*w+vX>1qB8Qii(MyvZ}2NwTV0~{qNqq z{a3F3K6*YlHZ=TuWNhg4`KNbrtv76F^ZoC(L-F(Xs`kZFk=BbVRslz5JPqqS^C4J+IB? zx&7(+zVv@}xj(##5N5pMUIw#OqDFsxCap?|oSK>$BmttGPd;WB2C&+Y?_i z;f?;kd-4DF>H+*ZqU;y?>v89ZJ6T-G@y GGywouls9ky literal 0 HcmV?d00001 diff --git a/nginx/img/image5.png b/nginx/img/image5.png new file mode 100644 index 0000000000000000000000000000000000000000..addc3eb1be2cc861486ce58227cc1188affd63f3 GIT binary patch literal 77666 zcmdqH1AAsq^B^2gY}?7iw#~`Jwr$_BolI=owry)B6Wca6^TYG}-*YzP z?mku3754p`I2<%KG!PIFoTP+^0uT`J5fBi_BqYS=8yK8aDj*=}ZgXMb?~=m8gx?)( zP0X!~fq*2!5|h6uDXyXiPj?t81h%Ef%6A%2PLLD=1@aK8*lF+=D1n%wC(I%8hxs(zu@!CcK){H1Dvzs zSg62Q0W8oYLKFdYZ%9g3%wPxV3rXnvWyp76Z?y3A@X*e8W#HA-b0cbi*yXni%X0U} zyRK|Jee4a8ZywUOopJY7NCIFW^6LU7aG(;E0b4FzBD}p}$ay0PKS&=;<1Nhm(fkay zsmR)t7EGVOOyHjQR;^S-pgQ_()7`5;348~tzI)^@3I9v3z|Q)5$45w4VymzL2_*c< zX{i^wm`hvEc_q$Pt=#ZoPb_ADuLK>MBgT97ud8la&58`QfG}8xU>Z`0RN7cC&x}Nr zA_GYcqXn>tN5d<_j9l2TY`v^Ceq;Z=ZM7+|n^s``GM?>`OQ>%c;H3s4(BIa;V0Qg# zQE0})RC@{)GGl=Y*^b|2{8zM4@4-8oL!F8&-Olb|7u9O+TBSX07%L-zg$|$o$~y zW`~_T2i-S6>H+KCv*FA>?f$zRzD-Ftk`59+$ZY@QP1Wu3tCvfPtL00%D-tj`f6m?j zMA1zYbYv;0b|~7w@<8uCNcs2?QV*n^(9{960cZo>E8Hu-E7~v-CZg7OlOG}ldj-&Q zf^*;s^hYG>5mvJI6w~C?qn4wryDHas*P75l27*_G1>aE<8WS|eu*QVPzOa_1Wnzm* zRX530N>$3ArTwIK_HS$D()6nG=<;ZN*1s!1re}r3M#p}~)`}{`R>mG?u`!1=S760s z$!Do&m1cP`*I57*1>GGG)`G4Ja*%WtQA^Yo*f)HwCPRfBr2 z`u2S=$0YaQCzBhO8-17}(Y!&62=WM189efk)aeSt_2vS#XSIC|70vaUK8@Onx{4-s zXN~?Px+Sb7xJkD3D)SWc^Lf(wvf|%$WWVaHZ>&zNJkJhYwp^&s(oS_` z+0(O_yxwl_k95zpPY3VY&n`I4I0LyVoXqUqcFfL394j0;wnXfq9W?eAPH%s%4ykW; z{C;YJStRQ-Zj??R$53TgO||Si@l8+FEc>O>tVx4Sou=H^wi#{z;HbOrz4n$LQXbN` z6FaP%)s&^4^}>@qsW*iSGOuDXxjPV zBxzj`G?%3nvnJabP{*)}&q3cP)!{a{y-s#Y#+@uAJ)hJ>%dD+ZQ{m%&dEH4JN?oV&+BN5G zygKGuj;z{Z5MGjqjI3p2tdHh4Q=Gv|8qMpx12j1SeN6I^6C<`>PeQrNW}|s$`t%7A?-__VEjGZY^%? z>NaibbEgZdqqJG)>$K^{`DM_m?C#!H`zMp#$*S|m^Iy#-8^^7a-EXJSk5eb@?ylnJ zwB0eSy0-#5f=|M4A&Wk0Z?iKyKOOVfa~{U>SHvHl-Mr}W#|eDS>D`3f72X#P&Ci&J zO^3huLvUqJd#ry5Jsa#AZ)Kj%xmHX1&PRXoM3* z;00vAc^kDH2Aqd<5~vgW;wSU=;9~k2ATW=D5xkbDf#(SG;}aFwsADGb!rno82gN(dCis7oYZ7xxD0Kr>GX|k z4UFmBtnL1w0P(nSeGaXSo%9LatgUPux!ib(|AOH99RGPuPfYk1h?6BRv6}36LSb76 zV?s7M208{}K4?NhLLLVr6D|c2v47A%|KlY#b8@odqNjItb)|Di9`jzjQ>59St4K?VQYQZ3zF+)i}LL7PBxDJsP(BJ{ht|nMmh%i{}Y;%xyk?lo2r9V&pJsm1LLJ5!_Hn&kPlzUV5y_{7&ReN@@b4tGFo>ZQLyt!U@on@qpJd$^ZfMfzMJj3r=0 z4r^rvK;VUYBNFT)zL1E(!~$TU0{9@rag=fy#6sF>O~j1+pc%Ry->Y(1g0#3${sI6( zdaOnsv365FGx0VryK*3@)Q|wKE3prM1QlI442fVIC&pA8|0q&>i~fi%N|IAt91~bT z>c)PxB|OG;EhI&s7NZ>zgc;(sf8nI2gl)7-lEYObg)~(TsKl20ud4-)5J#r( zsfG)JU{g~|s@t9TKz>O5gH7lI0?kb$gN;%ZRPP|8p&n_~fDEpU=ob?PBn>~@INpqu zrwpFyRVJW|9@66@x1&))lm=@NRi;6pXjw`tvbjSTYnXXEJWFZ;{%PG~$Pwb#T9-R= zs|SPt5jV_avCY@1&Xt!7P!UsvkWy+X`%lLu5cy5$oJ~OAxXtZKByUj&DkpOKWp2O? zKMxnJ=VGM%(G+Ak zNJLrgk*Vq)P6Q$%km$?Mt3flxTqvDYn8TusCE7V1B+yfSwW>FXzcYB*?{=+aR`g2!ybvEgTEgkze7KsmWqJJ z-0h7Cy4IY_uId*M9l3zRgyUMfGq%r0SIqLfPhTvy$5Xq9)Z$v!?z5YJC;x+3wCp4-9iQ9q{ zN#(H)hC=j@u$~ZE0VDWo!T3va*1cu^cHSrFmvEXHr^AH`CS;KfzR-=2l@L#irJd=t zMTSn}rw(bdxXLgV}>?y=z-C^5)jGa13$Jdra z#TIks4!%}I5|uA`{u?qAC-O)J>ZIS^I*~#yLWqgU@kgj zPTK>ftn;*VdA5=*?egTTZ(Q&CUw%5#F;I%(s-e8qmng;41{8qNWph_H8AqkDsp3>0N%RJs&otqAYd-RKW!8h8 zX*B;(wZFbqr_t<$KpBqqrUtD{VJMp69m3oM^VqIFYzwa{|Vf`dHV-W9dEYX%;NNdK^2-!py@)S~r( zWqWz~%nLS%)l+y+Q8Q%8)8R?*MU^h3v_IxhJB}Zy#w|m$5s~`UFxONY{Cp7(>E)J4 zp_L|c%>n%CxjTB)-W|#-Sf)81ErhAWIeqiEIj!5=Qi85d`bU2)VAm{dVd@mbw4_>>Zu}GG(Bq zS`A`3%PS%#N*w;dkw8z_%p~~?l3olqXd()>Q8ZQdj(BU?(_EoAfObVQR|VWHX}DEL z(ihI608KOb`S$>?pZe_*I7^3<_S8~<^_C_fWGbbieLXfbQ9weE^6hx6cf zlm2NT#so`}kwaF$@tN?U_3ZA!G(waHycf8O))}FJTzAaoEnxgL1kmH<5pmCOau8#2 zft9}1VtbOBYI4K-SMclb?ycp?G`GYRfrBNTE%}4Xf*=_{qtkhZlN=Zy9SAY+ifT2m zxJ?UF06f)=_rkc{=miN8pZt0_Zusn^Pqgo)>?l2I zLXvLkk0A;&GD1#Hd3CLpZ&Hz}>z2pFF>y-?dOw80)-^$h6s|CAhKLTRPP5Lb+Su%7%sQT;TdSdVdL1G_PVJ$ zY@Te*^_g^ykJ7!6Euj$PIy&;c8qhxNraGmvaHD7=`MJt$?jAW_Gn(Z_XsU{12rauZ zZD6!%pCn-~(p1MyeGrM}qs222Urs@lyi^@TD|*uRmTSJ$y4fO<5(_Wb9>Y8K`tD7Y z{}fnc+2T6k3=dg#wtt0?$ z&3F#}v?El2@pJXM%W{!$n%;j6|Jr_Mm$a*3po^I5GV~=*-_39lXB}Q$ai*m);cAp= z`*yj-oe!w`3_Hgi4kpxb@#|qKz6XM2x(vM;AiKi=arVA59Hm;*=j58lBb<`hwj z-uz}vEzuwF#B;d~PFo&)cQ5V?cEs&B2kis<(xW8^z#n3#Y6IB5J@ zU)ja}rmiJz2jCVcw}W?4yuwuF&bJcPa3D%m5BGqvB_8Ltx@tOEs>4BCw>f_=zMzCn zwi;Tu>}|0>ujB^XC{D6!YlZ{Jj0*2Vkp^^2?tbL*N>bnqq3WwxBKL`T)~y|5%%xDf~CeNAyERxxBPUD{kku^fn1IRuKGeIGzBxdvsoeU#>tb z`=4wHHC_OpM0Q7NkW^yz-wY}N*{?$^t-|SRE_v;zUWk8^zi@Hip@N9v2#0@DMoMN7 zqk?f*R%MZYqkT89YbV$Ff!b~0g0+9qq#{1a)1Kx^`~8y=0wK9QfR(hr{Puw;0RCgl zKlB^HuHEM7v-p+MXZ z{-x$8sTm$%rnxjzDdc}8F$)C3GLO7CGO@hW*qZBLDKnCK3?SAiAPxIhcc~Zw3kxcj(-ps+;h3HGx0lecFhMJ;ijKb9TPIR7vP7Ld zsvl92kvZk%)G@U+HNJ_7Xj3(zV4jW`?fX%J!w|~)rbP(aUMMR{RWbM3vcqXG`V#b7B4Lgr+vobj6-bBQ zH^BE~Z*%f(q1(&gW}R=XPTOvRo0)B6*V3Ze+B7m^;E%msQ{zW)R?@jwZr}789t)6Z z;O_LTw6S!&H}qZtI&>Qna(Ew$G(kC1j{9f&u(G^-2DT2&-GjyqjojR=u#Z#C1grN| zTWCfr^&xaJGy=D}8absw53v%(8;jl;U(7-^cyCGr^Zr^W#$tLqLs52ic0Dvazv6 z@<3kl3D3sZEAE}+9vb7DMgJ;MBH$Y2>-1`^Iuxv_2YrqUmN@K9dQ#P);@$GIdjz7bv@ftQ1zWqp48X> z49%)WF9OYFb!sZwyrNyR`50rR%?Em|WpE0f7*pey5LhZx*(PAj%AL-LahRd@1?J*R}So= zoxOaZj5Sw0*4MS%_;Q2Qa$&XBJH`S7loTv7B04J!mGf7uGd|~C8K!_FYhIR8{jhvC z(93=Vl9{G9;4Ffypy^@Tft{I5wN_L3HUQnOT;G+hPft}1i<#~}HLW&&9i~)RdwY8cX=z~xhq|?L@B33M5D<{v_1pPkxxF@M zF4xl)q@<*zL5pgp`aXm1N{Y%0wnXjt-2+c!&pGge@e4nafZwmRjPpqL>G|4ma2q&N zb#LRZV+`bBEh9m@$ivG zdxLrg^U+q?N?h%C@$B=7%htosHjpYijOFu!WBBwIIOmnt%M~yO%>~Wrl^KYpl5>h+^5Sk~9p||S4_K4KaruCY^=sMuq zlqqVY9pq9yN75k}9CLL{b=ev`t+ym2_pS;QV`}8ap{^sOU|+{+H7lK&i8eoTZlfG3B-FWUKHaOeaCx)6;?70@;v>WvnQ3C~q(wRztKpWNpP zUrKTTsBYsCks&MX2Xv$z`O6EY$XypkA$_RHT`Lj#vKoe`KR{dX?y*NDtFKOz9ppF;F_BzwLL#3AOHo?zB@zq# zBw2&n)}Ea4myRE*p_Z{kj{#*a((8{W4XsSqADS9>v-==kinahlDIm6cN=|Vk0^g_o znNyp~W(0*{f309(l86;!e?6dRQ_>(`tWCWliBH5(em=&xUPE7TPBS=PWz!eTeT9hQ znQt2-HB-J9@_xRLShz8mboc%wXJ=T;@%|=r>NeQkc-F4x<|^JAmlzyEqA-M~i)W){ zT_^sv!RkyufAIHfBxInd39ng7OTVpzv=YmRAmc&QH){Z2B{gnCA>?Z(1)y8a*I9aK z`=+p&(BU*v*XIznK7;Hq`cE8jIRy#%dnA1G?5wf{Q0}Ovh6$#wTBQ{?j?`B3@&00q z%VD=!xeFbH!){ZNkXzQyR2PaN%EBp{aIdn8`J?Zgc=IQ#mLe`NJ7OQNmbw%OGBX$` zX>cnUf#ry@-1d?C;c_{K$6a>R&1gpm(G^S6DV(27K?M26YZ!qii^v_e4ra$CLS%&v ztWlue1-y?$rPpj@EtyE2+Nr zJNp}aFjJs?KCjt9KZFI#)*Mv=gv0Oxw+2HLx*}*^qE?WI{-A7+{OKPj63bP-z!B&< z?VIE`J#z{~^u$X$^Uw9XT1W&wvpdWuy$Z2q-%P5g>TCx~W?a#|t%ir&3uiBN@6duH zHKSfiHA>dX*wZ+S=%`1ge-P3vw%Kj@18~*V$`;#QZM8bw zkYv+XdK11X&g2M!!s4*Ol88md#;_+Bz>8vedU_5PI=H7W*1t8jlOrV`+zKvdf7^^2fyhKZ@4wDU z)oCEqE+|ImWuq9MtBb7FDp_+YhC=x&0x`or5;EmcGla z)s{0m)&&@0$txTl;JzBPm#L?W8~3yzGW(a!o5^~Ha}tRI&v$Bz~7&xBV>U-e4f=1h%2bT@1X3DxLo( z*WWN*n=z>*TCU4%L^qq$iv#?d0{i(M5LYigxGDK(~1!Ap{L5auUCt{!&eT8-Mb_h%^ z1ialXt2J3+xj0bNv`YYe74htOmVsXOHXc6yk%UyNMk%v{n@sC?@~e z?79V!P4qrt@Op3S^e!FIqGvr!Rbn;34OOrO-~yDay(BItyI{Nn*LGB(kEz=GVLc!> z;zGm|uCf(Y- z&kv=V=^90JH=~X=l~s{$uSEFYXn0Lis@oS(&c;lFRVpZrQv z=d`JPfKfemGH34~uAQFelQCCQ47r5>ON?i#R9W!YXPGY)v0pOfNo#aOkAxKe#t0EA%pe1K3m95%h54d&PE35g8_&w_$4UgnpV=;fHhe^7}N_@|;ds3)o2pU;UdZhFejwCIAq9)jteK z1rTH(W%^7^UXcWm{kxyt^XCgb^ly4m9v>DMPk%L_&WAYl4g6L|fVVHMIs1;up2uZ& zD-DFKs1TdyFrb^_hYgSrz;?vtjvl%UiCbQ|I#B?-^oYXo3M!0W%S}uO9T=D(`N~OK z|FW_2#jE|g%99W0Wp_S63A-^5qB4B(`=D?0*F6xG zDNf&5Bfk4=T>m$i-LhluLOS*#?3cE2FoRyr(dJ{Q<*S}bdEtT z{=+Ayr!@RZow}lJcHZx=oM~*<;n_a#Sk1N@Dza2>ma>)c`)O3mfu%Y)3m<;qCPvlq zDzb{5QxmE)3QSm@?p9nk49in@LzSlL(}!f#VfMmlMv zoF!f7u-JxH85DhL(QsOLsg{2=F|FKW=BJj+@BeC5x|`}iXSD2wJ7rDAYTsct8C+Hq zp3aLqIttk*AP|%ogBZ_7&cJ&R!e_+yI6-}WXT<+_fcd_m44+!a$-`RT>jRF zGaS6kF5{melb z_2M$2CIn>|w*F`u?F&rBcJ{SCe&Q_fN&I(cKAwSN4|sTU)tJkvaW`v-ycn zFzuAlQv~;1=IaXjZ`IBxx_0+V_B7ZVC_2j4dNedob8`WbPvIrM1L;-Mcrf8w7Loj$ z9Qmy{T!B7QN5Aq;&Rb_V{hgo4B=4?Z#Ys+r?#jjUGdLu{?Ki2*zBYUBn6st0)v~N+ zy`{s*>&jhU>iI50pXv7W2TssWF#F2>!OsARsU2k3XZYe;uDzsW>OZs?S~inc}~Np6CTh(87G$i5sH zVo^ahM+3%rmaKFs7qaxfC7nmGK-mmb!5Y;daQ)FFhO3k6?)M+R*hSwz9U+(^P*kY= zD59yao^)JcD;RuffSh~MPMOQWrTf7DWdmM&uifJ77}UXbo37|=#Pz3epAqM0{ihhr z`|VD(LZ_1}#19?z<_DQ{xKR%H9ypeAnbPQNbd`3y#jY_0XCS(ruvi-qN5Ve^CIWK5 zQpI8+=gQB{(O%H~i#IxlfWXc?@hI#>lJ3o1*OR5n88R(S=*~entfOXManZl)H=A#y z-@5?rmy$Z12`K9{DrtZb6+;k1KjS6h3YmaaG1eS}4*x1lp z;9rf=MkJEa%*#Ulu0oAP3Jgc%Inq=kQ=zljQrU3$yaS?%6-rTsTwT?{ndXc|(~kc- zUO&?n62gigbe9g~p(3=cfiRTN$VjC%bPx0-4=CmV<$$Ipw&TU}kjO~b#Y2U5auRI| zGf9TOh3Sw6$p&0YMw6-aQKto|Z-~NCt5keHXQfTBcW~(28&9s)>ji-vYNG+cI;zW& zasJyK0;wpF(9l9oPEOGt%axj{1!20HO;){+S38cMm-}`8?d_h?EpuH&B-%d%CHem0 zgaYD!uvVeY{G{2Tgodc|^tHmd%k!biqT%&}jtJzkSX|>&zJ}}?o?zlvwv5ZG&W$>yu;L8|K zIEQ;`-p}&x##v!oc6X2t6;NJu54ie0+SIkqtt^`kc!8 z(q(~ArT|kK(KsgF?w#{VHc1ZR$McIeMRg#aSp{ z5XN481;DK;;aP_UTE=B~8m7fd6XsfLB7?I~QyZA7?yh9XiEMc>a6l#7{8z-;0Tzf? zGqAm#&Xb#Aa5B=NAkAO&h@IT^jlc{}<1*C;!5qMr!$87t;})ch2V4JBQO#q@q@Epv zAzv9rhQ~0PNIGUm#|<{mf68!jxpK?EBIBthu3jSSTrGp&`_el4%9Q46^*Y`S^9q{& zJfmkj_fFr^szf0MR&I%2yoX}a&pE<=SC(#Pi~sR#gRjtw!@ z8aYAs!30K&6WnFl$hbGa+~Mtl*{`UY^KdxnR$8-Tj@0tFEYfhD8L2pX#EFmSYlNG< zgt5VA5qAFFf*o}hYCHykpI@#6z)q3&Y^(#25#bKQ^s*R z)jDd#@W$^k;S@?eD-|@wsY2ko?=%)BA;9fQ$7AvI_`~9hfhW7nR64}$G&f%I`j_8G z$+8CruwBe<^L>(LhDa{CJBMbYA5l6&34%HLfyf_}I7j zIMz=f%^tFQyWd!5uu#U&*xStYPyna5_Y*uGqLt)y%((;Es)Q8LQdLKI{-`@w4vzUy zvqk^#RkFm%2&)OqH0`P-ew^VWoYw^RcNkKl(lL5NEZ9!pljyLYT0)uLTuoOh=x7ToT#sQqn{RE2i`$b8 zlVNn4rhZCz8E7G#uuMA{*15{v8#RTFNrFT2+``SG^tp*gvfG0?est@L#R;;&huhRy zrTQg6Wn})G;ewUkB$_v0fMmC**m&JaEj5^!{l=hIPB(Pk77>cEe5D#=G;#9t3w1ys zyg9GiqX+SQhei6F-Q9$?qot57U+GtM7^nW!iZKs>S^lUVtY<9ep*j@7H1FGj}ysjWD`8^p{hj1 znJH0OIlm@Q3ng};+wtYG5K!|4=?;6FKnOMs3)UQoKcDHIkZ(DskxpxjG}`IGank#F zrq-I6Sn9bRF#HWwMThYFlsnPe56Z-mx?E_J)R=<5dXTy{WQ0R5J6BwF8KJ5CCEYz! zj_j)!2e9yp%eYt2Mif@#zv z{mxw&SRIApYsW9sZ6VQVyMgqL)>n#Yv3Yreq_4G{RBm|A`!ePjV7bW)8_?LSe|IFala?uOKX|#nZJW|I3_Ra`9|RneB-$;~ zuma(-M0MLxsc%awxwqRZHP68RQ3%z}jAqxwqoUCPS7^-JX%yU1AT`vW+zTh`H-7LzFIDR+- znRsvtt@JB;D;>vZhlPcD#!t79uZrJCM@#iR6-wJ#2;rqb|Gs&pTsA^KmsGF1QVZIL zMbZ?@A5A$6-QpnaZMIk4k1o0cXD)#xzqB|GPiD6z3MWC*e9jA5WJ(UZ@i zzXGgnX-qqG5dS;p)*6k;A&c3+$-vsp6R<=)o?@xmpR;Ad(Xmfxa08%$oi+6qJ0KdK z(SPFt?B|t=e!$iu&~Hf!+IuDCsd-4k?{iiKo6&*Ob=VFEtjtsvrXM1pFj zfznXG^i-esQn=n{+hYsOeJkZs@ruwQ2I4c1@#cMT41XZu5}|{Qmn{Q3Vk%leUfwK8iL3{ zBy5u+>VXc>;s8>P%-)&;ze%VeT8=7jpD5iRUuV%}-vWAIlN z1LoroG~eoUC(Zp^l;ZckK-f}#Gldh<0hnVl2juNEp6iRVCVPOHuPq#+MAP>1;6x1>~Aj=`qPYr%1BMK%}WLN0ACz`gDiSkTLD2R%VEGPfpT!d*;e zW^V#@Rbfs)b_jUraxip<3)$90fH^Q?^YWxYUZ*z#?kJq~Xg{1pDK|>_HTZr8<2}&p zjq~x|o}WOprY<~)R8Q@%bi2XfQ;VS}k&eT2<}NYZqy=%Fk*6AaNvk%ixankIb=em ziYrl*xHUV9)=E=UOk)u-BM+i$RykHXC1tk0V&wAzEY5*BscXTA)?{)W}d*^mgV?YBIcA{*s320!Nx@O#{W+JGBlgsHcwSF?@+= z+B0HiypDWrR~|p_(!%hPvp1Escnoy;2JZ}UY9CBMkiS{?@r_3xDk#g7OH0Oa{&cz# z*$kd^BjiD;(p%6#5-P;tTMz9WKja}yQKut9Fr~j4!33#h9EBtbpz=x2C zNYMUe$yDFxu+90Ts}VN{D3{y&YI`tT^NCtAk$tdpbEiv&!^+AE^WvKxaPri(R~0J~ z^6InA{lvjTh)fwGMU;UlMwAh)#ZM*@JlY~ltI0ACCj%I|VoC>wr2B-kr>U65YP~6^ zMyHf8YuP3JbI~O7-B>=;kDFTKH&=4w133h}`L(h-NmIo=`ya8ttsK`)(Z<; zskUg+zYS7aeS9{7 z{pJyGy!(S<}23*AXN$LUPDsx7ma1T+-fp?gQV2*EZI?s5F8;WxV{m@>}@> z6&;*qnwTMn9zjJRDF|QR$%48{q6bAEj>&PL?GAm<@xT! z9kwBMsoqphs|$eTe7t~UBaK^8QBh+)Uqp;`=uh<(z)+JjN1&Lt%Vy&4+LuSc#KH0o zJN}LhZ0ZsCl)|TP0rO|00Q&)hLgajwpjR3#F`@|$s%5%d5jwcl&!5H~p^3K=C&B=$ zHs1QThqG!mdVa57=udk{_bFXYN615wSn;~(koA*6chkYa!Pk5BeJ_lk_sG6f%4Io{ z@#JQ|+ZxxXr&I-yP)gd{Lvtwq?W*ycBNq7myHGS~_uqaRN-~gzTumuGNt!>A^`DE> zW-XKN@0_dns`pZ5Mj5#LCsuYP2;f2RM`cGi=CJ_|2o5_|tP&V2R}APM?O6$R=H_R^lz*qjipg?_)`nlTWT=^Gq0tbH`NPcoE3dSy*9MUNaLcuy-4 z|C&hm7o$)5lu&>aF^zFx9dECh(k$ntUuu|n@G=5k5ASL%AGmb5tG=MF3bA%>JX%zb z`sFpIhLRxCLYuwXEto|n4^Zea=`SvQ{2j5AJW>kuiGP<`fQfsc64K(E0>7H>QbMoM zu~HzuayM^krZW#u?!m=SV<+^xslWDBs>0z5jUZvf?-)Oqp%VTZ>3?~_d$QmGw4djD@%SQMVl|m$Xgd>k?4T^4Pk5_&*;m~ z*18=u6=#MCg_4@v43Ga$&i|z8(PxN==7ewAWdnzyxP!aqkVLbN7jZL;&^5{U9!bWh z>5Ys)qO&!aiK52Sz-JW&r+gf@HTt{<`B=bNW5XETF>0(;NW{^y1BLwt!0ZLw+|DrH ze80J7fz5ElN_{CBMQpIbe6Cs?NSM%YAwr6~({Ye2C|MCj?!4l-V-I)1z-y4f;&O&5^dV1GkVE&2= z)eYI6)SzOu-bz>D?*dLU*X{_iZ;?V;mjLfwkoG~!Gk-EjUeI%kW zPJ+%*4s+QC(~&wQ!@SI(pwdcLSYegD>dufy?*6FFs&K)@^<=QHw40}^UmU*$8b`$! zZ#|Zz*<}L62Bmj{jl1ZnVAsP6cI#8r`r)IzZ>O2K+yigC;c3k*ElmkDG!V=AmOs}h zYHIjRcVs_RKNLrY4}LI9ITSYxO3G?Wj(qX-l{s@_2#z^e^z^7ze4M?zlI;_?icZ)l zlbtySXA!!EENA%~IibtAz)G`bH01wc?;Ydw>Y{Ja#XP+cp~8cGB2( z(%5!#pSExR=iYOF=kxt?KW69IT6^ue=9pv5v6G-bmUpWaJ!s$w(xQpRwe)Pv;H83( zFOQg^*R}2vu>CH+byzBK2hnRrR&l@9I68>S+Gv+iiB>$Lpa2+lxs^}Km0ApDFsZneRBya}3`*195^TvI8W=lJul(e_%y(wZPs~Eg1|>XJRTy6j}?w zNHEZ4_<(Ir?{4W0Z$_1A!OILGd^dSy)r|h?sTUA|`X{VhMDdqknPIXH_~I*nY2Bkx z^k|5mupIEtw8q>baSfnsevKy(&2kuMhoMI#K=b`@TN`W!aw@JxBkqu1%9mV%7eUey{>a`T(E5<|lgzQ6K z$hW8zyGNkB{O`7xL(0`-uN{+0YWEdCJ3-LjUqGknFZ5p^9V`!5L2j&J5U|`YO_vdC zFebJ`ui5#qfK;+_qN2%RTNH}-r$3!1Rw%ZQTDD+!NVY}DtP)R~%|JFEm#9CjH5BZO zOnPHhD`6P8tcw5|@*m5@nD(8{z9$L@2D8}2SCQ*amNinssZ45$B`S~WWu8Ynr3+5m zT~jopsUq~92$k6tKObOf_Mxwfy7bj`Ef6x~6Cx=4S5Hx-v?=;e0g?P4Y79ZCPLEh^ z%CZ7n7_2;CEAYh%>mfeYRfz}?GsVfSyK9hemi6}Eb3J}9BHdg>^6sK(A2}Wf$6(>R z>2_a4rxR0s4RE4!JU9I=r}nz)?ZmELsE`KfGsE`LB66&@AUAD(p1wgAw#h$IwV+<3oOE z>`g6&dsMboVm5g5B_WhU-;oJ~-F!Rgj_In`ah3vWnUe=)7h^iBjJ;XnrjT zh#kYHZ;l5(<-LJEpkvr@njVR^(J!+Bn#amwNh2H)53P))9U97Qf*9sjy&BdUVsNLd z0Rs`+38(A>vUiJhGdK5gz2MK9?ur1JkQWQ?czoaY3B$*736Jb!IzfbB@EK*{aI*_O z;H>Gh+{M=W$)~Yfd(h2A&YR*ng0@F^GP~0ACUAZ<<>Z+6KZT49<4>!f?zl@y?$7Z8 z91N%$&BHgwduu*)ja96{2|zjv_9D^e!)l*W(9^~`B7e;(UXK6V6C0bZu~qce|5vTR z#u;@nru<#5xXJ>(Mr2Ij4gC7@Bm*3QFg5oF6OEc$K^kQO~rkB^GYEErFQ`P$&IeOw^@P?&xNsTG*?3b8qdQC`l`YF^TJEZ41~&*mrPz%U6%;m~~5Ed2-uLXN5rIwMW%H{qpIpl3GD3 z-A2}02`X`ZA^$5W!FXqlH3=QWh9FA32o+RDhXB*P==1hBu7P;SzA_Z%DYH4W+YQf8 z@z^Pp<6X_|a3eJo!jQW|WNJFQu-jR=84V)aqv&7hw~CO`6+Wsyd9F*lsvi2~_Oa)y zd`D89IwtcryJSPKpc>DU`t!rHywixg+s#0iNevakuk|l($YR`sAG~*j+h@-O_D-ZUoJU6?X;fc{ zg398#L0;Tz|EwD7{BlM~QPr79LdD6|mr8(kHkOlr0M%8AzVtD~=c?I_*%l>b)f@_J zOULiDt@(eeR5XUjcYgD!_pFEGI@jq=@^U|1UzFKk2KJJ>J+_Q`3t!x-(XS_N%Jb}9 zdOlNsBxO)o79zZ$6n6{tQRmq*lS|N=KSEH>**q|rwz`p(R%V>?7q2Pg!d8MDe3F_T z(FQha=9>sq7A1KQY`t@HQxjysA6m+(b+`wJlfGfxof#m$N*^v2{e2G~KqZ&OZ@|-< zdQ$wJA3gd_R5K^YLmL=JtsC4lBCrjk?sTFCkHd*Vq-2ByfAMIx;+4GSPE5QesRYg& ztze^wuIjCaY^%EOL+O8;iGAe+o(=_5Wwpjf)(#}0BZV8DMzC|eH%YN?Wg?5d+a|eI z>#3#`^)e5Nbm$sbc*#1P<{pig=?dQa&S@|gL|BMXMv=$uP{mC`BDA-~ykJE2))QDr z4ThCBj{q}8a%)n5afjlp!rlP`Zr>G0{619W6n4 z3ArYNnI#H^7r=ewvEG7P89v?LYvOIXs5Z}}AF{$^LX2Hou1%Y{X7?JUJuF=8bhN11 z+mhsdLz=(0L}tlk8A+>@YQ&I|l1VJxIty~G8VeyH)Y;ScBa7gGNbgWz+AQbz&17%U zt}iAQ{|lD|wlnAe$=f*3EAyQTw;2z#mlpH|A+iRW=*fy)wfVU&mRveFO6Fcg+%BDSltKVKn(47 zxZ|CNa2|;^u}h60%8+-8UBOQv*nNfVq?Vnef>$-ZdH5f-6IJ4&E6Z7DP|B)kmn3kQ~eUIaVcs5ik@leX*$pK z_pYCieoFBd<}=w4543{;4O@*}SAM#&XJveSC0D&)g#3bX*7Qm8uh8Iw2l$sn@`6d_ zZWKXP;O@{&oSglCnu2_C{?2u=52SA(|7{TZjirU&eu>-sJ;~!CR7~vqA)mhae>}2h zF`!Gur#Kt;NaiotCg1@yr4YP{NyGi^Tk%6k><+dl_+M=H$D+A6VzwlBrOyS}qQu8Y zlmA@ANFmWT=CoMUzbB#K^g~z_x8Ud=twP|OucPxE%Fnx@c*%(KSn8lhKWp#*0^-(C4NIG)cDqb6md&|ZXf|ro{;IC;>HrYa~rr%fHFn5h|*E%n) zM9|CH|6eRJ2b+hDjM*H=*wHLv)IJ%*w#FB>Z5$CzulUT$Vkv;H$$imdo`z5-&Nm{a z*n4`>FPMTFds++owBBOkbT!LNSip-iqAx4(4AZlLHBNB#>CH&dU(wPXKV!sIPQ^|9 zS%8Tz=^ztIW5MgUm_P7mJ|l}K3{jUK>ps%0l=g5ML8`OCdM%n8jD(uFzMV1z6;<+I zOs8Lct@f$KQ04MuVAJr9blA2F@o)z1`V(X zygou4H=E}ZzUJwsjCGRerRSukz7CtR|HYN33B zx0~~yq)`1UiHlQ?&o+nO`e2{YtuZ-$kg4$0f@piN)`)n6#t$+s2kNbh4Jm?_nmNJW zIKiWWKYIKq(3(^>Xz{)~uj2?+A*TA*&K!#Ot8#RA<~;P5jQm27Nc4QksVHNGb-Y!W zsNf26D))^E?oqR%qTxY7dXxJ*p)Y~};q}OKrBKI)J1Htg|NK$OmC7h&>5A4k=&olc z^nA*|(`M5_W&6t+a_{apq=#Fbv3u{R3$EM2YyspuWHoMUJdW?z@$`hmlwenKlX~t3 zJqB_;d)be?3kRBv7rik3VqjZ7_)Uz~-MDLU42ElJVX<|242B;D{YCw|Pfx6vn&B=y z78qVw>)FuK2vAh{GP>d1{QbT!AYF} zO6GIj%ea!_qACVUVoVM7K2;SM_oVr$_w+8trey;fRr{oiq6{6xe}IUU8Ue=I0?7rn zs|s1~b*98ry9aUwJnHhz7@ITTVxaQ{`6n_;OtAqFIfTQxOPJm-dAx~z-0=V5V6PuD z1km4*r}c4`)XEA>HTpKx0}hK-Lr%S>eys46XVgJNqcAm3M-3Q!eBzdp5(}CUHF1_I zx~x1Gbtgt8`^Nuc_ln25BedrR2ckyTmt;cPH1IqeI2U#J%^>$hljvJ+!>tT*49o1Gr_{_f{GRG1sp*D6wFutWJHX|);uAF55Q1uIyIcsrnNjNy6 z=^!eoV@7z@F$RM&ZLO~y47>1VYbazQ{%)_WMAk;n+agfP(H>-{i}Suh37<158Sy#X zck4c+$HFrZSQne1ZHK09Wyi*0YH8=rqZL+0vp#zk9~P92d*kZj!%(6%T|RL-2#u5S z!O^xtom?vy8^}py5d{6i*=%R0wyl?Ohi3y4a@}P z8v5hfy-*YYS|}w)3i-7@kSd0%Jp``T8I6AtT=}UB4Fjp!gjf^*-4EV6lJRZx5cuRj z0x^Wb%vlSomq&=h0_G`>;mw@q@@1O8U0S?1{WACqXC;1$l@N>l1g?CNixhdiVAEi# zhct$Wv9nRC${-weFDoOYfSUWSq*RhFaRN3c&fPZBUENLt)~J1BEme1TJx8Ix_h2Nj zm5F^cmmbbw{hfB7fFmjp4q(uF5k*9&1C!x@vWVZi)_{H*mfH|jM_oExxl`|>55(P| z&}og}`SM_vk)17u!{17ca4!fW$h({a7cyxg!G~F!8wmZ1i={J{KUC^QH|{9HiA9B%#6kz`*TF56^;cJY+i%Yd+76P)kM~ zR1E6|(Xgfbj6NJ1+uZq1Exm3OF)7AIul-Q{f5^8fb%H*7poPFRk;L>mjfB7e3_7Q$ zm|6YcFF3V%i&N-wguvaMcON@?V)zol z)SPdRUf0M0&yTrI9PiT@N!q>98DW1la=t;3mv-uZnheK!d;P&QIY%>T#{=%xEkS)) z7K!xto^6bXa3HEB#}8`6u)k+}@6>4g`5y zF4P>*aJ9t@CEabNCQ$OHooEv&e<|WI^60!VxND)&qQx`T*NAsY@rW(FDo6--Pzx{J zOZAIln`N#s$#zT~gy)qqp*doCsV!x-xa<=lQ%EdqP7|T4 zAYS)%cInElAtkgBrEE5j;N?DB>a_5y-QY~sNB^-R_CyrXCvHC1=nv%gI~ zfOhIoUtJF{9GWHlK&{5QIs@Wu(dvhG?SlVFGfQ*De38SD7WkV?L#TJNbq%6{$>I~` zU)yNO+Ev;p-Nn3uyV3A!d5)UCma-UjCJHL1{0;J90$Z&g9FNY2&{|qrPdJ=`dA;eJ zQeACrn3C`0wIhHSljnp$0EcBNTft)ZPRxFI|a zT8Di66`M(_7#i(wegOoB{4;B>Kp@wKR`N99%7l1Bee8vTzi7jy87)t3TvF(VG3#fu zzp0Wu^6wNi0Q-L!5P5Jwnwbn_So+^$6v8h7XqTpgVx{`;ofpo5{k;L?r{Zr8_xDl! z;t&Z*w2;jegZ|!H2tU^E4d5{)(0|iRLSRxrH+1XgxnkIVyD$*~Hoy{oL;HIffRPpi zP)8EQ3RwSkG2-8<*!V)m>O=#Awz)}Fztgv&vnS5{_ur3OP%-3hJw5?*pZ?pR3P_jt zvrlh-nI=fN`gxg!UQa$*x>qV5___*sTA1&RpQLOg(Y~(}rm0qkV=EX)lo!{KnV(`?%=M!J z`ufv^4I;?~we>GLNK~s`P;tV(3Ug{Ky-d=a*4}FQMPBjUa4&Wk?PsJuTtBWeGe1nE z3*-n3w?+oC{*bVmqGJW8hdp&ar(+vp#BtHAx#Lesq)ub#fj8OViCCVBE|ROc+W8?7 zTWx^U#J);KK13K9+RAp-PP=CpQ)?k>8DD3Cp{n?SAHIOMT*JD0T>C~6hH8Zrp^Nlo zvWt{f!9~{RK%o^na~TAL-lnfnz5G=M1fT!bYU)32F(Qxw6zUOLxqrr8Q@xmQ7&HNS zS2q$4`x3)6D@$Um_*JqI<>L?GZP1hJC|zQ;q)e_p(AJ7q((=^YdtxZ-Itzz6`+}NK zoi6p{g_MIDTdDogNUJ0os^sd!rLZ%ux=nM$T~d_y-EvJivR_RF=(hR_jsl_K?>Td( zxCTbRDVeon7g|Jk6M+fTKgqQId&P)#Apx!mX6LUs)F#5!6bu707oXCux!xd9Y zsMI$}pxG2xHby%!?iv}aOh4M2MVngPCVmS@+|Jn_mCVhXlfIxj`yV=%1DKR*WM1nF}gSxsnjhwF9 z)21*L?^JEEjxAJ8h3&$7LH1SaKrfKL)S z$UE`;kR|L=rjygnuhD?iXazB*+*7hqcdf8d+UO{}6jf%KL6m#l9GM!+9d#D2;{MN` zpdJ9t2xp#Q{2(-7P+*NkL_PDCLc{2w|Egb&UooBOAI%EEnUIg8_FgY<|)>%+V%Dj)*76SvitDg9VDs zb<_{3rU)_W`kzs@f{?M27`S$qhs2$0xu?e_u$3VYj1SOPFD8slRgBl?hn6s%1xox? zp^--WR<~%9x7dv*{g!P_5TG!a2tIKy^?{K7i+rRK{AE4^$GbQp+>OH-3ZXJfR5Xdk z#M)s-?qkBY3@DoKD@s;mL3L`2fQun}7>mej$wW~5{DP27om-A^)|Cg#cIpb)4W9C#X zY2&>o)cW}H)9h2AEe>ifdCMRPWmz}0LWh5oBrMYR=lHk`a{x7iz&8riFYPW6=JPiC zF(B$-)V+kV38DX%0Rd3DpbSC&Rd@z=6F)K-VYi(wQe+7XMWj~IzxgBJh?t_j!Yd52 z3E}_ko1^cH6ND2BB zT5t9x9^>CYilPw4vSDMP5&l`GfQWUmfj`gu*p}A*w+E&S;N+%;ivOt>rgX-N95?hZc$aolcyM;vkkpJY+AHm%#4Hnx+N1?o4&${!aN`USw?%uvWR^su% z6-D6jPzRkg@=aGfS1sjA&Crbw4~yew@3-f?O-y!nc0ZfS%1U4lWJJO5a?nBKfwuaN ztOCH1@D4`9HENJn?;(hD{({XMT^(CA6K|<4~S@=gsBHi&&yPCp8V{dlUDRThi-!D7q_e4B-TJ zGu7g{iTIaa^XpY<^UC%(!~lq_Sl>{F0ZW0}!eze~OTay{WJswtnwPd*!J>Zw^jhL$U?KqJ9NkTU#59 zNJK#$KJpkfTyNv59wf}{rnRn{3wy}dD82hzp%A6;ZABZ*cTU6zspN^>{z|lz`==tz zg;4}!2C?o*F;*>%_LrT7#Kgnx-ZrFyVpeYi>q`gEHs?lO!kr$fBeXeCGv&Oq+YZ%7!kkDDNbc4eW1N|{?Tx(w)NT_G(7uBqS@MbM^s-DMe*4dA6R_g`gFfTaq-dr#n2%n0t z3?JA{pR8Hy-_2q0f6k}XwY*FC_@ePu4)Or{Zr|veAHTvsh3iV+xCDw{AzB<*ch`A_ z?bnKs|5+(M6oBb6C{!O zY)a&)ie;qwE7@5SbBEHvrBB-Q_6ANMvG0fXXRVlv_8TLS?Us>Jlz<$YH!vKeSWl$h8VgKX$nGj}uvP4v!6cpV$+@Tf(}6)3>al)vU=@T`JW+GO1+6C zaA3^$peEX8^@!!632FiDmC0M(S@q@ZAOY{0r7)KMzA@Bsva9r->S3#O=ySy@S^lSDw|E_foI z#*zK9__hWk#Zr{fR}5)^&BT=4?Q1<6#qAzIx%A5%W+E)6F?LY{+r=}*begK*M*XCk z?pYJ|Ve+MKs;@OW4AvXmz8C7QW+Nw-7B2nP6uX1&@Sq%(!J3A4oN~}>op#xg<>3mg zvOJ1$wF1C@QeMBNlx~1()v024x}>6_;`~u&wWhAFuUH}9aek(%?YzK`OH(C`v`{NM zkkfd_66I$(&bTno@iNij&^1 zN|1O3py3DW-CW~ZHFzmOTzIb+9yYN$YpdvJ#_Dfakw1U%c?2Dpqd%rG+BuD-MR@>A*8xN z@_s%iSvt^2p#wY@faDS$I5#)9HHgK0PP|DcAu}Wd(pKYOB6BuHp=|yU(5=g&btqCZ zI?86bByS?vb>12eevXZ1oW zq{^SY!049yoB$tWqbP@y^f4cuh+3W>2FJlhgp$z$KWncJ+3h*33nk=pMc7&H$9Q?O zyYO27EMt!s$WxvA0~*~XE?u%aRpww|U;=c>-@8iZD>T?MI2^zuao7g|s$uyeSv*)w zhELxi5Wr7rz40(wneg%PTfN>|Ph_#1R0+E*(Urt>4|1#Ig{n@J46TE|S{^r% zh2kl=OnKtIoZ-dRu(f78_MqfVu#JxQ{Q?%T&n)o*YJc zU{Yd!Bxj9DdIY5H*@OLHEFByyuk41?9oR#d!~s-K~d63(6; zKf$CbXq-Bp(|N^xA8-5IhX1H92U=e06XeDRzBMp0kkUm3*`(qX*2u&KN^6Z^Vj#W0 z9Vq*!Ua?^aYzeEb!n2Y2%4r7ZXU1ePMWj)kQv4x}H6B23EmoqaKas(~89%8Sec0^> zqR?cm#qIfs*kG|J`tknev;z;q4AkEuJ$2feXW};?}$x>oSF?gog_6; z^sJly>LB#w%azqP)f&3Xg0hpEqn#76S@4$$g+xyTl<#(@nz-2<;Hx7Sy&4Z&J%j$q zw?e@-@Wkj7rW_6!3vfON&mHr~E^OAc#_KC12d>Y=Cq^f?2eGcP6Eu?R+j~jjlATHl zd@m4uug>tpmJuG01TfPdyICpiub2}w$72C%q1CK6)wFRxTn=Djeox~|WyG!NDmJ@V zuT00SZXg*(>+s2+bQD+7g`Q7)$*T3HNR5`uU*#9LtBw{Gy3XB<>9!1OLLGs4uRA~2 z_PkVJ_hdq0&+H=J#L4||2SHA!adzKlDfdYNuRiP&IY6J{tsAC)3*$9#*$Q02hU?r2 zli7XMjn5x3PPEAX0dnH6ye?!b{@G(XtjKYV#{pmAw0o=!eZz$n*TcOZggc?Aj?vmi zk*eseFCowJ#<-XmO{l`v@8?o^upjPxuF&svxch_E4`73#JD$dx!eSP;4`WmXvI`J| zSA8p29YNJ_X;Q}zCO;kS=M{^gsI~P^_FzH3$BwRk;LMdF(MfQs^(B4=Z6hOZE9A18yoSy41!S(D)n# zquDeE#WKw$w%@vZdWVLUXrT575DF(J7szv+mYE%8Q-XGPdb9L4EA?`pB5ZV&)Gp2*?!*2I&9t zMZNdKK0NI@$j8lpc#uo`Y}Vep^cGGL1RT$Jb|RB7p-_3ZO1Ng-^;AYY3`e-isc&Y# z^FDaVBrbAIs~z0loZO3i?de!H-2MsE(Ns4Z1^s>P$z#>6>Dw`@>KC#}*L?Lm-HNH{ zapGwDD7c?*1B@~jvw>nTE6}eZWttZfFcQ7P5_e$Kyz?1a7@?&8!WqL~4XIh4ugYW8 z4{=-*{`%K#lI48(R58*%-LKl*y!y1MH<DNd(!ceQ~#RFWjuxzDGOItYa=&Gh!n18yz4LN#Mg@f1Hbi)z>gshBBi0N zSOOHH>iW{Ye#X-!qk|p1CKWAXsj2Oa3t?z7oqlUD_UN%&q)LNdTvWeSPwN`_B1_f5 zkae)$gTQ)WKV~^uWZimG|D-3-^xF!6Ws6W&&mWfaG=4SpRPBRl{CeMHaQ^9nlR$4x zN37&fq~Z{ZT-$(FW3R%uY$^WB4Zz_zV0ViDg&%?@Futbv$-Z zy53)J2jWgukl@ zuj!!L9qxs0eCl2Bg_4Ogd@QEfJ~>i+ZXO;Mtvz>>iNAP59VKQ+SN}VB72?+V-0Pe1 z+bw7I!B`9WEx>Q7n=eMcRG8R`YUbB}ZV=LxPg9NL^LV%=E+9YGV_{nUM z*Y98iaM-YbY=7ABSk~^5l#v0;zOyn_uQd#{t}xRc936!*namnkYjNlqSV0AhC~Cs+ zA5U9f$dn9zfU}vtzJBeKR)cw>07@4iYw)G-d?eOTGchrlD^;RiZHeP0jHNT{HO&4C zf8Wu7x$Ui2>Pz;iwV%`7dO@AXPzO=mTNBh$c;DBKfusSy8NR1FDZgBzp_P0vfts&7pI0*j!{=O`%zAFFDsiaq> zcm-u*X+&d%6#xD{y1qXAh1mymKU;!&S(IAn%4)pUwC)fdR%58tuuN#-ZxvVJfj(c$W~H8W;`06?j78)9Y9*`U3ra3cRwJ{A3%u1}$q+|@>P{%Q-}-dt52?X0 z;-@|8EcF<){~kdf6{3>7Pwy7+fQ z9I~i^G>x!Rjsa`an|VuEn=Qz3eUqoXQSFfsk_~0{Mw$kS7c%EwUmnV_C~O7t{ahVp zg68EBUA-gFixn%z>x)rww7ly22B~{{cV|EYMReUrf#B(ZVP=?+4x6YOyO?UKgr4zU zKyByyN8sM^Tz+%R?!e>nI)wMT* z9lTvTmYU~WR9#(29aL@x{oA-5#1ib)`mWT9PEP(EUS^8#x{%7+a#Lj>e~ZCdiBzaqQD73%Hce?PEWn(`oFfi-A+F92 zNDdWnck->bFY^S7FZMpc#KM4|g^$t12f=JEh#ldd#3q=L?>$czn+y`rUN>dGfEQm8 zp8~Ck;`WCBQvBT6{C(HQC-nKs0!fwY)9m-%oLIg4>ROW+Fn_NS8@j z!HZOr*sHWoY`t*soFPd{GF#oebw`T^{mXhk8vFMQ9?B8+H!=SD#-_t96GW92So;Cqon6k&<2v}!1BMD zVAwKJ4aErG$2tDz{1f4u1)RVVjhgYwiTFJ_sVBj!X&Gi;Z;819ETh&-jTX(M2u%Mc zCBYcHdsslR{Oi688i~hvKN{&bI3lQ~sBFK{6cpE6D!7vAp6J2T!pB4UWhs|JIq5}dwQ;3u}OSmW3ljBQuFpSeF zX@-X;{5zb~(F)C#sV|xK1EM`+KIy%cPxnG0%B7wgjuw6z)>ZlO}1aW&M9-tQ!hLruYy+e{Z5atQrH1R%u($$_kcJ8bqFvQCWG~06{nXsPLoy zwlE8|1zd>{7N~SqK;xvd?g6cpC$+zo8N!lAb@BWHj#U?aq_JG|&eC^F^K7Hp5T3Su zD|vcPK6vi2`oiX*80x~QY9JhDwuhdn`L^n27t)2R3>C?tqfk~|(s+TS7LF!uUr07j zYWrtMm_{GC6TX#Qt**+HpTsMd1#7#lZffJ4$z5;d+~B9nieeQbRBJFEl_(PtUxBqV zpRiDxJa$g#L3D>@OAWLMMNgq!Fgnnsw6?a11*H`=qpsZ^(K+%?)&Sj(KZ+w`W^*OxzWJUg*BT9cue z?R`IKrUiVj!+if~A@-oodTpYsK}Ul5k+G;{P3!ZiDWOMFg2!Y7dQA|dN52| zR;XN~r-ikZ)hkHL1K%7}9L*WKCr;E32xu%LwqoPI2fEjw=w}V;4j#m8xEoz3>we zFCaS?f4lP*RO=-AYM(35@^u%?Hh4`@P2Q%uZueP{-}#UY)Fncg={G_D4aB1RUpV)p zi**ZR07uNT%IPk^-J#3XPDw}J3cfp_FE{knzQm>_N1B`Rm-W+Y`~ZR^cI zp_W3}IB)bE0iW`f0Z^ePE(`&+1Wa#z&xwM^xw+?Z1vBr5HAhr-2K155cSd%WAz06R z9KqjA&Z7_U*5P5X#W^4aa(b~jmNhgis5F{y$nNjAdXB6{szwKJMlL*)ajX(0@gTg8a`gXKQpNi!NktJHhDv)tYA*Y|`U|OIu9=V-CEN{$;VT&H zqd}CTv4i$Z@QHb4qWTZmkvv%s9!o0EmRb7azOgJo!>+@0YT2@V*Y736u# z$S|Kvcors}p>b^H#SV;9wP?c9Ro4zkV6{+^d@vd~wdw{bbWB(bq{Ld)eXkdsX;d9h z*|P_Ul(K>z$uX*}SM)O;ilf1e;Ep6GEsc5a>x6!Cek~*;iR>65l?xMn3|voPFD6}~ zL%!S#yO^E|yW@boTH)o#grO;mQ-$e20c}o(S z&iCBDL+4@@9zA}jv0PvaAg|kobV9bac}6SCo);)<^_)xpQ$0Di5@TDg6>=ptcc zRPa#!rPIm#`!5|sE_IN0E`aCZ(~8hIxr7sh=y{54fg1NQyAezyf=h2wZsfL+4Vc)4 zvT8|raO=hjqr8RZ zg(d>@Opn+h&?5h9iS3ssc}1>T{H8P)F^APLct<4`>ujE2n1|ZD5zER{$86jS5SV)? zj(04Mv;74V=ACc5b|$li^<@g+&Zi9&lj`f$TO!OftGpnQhCxnKbr>zz4fKlxEi2fe z3ay%0+*v0G5Nx62t&T=4XY4R0ryd3lhXT@-2Qf&DW#_vyiI^GL#}KLa4UG2|#xFog z!k3Ub5n)0}23`bU#w<7f-&Le&5s^PSq6(>Zb_eWX zH*104+HcA7&B|oD{zOGjNXL@}xW>lDw6a%?RnMykfMuROpdi@n`NRYuJ$l+w0FC-f zmqpt=30}{)J!Wk6Sjfo!0Fb`7%kyw_Xo~*I04Qchr#+mnhx5HZf*1@&2t;DDcB{

26^mrDqgkk)neFK?ec{Kb-SdJj=k+yeAod)9gub&*twWM6JV7=zmDs zFfvC6K&cN#U{BgZIlebk%_?Xqx4mtoN@rvYjMqY`(41I@)#H1JPh4shL8cBinE8wg0M(9>Ncf+y|Iabr(}^o!2bx$%^TzYImU*XBpMP=RTdD>s;XLeoHN?*b zVa3*GniwPSdorm_!ktak&7R|CbOH57poHh+Ec=(12=j|=by3bB%dtS7M%}Y&F?9_R z6PiDm&Q;E%be(es=Db-{zqnH&KY00F8-dg?9<)H%WcrSB zH4*+w-OkRQrIu;?i>CoWl~i7zxP$HzPZ8JqQ;D0R0RAl+Rog>%^d$J|@&$YnF-IYpU}Ov9Msu`H0j32< z`&m!tC?9m$rqE0VT{&onZ%cRW7Q~;|dls_6cR)6oZ0lKq12Z8!U)#1q zEvHo%*bG7?a;i_3aXz<0_a>l^Gwug~JkuKL9J!%~7gx`!UKvRxG}R3c(t1ejMg=?~ zdSXn$>SWmVnuJGh$r`d`Y4b%qy;<~)4@yo(V?U_SiynH6`zqbkd?-b2MBN52)jjbZ zzf~h_TVCCglN;}@*TqkH>@SZED9=G^uzccCmSo(%Bx(1oM*z6!=B!rVx#qsb$BXTZ zWgAQp>*7WYQq=Mgexm%sQUcN0x(ZunBSOS`kDl}rtf%=<0vT%ohq>rH@~26L!Wx*A zZ05egJ%x8$hH`T+dQH}#Iw)eHMl(JooV9@sQ<5|ODCIhqfgAP-q^|+}+A&{JfDG0DJjoiU zwK&fXSLA~mYNVWBW3y;^Yw=9ChG(UBp^ksI;u9s8e$2C0Aht6#7Qv>rnjo5p0Iqk` zvLx*nzx(sjyqImfKs(*H86X$C+SV6_HiJxMM20COskXVmy|vf}K_G|t;->89^N@S^ z%OJN5>FcEabS)_Cs}slIOQ7!dbMSJ$n*=GW);)wMgrZ(-J!ys)@8A+|1ESqIab8Oh zRh8b}42c$+eu}*=40!VF&A3G_tk~3% zDJU!s6d(D$lcpIZ%ai`6W4<=uaD^2<%&geIoc$&V;Jt@CAv>I3#)4qO_4TfDz7CCC zGFm|Dcy$v_39Fk0X8e_aU<|<{BB)5=ebW{e+hM#D7WXDMHt1D#%I7z;>yMb45f%VZ zbm=5y^*I$J?I$+caT7m3|0iH|7GW?hq`8{hN0T=RZmENhGK`&Y5oPi&`2MYYBL<^Q ztN#7~y~#Or+Zl~>&S0_e+@JZh-aO6(jP%x9**);8v-!-%I(rCM=$9`!bUXgC+nwhh zuc!f8ZPD28cX|WDxwSfYbERA57+U*#xtJ5flltpF4ovx+89Zrjm3WKJSTbIS5Ifk? z4Eh&vLOk7(e4J%_PT|*USR!1+>)62N#MaE-*oN)i`$ZHjr(x;B5X;pcK+gu@0&V=f zLEG2ba6QUAqdJw=r|eY4xSt)sDodclbQ42dk->tm_qw@s=W3E|&+RxK*=Y)Q$^Qp# zs?9RIH1g@5%s@R>d*bteeU($J&>ufvm0Ir;aG!%|zpf1CtgMePp6G(*1bhN_Ym-Rc zo_PFS$Y!pH8W*8rs8iKS#h4hray@#6$GvYd<4q37=TjFA%651l%5-@-YeA9`B7+<9 z3h%04W>bBB0`XEybDt=c9|sP*W5OPYq#;apQsz{Hg^J_Z8ZnVkU|v; z=VPJxVT&+I*mTtq3qr2?u0=!1mtr6Py#0FcrIXD~ZIY9`y?X)eU|L_^B*EARJSh@9 zr^*o}i2zWcEst2?0jipKjR;-kxw=aR+Omi*`GpPR~iMom9p1VG^M$cz$zE?VM`M{^0MVoMo?kaT! z@M>Cx*(&HAYt12MvLE^f3x^B0Sk7m|ha*Zgj9a=ABrH{yKX(j}S+bnaD9y~oN7wWb zBKWb^@kTFNk;TLoeKR8?jg6ANMi%Xook;xT5=BF7(Zj?>_<*RP`Ofr8WnFBMD`E9U z%4s#76N;d%*$K=mp?!+#I{}BUcaTM%=26=2{3*C%B~OU8E~2fUthFXl8K&K!v^rAt zsT__M@O`fRnUO>0DU288QvuD&u>TE3Grs{oo)QxdymJn^yXHW-Mx&$qvGb(bcER9` z*PJ1S2U{cN_NT-=AlHr9;ObQs2YtwsL*%X1frRiJ{rxG)>5EPgAG*@mbF{MIBK+vm z=_=iV+v`weIJQm~^fM{Ubz%G1Yn{;q3(xLzV8ohAnc5~BbD-Aq_K{A z1G-6-mVm*kn>z-k$0+KlD}IRFdV?G>a2|r3z)SAIl+~McM1?_BypNrkN&<2o;_y(k z74t`g(yJ;zCB{%MhNRqIF#a+r@41}7N8>2^;de6KFrhnUWrxMLKsnNvrd{_}=^+ma zyz&7TuA7&Wr=I|I8m+utcKPr`t$KH$RF6LgW}PaiyMOk5!lui2=L(amPdMJl0DR&orGq$bxoQ|MZ*7RIv=muSEkJX%FZTY6rUS zF6|xLcW`5Q@o~%41G4o=J(YVzX@6cJI}o49{t3xNEb^*e@c>%4^Ro!;&tGh^}UxHOs}ku%rq+1 z68aUVb^jN8Zxt3-*L4dfK!UqF!QI{6-QC^Yf&_wV2=4A$xVyW%6Wk%Vor=8g_kZ1| z`{}#BId!?Kw$|Ef%`xX3V`!dEVhKI5>)#X^sQc`F+Mf9#?&X8rrIva8nmazM-P_jf zwN%%8U~s0+;!c2;(HPyR{6SGyl#sOeor=-bH;fmU%VNj8-qo&l%uIvsODGJs?##$R zGt&PX=#MGeCPlk@fDl>;ILuMEL0qE?A6B7^U+*_9E4_LA3f)q{WE_aLF($H4#+N0t zV6o`=`ra^BF$M=cG&lxQqwG}EU^Yupox_oNUe6<{H=qzgmm35bK5<|XF)|xyLd4ry zh>KL^+zEE_^DOiXwU&oy-u&SO$JyA2_vDd>HM1@H;2x~E&HYO__=4fUt}rp4PH?*H z>4gJ{P4cK@7|vvgk+-&14PL{8Fc)i$@6+s(_z53A^3j3VTk^x0*OXldzN~C!z?cD~ zJWy`8gY4D+i6%Hl?4g@0q*oSps`}BJI<*dVYp85QG(BJ?)u->s%w@8q!pE%xj_?#% z$>Rr;md*MhlJc@}#&++d4C(uYQs`r@YP|%<{Qc&>jrx*E6iMc6KzJk#x0P#O^b`J% zH_d4)BFfQ37$2p2{U>`eYs_T~-CI@rpSFSV!=6RQ=|b}ExWcSO%f0Y&rmSCr+gNZ$ z*aq@ubd&1ckUyFr6Hs{Z;fGm@&F`pQpPAdHE=6XA^`F-4+iw9I`jXl#4%s=@!O=`j z>1S3}AFWMeryJ$boq1YFe286N5W;2827U}LTwasGZk`%LgHIeCwCMx{jsIx)M+*R6 z>#i3an?y8+V*bcVk2E4=pFh7cd?%;)EE*n4fV-qjS6XYd>Ux%dHd&LV8?pRZxP zwl;u(r(#EBCr=jPhiO^+a&`PnuMX72OrGuvm8Z?yDY2qFwvBMDAE01BCT`Z&3#__Z zj7*Et+CV-P13TXwJY(C!02e3jbqBNI^RzZv6kt!>4_F!98A2djpA zhyJIaLm)q2`CHAGNx_tm&8ApDmkk&k8-d?=G}@oj{YnG>+()wb^f4d_hU$T>$~}l zf7$oXYCx>~rgn}q_uEnd2)aChz2tT;GzB03mKuHI--Z74y%|?%`^)GrC*vo4`R_wK zyNPIGhS^yqh@^_RUA>j<`EFMf*RP z4W)NEXpdJgQQR78!?iP6p!8B^XM|pdMq*G?Mvd-8T zlEEzYBuG6$2o6O%7AK!d}V}jV)3DPy`c;@<;_2s zW7KpB#olI)y|(xaQVZG%*u2{pY&5@Zo8lT16(?9>WhL=DAq6bC+aZuE#C#;a$aF$> z%tw-3LyI)ADSwTuN6VFC=|+R)kB(QAW`BmD!$0lmtR*>MwdT>ae^KJ=8}{=CtRG6H zd7?$%i#;*WyD)$R+X>dH;u*B#2{;fgl5z2QHj%ku47>7Uq z0$kR8`L$9t@)NlnXsct|Eo!)-EPg6e#-ijufCW402Z%bV<{nwokI8Lh>vn8Vzy`OO za$J}jpCa58y8dBVY5lywf~H~tx9c%1~(j@izPth6RU^Gj8O*B{1P(W2X8Xj4bsozl<1SV z<=)!*7NkNH8?qRa71Vg^kQ3HQ1`A9GQ~&&H=LqB;G2?|g)hT-VTbs_KkA|3ddC(!N zLu2T>13mR*ASR!2zm*|E&uP`iklbZ{1_baAM;HFMq~jq}igzXjzxFA(FwPWB$-3DS}Z$x~*b-1kWA zRmYW~Ax*elR?LB}`g~LIm1%Hxe8ZtZ8+#Zp{++rs_aW5SYzM1%L?x3-MS>|GaP*+ zz_`%e7R5>E8|Yxg3hF}mzUU={Ui5W`nyb!ZDUL8gBymI9WS(}8Ye^QxBE=Z*LD0#8 zqXGH(ry3vD;b6j>;DajG1N+*j0M|>goO>S(dn@eSrdkMH{DQ+F7!({3JnnNkgX#7aX>@fo^OyX6S%c>`4 z*g1CGdo3<5qhIy7*zX8$l3zU5y6yotHZWy#D4=FG-SJ7(LsX-#?F;$mh9@a~=B{_2 znXjsXcerk*q9Jcj;}q?khOAo)v^cTKxmZAa6X>}^KT)Yb$~?&o)SIj!u->WR$c(`h zUIQ#t-Jod6hzYNzCBXus_^-FP5KGbh&|TLqniXXK{K@39Aev3ovZC9e_W5~}tOOe&{4+LRaNn;x_jcD{|$fP%4NI(gxoANj=k0$65f3=E?z8Le5 zv0rS(0e7sXJ@I5Uat1DMzXVwe2reqaoR@b!Fq-;doo?~FD_x?DX4$|IGb=#~x3>ei z>@SKxx)E90{2Rh6zmubo?AXB6dvU=TAY<1*OtT3YYQVFmP5Y+|reT=zN)1++q0HZ= zIp6e>r#s+}$tCZ)$vod&+AZxn@3Cq}W7g;}4R+K41pm-9Yc-y+dlUu5_VR{x; z1&$-|g;NKviL$aZP;a6ICH*f$|2u(xz-n8;XP4$PmrwDMeYZ0)6{b){&EbK1&!LPP zqk`yiY|d#MsJvYL2A)-_(lZV=cOSv{B7`KTowT)i@Q@ppH?Kd9MI7U~nnz}P<5YRh z(o^$YBV1ZI67zP1ZkA54RDLSXt^9OgNvx=mu6zmaaH9)DePV6U-yDVhCvM(-%}GwC zdxX9089I!u;-G#Xrp9)8*Q;mWu`Bloi%mcjXKWG8R4GJsa?gex8}BQM2&Lf}UT?HfBEjX3kGaJ}03TiIkr{izAbVS>bbg{XOsy5w4^jnQo zv6(647*#wP^;n*NV0rMx`ao;|Pc(}EH!p1rl_8O$>orV)Vmqmp%vWu8?ib|jg5Y$0 zi=9vRH)%v*0|jQf@zBAds>s&qtpQkLe2DFjTm$2F#cCg|7#l%_WJcc{zJIwY&&!&NbbV{y>kbUH`SyJ^%PAgPS@&xmTVn&sK= z7;7>DbtZJVIDcnBfDY$`o&S@*Lg>?ZlkpHJnBBS6#wB0s6Km)R<}SnZjC-)>;&2xJ zq`uPhWyrYF;&p?jzoT>wY%Qm~tB%B`hVYP3r34s)75~fAk0AJ4Y5LOC)U*ek-b((a zXg1{LhOIF47G9QOdx&nnwA7IVmZCrfnfiv#_7&^5zK46wFB;?h>jmZ_*G_7-(hfIi zQk$ucWcQwxYT#c527U&l!IWL)2+?qB$&)}jSz)xL(Ny!!vOTuOt15RZRV3E%h9KkL zrf2+My20;6rYnUahkpYd;LA<_9!O0@<|jq}6ZZZ7Md;6C`CP_-Hc0aW*^OY|hW_R0 zF96AlFP#5j;lD>l01_nM8#@a8rDJZo0Qrv{aR1@@cY*=wjWX|&wf{M*J1#Kn{qM{0 zBlLElUaN?JEVgO<7Uh&*0*7 z*oROuO)|s6&pE1_63x^4T>l}~J0O!I##E%=!|cOG2rd+oWI>JCO%Q50)pOL88%#5e zN_&L53)m=s1}78C_R*xSDE{#=5gCw1Ri<6Fw2Eg$jSEXFhWRIe2by^SLutfA{Nzm+ zLqiX>c*I{UeTX`!yHA}NCYHoVxiG?wy@cBohs76Co>9T1A*O4+NX}JNe$u@pe@fcF z?wIW>e`ts^Hnf#=>~fZlC5$e{;?1g#b(9h7S)<{xA3c>Cvw=VEc<*P7nrwWzOv9Z% znOH)D0YY25dKuX$0W4$}n{5xR;T-~#g|tOdvjy6!qE{ZYa;|D4tNJ;UCovR?WkQTD zLi-F~Db1X-wAb-mXH?D_@Q=FdK{j>j52+uyzZ|S&{cQs!0O>~}pQcj(z;SG65gmep z$}8*RN5pDdWsqZKPDvEAO*f)=ArsmSIlqhBC0tF-X#|bI=hj8T6MYiJpfC%8|A^ru#EGPht-Gr*ZK3;3jBE@aQSVg=BRec2(Ic@!i zbx9_!#hMB;8>E^F>-Cqi^xJqALD)P-gR_|1?=DWDHF>H<{a|hY!uKueiFMhbcM!7) zWJc|b?~lPyS!*1w%BfTAjEde5|8-Fl-eiG@OA>!e#)@V+bWE#vWwGQ=Y1o3q{`yKy z^YK}vBzg&>itG4jZzvIx2|qW=Sa3-u;iefSQ40^3iymN_5h@oFs<3NAiA&pyaE`q_u4td%8~5WG(ifjMPvNiYs(*s0DSe<2Xe;G zlfL2BP{XQ$lBwI6;G;B+o7xP}$G3G6ny;toL_!{)TZ1ICn&M3m9uUmW@d(8GM@kgi zo2i{KP2myL^@@{r!jdpj8@Tq@M8}*Md*mdivy{Q%jgHgQZ={b+R*W{6Mgtg5{1ra{ zPzV!(8@e=TyX;0YKx?+f@sMbZdEdEL1%v+&L4z-%!u^hQbsZ}cKlw-oJ zC?h|ULJtf`8=vb+m!)CMYAOy1=4H;3F-4rX@Tbc-`b@%%}1R(hN|0f|b4kCjVa@FfAMf{z%h|u}(0`Y4}hyW7c4bsTb|L*iY_7?%3!_iUv z@B9vIvGJHlV=SX4hGZtSBA^`phlk&34uT?q9T@@j&pb~L3tU}h>`CeVSxh2Gfy8%a zMoRvF4#oUyW#~z6{dbQP;K`>3i++WjzjvDXwYb2V{Yyy(o`ZN=lqmPlx4;lbS_rs4 zF{cgvvN-s?M=o&9{681*iH2mVV0aVe>uy|Gk>gUL^;%`VUY z03akhd#Uv@K8-j-P-I|UK5z&2_Pf~ z2`ek>YcGuI2pyXN&$T(dBDb-6&y(aFJSbX?d%`pp?)MyJ$LI&-5_ZqbApdF(D^V%6e|`1{2oAOqPJyl~ z21{YuZf}%pzvR4VF4Jy8YWsXQKkESWKoJo;+}k6)7@M0@(U$`eG{2DON^<_gl(%&_ z9sUnfo}OASXg`n27Xo)3fF|5@;_yV6?VPA07_pqBiIu^2IP941^ziH@6^Nzxp=SPv z^iX$~0WT+K`m%bXZryfjE9y&{30|dmI zZXIFwG|T2p+}zx<7n@tgfL!=~9puds6fUYz{oU=4h_lT~ANE0K0pJV;Gv+5=aUklR zxnos;`;(rOi)z_{kzh3k!+qL37b{S*g3Z2kMz84Zdiy=CqcG7IQA7R~O>(3B&hVCO z_UdcGl8^KL8gK)^3V?d^CEj#jeN}_3s8_El_1YCE?{h7T)o0P~jdQ{~C9>?B%g`I% zY#8OG>f4v?hxgCnb&Yq%&S1+?9c;9_wjzJtksqP*ENap_uFvH9z_3*L$})Ms#ttD;0sk03v-0@9o89UUnrb=%SF!gOZEHGc~qjNc{4CX9gff~-1fK0<}G6*2vbVf$Jjo>ljCNRpH1-oRmZn@9NvsoP#- zl{>AiN(Pq2*l6*pn@pP3h3otw%qQg#>6x1BMrtpev4odC0L05Ng1`_R$tmh%vpNLA zP{4dRzG=N4iT0MZI`$}4B$_`eX4(uaU_hF(astURCA2zzuJpqn*2}s(NH{v(yvU?V zsVXWG64Lr2C(|VwrCLQ<={eBf7^>XLC&qb**Yd}c`L~G=bGRpqKA@8GQ&#(YXdCrz zVg{(vzRjSZSPi`)A6gt(wn-Gf>upcm!QW=id%$KaFw-ACASMk5-dQV=@;9VG4 zreIWK9orh?C!=wBbdCv5NDc!VqfK*LE)e=_c0^-<)Wi&n zC=6hLsl+HpgDV+ZgVXSwM^IW))T1qBlJ@r?iX^qa`XQn7;_hr|WmU@MGvj)4azbx8 zORiJ*^SFY`VpG-t%RCE{;PjDtmI2u;HO+X64m3vI6ZXMc ztK)uu17rIH7u^1Wmzt~5P(Lt$u~;0j=STdq#Kdi;GegM47UwXA75S~vqf@23+e?L* zFvAL;`KPTM@2xvrUpRRcgV$i?OVlmz?&h{Ul!_+oKv=j#iXS!)RqbyFZFeHb3tM9w z%h{qB*9P$ppef&G{dhW8A)u$F>h1BE?qt2KMcmb6D+m_*$ogPG$8EY37c_s6-%4b( zKvqWhdl>XL3^-Y9=}*CJc{??i5(^av%T6C<3#&2$@^%)hc0SD#Ix%NFgBQ3~gj1?u zXPsAe7>T1|^WPwFu?7>Yk-Wpj;uOe>>H)l%b?u86^6`d&vL)$jDT_V1qJEMby0SS> zT5*diF~%EqFnw_iD18V1hIhXh3p*$^oNMLAmlQtj;C9WKCb7eV$MGE@I?G~h(z{E9 zJkMmxYF*oT+kjEZpBpxX&=8u{TaU|iG)JFx+_1}ZQb=4xQ#SR(qS1#eaurY>&l~>z zdYQ|NL>}T2wZ_lph`e@ds8VOuMd^QVV#G zK}=@jSq?k>N%RIFKoO3wKw~WZi_NZ-%e{rmY?>XQ^ZVLd8(smIL9eVVE_06gZ5fdG zzu6gU2DHtdwb^PB&GxDfHI_z(9wbXx>eL)A?fv*;XZxlg)j^LM$;%yX1!#3WuhZq; z?fG3r?u?K+lp?Pe)W_%CIJ8*=mifvkXLS3=!RM_I^rmbZGQPnidr_R_=#gP(?zIl| z?30BOQ86#&B^X1gy;PBs)w|L~H4ZPQH;=p@GwK~Tywf78=BstE+RQ1GL2kj(TLZcS zioEMlumem)ZaSC5Y3WP2xCOZVR54V`Z_UWzEyluA+~I?Q{YOKtvsc!JqkUTAWYQtj zpK4~=hilcVcvRoX;z#sc%^d?wCLFYVa6+qiHnIV+D2EIKm)DhIOsA8-sj-`5B%S?P zF7Z2SLzS`hwreGb#=L-tjtLwboHB-7Wl9FKaUAVtX9=h0h#PY_9Cm~nvx)wTtsa)C zI>0ONN6sSmU^NReeWcTb#Vl!m^#c~(0Dt5M@!#lLe(DPIGlUrmFe8fe`D1BO1As=V z#PhvqQaKF$#H9V-&C4=V7Fp^SKUZeuD4c{Cg64(%Z06b+?WTpMH9?)f%J9fIUT54- zOWwHITIHBI8Fk;}bfcut1YnnV5s>t!*a!`7%@^IP{R>)G81Rg65?LVjFc%|B1I=z)VuaN_Nt7!HS)BngeD1sQG)KP{a zu2z1B!{aVOL2ecl6ogX#geH~D?m&n}ryF6@>QH1gO`U7H4qj`<3DwN7< zyXryTo2mU}BT5W?(TtKx3leqAqobTV0{*ja+RUR&%lkL}sSQezVoBSoJyw75H)`{m+yfY|DZcl$z^%XVW~e6ULc1Th70ZbDK~+xbv4~!NO!Y;-2F3h9JQ$Eoez@E~&h@H0)D@^zpuU^Z|@G@mO$<#as> zNnx?tE3CLbM_=H!&}FCA08cp+o_#?^pcwFzTY}m=Y}jBl|9Dn4`BB7@WUl z5j$68`DgSF6z74)i53q};Hqt&F7+PQru~Vx%B4Hu-|5%w##-Cj>V`uYfl;eqdPfzq z&hWGCXzU&f5@5@7*sVu7@WP~(XAgNC~x~GZ(BvmYKtGm zpcZJMJ&L@*O?}qk>eeK?(pFgMnZJ5-$T1%?e4J@7ngDn0+qsy}4cX1MRhp2Sih}3< zOo2HsJOGFK07e&dV6@^uPKpO9;jx$7MjYoNq}k3kkE;_7IOX+^Z9%`~vtRND%XO%VLu7g84D;hi%ZvS&uv33McB|}c(fc19} zmQI>w6AKNfzug^4+}htS)XtYy5l~W6`bAa&(&CdiT}qBzEA+;SRhsbPCIf|Q^8#&O zMcy$GzYMmgUzBV#28_mN0$=IhSg;uxA(g%O`-NH{34@6g%(G^bW4o{_Z9V z0#t1P!T%9oYHw)5pc4xby)W~N&;&Fdymdj zZmx@Vs7*bYpFEsMR|)ggYMpAx3HWn~MCad{8X=w7p9s2V4Si}%J>z#d`grG44lj2G z5TNr8sA6L0(JiX~a&|q5CV{$O+B2mATfpqVq4nEnGEEtW_A2HL~pI;?xZPTQ7HL$_z6_`s6@Q@`LnmQ z_Df)dWyc{~*U1>CMf;lJ)A8Qn`WR4SLABs zZa7Hd+u#4d6vS}tY;aIKJ)HcpZX}K(w?^9mGA=7tw!3-UWb(&d%jOF0G1-t1z+#%c ztR+5UCBqMS*^3LC$lJQ+HhP>+&z1tWLRcrApdNL^1!K|RV%@l+uxekUKz$q6`ppA^ z_m&!3ONj_WtEsc6fve!OU9S};_RR1p!p~fD3^SoWh`!FHPpmvxe<)DB{mDhv5YRHU zumn<9sMkG`setM3Y>(#o(AYKKi(#6-I^}f_1x8|NF3;UFrRSOJs)3!P(Uhaxv4Kdy zx}{n`I9P}~Fv(~-TnuN}{FU80WlX3@QbbnaFyhzE$`iZ?fF}6)ozcn-7S~5nPx3?Z z%(nHCD1UR)D@SQ}vL%d+{)j>ZQWHf^4eWo@sq@dQK{sQl^I(eLvH1Ev9B#){9ft7h z#O8S@&6cT2%#DKr%s2HkzIMAQlw7%GgU#=`jmUU`g$vR8U0KWa)$}t}x%`96BoNP4 z6ji40;aUfGFdu@)*ULW@-R=0S?pyuf<>kPh10l^luY5n4vR%o4vE6mhq!|P$hPVCD z^Mdic8D&k(x|eBd06Ko(0|hcf2;5p?P@Wct01e*V!3$@2=55*VK9ipkIPq z=sbd+BrU_%xsMFb&cele1#e|O<>VK~FcR6{C-Ppn?v~SyOkY?t!L6K`+-cOP<2<%Q zAF0uRVk-$@q%39$_V}q^>Ul+hphb6Z#`|NC>l>U#K^D&3<39}~ZS-P#*IO-mQs{BR z!B>8az9eJOj9i@>weWL%Y4}9(fYPt(BHD)kT$3&zC2^DN$E;Q=N7}yXcuN6(<((16 z#OEElYid;GduI(}t_V9`pHM}68svG(H((}%%69_?#{B3#Iv4h0d@;xdUeDB0 zkGc+O9+>{+l{?IX_lNe|+ku?O>?W;iMK>6|S6_^o94I@9)b90M(Egk2?pWwVM3OXn zQ3O@GmVkaGAED@yd3wN2Zx+Xn{8p!-b@RlUyTO%qAU7un!>!4tU=Oy_I`psT`GQY` zKU$U(v#{Xa-~dpa)cnSpsgD=Y#>X72QxQL>h(O;1-y{23|8}V`BpRj{e|_P?Bva3U zR6i=ZR^BK*r3>oiA1w-Khe)ApA?Oq4Cx zQKAlC)oZpGmLu`uCO}To=Uu;URBa3EriLqwIA60l_Rdvq&(97$fAi1c2wW9 zwnBv^Q8iu^fp}rF7kNnNcug+e;62lkSxkM?(lwU9*nJ|ze+iUZE6I{AeN6(eKtL{4 zYJ`I{18us2L-rivU_xR5w>xLf0;Ap@t$E(wzp06*g!x)%WVpnh-VECf;W|Nz-gAnW znZ^t**+QfC-js1U=(M*&t3+1;l3J>%b2+I&lV&9MG>*ai@h3(U-{9`4-l2#Fi`7@p zJNQj~^ZJUP1owI_{Gj;j-&w9YFX~zVd6iswnsp-%riwC2$w{5WPgQnp2y(Lu+s~O) z_uwOIjqvihDNU+lN2!;=489i3AE~v!wCj#nRlADhDuiEZh0BlXIilr|t#>!D9PzLR z=t)Q4y^JXg)XbkpzJ*zNYY*Aea~7aDvzNh!6ZKs(Eo09f zYl4D>p&Ne*lHeNFAMQn?-*rQonn19T2O2|Q)fz|HJH!!iGP1grYKON@S|0Ggs_FG^ zPQ|w+trSwrMp;CSUw?HJffVNbRYGii1B-}s!qT>|;1+yLD4d;5(~wFrS*Tm|behJ5 zuh^*^QI=unO kN&B zud<6glj*MdY^Q3@7JCPonaCig@tL;~_NcyGQtWJFbknzrvkdkl>xk=K^)QgAkNotu9=@0eHH_eWCFaGsiLhLu z^VQF`S@w!fdi@PZiy3erL z8?(Rn32AqfPnlJq7!HPbgsj{d&0e=8C*)j2YC0lS_K^9&I_zxlKqwh+U(NH-A1Uvq8dmD$(*$K`ZugiD;lIbF75Fe3D2(o2GW z0uy_kpJh7d=T&t&3gt3OCN}0{FD~p|rhxg*+5P5>gE0y0=DC2vE|RnhxzUD*pj{q$ z4F^Cc_XAWo_(xKDmLXxs>L8;@Qh9#f#TGgP}LTxd8s%FCG0Tz9pJzKeqGCG<-d*4@d}*dP_D2+XYr7NKDM zsUd{kf;^%J5B3~nme%hwRxsygU+eTDJHwo^f7@90%A|FmWxK*0XPjt_&8a z&7&eNjXpdYCsZ+MzPI-dq(qI`_*>2x? zL^q(nGY3K3%h&fnl1qOWg54i!3Fac^KR0k+X2hKUoAE_w_j9h8hzi6q4o%^N0GaK6 ztnCbdg#b*!;WEVg_FW>7Avykr^v&KH)OD#&2;41R+LeZc)qJj)*MHuo*X9zoce`pQ zcu5?i_8s!kkAUo1X&4>`{UkQov9yTtu1j%W2jo)HF(L7ht%JjUK1`@sGX?gR8$Gbq zXi-N`sGM`WZn>QV!t9=RwYBp|vhvsk$iH$gVjzYZaw?BN*|eB%-?Ey$PW1qMKgIC9 ze=d6}LkY9{boqZMk=p&9cLc2?=iWhwEOt1Zj|op!)p=cb&%4kUgS50POFQbej!UXm z94l6>bR7&Zol8q<%8tX-U}tnYzqPjI52FM(0%`|EojQz1N zKhAf}hp1rGM;FtOr0eT7aaD6}WEx>|%-2i^>qtS{rR{&C4_;5zpp+v2;gNvlF-ubK z=#O8j24JS^h#Qi&Nw&J_FI!lh(H3$YhA|2@y*0YwtuiSvy&Y{E(y#w12%}V#VfJPU zHfE?xn!nVEJ4MG6E2e8q73Yc*?+Wwqx#(mjP-ep|-R3|yWA5pJFCkehvoTK0))@D+ z1VDk#Zq?P6LJ}*UA0c4k+g}0BI$}s@s6j$P!chkRl~P&%m)xIM zER5^!Fe(}nQaA9kc)dS?X-8~P?yIexrm1^#*R0p!Lrp;udKvQR>8P|)*Rw(ev13S$ zPH7pX-eV-=bgd;32%91zF`0tAFS@`jd0OexL#xpf0?tu+)$a}C_4Y<$7(*KoqSC4O zJv}+2PF5f*A0zw9-`3)MP?e5v1ed${M{SEZ#E*T^A?MP5#q<{ikRfeZd`~A#`5lyH z)ZK-I9;9>>zkicwDxtcc^}2TY3L)g1pH z8<}R93-mPxpGV;pvZTNIskb_k)9^jKw(67sl`lZfA^m`A?^!^|z1Z%}1&6;UMZVDr zi6^UC?}h61F-HBn#>p>{4hBQ8Um_i8P2ctK00TcCuJ;)ne+)iX^GC3vUuTYuj>b`G zhuts?$5RCZwFt9;GAZUu)%n#bX_fwjyjk{ci2p6p(Y;0@lJN6i&z4Uhvt&Ag`Vut2 z3j$7)2!0DB{IZWOkl(rg*?>gIFWU^1@%T6CQYrN%?dLHPvBy7I7!u*lHRoweza-UC zoMr0vSgX+SxB+y4+YDCOgBgBBfRzTEvRQ}(dxJg-TH45xqjb4Hot1~<8Ts>}9**m* z=3&4ebQNxyc z2oH`P34j>vbS=tBuJ%NJDY}(}B%957|{YqJSA__df;8wNq%@rqjfo`C>gKe`Vft9{| z9ZxUnC`yx+M0M<0@;>D*wyL5g)^UjgK%MqTU)8hOX2>Q5uu>I;=bqxfw~Eybp5^552Jt4 z@HV#Lp3HyXZ~z^G{4nlVa3#NdPXDw|m>K({l-(??6(|#x+U)Ti7l@$>zP`veIj*Q| zlTm`$q1j-W8V?AS;z2FqW*|=IJ`#bc=kClc5&>b+{akl_Nx7nsjH0Fu=*YDb6ZVs#J38g^f=jT{Qm%-Wt# z5-|rdZYa4*{4Rfix-Daa0s}F>Z*@`#_XbM(V<0&0F#}A)LI5`_h@+QA{JRI!!)Up2 z(Yh}~2TxY-s&6Hf2;49Ae`?e81Q5YrK5zNJNa%!}5wUJ3-_xlUaZlum^W$*pO9=*f zHdLbz3``9>daP6E0EhYo8lwDZy~0V0J_(+wkhacZmJXna?M<9xOjLz>LKIJSv^f)T z+|A`^>?p2okBfw(`Y1EPMC)sfTc2X9{(zaQ*$w5TPId%LGQb9v^_6@hk@CDkwU}&? zUX4t(aAn{6U^3hKAmn_hA~>1)dW!dUrr~%AcP@zh!xB=yM9ai$`gFXva(_y4(qeU3 zBxj9jJTUU}-F8|K(54uX5A*PuR%s%N4=sj$%F=ba9oZUK;u6oV7V0Ufw%n1ea;~dQ zTT5R{Yr0(-Mv9fKW>85}Upw5tUQ(f&fHSnj-4-5!Giu5xtWw&s0w~Iu0kDe$Pq0W_ z=N?I{)M%KTz*U=;_N^_xSnii8yBY_8U*A9GiQ-~>ZU?|S*|sGGQYbDqNw_3==Vofi z8@PU-001&zm(o(Vyb5XD<~<$6$Ir~0hAW!C)qL}yN!A$=S%vFJe8o@Q)<|*DMXp$% zqhfNVuri$a^5Ss5>pgT2Jxnv9V$7@AuQ`h`@H_);kVE-b{q(0WL5EJ2WElzUb^pOk zA09XxZh)yW*WnMoMVm!PZ!eK>`Va4!p6O3&!A�!|n(9pSQeW^==vKLtmL}8$Ecw*iCIgYnQr?^X7$(}=B#%?+000ra9RXv29hRRcQ3FAc z*&nTSvjF<_>9#C(!pr55xpAJG}&P)Bj$Mo67-^PD) z9qb~$Jj(fm#_?++dV{ld=GVP#`f2+WuCQ(zrVAXXQ0&83_Lkr#1P2iL2NTvriE~H8 z_T%X77}6sDt)x*9?Nl0QWN!j&DkKlItphyTQL*4EFAp zf7YJ{P?d}TALA{myh16iOe$t$wJ8sX|0_R{)XYiI7YfSA<;dVCRRgmCPUg-)jGQQG zk(N(|Qx-dT(l$vmsQU6H%sA@A-9&TV;QR%RruO!=Dsp`z|9cz{Oq@YO#FfSF`Ergt z!U~o?SydfvtCVSYz?OF$KowdK=&P@T#-pM;bo0Hn@r8#g7}Ue8S$5BCP9Mhywsjuv zux(y!iP?{nTCG*HEeG0lKT>V6yKcf^)n5wuAUW~ROZsSzBNJJK^-WuIhVed zlOT`O`tp{XYX4kCiWBeh?KhBrJ5a~?M+@M;LA?nv*nfd~vMW_Wl6O`O;+IPD zIh=%95ioh&Jtcb$4>brbMVv3Uia#HpQQRh1=-Z=QDsG$p1L@~xnt%L%0rWr~i*Qyz zI&)>b3{}L5m48PNTyK~&uXtI!i>!)`rja`zcG-(1m}(ldh_)pb5~1z(a~;GD{#n{+ zrH5(~O=$uKQ#Ynn5L{PI?57YJ39+kddtoxP&E3Wp@en8>ZAq-}x##+Cbf64d!Xgp) zyCa`})WrT@k-e%0{Is2+M28%Mmrhl)N-2`U+m)(^scAv~r(o@D#FVkSCd?FHK6D+t zw-DAfQ~jqt@DK@U0Yz(e!JZwbMa{ZyH9epVN1{>Hr6m~BcINi;cZDS9Uf3N`7JtqQ zyBh}HV~l8%uVnga59u+T4bjJe|8j$AIe&Fk+mQ zFFLNLlU+I_u{vC#u$nF<(OE9o4qD7n4^XyTK1q=Q0?_o?vaCcb5I%+nq3?TI9W3{Z ztzo0Y9>Y`BSuF4bHQ~hM*w($}leojXm&)G=H+`7D&nO{y-y!&5HK0J^e$2|ROR)DZ zu;Kizq|izMLc;n%%4pGZ@5Q7nIS|#VO?ad>wHDlZz|E)3l>^(9n8i3jc20doV_!Yx z+XUB~WIofmH^YbHuhEO}YVnFC+SD(@(I-7nLQ9vmClqWSmK2x6jSKhSjmAni7@UMC zfP$9Yt8FVaP4AbKx@S`!Lbo}%=<|7=idsRLkUeP9HO5$T7dQMS=9B`Imv*n#2nHE#~m7gk4UQ;7q6-im|g7K+V z5@vSykB~FfnN-YS*XTOQIl(STNOz?qvwRqt9nENB!yHY}4e=<3!xX4VN|dl*wGX!R zOptup@uV_YoE&ao2%Sol5 zjE0FAG%3^O+e8|V#*>59Vx(|NRQyx5~7l0sd1aznAf5 zYRz<=sWh}~(-qgk2w8$<0k>$&oXgkz!-V@{3r72tDH>jnYXB6q)izNS51%6qXB<^$ zlZxX?W@$!5FYcqcbqeZAXT6I9rDypD`Y{{<#74vkW+8uHX8e_9g$Z_pY`y^i#MW3{Bjc9B_=73N60?>ossyFqBA}KaY8v&nF0wR7;f?Vx9s)4qrOWA z4^`X|;mMAtZ;ujYvn-}0SxR*+$U>`!my9zpr%ml z-Y)&O60PsUs`<)Lpl4i)m7{_@iKgoAY&@k^VfJO$rD6RYV1$u<+ncj;3N7E6%A{co z40S%@*F8a%(hii|Aq8zS?ENqH-Z8w7={hY6J&Fq;yGkf1!Yu&6iA{i%3Wwz~#n<3h+ne8peR1p#1bd^!H z@kTu3F@1VEu6-IPt!~uf1C3H_79DAsM`$EFg-@-I6B_)QiokwRGIfU6XwW<`{jEe^ zOdG~w@~gD{Lc)@Hfa5M!>*<|G_S*{=3;+qMI`mYsbg>83{Wa2=m&v>ut8<9qKHUTq zE-7Gi>jm;KgM-0*i}YBQ66Ki3>{vtNJ7$i0{TCf!<;^$5dFT#Uv1UwYaB+I`2fNPr zMv&`|)cL%JK45xn-$s#ap00&s)7)`&E{cNPtg$jmcf#T|5v2$HIHPSMLxq zkfKD5UPa!HR-%V~eSHr;I#8sQdo{WOL{T@EJNaLvj<)>z%kMV4*u_;DyeegkYoVHC( zQb0B&A)y=M`K3@wQXvl39y$(k@sD*kQv02U?*MPxqj8>PG43je4&P1k{N%w%mUyMDgG)K){-%A$kuxN-ED*eUS5&0mEV zLVJ+tqEOjHdM*fJ2v|BOFv$JvUv# zEiF2XIh@c8we^043K9$kGsbd}{l+QZYqXOjASvvXDg92V=ayDZ-~HD}J@Tb76N5s| z-*kPU(_0IjxQRN|pRXtc)`VjVdwsUPhrA-Pt6^a ziKDmaxGz(CWA05pkONbz^UovQWeEtSoa>!3LtbraEJbS*Iq%Q^|z*_(c^8?YBY zkm78BfJoQqjBQ@RBO7O?JKSOXg{=nWP>>$j8ms4XGgyTEjyMhOOu;`FNwYuly1Llq zART45#^_jJ_o-;-^lx9UWT4!j8H|XRR`w=JKz_j!d_7 zXJh@pb;p>aIKyP`#>Hw+r!iDdjK}Lg+oRnML)WM#a{c>fkcefwrPU(kwcR=wClLa% zg5*1>of}=i(J1B2i+nsw$`QL8+M8CFIj32Q3bFqV7a9P^5^N4kx#e^%lk z^Ujt*pwkTubi9PkY0gyEDpRwmsbou)S>7LZg6z%~U%NeBXg0v>Sm}boC~H4s+(N}q z96_gylC6Af^p;#P=~yXb;mgyZtgO=J@H9Ds{ zT>7PKbKaf{nD-I01>MoN?R?4|C`Jj{ zMIO9vH~}{|j_B=)zw%2zv1zUBuI@+sn&w724$$KkV~%P8;&mTbUCopJ1KbB3-}w45 z6Y&nEAxVLKGt^-J_p$gOfD>M1a)g&7=@=N~$|uQ%`XthbSANWA`M*)B#$}xv887uU zBw{l`C?j#aDX&4y#r*L@&;Wi&*?vL}tiu4a@V>}Th{QGt8wr8^l2||eKQKk1OlK&R zT4RF?wQ1oLA4-u7*ahLOv>`KN zQ)_YYW1#*e+$#hCo=}M_5$3-GuK0Y?YVhBOK;L~Sgx_OGKPnbR!~Q)0#Ek%WMu)Dq=%QDkmI>?9p)f7#j6~CT@24Jo{?<%lSS=< zF@#@vnZfy!OoZcO&QrZo*mX;ynfsG}qNzsy*JvicNAueHSi$HN@5ET6mJg=56+(zi z@U3z$2}=T277a;blX|P@62+NR1YZHZOqCRboC8a}Q;1N5>?Xav@}Z6?IL zfaqh*BBJ3;v69cxYJu_WMB9DfFCU3pn5k2*L2)gu4E6I__6Zof>DMGCcAOZT+i9Cd zv2YDL`k%^EOn2mAj8h>=UlKY1Y)L#pqev#>A!MKBL?@vlYAc*0|CRl7$f>z6=$gNS@?}BXZ{cs7nRsJfZ9` zp}-3gmclOe|5aeYVVd!Wo^@P zaIRSD?ulX@ZFcTiK4_;=ZuyKWI#xPK!@#4JO&am20ZZI!8dD@hpPwe;D&G;K;HZ$* zU3ecH*OIN|6~JQuf@*_1DSyAqHU{F4$2%r$dRl4)uf|`423p}=znL=i3Kf5BgE2_V`?;}t3S6w;ALqh1(ify@c={?gh4Prb43;U zc_gEFS$nW(1TnseHO9UGZFKYElD%&z0A_+XFvXj4DNDO#R8I%Vt@S=gJ+x$ABeK&* z60QxYt3Rg({Yf#4Q(%pY@go&{Ou~?*FbsFbdHgRl9cu0m zaiIr2K}paY;{8C__zM9

Q8yhD74--5dZg=AVEi?XX^r0@-K}6(T?*L#=t_19V2p|It}^`E6_P#`XWk z*umc8fYAOpJp3KA4+vlnf&f>%Sd&n`2eW*j_9OuNWu*TZV2A#U!pHmjiXcYS_r7I7 zgqe(h32_h+{kW6U2z&Pq`*$o?I4u8@BztJ>J1M)lfvLQ5vpetp70x-Zb0b&FbRr zfli+gj`K0j&qs+H>oJ02dpYb-L+`7_{tjaqJ*H1mHk0j&1`h(9nSyUv8?h8@-uH{k z#TM60n}V#wrbA#tM(w}>EscRdlb0z#Znct;(I-Gp`2OC*kGeto6+RlN6=dDM*pESp zgsz4<>XF;4^HtOYz-Up`KGM3bVwvt<1jTuc9NbHhWY+w%p4KFR0dzUhBnE@Y3T@s} z)f#YgTCLufr@J_5H8xWZc4HvrMI@F!f?@pOYS$an>yu?=RY12G*7jS@NqI>QkcQV^ zKK**P_##;pb{x96V4H(K)q|}~g4%g*iy>U^74aYUgh4gnH&4~#eq1~cQKupfl%w9i zL`AFAIpF?`8x#2K^+*f;a69nxDTG~`ewXLDVO$^sCQ8TN1dbzq_;D|qcP$(U559Ar zv}nl%k8mRcZ*q4S*_^iq*20-b^O}GfC6Jx~mv285Q z>-Cxa@%qqjbW~~=qOTT%>5+C9)7RY%WYpsC!E+{gQR8W8X*5{=04D#2^3p542%rEjou1!~3$ za~~sl1gq{l4g9$p1GdASvVLTNVn#LSEJaqD2c`P=@Onj^$V}sxOrlCkulJwCcx9Hw zz!r6t&^<(b2xjA(y18)l5&+&pg{_|Us3HOoyPi3YgS+-TQ>}O$a{hFM^|=f1wsy@C ziIC$oW@Tl4KJS5FtTBQIaDoEAe@6gFYY6VdjO-4(cPAyx5|~4(cjs494_CU~SxRN_ z-~iBKvbyN?!b!sI%7CV5(o)!fj!A}G`QyM78C$Ml$G97V}^Ol)6U0 z2b5+-1Km0Hmu?@4<#Q|JPR$|%Sc%9qdV^T6j(!GvE~6?_=4KPh-lc@;X=!^SRG(M& zB}!HI6=i03;|914HjA*p#NVR66j=_9km)fO+}FTfklElJpBaxDd{H?j&XOu0O&=YGTYR{t0v4Vg*kvrA(5-_dZqko4J;eKMygJ_?eTXIFgVACDV)u0vVNp?D zW@fnP=mWo15ope)^CV%YOU~Q6Az-viFGm10gzE zbRRz(qUahRJ;t?S&5`J7w%);HNZ06!3ogZX`+5y!7J5L&wLfJU5`s;ChfB!8PAXRM z6^rAKKv-)7sB{`fUU`afnwpwgam9K)G9@LY`^}v4k*-O+rbkUMX?F#Rq(mDJi~}s3 zEu1BT)jg$e6L0jQr*9Qen+}amFgGv!Nr{5D(}dOe!jNn(irpZBD% zDo;E65aRimlp87G^#Ro{MNxPT4Y}$L(aNP=aR{TnK7Y7f3kdy{2Qyk<4QbT__z!W_fki$Ch zS`Q%BtWldHOz2$%?PevVoUTr@iLbO?Gtm{w?nNQVPlkq>9{~Gyci~)muc8=;;(wYE z;OXJjpLBqHe{!dX(YS-$`fAP<=lS^lJ9>aRT{1A08xWTDWf$oWb)-(zu-p50*mg|uCf&(+LB{>_KsVU zHSPdyuxvGGd|XLZ>thcQPD8>+zJark1mL&E5670~7!L%_XLTInX)YagK=5WpLK}xQ zsYCOB2=sOl3`UI{MTIEkGG!_rx}ldA?R^t3CARg@LSULb@<-W9Gg*It%rd~)Hzg9? zL+uhA&gYqOQU^#x)i4seRk0z+q`DVdeT(%L>inv8JTt#3^mT?b8-`Wvhrs5>UZ1Nv zMa!_dlQ@|M^$=g4sV|t^D;JZrjlSurP;{!ljkPcZ9i>p844)maT9T%dk8Uy=aI!?* z1q!GC#8fJeP-AfqRoUZCy@TJkRQSw(n%)vD=BaaV6c8n0q(d9p&UI8ni}`jrvPB#% z-qq4f{_fj*qx}!gyIM7h>oGt!Ct#1f2(}uB(~&IYk&p+k(W{Gc`Dj z4YT-f0z7trut&Sdc~II^eirHQ5+)J%5qSNCh95+$1JpLOwbM3otQI}0@p9b;qIc-* zzOy?mXnZKB&`OIxNXct&cN%{yUUE>92dR#!k*L8s)1saEiwh#KJW6HZ8#7wOl`j)H zVo0$o7DjjPD25!2_VurOAeK_t{wdY%%G#e%#>H&@Lt(V|eo?>`hYL7$4=YE6$1y>= z1HPJrg}X4cPDU!#=#2oqhyK#$9?cF|OZQ2^CDyy5n^3Fp-aj7yBLSV=p49HJ{(~wq zwHD8u_=C!*%l!P2$Mpds7OQ1AfT)_KHxOBLSX%ec`B7qC~A!)H*^r5wk}uKLItv#ai~l-GX#aR6?+AV`1U)Ik0rvC`DCh-hV5# zNuOghX1+LK8L8fnp>8Z>ys1D@iBNC+ONWkVhRNu-G&g{9j&@aFw;;dA5sM=;lKhtX z@QwR;M}Ks+)ldtHv4|@X&`-MD81ZH(XTHjDkAd2ec(io*TYb>L-xR1O8-MrCj1_RS=#@jNoaX6as4MpmM>%>1wV0-BxAjT{rntA9;E8MZK@Y z;%DzL)sImh=Sx;iIe9orJa$e@+5*9Vp9gfV zh>_`Pp^i&A!;+yWhwr=02xzT^Ey4VJJD^SE^YimJ0M4R3y{L$s!|4>(%gakDjYH8x z`%1{pG;Z%@i%r=TLzqFgJ6+&@Zy*X!kWh&Qargn<$5!ky+JkdbvBSn@kqGBs{23bH zz1S-r=ifm=6=EWzyRiU3Q_o3;Kqmnt)&ybkV zUfR7B_H`STQfbtI_bhNd~;tOy%}`Q!r2Ks|kJgf2qYf zrSTQX<#j^1@Q0r&5d+AN<>LMWSNZgM{U}G7SHmc~YS-eDsN%t{sdXIz)|X5!1!Oy9 ze?(pYsAG9hAsDq$K>O;CA3r812y>vr*qh{E?v7CQY$V@FT&AYli%%1;zQ3t+5lC1( z9_)W~^{Z1bY7vbv*@ku`b`y_i63+LtGFgF7e%6gJw@F~M+aLZIznw^BkC7CiNf7jJ zxrqZL4Z@g~{w59D5E1OM`XZIHt<>TovDtltgCXY(vO082mDUiq7?NP!FKG1*4bdpH zu`vh5(IJGV|7O0eaD3o-pXnCF&SPUyq>`D626q8kG)1lzCImZ2N1@){A4bzS(YsZT zi2y8m2!rasm${N6U}J|L92{sk_F)^*zcp0?mMBR$E;olV3!p2qvy01av+^|hPOfA! z-QnMA9;*OfZE6aW$&b3P0U}TUsyaX>p!+vh{nRjRt<4P`5MhY|IO}mR9wvqeZj#5G zhXrlrXKK;h@0pkT4ATFdr=Ildf8nY34eJ894@&!A(^OPdeXIt3u$WEBa2m2UOU`~4 zPOHvp+fEA;3qQPPNjB0xf78(c($-$rkXBPfq)#iZBv;h!#9YUeB+gz~XT?61?rs9h zsoc;o9a7>TLYOg)6HMvTg*W^wZ+hM#(g_getC$8xV<>*fUk9yWJx= z=Uv~=E|+#!Hx)nqgU<+MRzVHsV#fnXcI_OR2JO#xB-3u8Zr8ZMlT-N|U*|YVU63`< z_;UerP>f2*OKYB-jjIZACDmNVkjyVD31`^lF?*qxnC<5CmmIYJ0_OjBp1L_mfpcI^ z2cRu$H49yht#F%X2NAx~jYt@Nh9kD%$hk+$gFV=s&Wt&(fFcExgkZt%KicO9AwEkV z!Y8GJWdGDX5zOY{4olBf$>(OYb#<4&@Qy&+Z~TFmtk5IN$^3|IAUUq1{2EVSY)^D( zHqi~%`WNVhXQm)}Aw=zqcM{oZ*y<&tu?-}Y4tM~L;B<_2{h;9>bo;z6Ol>NipXZ8Ddij80%$%gy#?&K2|4(%F zXk_<&X;W#K*y9d3@u32``eMeTmkmJU3R|h-3E14D`RwXBvi6lmuekM&&|_oYi4OC~ zP{(|_&6{F{3gky7fTBi+@kQwDL$!L|(&OCiRVqfZde_R}_hm}3 z296VY*Cm}_PjZ1ve(eKE`lkkYrx@+eZ*=*>sB1r10@_3&!jJa@NYQDCB-l2?@k_NF zp&|;N19270baanH`0e_$x_$Z1Bw1j%EmTX?eU)^@GMir&k^_2> zc#S4E^0iB)Bs(%iHH8*xZ}rE4j24-3vTBfrDY^dy8&uo z+P<`xQ`+~lWxpGrL}9A?egFPaJZt!m8B~ijnGqAo=`UO|LubB8WnZ=lYG>!BV6qn! zA2((TjrRXQ9ltFDjnC8gW-+Q>7QZ{?IE=yM;R-u|w{v;R&f&mTV>%ChbBfp5HEFJS z$ba5(%5eD=zoyMo!3ixPvxmr=)v~h7I5cUTXc}Drq*O; z>*QIyUVci%oNi{4%0CnfOdPtw{~5-D zH5KYEDFOdy5t#z__p`&5*D{S&F&|M`&54_uj+YXTRUfN~wXq+DLoC=VXOgs*eA-nP ziQb>T;*+`~hp7rGxGbFfwEQ4+-H86c)X_-v*2#m0__dj%Eg?+j+d9^2ioed?nrt4( zFf5PX)pVe-QWIH~8adWjbD;jKZtn=9=xEnhvXajLz~mkJJ>>?=Gy0vsL#K?fQX4(V zsY`B8Y^CpYheiVM8QE8gph*KGy5wZ6w4;HAog~gn*Oa_l)Mn@SbASry5y|lDcG~vKKl@h~ZUjilLC&{*% zk!XbpH{zCAy`}5pa*2ut4=eS}^hd~!K3qZemrQT>d1|*D&3ls44x~suh|^4+Pk4#O zGZ$)iup0+62yybb1Wd)>tJ~w#TDylDuLm@K)!Yeo^sBDI9yTOoFYFgI`mF_CIF#CX z>|iXqWN9@$vDxu(m@%;_ll~Worl=MFp>@8mj_?;$H{7qyZ)J!A3-QsXf5J#6NI;mb z?m=9i>ApPEWVb&n?4I_8{dzA~XAVhEgiUX3l0e0t0kn$zP|OoI@<1q}T|Z?WV{HQ5 ztOLsjbzcB6Avw@LIEBrN+Ul*S`Lsy}RztRD2FZxksvn1^lIs5@Z93H}SdBngh7n0V zf`M`OJ0%8#e-D0EAb)`B&;VA&yYxG5?HD*23bPRjPAPETW5`p*^Z$e z{LRa49|%Ku>h{9xRF0-CNWm2jk>L8HfKW032K|5#M~D`ho!RaSO(-lZgz%}&&)YtB zEd{|<%$NX*fS^rd)oSlYo5seE72+nQ^qW(hJzUeD@?Lwb<(386OVs07Y%8{Qa&b_fX?x|se2PiXTc3h1D@A2 zBA_I(Wl$C6?r{LfvZF6Y8hf)200Ily)>&!s;ugA#+-srahnz9q)$ooro1Q(J6NC+O zh=n6sy{2knH3jr1zLSgT2KB0EX7+ek6JS~h(R*f0?~2=%A+JUGbl{Omhezyd=X2s@ z7xu1(J~1kutAir=RA+zRZdJmAG8^Oj2{nx~F32<-yI!Fi3|8rkuBPQCErayjBzwFh zB*;%J0oWNL(kpGE<^r~c43?JnpxmDxdP3mBE@5zkg`+rhmb7c8lnhH%cCEC_uk8A; z#Wz%Y@b31VykVY#$JT0Sj^We&kjHzf4xf44r>BXR^^}A+w(^`))26T)+J;0*v9-H@ zkezNy%DVlkP~jBtSxN)mKtk}%n{KGo8KQH(GDk<#j`3G-LEE~SXWlSB4o^-a*>>Nq zsM7nY-S|n}yh_X-0R95JQ9A1lJ~j>xQ_SbpdwWUPx>`&6EP^v~IVvHY29(fvBXbp6MMEy9$?ua?ShQ1Z_H-Eg>e;Sx9$g z>h_EFYe0%C=Y$7m($^z3?}Qi)6bL#17{bv)(7NPSCdjS595vzGWQ5>5Ek{(7#e>s$ z?R(mWPZfE?jQ?%@?FFw<3$-2-x`$iif{2FZ9>5ds`%WNunfMbB?u$g>M(ph9pLhs5 z-h=2F5^U=@rw75~rIW%5qN7XW2ruAz)Q*^j)<0CCaGMA&QOMjWd>>JrY2iR5-S_f! zSVLZ9%KkjLTNFt4TTh>B9rT`Kf>OC$$cCqP3)JQ67LbNbM>Kx@Rkxtkb2w8_w?@}N zbF_DQ8VL~L!XTam%hM4EGUhj==wjS87&Tpn;T1C8STICEdt(XAFE0h1lMu!S7Rt0m z#9%SUc)UA{0x-e9y}iCPI-Xzwl!t56D*_|%x8xbFZgQ@c`=jup0IX)S{hC2qSZ%$> zouL@#{WPab7~t1BcDy%pBcp<}%^wp{U+YX2f9DJV@t>fWSnxdM_=0ydd|}hFm@LX4 z$tONQQMU$HZBK$@Ij4GcSw}0UhQ+&{VZ1O^P%5AYOU>e5K8$@V6kJdw0=XpNG+~=%;J- zMFu+*4(4;8oCs8NO_0gP<&^seDcy9{zJOjFjMHuJeC^bpnhI`-m32-CLA3?{lJGAG z8>$eR{V$=FOl^m6Oi||(zp{*v&VV@!KGb4g;7A|GKQa-vKjZh`FLlXTrQ0Tq!&o;2 zpIP_ei+ug_Sw#@(Qe1Dav3##_j%_|`o{1`@5Q9lutw9Oj5gZ)J36xM3W?OR(rgLBLpGk1X-s7J zmTx;U=1S=YpuGWjJ$QHlnfWn-xYB*(jo;m&-;RGmo#8q56lT12jU^5^JMVr#Yo9_{ z`{?L;XpB&GX_V?!gVAk3U3A|fuFN|@UxPhIU0X~~Tu|Bjsv}T#)Xn)cQ+-CM z=kHMy2tD?k2Br={o3%-a9Pni`X=#EJk8t^0bH zI!1F++7-Yh!{Bb~{|SZoki2n$@UfJ|jAWHlu_RQ-Ayfx38*fTbrq$fY3z zsHgsUbSx>3&t&#fv)yG)n*QF1DgL$BJ>3vDtpRA-sVK3{`&;74mDLp$lR8~r_^H>1 z?WlgaIzA(RcFNK09eG&Ve`K~hqsg(G+OX4ZGNn$dSB`#AVph7nzorz8s2 zAynZDS;IVpVqTf`9K6iIE z$MFMT*0$a942iF9CY#G3>p0uQwg#F8xIY9O& zgfhPdDOJ{7^R4cUA!v+fPAoIU3Lu^i$>@y*s$3^Cf%~w4)hX$3jwWPb)URP7*J}um z_Q2eid4ccUV*2N8w(=*(WtmZa#+{+{!#0A~<~yND+sI=BFvoB+_jha{Dd=#3WE@{Y zHE-6sk8j$hoZPino=)KXi_$F(rf2~SJNT^)xf*b1zc7+b!ts>~pN|$?_N}??Wm7yG zEYg}{3sH%7>8v~*MIjNwD=+I)Er#4oZVwKlD=2}pzSZA4Dc-rzu_QoOAxuv`R-C#Y zH0~<;PC=_o7*U^;&V2SaHjOREJY8b$bh{W}THj_A?2Ap|CDpy`Uv~7agVzF27W%X# zVc1+AI=kec%>Y^|+DY)ZFruJ=*FD}qAat2;BarURc+HiyKkhaQc5TBonIJ0KHsIXc zoMw-)L%%maw4xZ-5cI)tL*zKXDKBz9W@1GiDHbJ8Z>55}_ymsVnl!&vAgrPm5cFa4^!>>a(9$Zsj_( z7!5y4HUq$K17Y{qB$uM_;(PUWvI8)1e}Rzhf2d8V#8`K13&Zo|`3MGcIGOcHZEY#Y zE4!EBImjbu$#sQx!B_a%VnwPrvY-EB6AN4#R8-||RL#MqqnC5FX@dnPR)xA{XGIWf z2qh~%{$X!J;$s3{zSk_OJ2k_XXQE!o;?4odsQ5f|_ckg7yo7rNyr-IrCdHDyjBPnN z;8X3DkcXaUn|nW+gFC@QpH~~)WR~A{m~RQ0E=Q~eudiQ_u5^#Q^e0x{3*ubwS^qGI z76wNx;{B!iFsHKh%aDuv)K9$8wuv<}*gmv+U-9bpCr#i~Xvr|%4gwSZJ-DzLAB!-O zv15XZBUB+q`nX1?p3car#j30F`e%xHQg^wZXlch-HTQ`qCwm$qB1&l0wzvLm$QuZR*3E3#}csJGDw*Y!{iRKHnG2>R0&`l_us+k^{U2 z?-jB}bO(?lK*dmGBuxXBpY&2uafi~!b(pl-p)%KGLD;RA$k~t>v}1UPW`}L)hny3m=)O ztFfGemRl?LpDYcOd|RquxB}R^TlO9h-l5ts=jXO_aD5}R?Vgdnc0q>J2#IKs)*dNa zf*gO4-@`yaSD{Q#hu82PAhe?8of$^7I(=3NQzs`28)-zaN^>AzmF>`iq<1@Rjl}6G zsHjVlBM?5bE4Q{ninF<%Q*ddS!)9Ptj}r(^F&g41X@_@pxLIaf+|3VG^tI;>L#HS~ zo@|HW@VHTFPN^jNi z6D&4%t_74&DJuB2V^?H=*GBy!=Y>51gN)v;2zfiStYS0rhMI2 zKN76VF(mTASmMekdz2TA4UEW0aWtDFgBEM4B#sBPDBi5V$i^?j7vC-3G-}VXkVt{> zUL4$U*DnWwz|((90DPE;bTwi%a!sw_PJtumPl;de6}xzl+?LoI3Tam9Ed61W+F5Zs z(i_8esMzK7DmHg^RaW7hEH`x1QRCy~A$c&){807QdS!x$z9$y(^~YfJ7NBO@O3}#S zi4w8PM~2_0EONV{@Ng->#E{y5rr?% zjH>+{V}RA7?{LsrpNs*~%M7nQxfZmjB2p;0#%B-orS|ZTES0PhXs=A0q&sB%n$dCb zV4i>x1Zmdt1bE=;;2ETs2O0%a*%6_NWErUF8Mr_cJ1Ho8)Z4Wz<<#EH-2+0YX+!{K zLTy#Atnb!VLU$N*KP1F1yPzesgk*|Vs`XA#mB2punr~a2LZzW#_Yu<>@hEQ^<7X+O zq%`AnNVohuBrN4SgkR1oqIg+f@1VNz_A?FwAw#<6=*|3cu`4pWr9o{ zH=V)foKb=C{-AGT!??Z%X8Sa=hXC@=B|OH#hYti!;zIliwj`TLfUR&3va6b+yRf5o zQ#Bh%>5Gj~fOg%Xv&l@A?#fa9DXn`Iqm&AFW%K0a@tbX6-fsV<(NSZa0A2%l_cf!c zdGMUe<~DewZ-4@Y*o~uP(0KO*ylwwvkzN2uO(5hK_q0W8ZtbjxNtf;+|5Sd{fIj6_ zBu~6K@xtR>d=-hs^(2|^lV;PR1pTPAmhQ%OVp-o8)BH(C&3vRrE;wN=|8B-QE6{36FY)>=>BlKsYD%`C;h*udJ1l!%Unti zRC%EHpfxia2|v2LkXiKMkC+pJkA#f3Q1i4hJ?dXwX9@}+q{C1(yI8CDptkTD& z9iXt0u#78eB1J*?u8;L9L#ak!7FxY_>uMe{)n2xRNqQC$*M6Rq7(h_)s+AE6BG|+|c}2no2upz7fRr zP5bP%>aa^cjBO(bNlD4o(`gr=(<87=D9Q@+p2*SigJs{c2*u1XSpTxb@Kf6RuBm>k zk6Jeu!@YBjad{0JBGTfQi?eakeu-&#_=DrPeyq7ir)a5$mUJ9{sa4aYfCmK6J)k?o z+L0iRZGNGTzp12r`4Mj%ises>8__jFeX;4|=4@-lx;Coj>$APE6a;#v^qQx-xBi}ksM5B$8gkcJxc=_@C)r`vi@qqgOKxoIAC zPWu-d2U4IRQ6t^Xx6>>`&DBQ@s#?TdvagoFQs#{4>%ky)B2fpcha9hT$$jnb3>mRE8d%uGExz~F#(2*R>paicz z@Y-K@RZ_ESv8xxKPyXUJRvb`2HW^+y(i`qzpHQe;;$%a&1Ll*v_b5&hMMoeuhPobR*8w;+uTo7jjd39Dhq6t;)I|T||X=B6p>s zEv!UWdot^Wwp92LKoFH}Ky;p!1n9O{Pl!%i4g9 z-fZI4E5piHnBXNQIBg-g?(UGTO2ldF?E}?&FL$IVa#gW*JA|6$wSj$Z@T~;vJe@EB zXqppt*omP5#F+GuSWZ#;Hn_V*MjKZW^?^rY{5@Q+;Mm5i`}PNeR?c6aG~}RVH6Nh# zjQVtTBA3O6q`F@8yf$tEr3R^1zc#oqf-cy4<+E$XSR)#pF7O4h;5Hk{td;itCB*MItgw_5y_|hbPR7Or`^^jkGda7b3dt8I81!n}^ z?Z0@#^S1depnnlYPFfT)1A<_sWmAy^Xf&g*@;>0$ajf+}3yXH5B@7$Yc*i8bV^if- zI^OzIF68dCsZ@>vpS>}mrWOC}nV!efMlPx>~EjchAEms+;wvA&0pZi83i>n&Ns|g!&a-cif)81!* za?3M6`t=h5Y*Pis(%5uTX;DjF1Xy_0kX;tn6)F}dXII6X{>t$ST)zF}SWl(u9jKFgl-rk3FJGwj* zAdfk;@`Fis$cuzm!BKfUZB&10mwo7RUiK(jwI{!_w6wMbj8JM56ESI|Z>zen?MIFv zR^U#(DRwLya_;5fX!;9{Mo5EPN15A$s*BC$_}%+nL0*h@D<&2-*LwEH3urDc%f8g= zb@wQ5dAWppTekMxyg+H|OOc>cf?mV<-)r%-X~eqjlU_E++n-R()6?H+ihS&Z_`?R6 z2IMdcAF%~RULFS*TM$WaIwD!V6G_fzjB(}(e_=rA-JpgkNLN8a^i!D!O=}z26xU_j zbNGh$RlJ1IehA9{g&C3A>NOab--7Pto4b#R7*|QBV6dQ6DhDe!Y6sfJ=B}x=SfXGJ z8l)7AsIxS-MUA~F`n5$&TYs%M3$=dXbRjE``ZbLP%S&h*`$~E}IqwDQtx#ImH5xlD z84vBZqfOC8mV8__cUKfsnF`>MXmz%KJ7zV$Y(8Py%{siZQylBw$x_r=GETQ!#)+V9 zJ9KIY%)VteaV3Gf)L@Majy3kK4W7nnGp*VvDZco8Iq`z! zFG?q>Db={VgrUq$yhz&8y4@-X{HWKeuE<91rW4JG$;lcY{Q`1QerG}f$yzjEl0i+x znT0|J!S4zbsGQ1zWjfG>%>fx}Z*Z>}V_jyRYX?tbu%MPH;i{y<^om5k&K%fWSP?Nz zsv0Y8q4OdxWYDfL_S`dkbsNx>a;@Y-M0 zd}ozK344?3IIj#3Eo=_vJGiS~jQi{9Qj(2R7i|z0bbmzmSp)*`6*1_W{6Vt*&XuN2 z`ZbjllvHEgTQhd=hM$h|_j*QnByr!#>b-eqm~}!GlmIZt#>jzkrTMs-^;hoxh#4d6$dKC_={nH5f!EMF zB9z2c@((mX1S%9BFrVUK{aDYQ=00!Emj^hvIl!?kbL1En46&`>oBdLmML*TZSpp?l zme&?ouYdG74_J&H*totlIY8~@3D;vWb8tt01C{Eo-?cJ+x`$h)`ejw{oe3uF9}&E> z6qIUlKtT;|>r26Z6?)lP;Zqp=xa%j{JuI0NTk008W==lWpzT^ibMlMcO9(Xy^|dz`znbWFP--XH-7EBxO`f zu~JneP@PXfdQu@@b-LAng^ zPry-G6u<%DED@Xcn*x}zzyMcL&Ra_SKbJrQ4rI&bu)VJ@K2QlCzA8g(dCrFf0kjb- zr0Lkg%M|wEzidPWXW$)i<$H=;;P>nK42by%$4nhvMYy=+@N`?azNk-#q9omuz0i-7 z)litV$v6F-E-*r&0%6+td~bWFKeJX23l_Jw)RV7Bh`wWMv6At&g>1gAkBAS1Y2K70 z89w6s^ZWcD`Gyv4nT!=tBjTE6RwE}H72sr;Udp_@y0k_@jkT`N#b2FCU(~8My*)`m z38X{OG<89xGRXU@wQ}euCbETQM5O3nCmWDSPw`e2dZZ+Aeo0hWlQVG32SX*4$PoYq zWvk({p#FRw1V+OUbuaHgl3dWYWl8Q_vxY?exX8w5*hQT3CyVvlh1vB34AR^Z!ELC< zk!fVeg^Rg#%_XKA;rEfJapxe+x`o1c0+jPd$epvH;Ccqn@M9QfeqU#Z%gWr+tGFvy zbz))IC-_fRdJgMu^j3*xKIc_0X~rXH(T z5wT~(4WFzC_Qx8MGcuANic4+CQkiap8J+2vM+O9aaJS~^B9T1tOi=pS`V zTxwS1U3TU6aF(m=oE*&|q0;F#d3(3u3%|^sx19ni)71Rht_? znO9&!l)ry*{ZDgm3}8cKlk|Hd$J1b4tt0FDw?6-$vDAE~0j5&=F7j+vmwVmZ^3kBL zhJ#>H?lXOjBC$Cgv`43#Z@-pn%B6=NJK_lGb4LP66NA%kK~e>O?1i5 zio#Xa6@G8^@%`Pu?&JNq=e*zVb6@B6e7;`iHJZOh&gj_>?R+&5mAQrr7+lT7?ZBoV ztWhAE`` zA$majE*g}67(sW38?)eH>?(hIbl zMaepF{c;jq3CsjyA^Cj<8Tw&aOoCN~*3-Xcdh-RUq`aMd!ux5iWDb!2m?hbhJ-C;y zDdzXHuLCzMcW31p%vmN+8R~*R6hdg3PtW0~)WqYCUUyJ(e{E!s{r}YO)Jw!vo}Qja zwhAmrzYsQ$tw3J9KR#OuLa?BPi{y=X{%L9+k_!wC57vd7_SQ(<-B%FOTB)9Y5Uhqx z1cg0K8t(et^Wf@)x-v~;Z6e_7cDzGnbL>!SO=#O_`IUi39J8P4ZS zr3J8JbOHK?{y)5t$|8!X>Fp6FITzSbUN!JN#axm9rI!mb@jRDfXFrP<_{-m5if0%W zB~yH!mW_2JAuGACtmiy(u08;ek_dBwG^rQOR}C-}|LsNicQ}Fq=5yni_x$F z@(|`6js2yk#_Wvm(OG+;+UiIt*(f}io8~XcMU|jqD0T*zu`s<+bI4kr1FzIT>I0u}Jnt;8=;B%C`ItuYw4} z2;F8CTduFa{~@9%Tl6zN(LU*bpE#J<1irOK{l?hMgEjx?fmSRi9 z9lxl1wGFpEU1WT90IUOZR;ci>b?%|f4a~J)rLr*LtXte57+X%xhhg|zW zSq4waldF2wD4s85$do-L@5b>JfXf!o$YVx@nTZ+u8tGf%G zg8R;j^_<0KJ2dlsbzuCQXG5WC%=G23GTHu(qRK}7NCZ$g zan^K$;`*vPG^IXroOoBAlgKi{DwnS^JQ)Yb-&61;ASDGj&~=V)Eg$TKOk-%Gud1ds zL=Tyalr|nUzP&Fh{!fmK`OgT?tErdo8N+lnc`CnX0e3a4e5XGnkaxcmQv%ufDEz9~ zII8l=VP1K>()U>W7f2&NNm@S9X;;i%G90!SBCZ>;Ws7QUPd2)5+Y)hoTG5AcAx2>A zk%#08|L6)>&kxwkrRJar$IJJmNkeR$9cqA5LCXomIsKVZhw zZ4-`GX}>`omF|o#!}OdU;NK=_4m>p)`Y4!@loVFl=i;?TAmzvGiv=dS`M(SB0X^>Z zZtuZwk9y@cvWE+~QXK5%sK_Pvji1C&!}>|H|0tt%HP%1 zE>}wTc)U8wI4#0GYJagu!?R`!$CRgpEPNbv;b{L#x4_&9!URPj5SQ{>n3gu4@Y3*J zpmwT=zyCLC+O1=@_1PKvwT?8C_=dRCdF(y5nx9kLpLLmZCx}v%-Xx35G5UtZ4fqugH?SUD>^)M%kTp@uLdOywi}fOuouoe@@~krb0qf;g71Am6f@kK+;r0p?Ww` z4?1sQd6`J;gSp>(Sp>#$<7(aL8r)r0e)V(n%(vHgKnn&G#8&)Bz=h5QuN5Tu{* z7-?CQ5OoDz{&QihfX4EuWPWG7;fIvMW&bJ5n-kKwR9pSv*ApFIVqCa}X~1g0LND_c zbkxeK+E+UX2j|_OHjzm6sG<sx7ZANp)1N*7MixVV=9(8f3Ac8jBrBcfJsio*Uy!JLh7D!+!0i*@*@@Ui^SD z)PaDfjk@pJenKxS|BQsP3hHe~9?QsyPS5~uZ__76_hZzS1+XFLf!e-G_`WK|n$&NT zgE9-Bl34w$UWlb#^)1&_XhEY@*BI*!q)KYT2X8WGuBy%?Ptyf#!W>?MO<>~5iR?+N zJ%jnB-MlNA^@=Plt4J*VrbyC+q|{$`n~(h7JSLJN4T)ms|K$dX;s>tDN*yZ8q=T9W*Dr23;+}@Q*ry z@{@rKHJ+=)K60dGckQ=%X2@$valY}E>{7XwehJ?BPPyG(tz*N1qs?oU`ealweCzvJ z(fd{qhi`jgFsYmCXmLkN#rANCh1{%s+O}D$d_QRT*bw}ufk-5jJ%TOwbI+a0!roy9 z#QqX;ezRqUZ) z9KVMuS7I9Vsn^ydPM;-^?vd>7wztHGcIL#+2on*F;{r?n zouMoIt{iPL7`m={0(JFl_EWi*BYU;PiPB{cit(bOh8K^iT;^yyxgS%!P2F2dg9mZ_ zeyLJY!l4vEA7eh`wv8F#!OvdEZ4$d}_lO(OoL2q^e=EEX=d;87UJ=BHHNvJu`^d8| zKkKSA?WIlOR-n4s&}_N5e#JCHrPi*}K=bW9$&I6(<>qAVRkJW(;Cvx$RKQO2XRt3TWmr~uzGcHHzr_45gOn_ z+GKb{S%kB{!|I2`PrhbfvoBj6w2*3ZDdQ8Vu~laO1e)p73zZFVfh;T~j77Wj#eHo$ z0JVJ!4gWjvO;? za>t6&uT5f8;}3+*2Il!k1Ki^)0PZ2oM`BGsP-pQ)Yt?V>AgIrVnr4$qHM})wQUR#y zdzwP{tR~T`V%;R7<$l7O>8ID7hS6@AU?*aupev3{e)7lh+Z<)3p?g%u7sK`qPD49v zja#YckM{3WUWjq|7a1hgEOknk>TcyFEtK*(ceZoIKc;1?tkH@IbcmpxXcY*v&4ER% z&)Iu_x2Ys;nvgPwPx5AI{W!JPs#}f8421I_@r9@-4{J6${qUL!O6#+9eehXfJpec9 z!x+JKsMn|aTsE<`;k`0u--dS){KYOjve#Ja2an?%>SeMv+^MtzWw~bK;Ku_V)ihlN z9}IB2V|Ok`Lm@y}p^6{o&jeOUrC!?dGsAKLZd znu_InqGr?bc7ms%gP%2Js>hzl3l5r*pSx@$WcLv_3$FTw+@z^iN}rD#G$@r>bPqzd zT#8c-;q*zy(W41JrR+EPfA92fmY8b3=-!&U55W~(m&@&AAAcG+|10L_JT|pqsz!rUglb9#NFbQ`C-9wI353R6=TmR8KnD5p+lJ92xtwD6AOtwKgSxJWqE z`GR_Wq`1JTt78hnyqZEDEpFk@nojfD^iy?#@#=e+HquV4dSY_4G!2GXbt`Wc5Ay@l za%DWyqe7#_^U!zJk`fvMXlmEV)kT+=Q!!bee-k=?6$TyeTzF4E4SrGL`_-5P&Nf(} zUSyZ@^6-!xLt%k_xZAlA57+_pckBS*=-0sJ2G>Xqk!;-_v}@ip$Y)YdLs84s`)+nA zIct!8_1RidaB!%Q!Mz`iyrCcF%ARohQH+`mV1on%{4GcAq=7{b%s80{>tnMsOAr;)mm!r~0V!=k>=ipuX=Ba_bu?B6 z_;SR~?;C!$_rZ4kX5GbU8J{v~@#P1#y7|7HmA6HS8A`W7{2uXeSNVdj~=*&k0uH z+^nUo#!A4oP7jmvv#EvH>Q_1KC{k6FWl`hmy=cdQ^eyqAq(F+LEGWRX)IdA*^dW%< zBa`DahK!4~DLG3N5H>-E`IL_j5)AHd1_*XYbw%ftu-S8IzANV3&3JNMP!KgDggx|1 zxNl=asMl9vJAJa`YQ^Z8?GX?DJ7cU`=;_M#YYVGDa-4!9_|M}@$xJU0F1$e5j#W9z z7q#&|%@2Q8r5EMpg^$R@#|&T2%>}H1PwVrP<6##&BLLo-`bucNx<#RS;v%_L9dmX} z4lm7w>?6*{h?h?&|C&fr0Mq}x$z_83oih;~!W>`P%z#eJp76QO`q~(bQV#6JSDG>< z3|0tI)nq1Uv2Y{r2HcwFgUlpG2nGh<#b3KZ#e+Ti9RT>=ZCk+&w$c5PCIK%=!*Z7N<|1s|Hg+wm)(RyahD;?Gz^rw1zC1!8cq$v~I zgaFuSOP5Lt-nM3%jcX3wJCUqt!R1On4#_D}@e<>sVz@QDShtj; zITvBzwu*d6m0|`A>`(GPux^b#|1Vgah@t02=-QPy-rtopdA|aiR9u7M zNMw0@+0~B4Mt|n`Uqyw1grR?NA^$;#L=psLM7|SV_GWmct;# ztV6qe>#9sN?254q)XGJHXA1aC+C&wJpCH9c#SNpzT3LrW`Re)dPgUV@YvlDpQocmM OM@Pc|QgO@f>Hh&bwCG|0 literal 0 HcmV?d00001 diff --git a/nginx/img/image6.png b/nginx/img/image6.png new file mode 100644 index 0000000000000000000000000000000000000000..e1336d32b83424f1af16ec8deaa19470eca26cce GIT binary patch literal 68381 zcmZsDby$?&6YnYt0@B?r9n#(1r3eU!igYiXN`rJsF5MD>bSNECOXo_nbS$+C>|Ol+ z?)~fT^8n9#-Z|&YnKLtI=5uC=($!YM!J@g%} zpGWTcD)NBpF={C4;fb}JmK*?37ms~w`4shx>7r`v4glcxJp4Qwa4!3ZYP7U9d;>Ia zvUSn20$P5w1X`ln002M64-U32y3V#vKzBxQQ$I#;MsYqaMjzDg0Iq*eqJsSY-)BKS z(f?8WNB{6_7J%%={t5sfMb#AL486?{axjC5`#O+8ZS|~N2Vc1IxbSj^evlJfFk1 z<`EWM;w6=St=7JutUp_H8$`|WF{kR9!WjF|tuPnfHH0iQb~fo<#yy5)J#Rt z`Im+K-k6080fIEOjk%&oQzU+b&0uvi(I=*uf9DT()jW*bTE z?3`X#+tM8_q~|79u5NXdH#CH*M{6hrsIw79S>OR=y%!fvY%Sc0gkl0mKz^4;lMK*& zh1*jZHM!5LalX4j)EW+h$Qz=E$>}BhPX~L--YpuHdOEB&8~Z)&`C_AswBsO>FBdo< zlDC~|Qq}gfNaUa95ejTy8LR1jW&Qd9GAPG=*<`N$EXoy zNy$aM@kz2zia*4z5UPS!Nd)sCfrf9$C#7==J33+;oseHW51po^*LF=OBQ7f`>GvMl zV+K1+t*-LG4`+)I+&wk)?>>&>R3=CcN{X@v6@9~a;8gYv)`c~F00$iW>khp{i}__X z+0KwpM6rJF_ah6O#3!<3dT-vaAsivA0S!7>K>5G2)Q=t(nAJ<7F1g~=RdMgjd*`wm zmFxOGIwrb2sOt_!3&`VKsDT9Q-p%6EXsL%xyd3AqkbLL`;8&{ECG>nIlT6I6DY~1& zpM52(rwq#v18hc;9=$+IAUY}IxfN|m(@sz<`1Qq4uLgsS zBjp=^1uKyH-dq#iks{iJ+IlRTRgIrV9`A#a(lb5b!IQoXwp5dd0JSgf_KA$Y$?jP61vV-5kmVi)22>fv-n7SjhQ=i)eXCI>#Uo=23*W-BRphg zqr;*+@+O4Nj;>%sM=Wuy118zJ*L`dU8goAk8Y`HLpsTo|PV2hnUvZy%+_7^~kG$tK zIlVI4je^{nBLMgyHS3^Q`0Ll;4Lr$$0OB2U-$#cIHhHDFxAm8pD!N@;=BZUcwO4FI zYn;zm9#$l1?e9n^b+=Or%ayU#By~;ejZbz&H^j@U+ZdSSZ->qLfrLjok4z2^rjz01ow;Zgc6o-d?fSDgn%+9L&T^=SLheB5>n=ZBf)DrYS zsUYGi$5!DINOvAH&r2oPubQL64!_GmN6$b;%wR({9-fk@WSv4=vOog_TVih@b(-)G zQ5qgUmIo!13Mp9ct?&OKRL@1x=(M2D8HO*uw_8}m$6p()-lY0ooF&EA$Z(?A$XvVL zDN8HllCCNs3Z0JcTXok3dMj*iq`W{U>~fUmQs^)lbQ@Swdr~&0R+>|F1=!8Kg8jAw8>C5mC*fJptec~H>=Uhlpn3akH(?PSMKx z&PMoRZzd*C?8?b*d8X{c4(_eP)8w!Efr!`{H#m(>{CS8<)=|(|liq;KTM22MHGx9? z+aZIU?h}vga504nd+Z0hIuG4-0d-@e4G&ETU*b*%rP;?GwEdqQ%or?fj z>EG|67M%A=Ds*0gu|!{@!VFrK2&bUsUNuOFJq&r&90P|PD$GIPbikf?=Yr@?lI~+N zelFIi)nM(hU+dN>*A$F_(nH}_J`F>fseZnbNOjlqVT}>niTjX`)JzHC@wabb=XXtz z^rfi3Zd$9A7C|E{opIM^1e1I(R0kg=*c;+ic($ys7kusfONru0RU~;lmvH#=pNZK; z<f;^wyd$WGynwVL9bTYg0x zK`op)>~|3zcaZ(^q7r=K2feX!Ylsaa#xCrVLKsoHPCUy9m+6uA>xF8quJ+N2>Y(u+ zybGlO$epMXO3*5;_fh=`Y`odnz&3M2G#;M4zgo9QZ+R;(&Ub-}lGj}A=1^ZgwJNXV z%F)P1Cs*lG2Rz8bZ7=8UkAAD_(&5rfO^1>fd9kZQniZg9!X-2ArQHxP8)^) z+%I5~IQV1dZ7=hN6U7pfd5+Wgk(3)SN~Y%*BNSZONi&+RlCoac=GwISn4Xj=`VD=Z zuF3TYoeea}dWtvgM}^rxJ^+Jc?VOOO+$RaRVDa&-(N>Y75i4)Oaw8w!yauM()| zoLDu*N+mt%2k1q)UdAv2Y-TiGk};Ig@cg)$$L~)@?N9LL-z#PoM$K#oq6SItl3x8h zU4CrZk0B1JeaE^Ldj>2P+Aa02WIum4K@&FrCNePjljpu4FgWwx9MDV@7{_vbYyP+U z89C{z_VIDvu+Qh)ldQ=#X4SuOd-T`oX(f|310o1}0*5*k*l8E2H=x0W5658Am(t2p zzogsT()V8dDQf)M)u+XU{ov^IJ2EFeY{?V;H7MgrSUtiBFO7+J;obPE6bzac>pQOX zgEyO-lRf!3WP$t4flR)vmQS9gkHyejU){=Ti(lKofXH#FMau~dpwEixPh-;g@mi_Y zd+xyYI2JJmM{keQX)JTWj&%h?)w1Sr?5PG81*8p9&cni6Wh-hA-U&W8Dc!;ewFuGpUH85(MC z6&D-6HsLvbK^Al8-O$ho?hNp=b)J%5WPRIS?kU_6s=65T_gx1DVDOdn!Y%tDNq{89 zw4fw=Rxe0b=8WSbkJ2zG5gGID@?WGf_(Bc4*x{FfeK?J-f>Po&<8#2o#mQ*=1;}B- z?_pxpnW1ZN`~#WXE8BHf=2f%miwBsX*_~?pa=AZe zar|#+V33A7*-DCtd)~O`H!yv6PVhkzXYvK8bIo%q! zDmM&Suac(So*s0()PM)?2*{I2zUZUAb`p>YGNfiN;5V15smdPKIPGKx_)@lmw^lp+ zY*4}K&&Ec5d(+B5vVVe>JtAUCQ4h0$E>(Vsj)^HRY7S*gjKuxN7HYS1r<`q0bFuhxb%3OP*q%?hY1pwj^opZxb`P~#0Y z4h1lHb?Tv$3w)T^q|CX>4pEmp2cBdDJ0%2GrEKZj&Hk;$_=vhC`aV!-M0q5)P<=?;O+@lWTGN(Qc8gR$Fk`?Uz zB-^6?oAQ9$awq3JA`?ilbjrKT4wl^3e zLS=!3kq>?>4^bF6KIJzaF!3m)SVKe-t$&<$_z79il|E$y@|}3zHlXz#Txn6n-M<}5 z1nusQmu6n?=>83p>H9z!%^bervV4VwZc7)`osy;TPLUnY#%7sBK&raAERw_T3Wu00 zvEUhw%!xa!C6Q@!rNDzOklD=CJ}Yi5d}HwHWtg|~=SYs>nSUm^i^>(f?qC9}L*v%> zu#{U(Ru&}|L*q%6%&Ucilsj0T0UM}P2Z=_PKy2l>5sB|L*#1uipCL=K- z5r&vLD;OVfY&<3ZAmDpN;rG$ie;)yKL6o{lOu-;EGAp;|bVJJC=Uos*iN@mz1}FoQ zJoMLid{KAzWBA_{yat^)w~4ZlvW|`rY5$ z2HK@*+oTm1O>*$L=XC0QEPb$LP&$~7&WCYP&B43wnR&DTK{lcI16HuhUUZz^VRURR zc;^R6UAkJmvtO)V3L>Z&tF=IRDlSz>QH9^Vi_CWd;bRHs&hG*1?k8k;`H2?fYDU@T zj)zk|NhIoaFS(J&4y>t@py)0|$EO5`h0h2zzj9|X(l`P?jUe?P!M5I~!`f-6JfqZ| zSIWXk#uw59TSoGvE;Edqk0)pxz62y|_g6xnM`Fio8>tS&ti)o|{@Q<1U`SI}R}Wp68a3joql<9O z)|@yvf4!HqPG}+Le#_1Z)*FZ~1uX+5I>c9qfvnPHgv zJD;r?<~QL${7$gM9hTfV4nucr1`>^~qZzsypo~Vn8nfh=uP6mJiQw;AR#EavKr6Ba z1|LQ;b^412T(45XcSG=?gS>PEXXp-Yf~Cf6FRixLN>@CDp1LYx)i{vBG{I9M+1eK3 zE&v?{Lc99Z&e|ZByR8y6!`EDjul(BLisuQ-Q+%v49Zh8lGsw);AjnJ2#X4?J^jFqu zS-Sj;(2a`=F_xs~Z&|BNjUtPYKDTOc2y42k9P9$SD?dQZss2B4&8|5$Kj&TlTU^wT zGS;#wX>yBDk~ge?dj1jNm5%Q`{q7EisQw${Uj@#VtZ+GB$l#Hs*r%?iAgm zv-68G^*#ZuMOR4w6-4$T*4N@JK-~KcQ%7BI7Lz-| zVq`8VQVDk8|M&)n#&?s<_Tc5lZm5AyfxsA?BjCKiz1-*+%Qs-A61Ir!;AmQi?-9iv z*b>Zc6liEf$T+W1XlJ>h=Xe|~`0@@!6-qS`UsqubcB?n{L|l|gTlL8kM+K}6YcK(O zPwvlLsVD|QoXsps=lcFcTwc(Z>vY@8~8?#&IFic9Bee6t7)Ap@XGVW z>L(f85#rmgN$IM+QadSPutWB?DN?ys^Y;qwh z$KMx_(x<+Qi%DedOkzj2jvUoQ*26(}s~NrnQ#+&(Imic@WDB54E=Laqbn*tSy(E#0 ze!;p}cdFwHA~@xh&i1^$vvpf3Z4M-!5e!rvL6%)TjX|C=2;ovGL8cI&Z37YpKJ4+l z{lljBhgi;ox)hhGLi7x4%{oU$=Plw*hXLuUmafLVgTEEYqFpcd=bMM?x@7Lm%xX%g z-I~Q|5s1q)+lZSm0ikt9?p}E1g)be-V!eug7N^EZ+&mFe*wWbO(gaD^JW0JeQnFt) zRoIt)t3vnvCUQ3LBp_pl;}AKLg2OBUZE0ZCBz(cUI5Yg zhL8Ie|GF{jSXEPO*eluhya zP+;_`25%0j`m(pN_lep%#z}uHi;#us#ztd;-+c?FmPypbX~ftZsW?0LJN0kqz(^TE=Yj$eO?p9 z6y1z}u_#Y}OZl2C89{RPYle{+J+4`k8$NS@XJ-Z&Q zbIyyj5w9HbyaFq(o*LZm`-^org>R9i)!G^-Xv(-rNR`G5eWIkpPMR9RBpayDQRyi; z@nN#_PaU5U12V-3Q#8?aoN^}5Nx_tn28G@GM;gG7 z#;u=>xMpMu+p4%!{R;e^{4{`81x6kb1y3S&-$syn*ifr)6uwVT0+$=I#4Buh9arA% z8ZwM!-#*!hFAcFp>)?r_KyByMr>Rn^t)8o;MyJBr+1I|?LAfOuI}nu^WUcCeu7KM- z%8bTlM@^x12s#2=5h!{2WbQUWvCh6sJ_MRIT!uENpInexFp5nzS!FHRB1wF z9bXcndoSk0r6c>-^RWs+C^M~9yKZ)mvze=_vZ8fqSdy_2Gm*QhK$uT3R}N?HCP#i3 z838w8loTDta~ej-qrb&`gr}nt85gJfAlK)xw)AJN29xncz&p4%CBu`Evmh^J&!f&w zv1p07iEDAGPwOM>K*d)fKN)zg7WleCNNXd#2Q!_lBe9-q2>RdQipM|I4T*nH8w$4k(84yF~<&O4Qjo$oB zS{9%0%t%Q~Al1jfxb{uqE{lk@2&54=(&%lv?d@;_4X?luYwCXX;a2x(H%|Nd(7Md6 z&fmv)&|aPA@L2v+rHYCmnLPuj9#R^ot0vN5rY2h299ehidXlx5F35z?Q`+z}sq~t9 zg#DdHh4zT^`6jSo!&?tSii7D!n!9<=WpRy=k0Ieg`^Dks>6(JXM!(GU_1L8-I3DqO zzsxdSS9!=6p(PrE;o98=Pf?m#2)8yhVQTrXp27Ve!xqln+Gwmj5q%ZcQ`W_X(NgnF z_7DVtH$DXGb`R7I@v^5WP?NI5&Tb2_n7 z*^K7E`QNN`25p)o%RU)%6cBYT;k!GBH-W^IkXb1zE^bF&`ssV0wEt1SrTQM=j#o`3 z0~qw!61OJuTSF&Rm&2AUqLT4gStOO%y#2I7rLUMPd;>frdM;Bt=z5o{Vy_XQ``)1^ z_XaL|mLWuy$&M7tt(bMD7e9MGSI^6p)bHFD@j~bHEB`55#C4h23h85C5a{$Y8t-?? z2fQLI;cKE|k2R7fr23M*nDKI$NxQ0du`yySM&Q%cQQ5?VW3G3HM7Up{E(+tMBL3_Ln4p55=b6+)6jhFAE!c=*p zi>ry%siSKb#i|7Mo^G4*ofEnUS4#ijW0=h4tYUe2440>l8`>{SvI&WxP`UR68svU zv2p!11%&}SZOqSnKv)$P+}(u5BwNy?X1B6h3Y9O%b=5j`u(jzb&d#vOpg{+mE|Ev( z9iKVkBq1hm>E4);Hc4jm8x#2SZ82mM&%DPE(^?m*B7eaYSDP9iq&2v*<(_dT7 z`^%Wuh-%U7vHDKu8~=2C2fMoGKO=i2M(9ykWgaWItw7|}Wo5xiY}=N48>?0}Jxz`G zfXF8wQVkT~?r|`-VNK#DZuhy;gIKDb|aitqN$Pt=2G#VlHWE5p!8Xum6QM zF!ZEPdc>pYNn{2Jd4Al{2B&Gg+%|^wG2tZ#f~JEQY216$?V*dv_T2lku5mEL!dngQ zgUOmg=z;qa5Mlz5jUA?L7ym7wE?3KDIhhY?GQK^IAMSgeok+vr38c{5F;k=m)bo8& z_u@#zmuHVHyG4lEoqn;QS@!7*#m-moEeZo2>hGvw^OD-O*LJ^p!TXb~-$(!X4|4HT zyIEc%gXdxM$=#FIVPb(gBs$|+PQ%o9)%z4IJOgIdYx22GZ+fr3lhyM1423cOVT05% z^)`h*C^NkmG<#CwUUTBI$ko@oUMq@7V2_2PFOrS@b3*8t%(+*s&QojCr22IrS@VrDP=mAmg$j2)!`(F zS#+neBU0mqws`;3Dl+rcER`nhyG6wotkui$Mm6LkG>kzKG`j1VfX~j-PK1oMJ4d2D zRg~2RU_AXFe_JZ(xIqb<0t$Ic0+*&Tc`tFgN|EMYtsd4(rUvy|dEX5!9lm0^1J&}H z-yq!VrsAKS>}y^tU0cw~#F<-MP~JI0vB6yeE<#uPOI-#R7jDONwD`iu2-sMbvpwjV z`nFFY^t)tIwdl^$V(EF6F*5&_T1=BSg_z6|?iIO#C;D`$jEtL|mZ?B=gZ-9^lT;fc}>Cf|ME>HdCW~x z3D3i#G~p{?TcpkH9sKoEbGB=osSO>`aE{99r3^3OgQE2GJEoI3Os|x2Pp5QHlN9Mp#+t$#pm}M^zgr|@oP6IlwwdX32Ell!g zb{n(E>Y*O3UiO1=3=yCo9D7keCXqEfJlvq;pLr=X)W;6Con~cCd4kz6Y#OFuW0kn` z$hPsc9a0|;nV%H`+V~xOvB=0n2H)+bA>jl+8yhCM=SK5s9yzkTqE9&sMxkkolk<63 z)WhoPWjZymw_M)LQ7S3jiFsa>mLFwO8fgEO1PqFW<}Wim-R-3YRoNQp}Q}!d9;=)DgypTl^d(fL}A^w%ppR#OQI1*G| z`Uds~jJO@@BjsK#zL?Gx2dixnmx6~gervl2E3Bx10RWVGz=j%{L*bX&$2R&+{m!9- zJvK?T8+J`qT7z*)4glSK$6H>Ni7> zyT5Vhl+4S2FVQQCdPV-U6)s@pr>G3Fd$&>gBhX~>jP%UqidoiPf3dZ5D(UZteOZ~! zjIEr88a((&r72UMMKd)p0Isj6S9b}(br|@Ki~abAcsv^qM?tjt{V~J4-}Ua}Jc~S` z#5%mA zmZb63FkgR3P0)6F8+EbkuH2ax(4eYR?7PU$4n>d#747|K5`s*$)O zPOdksaQ)@?vEBo^2iT1|`I_2E62Op@6#NuNhA@#wl#{)^wOsW*N|3~X3l7N6yRxe0 z21H!MKl=G+S>d3jBS>kq`pXp_u{TqLJN**QF;rzM4$G++WhE_8%zJ zO6-p8tbFJSNHDF9?QX%*egwU#OOsswoP^L)MgR)e-9lxtU&B02=FakxQK~i$P z#}ot4m`PR8Dk{q_BYU8EA-DyBcNJwipiaZruQ_`D!S>G)mqL?cITE&rOGns|-|>{G z^Y@a`ED@DbFFC%?nrQh?_>~RmqsCFSIp7Ry?R)|df;xba$8C#bYq|y*Xeg8yjk+aG zI{mk%=YCfQ`7|KM!b6Z_X+Yc61nP>y=1_%h5_I42P1up}iyAh|vlj{M^eM8+?_7I> zI(#omre5T#tI+y9aa>xEwV-xqCP{xECiO5HvxoEP)KZ`UI9YgWm{9`;gpXTIJKuj6VjYZ|;P--TG| zX>gz8iDXG2sFf5|6cm3t86lIM)0u;#=FT( zvvdh`%e~^9?VQbw$;Em1_7WMW(PZ)6i~mU|;jX0bqM4j^f9pSc5szw6^2RTZ(IN~~ z8ZL>KA$bg)Df2splI@1f9IMp<*JjeuTbcUfCtE`Q+FKM@F3IGF^J?dfG#I)0%LmCI z7+W=)yPRc0$6#31k{A!Nca{61`A=t!7#$O-g;mqKPVh`_);TBjUes*Z`V_`X8V+dx zG3v)D48OV$nVqJSWs(qUbwm1rbZaWseDU~DD#6Vxf`+iM)9;epq6hb^L5wOho$rTF zigcd-E7U=8&`M>blNZudlaKI0q}%UKWhSy~c1Z-sB^RvAC(d!ep`f24*!h^mIcZ)C zcl);UR_c+xI5CWh6IMMocXwoyGwx{|HLDR5&g!wFG13b`d_9*YaESm)og}qx2lXQ35uoM>ef?l%KgTTAV;Ry(TPR!UjIm zkHu^3QduHJc^U4(4S6W-dDs*HU?mzV_#@l~iRl}i;WBUyWYC~0zO zTY1bX$dwdlmp9PhjqvNZj92M;l*R^T((htrnEkI%17$L|>wAd}K~g#*Q-yNi1%rA0 z;Pd4bS*qS`3t^FG1fR4@5sNs2CEG+dl7{VkLq`{|Qs)juX2rKZM!e2#NE{&*DzPc# zUsZZI1$OIx_UuX?KLdk~^D4J)RIS7d(EcB<&#oFI&~&=?wR-wl>U*1fl+{E7k9JLc z?Us0vA+&z=V9exkDk#+Rw7XzgqdrX6vM%LM*_g$472*1}x0JeY5?gO1*kaqJj+rdA z7J}m;nJA^i_w*s~=9YZ(SihvOkZEsGe9>lg#Y?X%Kg5IWK|->g^PQGVqqnO<#O#r} za&mIhEIpYQbi?C`J-8{La<|p5F*f`C+-@XoAISwj22t|a0HiMWA+~fAsVHZwjq=c_ zL4x1Xr-y=nt9&hCilbCO-RLZ`Qgd^2qYA7lHwoAC_CKS%;$!)L#h)#*;-O#+c{bPR zF)Wq|fnNguyb=KLtb&81yv7B9vZ@ERPz~rXNPI;YS}>}!PfuFklx^?H8gQTE@KJ$a zhY(1c;@(Q!>m@JNUhVn!2xxSDTR49HpMKj;BXPGH>$7S*^ zwknkt?&!N`fz0#MrYZ|~a#0CYI(5CT5(EBLE1ldd#L&O6l_{M=Uif9Y+GIpe*$Pj9 zO#@|<15dadC#6vwwbGFV?wbl8Qb7{F?B-+8PIodtp!Yn@C-R5bvR439Vj+z)0=;jM zkJfC9xW8Ybo62?$%KB8-cC#ZmE__h0P4wOP@>z%eTV33hTE$oeoTVAlzy9m}N+ zDVtR_+!93OS2zv6r`&=b-RWD??LFi0N8E2x-`Sb>U^JYh#n>FA`-ns8fWvr4gq|jO5hLtDjAJlXo6+q);OR*na791vW%^i}h-7;hf`QqFG_xc2{z5|qgIFqdS zp0W%2U8uHhj}1WUBC7Kjg_^)VWZ1t8lO236F@VeL0=8>oiNN3O5sKNy!1qw?#RV@( zv-4{yAk;ffC^qoASrvJ$NXc&CW2~S-YplS;+h*45lYI}d5^8|oX9z;8(?f8OqvK$b zWbOR@w1c9_^wC0$zSBP$Z`AGnvfS25yX?zXbllN3c&>B^I=-`@42oq73a=6j*z&AC z-vG*K7T>L#DQpy*T+|+Oo4AZIiyzN!O<(mI!;p%BUgj_Orwtgrcq~*kG+3vyef$HD zi=rBIr`=yjb=xa{&1O66$m#4R7#L5mrEB}tPTY49Q&X}r)&cU=&Sl#7-VrPa6BsY% z%(Y^80C@okJ}Ap-dIt;ZD(#Yyj(??T9`29D4aZik z_LuUDuOwnUJnt8M>F1l~xGOeBBnO(_;EyPPRsds=YhS_-xemk>?I5Hi;?!Oe*kP#D<>^5++l! zbdfT+$1W2OR~hH!F5I&3^)m8F81xdHap~I7FL!>{=7C?!wCD^!mt^Itw)O}1s#N{&vpcM^YJ#R@j0M-OO4QkgOmlBMKD=3B) zs*$Orm#_ZtrRd<0M!NN_xmBbA3&)C8#A*Yv4>xtlvdWzn_)l9B?hjpPESf{cJ1oLy zoe9`yt4gd)L+6{{{lHfSOIS5lnP^@iHr{9yaH>j$|7u>pzQ761C&pX~_m-{fXCp;&p8?{IBm_Pvz+f6ljJ}IPVj)j>D z9@iW7i-Yf_zB$N=ec0kYt=EoXMOwa-VG;!_Po&f3`~_|bfi&q$xThPtL*UhftATSd zi(u}jw*oOo#xThhVLc2un7KFM8viMRG^e}nQ}~NTb~-k~3m8!nVzr=!j7}w8@<*n! zc6<2tAD_tA(t-*Y{c_Z_y!3w4IpYJgko|PM@6jk|fIi}xN%L>>ziWvRbhDlR9TZ3P zH_os@h~#)l%0)5d>n9R3Wtta*r-F+9Jf@xD>YSYAH6u61r)ajY>&bO@3T{(_y(nI4 zRtmAq&KJ_=#?9?SQys!nKf*LZ*McZUZ}4*EMZ%SFmxn@LxRMWrs3~fYf%&fx7A!+_ z_9c8fE)3j03p--9Gb6im>!Lc%4y0zDlsc7E>RJ*C*=p{q>D47UX1@L?W$D&8F`;aB z2{HbgUsR-s08B`slA4v^oCer>9q?L71pNJKMaBKNEsQ7E<>ejFLnz1PxA)KB?)+ri z*-bmR_iqxx3k*E$o;xd(`zDk_>o>Jg`*n^iWVKLWHLNMYsBZrDN&1$Ho6I(iyEFdN zY5@dl;6ph2&480Q%3N{XIB}<5XX2o8)GryX|I`21c3`W=eSL%GCP8IT=(A)6$@qyc z5y%(A-f5(71IV~zBn}MJhKz;O@VX1^L?6N)zEq z4QM5L+5~a2k61;gw-px`M-{}FwWiII!hd%K#KUoDsuZS_(71!Vc~*Y9P;}@I5FOg> z{)%D+KTS7NNT+e^Qn5wj&I%%1fe*^Vb(JfN3$@#WxBuLr$MP_>Gzjtf1V9Ts1g*cS z%Te7cH?4Y*ald_|($?z)T8sj&Kb@P%fruLF_${f}=aMMjeo@)weJi{pc1oG)b*^R? zouw+{cj@2@G?uy$JJmLUEjjmA`_G;5uZX(~OZ{-bnN($P+cr}OI2I49HWiP_ed}fQ z*YHOPUM|TN&xFUuhg{Wqr>+d|*YDH^D8nqy#Ive9f+!9v#1ftScAJ2|$8H4Q@4Xeb zTvhkAi54#n^ts+%s*OGZ`H^wIY5m&hR9^CELx=eBxo7KvZh?@_vbxdoMP%6r92%d6 zLqX>=JMmQm?I}~dDH4I>0NJ? zvDM|O-uy?%bE57Yiz?( zYHMp-a@iD$PgZi!vU1LFV-KbnsH>q02U1r_4 ze_w5DP2!6YgB>oVhvQHwJ9phRe#HUpM3JStZggQ z5X4F*VnvTMSo@1-Uf~B^6HYGaU_N4LtPdto_wevI6QHoOx8Jg+)$FKOdDY!*+s?xk zXzQ5H{^QlZ(sS9P4{0Zj3qS42z8lxSC}b=jFtH3%QY`G0ht1F#{Qg}UMyjUy8Q&;7 zdx$vX?hz-JY65Pi-;f1#%Q5g_lMzMOD?ynAAbbQ`HYE328544y=vl-q04dD*cL6y zI-c_up6Z6?ZhXCbx#nNPByH=K!W~oUWhu3h&FZ7o)H(OD<`fVL81X7iTz4xV>Qs5E z5@-;aySgagBkCx3C=wNS6E`d{FhrD}@|CY{W08lza-BSBNQ9#OrdR^W^CdQ|Tv4am zRKxc`iy8 zu#9k9?k1yOn^9&lAHncaTq&g=RUr;STawha^R zv{DA2F?K!taoB3!?p+r>^5|{J%51NvnP7Fmfp!Z&uhEk3^c-(-qEMX6;t%gezWLJ0 zC|}TmzJ&_w^z^RO?_ZRZEe*MQ7u6P&yq+>{K?6s8PBQIuQ>9-zgBD7%8+&a(Aj(&i zcc%CcE1z8-b?m&F?HL}BPXB@X+vnQ{9BCa!NV(#iX5Cm_1oucfz7{PVi8dgZr+`l$ zn2oO%fNmQPGx)`%K44xxJS@jokfN7FVh5$C+M@W}3tA54=l<3|k?p~0dzMspMEB_t z6_!SSC6v$2@pFOuHhr5cvnjbP4WUkC_g7%NY6}&eF~-)E(mB^0;Pdd(aHXDV znBmy5cc|AzieC=@&dj9Q+mdnDaIy62GqE6^DUYg{$P#q&;Sbf*uA!!e8gtwYovJdT z_l$b;RZ5Jb9g`Bbc$#L~$sWe(V`h0H@6lX@Cl5WPs6)>BGO&U3>TrtDqNi_xviISw zHy^_CcQlvu9e*Dq=v1eUNN%*VRb@8Le?hQ8WO_LgT5t7ozLhI}D2Zz2%D38ntE9qz z{btz;p-pk#XR9)WUS051z&_`aeo5o@oEf$2<36YRbowrf1|L|blIn6L3;z_?YtiBF z+<$($SWD{jwSLdHR5Tjnqd#4!YMTZvQo66>4xMfpvY~chfZmvy`SyO!u>6F3nN5 z-_B^*u)WX}xZ?ip<(y-b>m=&btRsWH1lhraMo--}dblCz^foOa^NXA04a>a(Opq*1mF~ zbmiEpmx4ZN=l{rebk>i&5e06;`iSQ)rY=2 z-<9v<@&!L5r)8gI5^^IRuxpz!_|#lt)q>ABnoTuF%+26$to!wy!oBAe4mv6C*$X9D zKN{puS*g9G2;(}@3!E#aee$PgZ?<{JtbGKyiOgWum^(NF$otCDh-`^UR z>0(b4|F$)aaq8#+JMo-U+!Q_%ly=oertQ4AmUM-*RDLQR$6@P#yJ5^W9!C*{mdARU zTH_yff0o`gp+Cv0BYpGnFsnUCc@65){=~acbn|O=_Lp=Od3K7mq>8~hB}`rk+hatF zCb!nm#dw46eqKSrvkT}{I-`GpOQ*YJ4DB1ID!u?Ri`5lFo=cT^nK&;>ZSw1g zz_)kLbMWFBcL6cq$|Xoy6^~(dWFK~m;*h7cswT39qo?Q3)afn9tSZXdHY=@n+kFh> zBZ}}W^GrOhs93N@w|z|n>Xg4lI(7Ra^)^*gU(wO^B*yM0f&rx6e`pU?u@_I;b9POH zzZNo?*h=cyGNyL!svHQQBEX?U{mL3g<96A|Ck%`~6H-O+KVh9RjOlr3eMfxy;)K2B z3JwhkQ|FF7fLY=eCDwT<5Wh9*fa+{_A^y4}$hrBJ_`ilx4#dzTzJIw(>G(7+!gYkZ zX#(|+1peKSW;u5nBM4Ul5r=9w)+xNX6m~bqYCjchhtnhWr9>id_H`iSGV*~h3WAM( z5m{|h`Un?%d=ff$lgK7X_P6!ah`gp+?mkB@>R02eu${xQmLvD~_aY&@j;2D8J1(^N zKdSTZ-ekVRGIGgYJe7CxDWzcv#%V2kw%DGXc3rjG>(yfW>7YT#Huy$+Mgy;NfC-0n zKy*V7JE%KbgYNomb6jev-|5Cv^Zl6E-Y7v6kT~s~ub!j&#wvV3grAiEm$ z-Cyra&AQ5*u$y}p#xcxE+s~)u3d#0ia?Rdi-=n0H8RGg3glm9hxeK}w17I(YIn8tb zQVVU+x?Zdxi1ksEy;0jz`?vo?)K`YZ(S*waA;E$N3+@iV-3jgxBv^2FcM0xJ@SuwX zcMtBmxCVE3zXRVn_wbJgc6Pd_d%COMs_NrZo^T3E;(NnIHt;F*;G7&A4~6Z zy!YNO=ASco`OPZa$HHIMv1N{2QRT7IMiUz6s*X$)g=>XES+JU);k@mk68W96PVs3xFrUX3ENPl9HO%&eBSxfq`bT;cQBmf4oh_IENaU9cYT z6g*p=s8+59Yv5dbqA#ARvC}n57T^UoD9-KcX=AUi-D)Vf1D&}dqvTqp`&8q$%vAj~RU-k>gjK)dPFt$ooV4P$gFg$aSoMr!@UKG!W#Ab>4}qko>QKvHcC8!J zsXiDPtp2oZi;mx zeVuv>vH6Mj^WU*Cb>*&e0!;oE><c(7zC2q9QKJX)38?ZX^-6`A9_I>KaE6RZYov|@DLFZ&#TKuPwH$u z%`K*n+IR^R;TiGl(aU41zbfyTVu1h`>o@NY@onc2{krT!ST@C9@q9Zn&4DzSqSO77 za;eIxi3uT_)~lrJZ@DbIiIGq9Pum>r6U0PP?b+_R2)lz-Ui~cDQ_DTEh=kHP8x6DPtQy*NX@9`S`1EN!+WV4}`(l`7PjmG?NiGH7-g~;aN~(3@y`#}Q|7NTL zb0QTH4FzZ~y~hc`D3B1;_QOnl z<5+E{@7=HGP4>!to@iT7I}t92S;odYU*WA_{!gZwo34>g~?{yEn zc3G~D7gwLzuK+k(XE`s7rR^9Sar1aFHdJwc?@pasB{^E|4wLiG@?jDk+E??-SDN3Tz(02}=JOoC;&H;qeN+R^8M`>uN8+`2?8A2%2gEVC2%Mge zXMOfBxzYS_5A*(69P1_^3fWXL5X|Set1;|{DRVnLQ!^{je#mX^BS-$(7k4JRs_l4bsfne}E7P-6;k`Yn}9QZy1#Oql%yOu!k|?h_l117 z>5Tmnp{OP2xII=xr1Xbxy^Cb8I5gL6&KKSeDRK3Hzk-| z85l0JB%7QDGc}1tA%4d$dh?lyy)M_BxjyUtw^Y~ z1*sY<0%Pf;;!vfQ8XtMoH2}Z46xMr{>2kuO_7@Zy2EA!QEoW?DU2G-Bw~U5|14fU&DM|u~0)R{j$=qVgK#!b&XK9#(%1Zj@L(ONI z)>qa?P;GL)$mOrd5tqtopz@WR@t*60SU1cSc z6-nqGiofa2@rQ-B4VHaV#=M+Pc*Q?2Xp!C|p*_lzT|?JqLsLa>gc5}IP+EAAfp{yh zt;g3CAag$$b7!poq0F%?LbD8!i#(DIy7+Wk6fBdWpQ{RARBR8Mn0T2htGSAiL$&lS z1T}MqCO}DPeZ<4{eta`TNil%EHU1ejU(>ol(&mk20@+^R*YA~H`l9B4R9K1Lox&~r zoqRhCf#1xI&gTQ8sGNH(Nw^0H_>{8^|2)Yckcn&uPA2!t{Emy0`rdd>ZEm&ESgSX9 z3ExY^yF;5QbBJ61QLfb>JK;E-`gIC4MaewYiBK7Z41Ug0E(1a7ATmZevL2DRA5)4( z3ey=u0OTp@*4EZki5g>TGLpIwHkOPOcr}O9$g)sZ#HRE)8AbB(pSD7Zm^zLO?}kmV z+YKUqMj_+d^x9QrokD-Q6WgCleI!8?a6QfVAE zzcY9QFc-atXwL1<)U3Lr?PL_@>jYL4Q6IQ9U{>=bXFE~eE=g2xW=-b42AZl|C*Gf{ zSN5Pl1|6y2Y35*^D7kHOqDZCo_Ab|$jPbW7(}_8f$-ArOZ1B306=^iMij3fmmA4QH z(8rJonZ1#og3-ZNGqpaH_p9^viA_;Sr_K)I7X-Cc84}WjZF%SWA2u5mm`Q2h1DR1Y zZ7i4{qO$BGTCLDGv#dHpetkh?7D_*!D1d|@SkbMQvw=kUxBwR-&R>Ik(c<)__n0;h zs&UYkVa``uumnY-CE+HXrD!8xSE)~YsL0@fdw=c;$Ek)LZdL~0qYke9ibke8`|GN* z8K)Ho6sZ(kC6C`8Q7@CTYZ;m<**t^q7mc?&c4Tpd4EdMni|-LlI88-MyFtGdJLY-* zd4l!^mA*A{ckD&zvacktIm~o`ZtaE?qt~v98bwOc|1-}+-vO-9U`Jkf@(i)oAJ<=1 zkC|Wf`{ov9pcFp^$WWZ?z45W*8%*r+->1R?(J<@x?*ys7!l8XEFfdG-lKRrwx2X7& zyUdHuIo&X7qWp~-_I>=_+L~Br^Af?$9p{QnzMCXS^g~vskVoYjOTo|zNAxy=6hM0f+?3JhcK}zM55F%)AY(x$|Xc?$mq&w zUNQh;UkntfHrF08>@z(Cj76g~(XG@9$ElIciJqKT9~BT9U!ygCsZo7Z&*ISE zt%}|9L+{<)?Pgqeg4G^T>n292x&AjH`J>pdVPRB( z)PO3jas-Zi@@U3B&$m&YCUl;K>M(0Iu*9Dtf@4=+`T-fX(2=oQhr1S^YpooZf~Jdi zzj-Q+&Mr-x37B-*Tm{;1pN863ZTYbP_WnL&6vh#KUCRRJ*Br&@R5q|z1K`Uelgh+^2k$V9 z1+Qw{_mrBf|1=(OB@& zGPF6WwFU802sQ^bfbRNQz3aENmp;id)ELk3Dvcn*^{-`RuDv3F=+~ zWn4Dv7i>mm4^(eY&b#(PU8-#E8;0*rHV$R%DG;>(d&Zcu5v->;{mv63Hp7sAfJx!P z_orM}3Lq^DGe(BY29#=nQdA>UfD+XtM?hRAwH*a=vkvbvLt{BhW0S2`$x;N82Km4* zGgf!Mlyj!^UiuUn+RJKWfOzQ-j{Y`h-!^cxuJoNiwr>o#hXHQXWzy}qB{iNgBhy>O zV@v8@BV%CE4W-ffk&X^XLtwgocdZ<{d8q=7kSE%PRbOkFbc@m(ckFF^Y5S&XGg1KA zk%=WhKyZD~Y~$jKrQwhuqpEU)Z)B(=TCbWf+KJ=Nf$Duo(SS!F{S+!{3KWnEUkgYa zd`tFSvW~B7UF+cw0vS10CurZ}zYhm96FY%S@PfSKa)P{*%lyn|i)~(AV*gX*Q}pm? zzJ7lvB_i_k@lT1g<03`U!uKmOdSJ%>BXF$@gt0LZ4{;6sgo$9*t($cR&l4cA9xkjl zU1TvTV*HOzv*{pS5?JHNl9O2vXL_&1qSZjH;ojk%3JVn zw=yc5A*yb@?PK~a&ZVd--E=>N7G~t_x!W0n7gofqI*W4kP41!AIl2W+s;8$1$Wx4aAJ2bmy+HdL|0(J+6nph)hpxnw@_!V%m=%EBSt9?IouA-==De z#Gz!R_Tbxzza>cwa-P97&*J)fzdZX?_|3TaqjRpDQ?o?dy+bvn!s6lEFd`&YRBRhJ zJmbmvzGKIA$X$yghjb+w9`nzY~4 zkbeWB^>7sxl{}F+nB2D*lYYJ*S-zJL*_*;}k?P5dg&hPYvG3XLH%dK%QP>BWwzhzD zq_B{N7G_=Z9|`|GolBLuxS(2G@=U7zCU7??$KlivxaAkO$HC6dnD=0oc$_-x*^t%K zn(JCL&WYmwT?Fp5rj6g1Kdvr7U>O9&Kl17mMRSCT6hVH!8>%h1*FmDKE!*nxfKyCo z{0J=@)35kkT3X6aG5||0V1mAh{Mx7(>53u?Jct25)%c4~{bu&Mx1Ch`v*lUW2;pjU zIEqFEdp%tNY4YR|OJn3`IVfLMuqB_kfcO3D55QyRj~iNi>Pho~WaFqGzrQ*#>x;r) zV8p+LBfq}j?)B_dngB6g?J1Mjsncb1z4ftgCM2C^q#IH{s>oTo!vcWw%vTRAA0L+r znGY`kj!KE@Xa)aa_$P+|PsWkWY0zCy^#*5@t_rSZ{Y;XoxwW~mF3uYO9e1jT+~%y4 zzxAojf3~ztqri!ijhDjteK3HV{i)n8^-FCSE|1B3E|b-uCp?)A`GR-QeNN}w`;Lw^ zLojH|2*W)|SSsEMT*f`z7kh+blmcahlxxUq*N0|#tsXAn+Wg|Kwr^TwZOOxp_Y0P& za!>OW_=Z{(uvKG%H$*l8O1$Yv`gj}5^7vrMb*E31!{tZ?Us!NfYM+vueUabO}dQzHn>}vzmz7zey(uuqqLVQ`|vKb!5y75(SSGFgsw3YnX-3~bZGu2h; z9hr&^YUdW)T6DEuoTCOp{;%h7RlYTGR`L_kUR@0YH#Za7-hsN}`_v7ag}UWygQ0Mf0n(N9HGabEWv;SI{{k<7(SO6um z%QeTk?R^1X8_w};TW_w!p}Ji`mW*SY#3@)>F$8vSkH7;??XR`kS)u6pTG zGzBW7S%>X{Pupi&;T4~4Y7*2W8u6tXndJHi;});Xi(G2X^|{$yK>Q{AIL?2a`X?HJ zA34}F3#sAAM@!)NapNJQT`uQ^z0Z+gqJ%#Pwx5z>JR-1(57uSCbgd_7d0MnS#ktBB z)@#_x=F$;gzGlpz)NzN9*n#A}Eq*&tcT%!|u*o+0W|dOl>uP1hIDR>rSJ!5xE!vYq zDja(6RSjqtJL9@eq%8k#Tg;c8=7o6Bg>+KuDV2e-PTud-a{d-7<4pRg6_#=l4qqtw z*NIe9-|ojVd`|=6S{VbM*%vRcg=75CKbM8DgJ#zCH7r6fZ>Lj~R%hTPz}Q zgoooMW3?|YU0!F&MC(tZYOcZqa130-g2 z3wp_34(hJdPT(_GWP%6)^#Nfs9D6-`j(eS$`YE8F3q3vhCvB}YHYaU=yH02NFm=sY zC1J~QlxV0+P(0{TE$s`rA_>Gz9*qN~VGmuu!6wG{iM=0rSPwq`1s=;W*e${qI$aR$(*igR5t|ls^U* zxNpZO+=4deve6*MECQ?YEP*Gvoc1!6Cn1Ce>8J!Dq(%M$`6xCHInVn~68>s-MByGYvvMfaPt`f9 z4f)Xn5< zc1%sTYkBF2f=;MH6uy2XpFR|bAPMa09J3bQD|0a6>?DP*8!z!8=iZiZ;82E3CVjX- zj(mYdc`;3G4jEu#Pz|VvwXM26^VIZkgg>c-{SY0F>UkpIP>LcdvYYE;iVO$B*b&37 zTT$d-SKX~cw{t=37GDYA9CO(>rieM33?aZZ`+|g8ki%{cqe(%5oBndEUUSXa&si{b zdr6HFM}K*?$T;qAc2?jIyf#=;H^p>HMymrOgd)SnIF|{sB#}-KnbTa43d~PYFH_B2 zR_0+pWG12zJwt^i_nL$KelHsb)YY*!0<@YAQG!-CIs)83vW2^?wbr2@>vN;XJhIsS z=PGWt4NLLfLblvCjm-EjvlA2yR3kO@X3=w7Ch>pVH7|S|Ad^u}AIGWJa=dxpAyz)e z?+*T=CdTYk|Cmb2@Kx0@pbr}k?gXQEi;Y-c#jPI2Yn8`o4}yEIh19fzrGS7A`XsNq z#pPb@1(}{xH2Q<9`10oRcwb1_HuK}o%TLcPX5U;Ze~=1&uEBHhf`O~v6GGF#CDs@V z{s8I6U0rCLSv}M~Vi32Tmt0=-C_*X{?0T-a+vepLHVis3(Z$&eD!IjVYU^W*L^E2- zFvrmld79IjzwbVPh{(j`XO#uM@)dZ=tlCCOFiCZjQ!1_JpILw*pOBB(sVy}rlKXqO z{nUvP$duj}j#vv%;_LRZF?>_UW&42?{Mk?1?-95+B$U-o z3UPC@Xk!GrQKbKRi*>U1N7(%daN?{q6v$=eYkaotM*-0f?Fil)`?(pDe!Wde(nZlO zI&eHJc}7V0HAFdD=k+K~_XlzHMZs%W9XyC$Xs^$k(~6g!>W&kWP5)F*OYI$F8v&&` zdEkq`oUZW3DW}DMvJ*0cTC9-=77^LcCy^UpHj5je=3#`X!uqnk>M)s6TbJDZ7x+qdc^&i#(qa z5@R__9D^i49^17Lq#fH3_vt5(E9|sJH)|#&3Qs$%j0m(Wd}gpg%MYD9-H9as`0XV4tH6+*G6|{BBONlA zC~W<14Hp4wQy}K;NN6&Z&?X1D0-uRv<_m0+r|tab_wmO}isEegy}1h4_{y18P=X&z zPMji%&Kw9*{7?2TYW~pHb_~*r6I^&@?KxMKa~-LLmH6%`edL`yt*M28*TvGQ7B3To zKb>OsnEL*AHbZph+e!=rcP*|up7e|;=<-;z7tD`Bda*8_C_gVK_kiB zg(FckafD8y)R~f2;|)--AGaGhRbe1K5ep-1*hQ{4S;!DtnYfe_afop_66I$&G)eHx zYWyL@(&2P7=I7Ir&YC5lJ95Nv=e1Kux?A^)>kR1|dVw@5Cd*dQ3)y||7P_Z+#S-}V zBkz8J7`T`sA~!lG*RoSEzi(H}?00dKzh^gr+qAN0z}j77AD%#CUW?0q5#u!wF#*0> z+OorSOj^02`}}V(SiCMOB#6t316xNi+QzrvL?Hmd2k&nr3jRIb`R=2Dyv}wiKW6n0 z;ZFz62>|c~GnLkLN>B7PVp537qPIpK9$dk5t9s809R-0;`&-=@raZK=#>Is?8Bp3; z&lYL~OzX7+XI0ltMvlD3mDg-IXJwZYPQ#*H{X4s5$+#aS>e7FoijoYZG3e+-oG{HB z!Ja@p-{*ScF>(rs>7Z`{`gVgM7kaoJ?ZOps&EE3Wlnr3TpGUJFLgbjhNnZVZ;|}jB z9={uBefAEt&;5dVBD_IFK)bSBS`T0bSGRi(m+=vorGlHuu4_bGv++W`Y}Lw(+IU`0 zKfU9zZ(pgbP(}`{iNJa#svxel%PcW+N8Q zIp{Yx*E6^7^C|api1$9C?v$xg3pNpCE{HPya{`MasOgm=P)ynIx!~yUt)!N+)D=H!EokpMLA?PF%a0HLo1PS6Q^q zx%ZK|bzxGDblpK+FWdgtYgQnHuc)E*{_@VBB9~`&M1w;R6?1ABZd#|0R>#0k8{1~k zeb45JNL3w?1d>ea!CJtPVI@AjH+QV?<2)8h2EQN~Q`N`ze<)7>xu20N7lP`u9*?LP zLpu{kjCsacfQ@&;s92ggC2U$R!El}~`M z2>Q~8fcH~0bqfjNuy__h^$8Boc$J2pQ?mL;P+!W9ZT{@WbQYQj7EIJkPPn6da5S+uFL9BHsKrry+&1Me=D-qf32==Zz<>bQKUv-q@=P`Z8S?UXd|3ok35Nxl4b**D&?)=yXHCUa6KDbh zVXUN?Ek*iX+(Lq?IM^s})vJE^UhWH*6#=m)WOoKWXHjZNuQfkhe(CVj6f#OvnfeWC z3-27J{JoKJbsuN9Q|p>8$~u7Mq7gZTOI3l~MCI%RbSp zVx9D#BlOz%&Fa}B{YAUMXhcF6Zk7T=i5{fO1(2SVN(`TSp+eZIdKasx^(j7n3#;=v zqJWbpcln=Sd&v$B98hfVk==l^lrnNN|6^vp1X<3_TkkaC*0mb()Va+S%?=r&E!IIb z3Lz6H?tffT&>#!c{VDLRVXVj-#GSX7r^h4Rd0PeXJhdo^a_#^3j0hky0d`~v)hB_eQ$<`BN8N>|JI>^^t^Oq8;{Db+ z%LwK4Dnu`WV}OPn&eE=vrr zlb&{wT&zclB1LM;Bx_IodzelRF=kFnRJ#S&19C@cIHjp zE8LWgAPvasM~H5Mo|zzKq}bOc~Hbr?(lR${&)~Y>$8~=z*LCg zLR*v>=)9YEbH5RihZd$5InDT4xZyRCf`^qU>O!Qic!sV`sLx1LoD_8-ayNu=+^}c6 ze4F3WORhaz_D+m;*W7UNVH^l(gJ}AYJTmjOPDU*eVLhHhn0lTEL3>`qGOnb)xLnyr zE^WzmzP9vV zgR^$JZPegde5r{VgdMayJPPo%$GI$oHiE*epSJ?u$F)NdX_A^gzX)Ln{FsT0ov1dwaI&HcIDd+cbUEI|(#;34D; ze_kvIwOPEKHv!I;A@65Lks`pei}gBehVvFK{PQOQ&;aFJU4(Cl^TsATRyJ*+mr&UW#!H<-jbF&Z`qqH_=GQX%s^^gxy7i-f zKr&X;#>i}MEo;MHd=4#~6o?O`5Gg-c=+pVr#Xh<$m6kY;7vCklcov7BRWEtU)r46) z-N}Oj(~L;g%E1o_9QybA_E*Ov;d|@9cv+o)ab*0qZaYnOs;qb;X&2DuFhDy?nDXDViI!<8Q2qOV=1o14>TsldYvxEOOhVfhj!Bw zayDP|RyMxuMO<{@_Hn|vWZ+On`D6mGyFtR zk0E=2`zXGaW$(LztA&VDDAj7D1WT=4GUdJ&$Fza#&x%*2zckj~$yd&KIp~hnWajI> z>9LRkH`6d{l(Yl0k#4t|&b($9_-`dKf9(@0aHLC2IQ1<0W;Hv9%a5!I*qod_Sf1?` z;xH8ex#1+-ptus>mJYy#(QeD;p>NCPe#e)q#^hSNcip#0H*iTLt~{XaG&7I*!K1e_ zXxaeo69i3Ar~`*PEO1%l_7nH7iYwnIoP&sYkWrt!idOz%jxj8u|vy+s7 zWGV+svt!-kRp~)6#v>tNJ2#+Wk;jQ>H-@n0$3 zTsCo#ZhC`~C#X2`6E|Bo#X-_NH+Oa~v(7w~?sxf)0+3*@hVam)p5<$$m?B!z9LvxW#I7Q(4F2bhe|&zy?!Yrf0vcSLwRR#AaTPJ71{|HxNLu#i{(F zWG>AvY+70=9xtr$CSvD*hOGGI{(~z)i6)@3FQK$cbI{wu$}0cb`Jv}&zN@aebM6OG zHDDC{BIMPzXy?y^`p|ds!#jt;8x+y{uR>v6&m1@*po>{1R}9eCS6h?I>M*O`2WORS zW9Luoa3~oA^O`SSY}B^Eh&-ATi3>mCpbK2*U+~WV_G6yeO{$r`IlRH2kZVs}rH>}qci!>x z)Ec&!u+l*@hTW&~Ry%=nD3x_|T@)Woy9p<@K@9^*>StBD z`7v#+lqr0dSrxjw^nO5K5YNG&eOfI|lE&kdLBSZ@G4CeY{A(>m4D-@UHeH-$m_J(S zK5`)C;KiT?pTFacqxpW*+j8ECFHzqN)k{o=A^N zP*cH-K{_RYQ4Bca4=VL+H5Cybw5RT)*Fre4W7Ox*e0B`IK z`zcVQ>`tAj7*~4J%=km)LtTrtIt!~McxeQl|JuJGER-+Ce9$;S_9r2iONe}C!QDj1?SE!-s6t%6`Z zH@8(dkq=X_Fven+d7=Gqw)P(TlEs|5hCI-Hbi}4IR9#guV>#GAN|z+c>0Z65%vsSN zRVB(q%%yel*dcz*)e5hAO!>&Q@=ryc{zXXKr7E4JUQhkGpc-J*6qD(LBejg{aWvjg z>MO!>S=hV?bJ5z}hPb2y7?#Vanl}k~pUo2B%psXN@4j{*c_TyswaTBZY(C_R=JT~! zdhg60$z)S*wDQ6}+R#YwU4Q`6zh3W?G4=1vZu#uH8(zA+PRg>2mzf^3JpQgY_q#WQ zDp9^!7GeB01xvN8^v^6N?nO2jx}R$LBizYXlRmX@28_|Tw@rsC1%NCPfjMXpygph5RWNM zIbdaF?H_Au+BD&xnki<|iJ*dOfGkAHWeupu|7Ba9fiUMJ6@VTo9s{QJ zDD##J2T>(^o7S-gXYkU`>8B*2XI`LhueFuqQ&HLU36>nvg$RUR^kJ}hu;@#3eEx#z zQA>*(g|v9^o(z0*7v`r^rDclYgbhz_hF|~g=e-M%df!m{COdGDqdTpW{}CAsj`$0? zzX4g)`zqj+k02_laRdrjtO6Etk~U73!d3iLk{A+vr{X2#9c)lQ2&)<>h7DE|XNd!`=PX*u7P>Z0U zBt^gFLmQl*Zg3ZG1L*-omsuq zkI9fHbTmGCTw*W&U+R*N3>_E!YC6Vn$qzoFNHOSZ7SO9iREL`FD&kdQ$k_7{*Wr2G zod|0vy*zzT0P>*qhZr~-@E%-S`ixI6)UHlvs2exlxYTWGe4Zo&*W3}1pobAqzLTd9fPbfA32 zZh~e1=A^Id7NTuRZWq-P4FL#%)>;iUi2E%yOH0rqHYjbX2pPkD| zAs%N-;K;qtSNwhQTG@u8QK&K$kuGnb`gaKvd+4IKlqGr~@eF~q;Y))R$PsFh7Ffmt z#X_UH^?N#&xqeED*C*nCZE{{)a15UEqeg2#mIJwPQ*+b4KAEOCb z)umIgq$N1NtN7ik;z+IYX@;EDzw&FS9sA>?`ZVaSk^I6_#om<>euWwBXZRb*U=L|# z=w?ZYftGZdGk}D(wOjQhu~G-64Huvk_iGe0+BRb_5*)hhw)k9Etry#U0)3jaSLz=> z<6PV}nAU^I0Y^F9o6$bcex~GO_NIRkysyBTV&;fJUlqNsu55ws3B{M(*I-x7xtLV; zQ#k+I+ja!RT}3Uq-eo{Mnmq)6W%H6V2vAzDq45BlwPd}v3St?ZG$^9_X}zmA*4{Gs zEb_2oZp&?`(yH0;kY^kSt8s^Yl=Dr9^-AT*_o^qaBkgS#baXuBf#X(u#qWUVtJ~rw zAt6D53~j;#o+l`VTLoBa^YioDIw>;wjK25}jQJe`?>%3lt4tXYSx1<^xW?-q+RV54 z8zZjsHQ@%#{s}L;y^XJlQlbHKA88)jc%GJRvV*=lMdn{OT8+D4frQPiOx{ZuLG`yZiT5NG+v080w zbzt!pOn#UBDb*1kiae$>EYj63Vy+4wo!#agC2b7&L=oz+w6KS_-lKj88)flDprduY^NS?Cbb$h` zML14b56dQ3Wa4{_*uv4*Rzb}Bf_m>z$5caYM0&dN)-Lx`ta$5}S^kD7%}82fB&fiy zPJG4V$*dj0Li2{5ptxRNKNKN*y%!?2Q--=2zPTi3Bu5wb-wOIa`DRSz>xswi^5aa% za#q}?@L@3>Jr9kk?Kb|0qQPZlW80$-9$uZg3L_24KbAxOB=yk+ntk(Iu!I*C8_Q`6 z5ClBM>-n!gcoaLl^b)vTDOd zYKttFv&Q}-d>?{f|5u_{egSyKnb?a|$+nBS+9EN0^WeQ~QmKe6yHy9KK665w7O&^k zmtjs~iZ-d-C&z|r;Y^Hzi#L4>1YfXc?U_4prm7KuLO%*cPTc~Lbma#&VsUf2Tu56y zko(rYG}-|NRy@N(fpb)`c?xa|50(EZnVQ}ilZ9Gke8G&IHD~@yu&)73d$PlrTvTcu z%k~%z@<83j!DxX-@O>myk(Zm~zdTj@#8Er%f8Sqk*!MUnDFH;vc|aHW^Os_# z%xWX-s6gF?oywML0JYY#%;%HBx8zAdmkuU_&Tw=+>i4PqH0^T&;|~1@*$GJ5akOCq zU>Cv!*GZnw3{m)FOW~tHk)eLW8usLawjbTi>4p5+pe^XO$pH z6F!+nz4J|~W7C!m*Y0hD^O@$?k3cL#8@0jmh`mq)w(_k{y*QQv8#eaQh#OT27YHUm z-OPu1pAKBkZ@gN(?P<$eN-!4=$DEaW97(k3}ym?H~uT zkM6iOph$zzA>LR%q3Mix6uf+G({GT1f`SAf@MO-Vr7TQid^FOgJLLB05;U!&%REjOU&}e_zR2Ky z{(#|qrvDJG(r{kWhHIm-av~el=lLRJHNVIZcrnCCrBz1=_O?3oEOp*LB5lg7vRZgn zRadwR9ermT@(D}H=$kGL1N9{TnuOs(1xBG*?38X36N{Jqma#`0RQ42{l2tdbl`1aW z{kqi(1Y7eiX-_i@F|3v&Nh!E#bGFRi86rdMp2_58m1>Dw%u;ihM4ajiF(>Xy9@RS= zA(ralS`8<1uSng`i_$J9riY|#m44mx3SQ0kl+K{%X9!Ps zmRw7Eb<_p2V<2?meHKl4Om{}b8c#6TT1r}6 zQ}M@2=_PNCO_6pyWps{t-O|8|-p{V@u>(*b{`UMj10Y>d8#td?=*qR6xHwiA6g0=5 z9OM*fR8$@E{X3(~3_y4G`fkO-0`hII;6_0$brkyigI;%#Z{?5iG|VXMZ@B{TfkcH@ zu($--VcBK;b%?GCozjL>i@Ww&)OKrt1`3OKbXJBye)?S>*iaMJu6ZgAN!rY5sdtws zy5qAfR0?q=+b0+~OD%|%-%-B=t`UN@)9r{n1gV@L>BLggG>d9$Wf4$cj+IcnnoD+7 z^gI%LdlJ!9Lz}<-kzmme&)`7bfPlF3GlCG$s>K#@m?_O0knWXwIR#Gx0&`|UXYVm5 zvMwM=(ZiS$QOXX_{+?jggswCbl@%YQ+k{BASxx?B61)t@ImSE1lGf!60VbQB=UII3b5ok2RMHsPNl_k~|On#|T8<1jy(JMKY}QUvg%-IO{TGTMIm ziN2sr>lKqLcWpYNvLbJEj~|UW5(&>O;Of2arbP)`ouMhGeu zt!G*)y5DVHw1zElarzjC;RB04oLsOB%-{b&a0o*5zx$8gxDW#94cY&pH!K3I)8(n2(ZK7#!qhpQKA7XmbH6_P#1xU{l_nC!Vox_;KdwR*Co1MIl{SE3)^m?KBNh>%rmEHJrq|U$FNKNJx)qwA*a{&2e+LYPcQZ0!Mc84=!zt#%> z&;Sr2r3NP_?OQkW1hj3t}?<%7PfF7|xyCuPs9 zF(HE}4nF~jhzjob>?e~9xu3?o?}UrW7RHg zC0qn`g70Jv1a)a?s|=Kn&|#kzGocqbEc1kNg8+SfT8q%ID}B1_3}Q6lr`v8*5PNGP zud{Wmgy_tOg&ldP1to>S$rcM>M+eA=FF9np`yZ0c?||dWrzR)SWXJFa4nAJjb>Q}O zjEzO=CL$o9gN9huJhQ)ZLjd(E$=5R1oab466SG0r+!nd}G(tb$X(TW?;TPw-FRC*- zR*cmTZ@C!Lhw~8Q%ki!2TJ0=V8hFY!rX-Y5?DJdkAobxc$zGGpfD#nvoJ!>g#)&sd z=j4QDil2=&462HFU3<&zo!>A-cHS8}IlB(zM&!wrv^c3;La;WLa-DYY<`3fTtaN@I zf(|`utPJ8WP0&p|C=viM!fiQIVMUs89v0WXU`Ohp1R#GobZRF}WHN*RCD zhfD zM%h)m4xOP~RBYHeGD!jv4rMKK-Z7K4ud(OjZ(?!< z37uA8Jb}*co-CYC?pdh+I`*O0?O#w&ARrg9F zBXIxbc;)cW>E5T;eBGH~kkI76<{fDT)8eYZqoM5;nj!xaAqc`xBFvogifc~C8Dmlh zabp$PUcO6zhoqQvT6&F>_Go#q+dnI4(&6(~NSUMpB*D@0k7I;LuwF&mMBUt>HJLLY#g=YfH}n z=&t6h&1E_Nd4uK`XUA*T>~@1Ij>l#{mDWDFPk6}|DMU@1@V^sIP^e29sHpaJE!;4FQNW|u+89m!Ty%*$fF%s!I5!^wXG;`CJTZi3qYerA2wsglZXGFaHf=5}tRH)? z8&)SWek?J`X0T89)IS^b=vm(VhdfZqW_`2i_dPKyfDZl=%Z}oV0Z&s$n4gcyyn<%R8_BAL${4CjM`qZtDCw-dx%P za*KosTCrunj1a=Y=b@7Z(0-*@?8t@5l$guXq4YfT0frDT!;`!MRb{m)2K;Zp|k1HzRUOHWyVwy49t5ASV z;<}(VHlZ>8&pVNOHTZY?m-$-~F)U3)UVdO>6+ ze2Z#=Aw$T3AP_~PFb!ap8f2f4D*1kONcmGw1atKonpPDBKVM+`2Yw31G(cq;3%gTU z0GVEjQPLrfPxqTM!2CoA>R{mi5Mp-*dr)&$tsWb|?2kOt39?(W>>h(3|NEpr@hv|^ z&4}L{R!*iVz`hGw2Lt2h;h!^rriUlfKZ+#_BG$HL6~`af}lbnwx`Net!ia26*F z8ETbSlG@^X%-3f)4rXWrROV2?Wep75OIXaL^a=>!;i@9Vy&-I>51%(3Pi3D-5e>_l z=*rEi+)J8}QGkyhhEGOq=0s4$wf3A%YaWWHml~=`FZDk!eQI2`r0W}8MU#hz+c|Cs zPpHr&-@LMaljzpCoW2~R_JU2101Mli4k%RJPLChlu`S7LmE!)EL8OrWLr)=hjm=pU zbz=3f@DF)&WfSnl2HNJ4%2f-Se$JV*kWtyRpyr$C51Z}#zeKe{lneR()l@5*MZ&8V z>V=|6(tg?k3z>2Ue8>B?i=&8vL#fNb4n=lUl{p8*Ir*j^FvDz@O=zY^cOg4_dSL695hjDbNNz9UeK=mCvX|9!nU$68~= z_ciY`atks1btkN|+xWZ9T6$srdLkj9ZA6fLoR?%ID&G4er!1A$42y*@3IaNpwY6K9 zgnd`f70dA{_CN~{D;)xvsHh?;3s*i6RcaEeeHiCIfQTAKoY^N}BAaha%tL|7W@6hT zz^G0=oF+7&$~CSO^i&^zCbMx@-Y8^{zW|b^RVCJ&sG{}zO0={0-|~^TUPEZX>gM-FHDwXLI@;M56<> zf5?a=p2|0@g%|mci($kbt3&Efeye~>&^tlb z(Pcl}C)fAFGJbNxjeJc}n7E8j$%I5&3L3Zs5wMr>v5Nn;=j2t5agQ!3P?1a~jR(=i zHCP>5H&mBL1{l@!_m1~9WyeGg%Fm1(^>t_FD(nbY!~_{3B%KPDgTr&Dk$a-9>5869 zN*?TuR34EPg%@#To+pI+Kh(LFsVz5b%0v%+Xh*LHj&4KHWx|6QRwu05zG=BB{#bU)%5`+|8S13KG^F#RO{!xUCbCjX{3;+cmf6eW;K}(S`kn=e$Y2EV#_v7 zUk!6`T~mXE2D$Ch7UV9;Op%m#vI^xf&nTC&CVh{@cYd{9^cgP`w($(w^Ih+edY!5A z-%`GD3@$K=-9#r2jQ4!KNOQQb-8f@{eyb|mQ$o<_%rl`omRmXkLi!Gq3Wy!8K=Yd; zav(jzCWnm}uRw8!U<(DCR2lh=cH8vg#?Ws+3D6ngp&>fH{_pjH7F;ViH(k^tNBeMT zig`VMSzO`H?SCM-`^S9cM(I6~+h7>|rZ?2{M{PWsGu39U-Uv-nkn3#Ic&R&?2L3;4_XX@$4 z_u1OV?G$a(5AgVrkKbkyC@fbyaZhQkKf@=ORb+55+n+vG5wo{h+}<@j4-j<=CKjyO-@O& zp#nbig^z-3J#XR1-epEYWtEMQVEZTOwMU!#-8zFlDwP6YY+u**Etog}X7)3l*!vWL=;L$yB#t zykx}zG*?w%pT6Rqd3i^niuA_cLwAr6x5v=YpdiV|;tL#AK4PtJkpsEo|GF9R)Xzr* zIo-XCXijo^Cz!vB%<`wkzXvxpauc_WTlVfGE+S5gWuj}7H`Rn}GMaKcRGp{}8<1R2 z!2xLW{OWh{5%LG)OYipYgP%#w;yx%6B%+U^H&(W0X8RQ|j=AWt$VI0aEx0tVq?_a9 zDAGqRm>aIz;>0T{Dl%*K(J7*($MPeCehOzRGbzoz@{rY%_}}K~S&#+CG`T7*$n}%1B^k#d~$8?sZ%Xkp#2E9<;8uktl37n7fOwm1{^AH{5^tnz2oE zS(!5BBuUWLsHaqh#*dE<+zRYBuP4t*N|^3Mm~P2(;0V-42*|oBqB(awK6` zB8q!6q`<8dJhSg_|BsLVjjb0P9Rrrd(wu=k;{av*sZ`uN{(7k2ROe}3{a{`2`wwzM&FF^84cD$N^}k=lS_4~>Z(*8t zjMWfW2y>qGd|!KT7+kRO{do2uos{a_bR*Hae$q9F@PDCRECiTgEmd2*Dqc4?myKf+ z;M6CeklU%efmxCd`o!`$HOXCUV+$7a=57EI!w2$wl%;WwVx6<<@Z&rY$8Z=1Nh-^k~S z>pC3^ccpX-I*t8ooHoVm zzS{o%*owHnxXF4+8v3~=vu$OpsD_?bEi*OrgHyr^56U*l|>AA z&qWn6=2?`-5(Mkd&M$U)?~U+PHz~4hh&tK6;UznaaDz!=#Xk;k)I0F5O-@ecHED)V zILC^#EqiM^2$V?pqK?EsY}*Td$bTFv8;~lsz%6Qb|8~l`_3W+ZKXl9i78FXg`bxNZ zIrV`q7c;@oZC@px!gm!6fAcJllY?15Sqx<#Vy_!cBjWw#w##>M(ENMRi>6`XKy&HB% z%Mq{dVgLMo;>|&$(~a5Q-uh)fK6YtvES&c00HSpNCD!qbETwmTiW)J3MetNV$sIc& z@2-Oqv(&lLZgCXPg4Cm=tV0sId6ace12GqiDR=^9>eRWsa0LW})N})yon>9U4c%!} znZdATf2m=PO#ZPzW%w7~*u8C)z!dcUNQuHoH+{-BTK1$luOM~1K!?)yHXVQY(DuUD;uWVnsVQEh<#}w9 z4B=N(ok-uje*rJ(41A$l4g0-njcOD5J8Nd{BgLh|6UtLFfxWHgLKzDAmLCY!S>Wey z6DpENLN7jBm#o3fQa6d{bo}NQJVo^_i=~)lU|wr)_$lRRhf&y{q6x6N)6ya{@`p9~ zKCN5oyPEpSO?CHGOLB1tT&($K__wr!uCZJsrby6_HV<(iC2#lLg=BNkr@ki$P}mk1 zmSzw1BG$z5(`cb&x3My~H~0Uw4f z8jfSI8`bXi%Dc=~)`dtLZMSlIt}ntqM)o*7Y_M2AnLh@<#nQO6%uhtWw8`&7>2eu1 zPY{Ut)cq9t!a63=JG)!;gdz06HY;IPL@zZJau$Aj$r>#eOiTWS#nz4$U%-PuO{{#p z@^;pIn2a;Ap$V)t6AdZ5TnKze^37J0x|s8b#r>JEUd zu9gM(GRAD&Ql?)}vzuOe!Df8U|Eq!OLL+npe2a3yk$W0phEioDK6-Ul+mn{ef_Mz8-F ztnGUx{Vvt%ATRhY(7(orX|*9MXd?Irt&y$%`{Y#X-507k1(Odw*4o#}FI;V?zA3AJ zqRg+GspyY=u%4YVZ}La_9qvIjX-XBSIxau-=2jpVX!E{O|Elv^A>02BbF}}^rlN7p z-O~V!V9@Uj-v>UKMJ$<#^`RrD(;%EitYs1AWAAD%dKQ=TwhRvH<=y<0qfl_ zhf(=}Sd4)@*$)%Z3Jh7ln9xaDXtK`uU1kmAZ>wWAQK>u+0N6tB+ic({*)`45Z;MSj zl1;;GeQn8-b0$qsUc~7uf=-y0maToUk!oO@6MM04R7CTET~t3Pe+aC~0PZ^ko+_8< zc+b!HfBmd3>}1r!BPL^KrgA`&iFawVP;RCe8~{y#V%+?oVK6@Mn*Frd=1U;r?~x&R zWzw75r0oKeNL0e}?I;w4mzaGdc=S_B*$HnvvkR5$nQV4T*cy`ekVIX8_0$SKPQL%T zYt;kaZZyJ~PuCiC`;6vEWVN1z=%!4TR+SUYcjP0Ur`x)uBLf*~NZgH@3GZ z-6O?8**d?{@SZqK`@v;qav1L}+GTt>ea^4`EgD>sx&!j$8<}`mT(?uYi}Y7c!>4R> z_{F|C(NAV=(bFPL2-qP63(N5b!oU6b4_^3DRdk=vKd#DWFykt^=;vAJ62raH?UFN2 zgI}f+xwzXlx9nT^psT6*4F?ahd4NtW{!+F2U21hxdnAjciH zUu}?Gy72o0G=liJo1rG>=vWvByDY5>%|^gGpwFhKl z*RaAJLIj1!sN#LP#uI4k3Es+LPnk6#Qqw`-jG;Rz(_mF@20kBtnG_zvRQI_ilsIe`Ac5 z+|Ut$?y_>##7t^uyMp``VGrs0@qG<}4SJoGy!VBDM~JBV|6acdS;*+E5Y@J2;jANO5`PH{&jZcCl2y0iU*E- zweyEXdQN{a(x%W)Sx8-G9BB7MTK84D1@^{r$v*g@O1vBLXmoz23qov&fGdb1CMF~l zv)?nR4tV6w$N1-v3gxH4`>FIx`*{>hEF=UwA#MmnFD*ygJm$i4{OQ^T)9K7jvQ8sf z07R{ETH?ZmC!AV(i<3K`U@3y1u95rYUF0D(1-3#Y(6Gs&bj9yF(gL?Y(XxjKiNtiL zJSV1(JGDURgcQo`Tc#ArC`Q^D*Vm_r?vRjC?L7y$kzgEWRbHieu zm<459E&R;|8L5Vuy_Z+vt`E6yuDQLC3p{YBM2f4*n&siBQ++j`HZp4D&1tMy3ST9v zdu}9J3^j`+&|mAUW>t?H_O3D-fp}^yfCO2dx8qut&#oP*LY0{&r83WOx4X!9oITmk zZoc+9QA){k&xwI<+rSx3I{yqnF?Q?0EC8)=1}t{*#ut8K<$lXqReE9^7;z1wC54tUeSxaRcI4l@ z9wt{}WF|L~q=-3SL`H)544ybn8ZPEV*;RKXbl%)kO&vY!IL@6s$BbtO#$j2POnZeq zV;>6`oKQ)d-d~a9-pIC|{$YWo`tSv&-9}|4c9|I~Z++tu6v|~!sx0v;=<}v8s)=)8 z?np!$hSlT(~szic@qL{_|T`xaT95`S6ZQTo1UgO>1vxty;- zi%ZL$8o}Q9Ao{KuQL%K)_a=R20$FbfXPPh4()AnYqcrf(w7bLi)qW$qf zu&=f=gZIq7>D9z?shsWU98^#_*dgyn7CDUKil~i+({~GJj-oKtGaVf|&K#BclWb|a zt3VNhZ4Jykvp3iIXgLx~$wyB~d>yvg))HKU38-jMGF^BMc;EcLm#$icvyl1?CiCp~ zJ(kNcS58HtRxPIv3Ay;A$AMyzbe; z)(r1TrwjnaIM;@T#LNV3@M{W-4r<33co37&dOE~g4(@(p)AE*xK;YeWj*fV^-dm9Y z9wLdeM^VjedRa!xLwh324C`vFi~u?vBT2-2;74WrZ|D~cY{k=fy}H;NA! zf*Ir4fXJ}+wj|2Vdn=kAY0;2{$}E2|W7o4?+p!0#>D)>kA6DxJGUEVW-p2p-+0ACx zBojGsNJ85W#&0_vREx-l-MsuNBO2)Wa*Eq)CIB5JqPg;Nb)~?+B2NO^_Jae^Y0w}2 zzBFpCgZ`j(jlyoNRTr}axy!3l48V92Z0p|TYw)N@@^|$@l=NKgnoLO!=)zw4sV;d* z(az?GbG(#hVp&be+w^ViRFkQMmYj=m(_~cJvp8paL;TXMmlpZp6u+r5{+`TTv4HhB zso|TM`6u@m@g8i!kdw0;a<5Cz8;YaH1BmUgvs z-RdwS-UkIltUPmqh)aVf!l5;UzFudKmzSG&Uovhn$pY#-#~n21r$(IAO6II{Qo0C= zvNrdb;UAXKrv-i!32n-9~ z#xgX+cd(1bUsOzTH=d264N_*?kHsP^*fBr#-^emgqqhiVL7Dn_9bX0_VZT`hfja&m z8Dz}jPwM@|TpKVL%j>P75CeOc>1U6YD2q#ZODGrNnFK4oBq+;LL2;g(+l zd9XI4U@=)0>VnfDjfii2Hc~B^5qM&Yn0?pCN26$9U|56`PbW$a{X9~4dNhE?KKtFT zj`?SCOS;e&w>-<{OR+a>QGHDFrRotB9^?a&)Sg_}aL%a3o$Zf>O$L|!JwIQ^7???wf5IwL4?KY?jyvdQ|bnRE1qy~^DbGLuCai@-Cw zjIjZ@ne~j${Q0{$7C}*1MP@7^O55x3=M9?!c0TOpIVPjiS{#g6&N3o^iQZ%r72GSs zQ}Oj#K=;6k70=xgu<%6Gg)ZAqgMe2A{>JytxIl`tD@RpKRhrm^N5yZ;x7AXz@mA)O zL|4m>?NR_j&-WL9ex{+&Q+?$Mm`9Mmx_yHc&~1v9qrstO zA*i2Pe^q?Hzb*_YSmmxN`q^Bi6(QDcB_>L9K(O5rTXuHIYI~jADVK;s(#3DH5(F(e zS>;W~%JVhw`3sy-C&GHym+a=F#`+ZZ4RA`i3$~vDedIoRjmD zgfI$)O6tPyS$zGzIti4 zj*UCtVwl5t&(-`?T{&H60$MevmohoMZO2o379+RUZFo@T(Zj!w*SRxMR-#J- z-fHxapo?jL^u6n*BbquL1LAh+SC2x=-PP4ustQ%oyFjG({lxDFbWxKi8NXxOpAUsn zyzC)?kVd6Y;8i6)TAxR1kq^BTHDO*1v9*`|R4#iU;XSOX{yEG}5X-3^2e*zc52H1h-llrLf;a6ta#{|p9TQi;uR-4BRE8@ zm@%vNSn0D$$vtSRU_nwFUK?nUAz9Yf+E;X)``7qq<8hSgE7sN0p$;CN^u~ zN&~icn=aOqK7;7UvU47I0r@v#1{c!?>4}z~*|R?ka929_eaaZJwHufsCiIc?rx>%s zB9+(#5dm(foQSN`NfZZ_1w+ELleA>IKDrAGuCRkLqsn_cC`Y%!QbVojz7ejmVpiWi zG=rlN%9A0P0jw=_2Rhho;!=}-m!VouW67&j3W4t^Nk_#h6OVt{fBE8|0(;A-Vgv&) zV#w*M@)@LT*-UpmPdp+s%yv}@G=lFYap3oiuU5Zw-W?YZ0R6)=KpBduMt|l%W93Q@ zVocA^q2k+|mx*cX=2vG|w@ZDsbX-ApsF0tbZ_WNDo${j=*FnI^(_TH(!7q28<&ZgE z1r;w*Pg0?qtJ`+yEE0w>prn9CC%q8q{63{m*Ih9yiiqKW)8eNJl|ZO5SCh-W_aN2} zSseOi>%1E$dkMFAH0?w$^ni5e- zYWI_JO%U%6JF_Pun8ZUjYkboK-%6kP10Tw7fvkUx^Qq!QFEk7|r7mOZ@_u=dLV>jb z$PP;?JbN|yOT9rE7yVGh_b*0(;=N|#m%jZ~+`g8gMqAFwM9{$UT;+~V% znO7yzF%A2o1*?T&32rDXWlgum4qw56VLw@zzo?XMaCwo?g(Z;KM?(ur8D1JZo(-uE-OIZU-H^w_XQ=ibo!cpg@@ zE3iR&S0aGmGZ0uW%NiT*FUnmxZD8xdsJ#y;!r*kW zDvOX%@;5d%jqo_oE`vrrZ1K--TZ(M5w>q8g7MZx;EX*d)e0iBuH(6e;YI-XIV+#3w z0O*9Z69Z=D_hjw>d?O5V8 zu?B7Upslg}_JlWyMEpMT>sQNjnJQ??VzxKqaCAE;#afj))WxXPzd-!t-fZLi*%bvu z0QoWd_JWDSv*H8jBO>f-Cn&z?vKvaV_i9-pOSJ&JoXr?WbRISk>tN9uEY;qydOS^| z9g|_cw+1a02qX9%6)|&Wjn@dn2-WGQZ!kU3{!uv0jiNPEA3I%b%~?XE+oAe1GqfqB>wugmTozq-;8?a33USS@;~=BvbXQ(Tlq+mOuH(UeUpC5mt9h7%)L z`6Gk!9$6H8pk=%oeK~hb(U4ghbHiG|b>?<^3`O``GAAb|;Z_K12 z-HkrX?{CU#oT!lPh4%lHuAEi?ka8D??VYI2Sa2em#+f#tf7I$%O671WB4OGTw3sWA z*F_QD-|8C!2`YVM;7Y!!!~34Ol?F<}86B+jR-KNW4Gmgm#k<#RNTOL$fs43`mm6A_ z6Z1EkQ$d@1J@=f2w)4PXL^1>I9Tw-7dTr{QXluQ?_Ruy`xq}c#**DZ5?U$o$>NE{0S zgfE@3r%0(Y_+j$G&;04gJy7elge$!x+3#T6kX1(8*4I#8bD~)la-n(mY|v+C|BWp+ zy8Tv z7DiSr5(dK<$OAdGBAOl|( z|LdJlViruDtTHGX&cp8a%dK)XznPvQgAbQ(fe@3tRnDz0I?bx>cOp8e_c7)zu$d0+Nq%AetoD>B@V5dE3}h6HJSi-}5L#T` zcnGVwvdO?pOJjS(;2#Z{4N3&#y#jF*e{N7DH|J6gVA5FYLP7j8pR%f>p~FQ3!GAiR zCPv29u9-P;%XSZK!gNcy~3ygj~a;KWvCr)apTHZ1oy4=d?; z5%=mo#ZgCTiE!{58_AaiBDSiCUe#`R@}id)d%OUVT<|Ke*L>mrh>&IXHEqAk0r>`)*q4qj&4GZAN*_)G`zhw3pHk!h}^Si1A~mvM|?5}rDfd-U40W;os!lB zc(6BVt+Kk>!J20CkQpwP5whLQ4YEs^A}nv_7j z=wt3;sm&+B#yS3dQKZ%|@Lhm5kH}T(-M z+0y9a`4Y$yvD*-lU(?qx$X0=_+3Bh!_`-bfbsh1B23@t=#y2A*$zdWovUkg$|1u|t z8Ec9Ps4OnJp6h7ZydUFx@162zhX9_FE@DN~roNGueaxUtT?jww60T%U^A}cv?6) zsD}r78{&{*CZtTOjCJs~Cz*oVONU<5Rq1vpIX^pZFAmMlXVA$-8;J|MsUu-( z--HGE+p&~{*^6xdb-hcIK)3TI#*vG7j9bjnagSMlR{Mh6^!H#lT>eSf?SsbT1<5U) z%L3K=*I)L}BBDrhhm2C-$cwKfheMl`^zWxsoXA60++oCGFww#Vs|&Ep4~hZe{C6?< zF~50t7(RILH<{!e3K4eD-8U|KhL&Ux{lefkVM_9yvs)Iy)PA%xurOX&>L0 zrUocNiX!9?@gGq`Q=^m(feYeLy)7mdk{0Hzm!`OVAr{zThf|`Gp?%$X#%)=kzvR<8 zx`lJ`Iq&{O_d;vr2SPc6n;<5`_=LGq?g}L8%}Hs zQ~1eb5b?(-fk@{;+|}u_4BK$Q*U7Q>zktsrt4cZkkC>y^9!c!@Eu_`X*Y$uOkYf!O zhE=2>Ts-nE5Yy57*o+NP$lz*9~ZFHri3jOhU_+TDBSy>KAFF7SN- zXD2c>fPPQ^Oe)h5^P4gK`g-BMiiz!mO@@MyiGI zRK>K|#|Xg|eWlK>-!Xt_z*WcjzyaTQ#@OwL)#M^)NHB{sz544Y5%@sE>o;fNPe1yz zspRU7iM1(~vD|ZxK7mEUK8%e+eyym8*az#SEhw^(cte`|UKPJnz5euQ+mg2aX>(%2 z<_z4v_x4PiIA78e7lCYaMzC+bBT`>1zn@yQ=CiOwwZ!N|9&z|(zY(}0H-CVj{s`4v zQ{RnPl^%9He2ew!i>JFXVHzrg)>Jiv2nprN^5i3uuB)r&^064WRbgUg9(fNN=|a=jSHzy+mZk z{QQom=S5bIGwUZx*TX5w0;Z+0pD_=k4w(@)^0&8A<&}-01_p~_W{~1w#KDeG>H1s= z*%H*grwfVlpOv&HD#MP%(tOG?x|iuw^=p&2popsUSTI3|vRUahX<&BC3_YJ-u?mk_ z7SzW?kF37$Q+u_4gtyVUPa!VS&FC;Bu-<}&7~GWmUFjf_O36J8!GW?wM$SPPn-h1j zfP6uIDBDfjcW;lk^AFl=$ESdHc=&A1SEfqeM%CldV_HAg7ou0Q+&#}ai#30>1-GAj zGk4W{$FmzgcUN1v!*j8O&$bfxAF)?UMg4B%n=A&g?$)yewSN~%<4&zK-p_ZL;*`w6UAJ~exYK?PXbA4Xhj2L;>F=Mk0=5JE4-eiZRR&9f4X_mAX zhlv$lQsd?do6{S6?t0mFWxQA_weIFzdc2(j0*n1!vgUNR-PCQR(FmEJkH0J&kO=D0_Eb zuJRga5N`EqcrssV?{~25(B*(9x2H*+Yw+uYTzT_^G4vu;U1f+wFv?89Go0#fD^bn( z`_2$uY!PR`z7hujRDT+)HvR3uE?bBk7_k1Dg_S-2*pyXo+Su#4tL&2^<@>rC`_7Na;b1ZgARVzFGOT07#hqHy$&&4Ir4R0c2Aq{il; zEl`#I)pF?W3{~K>pYL(YZdrj7)q&Px>eFGBse19PCCxirm*|lDb(Q*ZC#a$ipQ_N4 zzyZa6o|p{9Y+Fst?e>z+hWWIbzwVb?c8J93N^`-)Rl$x9=Iq0rsvRUu=SEA)YHvJ<6nmD3} za9MYV10bqZ4Y0x-GR1^=O59Ing*NbWJ;c~qaW{e74Jecfc3hOC!xoaicMluqZTS4) zi+ysT*MqrCD7L&Vo#uGC>UeZs@H8nvZ{m<>lZvefY=q?Bp8i&& zc7J(Aax3LG|rE{xE03N`o$1(Rt#C%&~eRh)IX*5cAY3=kEIm4M|t@C?c?uHpOt?& zF7AKq`9u=nXP61FlY%(!tUFwntrM&vqxe^+nF64J=lZ3MdI6`6u=K8ntm`4*g?JW_ z%K!7tVzqDJ{a@@3aJK*TzTypp>iidn${;hPzzGyV|KHa9^BaUckHsg$7x~B(Y}l55FwYxW-|bbeX6o zk(YXqEd`RfFGFig%(5xUFkQ3eMr{pBztQnJ$=O+C>T|wP^jC37w9lMx9{PRKXc05F z#NMvKmW7Ga6|lwY1Nde)R4Oh4SS2u>m=aBFTib!-N`3>)lDTt6Y!mhJrD;^1=jWV{arK0iWK_<^MX8=F*4)&AREY6r*ND>;T+ z?xLF{XT6%o^c|ZwtBYc%LC@1q5?HVIS*zO%L?8D7f9Jk_cb41v+jadDwmEJ3upA_` zm)Csvk^MQu{n_I_o(i5?5*+J)+Y3t#+$Xr9#TU9~_8WhG*oB~*+)9p45_LV_pV&JE z92&x`ES|Y@;eV3SY=KwvQ1^qgSU>W@1>3#d$2lL^cGvCswd(%8&fgoD6R=J6aB*VV zB+J%R;Q7JxPwgN$Q4Nmja$X{YvU|Vu-ql@I81_yu*VL(LwXWsy&qXeb;<+B+r+U8v z_0to6b_33t+#HzNUf`uAYYoJdc__Nc?Kf~w*gfx_bhJI*OgxrbGQwU1yd3?YhR}u1 z+jKR9@Gp3#e?#l}pq=h;D8Rc*qm_t_lf7wpCluU{uxIdM2XBWe7_OEh&)>e;lIC8^ z56XH@kI5h-`vN)2KU_NMzHqqS!*q~kntXwbB2q)l4qA%QGd*$M9cyZ0Z(1&|DQ35a zq?2P)@R8TlBGeydXyHx0v4Fbl+rn69?;7&L`;c)ni|k(S9}efnf{Fn7-I`Swch$iu z5(>Fp&?0r|dOiSjPF4){KJGe)wy@b6HwdKLqI0`BnAI)sby`*G5dIC19^tGo`WXVI zH@SsBPRYY-Gd}A2D)^teee`YTnahy-nP+u7U~+RyW%2IIPy{8Aovwx>p*{U_n_nXk znW|sm*p~&r%}eof1lK_-W9bQ}vv;Sd2o7l4ESzG_89f(z+t9D#X#*@zU^#) z45Gl4okZ?Oh~4LuRO0s;d%gA0$;R}4X?{t`#2<7K>+{EA)(p6IY4>o>`J8Z)^iAz? zzZ9~$MgMSGcyf=){gZ-$GTHBs1r@~Py3RB%*t4A?qwS;<;&a-K9Vib!0S^whv4@8b zUU?=1^&#$4dRc($W{WZGW8)nndbfDn(2Y0MPmQMa$k$IdU8brt=se#7E3om`$a;7Hua$~A79CHzVb-kq5Rnc*{a$>9Y1jv~)xfs!F za58EgCa(_M%!IUbol`As^hhEK@c|o#o(s1SRyy3eT>H@Rz}vN$^R!IV2=#mXS>!mq zdU*`6H-)-O_}x2&Adhx`?vd!$)81KCqtl@cB0)02<}t;w5O>Fz0cP?`!Gn zLD{FstWX9)<;`uuVrv)=?6-pEC(S?w_?h>ztij+iH);9+GIO*6ggU&Qhg6N8Q*58E zihpU{C{*g*c)aN~l1fdX8TVQ$9RtPNWPGbPN{4L1;zded_&<;7E{M)6iX?%i)^%veT22o4wMR z7(%-RF&9pAZrTwiQ)2Fi{aC;i(_By$06wEeGdV7}+i!Q{FTDAOdki>SoC?0H#0~gZ zs$gW1GiU)lyM{Ufug1FUC;W~tmhSXTWJwy&G+zhGT^c$CCg!4d9GojHnO)SwoT}P? zIV8nAjPK!`QHgXdi``X0ZLLMlPp^q~f#An$zo(jjFEhyw6a>n$)4aCUkC*k3F@6(h z)q=ZO+rv*&+j&zzmHYU?+-dM3b6r5gui%j)2c33@*(|F6e@GbKWzO?Gnr(((%P7!= zx3Z4x$r#aLYullo(vU?gsuLSImVh7AgJVbb*qO#Q*tv%G*tw>5OyjXj3WtoazH|k@ zw4UC^6yIB;uT0G3O^#rS;@cq)ZrF!nY|T5Q(8tEPCAG6aw|a*zxM0_UU2iKK?6_i- zsh4I5sID0|ll2L_m~Eik?8oKaxN;isQ(EypiV^ruH3=>g3%^*03XbA>o!l$$aTKk<)EzpNS> z7A)lkoC2ozVv8Qcw=Mr&q-cH|TqzcNR^f-*%WdCog7m5YigcpMaJ%U*xI8Gdb$8RL|RhL6S$t8=!ed}Iur59vFXZBwFKX^sF8Y$m zE^wK$&79>!)%|BdjgUtf2=mgN&z!T-vWes27BTK^ zi~yGQ12mC%*L!o-C{rix%ty6d{yRh2i-a9>48b3AxcT+{$&tjb9 z+5NEimz|}&yvngDW!m7v{NZ{tG_pr%B;=_WDJ|POL%Z2|$Gj_qu_9jK&B#0a!{rfe zQl`&$1h5D?kWCkSV7^I8y6gOF`{$rGsZj@DxPq|yneSNv=2HHJt2E#u(z81kSR#4| z=d=l@@+|Y9pl90uQJ*tQdDa_ioBMn#w`4nb1XUe7?e= z6jVVy#jbqSZPyu|w^M`Q?EfR`8yho=x@2S9wyh4Hq+{E*ZFiiGZQHih>DV?q))SjI zGk4yZUvNI`v#V;YwO5t1-{(?=f~`*5_O~M4%(IWjrkCyYErH@8=Lg&$1FceB^70Fa8>t7fF&j0! zBS3i`MGqiOOAQ?ShJ>Bg&BeU1PG5KN!%8_J4fQDrk8Idj1fUXVJHp`LFhZLhK;B}% zNyOi`8Jh;~cG0QCEB?UV@K@-HVZO^X#Cx{ghW*uUBb~!^rPbS+7d!8NK`I2QJ^KYD4bIpRy{(Q=m9%U) z^lf=0*7m-h6<_GB?#Is8wAtI2W&1dH?FKQoHBAGmdS0fS!`TQtHXDG?`*8+ByoU!W z>o3Q7JGqXpr;mb9984Vt#ykwrZ7Y434^me0bvyM!L^mZ;QY=S{CTY6fQsdp6P=&p9 zzkufqE~k`fnZqE*J#R?TcbeNXd{-TxHRK-Q`d`{((p!1HuPSy$XkRlMJIj~tK=m)C zvre17t={Xhy!#qG{Q+MVk8lj)!m)NCBy=_V^nVYVNv%r%fPFWStuIGkOP@n=0@G;( zRJXdH4^|e|w|15q`tA+cL_DG|<(p<{`WL(g0)FebK(o4EF27br__r=m1(+9KRxJ2R za_&z?TBq7J=dq}2KAy+QTK(T2e*hEZ46I}_Ib`PLo~!B%)`(sP;_S-!Pifr~pWiq? z)$Q5~IQ~D4B6!j?a9hjqD{d707*l6dzEuBYV$}CMf6dW`-l}*f9N(d{i0o3}vde4E zI+V0a6=~7p%fe1e$!*@irnZaP8{*s%e?PL~vp=WaZ~YQQS~RU7Tu)t3V3%>u$J&@{ ziUO8rKth&?@fx{r%4hH2^f>Vf*|hI3Gqx2SvJh6hE1f^fU@p5>-+0<8*Z_Qrc`gB{ zT%XfYfn~p&FDQ0tQU+9oT>omfJ6J&XxBPvILzn07mq$|w!E{WV=H8F)S(XAjJNp@T z<#Wsn?3nSA=e=At=^WXI(a>{KdpqLl>j-jxzZq%4?zx6^uO~vdP6ceMKP5RIslN}O zZl<-=*+-7t@IT(fz4%ADUv92#f937$@PCdeG#h+97_?2s67piWYabml3$*FIFUb+D zzJH+v>eTX~jck>6UA@|Oz2yRdwKW^-`~G{>8&`e6wsivo?*wW%q`95x!f4I8{T4^XW4)o(|Pe*d8{8d0?(Hot#&$XuO7j?u7;jxYcp;8 z52p%#vR(uwo}!mk*ml-mB*(`Q3Lh1m>;gOTUVB==bw+sL)s?pG*TYQTL8D9V$K+$> z&U=mfCM>eUPW!F%S9!t?$sPtOQ(BW-Ji*X$&$Y!N!B8A!8srI@~MG z?1cU1%~l#84d*ACYtiYy^UC;f;&$@#ivS+Q@08CddkIT5_k(Bx3LYtm ze>AiNH4j?}>`Csw_XfPQS^#+5EuxS)7roV~vAZn_K>r#VRJ^PBj*- zd8>e+R4<3>)+Xc%nOiDN&wUM!+Uo9T%002R<0!NEB1aMX3*Fn?00NwOpLSGK$m^=9 z{SMDFS^-(zjoc$v_vqHMIQE{vtd!9veUnj2`3cgQvtPVEfkp>)5@MApOqo z&p#nl2Uj9~9Y=GOoz#UpXSk`#d%{*fuYw2}vZL|&g@*BujLVIW7J!?Z#nEJMxf z3m%0!g(j(~1tlw@ZnuDNB!=;I=TJ+$?alR{`!(CIbCrADj@~l-4|7|4#j=8}NTEB2 zDI2kF4MX$DF(GX!dd1e5g-{GdZJ5q#Yg0EX`o*F+;>Edw8W7iZ^VxNjC-z4s9etpC zIlQ{a^RFc?=r102J0qvDhj9g!bh{`vrQWpthBKXAu=a~#eb47}BLV?a&Eq))=(z$= zvNBBBvpHf0U5_odtu7c4fjqCn=@BY!S!s)NWr4 zhE++H!%-|RTVzMP-Lc3tY~2+T-XB;{_rgK;D&@#wZt2K7Ku1n#_qOetmvPAKk0MuH zoDqe+zZ`u^#BVWwH~%FdVJZqJ0Dl)Pz6;2c8;8kO(fSoicsES>9AJW=PNTynC2qHn z@BfVW9D2yI@2vQF6QN-Hp8HiWyi4O-m){c5f8{#pq(DIhcb!jlS%P~#$U4?8GUyQJ z>}*Naj-U@YJQ4ch^)+$#NXVOm9FGG2!&)`T#L@pVvTD8PYpBmQ&EYlDAp6hmBZvmB z(`vd<*0v`CVM4U*-?4H!bP_7tv^q8mtG=?jMB6f7jFN_uoWWjUGBS_k_^iXFLl+mI zL$8+{@BMF+_2CcBOqc&~t)aqxE$^kR$By%_U+Y=|RLsKmLyZKKjPX?3wVrwN`?yUTXJN|7#yF4r|np6qd* z`jG~&NF_Ja{tb-$LBioT5-W1lB{nNY5M?2C%Pl>@X3l{o*Zq#l1Uw<2EE$WMdPF(T zY8AsBwZ*=IO)mQFGWZ7LhmuXf!Y%y--CQ4rHyAK-OvVhR-oo6Fc)Bxr74vTxu`9iW307Y~S!Ff&d_(x;i6|zW1HYsNk z?jH7sQj$go4I>e%T6h%3hf+x-FRm;1zhskD%r_-bo-l0xmqzzLs9~)V+i?PLME_ec zkT?Q&KJB`WV;O;BGruCcVLDK6`86wcN&czUry5s)*_m@JAg%jVAs1AF>quL%$qan>zvkg`w(<`QV zB|GUuSQZOy{XB=BRrqr0*S`sCLdM1Mj3N$~9^QIjzA&})0|Cn%2T38b?YUfR_z#(*3? zM#MKYZCmU1?f(EW|54pgd^oE<6H~xgUi&Ao;R&LkeideJQtdXy;UI~L^pKLF)Zgehdm+HFnPS##`}fYX4?( zWm^cyHLKeyly7hkL@ZraR$Ow05cnuQ2zZP0omQ&6QIt>g7b#wqN3(+5^R)Ar?UJ~_ zxc`CEEK9>HF1^8{Jh|%@P&(`3J&sDJPmtHiZb~S12ccqUe2J#Y)jtZMA;e-UruDa( z0x&=99Vq}$IKl-lx%)h-wApTum6L_7z%5WO&e!wWIM4dmDthBDUE_CH%GY~Z@2ouc zrDrno{{Su&AC2cTEOpC_|7VlFWrMp>4BE6zwboux9ZZLN!RA^qsv`xRoj3A<-ry@8 zc2u=rVXQVXtvVRLpGkAE7=_opcTMr{2g9gkHE04)$E-Y^x`(7}B2!8Y?8Ancb8*+I z-q>0&zj;=60c<1{W)gn`$%Pfsk67zJ7;o7{qQQ;<>bz2Zi?Q4b*KWBj#sc%H;7NZ1 zYB<1~va|g(?BzN1#iT{BU^%CoO| zT56!xE*zec2%Vo~$p2j0-X#rf-Tb_*bof@Y+v`ldG@rrN|A(J@iSW#}JKv?3`@@bN z5PrE@$vWn!i(NY%)!J@of%S!*$^aphyQp25(RMP*rD)ZQx|GC$P)of)p(<)ZzAT&c z@1xyQ^PHuUE06OSFjeeTgNgX7-SRKpmcEb#h^o1*4h=`~z z;zc%G2wu1;uH)h21zKgcWJ>9l+yH%S2l%O{Td)0 z=tcqRX$PLu4CWNb2J?Z>;`2_^ZjT_}tQ=JTv%NP{4whT37xj|Wjhe?()tXlgtxe!1=>lG6awD(9Hn?CuQg?fiZrF#jY@Uds ziWO$R`kVRnP74opCK#iRq*ct1Xcbf3l)VHNU%;|Jivl#7E}H@sJ!OG$n!OM}_CMbLUji z!HfSUvUJy-#P0t}C>GTu@)@*MuO3K@MO0(vP_+3AXQsfU281Bfc!ykd4+PY`+Byth z3rO4K6Lo;MY*TChBB3dN@a3PqikH_Irk_nZPt)m5E;kIZjYAsEEcU@fO`FV&mA2pQ zf3#1;Bh^ak-|vpa$_d@A;F~5~;3;zz9Alzx)sJ8=fz|AxD`d(Z>R9XGBXgVDJ;;XW%I%k#3ng=hq&FRUgQv{TD zc6hV;c2Bp3MTlM9p;tHU$AS1p?p{#AqE}^!31!Jw?q>0Cj1#sv=`8o3EpIs3Smb^z zy3cIsY#jM_H|V+chm5iRFRS(JS7Ga~+An49<<@w#S@fM~0jGJdEZJZ92iI~>C z^$H!TEscTf!=R(sny9)|cs682Gy5yTTjakEC=Vo_Fy5T_4%$UZ+TUy8a5&jagz}#P;G{^DMqP1ax`logsdHg|}_4 zflmf5##Bg`4~bqsTL%X1OS%*O6?|}&{_N}mCk#3rV;7i#M@ij~Y$`r@6D;0!rjKy# z0h(&_L}($aQoV@+Ff*Wm^@AjrR%-Ky^Z0c+(aqG!a9jLS9Av~4FcY;}&Y8Ey=@0!P zR<3s?pWOnsE@CdYt@%&Y^uaQ=aI*9bx$+@KeC!F97fS*QKebBFi1EXa+^i(kQP~na$R{`BuS=5gt`n# zl?$42P52vbqB=ZihKTO$!t@q}c*frZf1lxc! zKklXFr}&JS;Ka^X?|I`w=w45iH}Z@(1j>ik{o(Z6Fy)uzlveKoR|m^tEc^XHZ;<%F zTkd(-ev#b7LGKXt^kH&WMD!v8{BAUO|N5Rix0%H8mlC=i%mD*Fp17|51IvO&8;?L> z>xR7@mqTxdFL1oB1)fW9)xQ0bxEso-r-2W*Z4S+U2T*1PpF7Z~te+en_9MxdQKEa? z=mT9Qi_=D(QnS<2N!Y9A*Qg-Wb-cS5@&kt4DM_TX?4@AppGX+gCJ{vh-jI|L^<}$K zc&S!!Oz$34CC(0`j2N2rN?C(##ln$ZFyBvK)Zn6KsMlCD{E;egxs)Mge&~8I`7t&R zt-(AO5`q#n$BZCqIB@l~4^Df_yL0o6Ry$swjh1uO^B{8ldyu}om>=oc>{~8Hp%ae0 z#=rP_6fy4I@??;qZ~{a1Cw@fuN+TO0%y!^c8*PN zK1H!|e8t8T260>jP)`<3VgCq07H1HW3du(D;EiMAS|*WSVk9<-o2_!t>(8(OIVMU` zzTl5mbxLw_WRE2(EcSoTHYHH87H2Rj`3H2^y)D`sq&vdmWjqO4_&JKrH-H ze_D6FR4}_5K4!1~-3y2!3jd7(i%&sB1F>FH1HfCTm=jQMZgu{n!9of zvHA{~%DyF7N}ov5VpO)w1%$j7+PBSmF>MCmG{F%~HiS2~gcP)t@)A+%%6pJh?W8|;*Iy=!J3Xw=;g zJ|+pmGUPZlh|eU1F*}&b)P~bT#FNSB_V?0Te(4T-s!VI_1x=8((!Xw)65BwQOwl@@ zz@I&W!C~t;$H_@QAlWGe-zp`n|c%Bz({HD4HjCsAQ$@N(-uR?}luSEN7o2 z@`L&yJ^~e&LzKb%53#R-H;h``+lCe7B5N&#O##__1;YjTVUg64$nt|mNnwl)LPKC# zRq%@q6(I&L zz)*r{d)Y}Q$=ON$2+7-=8Ag$H2??7D+inNui%~Hv6H(TnGA*UP4+xPvw=Ky%F_D%t z`&K30{M{uQx2?Z8th-xQI3puWm`1i6hwSD}8GwTi7O$b>Mox+Rih*{dqG33`ZvZ7s z31%|%=2}~~O?n#bJ~)kvW|8U4Gm)*U#4lk@O{~Q1!|xV!ppRJxZWCnWdAo) z9?~pHx-QxnC7L*zhoa+2WurkAD%7f}gTbmQVFjlmB1|MM1~JYL&G=sL&qUbyVkqc7Y&Y> z4G#4eQdBu}UgWwS3SIeO&{pTRFPHquDJd6xEm@3BoVSb?yHKSb8|D3Gxk8bLmfC#u z4*5KYMg-|IKtx2QFb6sj0;^Y-<+q^u0O=DhSJHha6hqxVhuXSWfbbIq zq`hf~wP<~4s!nH%_ng==GEpTgI_CJnE7RqFf;( zUaw;8Ee({>K2xnE^tV;s1Lc@r8G;hD#@}8hCMaV!v}Ojb`1=yj88d?f6+>=MQs!RI z>SkzGO_@67#LXMCKy*edN`Oeg8N_w?z+G%3chIZ>CW^>*3*8k=O-H*Sp((tNE=(%7 zxS)rPSagFt{S>&IV~sAK5+(bYrEQKJ^N#~c3{09CYIs%HeVh*!-XWk6t?_hTvSLp= z34dlMcPChfr>=*3QqGG!FE^DT6HpNG!_x21XDQK~36dCbK>fD#eTkWLk;BeT8 z(v;dpVj*bd2N18mWWy*cWUV$tjMmU|F(Vm|DF7)*I*aODs?N@Py3~PyAO@n|^>o2s z;bKCd_$OQM!`tx>pX|tPAtfNtKeTZJ?N(C>R*%unV8#Ft@wNMIEdzxS?T(ULr#xlE91Yu;F^i_nAioZ3lXa3AaEi>7dP}1M8euR zRvj^@_-B>V7#cI0L-;0BIk&8gv$S#VX;Yjjs0V+0j*%OGXkocSASUiJH2rL#|J5m)jPm^? zqe4-rF{I`Qw!Vt4&pi5)3`Va96_|uWQ1au?<|RRi{yCk@b^})=2KE*-732}|X)VJ) zQ2D?31Xzgr=s(3KvzCVXK>)u2!uVq3nCrNkCr-ZV`G_38*^KF=t}e{O-R0%%CG+t# zab$BD*Ln{HQ=I7Zjwt2ekrk^2`o%w8MRi#bJL`5u<-@_vb%n~f=?vzS$7Pp=oXz!5 zPnfZy^d&5`7PK zQDmgB-GS)gzr1uZZSBj@n)mccwKhYwX$m7c!(rVDK^d$Ao?_ru%eGb<5feS2l`kD= zPz7x7qtFF$1&As`0^T&?lN)&`LlTC1P%_GO-5dk|$d|zJ-HVx^erw4ReM%T@l?3xU zxSFR<(;7Lx6E30b)*Tqyd&UW=B4U%g%F^;lrE0B$thrkwbc$k` zFHZs=Fb(O(lQ@29-|c~WEVI2K+p`~e(#iLHO~u+{J_&{w`1GTV2h<&WacC-Aar3y- zU=L7)6JXh+>_AA}lXSHWK4TQv$~KV8_A+_Ex^;R^hm6hYQ!}FPXe9jzUaOg0EqoW> z@qL9hg9v`3pLKYM`r=XV9=HObOv+O@dvLmoz%>rXP|43nyjHJ+Q+6dA48@{e8m=TR z?Ws}o^I)=^IsM^^*2RK9Wj1mAtAF@&8C+iIDavtQ0FTq;QB=la?wJiLTIR^kCsq7W zH@X~0h-;LMuZ8f(Fuu)Ed=K=L!*~kY%(Vg+5%wmsA^HZBj=xGBsyXzDq|^lI-x%!fyrn(T##_v#npBL;x0UsEEY*?c9KJL!za`ityiUF1cJLC zVN9qQF7JfH;R3@61aAZ0_k=|ozCu{MyTUv3=IJ|~6TFS+6Sr<|*gPv*IQgQs3sJoYt_{+@dpgU3Cu%#Zzr2*`ss8KQ{ z16^XkD&A7tim2Oi1)U91s#hxZIcRB#n8mtIA6vu8vS?Fy`N*|*N@~i{lvL79-}sii?D6MCqx0Gt`Pnydms{I52k{3)Yh?^>5H^-L&C`r z?c+GAq{!AJNNkZ}ng1w8mHN@szt`v(Rd`u`)`PAcvco%Bp0DRXBe?J~*Q6eTkWrQN z1Qbo??NS~tpF+q-&QB|^T|!D7An*p3LQs3#L1f;7>`N@6rD8_eGzXBOHVjZ(5etgd z*Feg^o(u#Dt|6_~5v=xiUljAss(N_L&RHcB0O+pN&3!Mk7)Xb3n!#Sv1p_hS)IjJP zd+`w0+~zdKUC5Lo>5Z4`I67+-9DP%v8z5_myi;8g#~_4{jH37`A=ApYs!?@o74A)= z)!2)w780U`+Z5P$9zg9>X~~YlYIi?M%$J`Ha>+}9*QPai0=hTwCHJuV6!%^Q>lr}^ ztXX&l*B!&R3=h$j~W%p+uxa*s+2(<#~y-4u(m8_7e(}UW(_cii6HV zWsQiW!*?NOcPD%?2*t^syZ8)ul4~xYPxEzsSmo!$HyRbPi}xd0{rSeJ!Q}q*V@rp%dVkuLFg#t0 z#-K)?u?U)y(b%wErsZ10Zk;%jcmR5|vhZquFT8$|qNJ?eY;sIj5lSOpCPR9@ovtd& zuU5wOS`Isv-dElw3*WN^=j3eUuAC={<%~)3gkiAQL>rWv^?$9Y#)gmaq=m(uM6!gG zKPW4&Rs-Ycg%wOp3$38!T(bKm0~7hr%EMY7&Yx_!c6^Gy?Wo0oGDq^}T>0Hq_93Kn zU3q{<^XfyIp8FE!sm0po6A6LL3fhxa-^w^kl(?N5D3iQKJn9s4Brqshf4}>efC)^O z0C2C(Xp`VV?)+Ma>@CxjAW2r#6pw=W9|_5^r&vBny%Yqv<9gbmmZ>Oi)SkYj@Sgqd zk=7zfFt9Z6#3PuiK8~ukI(iC=_!?C~BW7UGU+Jy~Rs8IOpvC4t>k;>y2aOrzGo2pB zgP`o9#ITyVE!A?igqRiD_54qF4}24RIMZtiXM+ZQNheopc0tj*b>59m( z&_`l|y6#!NcmSj~{_W+<1G?Q-hj6F|N8=^%eVEXaAE`ArB~n-;=@SnsN9I(Va8f&e z){|lPfvZRltxpuH7@VAfU1+!0P$w}y?Q4ui#7fzAbE|qShGD7}5jkf;jD_(ZtAj{Y z!6KCzZzja>hqF?HMbCzmHyIwij-y>fHH`aZwoR80$Rod=GKO>i&8#brHPPfdJLH8( zX4g+{`^ms<3N7cVgV}z20f}>$;alrVh-C=AUN3~T3Zhhzw{91FP`tCxRx*Bhf;^rt z{|;5E#I#ufn(M~ha6KKti>-r&Zl3XEjqSTlScegCXa_wtz!WrGqIWZ@9iY6zi}|B|;!Vmm=nbKl2Fs|Gah%Lg z1J4E7K)vMETOhn-n5dG6kK7IoP|$DHv)PZd)yPIkrclMh+0fS>eCQjKn7wil#VU}h zhDCdYA2|jx6b)s8DukV2tn9-_olsVA(8MR`Ma6sYnICuHqZ8$M!Er5=afr!=>yZzr ze1qyS65~$A7=(l`Atm|lzJYy++4V!KfavUbj1(tH3a~kFCuY%fopjaeVl1)Rxs>V= zeOMO@w`ufaHzbDsgsP^MiJ8W~7c)Ig%P)`PC_C-46k&^3-o9na`6Od07OqMjsN6m4 znNU%L;Y2kGo-x@}Hq%C)Q(r(;y=I`cJIrvU6V!WGpL1i${mXKG(@jEBa2pT*5#Wcs zgQBlOFnhquw2oX%Yf2bg$^z*}{A_Dcrr;yr$=3{e4w7C_KK@rp*a3mwIOy2o?6+Vd zAXvgg&ww#VR#Eb1jDGt?;y$l5$8*5#ov4($co20Z}CyT~T7Sqzv>5Ca1y+%^?Iv zG7UVd-5|c(z@aVKC5F?Futc(r+Q}g@joXAftlvPub&WO-D23K;yzqQqk0KJ9Yi-QF z;Oi8mQjDO#DxJweq9i*v==2RQBNSZF*wrUScX)KDw?O`gi5AC|NYHJIA&J1_63>~c zz^*DjhJ2Fd3|LyJ{CVUrcT!sOl(=8i+=}o)iDS}I?K|T{i}9taXj)tk#;6~=3THWF zZz;at(@GxiQ7IJnY7=-q=3*N{m!J?Fj&lYHGI{TRu43mtX;L~;wE4XEL7$rpiWu(& z*pa{mtx^KsE8H_0{fuCClb}D1OU@Z-Zsw+W^JSkgC_zD5$xgf+d2>KWwlxM3u8#o1 zmU0M9!MvA;4=jncO?p`N14t=6As`vch8&9E+H zQ?*6`E*_zH$4x4HNE9}?D6m9#$_%|j-?A(lvpIOZ=jyIm%Oa67dbd#yDdTm(;DHLFt^ ze)B(tF*f+X9JGr^v+~B8;Mg4?k=xxi%x4E$OEjZb(ZbjCW87h>X1K{lq z?pJnks)^D%#?i(6jBFsrC1gHDH*hTg!LK6Jikm9dAF_uIS*_-fI#GfrFJ~xiB0u!Y z=l5?k=w8qjgHC&d#R@Lv7(q)Jpe)Lci~@jGlI5g!^-?_Z#eitV8Z>YP&lIIKR6L zuZF>j&!}fJ;(r&`k#^4PZWHyK^U8F&{Lejwp0;P9$TkqGu7c z8TK^Tj18vP8cl?{cBm*A$@KEqcqcCYty^Qcx(2PdRvv#2Y>-06{C+o1cug8)6~B@C zV8bq4b+2|bp*?sb&DnPvZ8Ii5vE3tuCx-Fvyw1&hzY3J zbmEw8d`_-$zT-Mrw# z?cm`=`ZaV!@J`1fBv*Yn63Eb2SaEa2^+v%lQIYo#r&7k1{oT_YGlhttt9Pnc4@+9x zI<;{FlVDk0#L@dS1z!At(&djC^y*sK_n6%~g>DTf8oM5xW5gyZsq;*z*)cJ~mQftQ z!X4F$?0{#``d>}^f(EM)4s-iV*wm^=OPaLOg@^?`!zw2*ztTDsiU21sUZ4K5h=&kY zT;&~C(xI$^6C_nVc;K5$y9t2Hv;3LqmN&4Ck}xp?j%~nfGL@zQLpKF4v)`OoH)>e& zjo^llwL0osLKpcWVcg*`zc_uA>N)n7?**NS?EKQ!Y9X;6k9Ii|k;2_}k#~w#j0x9f zI6wIx1QE+!L`M^bgXzFJt~$K{oj7eu-GEAW>`5Ibw;+ZWI`3nlPhkfLUPZ9!QA=? zUl};0ly;;kdf1FYpD}TR+3oTH*j-j^B%Vzrtj-GJj>6qP?jC%rJA}H{`gdK{u|-2k zZnTA==~dE22CQV{uSmHlSFgiX{0A@IWg~s#f=@T9uEU+gW$ZeS$ajX~Bj`^y1mJ=f zI!t_n&ymzfl^CO`c)tjuO6Xo^Fe4;+G1tUf!uYzQWhPKvx>Y+oNK)k=Bz{#7Rr8BS z#8TNJi6S_(4s-6#cG;)Nu6f;p$j_KOi+SL0Lig{RfG1^e&KWF2E3k^{yy&1MVR(v8 zjrcZr5k%P90B~Vc#nA%yA_@f+g^O)P#2h^*xsh7#pjRW1i?P|PREP5yi+u3DfiwPwcYt1C}|(X;&b8{BFcjUewIGHu*q%E z5jN6V;JGKyO1pNdle)ru0La$G7VK3o(A(>FX#O#5WhFtF%k$j~9^yN6vo`$_;HxJ) z%`rH|L`e`a>8pksx5k|po9LJ$rK$;!EWOi!y@UM8iFa)r5C*CP4JFd7ynmsZfGppe zmCu1b35_(5L>g}lmQ)P~I zJ=$mHuuzeNkr*or#0=+@6jrh2PDweoY$Vtg-U>Fuy0kb_s-D_3_iLI0*Dmp&EKP!BgFgFc^%=#HA zqruZ?Jp=K4{8Zzb=`s$@p!Oa=i{#sI{Z8+YP^+GO(a>0@c~|#!OY=o-ehQEjGxls* z<&el@jSlZcV7sTw??O*su$+}Sh|03A2qCr(xhXQ)uu227p3~ar)0jd3U}-Auhk!l& zr4x>Ze>MwCQ4&O`Cw!@ghg^!i+!H*b)$(S{9vQt80)LX+Y|s>euo$1VoScQ0d~u>T zRpsR3JzkOX1g%nh`#oZyX!K)whBKQjyVHv*@fFPXW(8yw%@B2Z4DT4sg=*Z8II71B z63e=|W1$WpG&OR%H_P*2q1)do)|dv_otA8DfeNPc$i%2XO@XBxofYJ7Ly3E0UwdXm z@C%jBtagWQv}tGcY0mxLJ1bbr)rM`|It4|>9=>P&`k0=*># zP()sx#51M0<2g}2-w4`q8kFabR@$Oi7cy6~OMgfA_oe!AiMzy}H?Qyp$GJa_3D+`T zW9S6X&Wm+#ECfBIt5xfZ`%9eT(8AoSA^cgalBvX^dsQuzWMa2I`i_kh zX-h6}&R8*w$V;R@SgYL2?ulzqW3;vVDq$D&bYZp@&95cUPdEmH3rME0y#!+u3w)(gIXNs|74z9GsgUA`;W48S&ob+z;f260j_-m~L zN1x?8?L#{Z5Dba;NEhq~Q;*`XI%i0c8#U>lx-pjiB`O{`jFx>R(G#=y1~Wz@a5og; zp2<#Zlc)+r!Frki^g`?*H9GfMC|K#A#!UoKti|#9~Dsi)~r-S8!_KG|6c|4qW!a_v>(u5|P(-k zJm{XE0B;UofbaeXc>bvkt|y5bF}Bx0&`>{_R+z|pD5*Bl^1uM7z!^D4VGcn&kER6v z?VwKes40tFWV>^i%D>|gdd1v^7oLA;$+?#ymgJ0DdSMeSWBQJ^6INOGp@=?BF??W0 z$dRSWmojB21xJfXq*$4w;_-8Z^zvn4-i3%1S`@RytN0&ish!I>Rb+djD22>Lmzu5h z&uOA93WmgP@!O7c^}MyW%GN|p1q!frAZ(*VM+ALd<5?!s|5!-k-B58nDtW=2uji0f zNC=%_%87Hj<)j0>_s8AVt5)s)Lfi^^-J@C~iRZGdQIx@Fm6N~jWD@+!uDl{l)<;9O zE7d<^P)!V1^u-!6vf=ExgvsYxr(cm`^`PBETGMdPg8nI04}@SlQPYaauBW}IbDtN? zzR<1@>9r&V3I6Yh@7P4WC$ zPagrDLo=a!X&?l=x@@{O^ww5^&^`oOb-`M~;+AoQWhXFElq#o`hAoL)%alEJtrNSX z#tMdkeaJDude$#HjSr1j6QGn3(^D+@9=wz&zL6g=8n>3OK*sL3<7uHNAE^1)8SwFM zuFN5$3f?omFPC}SY>H1saQyL+|4UF{fNgt3qqN6Fh!>T&im@VAu5i$^GN@7l)y;zq z@Qu%r%;ld9L$C^2)Ue*lQ^)%u0%cQCSg&yPS{QubdtISPfk;gB?U|?65e8w0=_Gkw zt6rWG9eBA&Y*Ik{o55YNYcs9izP$psG~!J#&*8^cq>n(6tH8z&Lyh*HDzJS7T-Eyl z>p?%Zs)ZC{mZ9Yu=VYRXatSl{9nfH}AL__BPy#MJLDa+AK5&Mamkz(2sH)4th2@(0 zYDG!(aAPKLidi#wi9$Y$FM>F8E+SEGf2{V5${;%JWd;SuP$w>|E(?I7p6v#x9ZYlv zM0Jyni)vK+;3OucLPEb*)4C}57?x@!jdsjEjv~+- zx86Xn8!FG?YBuZ=B&KHCV*qxK@0w#>9EC35%xIn68VX1mAi`COq8QFFYxhQ=7nu?# z1GR<31e5{?`;~u~{>0!B)>st+rwQq+E&!Teu7h;BqTfo>@)O~h0DEH?559~XjJi9PFus2vQc_}=#w-J{ zU5L!cMHR>-xDFcAV!d>Cdh+45%voNr=t-v7%@Of_|1SLE!?!~4yhYmcL@uV?d5g>! z-_#are5b>?j`1EK50fsT#r+(k3*7(oYa!3asVQJKSqRD_9oe@fr==MQcke`u1hPnh zs3g1oOr@M|ehd1XL^kh??v$iJCU*4>v?V-3BD#ZQ_K-e{9d)f0%k656)NgPmP4f$x0(wQLeU(nycn>H{XHyg7NH`ZJ zYEvXTZKB{s>#j5;{YAt{hj?e7j)TVRToZ>yrVjnX=>h=B3(UELWN3ipM z{$7^&#ODzoTG(x!3L4PPMlv^OU7M}X;g(RWBzhnq@SswnLaKnDm>+m-Dc)?e*2k`uTCcuo3sM z8b@hmFlaA6`V{nrQs=ZqJdkpMJg^kJ$p&#s%>wEHE7fM2HmV7_0Ju~3Pcs1D3XE*# zzkU@w1NX5yx1!M>Tap@BS#hJFcm&lxWKg7GR{cTRPwfifrlIK(I*Z-hXx37VO+a^c z8A&@J!nTTmOb^)uPXjEF|FO&z${nttGu^*x;}3sU_Ax^su zhcjKDi`VtJNHIA{_WyC^URareHDmX&dF# z-pr4qqKo1Q>p@Gg-dSL6`neV= z31}x=Jmfwy#DLo4&gd^?(=S#KqDBP< z%2P{tt*Y9ENc2ys2~{X(?l4=sOEbJeS&-TX*_dL|cM<^lW$VOQ8*6aX)^8sKVF2^# z;9I^|f%&_gYEU|mg;qrX)moE<(x!1=z~L!4p2_b&JTbG!!1LuK{Lf;Z`8 z(;)6#%jG5T>-TqtL!eZL*7;8_a6Em4y30$L>Jqc+A^hs7qB>1Il_=I4%MFf->ZNIM zB#9>rAn?>WL(7=2kvYw=!8T;yZr2u&c9@1v*JL_Q!lzU7%OC)bEzN9(0lLxHn%d(p)=zY4Ll)@n55# z|Cu2^Lk&LjA5WrmHB18!Pv`sCb1FrlMocN*l$MQ1#q7%}lB?R%bedl+zFeE|i((#9d!Wmdf@z+b3sC zoUg;_NG+e65ma3vk<8LxQ{a6+(jDGeEP)$m666tLy0r}QYtUp2-aOfeUTM|9B_;18 zEosnSIi_WHxPz{2>=jmhyjSC6G-B7wntYMh&r6ht12$%b&HEr`E^hxrwNDsexnCVl_fD<6R5eP^l)lei6YiecW4t`tc^ zbzt0cU)+oS-49Tx$1najHV~i|5=~-O;_!pdoiIs+=B{F(JRM9epvlZ4&L;)d6h5Wa zY5zuunZ5{v2)kw>-o2z0l}>K_dcU`-{ik2 zgLmV%`Ly1}-iI0o%8hO0P(y@|l<>ec;>@w8Vapm=speZpjC}U}-NxbXcPR=$1^b1! z5CR?ep;77lc#4g0BhFYH>mmi!aN4Oo>WS5Iyj zK`Fx${!_(NmmO)u#Vp$M!rXE$TQpf_d~PKdh`H045FJbl-N*dDv{i7v4T^G|4?}^7 z)(l9E#YsvqiCqG=aY>Xl(y^;omDn4dpMOA-$Y;hX>Ay{WXNA3o`$odq*081!ihEbf zYbmr!zCfs z{jLyf4KBF1mYr2j2KsI19rjKcd2#cKs!Fg*IgYU3G|CA2jjORWIQd|Us3c;wZ8~Ba zo_4j3A-iBtafVH)`wX)hjpzRb&jB$0f?CReQD1Vbply7*`3k$|Wr&6(dikjTI5=dP z`wXyOxMW|*QrY@bI~v4<2;O#frA+iUL>(djWGq7;x|IDeDS z?qh88SSilbZ~Mv9$2giMN)BC0qmH`6!%$WZra2ft;aH2o z_0nuaJfvj-JRYmsgtG@sh?MHU{^)_Ix8ws;UTpDxf?o_c!+zlb#aRX-7EuxZmlSH1 z5ieKvIrh!jNm4=qy;*~FiveB4iPF2Q`R3SL>l{*0aIOSFt zU|w>Jff6GDP!9(1WgkVov0GzIg$>b0f6y&z^iD!alg&M)dmIXw;VG7BLg@vTfF>gJ zI8s54`bn`r>>Qh#L?JE?MY;-$lvPH37E(HSroAdqUO{EBcsFF3zMgXp15l%NCPTID0fkXr#4cmQUJiOIGhKIXQ(ok%LfB@006J+-|xvE=hDvrfGe+} ztdtJO^spT#%S0~w`2HA=t_@8Z6#o6)g_>=G{2!?zB4Sz17NVl6p*o(Gx2{iH2>z%E zxVtIX3}p!sjVg@xcZ!O-?C2gDulr8{Lx5bnvEN@Xc@)I@rm0QPwMzY2JK?3H6Fqyg zYlJlXXg_P%YFAP3UG=#4c)z8++io}AYBvp~wtp^Uy_LqstH&;;ulktkO8yr+Tb`Ckpl$+~r+D_|d9t z33wJcMGT zm@1VaFNN=}&XGYLUd6>=m9muw=DU=Zk+(}?jVYCdm_3hGn$`|Hp6y)^!%nhkgND1# z$V3BXEKV6UO@0GeQQA^IR*84 zp^p@^BoHB`Mboc7RibbebwgKrtdg{*I+{hZOcPp(ET64F%$+C5yC)0&vwlqHu>~F% zrTnlQ{yKRCO`YgaVjvkwcn2REu`<>oKDy-sFUiHh# z3T}=;v8eYOp06{ZpQ70hY|p(~)-XpWYDY~~yKLBtz#Kdl5|-_AHK?sD~JTWaO5bFJF_V7VvJP(kVWeNLWD&Mgxz z)L`mXTYlwsHEGRh1CmFTyDk-41G&HT$ZH};#JhEk!Wt3L;=Uo?R2R<1tdPbl3Hbay zkhQIy*v`YS*xtc{)Y8EsEN0m3eJ_dE+}uM5>N2A@dT?Lq>#4m6v++d;BH)6m)%Flr zG7f|dWnL@hALD83mA-x7X@7a&#<6fll`kQ*@k01~NTTS6v-9aghh>73*tv?upWbR4 z2~+cnsZG3mRmjgJP_YT`$&YiV!eP-jBKvH@`{n8c0e-a(bLy&UF9Y_qVX=o|wMolS z@ehy*uhhz7Yxs(;hK1!;zm)?b@_j>fVmkf=1hOUGB9*)v7mAEWxXdSC@H6|@`%suP zAK>rOghA-QQBB>@0)_dNhe!Uqp|O_%^3S)kpthES3SwkN2E?eLGVE(8$Rzfm6 zwhW2mVs^J2XD36U_cGv&r1q2ZzSZ&W-1d-_GZG7uRRtQq%`%UWX{gWPZ2_`P|4!uo zpmz5F*?m}ga`lN^BKzZ~v)r(tyF)1xiqOaO; zZny7w$cinlkCwGXErtAVxJ*E6As$2T|MXFy+DTHjd7gC>sgIQ#)NYD5<}~wmAnx|- zypK(VECbD-000`#*#z{#C)}?GiA=F9C;KKde9pHlm|vhC)dV?{j3y3#?r>SFuSrxB zRun?D2VmPAEj4$h<3OEWtf2t_=EBvKYyFX&#vmRH7z$f|dzcHk?TqDRxoBR+t5Ata zhv6NR$W*nnAv&bPOji}c<|*eG!G5z7u~i{LY)jN&6EZ}=&KK-|kE+PyknrP5JgniD zh@ZvBl^S`OE}!#KfsST9Hm7ao1x}5IwAZ1b%$KQE(_x!uuWS(P2(@vx4B>rl;r$BI z0Y8*@Kf`b`xG#pC!9n7no>v15eNfShm&+haQdMhj=1kioC=%RqvmVv17oTjxtAIBd z|2R6sdb*NuAt<9bH7to2GeViCA!oP6X;*`&i78 z?Ov@$IN9zL6IkH_0N*dF&2Ohl#OXsmkTq=ht={y0sbP-(Jorg;c+ICTD=}Cop4=w) z4T4%d=1-0!X57oeWu)+7032`_@bR_l@Reu~P|$Y{hi+&S!*D{4x4c+Gdp^omPin#{ zxP>BREL71G3-yvWpx(1XXNZXUZ`)4TwQ+5RAmLFnNZI09R}Q(g547vE_t?&Q6jK4m z4uaC`zI=NBOojYwh$5Y_tQiNcDpj5d z{^K*Tvl#li^IQoSPhWenQ5bVqQZpr#77u&JNE7_B|Am%~E_*62 zQNTQ@WI^3weygaTYe5vrq_5X(95X%uphJYPu!v`3cHMzPidG-@0omY@#ogdq(x}%% zrgw+x2(_j31T*W7iwWh9HT#?fS)4Qm!&|1~#_|%!L#5v;NBNGv^6x|i>Y{G@W6QUV zpC^tKsqP5?0AF~yQei{%HPWXTh#WO`9W0oC=^b^q&7DvRSti_bx)#j|vduPKXqNUegur>jTV{?^AvomvfSmX2`R;Cs_hf)OlHzdgUVOpb9M94JAa2**k`;(_rY;u9K?+f|Ixh)0i(d2O zoIOvcdswi|R2R9J(31)ECB>aAVD;%Qi@B@akMM18Cj*vKTscmShu{VP08ALBuh#MD zy1vR4JR8ClSSoeEF0k02snDi*+)R=KhqKX zcVKbur6E@l=R187&LvT!nF>`<|1|O110CP}OwzHUW6|tN-|P2NptEL=o8a@^lhf_V zw~yC1-eYSUBY7L@;M#xZUy?7r*c>a-cI(sGpb6$KKDT?RW+Ct%3YBseD~MMUe>=ZN zj#|-lbM2W0pEE4Or#kl`a>>DN>YJR^=1-hX2{Wsy494I8v!u*Fvl6JPkEdT%I zJ;^52%@0(!1n{C%)1Mru2fnO>4u1V9Eh;K%ievg$7JOrjYEy_8jPrl!bZ;nJFMbuY zfh+8>^G!!cBksf=Qfo6>Y#A#gKaYCp?RzshC$iVC)9oB94lTpY{0{kqFQ>GB{Q4!% z_(>s-x=76LY7C1p>$?MLdp$(Q#JplKwzIHyx!Wx%GrR0Rh9Lbe%fx>>;C|UFFkgf5 z1pR|w-%|Oj!$r)scfo`GjJf5N*5aaLKJa8cE+h2skz66l`JQy(Z)G2=>8#u~;2yWV ziun}+lUbRKEJhk-E`H^+V*CKRz?S(!+dZE&>LcL0mOC$D(EW4{d{e&V;VgzuR*f6m zGZ!N{oCp9Y?yn0O)NV9U)LXeC9!D4BZQOohWn{AHIg(7w@{$DbMc8}+27ee8`+yHV z^3N~hpFqUu`J|{X%j=o?P+-Lqbz7Mo@?MU0;a`7CyH?5N?Lq^5VX-oV(W`6Fy`pwK zVtE@3;!Ckb@4B{H0yb(mt1YeHUaT@dM~bFVp#e+TbtfI#Su=? zcDDCqecW-$@uRKu(VYl&9$m!ohy2jhgtx4&Y#L9H{+MO*Qq}jYZ?C7<7vFmWQ z?4tMhXJf(W;nhu!1@Nw63;n3;d$#;rFel`dBX26ZXZmP+!e@dq;pU34L*Jc17qN>A zkSD|PrN(G-4l)NbSOn?Kk=5;KuZ*)%g9(^=N>9RpA3lCgYCA4wckytew=1?6E9>z_ zz~6#knO0%uem6%>WLNS1*5i^uNb9wKGBv4}n?y-cc?ONG5ct(z>Hr+>Msm#=9YOK${khlR#oHJvyPpAo}W#%d&FE* zMekfVr)1KwQ8r92C^t@4j2p0UDJO&jsEkY%GvCxo}*6o`5*A# zVSs+0OLiZ(UM*UVD&ngMSW3qvy=~jj&N3a+iT0K$diAXMo#JxK1Yxo~K=NY&RHAGs zCu;O#oo1|>guKKzs)$*FqT$2Eo<8q9LolKB+Vbp#*JDN0`rhJkQAiod1iWiq`r&ek zqp-EAUHhmkxWC!Cg!7C#0{i}sk;Iqh4%+syb{a4ky-%gtXwZ5IA8n_ua?8zwJ9$xM#Y=#O#CydCt0&4@dSo z6rYoKJsvi)3amUz3Jz@&Aym4L)K{t(N&Aww+|sh-IKJb2&h`(SVN71{nUP8OC&?Hu z8sKLvN|Km15`?LamHDwKt^gEKIUD?$oq&koNVK#KJ2ATsG1^+%AD z0h))TN&YfW2Zy3epA@%YFGD{YS6IGA-_5k_fPph!G%C(iFT<-GYS`9^z zB~Oa-=wQzVKmGp{#vboFr5maU{0_%L_6+^gA^%^U@thP@{{#IW?|tL>|EeSYN6}=5 zvKuw1up89KnqZ_W8ph+(h^tgV5iM0YfG@rUd3k~V*$h{6mdUt)e#QJ(x8n*l$%gSZ z!xgi$8%)zMOm9P#OG|T3cP;3Y2ToS@}Ou`C0TEA zqi#a2MJkrT-<+U^^V5VDZ+~4f++Lv%#xpj)n8;^Wu+`gsGn~7s5G5>&@m2>l6_R(b zkY|Ii*4>3ed~Nl_7JeJvyA0$=bGq9GqQaxLC1(lLoOKD>a$6`BQtJ!S{=+Kg;}Y zs9T?WCoE($J}TZ$wG8M zF(y>E&7uqA?y?F};ow$HwJPF!QCjolds`u^F*R+ASH(+=Sqh%y=aqNi22-`x76|vTiZ^8C4Fzq(K4oE4AgHV~_Xadsctv3i(ib4Cm=Kje8ctj2lJQxf^@t}=EU`&CFeQta`a{9mquJ87#xkk&N`LcJ9Vf(FZ6OPGJjjdfp(<5?0#xZNF^icK0c_2QITC&w~gn# z(ece7^rg6wF%P*sXBn<%u(c9^IE>jGwYB+v5B{Pj;9%qRrS3>2sWkkMir+YyZQnS_ zXP3T@f>jLbcdCc86IUV;9i_7^C_1smVz}dy%dfYJVu;PUR@sWiWA3CCiw#K}mb>nq z{)Tkc4ED*iV0VXu-dNEm@w-034d2c-HinbhUI`ME_!9xXc$iz9C0F^&kv}KVz@3U& zA4oL=r*92smQ)&_EPiUWeKklHuH?V)QQY+nu6~Yf`q%XTBXj*<@A-d#GTcl7=bV;j%2hl*U7PWA{*cm??HO|=L z%pa#Rxb^#N`-NoqI@DX0mFAL&pRX<4cQ*EeAAm(J&vAM_G~~_vc<0sQRBvrY>&)bO z&ptEjl32^$yHQoLx1V({IPxuCt(@djZ5BO6jr)P(&XH=0kBd&hrM1CRQz5fvn;?_A zs2=~N<6=lWc_~{+!^hP2mvm)ytA)J7C33uyhi(nD2@|7VvA!(ip*cs@Ybwn0FYwib zV32x(@LxzIrAzG%{nRwmjXo$e0V*m67WFRBynNw#5CRU_~9kq9o;5|BYYNj?MiwGyo#4?>VSSLBefd2-SZsqym@1 z)g)MZmrBtsf%I`SR5UZ(baXjOfJIV8ak)R4mYQfV{6JydXwtShEvekVR@6Gnk zXG0w>rG7k|`(1Si3qH<gd)NdLk9Y z*6GITQ3h*&*Drbdp{;}8*|Im*Zl>T&PMF%kW zuRqiUj19=IPEBhVKrgk2gpPal>%P}RIi#j1HavIUWXErcJ*O60)ToIDXA9b=i=x_o zcI2M#u-f>l!wCZNyLw1yWt&qyH3RmMako5vYwEUIPItQ5 zz`C=B>tOLNCJ?(MNW@ytH-Ehz&N>j_vh}x~A}TxGsa6d8zo{}Fl@X0n1ZSOxPY1|~ zqrp@2tdq(71gUS~#P22@Hv4~DnJFZxHdW^!1@LH!lUem54HQ^S?i2CH)>TOdR%cDT zsl-rDecqE{=Lxav6-HGH7n$tu({`KhlMf4}gzQ}Aae8}y_z=Z$wb*_S5Q;}sq<}BV zyJ$knaXlSB(Lr16zl7G+lYPYVIMr-gkttC4&>XK#bm=rO-1ONpMny(;fxZ*uhVP`4 zb8nk3Gk<@oKS2*H0K12h?T|fPitiiG5s36iPF)r!wsD@(v__K{hD*rgh@`;ln4RgA zKee?_Ry{u|9NH(#Akl~-k#9j*sM-`ZEHap zP`Y)yphDm@dd12Nikhv5hi!?H>yGR8y#dRaJj>11Ni`AGl||&);6;SJIESiK-){YT z*cJhS08^^iJrEvBk2rgd3g%stxf9QDFr4?6s!z_m6}F`}+1#;722Ba6o&G*imygZD z2<E!j8PnF|rt(ZlBR1a3deAa`PE?Sg=BHXv5}fI* z9mH6%j<MpXi@@11#@POM&O}ccNu$YAxR`RD{p!<-6^rykL34 z)eAxkmQrNOX3{6ojr;Q~G?(QECDCxUl6yh@ml@emc1k^=Qx!v;8MX@hS6>xz3*81? zrS5%$2WuQ)R@)=l9;g`0KU-nt<^~kcLmFs1=k|1yV*0fCpx`fFJVmalgl7zFL3g~x z_2_BOj*aN7W}*ChpiSguDlq|~TBy|}S#QFvT&qoO>4Qir>#@iwLi=}z!4N6oJCQZA z>xjLo7~z&)+pk4x2^Tk~c59zow*4!LN#HsOblF9Pz}KFJHo?vCasbD*&+W^vMHaYx zHq#xdWD=ALLXPjqDQBgVmP^~K;xFrZt#eZmcX{Q097D<14IjF)0#0}9Y!8Jlav-8+ zrZj#Bzj}s^H>Voo&M>e!?&-)1l)(3c#u6jrvV+2ZfTe!ny&|bT1>ZHYCaR1%w4ci7 z5p)-stk4t=|2(||vhj~9P8RiD#7=P4Z?BZQChO@4?FnuSl-r$N#eSG=e?@}U4A)L? zOnK&W^eCz@wYqudR8YGP&(gKSyFgg`CiG->t>uUqVHf?e+qR91I9)d@;OVQS6+@@k z9bxymz2dkgxJ{|usWy)YpOtR{*WL4niG|T_@L7L!o#hFx!6MB`7e$4_F8=bZY~H64 z*^DdNp%iIL*H*OsI0wu|sZx3qX0C2FV~bMwH)HasK6k0zf$^D9 zW#ZR{Z9eJkZTSP^(e44gCf3v8{_%m68F`%}4(6&kv%8P<#A~4-3NKU zs*Z_Il_LGw!6Etx@mqZdQ3Oqb&L0W5ud3LO+F!5HMrg*XF9Do^0#m46zQzPL#Xva>y%gU!`;tw6N`+bccw8-$K|8pCozGk zhg=m2w;!M4^YOUe#^7r=IIgNTWhEr0Hq1TDU|NxKOp37$g;9hOV!StGU*i4P*{KhY zE+hLX7EsjfD@b}xCFFTN9%eU>*Hjbs`aAI{b|H4kNuUYF$Vqc;Qe&GR|HnuA)3WC@ zcGl}>6lS{RVKE=;Ku(cjORSuZSZ79@D0p>|D)G`M!y)<6svsul_LPvi9yGgx4kydL zDR5iMxuj12Ia1VK@?2wIW?l2c8&NSs*O)I3S1f8s0GkAEUekk2D{+U&rBN8`WVZUc zN9ZI`GM-*rgNuy*zSJFS{>nherAuXaS80MduC|Gt5<%4)BH z0R7ZKX96p@uoG?m;rs+i?&@8h1B|}C3x)w~X4WSwda7wJ4UfzG+_V$>?t#&hfUnzZtrjkQccJCI3D9ppurL)ola--z;e|3MLKG zy@Hx20otN^nj*shkse{1Y=rDzgrEexzl(9QaQQ|s^IqC!(&~F|!_jJ3iJru7hBMPVo zw45iuio89ty;w6I5GHwVK29~2` zQBBNB)sk{+5){$;K}FKL9dvP}-QfO>d#n1lmkX)4hFeNvnZtd8q}D~yAik)8__WIu z)2iS1`O^5}!H!Mhw2@sxQYRg;q@tCHFQbndVeaW4@+iDZQ#QV^>ZLtVB5+1CUK7DT z<^Ir9MN%nG@z;x_9=RPkYt6ZkcIm>&u|2olo!l@MXs>uC62!cpgOfO8VWHZdDQn4v zS4Q|M2en>_J7ZO37kzTPeNL}wyjMgQ2ynwd1CByVifTRVSFULVbQ_JiUay^o@>D_! zC*?qOTaf}l@$5^D&+Wee6VizhtsH3gYsLg&n(5JVcuj60KR8|$g$q#Y-Q)yZSQr+a zWCrhmXuDoC8f7<}P@9pUBs%JCKx>|P>yndjsRcn%)^jt za*c)>C7V>!`%8@kU*#uNWS$)$te(YfWsm2n|IHUeQFv-Rr{WGhrK?06&0lPZ{{Q5A z>fPpQ5xP*3+klosgcCv~%3lj?x?b@s;ebB4dA@!c7J@RsJT-?SS!uvG7L+8YT(9pQ zs8e~uOYra3@1d~kxxofDRJHlt6s#s~$(^OdrPIO!0N@g{lWR(HG>HDMq(PJPv58BN z4VCC%EsnyChOXc1sOv8a`3JC&al6aPZazf$BNd76 z6a8e-61}n{b-qJYdhxlz7pTy-?z&4o_k^O5iJg{uQnf{Z4Ski&+wyi={G`2?+VS~X zs@&}ziO-5=p0mBMS7MfC!ibf7Y2BnuS1&{>ykI2{JnfAtjgRvCW-I29R* zl3BYJ{~GL-c1;(oE?c6d?*|ipbR`V`Th{IKMp{^vPh6MQtS&OP$$vAzJ-CaO#*^x# zY&jew%Ue=Uz;p0iw25}y#*ZvJk{wsR1^wC}mw53#0iq4POLU{hQkgW2^NhBOS0`~F z#Mj~wV&xK?$;#Opz@*0c<$)Wga9%tki(^nY0;AreU+p=tfY^Rv!jir0-5wVny+7e7 z@vz{7*Kf>kaJ1<5wXHn6D?VnonL?&qoSlN3+EQK@YC-1m$e3IC%ndw?W`u_1lu>aNvw(Dmk4+Z$gP#?=_a$WzHKH(BRH$?M z2o}2m#(aq4V6@;Ym$Bi4V{qksT|kXzYKZhKAREVgH2AUXv+fC%{ zDP?#>w8A{gZ!x0n%4WFN@iaVgI=0|1E}!XivHF=Xx+!wymxs_m8ver4NdjHlzOt!9 zDTmtV1#gB_6m)JE*4^QIKh3tutkOWbKs!PO6ZUs=@Y(a!|41j)k=+Y`j1LzFKqC%tbH6 zrlQu)j`YDpzKi5~9TxMtK;Eb6+r#^8nMSrS^NFk@sQ%Y>M&s zEelcr=c>L{^_pp{+|m!Rb&)o7g7&VIQ^`#11E#6lAD&?5hD^p+`#;_gHsdFM)Y7-j zgoz*dhHCJyX)ScYxIgXfwaab9ErEPl$W>PI40>Ni;u9wzOfcQ&A4pwxNYtCr!^~Y3 z%x`chKNVg91#z3vTa3Glq?S0Z%&WMb6|sgHG|U7+1&wC|&8@TYTG%hRegM0aE!T6Q zc}9D}o3Zkozjp8x5Hm+J8t&@?bS8(Ae<5L=hr;`Z6oUKRi|X8yd!BbcYjKAS4=_FD z3VZs@tWoq^*!}f&r;U`uZn*9K%+0%{#R2SYl(P?o?V+V!J;|c+X?*s&x7Hm0;q_kF zKjT7oy_yTfc=7))vRYrmrhC-|L)e`|O3OCOZ~F{9=G7%+a5<4Ys@Z3dHBQ7jCt_xM zwaWPU+NX^mq)#|Uz_A}N5~=D_#kh^AsW>$%Y;#HFc?vp=4Y6~(@>rFnzCWs) zQdDfX-=JGs#BZyCgMP5o(5rK6!;uj(tUAHvEasQPySB>E{54x<-&qsizh2B7OuNZT zo*gsTq5Gp`2s{IM&hK0L#^@x7WXvC^AwCgqecYp0)h_ zdcI3b)2x(nJ_^C4621@~9}oJ(;2tPZFkVX@Q)}KuOBO(72}KA~8|28C+~t@ecG6R| zm24LFt?+k|l<(c9uSh3OT1B^;=?S|6wETD~ELJ?#MsnFzzxGwvA-#QkMp=nYC-+v# zQ_1ELKbQ)5w#Ex!;`if1{S%+(h=z+fZ{ap`BCyklRx^xEl_HHii=ahG3jH!)gq6hX6GWv-8JO9 z2n{m#?7D{(nrP}{CGmKs2hESj7Ae9?wCjwN7lIf^vq5hlwqH^OySp+T89VqDG94r` zXKJ$RR@Ie}I%38)LwP2vnpeoW+y(JnG07Fehz5xdtP%$mlSYSfmTmiyK~oh6t!7!O zQHA?2muw{zVN`JpRKQ5=!3$(t4Gu~}4M54}!3s(7h8zPAF0r*)#&C<2)r7EcU8QRR zID15^L|179Ke@_mLfDoDbR|t--qjJ}f*#6U&fD7HbUZ~@@*_fExgi+%m4Etyf5;IYO zm6c!x8=IjbwR+vX*2Jsx9c8IG$5ScZFxyiT{j9Uy+wN zRfZU+u2|va2)*9L|Mopb@JBI!-`An~?RUqozX}~KNL36Qx5*p~{+1(UPufG*Wot6P zPVKd%0A6AJnfS#>l~2KGs;DmUNaF#+Vw||bx}W=slk#k+noP>ad5e1Aqj+n}z5Gp^B73Kv;t%h`*T6eva7Je}` zOjAfUN=un6pwiJ#J(f=YXm7AxV=phnWh);y-_v<%e{fe+qQnSqxE8l#T=8HJeGtp&@CwM9};w+cfs+!Q82# zuh>Is-W4Vwm zU&GVg(J@a}aaD-dGPdv4^u{g`Xy0?GQTu zKvZ75+(N6jz~SOGVS5b(zx`^@RQO~;To`07ap~U@V?F*Bj>=+`tkCdUJ8N)X(W*u{ zxn7QXL+?$1KLcxUNUaBFaxsQ>s=N$UrBo_QdT?>4szG9^XU9hbp0rki4zV&OXd2w> z3mF|Wh%%>C;@C3E(afl(ww9yR+Gv*FN6W26KQR8;cq8^zDWL`rN6#jLA&bxXqZJLI zp!XG|B#D`rKdeBJHQ7N){TG_bVZyEjDdgJZ!0a`Ab)op|5{m}}Pi6G*eR3tf-h<*q z@^-QGXeNy{2bi%ae6?_DZS)NbgE4POj!&^f(EK?J2bJReFRDGmC(>+S>^V`xkYBu_ zxkq}Ki9EA+d1&PT?iG!XufRNbpNLfKGnK_UWDlT%a9;H0>jO<0d%u%Y=ztD}x>Tc? zxibuVR8&PPrLw6l2W3B;%CaI+7I{hU?yL+>p^x(*)J!o)Ahzh z^G_7gmp5^_dp_9s{EI4S%Fl5g9g!5oI_;U3E98q3)vrRdEb$9p14*;$Glt45B&h(M}C(yT4c6*3|J@7OY2E zeze)D`=uXaBo*}dh+<;2&l%R7nxZfkQi*m~mwsrp9|zXx(q(`VQwT)DtkUf&OnroiGKP`-NP0sw@L66Xeh~U zX-$Q(NHyy8)y$Hiw#7d_Bwa`SwmTlW%1#Z@TbB=&*FwQWh_JsA0+J|hv>2! zBESR@+SfS(HTL`J2n}Tii<$r(YL#eiX2G~OIU23X!DVVDR~b$B%XKdsLg(dV(8Bj}kcg=5P0r5B`|9Mv*eKr52NzdcKlDV|&0kQMcv zGtmqDA-go11j>#f=l6wV|VhS}NMv zbCs#H0Xs{cRE0~+-q6Mb8|1WwH!zS0o;JS*#Dif5QS=v~U%75C&eUS2gau3^mfjH$)i@b+_%L4`Z zj7Dvm(9_jOLaY9Jn%D5qRL?1@TsqGIr~EzPqmE}#$KD1X24y14im4w(dTC1H&hJFG z&lAGUsnV^)+g+q6agh(BNYTqqe6WTIhN8AB{1|*GaIttQvXgM#9%3y(nNNzJC0W(} zK;HhCHSclL$9C5<2N|OvHCBgI?^NxglHrp%^96E!FqT^okcm~quo*K2;3qLy#=bPD zSn1Bx39EG4W0qMnlGVBOkpK4DJ@-EA!M-3Vk`)OzLxf~xW)}VCSRAstKJHLIZrk~6 z=WiuI<$hvyHxf`aw)$|r-F@87yFV@F;d*W?{E#WN>$M)i=#MVR$MdNza^bhL?X)?j zShIUpi`yh2Knvwdhu>~P)GeV43iyv_Zyc#aR7kUL2?Opd|BTJ#cF5x+9$xt#%-#d{ z>K`vI7w>lUpuS52qV_=KPM8i8K!?=vu^#$*xJt-!0&Sw$;lJF{V)Y8PsN|1LfBzY+ zY1IGkp_Ta%oPy~+drJ|f=;7#K=m`5}f!r;hvy9rJ(+{00l8j1U`a?JA<}eMzaOLR{ zsrk}y7Ymj8yAVo}Er_-`*^dSog2kSR_~j^LYMU~!o+td^N#vXdIDQa^%e6VNtP z-H4^LHBhND{Maau7+C$A$#&W0mc6dk$R6bx9`V_s9qA+PSKVgQ##LIK8jj|32bvPk za)ecSjk1W?^qg*DF>`%g+}MJ6zGo=5f+fU#x=c-onLx>#v>|nXy6&E7HtAg)V7Yw63KaW4q(fu2Tlp5+{6X5XMoB zlI~1k)2B&md%c#SK@9=v4=>2DgYEj);Mv~owAVowE1TM5$cg}`!>SLp_$_7esq&X_Q1)FaC?e&5Bw21mt6Hj_hUxtcsfH(72* zmP%I@i;%hw(4ZuZIhlGf5J$?^BlK9la%= zRYsrS#FJ8%ed5EGRJ@`peIkOl%EG(SeJHiYQbuQG;*d_~sHdoyhUa67{JV9N{u;-` zQj({+V=?Xh$(bH2-??kv6K^&T4BHql!RB;~%M}$SQAP`I+U4FHEm=^A>FCP=M&k)l zHntbX2HlhmpT)>N@ZPm`wKchxioNur@v+tG%YHn0JO1R{(C4Q59ZuT;pSWb*g4thE zaF6Y)u-YPawth-0+_3l+}XBKqR$!IZaHbAL*W z6qCI9K?oBal_pyhbd@jaYzpwHuq(+>l`(9GX_qmnKl0r&Y)H}}1)zy>=wGebmR#rY zQfn5@4VdH?KfmG}Y#$N%&Tp2s#*we93#PAs#u}ib1_IF1YOfL2hspP_G0kYCR-suJ zifoH}tH{Jw`)yko%||Sa10Kp1E1<5sieQlLgq!Qu9|MW2hwfx$fc?s}80E{9@JO80 zvK8df?p zF>c@GhisTy^VD2a!!PUaQM!Y*x_7oJW%;CzpSu?-Z%)cM&KTFVkSTd}S~muhS$rd= z7CkXS*Jo)MGOCaczrg+KiZAUmcNE#wtXt=A&K)`pINr6#J_zo2X5^N-VU5UtHZvdg zd#ZS*Z=<8rM0u}#T=m0FLJcl%&z~H_!L|1?CMXr=P>}FG02FT*+(Y@3o;>5nk?0+u z#N1G+IG-ko@_tRLQlU{JZ_< zBYsBO!_8W-^(WY7aOAsh-o;I#GZe30afBhq?(Kgr#A!FL&Q!5fTlU%OEagjMay`SF z=02b|3~4?bD<}*jPcKM1d7_qA_r-XSwAHP4=R&cVNAVs|_oL z5STF|Ph5yFw{SSf^3y?K{ezp)VZqQkUp_ACYqiM-L^8D(wu#Yv!n-HCfEn`(Va7P*=k*3(+(FsB0@J=|PIP-N zEsJXqYc!lKnakf_N)YQegp6Vno$($0!Gri8pFzXv0~MiQ87*BnFXhs1#PZ6Cm?uaga0?A*3 zo(G=jcO>e#B9?#8{+0`vyC&Rb>G!K7WBok>rn*|$oh>=3;_}a);WbLawlE8jCRe9^ zhNKY8)C*N)s#_bv;B1X0AthzyaZ42z#^>@I{hGA7X=4Mwp7zius%#0zMhlp-^1kj5 zxsg_(wO_aSPU%1{s;ZPZnq>ZB8nf~c{t3-|kCS?VKs&|$ zpE=Eck@@**?}YzHIwf`KDyOQg6o>}E;|D&uBwdra0#s%85?o6I2oh4f@mN4r_jB}r zQ96NNlLI9zpz|O1=_MNezv*QEiFEx>Y6G?ICC_EC(;O^61!ELuIo4y(_7n0y0t3Ek zi(d45VQn*@F(@C9xI2o;*WECvvDWB5@A!RNj1_Rvy{#K-5ey&oKjXP?U}dLW>~!4O z3!g8#DKmgJM?aYwu0pN>rQ5v)!gLofwlF4G4HWxF^_CJVh(Ta1J_NFlFzSkC{1uipFG$~D^d)&!PGzp08*e?H1;GWI zzPT{@=ZiL87O^KPzHPjWx1JGm(0XU8wvuF{KAuI!I)O=&`|LBC!~iD8PCAoVLo9U^ z4s~J7tSw{fJ>$kTq8_rp7cG3nc@s3|>s?gGeRNzS5IhS3D-mtUG{%DbsqiGW>#x83C%#$`R3uU9!pY|n!d8zKw$2sI82 zUv2B}$^K}Bd17O-Ua!iEFtHkkuBg>!28m=H2~ObQCv8dO?snc44&isCx+c;fRw?SK#RS3m`Lh;!=Tl8yxXq#&NRYX0fd=0*0I7hKD_1D zl8eRjyRr(mFNU9y#AoIi!g#Qcuqv13_BI#XXLyCWsxKSX&OQnLCP}BXA(nYg=*bO! zgrto;%?_#-f%ww)6?s75X02^#G4t}M;0Qylqb0>_lZjFRHMtPmck;{5gdI^DUR2`g zZ9iRF5ONPZcW>k}(r$wW%HAf16fZ4|y5tWMBn^3ek+5XNO%G5?36KjV*0HXr=8iox zCZ8hEJ5$_2K~jeTRoH;4X;aUtB~FHqBUL}EFYQv{4vnhZYWDh0cqy8e}ME3*12#m z;Lt4e4~FNRn^WxYA0{ zRKxMLaHN3DoD3SnTo{9+5pv(oZbm{AMuQ*NB53zXY0(6DYmll z>Fg)3(c6_D<|AKd%hD2U2vwaP+h|kzs>I?eFJG+ZJkq$k^Vq*}qqNWGlcQaV;nj=5 z$C0LQbmZy^N?C|=>ilGOp6U>pgp%eKy?Oo7gRq!CA>RYQ$mFa5`*3r>O@!p=9eudo z1R_*`5C3$yuf=|wT<2VjXHj-)es`jO11*V<22>e<`)C5uCqKX)*p=2%uTvX+RkFEI zHE%$G5!3Yx2ryUgj+M*{aQ-@!(#6IWi)-&IBwWUWEqypTr9;O+p0`m*n=%XS z>GssEg6I2RB$s>xtoEZXmQAU$KAz<)B4qKOOfrc?v8&;>MRMbyoAxvQHk|*|e4x_s zDe2+1ktIiYPg7kdC27N(i5I!+P;#e5B#p>sH{47%)yTTBhsr<1Uht~zR1enj(uFr9 zempk1r}dCegfDERZL&pG*y-|9zxWylZun6dmgG@CaWT?5V~A~imKEVu#qe;5^}486 z&!m_&WRKCdj>5GnP)5vxh_rB1b?Cdc2{>BaD<~%fUDtPf0BG}W;K|jiT$qmb!`72s zITmJ{MD=JB<1sMN&DpD*G zgYArNgCE4EpESv!!Dy{`WY=$(Hg;*LqxAm0;fpka+OcmkYZL`}!w#!76lEF5O8YmF z_LvK#nDWv39yYdbk~F;$f`cy~NPL_ZW3?q)-tr*h_uU6sU6}Nn>6mOu^^fKfod_(u z<%_ULFytKD8qO$|Kay5b&>vEyv8GuZN2CUMzvzx4Nu67yA51PU%e_fGlGzjqD&1{` z|ExvtjExIqe3?2oPl<{Xx8GW83tJ4HOynKbULAoh;Ow;5j4C}+){?r2u{Ss3wf5bl zUqnQEB{XY&^#3AepL$)BPv`h$F5z=UiTgCsf9U_UDW~lIChh^+=GOHtis4?d zIIIdc<i%ty@FT^nHc?ZU&q92G5V~G7?Qu6) z8=Z-;(grzE$dmYc=@>eFIRX#sK*&l2)y-7PD|k5HH%+9J;w-O({lys3PbBfN^XHE&-A^F$eM-#{5JhhIzku9d!lU}51o zes*m*t35FV`yqv}i8L}aTW*2U(7=z%c_ZZR=91TbhHbYA z327p?*b}#$)VZJV3K4=FVS>=mg`#xz%HoP=J;KkkUidU$)i<2qdPsN`NBKU9@^8vt z->%?USUG9+eMuh7LddaQYMji)oSezEes8E$ zWw4%wswg<)8|OnL?UWJ%j+-L_j|y0H5;w_k0*7n(B^f&UquH!+&iVn*{_eZ(BX>{V znulT{v94*9f=2?v<45|F;I(7>KH~f-&6Y`Xp=mHMJ_Q$9taed8KI&gmothc9x;$+b@oAtLA;;Yjz=>2 zlRZ$mC|$np^I^c5;{j)!&Kzqv;QfOMhn8eEDfr3RF%OC0_1E(fNPXqlur(!VxC#>0 zuhPeV#qbVmi`b_8GtfHCn&jMkExh#@=^aV7QgB2eZJ}}|BlXuRN3hC@`mi1zM{r`K zgUg+`kBEhw3)&00H7d=T%-o5S9_$C4Sc}EyQ|awp{m@Uczv`)(8!Wh zkLWD>YTig0psez6_Mr}VAA_R3@0AaepmXEEyzeB=Dqf9xFyA>KdHzgKq zE~EZVKA_PSM;Y33^9!$_ zNE^lSyA7X+Lx1h5)_!)+Q$9FWnxLxjRL<^YOTMo3ZOoJiVSZg_fe-M_A5aa`t_V2F zURT!{xN~ZxDAN~c@KB7;Ay`wMvQ9g|_56$RU)crhVe>F)5i?kV7NCxsA6q!FGY^m3 z3Ak;~7cm=%=ASfvNP6Ux?*AegXM_lm;eSQGU$(_8sZku%y$}DY4hrm?GPj}OW0tYE z`bloAic36Aq3@xNpK1C`GQU`26(-kSEv-MPGWQLU%fCHKuK$I}&kR-*q0P0`rOroN zhcza+w~-Z>>>)*d2{3j&wy5iF{UlFBAI#2tnxx2#BX5*GPgO>< ziG-+0+;VtU{7UIzMnYU$FX@{<&~8;9V9&Jz8}FnTyF5}aoI1$DhwV}B+vH5Hge#T0zx_Vbyz?8w@2c# zxJCryznnIQq}4o&8rKw*9k!F5t0123im>69`Vv|BnUnmXdg!ny@Wk^3ZeQl(3?(6V zjx&!w4;iE+ZwX6nlEEf0;V@@N{xPK@H^MvI7BN<>dLgVd$FSbaxvt?&*wJDYl%Yov z9AS{CWLw|~02r}zIq24_q&iu&LU4X^T!QLKB!bC8uyd~)!4wbfNzcI8;O+gDsJJ&u!T zAYY(Tv_)PDoXpcBWvzxZ?2z49jdM7ViWQ@B*nFtq`3TcP<azTiBsHl(EHAYtV#pSXB&r&4+bj6&#BPz^<^9zr z$(%qZywr`JKXh*$NxQ}oxxx2DTXjd~4`A*2uZ;*;hwKVDXkW0l3Oi(Z?5LgU$E+&U zcaW}pwnU?(JoiXMLM``lsH)qa;oUPzBy}o;F@YP?)8SAFC0wWKikLf=j~%96VBYow zm$^qslH@rZ$ZVA^pIM%&NP2CQRa)-ODhJ0mVIh|*JypGacP!mvp_oiFAaiDI*qt&& z?Ff#a!8Ql~rZxF~>s!LsYQ}y??ut+-;)*vG9(rdRICEtM{?^}1p3V>WMQAo*`XzUL zsePWAQ>Y%ltOjA`e(f82EFF6PkqV`4KglxDsZ|?sPodJne_930`ISA}5;VWXEf|v2 z&GWPr3p9Wh0o3lQu`%HuvX^TsG`jRt%P2F~4TO)3=^6giv>?jA8Ozs?2grrrwI73P zZ1AaF(TTkOV-Fy)WcUAc0JJ3=pLF8nb5$+k!EO#4U?;WAfg5VmB~3M;Qqu=$UepZi4yBF!whjf`lR+SH7$@V7|>TCAc=se!4^<*-ujn#U# zr9NPb0WSbSPF~0x%uV3L1>laDW^^g&5p&5IY$kr}>&@hHM0!_}2h=#;1@Q_mX#+@U z$aVWQ4c6R&C&N+0t`~apW0W&tO-alSpqxoa`_=Q|0p$swA~;wXmvXL@-;!K-#;vka zcd#sY)!lODArg|T)?e-Y*G2~#V9(H=2WI!kVhQ^sAn(g!^F89D zJ>(X$ZBP7+JuF7u^R-~#0?YySIAK>Np}y|ny2qQ5!9`>pYGz#8*O!U99hK|HXSZ^{ z=pT5Nkj-C-VG_gPQ~Yd)y7KrKgiMuX>^;&p{xU+qJP7y7KAlFP`G7Csynk(8OX$SJ z1w>n0A7h)DL(skBvH+GeHXLESG`We*JVm@=Z^!lP`MmDC#(A2gK1JhbNydhBcr*hC={v)pGo z#jTo!<1OWDFDg>iZ7O4Uqwp<4Xm%` zP4eeheMj{d5-YBQT#?5pDM-mHcU{&|A|4>>4bq5s7PO<|a$F6QRSP~-YqaLeByOd> z=P=xh)dgkQr`7N_ml(_i4e+*1?rWng0y1PH@Z#C@o79v!Uk+Gq2{8i7?|$>b>F!YO z)}(vOEq}qvSxYjNHKwdms!vBPvhjx}OTj7xi2SEHRxVeRI_=iCK@&FOwsDB;k1RI( zT%|hPMJd>as3p?P1C3hNm?&$7rJ0IeTir$Jf%A0h$zluXjzgN~XzMRh7lqWyGvVPG zI$IBVo_px)+(iPl$D!q}WCAN74r=*nRiC#nD%Z-KK~K5pKrjiJr^}MB$@3~`PGfMt zi{CbX%KXUbUS2b4AeO?wW7PODx`ZK7uX*g~WS|$&!h^QdN)EZTDKv97zC4d=yob27 z&01(goUa^jx0@{oBGNxy3>R97mcr#_7rMSc_ zW6)&7o>1%UqQc9aFC<-$HU530Of%YAhODea@rh;x5?0rv53$eJd{o<<;(2OCn#lI!M<- zM!X`ZutvVL zR@rwSex@HCn9iI~`<5>$&W{F!U@P+P&2AMJSCd|n=5^wrZ~Akc@*)PB1r(kafZ~Z4 z$t3JH-&j6XW0>_M&1B*XsEc1j#cDiBGMlvxZ6(V)x0YHJLTe%2;y=rz=~CW~#(v{n zlSH?L(J)@*wNYnGTm?#t^a{(K(k^!4mK)&F@U}9V;FVuh@|5wPx)Sdv)s;+Ly?xlk z^OL2J$m^Hj_pFEn`36Wh1yC?qU(Kj7!GpdH%@usBA;JHE?qvXZ`wl`LS1LBgRI4hi zsD7^4yI!N>% zkd+PQ<#Ko5ze^Ad_dc$#0KoRX+KmU8rS8TuTe zxLzg$G~vHwHwQ;(+l-%RLPYqU0LznboQQnmpni-S^)Hze-#_9(oB;SCP%Wx z_V^z3vq*ZN6E@Ki7!FM+TUujPo{2bw6XlPm&nvD}fzU69y~xn3{yrIc?Rq#063*6k1st2AfFAdmG=(z5Pw% z+@u6?4;6<2sOWdOU%IQa53Z+28hUyA6*P=RWN@m~H#4pc7}mVPk7jslteVK?SmsEj zMqPN16~)6x+x}ohflvMWb2gVx->$pMyecFER9EJHkUrG9GW3B07%I|A-hYP`d&nr5 z|Be-PPUgwtNLPs-<3U2?Ti?=^*uUNFs@XDyrp(ynMIS`wLI zQ}NHsU2{C$`BYzP8`l_8?RalgxXUEQEt@#71hAbpspzBL1i@J(bdaGW8cMC(jAk9H-1Pnk*f$7*;QYOf5IX;|=7J+7Hlh ziaXMg5Is;A`U5l#Tl>mq;lYDX-)QnX^GJ=&9JC4bWC}?X!=w+Bhb@BDo)%Oq@2hkV zaei&|Lhk!4O6XrM;I&uYk*>sb!axJd&25it{sj1ns7~2Gom;rNj4Fw=vP^-G7nn_2 zQL6npyIpE^6IUe#*>5)}$t9LrgGIBQF_-7xT)qo_qH*!gTot3t6&oOYx-kLOV_c%m zsfFhfIeb9V6JE5!i^>-lC^ceOtw)x`f7lC!zLPI~>-9R&ZC}2b)V7GWL4&frf}upn z5eX^gZylzShTf8_71r9z*=ZTRLI5c_0eJJl!8u(@-2ejm<-6KNb6U|R&^{c({2%)7 z{nN<)Z+_U|*O(nZ`uO6`&DU?a352h|GX&JSS5{W0wQy%|8|$v+3wsnFpGa@m%sVvG*abrx{&`^xc<$v```Mll8};+OuYiWINPgM zbhYC?vjH~V|Ay+I)_re&R9srotYnPx{)#Y`KNO3yz~+-*()~&Yz1VQLUwT*DRo$Lp~As0)L0AP$$*oudw8mK+0(e^l%|qdE%Z zuUBn7TzxpycXxZeHKp}RM=yJ3mG}v#EBylxQ*t~_n@Qv@3HZ11IPtPxyF1trbrY{)Tm_)}6F`!9#{aXvwv% znjh^tGwhUZ>^SJR#pc734>KOM%AzSZE);XqiXTp#abg^>L1WS}q7%}DMer#_o*T_V z4~DMH>g|E@OfP2F>Dh!9TT*t|r3OCnnGvc7*6PEO7>vyb`RR8ecnf8HwSZ}?<-A(V zlSg+!pXWuoCeK(}qXa%@KKHV|KzZfVs&dKG{WhMz;`tWIPVQybU3I!s_!E27@;0^& z39{t&H*=xu>yj5HCe3zuBk-G-+l!}9PJfyR#Y*r|#UWgAmo}0Mx#6zR(61&TxO(Rn zGc*g|1#FqG@y{FP=cT??@|C3mwv$ET_0Pry3^`$up41fI$$!zi>DB~NDjnpQ)XFYY z=IU;ltT$8QXMHuH65b&vcL+djLV*+h5?#Brtg*sAEk}IceYoAE+*4|86;swcKtA&g z;PP{fb||o%ZZ%@i;F-Rf$t+B>jMWW7RxXP6EMJgQuEXOVIvGeJ-6B;sI821?R~Cpg zI&P&lq(p%n9WhSj*E>I;P6K|5A4weHUoYu!RX#NvTH1bD$WyFQ?b1=@kZc-?+qE>dwoO<#K^y2eWt#A z66K4sny|FWo-pSUtfwOS)RO_CU4Dc33S&|D>|MgIum5ZDWs5K>_|E;!@npp{*YqO6 z&{N>ja(LysVT5Vq8A|-PCFCw0G%|=i`%o*3iS}vn1rZ*Ds3G6}wM>Z3=U3s}nj^}} z?`x2^e)m1AbmO@}>GGK4xiZnt+W2V*<;L|irvICD>(s(4bOfim69XhwXKHkszT}!q z!?9B?YDSg}Fi^c}G>laDz6Cjj_}I@cB$Zg9@Iz>|zn%D;y&ZMxjh4;9wm57DZI7K* z9G0D-J%4zl907s*ystfMBWR`vD9wb>k*x`=t|w0Du<3bEC6t zp=fAh9&amq2S_NW>NslBh=)O6BCSf_25S>jv`JMVsq<5TBfRB%wY+l86(MhY;1Kt>7#z)XXWU@;9dsZf!s7uHVgq*_A% z9Dz@W_;&jXJR=*1V5gtb_X`w0B0EO_(~Kg)f0<_dr=a}z+>ya!6MY3tMUe2Y;0gCz z4M_eUIAs6Lf`|In-OI`DzF3ew=~gQRqMC=@Nd|VcMo* zPjMr5`-{g$7MA zrCe5P*cX&(FfHFLA-XRJiinK1>;n|tcQQW}GFVBw^DVWn>%tCVHmup$^f|7?Z^xrU zw@!pYb^eq=+Tnw2j?TBVb{H6u1y9+@($%{V*Y18%Xas*Y8kMAS!z7wLsBaOceczQa z|Kwt*)QEcfD_ZknY8&3K-+?Z!gLr_*-bL=gq-*`eyIq{Ci8(Kd* z!S`>TTKXoC+u}dC3bhQUh8}Agt-4? zmu^;*-)GLh)@Vzo@?>sY`Zyz1NIF+ltS6uy>x-@1QHjU zg1%Z+s~51GB|pQ=+ZEWY<+a>!SQh*{d~Rs!-UVhVT>0 z;vyY&xr-nrI9AtZf~Nd!zHA*7D}`dwATff@H6NM<*^Cfb5G-Lft>^j{ebOlvl-zN@ z3ZSXKtD{a`W4Xa=R@99f`3b4t*Bau<5jsUwoHI*WML~pnf^J%Z`iRQ}Bq6A_OHoQ_ zUFk!ua4em+5eVD_{MoIj>_Ugehz9Pl!jMLPYCamE+WltU1cMMPATGX-LCAkoRc+o0 zt2{MLpu^(3j-V}fiI1hLFa$R6<>BiYBDC!3m?ajZjacG)pt?TRcI}P1k+kK%5+_wb r?GENu=JG~CJpKh-CL~2!HJJ)2v%voaC6X)p literal 0 HcmV?d00001 diff --git a/nginx/index.et.md b/nginx/index.et.md new file mode 100644 index 0000000..99b4df3 --- /dev/null +++ b/nginx/index.et.md @@ -0,0 +1,695 @@ +# Ubuntu Nginx veebiserveri kahepoolse SSLi häälestus Eesti ID‑kaartide vaates + +**[In English](index.md)** + +**Versioon:** 26.04/1 + +**Väljaandja:** [RIA](https://www.ria.ee/) + +**Versiooni info** + +| Kuupäev | Versioon | Muutused/märkused +|:-----------|:--------:|:----------------------------------------------------------- +| 08.02.2019 | 19.02/1 | Avalik versioon. +| 28.02.2019 | 19.02/2 | Lisatud märkused kasutaja sertifikaatide kehtivuse kontrolli kohta. Vaikimisi veebilehe eemaldamine. — Muutja: Urmas Vanem +| 12.12.2019 | 19.12/1 | Lisatud Nginx soovituslikud turvasätted. — Muutja: Urmas Vanem +| 30.12.2020 | 20.12/1 | Ubuntu uuendatud versioonile 20.04.1. Nginx uuendatud versioonile 1.19.6. Muudetud konfiguratsiooni haldamine (sites-... -> conf.d). Lisatud OCSP-põhiste tühistusnimekirjade kasutamise võimalus, soovituslikud turvasätted ja valede CAde sertifikaatide blokeerimise kirjeldus. — Muutja: Urmas Vanem +| 13.01.2021 | 21.01/1 | Lisatud demo-konfiguratsiooni fail. Lisatud HSTS konfiguratsioon. — Muutja: Urmas Vanem +| 25.01.2021 | 21.01/2 | Muudetud HSTS, SSL/TLS ja šifrite kasutamise soovitusi, lisatud täiendava turvalisuse tõstmise soovitused. — Muutja: Urmas Vanem +| 28.04.2021 | 21.04/1 | Eemaldatud aegunud `ESTEID-SK 2011` sertifikaatide tugi. — Muutja: Urmas Vanem +| 25.11.2021 | 21.11/1 | Uuendatud Ubuntu platvorm versioonile Ubuntu Server 21.10 ja Nginx platvorm versioonile 1.21.4, lisatud ECC sertifikaatide loomine veebiserveril, täiendatud TLS ja Cipher soovitusi. — Muutja: Urmas Vanem +| 22.02.2023 | 23.02/1 | Ubuntu uuendatud versioonile Ubuntu Server 22.04 ja Nginx versioonile 1.23.3, uuendatud on ka virtuaalhosti konfiguratsioon. — Muutja: Urmas Vanem +| 18.12.2023 | 23.12/1 | Eemaldatud `ESTEID-SK 2015` ahel. — Muutja: Urmas Vanem +| 22.08.2024 | 24.08/1 | Ubuntu uuendatud versioonile Ubuntu Server 24.04 ja Nginx versioonile 1.27.1. — Muutja: Urmas Vanem +| 31.10.2025 | 25.10/1 | Lisatud Zetes ahelad, eemaldatud SK OCSP lõik. — Muutja: Lauris Kaplinski +| 22.04.2026 | 26.04/1 | Konverteeritud Markdown formaati. — Muutja: Raul Metsma + +--- + +- TOC +{:toc} + +## Sissejuhatus + +Käesolevas juhendis kirjeldatakse: + +- Kuidas paigaldada ja häälestada Nginx 1.28.1 veebiserver Ubuntu 24.04 serveril. +- Kuidas häälestada HTTPS (ühepoolne SSL) veebiserveril. +- Kuidas häälestada [SK ID Solutions](https://www.skidsolutions.eu/resources/certificates/) (`EE-GovCA2018`) ja [Zetes](https://repository.eidpki.ee/) (`EEGovCA2025`) ID-kaartidega autentimine (kahepoolne SSL) veebiserveril. +- Kuidas häälestada OCSP kontroll nii vastu garanteeritud kui AIA OCSP teenust. +- Kuidas turvata oma veebiserverit. + +Lisaks on käsitletud muid konfiguratsioonivõimalusi, nt kuidas HTTP liiklus suunata HTTPS kanalisse jpm. + +## Nginx paigaldus ja häälestus + +### Paigaldus + +Ubuntu 24.04 versiooni puhul paigaldatakse vaikimisi juhiste puhul Nginx versioon 1.24. Kuna aga soovime oma demojuhendis kasutada viimast versiooni 1.28.1, siis tuleb enne paigaldust teha täiendavaid muudatusi. + +Nginx versiooni 1.28.1 paigaldamiseks Ubuntu versioonile 24.04 tuleb teha järgmised sammud: + +1. Käivita terminalis käsk + + ```bash + $ sudo add-apt-repository ppa:ondrej/nginx + PPA publishes dbgsym, you may need to include 'main/debug' component + Repository: 'Types: deb + URIs: https://ppa.launchpadcontent.net/ondrej/nginx/ubuntu/ + Suites: noble + Components: main + ' + + Description: + This branch follows latest NGINX Stable packages compiled against latest OpenSSL for HTTP/2 and TLS 1.3 support. + + BUGS&FEATURES: This PPA now has a issue tracker: https://deb.sury.org/#bug-reporting + ``` + +2. Käivita terminalis käsk + + ```bash + $ apt update + Hit:1 http://ee.archive.ubuntu.com/ubuntu noble InRelease + Hit:2 http://ee.archive.ubuntu.com/ubuntu noble-updates InRelease + Hit:3 http://ee.archive.ubuntu.com/ubuntu noble-backports InRelease + Hit:4 http://security.ubuntu.com/ubuntu noble-security InRelease + Hit:5 https://ppa.launchpadcontent.net/ondrej/apache2/ubuntu noble InRelease + Hit:6 https://ppa.launchpadcontent.net/ondrej/nginx-mainline/ubuntu noble InRelease + ``` + +3. Käivita terminalis käsk + + ```bash + $ apt install nginx-full + Reading package lists... Done + Building dependency tree... Done + Reading state information... Done + The following additional packages will be installed: + libnginx-mod-http-auth-pam libnginx-mod-http-dav-ext libnginx-mod-http-echo + libnginx-mod-http-geoip2 libnginx-mod-http-subs-filter + libnginx-mod-http-upstream-fair libnginx-mod-stream + libnginx-mod-stream-geoip2 nginx nginx-common + ``` + +Nginx versiooni saab kontrollida ka käsuga + +```bash +$ nginx -v +nginx version: nginx/1.28.1 +``` + +### Konfiguratsioon + +#### Ühepoolse SSLi lubamine + +##### SSL sertifikaadi privaatvõtme ja päringufaili (CSR) loomine + +###### ECC (*Elliptic Curve Cryptography*) + +Esmalt genereeri ECC privaatvõti, seejärel ECC CSR[^1]: + +```bash +$ openssl ecparam -name secp384r1 -genkey -noout -out Nginx2404.key +$ openssl req -new -key Nginx2404.key -out Nginx2404.csr -subj /C=EE/O=OctoX/CN=Nginx2404.octox.demo -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:Nginx2404.octox.demo,DNS:MYWEBSERVER.octox.demo")) +``` + +1. `Nginx2404.key` on sertifikaadi privaatvõti; +2. `Nginx2404.csr` on sertifikaadi päringufail, mis edastatakse sertifitseerimiskeskusele; +3. `CN=Nginx2404.octox.demo` on väljastatava sertifikaadi *common name;* +4. `DNS:Nginx2404.octox.demo` ja `DNS:MYWEBSERVER.octox.demo` on sertifikaadil olevad SAN DNS nimed, mis peavad kindlasti vastama veebilehe tegelikule aadressile[^2]. Need nimed peavad ka nimeserveris lahenema. + +Loodud sertifikaadi päringufaili sisu on võimalik vaadata käsuga + +```bash +$ openssl req -in Nginx2404.csr -noout -text +Certificate Request: + Data: + Version: 1 (0x0) + Subject: C = EE, O = OctoX, CN = Nginx2404.octox.demo + Subject Public Key Info: + Public Key Algorithm: id-ecPublicKey + Public-Key: (384 bit) + pub: + 04:83:8a:77:21:33:00:ac:6a:66:28:f4:7e:8e:98: + fa:52:09:ed:bb:83:f9:98:ee:24:3b:48:b1:e2:ad: + ae:1d:57:70:b1:9a:5c:c7:9c:4c:cb:95:f9:ff:b1: + 89:4f:d0:c9:e1:39:0e:5d:ac:c6:d3:92:64:39:23: + 5c:d0:fc:0e:38:17:22:3c:bb:e0:fb:ca:2c:8e:55: + 65:2b:7c:56:6a:55:4a:b8:ae:a4:8c:e5:81:b7:a9: + d6:e4:5a:1a:aa:af:37 + ASN1 OID: secp384r1 + NIST CURVE: P-384 + Attributes: + Requested Extensions: + X509v3 Subject Alternative Name: + DNS:Nginx2404.octox.demo, DNS:MYWEBSERVER.octox.demo + Signature Algorithm: ecdsa-with-SHA256 + Signature Value: +``` + +###### RSA + +*See lõik on säilitatud neile, kes eelistavad RSA-põhiseid sertifikaate. Ülejäänud juhend kasutab ECC-d.* + +Loo sertifikaadi päring ja privaatvõti käsuga + +```bash +$ openssl req -newkey rsa:2048 -keyout NGINX20PRIV.key -sha256 -subj "/CN=Nginx20.kaheksa.xi" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS: Nginx20.kaheksa.xi,DNS: Nginx22.kaheksa.xi ")) -out NGINX20.csr -nodes +Generating a RSA private key +........................................................................+++++ +.....................................+++++ +writing new private key to 'NGINX20PRIV.key' +----- +``` + +1. `NGINX20PRIV.key` on sertifikaadi privaatvõti; +2. `NGINX20.csr` on sertifikaadi päringufail, mis edastatakse sertifitseerimiskeskusele; +3. `Nginx20.kaheksa.xi` on väljastatava sertifikaadi subjekt; +4. `Nginx20.kaheksa.xi` ja `Nginx22.kaheksa.xi` on sertifikaadil olevad SAN DNS nimed, mis peavad kindlasti vastama veebilehe tegelikule aadressile[^3]. Need nimed peavad ka nimeserveris lahenema (piisab ka ühest nimest). + +Loodud sertifikaadi päringufaili sisu on võimalik vaadata käsuga + +```bash +$ openssl req -in NGINX20.csr -noout -text +Certificate Request: + Data: + Version: 1 (0x0) + Subject: CN = Nginx20.kaheksa.xi + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public-Key: (2048 bit) + Modulus: + 00:f1:62:c3:ed:1d:0b:ea:cb:7c:22:17:41:1e:e3: + c1:02:a6:7b:f3:72:13:ae:8d:72:72:6f:09:77:d6: + 51:84:4b:2a:f6:7b:65:9d:9f:f3:2a:0c:16:e5:26: + 47:70:aa:3e:c8:4c:50:62:5b:6c:2a:49:ea:51:01: + 60:5c:94:2c:d6:1d:78:70:eb:41:88:6c:09:c8:2f: + e4:d5:bb:2f:fb:ec:2f:9d:0c:42:66:b5:de:91:e3: + 60:62:ff:94:11:21:aa:de:bb:52:bd:20:a6:ff:b4: + c3:92:0a:5b:b5:fc:2f:88:bc:44:3e:b4:5b:a4:ec: + de:49:16:b6:c0:13:ed:d0:e2:ee:d0:58:bc:cb:36: + 32:c9:1b:6d:8f:79:db:83:22:fd:fe:a7:9a:b2:cd: + 26:b1:d7:52:c4:0c:40:6d:0e:49:b5:18:07:c2:3c: + c0:c9:70:5d:06:da:0a:e6:01:1a:a4:78:19:aa:a7: + 38:1c:9d:36:07:4d:db:d2:b5:7b:50:f1:4b:d0:c7: + 5d:90:86:92:2d:a6:ea:d7:d2:09:8f:51:e8:b6:52: + 07:b1:1e:5e:ca:65:f3:d4:69:52:f1:d9:47:02:24: + 98:42:70:83:bc:49:13:c1:92:51:f7:ca:b2:fa:f6: + a7:08:13:c1:74:23:d6:58:ab:27:d5:e5:02:20:3f: + 11:3b + Exponent: 65537 (0x10001) + Attributes: + Requested Extensions: + X509v3 Subject Alternative Name: + DNS:Nginx20.kaheksa.xi, DNS: Nginx22.kaheksa.xi + Signature Algorithm: sha256WithRSAEncryption +``` + +##### SSL sertifikaadi tellimine ja paigaldamine + +Järgnevalt tuleb saata sertifikaadi päringufail `Nginx2404.csr` mõnele usaldusväärsele sertifitseerimiskeskusele allkirjastamiseks. Näidiskonfiguratsiooni tingimustes on sertifikaadi väljastajaks testkeskkonna sertifitseerimiskeskus. Allkirjastatud sertifikaat väljastatakse PEM formaadis: + +``` +-----BEGIN CERTIFICATE----- +MIICfjCCAZygAwIBAgITEQAAAAvIEFUdbDDF... +... +Hz3/vZjy73t2ag== +-----END CERTIFICATE----- +``` + +Avades sertifikaadi Ubuntu failihalduris on näha järgmist: + +![ECC sertifikaat Ubuntu failihalduris](./img/image1.png) + +Sertifikaadis on kirjas ka algoritm ja alternatiivsed subjekti DNS nimed: + +![Sertifikaadi algoritm ja SAN DNS nimed](./img/image2.png) + +Nagu näha, on sertifikaadi väljaandjaks sertifitseerimiskeskus nimega `Punane`. Nüüd tuleb hankida väljaandja CA sertifikaat PEM formaadis ja salvestada see kasutaja kodukausta nimega `Punane.pem`. + +Koonda kõik ühepoolse SSL-i sertifikaadid ühte faili nii, et veebiserveri sertifikaat oleks esimene. Käesolevas näites tähendab see `Nginx2404.pem`-i, millele järgneb CA sertifikaat `Punane.pem`. Seda saab teha tekstiredaktoris (asetades Base64-kodeeritud sertifikaadid üksteise järele) või käsuga + +```bash +$ cat Nginx2404.pem Punane.pem >Nginx2404_Bundle.pem +``` + +Ubuntus avades näeb koondfail välja järgmine: + +![Sertifikaadid on koondatud ühte faili](./img/image3.png) + +Sertifikaatide koondfaili `Nginx2404_Bundle.pem` tuleb kopeerida kausta `/etc/ssl/certs`. Lisaks peab +paigaldama ka sertifikaadi privaatvõtme kausta `/etc/ssl/private`. + +```bash +$ cp Nginx2404_Bundle.pem /etc/ssl/certs +$ cp Nginx2404.key /etc/ssl/private +``` + +Nüüd on Nginx serveripoolsed sertifikaadid korrektselt failisüsteemi paigaldatud. + +#### Virtuaalse veebilehe loomine + +Loo enda konfiguratsioonile eraldiseisev virtuaalne veebileht. Esmalt tuleb luua kaust `/var/www/Nginx2404`, kuhu paigaldada veebilehe sisu. + +```bash +$ mkdir /var/www/Nginx2404 +``` + +Paigalda loodud kausta mõni lihtne ja äratuntav veebileht nimega `index.html`. + +Järgmiseks tee valmis virtuaalse veebilehe konfiguratsioonifail. Tee uus fail nimega `/etc/nginx/conf.d/Nginx2404.conf` (näiteks käsuga `nano /etc/nginx/conf.d/Nginx2404.conf`). + +Nüüd muuda uut konfiguratsioonifaili vastavalt oma soovidele. Lisa sinna järgmine sisu[^4]: + +```nginx +server { + listen 80; + listen [::]:80; + server_name Nginx2404.octox.demo; + return 301 https://Nginx2404.octox.demo; +} + +server { + # SSL configuration + listen 443 ssl; + listen [::]:443 ssl; + root /var/www/Nginx2404; + index index.html; + server_name Nginx2404.octox.demo; + + # Certificates + ssl_certificate /etc/ssl/certs/Nginx2404_Bundle.pem; + ssl_certificate_key /etc/ssl/private/Nginx2404.key; + + location / { + try_files $uri $uri/ =404; + } +} +``` + +Konfiguratsiooni süntaksit saab kontrollida käsuga `nginx -t`. Kui vigu ei ole, käivita Nginx teenus: + +```bash +$ systemctl start nginx +``` + +Kui teenus juba töötab, saab muudatused rakendada käsuga + +```bash +$ systemctl reload nginx +``` + +#### Tulemus + +Nüüd saab veebilehe poole pöördumiseks kasutada ühepoolset SSLi. Samuti suunatakse automaatselt aadressilt aadressile . + +![Nginx veebiserver töötab ühepoolse SSLiga](./img/image4.png) + +#### Kahepoolse sertifikaadinõude (SSLi) kehtestamine + +Eesti ID-kaardiga autentimise lubamiseks tuleb olemasolevat konfiguratsiooni pisut täiendada. + +Lisa järgmised read `Nginx2404.conf` faili SSL sektsiooni, pärast `ssl_certificate_key` rida: + +```nginx +# Certificates +ssl_certificate /etc/ssl/certs/Nginx2404_Bundle.pem; +ssl_certificate_key /etc/ssl/private/Nginx2404.key; +ssl_client_certificate /etc/ssl/certs/EID_Bundle.pem; +ssl_verify_client on; +ssl_verify_depth 2; +``` + +Nüüd tuleb luua uus tekstifail [`EID_Bundle.pem`](#eid_bundle.pem), kuhu tuleb lisada eID juur- ja kesktaseme sertifikaadid Base64 kodeeritud kujul (`EE-GovCA2018`, `ESTEID2018`, `EEGovCA2025`, `ESTEID2025`). Selle faili abil saab välja filtreerida kõik sertifitseerimiskeskused, mille alt väljastatud sertifikaate uus veebileht toetab. Kasutajale näidatakse vaid neid sertifikaate, mis on väljastatud eelloetletud ahelatest. Faili loomiseks saab kasutada cat käsku, aga töötab ka kopeeri-ja-kleebi tekstiredaktorite vahel. Ubuntus avatuna näeb fail välja järgmine: + +![Juur- ja kesktaseme sertifikaadid ühes failis](./img/image5.png) + +Salvesta loodud faili nimega [`EID_Bundle.pem`](#eid_bundle.pem) ja kopeeri see kausta `/etc/ssl/certs`. Veebiserveris muudatuse jõustumiseks taaskäivita Nginx: + +```bash +$ systemctl reload nginx +``` + +Pöördudes pärast muudatuse jõustumist uuesti veebilehe `Nginx2404.octox.demo` poole, küsitakse kasutaja sertifikaati. + +![Kasutaja sertifikaadi valikudialoog](./img/image6.png) + +Server pakub kasutajale välja sertifikaadid, mille väljastajad on kirjeldatud failis [`EID_Bundle.pem`](#eid_bundle.pem). Pärast sertifikaadi kinnitamist ja PIN-koodi sisestamist lubatakse kasutaja veebilehele - kahepoolne SSL töötab. + +Käesoleva dokumendi kõiki sätteid koondav demo-konfiguratsioonifail on saadaval [lisas](#nginx_eid_demo.conf). + +## Võimalikud lisakonfiguratsioonid + +Käesoleva dokumendi eesmärk ei ole anda täpseid juhiseid optimaalseks veebilehtede konfigureerimiseks ega turvamiseks, vaid tutvustada konfiguratsiooni kahepoolse SSLi kasutamiseks Eesti ID-kaartidega. Siiski on oluline arvestada allolevaga. + +### Tulemüüri reegli loomine (vajadusel) + +Tulemüüri reegli loomiseks tuleb terminalis käivitada käsk: + +```bash +$ ufw allow 'SOOVITAV REEGEL' +``` + +Näiteks ainult HTTPS liikluse lubamiseks tuleb käivitada + +```bash +$ ufw enable +Firewall is active and enabled on system startup +$ ufw allow 443/tcp +Rule added +Rule added (v6) +``` + +Kui tulemüüri staatus on aktiivne (`ufw enable`), siis päring `ufw status` näitab olemasolevaid reegleid. + +```bash +$ ufw status +Status: active + +To Action From +-- ------ ---- +443/tcp ALLOW Anywhere +443/tcp (v6) ALLOW Anywhere (v6) +``` + +### Kasutaja sertifikaadi staatuse kontroll OCSP teenuse vastu[^5] + +OCSP (*Online Certificate Status Protocol*) teenuse abil saab kasutaja sertifikaadi staatust kontrollida reaalajas. Iga kasutaja autentimisel saadab veebiserver päringu OCSP teenusele, mis tagastab sertifikaadi staatuse info. + +SK ja Zetes pakuvad vaba ligipääsuga (tasuta) AIA OCSP teenust. `ESTEID2018` ja `ESTEID2025` CA alt väljastatud sertifikaatide puhul on AIA OCSP aadress juba sertifikaadis kirjas (, ). + +![ESTEID2018 AIA OCSP aadress sertifikaadis](./img/image7.png) + +Lubamaks kasutaja sertifikaadi staatuse kontrolli vastu sertifikaadis olevat AIA OCSP teenust, tuleb Nginx SSL konfiguratsiooni lisada järgmised read pärast `ssl_verify_depth` rida: + +```nginx +# Certificates +ssl_certificate /etc/ssl/certs/Nginx2404_Bundle.pem; +ssl_certificate_key /etc/ssl/private/Nginx2404.key; +ssl_client_certificate /etc/ssl/certs/EID_Bundle.pem; +ssl_verify_client on; +ssl_verify_depth 2; +ssl_ocsp leaf; +ssl_ocsp_cache off; +resolver 194.126.115.18; +``` + +Ülaltoodud konfiguratsiooni puhul võetakse OCSP teenuse aadress kasutaja sertifikaadist. Asendage `resolver` IP-aadress avaliku DNS-serveri IP-aadressiga[^6]. + +### Soovituslikud Nginxi turvasätted + +#### SSL/TLS + +Ubuntu platvormil töötav Nginx server versiooniga 1.23.3 võib toetada aegunud TLS versioone nagu TLS 1.0 või TLS 1.1. Tänapäeval on tungivalt soovitav mitte kasutada TLS protokolli versioonist 1.2 madalamaid versioone. Juba mõnda aega on kasutusel ka TLS versioon 1.3. + +Kui puudub spetsiifiline nõue TLS 1.2 versiooni lubamiseks, siis on soovitav kasutada vaid TLS versiooni 1.3. TLS 1.2 on küll korrektse konfiguratsiooni puhul väga stabiilne ja turvaline, ent TLS 1.3 on kiirem, vaikimisi turvalisem ja nõuab vähem konfigureerimist. Standardlahendustes võiks TLS 1.2 olla toetatud vaid tõestatud vajaduse puhul ja sel juhul tuleb olla veendunud, et kasutusel on vaid turvalised šifrikomplektid ja laiendused. + +Kui on soov Nginx serveris kasutada vaid TLS protokolli versiooni 1.3, tuleb konfiguratsioonifaili lisada rida: + +```nginx +ssl_protocols TLSv1.3; +``` + +Toetamaks ka TLS versiooni 1.2, tuleb konfiguratsioonireale lisada `TLSv1.2`. + +Sama muudatuse serveri tasemel kehtestamiseks muuda `ssl_protocols` direktiivi failis `/etc/nginx/nginx.conf`. + +Rohkem infot TLS protokolli kasutamise soovituste kohta leiab RIA tellitud krüptograafiliste algoritmide elutsükli uuringust aadressil . + +#### Šifrikomplektid (*Cipher suites*) + +TLS 1.3 versiooni kõiki šifreid peetakse hetkeseisuga turvaliseks, seega turvakaalutlustel selle protokolli jaoks lisakonfiguratsiooni looma ei pea. + +TLS 1.2 puhul see päris nii ei ole. Nginx 1.23.3 versiooniga on vaikimisi kasutusel suur hulk erinevaid TLS šifreid[^7], mida näeb käsuga + +```bash +$ openssl ciphers -v +``` + +Kui on soov määrata täpsemalt TLS 1.2 protokolliga kasutatavaid šifrikomplekte, saab Nginx kaustapõhises konfiguratsioonifailis kasutada direktiivi `ssl_ciphers`. Siin omakorda saab kasutada kas eeldefineeritud *alias*i või täpseid šifrikomplektide kirjeldusi. + +Kindlat soovitust erinevate šifrikomplektide kasutamiseks ei ole võimalik anda ilma veebilehele esitatavaid tingimusi teadmata. Küll aga tuleb kindlasti eemaldada loendist ebaturvalised šifrikomplektid. Mõistlik on kirjeldada konkreetsed lubatud šifrikomplektid TLS 1.2 kasutamiseks. + +Näide — järgnev rida konfiguratsioonifailis lubab vaid loetletud šifrikomplektide kasutamist: + +```nginx +ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384; +``` + +Alternatiivina saab kasutatavaid šifreid konfigureerida serveripõhiselt failis `/etc/nginx/nginx.conf` muutes selles parameetrit `ssl_ciphers`. + +Rohkem infot šifrikomplektide soovituste kohta leiab RIA tellitud krüptograafiliste algoritmide elutsükli uuringust aadressil . + +##### ssl_prefer_server_ciphers + +Eelistamaks serveri šifrikomplektide valikut kasutaja omale, tuleb Nginx konfiguratsioonifailis defineerida määrang `ssl_prefer_server_ciphers` ja panna selle väärtuseks `on`. + +#### Kasutajasertifikaatide lisafiltreerimine + +Oluline! Veebiteenusele juurdepääsu piiramiseks vaid õigete sertifikaatidega kasutajatele tuleb serveri konfiguratsioonis kehtestada järgmised nõuded: + +1. sertifikaadis peab olema korrektne OID väärtus; +2. sertifikaadi väljastaja peab olema `ESTEID2018` või `ESTEID2025`. + +Hetkeseisuga ei ole teada ühtki meetodit õige OID kontrollimiseks Nginx serveri tasemel. Seetõttu on soovitatav see kontroll teha veebirakenduse tasemel. + +Teise nõude täitmiseks saab luua konfiguratsiooni, kus ühendus katkestatakse, kui sertifikaat ei ole väljastatud serveris lubatud CAde poolt. Selleks tuleb lisada konfiguratsioonifaili (serveri sektsiooni, näiteks SSL kirjeldusele järgnevalt) järgmised tingimused: + +```nginx +#Determine IMCA and cancel, if not trusted +set $ocspr ""; + +if ($ssl_client_i_dn = "CN=ESTEID2018,organizationIdentifier=NTREE-10747013,O=SK ID Solutions AS,C=EE") { + set $ocspr "http://aia.sk.ee/esteid2018"; +} + +if ($ssl_client_i_dn = "CN=ESTEID2025, organizationIdentifier=NTREE-17066049, O=Zetes Estonia OÜ, C=EE") { + set $ocspr "http://ocsp.eidpki.ee"; +} + +if ($ocspr = "") { + return 403; +} +``` + +Nende tingimuste lisamisel lükatakse ühendus tagasi, kui kasutaja sertifikaati ei ole väljastanud usaldusväärne CA — `ESTEID2018` või `ESTEID2025`. + +> **Märkus:** Kui on kasutusel mõni muu liikluse filtreerimise vahend/võimalus, siis on soovitav turvaline konfiguratsioon juurutada ka seal. SK on F5 konfiguratsiooni osas publitseerinud järgmise informatsiooni (vt. peakükki „Only accept certificates with trusted key usage"): + +> **Märkus:** SK soovitused turvaliseks autentimiseks ID-kaardiga on leitavad peatükist „Defence: implement ID-card authentication securely": + +> **Märkus:** Soovituslik meetod ebakorrektsete sertifikaatide vältimiseks on kasutada sertifikaatides olevaid OIDe. Paraku ei ole hetkeseisuga teada meetodit, kuidas seda serveri tasemel teha. Võimalusel tuleks võtta autentimise sertifikaat veebirakenduse tasemel lahti ja kontrollida, kas see sisaldab mõnda korrektset OIDi ning kui ei sisalda, siis mitte autentida. Hetkeseisuga teadaolevad OIDid on SK publitseerinud peatükis „Only accept certificates with trusted issuance policy": + +#### *HTTP Strict Transport Security* (HSTS) lubamine + +HSTS teenuse Nginx veebilehele konfigureerimiseks lisa konfiguratsioonifaili rida `add_header Strict-Transport-Security`: + +```nginx +# Other recommended security and optimization settings. +ssl_prefer_server_ciphers on; +add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; +ssl_session_cache shared:SSL:10m; +ssl_session_timeout 1h; +ssl_session_tickets on; +``` + +#### Muud võimalused + +Lisaks TLS ja šifrikomplektide häälestusele on soovitav pöörata tähelepanu Nginx serveri turvalisusele ka järgmiste punktide vaates: + +- Hoida operatsioonisüsteem uuendatuna. +- Hoida Nginx uuendatuna. +- Keelata serveri info presenteerimine. +- Keelata HTTP päringud. +- Paigaldada ja konfigureerida Naxsi. +- Monitoorida Monit abil. +- Konfigureerida X-XSS kaitse. +- Konfigureerida X-Frame-Options. +- Konfigureerida X-Content-Type-Options. +- Konfigureerida Content Security Policy (CSP). +- ... + +Ülaltoodu on näidisloend võimalustest Nginx turvalisemaks muutmiseks. Põhjalikumaid soovitusi on võimalik leida internetist: . + +## Lisa + +### EID_Bundle.pem + +``` +# EE-GovCA2018 +-----BEGIN CERTIFICATE----- +MIIE+DCCBFmgAwIBAgIQMLOwlXoR0oFbj52nmRsnezAKBggqhkjOPQQDBDBaMQsw +CQYDVQQGEwJFRTEbMBkGA1UECgwSU0sgSUQgU29sdXRpb25zIEFTMRcwFQYDVQRh +DA5OVFJFRS0xMDc0NzAxMzEVMBMGA1UEAwwMRUUtR292Q0EyMDE4MB4XDTE4MDkw +NTA5MTEwM1oXDTMzMDkwNTA5MTEwM1owWjELMAkGA1UEBhMCRUUxGzAZBgNVBAoM +ElNLIElEIFNvbHV0aW9ucyBBUzEXMBUGA1UEYQwOTlRSRUUtMTA3NDcwMTMxFTAT +BgNVBAMMDEVFLUdvdkNBMjAxODCBmzAQBgcqhkjOPQIBBgUrgQQAIwOBhgAEAMcb +/dmAcVo/b2azEPS6CfW7fEA2KuHKC53D7ShVNvLz4QUjCdTXjds/4u99jUoYEQec +luVVzMlgEJR1nkN2eOrLAZYxPjwG5HiI1iZEyW9QKVdeEgyvhzWWTNHGjV3HdZRv +7L9o4533PtJAyqJq9OTs6mjsqwFXjH49bfZ6CGmzUJsHo4ICvDCCArgwEgYDVR0T +AQH/BAgwBgEB/wIBATAOBgNVHQ8BAf8EBAMCAQYwNAYDVR0lAQH/BCowKAYIKwYB +BQUHAwkGCCsGAQUFBwMCBggrBgEFBQcDBAYIKwYBBQUHAwEwHQYDVR0OBBYEFH4p +Vuc0knhOd+FvLjMqmHHB/TSfMB8GA1UdIwQYMBaAFH4pVuc0knhOd+FvLjMqmHHB +/TSfMIICAAYDVR0gBIIB9zCCAfMwCAYGBACPegECMAkGBwQAi+xAAQIwMgYLKwYB +BAGDkSEBAQEwIzAhBggrBgEFBQcCARYVaHR0cHM6Ly93d3cuc2suZWUvQ1BTMA0G +CysGAQQBg5EhAQECMA0GCysGAQQBg5F/AQEBMA0GCysGAQQBg5EhAQEFMA0GCysG +AQQBg5EhAQEGMA0GCysGAQQBg5EhAQEHMA0GCysGAQQBg5EhAQEDMA0GCysGAQQB +g5EhAQEEMA0GCysGAQQBg5EhAQEIMA0GCysGAQQBg5EhAQEJMA0GCysGAQQBg5Eh +AQEKMA0GCysGAQQBg5EhAQELMA0GCysGAQQBg5EhAQEMMA0GCysGAQQBg5EhAQEN +MA0GCysGAQQBg5EhAQEOMA0GCysGAQQBg5EhAQEPMA0GCysGAQQBg5EhAQEQMA0G +CysGAQQBg5EhAQERMA0GCysGAQQBg5EhAQESMA0GCysGAQQBg5EhAQETMA0GCysG +AQQBg5EhAQEUMA0GCysGAQQBg5F/AQECMA0GCysGAQQBg5F/AQEDMA0GCysGAQQB +g5F/AQEEMA0GCysGAQQBg5F/AQEFMA0GCysGAQQBg5F/AQEGMDEGCisGAQQBg5Eh +CgEwIzAhBggrBgEFBQcCARYVaHR0cHM6Ly93d3cuc2suZWUvQ1BTMBgGCCsGAQUF +BwEDBAwwCjAIBgYEAI5GAQEwCgYIKoZIzj0EAwQDgYwAMIGIAkIBk698EqetY9Tt +6HwO50CfzdIIjKmlfCI34xKdU7J+wz1tNVu2tHJwEhdsH0e92i969sRDp1RNPlVh +4XFJzI3oQFQCQgGVxmcuVnsy7NUscDZ0erwovmbFOsNxELCANxNSWx5xMqzEIhV8 +46opxu10UFDIBBPzkbBenL4h+g/WU7lG78fIhA== +-----END CERTIFICATE----- +# ESTEID2018 +-----BEGIN CERTIFICATE----- +MIIFVzCCBLigAwIBAgIQdUf6rBR0S4tbo2bU/mZV7TAKBggqhkjOPQQDBDBaMQsw +CQYDVQQGEwJFRTEbMBkGA1UECgwSU0sgSUQgU29sdXRpb25zIEFTMRcwFQYDVQRh +DA5OVFJFRS0xMDc0NzAxMzEVMBMGA1UEAwwMRUUtR292Q0EyMDE4MB4XDTE4MDky +MDA5MjIyOFoXDTMzMDkwNTA5MTEwM1owWDELMAkGA1UEBhMCRUUxGzAZBgNVBAoM +ElNLIElEIFNvbHV0aW9ucyBBUzEXMBUGA1UEYQwOTlRSRUUtMTA3NDcwMTMxEzAR +BgNVBAMMCkVTVEVJRDIwMTgwgZswEAYHKoZIzj0CAQYFK4EEACMDgYYABAHHOBlv +7UrRPYP1yHhOb7RA/YBDbtgynSVMqYdxnFrKHUXh6tFkghvHuA1k2DSom1hE5kqh +B5VspDembwWDJBOQWQGOI/0t3EtccLYjeM7F9xOPdzUbZaIbpNRHpQgVBpFX0xpL +TgW27MpIMhU8DHBWFpeAaNX3eUpD4gC5cvhsK0RFEqOCAx0wggMZMB8GA1UdIwQY +MBaAFH4pVuc0knhOd+FvLjMqmHHB/TSfMB0GA1UdDgQWBBTZrHDbX36+lPig5L5H +otA0rZoqEjAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBADCCAc0G +A1UdIASCAcQwggHAMAgGBgQAj3oBAjAJBgcEAIvsQAECMDIGCysGAQQBg5EhAQEB +MCMwIQYIKwYBBQUHAgEWFWh0dHBzOi8vd3d3LnNrLmVlL0NQUzANBgsrBgEEAYOR +IQEBAjANBgsrBgEEAYORfwEBATANBgsrBgEEAYORIQEBBTANBgsrBgEEAYORIQEB +BjANBgsrBgEEAYORIQEBBzANBgsrBgEEAYORIQEBAzANBgsrBgEEAYORIQEBBDAN +BgsrBgEEAYORIQEBCDANBgsrBgEEAYORIQEBCTANBgsrBgEEAYORIQEBCjANBgsr +BgEEAYORIQEBCzANBgsrBgEEAYORIQEBDDANBgsrBgEEAYORIQEBDTANBgsrBgEE +AYORIQEBDjANBgsrBgEEAYORIQEBDzANBgsrBgEEAYORIQEBEDANBgsrBgEEAYOR +IQEBETANBgsrBgEEAYORIQEBEjANBgsrBgEEAYORIQEBEzANBgsrBgEEAYORIQEB +FDANBgsrBgEEAYORfwEBAjANBgsrBgEEAYORfwEBAzANBgsrBgEEAYORfwEBBDAN +BgsrBgEEAYORfwEBBTANBgsrBgEEAYORfwEBBjAqBgNVHSUBAf8EIDAeBggrBgEF +BQcDCQYIKwYBBQUHAwIGCCsGAQUFBwMEMGoGCCsGAQUFBwEBBF4wXDApBggrBgEF +BQcwAYYdaHR0cDovL2FpYS5zay5lZS9lZS1nb3ZjYTIwMTgwLwYIKwYBBQUHMAKG +I2h0dHA6Ly9jLnNrLmVlL0VFLUdvdkNBMjAxOC5kZXIuY3J0MBgGCCsGAQUFBwED +BAwwCjAIBgYEAI5GAQEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL2Muc2suZWUv +RUUtR292Q0EyMDE4LmNybDAKBggqhkjOPQQDBAOBjAAwgYgCQgDeuUY4HczUbFKS +002HZ88gclgYdztHqglENyTMtXE6dMBRnCbgUmhBCAA0mJSHbyFJ8W9ikLiSyurm +kJM0hDE9KgJCASOqA405Ia5nKjTJPNsHQlMi7KZsIcTHOoBccx+54N8ZX1MgBozJ +mT59rZY/2/OeE163BAwD0UdUQAnMPP6+W3Vd +-----END CERTIFICATE----- +# EEGovCA2025 +-----BEGIN CERTIFICATE----- +MIICljCCAhygAwIBAgIUKbkXJo8FWjthNs7Hgduq1RiXqwswCgYIKoZIzj0EAwMw +WDEUMBIGA1UEAwwLRUVHb3ZDQTIwMjUxFzAVBgNVBGEMDk5UUkVFLTE3MDY2MDQ5 +MRowGAYDVQQKDBFaZXRlcyBFc3RvbmlhIE/DnDELMAkGA1UEBhMCRUUwHhcNMjUw +NTA2MDgxODEzWhcNNDAwNTA1MDgxODEyWjBYMRQwEgYDVQQDDAtFRUdvdkNBMjAy +NTEXMBUGA1UEYQwOTlRSRUUtMTcwNjYwNDkxGjAYBgNVBAoMEVpldGVzIEVzdG9u +aWEgT8OcMQswCQYDVQQGEwJFRTB2MBAGByqGSM49AgEGBSuBBAAiA2IABH0zMU4D +UN/Ay6gUdWzMUDAYFaau0flpuuicO2bfK7kHNGw+psRRn6DaF/4cVQd8qHxbDF2x +N4jJf1bSpQHLsc2RZHSCI8qb4E9GmB5MDoVVxiXnBHOOW3+55Qm/BfwcwaOBpjCB +ozASBgNVHRMBAf8ECDAGAQH/AgEBMB8GA1UdIwQYMBaAFKqAqJsPu0umfsUC9HLN +LPGlKdm3MD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczov +L3JlcG9zaXRvcnkuZWlkcGtpLmVlMB0GA1UdDgQWBBSqgKibD7tLpn7FAvRyzSzx +pSnZtzAOBgNVHQ8BAf8EBAMCAQYwCgYIKoZIzj0EAwMDaAAwZQIwOy8+eV+yYNXt +XcEEdOuQd60O7lXucK3W4cDewxEoEXb4iTYFswWUZq3DacfmeE+/AjEAkzHeNdru +QqKfvqTFB3eNRnMycNcnJ3rmGe37u9zgH8wnQUuMhUClOGxeRcK4NV9I +-----END CERTIFICATE----- +# ESTEID2025 +-----BEGIN CERTIFICATE----- +MIIDDzCCApagAwIBAgIUUFQrcGtK7/jCP+GyAOTPvbglGlcwCgYIKoZIzj0EAwMw +WDEUMBIGA1UEAwwLRUVHb3ZDQTIwMjUxFzAVBgNVBGEMDk5UUkVFLTE3MDY2MDQ5 +MRowGAYDVQQKDBFaZXRlcyBFc3RvbmlhIE/DnDELMAkGA1UEBhMCRUUwHhcNMjUw +NTA3MTMyMDA3WhcNNDAwNTAzMTMyMDA2WjBXMRMwEQYDVQQDDApFU1RFSUQyMDI1 +MRcwFQYDVQRhDA5OVFJFRS0xNzA2NjA0OTEaMBgGA1UECgwRWmV0ZXMgRXN0b25p +YSBPw5wxCzAJBgNVBAYTAkVFMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEdSEmb1An +xN7G22CCEQ3ts2YZNieTUZP4Vc4iObhmL/um4EXkiA4HgyCiR5T6olKAEkPdxFBs +fmcLoPN+TmBO8ZpLGEqy1Vwf59ahDW7dQiLXTIAEiGCoXSWI9MvtHDZ2o4IBIDCC +ARwwEgYDVR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBSqgKibD7tLpn7FAvRy +zSzxpSnZtzBABggrBgEFBQcBAQQ0MDIwMAYIKwYBBQUHMAKGJGh0dHA6Ly9jcnQu +ZWlkcGtpLmVlL0VFR292Q0EyMDI1LmNydDA9BgNVHSAENjA0MDIGBFUdIAAwKjAo +BggrBgEFBQcCARYcaHR0cHM6Ly9yZXBvc2l0b3J5LmVpZHBraS5lZTA1BgNVHR8E +LjAsMCqgKKAmhiRodHRwOi8vY3JsLmVpZHBraS5lZS9FRUdvdkNBMjAyNS5jcmww +HQYDVR0OBBYEFJLAOLC4NhJo9crtZu5HKohtpo3oMA4GA1UdDwEB/wQEAwIBBjAK +BggqhkjOPQQDAwNnADBkAjANipgLQqdM985dSFZfKvU9A7Sz2YdmmUSZBxu0lL7Q +XKzqa0ZDyXmf03NPLNAC6dICMBQiROZbLoPezO9LDl847UbENx85hloLlzweWjqP +rY++Xj8FjCD1C9hnblsVgj3XAA== +-----END CERTIFICATE----- +``` + +### Nginx_EID_Demo.conf + +```nginx +server { + listen 80; + listen [::]:80; + server_name Nginx2404.octox.demo; + return 301 https://Nginx2404.octox.demo; +} + +server { + # SSL configuration + listen 443 ssl; + listen [::]:443 ssl; + root /var/www/Nginx2404; + index index.html; + server_name Nginx2404.octox.demo; + + # Certificates + ssl_certificate /etc/ssl/certs/Nginx2404_Bundle.pem; + ssl_certificate_key /etc/ssl/private/Nginx2404.key; + ssl_client_certificate /etc/ssl/certs/EID_Bundle.pem; + ssl_verify_client on; + ssl_verify_depth 2; + + # OCSP — uncomment to enable AIA OCSP checking + # ssl_ocsp leaf; + # ssl_ocsp_cache off; + # resolver 194.126.115.18; + + # TLS + ssl_protocols TLSv1.3; + # ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384; + ssl_prefer_server_ciphers on; + + # HSTS and session settings + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; + ssl_session_cache shared:SSL:10m; + ssl_session_timeout 1h; + ssl_session_tickets on; + + # Filter by certificate issuer — reject if not a trusted CA + set $ocspr ""; + + if ($ssl_client_i_dn = "CN=ESTEID2018,organizationIdentifier=NTREE-10747013,O=SK ID Solutions AS,C=EE") { + set $ocspr "http://aia.sk.ee/esteid2018"; + } + + if ($ssl_client_i_dn = "CN=ESTEID2025, organizationIdentifier=NTREE-17066049, O=Zetes Estonia OÜ, C=EE") { + set $ocspr "http://ocsp.eidpki.ee"; + } + + if ($ocspr = "") { + return 403; + } + + location / { + try_files $uri $uri/ =404; + } +} +``` + +[^1]: Lisaks käsureal kirjeldatud sertifikaadi atribuutidele C, O ja CN on võimalik soovi korral lisaks kirjeldada atribuudid L, OU ja S. Võib kasutada ka ainult CNi. + +[^2]: Kaasaegsed veebilehitsejad ei pea veebilehte usaldusväärseks, kui vähemalt üks SAN DNS ei vasta veebilehe tegelikule aadressile. + +[^3]: Veebilehitsejad ei pea veebilehte usaldusväärseks, kui vähemalt üks SAN DNS ei vasta veebilehe tegelikule aadressile. + +[^4]: HTTP osa siin konfiguratsioonifailis ei ole tegelikult vajalik ja on toodud lihtsalt HTTP -\>HTTPS ümbersuunamise näitena. + +[^5]: Sertifikaatide kehtivust on võimalik kontrollida ka sertifikaatide tühistusnimekirjade (CRL) abil, ent sellel käesolevas dokumendis ei peatuta, kuna OCSP-põhine lahendus on eelistatum. + +[^6]: *Resolver* -- asendage see soovi korral mõne DNS serveriga, mis on võimeline avalikke DNS aadresse lahendama. Selliseks serveriks võib olla ka teie enda sisevõrgu DNS server. + +[^7]: Siin ei käsitleta teiste TLS protokollide šifreid, kuna versioonist 1.2 vanemad protokollid on eelduslikult keelatud ja 1.3 versioon on hetkel eelistatuim. diff --git a/nginx/index.md b/nginx/index.md new file mode 100644 index 0000000..bb58f10 --- /dev/null +++ b/nginx/index.md @@ -0,0 +1,699 @@ +# Configuring two-way SSL using Estonian ID-cards in the Ubuntu Nginx web server + +**[Eesti keeles (In Estonian)](index.et.md)** + +**Version:** 26.04/1 + +**Published by:** [RIA](https://www.ria.ee/) + +**Version information** + +| Date | Version | Changes/Notes +|:-----------|:-------:|:----------------------------------------------------------- +| 08/02/2019 | 19.02/1 | Public version. +| 28/02/2019 | 19.02/2 | Added notes about the user certificate validity check. Default webpage removal. — Changed by: Urmas Vanem +| 12/12/2019 | 19.12/1 | Added recommendations for securing Nginx. — Changed by: Urmas Vanem +| 30/12/2020 | 20.12/1 | Ubuntu updated to 20.04.1. Nginx updated to 1.19.6. Configuration management changed (sites... -> conf.d). Added OCSP-based revocation lists, recommended security settings, and filtering of wrong CA certificates. — Changed by: Urmas Vanem +| 13/01/2021 | 21.01/1 | Added the demonstrative configuration file. Added HSTS configuration. — Changed by: Urmas Vanem +| 25/01/2021 | 21.01/2 | Changed the HSTS recommendations. Changed the SSL/TLS and cipher recommendations. Added additional security recommendations. — Changed by: Urmas Vanem +| 28/04/2021 | 21.04/1 | Support for outdated `ESTEID-SK 2011` certificates removed. — Changed by: Urmas Vanem +| 25/11/2021 | 21.11/1 | Ubuntu updated to Server 21.10. Nginx updated to 1.21.4. Added guidance for ECC certificates. Updated TLS and cipher recommendations. — Changed by: Urmas Vanem +| 22/02/2023 | 23.02/1 | Ubuntu updated to Server 22.04 and Nginx to 1.23.3. Virtual host configuration updated. — Changed by: Urmas Vanem +| 18/12/2023 | 23.12/1 | Removed the `ESTEID-SK 2015` chain. — Changed by: Urmas Vanem +| 22/08/2024 | 24.08/1 | Ubuntu updated to Server 24.04 and Nginx to 1.27.1. — Changed by: Urmas Vanem +| 31/10/2025 | 25.10/1 | Added Zetes chain, removed SK OCSP section. — Changed by: Lauris Kaplinski +| 22/04/2026 | 26.04/1 | Converted to Markdown format. — Changed by: Raul Metsma + +--- + +- TOC +{:toc} + +## Intro + +This guide describes: + +- How to install and configure the Nginx 1.28.1 web server on Ubuntu Server 24.04. +- How to configure HTTPS (one-way SSL) in the web server. +- How to configure ID-card authentication (two-way SSL) using [SK ID Solutions](https://www.skidsolutions.eu/resources/certificates/) (`EE-GovCA2018`) and [Zetes](https://repository.eidpki.ee/) (`EEGovCA2025`) ID-cards. +- How to configure OCSP checks against the guaranteed OCSP as well as the AIA OCSP service. +- How to protect the web server. + +In addition, we will look at other configuration options such as how to configure HTTP -\> HTTPS redirection, etc. + +## Nginx installation and configuration + +### Installation + +By default, Ubuntu 24.04 installs Nginx version 1.24. However, as we wish to use the latest version 1.28.1 in our guide, additional changes are required before installation. + +To install Nginx 1.28.1 on Ubuntu 24.04: + +1. Run in terminal + + ```bash + $ sudo add-apt-repository ppa:ondrej/nginx + PPA publishes dbgsym, you may need to include 'main/debug' component + Repository: 'Types: deb + URIs: https://ppa.launchpadcontent.net/ondrej/nginx/ubuntu/ + Suites: noble + Components: main + ' + + Description: + This branch follows latest NGINX Stable packages compiled against latest OpenSSL for HTTP/2 and TLS 1.3 support. + + BUGS&FEATURES: This PPA now has a issue tracker: https://deb.sury.org/#bug-reporting + ``` + +2. Run in terminal: + + ```bash + $ apt update + Hit:1 http://ee.archive.ubuntu.com/ubuntu noble InRelease + Hit:2 http://ee.archive.ubuntu.com/ubuntu noble-updates InRelease + Hit:3 http://ee.archive.ubuntu.com/ubuntu noble-backports InRelease + Hit:4 http://security.ubuntu.com/ubuntu noble-security InRelease + Hit:5 https://ppa.launchpadcontent.net/ondrej/apache2/ubuntu noble InRelease + Hit:6 https://ppa.launchpadcontent.net/ondrej/nginx-mainline/ubuntu noble InRelease + ``` + +3. Run in terminal: + + ```bash + $ apt install nginx-full + Reading package lists... Done + Building dependency tree... Done + Reading state information... Done + The following additional packages will be installed: + libnginx-mod-http-auth-pam libnginx-mod-http-dav-ext libnginx-mod-http-echo + libnginx-mod-http-geoip2 libnginx-mod-http-subs-filter + libnginx-mod-http-upstream-fair libnginx-mod-stream + libnginx-mod-stream-geoip2 nginx nginx-common + ``` + +We can check the Nginx version with the command + +```bash +$ nginx -v +nginx version: nginx/1.28.1 +``` + +### Configuration + +#### Enabling one-way SSL + +##### Creating the private key and the Certificate Signing Request (CSR) + +###### Elliptic Curve Cryptography (ECC) + +First, generate an ECC private key, then an ECC CSR[^1]: + +```bash +$ openssl ecparam -name secp384r1 -genkey -noout -out Nginx2404.key +$ openssl req -new -key Nginx2404.key -out Nginx2404.csr -subj /C=EE/O=OctoX/CN=Nginx2404.octox.demo -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS:Nginx2404.octox.demo,DNS:MYWEBSERVER.octox.demo")) +``` + +1. `Nginx2404.key` is the private key of the certificate; +2. `Nginx2404.csr` is the CSR for the certificate authority (CA); +3. `CN=Nginx2404.octox.demo` is the common name for the certificate; +4. `DNS:Nginx2404.octox.demo` and `DNS:MYWEBSERVER.octox.demo` are SAN DNS names for the certificate. These names must correspond to the actual address of the website[^2]. The names must also be resolvable in name services. + +The contents of the CSR can be viewed by running + +```bash +$ openssl req -in Nginx2404.csr -noout -text +Certificate Request: + Data: + Version: 1 (0x0) + Subject: C = EE, O = OctoX, CN = Nginx2404.octox.demo + Subject Public Key Info: + Public Key Algorithm: id-ecPublicKey + Public-Key: (384 bit) + pub: + 04:83:8a:77:21:33:00:ac:6a:66:28:f4:7e:8e:98: + fa:52:09:ed:bb:83:f9:98:ee:24:3b:48:b1:e2:ad: + ae:1d:57:70:b1:9a:5c:c7:9c:4c:cb:95:f9:ff:b1: + 89:4f:d0:c9:e1:39:0e:5d:ac:c6:d3:92:64:39:23: + 5c:d0:fc:0e:38:17:22:3c:bb:e0:fb:ca:2c:8e:55: + 65:2b:7c:56:6a:55:4a:b8:ae:a4:8c:e5:81:b7:a9: + d6:e4:5a:1a:aa:af:37 + ASN1 OID: secp384r1 + NIST CURVE: P-384 + Attributes: + Requested Extensions: + X509v3 Subject Alternative Name: + DNS:Nginx2404.octox.demo, DNS:MYWEBSERVER.octox.demo + Signature Algorithm: ecdsa-with-SHA256 + Signature Value: +``` + +###### RSA + +*This section is retained for those who prefer RSA-based certificates. The rest of the document uses ECC.* + +Create a CSR and a private key with the command + +```bash +$ openssl req -newkey rsa:2048 -keyout NGINX20PRIV.key -sha256 -subj "/CN=Nginx20.kaheksa.xi" -reqexts SAN -config <(cat /etc/ssl/openssl.cnf <(printf "[SAN]\nsubjectAltName=DNS: Nginx20.kaheksa.xi,DNS: Nginx22.kaheksa.xi ")) -out NGINX20.csr -nodes +Generating a RSA private key +........................................................................+++++ +.....................................+++++ +writing new private key to 'NGINX20PRIV.key' +----- +``` + +1. `NGINX20PRIV.key` is the private key of the certificate; +2. `NGINX20.csr` is the CSR for the CA; +3. `Nginx20.kaheksa.xi` is the subject name for the certificate; +4. `Nginx20.kaheksa.xi` and `Nginx22.kaheksa.xi` are certificate SAN DNS names. These names must correspond to the actual address of the website[^3]. The names must also be resolvable in name services. + +The contents of the CSR can be viewed with the command + +```bash +$ openssl req -in NGINX20.csr -noout -text +Certificate Request: + Data: + Version: 1 (0x0) + Subject: CN = Nginx20.kaheksa.xi + Subject Public Key Info: + Public Key Algorithm: rsaEncryption + RSA Public-Key: (2048 bit) + Modulus: + 00:f1:62:c3:ed:1d:0b:ea:cb:7c:22:17:41:1e:e3: + c1:02:a6:7b:f3:72:13:ae:8d:72:72:6f:09:77:d6: + 51:84:4b:2a:f6:7b:65:9d:9f:f3:2a:0c:16:e5:26: + 47:70:aa:3e:c8:4c:50:62:5b:6c:2a:49:ea:51:01: + 60:5c:94:2c:d6:1d:78:70:eb:41:88:6c:09:c8:2f: + e4:d5:bb:2f:fb:ec:2f:9d:0c:42:66:b5:de:91:e3: + 60:62:ff:94:11:21:aa:de:bb:52:bd:20:a6:ff:b4: + c3:92:0a:5b:b5:fc:2f:88:bc:44:3e:b4:5b:a4:ec: + de:49:16:b6:c0:13:ed:d0:e2:ee:d0:58:bc:cb:36: + 32:c9:1b:6d:8f:79:db:83:22:fd:fe:a7:9a:b2:cd: + 26:b1:d7:52:c4:0c:40:6d:0e:49:b5:18:07:c2:3c: + c0:c9:70:5d:06:da:0a:e6:01:1a:a4:78:19:aa:a7: + 38:1c:9d:36:07:4d:db:d2:b5:7b:50:f1:4b:d0:c7: + 5d:90:86:92:2d:a6:ea:d7:d2:09:8f:51:e8:b6:52: + 07:b1:1e:5e:ca:65:f3:d4:69:52:f1:d9:47:02:24: + 98:42:70:83:bc:49:13:c1:92:51:f7:ca:b2:fa:f6: + a7:08:13:c1:74:23:d6:58:ab:27:d5:e5:02:20:3f: + 11:3b + Exponent: 65537 (0x10001) + Attributes: + Requested Extensions: + X509v3 Subject Alternative Name: + DNS:Nginx20.kaheksa.xi, DNS: Nginx22.kaheksa.xi + Signature Algorithm: sha256WithRSAEncryption +``` + +##### Ordering and installing an SSL certificate + +The CSR `Nginx2404.csr` should be sent to trustworthy CA. In the demo environment, the certificate issuer is the test CA. Signed certificate is issued in PEM format. + +``` +-----BEGIN CERTIFICATE----- +MIICfjCCAZygAwIBAgITEQAAAAvIEFUdbDDF... +... +Hz3/vZjy73t2ag== +-----END CERTIFICATE----- +``` + +In Ubuntu, the certificate looks like this: + +![ECC certificate in Ubuntu](./img/image1.png) + +The certificate also includes the algorithm and alternative SAN DNS names of the subject: + +![Certificate algorithm and SAN DNS names](./img/image2.png) + +As you can see, certificate issuer is a CA named `Punane`. Now, you need to obtain the issuer CA's certificate in PEM format and save it to the user's home folder in Ubuntu as `Punane.pem`. + +Consolidate all one-way SSL certificates into one file, with the web server certificate first. In this example that means `Nginx2404.pem` followed by its CA certificate `Punane.pem`. This can be done in a text editor (placing the Base64-encoded certificates one after another) or with the command + +```bash +$ cat Nginx2404.pem Punane.pem >Nginx2404_Bundle.pem +``` + +When opened in Ubuntu, the file looks like this: + +![Certificates consolidated into a single bundle file](./img/image3.png) + +Place the bundled certificate file `Nginx2404_Bundle.pem` in the `/etc/ssl/certs` folder. In addition, +you need to place the certificate private key in the `/etc/ssl/private` folder. + +```bash +$ cp Nginx2404_Bundle.pem /etc/ssl/certs +$ cp Nginx2404.key /etc/ssl/private +``` + +Now, all the certificates and the private key needed by Nginx for one-way SSL have been correctly installed. + +#### Creating a virtual website + +Create a separate virtual website for your configuration. First, create a home folder named `/var/www/Nginx2404` for the content of the website. + +```bash +$ mkdir /var/www/Nginx2404 +``` + +Put a simple and recognizable webpage named `index.html` into the folder you created. + +Then, prepare the configuration file for the new virtual website. Create a new file named `/etc/nginx/conf.d/Nginx2404.conf` (e.g. with the command `nano /etc/nginx/conf.d/Nginx2404.conf`). + +```bash +$ nano /etc/nginx/conf.d/Nginx2404.conf +``` + +Now, change the new configuration file as you wish. Paste the following configuration in it[^4]: + +```nginx +server { + listen 80; + listen [::]:80; + server_name Nginx2404.octox.demo; + return 301 https://Nginx2404.octox.demo; +} + +server { + # SSL configuration + listen 443 ssl; + listen [::]:443 ssl; + root /var/www/Nginx2404; + index index.html; + server_name Nginx2404.octox.demo; + + # Certificates + ssl_certificate /etc/ssl/certs/Nginx2404_Bundle.pem; + ssl_certificate_key /etc/ssl/private/Nginx2404.key; + + location / { + try_files $uri $uri/ =404; + } +} +``` + +You can verify the configuration syntax with `nginx -t`. If there are no errors, start nginx to activate the web service: + +```bash +$ systemctl start nginx +``` + +If nginx is already running, you can apply the changes by restarting nginx with the terminal command + +```bash +$ systemctl reload nginx +``` + +#### Result + +Now, the new website can be accessed by one-way SSL. In addition, all HTTP requests to the site are automatically redirected to the HTTPS site . + +![Nginx web server working with one-way SSL](./img/image4.png) + +#### Requiring two-way SSL + +If you wish to allow website access by authenticating with an Estonian ID-card, you need to supplement the existing configuration slightly. + +Add the following lines after `ssl_certificate_key` in the SSL section of the file `Nginx2404.conf`: + +```nginx +# Certificates +ssl_certificate /etc/ssl/certs/Nginx2404_Bundle.pem; +ssl_certificate_key /etc/ssl/private/Nginx2404.key; +ssl_client_certificate /etc/ssl/certs/EID_Bundle.pem; +ssl_verify_client on; +ssl_verify_depth 2; +``` + +Now, create a new text file named [`EID_Bundle.pem`](#eid_bundle.pem), which includes the eID root and intermediate certificates (`EE-GovCA2018`, `ESTEID2018`, `EEGovCA2025`, `ESTEID2025`) in PEM format. With this file, you can filter out all CA's whose certificates are supported by the new website. The user will only see the certificates from those chains. The 'cat' command can be used to create this file, but it also works as copy-and-paste between text redactors. When opened in Ubuntu, the file looks like this: + +![Root and intermediate certificates in one file](./img/image5.png) + +Save the file as [`EID_Bundle.pem`](#eid_bundle.pem) and copy it to the folder `/etc/ssl/certs`. Restart the Nginx web server to activate the change: + +```bash +$ systemctl reload nginx +``` + +After accessing the website `Nginx2404.octox.demo` now, a user certificate is required: + +![Client certificate selection dialog](./img/image6.png) + +The server suggests certificates to the user, the issuers of which are described in the file [`EID_Bundle.pem`](#eid_bundle.pem). After confirming the certificate and entering the PIN, the user can access the website -- two-way SSL works. + +A complete demonstrative Nginx configuration file combining all settings in this document is available in the [Appendix](#nginx_eid_demo.conf). + +## Additional configuration options + +The purpose of this document is not to give exact guidance on how to optimize or protect websites, but to show how to configure two-way SSL for Estonian ID-cards. However, you should take into account the following. + +### Firewall rules (if necessary) + +For creating a firewall rule, run the command on the terminal: + +```bash +$ ufw allow 'DESIRABLE RULE' +``` + +For example, to allow HTTPS traffic only, run + +```bash +$ ufw enable +Firewall is active and enabled on system startup +$ ufw allow 443/tcp +Rule added +Rule added (v6) +``` + +If the firewall is active (`ufw enable`), running the command `ufw status` in the terminal shows the active rules. + +```bash +$ ufw status +Status: active + +To Action From +-- ------ ---- +443/tcp ALLOW Anywhere +443/tcp (v6) ALLOW Anywhere (v6) +``` + +### Checking the status of the user's certificate against the OCSP service[^5] + +Using the OCSP (Online Certificate Status Protocol) service, you can check the revocation status of client certificates practically in real time. With every client authentication attempt, the web server sends a query to the OCSP service, which responds with the certificate status. + +SK and Zetes offer a free-access (free-of-charge) AIA OCSP service. For certificates issued under the `ESTEID2018` and `ESTEID2025` CA, AIA OCSP service location is already included in the certificate (, ). + +![ESTEID2018 AIA OCSP address in the certificate](./img/image7.png) + +To enable the user certificate validity check against the AIA OCSP service, you need to add the following lines after `ssl_verify_depth` in the SSL configuration of Nginx: + +```nginx +# Certificates +ssl_certificate /etc/ssl/certs/Nginx2404_Bundle.pem; +ssl_certificate_key /etc/ssl/private/Nginx2404.key; +ssl_client_certificate /etc/ssl/certs/EID_Bundle.pem; +ssl_verify_client on; +ssl_verify_depth 2; +ssl_ocsp leaf; +ssl_ocsp_cache off; +resolver 194.126.115.18; +``` + +With the configuration shown above, the address of the OCSP service is taken from the client certificate. Replace the `resolver` IP with any DNS server capable of resolving public addresses[^6]. + +### Recommended security settings for Nginx + +#### SSL/TLS + +Nginx version 1.23.3 running on Ubuntu can support old TLS versions like TLS 1.0 or TLS 1.1 by default. It is no longer recommended to use TLS protocols with a version number lower than TLS 1.2. TLS version 1.3 has also been in use for a while. + +If there is no specific requirement to allow TLS 1.2, it is recommended to only use TLS 1.3. While TLS 1.2 is very stable and secure with the correct configuration, TLS version 1.3 is faster, more secure by default, and needs less configuration. In standard situations, TLS 1.2 should be enabled only if really needed, and if it is enabled, it is mandatory to allow only secure cipher suites and extensions. + +To configure Nginx to support only TLS protocol version 1.3, add the following line to the Nginx configuration file: + +```nginx +ssl_protocols TLSv1.3; +``` + +To support TLS versions 1.2 and 1.3, add `TLSv1.2` to configuration line. + +If you want to make the change at the server level, modify the parameter `ssl_protocols` in the file `/etc/nginx/nginx.conf`. + +More information about the recommendations for the use of the TLS protocol can be found in the cryptographic algorithms life cycle report ordered by RIA at . + +#### Cipher suites + +All TLS 1.3 cipher suites are currently considered safe, no additional configuration is required for security considerations for this protocol. + +TLS 1.2 is different. There are many different TLS cipher suites available with Nginx version 1.23.3[^7], which can be viewed with the command + +```bash +$ openssl ciphers -v +``` + +If you wish to configure the available cipher suites used with TLS 1.2 in more detail, you can use the `ssl_ciphers` directive in the Nginx configuration file. Here, you can use predefined aliases or exact cipher suite descriptions. + +It is impossible to give an exact recommendation for configuring cipher suites without knowing the requirements applicable to the webpage. However, non-secure cipher suites must be removed from the list. It is reasonable to describe the specific enabled cipher suites for TLS 1.2. + +Example — the following line in the configuration file allows only the described cipher suites: + +```nginx +ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384; +``` + +You can also configure cipher suites at the server level by modifying the parameter `ssl_ciphers` in the file `/etc/nginx/nginx.conf`. + +More information about the recommendations for the use of the cipher suites can be found in the cryptographic algorithms life cycle report ordered by RIA at . + +##### ssl_prefer_server_ciphers + +Preferring server ciphers over user ciphers can be enabled with `ssl_prefer_server_ciphers`. Set its value to 'on' in the configuration file. + +#### Additional filtering of client certificates + +Important! To guarantee access to our web service only for users with the right certificates, it is strongly recommended to add the following additional requirements in the server configuration: + +1. The certificate must include the correct OID value; +2. The certificate issuer must be `ESTEID2018` or `ESTEID2025`. + +There is currently no known way to check the correct OID at the Nginx server level. It is recommended to perform this check at the web application level instead. + +To implement the second recommendation above, you can check the end-user certificate issuer and reject the connection if it is not issued by a CA enabled in the server. To implement it, add the following conditions to the configuration file (server section, e.g. after the SSL description): + +```nginx +#Determine IMCA and cancel, if not trusted +set $ocspr ""; + +if ($ssl_client_i_dn = "CN=ESTEID2018,organizationIdentifier=NTREE-10747013,O=SK ID Solutions AS,C=EE") { + set $ocspr "http://aia.sk.ee/esteid2018"; +} + +if ($ssl_client_i_dn = "CN=ESTEID2025, organizationIdentifier=NTREE-17066049, O=Zetes Estonia OÜ, C=EE") { + set $ocspr "http://ocsp.eidpki.ee"; +} + +if ($ocspr = "") { + return 403; +} +``` + +With these conditions in place, any connection will be rejected if the user certificate was not issued by a trusted CA — `ESTEID2018` or `ESTEID2025`. + +> **Note:** If you are using another feature to filter network traffic, the secure configuration should be implemented there, too. SK has published information about the F5 configuration in the chapter 'Only accept certificates with trusted key usage' in the following article: + +> **Note:** SK's recommendations for secure ID-card authentication are published here in the chapter 'Defense: implement ID-card authentication securely': + +> **Note:** The recommended method for avoiding incorrect certificates is using OIDs in the certificates. Unfortunately, there is currently no method for doing this at the server level. If possible, open the certificate at the web application level, check for a correct OID in the certificate, and if there is none, reject the authentication request. All currently known OIDs are listed in the chapter 'Only accept certificates with trusted issuance policy' in the following article published by SK: + +#### Enabling HTTP Strict Transport Security (HSTS) + +To enable HSTS for the Nginx webpage, add the `add_header Strict-Transport-Security` line to the configuration file. + +```nginx +# Other recommended security and optimization settings. +ssl_prefer_server_ciphers on; +add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; +ssl_session_cache shared:SSL:10m; +ssl_session_timeout 1h; +ssl_session_tickets on; +``` + +#### Additional possibilities + +In addition to TLS and cipher suite configuration, you should pay attention to the security of the Nginx server from the following aspects: + +- Keep the operating system up to date. +- Keep Nginx up to date. +- Disable presenting server information. +- Disable HTTP requests. +- Install and configure Naxsi. +- Monitor with Monit. +- Configure X-XSS Protection. +- Configure X-Frame-Options. +- Configure X-Content-Type-Options. +- Configure Content Security Policy (CSP). +- ... + +The above is a sample list of ways to improve Nginx security. Detailed recommendations are available online: . + +## Appendix + +### EID_Bundle.pem + +``` +# EE-GovCA2018 +-----BEGIN CERTIFICATE----- +MIIE+DCCBFmgAwIBAgIQMLOwlXoR0oFbj52nmRsnezAKBggqhkjOPQQDBDBaMQsw +CQYDVQQGEwJFRTEbMBkGA1UECgwSU0sgSUQgU29sdXRpb25zIEFTMRcwFQYDVQRh +DA5OVFJFRS0xMDc0NzAxMzEVMBMGA1UEAwwMRUUtR292Q0EyMDE4MB4XDTE4MDkw +NTA5MTEwM1oXDTMzMDkwNTA5MTEwM1owWjELMAkGA1UEBhMCRUUxGzAZBgNVBAoM +ElNLIElEIFNvbHV0aW9ucyBBUzEXMBUGA1UEYQwOTlRSRUUtMTA3NDcwMTMxFTAT +BgNVBAMMDEVFLUdvdkNBMjAxODCBmzAQBgcqhkjOPQIBBgUrgQQAIwOBhgAEAMcb +/dmAcVo/b2azEPS6CfW7fEA2KuHKC53D7ShVNvLz4QUjCdTXjds/4u99jUoYEQec +luVVzMlgEJR1nkN2eOrLAZYxPjwG5HiI1iZEyW9QKVdeEgyvhzWWTNHGjV3HdZRv +7L9o4533PtJAyqJq9OTs6mjsqwFXjH49bfZ6CGmzUJsHo4ICvDCCArgwEgYDVR0T +AQH/BAgwBgEB/wIBATAOBgNVHQ8BAf8EBAMCAQYwNAYDVR0lAQH/BCowKAYIKwYB +BQUHAwkGCCsGAQUFBwMCBggrBgEFBQcDBAYIKwYBBQUHAwEwHQYDVR0OBBYEFH4p +Vuc0knhOd+FvLjMqmHHB/TSfMB8GA1UdIwQYMBaAFH4pVuc0knhOd+FvLjMqmHHB +/TSfMIICAAYDVR0gBIIB9zCCAfMwCAYGBACPegECMAkGBwQAi+xAAQIwMgYLKwYB +BAGDkSEBAQEwIzAhBggrBgEFBQcCARYVaHR0cHM6Ly93d3cuc2suZWUvQ1BTMA0G +CysGAQQBg5EhAQECMA0GCysGAQQBg5F/AQEBMA0GCysGAQQBg5EhAQEFMA0GCysG +AQQBg5EhAQEGMA0GCysGAQQBg5EhAQEHMA0GCysGAQQBg5EhAQEDMA0GCysGAQQB +g5EhAQEEMA0GCysGAQQBg5EhAQEIMA0GCysGAQQBg5EhAQEJMA0GCysGAQQBg5Eh +AQEKMA0GCysGAQQBg5EhAQELMA0GCysGAQQBg5EhAQEMMA0GCysGAQQBg5EhAQEN +MA0GCysGAQQBg5EhAQEOMA0GCysGAQQBg5EhAQEPMA0GCysGAQQBg5EhAQEQMA0G +CysGAQQBg5EhAQERMA0GCysGAQQBg5EhAQESMA0GCysGAQQBg5EhAQETMA0GCysG +AQQBg5EhAQEUMA0GCysGAQQBg5F/AQECMA0GCysGAQQBg5F/AQEDMA0GCysGAQQB +g5F/AQEEMA0GCysGAQQBg5F/AQEFMA0GCysGAQQBg5F/AQEGMDEGCisGAQQBg5Eh +CgEwIzAhBggrBgEFBQcCARYVaHR0cHM6Ly93d3cuc2suZWUvQ1BTMBgGCCsGAQUF +BwEDBAwwCjAIBgYEAI5GAQEwCgYIKoZIzj0EAwQDgYwAMIGIAkIBk698EqetY9Tt +6HwO50CfzdIIjKmlfCI34xKdU7J+wz1tNVu2tHJwEhdsH0e92i969sRDp1RNPlVh +4XFJzI3oQFQCQgGVxmcuVnsy7NUscDZ0erwovmbFOsNxELCANxNSWx5xMqzEIhV8 +46opxu10UFDIBBPzkbBenL4h+g/WU7lG78fIhA== +-----END CERTIFICATE----- +# ESTEID2018 +-----BEGIN CERTIFICATE----- +MIIFVzCCBLigAwIBAgIQdUf6rBR0S4tbo2bU/mZV7TAKBggqhkjOPQQDBDBaMQsw +CQYDVQQGEwJFRTEbMBkGA1UECgwSU0sgSUQgU29sdXRpb25zIEFTMRcwFQYDVQRh +DA5OVFJFRS0xMDc0NzAxMzEVMBMGA1UEAwwMRUUtR292Q0EyMDE4MB4XDTE4MDky +MDA5MjIyOFoXDTMzMDkwNTA5MTEwM1owWDELMAkGA1UEBhMCRUUxGzAZBgNVBAoM +ElNLIElEIFNvbHV0aW9ucyBBUzEXMBUGA1UEYQwOTlRSRUUtMTA3NDcwMTMxEzAR +BgNVBAMMCkVTVEVJRDIwMTgwgZswEAYHKoZIzj0CAQYFK4EEACMDgYYABAHHOBlv +7UrRPYP1yHhOb7RA/YBDbtgynSVMqYdxnFrKHUXh6tFkghvHuA1k2DSom1hE5kqh +B5VspDembwWDJBOQWQGOI/0t3EtccLYjeM7F9xOPdzUbZaIbpNRHpQgVBpFX0xpL +TgW27MpIMhU8DHBWFpeAaNX3eUpD4gC5cvhsK0RFEqOCAx0wggMZMB8GA1UdIwQY +MBaAFH4pVuc0knhOd+FvLjMqmHHB/TSfMB0GA1UdDgQWBBTZrHDbX36+lPig5L5H +otA0rZoqEjAOBgNVHQ8BAf8EBAMCAQYwEgYDVR0TAQH/BAgwBgEB/wIBADCCAc0G +A1UdIASCAcQwggHAMAgGBgQAj3oBAjAJBgcEAIvsQAECMDIGCysGAQQBg5EhAQEB +MCMwIQYIKwYBBQUHAgEWFWh0dHBzOi8vd3d3LnNrLmVlL0NQUzANBgsrBgEEAYOR +IQEBAjANBgsrBgEEAYORfwEBATANBgsrBgEEAYORIQEBBTANBgsrBgEEAYORIQEB +BjANBgsrBgEEAYORIQEBBzANBgsrBgEEAYORIQEBAzANBgsrBgEEAYORIQEBBDAN +BgsrBgEEAYORIQEBCDANBgsrBgEEAYORIQEBCTANBgsrBgEEAYORIQEBCjANBgsr +BgEEAYORIQEBCzANBgsrBgEEAYORIQEBDDANBgsrBgEEAYORIQEBDTANBgsrBgEE +AYORIQEBDjANBgsrBgEEAYORIQEBDzANBgsrBgEEAYORIQEBEDANBgsrBgEEAYOR +IQEBETANBgsrBgEEAYORIQEBEjANBgsrBgEEAYORIQEBEzANBgsrBgEEAYORIQEB +FDANBgsrBgEEAYORfwEBAjANBgsrBgEEAYORfwEBAzANBgsrBgEEAYORfwEBBDAN +BgsrBgEEAYORfwEBBTANBgsrBgEEAYORfwEBBjAqBgNVHSUBAf8EIDAeBggrBgEF +BQcDCQYIKwYBBQUHAwIGCCsGAQUFBwMEMGoGCCsGAQUFBwEBBF4wXDApBggrBgEF +BQcwAYYdaHR0cDovL2FpYS5zay5lZS9lZS1nb3ZjYTIwMTgwLwYIKwYBBQUHMAKG +I2h0dHA6Ly9jLnNrLmVlL0VFLUdvdkNBMjAxOC5kZXIuY3J0MBgGCCsGAQUFBwED +BAwwCjAIBgYEAI5GAQEwMAYDVR0fBCkwJzAloCOgIYYfaHR0cDovL2Muc2suZWUv +RUUtR292Q0EyMDE4LmNybDAKBggqhkjOPQQDBAOBjAAwgYgCQgDeuUY4HczUbFKS +002HZ88gclgYdztHqglENyTMtXE6dMBRnCbgUmhBCAA0mJSHbyFJ8W9ikLiSyurm +kJM0hDE9KgJCASOqA405Ia5nKjTJPNsHQlMi7KZsIcTHOoBccx+54N8ZX1MgBozJ +mT59rZY/2/OeE163BAwD0UdUQAnMPP6+W3Vd +-----END CERTIFICATE----- +# EEGovCA2025 +-----BEGIN CERTIFICATE----- +MIICljCCAhygAwIBAgIUKbkXJo8FWjthNs7Hgduq1RiXqwswCgYIKoZIzj0EAwMw +WDEUMBIGA1UEAwwLRUVHb3ZDQTIwMjUxFzAVBgNVBGEMDk5UUkVFLTE3MDY2MDQ5 +MRowGAYDVQQKDBFaZXRlcyBFc3RvbmlhIE/DnDELMAkGA1UEBhMCRUUwHhcNMjUw +NTA2MDgxODEzWhcNNDAwNTA1MDgxODEyWjBYMRQwEgYDVQQDDAtFRUdvdkNBMjAy +NTEXMBUGA1UEYQwOTlRSRUUtMTcwNjYwNDkxGjAYBgNVBAoMEVpldGVzIEVzdG9u +aWEgT8OcMQswCQYDVQQGEwJFRTB2MBAGByqGSM49AgEGBSuBBAAiA2IABH0zMU4D +UN/Ay6gUdWzMUDAYFaau0flpuuicO2bfK7kHNGw+psRRn6DaF/4cVQd8qHxbDF2x +N4jJf1bSpQHLsc2RZHSCI8qb4E9GmB5MDoVVxiXnBHOOW3+55Qm/BfwcwaOBpjCB +ozASBgNVHRMBAf8ECDAGAQH/AgEBMB8GA1UdIwQYMBaAFKqAqJsPu0umfsUC9HLN +LPGlKdm3MD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczov +L3JlcG9zaXRvcnkuZWlkcGtpLmVlMB0GA1UdDgQWBBSqgKibD7tLpn7FAvRyzSzx +pSnZtzAOBgNVHQ8BAf8EBAMCAQYwCgYIKoZIzj0EAwMDaAAwZQIwOy8+eV+yYNXt +XcEEdOuQd60O7lXucK3W4cDewxEoEXb4iTYFswWUZq3DacfmeE+/AjEAkzHeNdru +QqKfvqTFB3eNRnMycNcnJ3rmGe37u9zgH8wnQUuMhUClOGxeRcK4NV9I +-----END CERTIFICATE----- +# ESTEID2025 +-----BEGIN CERTIFICATE----- +MIIDDzCCApagAwIBAgIUUFQrcGtK7/jCP+GyAOTPvbglGlcwCgYIKoZIzj0EAwMw +WDEUMBIGA1UEAwwLRUVHb3ZDQTIwMjUxFzAVBgNVBGEMDk5UUkVFLTE3MDY2MDQ5 +MRowGAYDVQQKDBFaZXRlcyBFc3RvbmlhIE/DnDELMAkGA1UEBhMCRUUwHhcNMjUw +NTA3MTMyMDA3WhcNNDAwNTAzMTMyMDA2WjBXMRMwEQYDVQQDDApFU1RFSUQyMDI1 +MRcwFQYDVQRhDA5OVFJFRS0xNzA2NjA0OTEaMBgGA1UECgwRWmV0ZXMgRXN0b25p +YSBPw5wxCzAJBgNVBAYTAkVFMHYwEAYHKoZIzj0CAQYFK4EEACIDYgAEdSEmb1An +xN7G22CCEQ3ts2YZNieTUZP4Vc4iObhmL/um4EXkiA4HgyCiR5T6olKAEkPdxFBs +fmcLoPN+TmBO8ZpLGEqy1Vwf59ahDW7dQiLXTIAEiGCoXSWI9MvtHDZ2o4IBIDCC +ARwwEgYDVR0TAQH/BAgwBgEB/wIBADAfBgNVHSMEGDAWgBSqgKibD7tLpn7FAvRy +zSzxpSnZtzBABggrBgEFBQcBAQQ0MDIwMAYIKwYBBQUHMAKGJGh0dHA6Ly9jcnQu +ZWlkcGtpLmVlL0VFR292Q0EyMDI1LmNydDA9BgNVHSAENjA0MDIGBFUdIAAwKjAo +BggrBgEFBQcCARYcaHR0cHM6Ly9yZXBvc2l0b3J5LmVpZHBraS5lZTA1BgNVHR8E +LjAsMCqgKKAmhiRodHRwOi8vY3JsLmVpZHBraS5lZS9FRUdvdkNBMjAyNS5jcmww +HQYDVR0OBBYEFJLAOLC4NhJo9crtZu5HKohtpo3oMA4GA1UdDwEB/wQEAwIBBjAK +BggqhkjOPQQDAwNnADBkAjANipgLQqdM985dSFZfKvU9A7Sz2YdmmUSZBxu0lL7Q +XKzqa0ZDyXmf03NPLNAC6dICMBQiROZbLoPezO9LDl847UbENx85hloLlzweWjqP +rY++Xj8FjCD1C9hnblsVgj3XAA== +-----END CERTIFICATE----- +``` + +### Nginx_EID_Demo.conf + +```nginx +server { + listen 80; + listen [::]:80; + server_name Nginx2404.octox.demo; + return 301 https://Nginx2404.octox.demo; +} + +server { + # SSL configuration + listen 443 ssl; + listen [::]:443 ssl; + root /var/www/Nginx2404; + index index.html; + server_name Nginx2404.octox.demo; + + # Certificates + ssl_certificate /etc/ssl/certs/Nginx2404_Bundle.pem; + ssl_certificate_key /etc/ssl/private/Nginx2404.key; + ssl_client_certificate /etc/ssl/certs/EID_Bundle.pem; + ssl_verify_client on; + ssl_verify_depth 2; + + # OCSP — uncomment to enable AIA OCSP checking + # ssl_ocsp leaf; + # ssl_ocsp_cache off; + # resolver 194.126.115.18; + + # TLS + ssl_protocols TLSv1.3; + # ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384; + ssl_prefer_server_ciphers on; + + # HSTS and session settings + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; + ssl_session_cache shared:SSL:10m; + ssl_session_timeout 1h; + ssl_session_tickets on; + + # Filter by certificate issuer — reject if not a trusted CA + set $ocspr ""; + + if ($ssl_client_i_dn = "CN=ESTEID2018,organizationIdentifier=NTREE-10747013,O=SK ID Solutions AS,C=EE") { + set $ocspr "http://aia.sk.ee/esteid2018"; + } + + if ($ssl_client_i_dn = "CN=ESTEID2025, organizationIdentifier=NTREE-17066049, O=Zetes Estonia OÜ, C=EE") { + set $ocspr "http://ocsp.eidpki.ee"; + } + + if ($ocspr = "") { + return 403; + } + + location / { + try_files $uri $uri/ =404; + } +} +``` + +[^1]: In addition to the certificate attributes C, O, and CN described on the command line, it is also possible to describe the attributes L, OU, and S if desired. However, only CN can also be used. + +[^2]: Modern browsers do not trust websites where at least one SAN DNS name is not equal to the actual address of the website. + +[^3]: Browsers do not trust websites where at least one SAN DNS name is not equal to the actual address of the website. + +[^4]: The HTTP sections in the configuration file are not necessary and are shown here as an example of the HTTP -\> HTTPS redirection. + +[^5]: The certificate check is also doable with certificate revocation lists (CRL), but this is not covered in this document, as the OCSP-based solution is preferred. + +[^6]: Resolver -- replace the IP address here with any DNS server that can resolve public DNS addresses. You can also use the DNS server of your intranet for this. + +[^7]: The ciphers of other protocols are not covered in this chapter, because protocols older than version 1.2 should be disabled and version 1.3. is currently preferred.