From johndorovski at googlemail.com Wed Nov 18 09:33:43 2009 Content-Type: multipart/mixed; boundary="===============7972388234080039087==" MIME-Version: 1.0 From: John Dorovski To: users at lists.dogtagpki.org Subject: Re: [Pki-users] (forwarded) Help needed on dogtag Date: Wed, 18 Nov 2009 09:33:30 -0500 Message-ID: In-Reply-To: c2df85950911180620q7a21086et6db06989b81a8021@mail.gmail.com --===============7972388234080039087== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Here are the two certs ssltap captured. On Wed, Nov 18, 2009 at 9:20 AM, John Dorovski wrote: > Here is my ssltap output: > > [root(a)rd1 linux-i386]# ssltap -sfxl localhost.localdomain:9545 > SSLTAP output > 
> Looking up "localhost.localdomain"...
> Proxy socket ready and listening
> 
Connection #1 [Wed Nov 18 09:14:56 2009]
> 
Connected to localhost.localdomain:9545
> --> [
> (120 bytes of 115)
> SSLRecord { [Wed Nov 18 09:14:56 2009]
>    0: 16 03 01 00  73                                     | ....s
>    type    =3D 22 (handshake)
>    version =3D { 3,1 }
>    length  =3D 115 (0x73)
>    handshake {
>    0: 01 00 00 6f                                         | ...o
>       type =3D 1 (client_hello)
>       length =3D 111 (0x00006f)
>          ClientHelloV3 {
>             client_version =3D {3, 1}
>             random =3D {...}
>    0: 4b 04 01 60  3e dd 86 f2  6c 26 cb 29  b3 a4 eb 26  |
> K..`>...l&.)...&
>   10: c0 17 f1 8e  24 0a 75 79  03 91 78 40  7b 58 5e 7b  | ....$.uy..x@
> {X^{
>             session ID =3D {
>                 length =3D 0
>                 contents =3D {...}
>             }
>             cipher_suites[18] =3D {
>                 (0x0088) TLS/DHE-RSA/CAMELLIA256-CBC/SHA
>                 (0x0087) TLS/DHE-DSS/CAMELLIA256-CBC/SHA
>                 (0x0039) TLS/DHE-RSA/AES256-CBC/SHA
>                 (0x0038) TLS/DHE-DSS/AES256-CBC/SHA
>                 (0x0084) TLS/RSA/CAMELLIA256-CBC/SHA
>                 (0x0035) TLS/RSA/AES256-CBC/SHA
>                 (0x0045) TLS/DHE-RSA/CAMELLIA128-CBC/SHA
>                 (0x0044) TLS/DHE-DSS/CAMELLIA128-CBC/SHA
>                 (0x0033) TLS/DHE-RSA/AES128-CBC/SHA
>                 (0x0032) TLS/DHE-DSS/AES128-CBC/SHA
>                 (0x0041) TLS/RSA/CAMELLIA128-CBC/SHA
>                 (0x0004) SSL3/RSA/RC4-128/MD5
>                 (0x0005) SSL3/RSA/RC4-128/SHA
>                 (0x002f) TLS/RSA/AES128-CBC/SHA
>                 (0x0016) SSL3/DHE-RSA/3DES192EDE-CBC/SHA
>                 (0x0013) SSL3/DHE-DSS/DES192EDE3CBC/SHA
>                 (0xfeff) SSL3/RSA-FIPS/3DESEDE-CBC/SHA
>                 (0x000a) SSL3/RSA/3DES192EDE-CBC/SHA
>             }
>             compression[1] =3D { 00 }
>             extensions[34] =3D {
>               extension type server_name, length [26] =3D {
>    0: 00 18 00 00  15 6c 6f 63  61 6c 68 6f  73 74 2e 6c  |
> .....localhost.l
>   10: 6f 63 61 6c  64 6f 6d 61  69 6e                     | ocaldomain
>               }
>               extension type session_ticket, length [0]
>             }
>          }
>    }
> }
> ]
> <-- [
> (1903 bytes of 1898)
> SSLRecord { [Wed Nov 18 09:14:56 2009]
>    0: 16 03 01 07  6a                                     | ....j
>    type    =3D 22 (handshake)
>    version =3D { 3,1 }
>    length  =3D 1898 (0x76a)
>    handshake {
>    0: 02 00 00 46                                         | ...F
>       type =3D 2 (server_hello)
>       length =3D 70 (0x000046)
>          ServerHello {
>             server_version =3D {3, 1}
>             random =3D {...}
>    0: 4b 04 01 60  d1 86 09 69  01 8d c2 5e  1a 9c 99 16  |
> K..`...i...^....
>   10: de 0e bd 27  b6 c5 be 57  23 f1 1e 03  69 40 55 9d  |
> ...'...W#...i(a)U.
>             session ID =3D {
>                 length =3D 32
>                 contents =3D {...}
>    0: 67 66 c6 7f  f7 ac d6 98  45 f2 6d 9f  c6 84 e1 df  | gf.
> ....E.m.....
>   10: ff ff c0 87  d8 e9 97 f9  f6 37 8b 6e  09 d9 2b 25  |
> .........7.n..+%
>             }
>             cipher_suite =3D (0x0004) SSL3/RSA/RC4-128/MD5
>             compression method =3D 00
>          }
>    0: 0b 00 07 18                                         | ....
>       type =3D 11 (certificate)
>       length =3D 1816 (0x000718)
>          CertificateChain {
>             chainlength =3D 1813 (0x0715)
>             Certificate {
>                size =3D 890 (0x037a)
>                data =3D { saved in file 'cert.001' }
>             }
>             Certificate {
>                size =3D 917 (0x0395)
>                data =3D { saved in file 'cert.002' }
>             }
>          }
>    0: 0e 00 00 00                                         | ....
>       type =3D 14 (server_hello_done)
>       length =3D 0 (0x000000)
>    }
> }
> ]
> --> [
> (310 bytes of 262, with 43 left over)
> SSLRecord { [Wed Nov 18 09:14:56 2009]
>    0: 16 03 01 01  06                                     | .....
>    type    =3D 22 (handshake)
>    version =3D { 3,1 }
>    length  =3D 262 (0x106)
>    handshake {
>    0: 10 00 01 02                                         | ....
>       type =3D 16 (client_key_exchange)
>       length =3D 258 (0x000102)
>          ClientKeyExchange {
>             message =3D {...}
>          }
>    }
> }
> (310 bytes of 1, with 37 left over)
> SSLRecord { [Wed Nov 18 09:14:56 2009]
>    0: 14 03 01 00  01                                     | .....
>    type    =3D 20 (change_cipher_spec)
>    version =3D { 3,1 }
>    length  =3D 1 (0x1)
>    0: 01                                                  | .
> }
> (310 bytes of 32)
> SSLRecord { [Wed Nov 18 09:14:56 2009]
>    0: 16 03 01 00  20                                     | ....
>    type    =3D 22 (handshake)
>    version =3D { 3,1 }
>    length  =3D 32 (0x20)
>             < encrypted >
> }
> ]
> ssltap: Error -5961: TCP connection reset by peer.: error on server-side
> socket.
> Connection 1 Complete [Wed Nov 18 09:14:56 2009]
> 
Connection #2 [Wed Nov 18 09:14:56 2009]
> 
Connected to localhost.localdomain:9545
> --> [
> recordLen =3D 81 bytes
> (81 bytes of 81)
>  [Wed Nov 18 09:14:56 2009] [ssl2]  ClientHelloV2 {
>            version =3D {0x03, 0x00}
>            cipher-specs-length =3D 54 (0x36)
>            sid-length =3D 0 (0x00)
>            challenge-length =3D 16 (0x10)
>            cipher-suites =3D {
>                 (0x000088) TLS/DHE-RSA/CAMELLIA256-CBC/SHA
>                 (0x000087) TLS/DHE-DSS/CAMELLIA256-CBC/SHA
>                 (0x000039) TLS/DHE-RSA/AES256-CBC/SHA
>                 (0x000038) TLS/DHE-DSS/AES256-CBC/SHA
>                 (0x000084) TLS/RSA/CAMELLIA256-CBC/SHA
>                 (0x000035) TLS/RSA/AES256-CBC/SHA
>                 (0x000045) TLS/DHE-RSA/CAMELLIA128-CBC/SHA
>                 (0x000044) TLS/DHE-DSS/CAMELLIA128-CBC/SHA
>                 (0x000033) TLS/DHE-RSA/AES128-CBC/SHA
>                 (0x000032) TLS/DHE-DSS/AES128-CBC/SHA
>                 (0x000041) TLS/RSA/CAMELLIA128-CBC/SHA
>                 (0x000004) SSL3/RSA/RC4-128/MD5
>                 (0x000005) SSL3/RSA/RC4-128/SHA
>                 (0x00002f) TLS/RSA/AES128-CBC/SHA
>                 (0x000016) SSL3/DHE-RSA/3DES192EDE-CBC/SHA
>                 (0x000013) SSL3/DHE-DSS/DES192EDE3CBC/SHA
>                 (0x00feff) SSL3/RSA-FIPS/3DESEDE-CBC/SHA
>                 (0x00000a) SSL3/RSA/3DES192EDE-CBC/SHA
>                 }
>            session-id =3D { }
>            challenge =3D { 0xde1b 0xaea2 0x262a 0xaae3 0x5135 0x4f6a 0x57=
42
> 0xf716 }
> }
> ]
> <-- [
> (1903 bytes of 1898)
> SSLRecord { [Wed Nov 18 09:14:56 2009]
>    0: 16 03 00 07  6a                                     | ....j
>    type    =3D 22 (handshake)
>    version =3D { 3,0 }
>    length  =3D 1898 (0x76a)
>    handshake {
>    0: 02 00 00 46                                         | ...F
>       type =3D 2 (server_hello)
>       length =3D 70 (0x000046)
>          ServerHello {
>             server_version =3D {3, 0}
>             random =3D {...}
>    0: 4b 04 01 60  55 ce 82 33  ab d7 da 7f  bc 74 ed ca  | K..`U..3...
> .t..
>   10: 1e f3 95 26  21 fa db ce  83 94 24 0a  bc 4e 89 51  |
> ...&!.....$..N.Q
>             session ID =3D {
>                 length =3D 32
>                 contents =3D {...}
>    0: 67 66 50 ba  19 6d d9 38  7d 86 a9 e0  43 cb 57 0b  |
> gfP..m.8}...C.W.
>   10: 19 d5 a7 e0  90 99 e5 78  03 f6 55 26  c4 f1 bc 03  |
> .......x..U&....
>             }
>             cipher_suite =3D (0x0004) SSL3/RSA/RC4-128/MD5
>             compression method =3D 00
>          }
>    0: 0b 00 07 18                                         | ....
>       type =3D 11 (certificate)
>       length =3D 1816 (0x000718)
>          CertificateChain {
>             chainlength =3D 1813 (0x0715)
>             Certificate {
>                size =3D 890 (0x037a)
>                data =3D { saved in file 'cert.003' }
>             }
>             Certificate {
>                size =3D 917 (0x0395)
>                data =3D { saved in file 'cert.004' }
>             }
>          }
>    0: 0e 00 00 00                                         | ....
>       type =3D 14 (server_hello_done)
>       length =3D 0 (0x000000)
>    }
> }
> ]
> --> [
> (332 bytes of 260, with 67 left over)
> SSLRecord { [Wed Nov 18 09:14:56 2009]
>    0: 16 03 00 01  04                                     | .....
>    type    =3D 22 (handshake)
>    version =3D { 3,0 }
>    length  =3D 260 (0x104)
>    handshake {
>    0: 10 00 01 00                                         | ....
>       type =3D 16 (client_key_exchange)
>       length =3D 256 (0x000100)
>          ClientKeyExchange {
>             message =3D {...}
>          }
>    }
> }
> (332 bytes of 1, with 61 left over)
> SSLRecord { [Wed Nov 18 09:14:56 2009]
>    0: 14 03 00 00  01                                     | .....
>    type    =3D 20 (change_cipher_spec)
>    version =3D { 3,0 }
>    length  =3D 1 (0x1)
>    0: 01                                                  | .
> }
> (332 bytes of 56)
> SSLRecord { [Wed Nov 18 09:14:56 2009]
>    0: 16 03 00 00  38                                     | ....8
>    type    =3D 22 (handshake)
>    version =3D { 3,0 }
>    length  =3D 56 (0x38)
>             < encrypted >
> }
> ]
> ssltap: Error -5961: TCP connection reset by peer.: error on server-side
> socket.
> Connection 2 Complete [Wed Nov 18 09:14:56 2009]
>
>
>
>
> On Tue, Nov 17, 2009 at 7:21 PM, Chandrasekar Kannan wrote:
>
>>  On 11/17/2009 01:09 PM, John Dorovski wrote:
>>
>> It was not a typo. I did use the port number 9545.
>>
>>
>> Ok. one idea would be to run the utility "ssltap" as a proxy
>> and using your browser to connect to the "ssltap" port and
>> pasting the output here so folks can see what's happening
>> during the SSL handshake.
>> http://www.mozilla.org/projects/security/pki/nss/tools/ssltap.html
>>
>>
>> On a Fedora 10 system, its packaged with nss-tools rpm.
>>
>> Run ssltap like this...
>>
>> ssltap -sfxl CA_HOSTNAME:CA_PORT
>>
>> in your case, it will be
>>
>> ssltap -sfxl localhost:9545
>>
>> Then use a browser and connect to ssltap. ssltap
>> listens on port 1924. So on the browser type..
>>
>>  https://localhost.localdomain:1924
>>
>>
>> ssltap will capture the results of the ssl handshake.
>>
>> Copy and paste it here so we can tell what's happening
>> during that phase while you get the bad mac alert.
>>
>> Thanks,
>> --Chandra
>>
>>
>>
>>
>>
>>
>> John
>>
>> On Tue, Nov 17, 2009 at 3:51 PM, Adewumi, Julius-p99373 <
>> Julius.Adewumi(a)gdc4s.com> wrote:
>>
>>>
>>> Unless it's a typo on your part, the two port numbers are different...
>>> Could that be the problem?
>>> 8445  vs 9545
>>>
>>> From: Julius Adewumi
>>> @GDC4S.com
>>> Ph:480-441-6768
>>> Contract Corp:MTSI
>>>
>>>
>>> -----Original Message-----
>>> From: pki-users-bounces(a)redhat.com [mailto:pki-users-bounces(a)redhat=
.com]
>>> On Behalf Of Christina Fu
>>> Sent: Tuesday, November 17, 2009 12:56 PM
>>> To: pki-users(a)redhat.com
>>>  Cc: johndorovski(a)googlemail.com
>>> Subject: [Pki-users] (forwarded) Help needed on dogtag
>>>
>>> I might have messed up when managing pki-users and this did not come
>>> through.  Hence the forward.
>>> Christina
>>>
>>> Subject:
>>> Help needed on dogtag
>>> From:
>>> John Dorovski 
>>> Date:
>>> Tue, 17 Nov 2009 10:58:18 -0500
>>>
>>> To:
>>> pki-users(a)redhat.com
>>>
>>>
>>> Hi,
>>>
>>> I just installed a dogtag (1.2.0) instance on my Fedora 10 system.
>>> I used a SafeNet ProtectServer Gold HSM as keystore.
>>> The dogtag system installation and configuration were fine. No error was
>>> reported.
>>> All keys and certificates were generated inside the HSM.
>>>
>>> But when I tried to access the secure admin interface at
>>>     https://localhost:localdomain:9545
>>> I got error message:
>>>    Secure Connection Failed
>>>    An error occurred during a connection to localhost.localdomain:8445
>>>    SSL peer reports incorrect Message Authentication Code.
>>>    (Error code: ssl_error_bad_mac_alert)
>>>
>>> I checked the server certificate (viewed it with IE on a Windows box).
>>> It seems fine.
>>>
>>> Does any body know what is wrong and how can I fix it?
>>>
>>> Thanks,
>>>
>>> John
>>>
>>> _______________________________________________
>>> Pki-users mailing list
>>> Pki-users(a)redhat.com
>>> https://www.redhat.com/mailman/listinfo/pki-users
>>>
>>
>>
>> _______________________________________________
>> Pki-users mailing listPki-users(a)redhat.comhttps://www.redhat.com/mailm=
an/listinfo/pki-users
>>
>>
>>
>> _______________________________________________
>> Pki-users mailing list
>> Pki-users(a)redhat.com
>> https://www.redhat.com/mailman/listinfo/pki-users
>>
>>
>

--===============7972388234080039087==
Content-Type: text/html
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"

SGVyZSBhcmUgdGhloKAgdHdvIGNlcnRzIHNzbHRhcCBjYXB0dXJlZC48YnI+PGJyPjxicj48ZGl2
IGNsYXNzPSJnbWFpbF9xdW90ZSI+T24gV2VkLCBOb3YgMTgsIDIwMDkgYXQgOToyMCBBTSwgSm9o
biBEb3JvdnNraSA8c3BhbiBkaXI9Imx0ciI+Jmx0OzxhIGhyZWY9Im1haWx0bzpqb2huZG9yb3Zz
a2lAZ29vZ2xlbWFpbC5jb20iPmpvaG5kb3JvdnNraUBnb29nbGVtYWlsLmNvbTwvYT4mZ3Q7PC9z
cGFuPiB3cm90ZTo8YnI+CjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9ImJv
cmRlci1sZWZ0OiAxcHggc29saWQgcmdiKDIwNCwgMjA0LCAyMDQpOyBtYXJnaW46IDBwdCAwcHQg
MHB0IDAuOGV4OyBwYWRkaW5nLWxlZnQ6IDFleDsiPkhlcmUgaXMgbXkgc3NsdGFwIG91dHB1dDo8
YnI+PGJyPltyb290QHJkMSBsaW51eC1pMzg2XSMgc3NsdGFwIC1zZnhsoCBsb2NhbGhvc3QubG9j
YWxkb21haW46OTU0NTxicj4KJmx0O0hUTUwmZ3Q7Jmx0O0hFQUQmZ3Q7Jmx0O1RJVExFJmd0O1NT
TFRBUCBvdXRwdXQmbHQ7L1RJVExFJmd0OyZsdDsvSEVBRCZndDs8YnI+Jmx0O0JPRFkmZ3Q7Jmx0
O1BSRSZndDs8YnI+TG9va2luZyB1cCAmcXVvdDtsb2NhbGhvc3QubG9jYWxkb21haW4mcXVvdDsu
Li48YnI+ClByb3h5IHNvY2tldCByZWFkeSBhbmQgbGlzdGVuaW5nPGJyPiZsdDtwJmd0OyZsdDtI
UiZndDsmbHQ7SDImZ3Q7Q29ubmVjdGlvbiAjMSBbV2VkIE5vdiAxOCAwOToxNDo1NiAyMDA5XTxi
cj4mbHQ7L0gyJmd0O0Nvbm5lY3RlZCB0byBsb2NhbGhvc3QubG9jYWxkb21haW46OTU0NTxicj4t
LSZndDsgWzxicj4mbHQ7Zm9udCBjb2xvcj1ibHVlJmd0OygxMjAgYnl0ZXMgb2YgMTE1KTxicj4K
U1NMUmVjb3JkIHsgW1dlZCBOb3YgMTggMDk6MTQ6NTYgMjAwOV08YnI+CqCgIDA6IDE2IDAzIDAx
IDAwoCA3M6CgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoCB8IC4uLi5zPGJyPqCg
IHR5cGWgoKAgPSAyMiAoaGFuZHNoYWtlKTxicj6goCB2ZXJzaW9uID0geyAzLDEgfTxicj6goCBs
ZW5ndGigID0gMTE1ICgweDczKTxicj6goCBoYW5kc2hha2Ugezxicj6goCAwOiAwMSAwMCAwMCA2
ZqCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKAgfCAuLi5vPGJyPgoKoKCg
oKAgdHlwZSA9IDEgKGNsaWVudF9oZWxsbyk8YnI+oKCgoKAgbGVuZ3RoID0gMTExICgweDAwMDA2
Zik8YnI+oKCgoKCgoKAgQ2xpZW50SGVsbG9WMyB7PGJyPqCgoKCgoKCgoKCgIGNsaWVudF92ZXJz
aW9uID0gezMsIDF9PGJyPqCgoKCgoKCgoKCgIHJhbmRvbSA9IHsuLi59PGJyPqCgIDA6IDRiIDA0
IDAxIDYwoCAzZSBkZCA4NiBmMqAgNmMgMjYgY2IgMjmgIGIzIGE0IGViIDI2oCB8IEsuLmAmYW1w
O2d0Oy4uLmwmYW1wO2FtcDsuKS4uLiZhbXA7YW1wOzxicj4KCqAgMTA6IGMwIDE3IGYxIDhloCAy
NCAwYSA3NSA3OaAgMDMgOTEgNzggNDCgIDdiIDU4IDVlIDdioCB8IC4uLi4kLnV5Li54QHtYXns8
YnI+oKCgoKCgoKCgoKAgc2Vzc2lvbiBJRCA9IHs8YnI+oKCgoKCgoKCgoKCgoKCgIGxlbmd0aCA9
IDA8YnI+oKCgoKCgoKCgoKCgoKCgIGNvbnRlbnRzID0gey4uLn08YnI+oKCgoKCgoKCgoKAgfTxi
cj6goKCgoKCgoKCgoCBjaXBoZXJfc3VpdGVzWzE4XSA9IHsgPGJyPgoKoKCgoKCgoKCgoKCgoKCg
ICgweDAwODgpIFRMUy9ESEUtUlNBL0NBTUVMTElBMjU2LUNCQy9TSEE8YnI+oKCgoKCgoKCgoKCg
oKCgICgweDAwODcpIFRMUy9ESEUtRFNTL0NBTUVMTElBMjU2LUNCQy9TSEE8YnI+oKCgoKCgoKCg
oKCgoKCgICgweDAwMzkpIFRMUy9ESEUtUlNBL0FFUzI1Ni1DQkMvU0hBPGJyPqCgoKCgoKCgoKCg
oKCgoCAoMHgwMDM4KSBUTFMvREhFLURTUy9BRVMyNTYtQ0JDL1NIQTxicj4KCqCgoKCgoKCgoKCg
oKCgoCAoMHgwMDg0KSBUTFMvUlNBL0NBTUVMTElBMjU2LUNCQy9TSEE8YnI+oKCgoKCgoKCgoKCg
oKCgICgweDAwMzUpIFRMUy9SU0EvQUVTMjU2LUNCQy9TSEE8YnI+oKCgoKCgoKCgoKCgoKCgICgw
eDAwNDUpIFRMUy9ESEUtUlNBL0NBTUVMTElBMTI4LUNCQy9TSEE8YnI+oKCgoKCgoKCgoKCgoKCg
ICgweDAwNDQpIFRMUy9ESEUtRFNTL0NBTUVMTElBMTI4LUNCQy9TSEE8YnI+CgqgoKCgoKCgoKCg
oKCgoKAgKDB4MDAzMykgVExTL0RIRS1SU0EvQUVTMTI4LUNCQy9TSEE8YnI+oKCgoKCgoKCgoKCg
oKCgICgweDAwMzIpIFRMUy9ESEUtRFNTL0FFUzEyOC1DQkMvU0hBPGJyPqCgoKCgoKCgoKCgoKCg
oCAoMHgwMDQxKSBUTFMvUlNBL0NBTUVMTElBMTI4LUNCQy9TSEE8YnI+oKCgoKCgoKCgoKCgoKCg
ICgweDAwMDQpIFNTTDMvUlNBL1JDNC0xMjgvTUQ1PGJyPqCgoKCgoKCgoKCgoKCgoCAoMHgwMDA1
KSBTU0wzL1JTQS9SQzQtMTI4L1NIQTxicj4KCqCgoKCgoKCgoKCgoKCgoCAoMHgwMDJmKSBUTFMv
UlNBL0FFUzEyOC1DQkMvU0hBPGJyPqCgoKCgoKCgoKCgoKCgoCAoMHgwMDE2KSBTU0wzL0RIRS1S
U0EvM0RFUzE5MkVERS1DQkMvU0hBPGJyPqCgoKCgoKCgoKCgoKCgoCAoMHgwMDEzKSBTU0wzL0RI
RS1EU1MvREVTMTkyRURFM0NCQy9TSEE8YnI+oKCgoKCgoKCgoKCgoKCgICgweGZlZmYpIFNTTDMv
UlNBLUZJUFMvM0RFU0VERS1DQkMvU0hBPGJyPgoKoKCgoKCgoKCgoKCgoKCgICgweDAwMGEpIFNT
TDMvUlNBLzNERVMxOTJFREUtQ0JDL1NIQTxicj6goKCgoKCgoKCgoCB9PGJyPqCgoKCgoKCgoKCg
IGNvbXByZXNzaW9uWzFdID0geyAwMCB9PGJyPqCgoKCgoKCgoKCgIGV4dGVuc2lvbnNbMzRdID0g
ezxicj6goKCgoKCgoKCgoKCgIGV4dGVuc2lvbiB0eXBlIHNlcnZlcl9uYW1lLCBsZW5ndGggWzI2
XSA9IHs8YnI+oKAgMDogMDAgMTggMDAgMDCgIDE1IDZjIDZmIDYzoCA2MSA2YyA2OCA2ZqAgNzMg
NzQgMmUgNmOgIHwgLi4uLi5sb2NhbGhvc3QubDxicj4KCqAgMTA6IDZmIDYzIDYxIDZjoCA2NCA2
ZiA2ZCA2MaAgNjkgNmWgoKCgoKCgoKCgoKCgoKCgoKCgoCB8IG9jYWxkb21haW48YnI+oKCgoKCg
oKCgoKCgoCB9PGJyPqCgoKCgoKCgoKCgoKAgZXh0ZW5zaW9uIHR5cGUgc2Vzc2lvbl90aWNrZXQs
IGxlbmd0aCBbMF08YnI+oKCgoKCgoKCgoKAgfTxicj6goKCgoKCgoCB9PGJyPqCgIH08YnI+fTxi
cj4mbHQ7L2ZvbnQmZ3Q7XTxicj4mbHQ7LS0gWzxicj4KCiZsdDtmb250IGNvbG9yPXJlZCZndDso
MTkwMyBieXRlcyBvZiAxODk4KTxicj5TU0xSZWNvcmQgeyBbV2VkIE5vdiAxOCAwOToxNDo1NiAy
MDA5XTxicj6goCAwOiAxNiAwMyAwMSAwN6AgNmGgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCg
oKCgoKCgoKAgfCAuLi4uajxicj6goCB0eXBloKCgID0gMjIgKGhhbmRzaGFrZSk8YnI+oKAgdmVy
c2lvbiA9IHsgMywxIH08YnI+oKAgbGVuZ3RooCA9IDE4OTggKDB4NzZhKTxicj4KCqCgIGhhbmRz
aGFrZSB7PGJyPqCgIDA6IDAyIDAwIDAwIDQ2oKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCg
oKCgoKCgoKCgoCB8IC4uLkY8YnI+oKCgoKAgdHlwZSA9IDIgKHNlcnZlcl9oZWxsbyk8YnI+oKCg
oKAgbGVuZ3RoID0gNzAgKDB4MDAwMDQ2KTxicj6goKCgoKCgoCBTZXJ2ZXJIZWxsbyB7PGJyPqCg
oKCgoKCgoKCgIHNlcnZlcl92ZXJzaW9uID0gezMsIDF9PGJyPqCgoKCgoKCgoKCgIHJhbmRvbSA9
IHsuLi59PGJyPgoKoKAgMDogNGIgMDQgMDEgNjCgIGQxIDg2IDA5IDY5oCAwMSA4ZCBjMiA1ZaAg
MWEgOWMgOTkgMTagIHwgSy4uYC4uLmkuLi5eLi4uLjxicj6gIDEwOiBkZSAwZSBiZCAyN6AgYjYg
YzUgYmUgNTegIDIzIGYxIDFlIDAzoCA2OSA0MCA1NSA5ZKAgfCAuLi4mIzM5Oy4uLlcjLi4uaUBV
Ljxicj6goKCgoKCgoKCgoCBzZXNzaW9uIElEID0gezxicj6goKCgoKCgoKCgoKCgoKAgbGVuZ3Ro
ID0gMzI8YnI+CgqgoKCgoKCgoKCgoKCgoKAgY29udGVudHMgPSB7Li4ufTxicj6goCAwOiA2NyA2
NiBjNiA3ZqAgZjcgYWMgZDYgOTigIDQ1IGYyIDZkIDlmoCBjNiA4NCBlMSBkZqAgfCBnZi4gLi4u
LkUubS4uLi4uPGJyPqAgMTA6IGZmIGZmIGMwIDg3oCBkOCBlOSA5NyBmOaAgZjYgMzcgOGIgNmWg
IDA5IGQ5IDJiIDI1oCB8IC4uLi4uLi4uLjcubi4uKyU8YnI+oKCgoKCgoKCgoKAgfTxicj6goKCg
oKCgoKCgoCBjaXBoZXJfc3VpdGUgPSAoMHgwMDA0KSBTU0wzL1JTQS9SQzQtMTI4L01ENTxicj4K
CqCgoKCgoKCgoKCgIGNvbXByZXNzaW9uIG1ldGhvZCA9IDAwPGJyPqCgoKCgoKCgIH08YnI+oKAg
MDogMGIgMDAgMDcgMTigoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgIHwg
Li4uLjxicj6goKCgoCB0eXBlID0gMTEgKGNlcnRpZmljYXRlKTxicj6goKCgoCBsZW5ndGggPSAx
ODE2ICgweDAwMDcxOCk8YnI+oKCgoKCgoKAgQ2VydGlmaWNhdGVDaGFpbiB7PGJyPqCgoKCgoKCg
oKCgIGNoYWlubGVuZ3RoID0gMTgxMyAoMHgwNzE1KTxicj4KCqCgoKCgoKCgoKCgIENlcnRpZmlj
YXRlIHs8YnI+oKCgoKCgoKCgoKCgoKAgc2l6ZSA9IDg5MCAoMHgwMzdhKTxicj6goKCgoKCgoKCg
oKCgoCBkYXRhID0geyBzYXZlZCBpbiBmaWxlICYjMzk7Y2VydC4wMDEmIzM5OyB9PGJyPqCgoKCg
oKCgoKCgIH08YnI+oKCgoKCgoKCgoKAgQ2VydGlmaWNhdGUgezxicj6goKCgoKCgoKCgoKCgoCBz
aXplID0gOTE3ICgweDAzOTUpPGJyPqCgoKCgoKCgoKCgoKCgIGRhdGEgPSB7IHNhdmVkIGluIGZp
bGUgJiMzOTtjZXJ0LjAwMiYjMzk7IH08YnI+CgqgoKCgoKCgoKCgoCB9PGJyPqCgoKCgoKCgIH08
YnI+oKAgMDogMGUgMDAgMDAgMDCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCg
oKCgIHwgLi4uLjxicj6goKCgoCB0eXBlID0gMTQgKHNlcnZlcl9oZWxsb19kb25lKTxicj6goKCg
oCBsZW5ndGggPSAwICgweDAwMDAwMCk8YnI+oKAgfTxicj59PGJyPiZsdDsvZm9udCZndDtdPGJy
Pi0tJmd0OyBbPGJyPiZsdDtmb250IGNvbG9yPWJsdWUmZ3Q7KDMxMCBieXRlcyBvZiAyNjIsIHdp
dGggNDMgbGVmdCBvdmVyKTxicj4KClNTTFJlY29yZCB7IFtXZWQgTm92IDE4IDA5OjE0OjU2IDIw
MDldPGJyPqCgIDA6IDE2IDAzIDAxIDAxoCAwNqCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCg
oKCgoKCgoCB8IC4uLi4uPGJyPqCgIHR5cGWgoKAgPSAyMiAoaGFuZHNoYWtlKTxicj6goCB2ZXJz
aW9uID0geyAzLDEgfTxicj6goCBsZW5ndGigID0gMjYyICgweDEwNik8YnI+oKAgaGFuZHNoYWtl
IHs8YnI+oKAgMDogMTAgMDAgMDEgMDKgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCg
oKCgoKCgIHwgLi4uLjxicj4KCqCgoKCgIHR5cGUgPSAxNiAoY2xpZW50X2tleV9leGNoYW5nZSk8
YnI+oKCgoKAgbGVuZ3RoID0gMjU4ICgweDAwMDEwMik8YnI+oKCgoKCgoKAgQ2xpZW50S2V5RXhj
aGFuZ2Ugezxicj6goKCgoKCgoKCgoCBtZXNzYWdlID0gey4uLn08YnI+oKCgoKCgoKAgfTxicj6g
oCB9PGJyPn08YnI+KDMxMCBieXRlcyBvZiAxLCB3aXRoIDM3IGxlZnQgb3Zlcik8YnI+U1NMUmVj
b3JkIHsgW1dlZCBOb3YgMTggMDk6MTQ6NTYgMjAwOV08YnI+CgqgoCAwOiAxNCAwMyAwMSAwMKAg
MDGgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKAgfCAuLi4uLjxicj6goCB0eXBl
oKCgID0gMjAgKGNoYW5nZV9jaXBoZXJfc3BlYyk8YnI+oKAgdmVyc2lvbiA9IHsgMywxIH08YnI+
oKAgbGVuZ3RooCA9IDEgKDB4MSk8YnI+oKAgMDogMDGgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCg
oKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgIHwgLjxicj4KCn08YnI+KDMxMCBieXRlcyBvZiAzMik8
YnI+U1NMUmVjb3JkIHsgW1dlZCBOb3YgMTggMDk6MTQ6NTYgMjAwOV08YnI+oKAgMDogMTYgMDMg
MDEgMDCgIDIwoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgIHwgLi4uLiA8YnI+
oKAgdHlwZaCgoCA9IDIyIChoYW5kc2hha2UpPGJyPqCgIHZlcnNpb24gPSB7IDMsMSB9PGJyPqCg
IGxlbmd0aKAgPSAzMiAoMHgyMCk8YnI+oKCgoKCgoKCgoKAgJmx0OyBlbmNyeXB0ZWQgJmd0Ozxi
cj4KCn08YnI+Jmx0Oy9mb250Jmd0O108YnI+c3NsdGFwOiBFcnJvciAtNTk2MTogVENQIGNvbm5l
Y3Rpb24gcmVzZXQgYnkgcGVlci46IGVycm9yIG9uIHNlcnZlci1zaWRlIHNvY2tldC48YnI+Q29u
bmVjdGlvbiAxIENvbXBsZXRlIFtXZWQgTm92IDE4IDA5OjE0OjU2IDIwMDldPGJyPiZsdDtwJmd0
OyZsdDtIUiZndDsmbHQ7SDImZ3Q7Q29ubmVjdGlvbiAjMiBbV2VkIE5vdiAxOCAwOToxNDo1NiAy
MDA5XTxicj4KCiZsdDsvSDImZ3Q7Q29ubmVjdGVkIHRvIGxvY2FsaG9zdC5sb2NhbGRvbWFpbjo5
NTQ1PGJyPi0tJmd0OyBbPGJyPiZsdDtmb250IGNvbG9yPWJsdWUmZ3Q7cmVjb3JkTGVuID0gODEg
Ynl0ZXM8YnI+KDgxIGJ5dGVzIG9mIDgxKTxicj6gW1dlZCBOb3YgMTggMDk6MTQ6NTYgMjAwOV0g
W3NzbDJdoCBDbGllbnRIZWxsb1YyIHs8YnI+oKCgoKCgoKCgoCB2ZXJzaW9uID0gezB4MDMsIDB4
MDB9PGJyPgoKoKCgoKCgoKCgoCBjaXBoZXItc3BlY3MtbGVuZ3RoID0gNTQgKDB4MzYpPGJyPqCg
oKCgoKCgoKAgc2lkLWxlbmd0aCA9IDAgKDB4MDApPGJyPqCgoKCgoKCgoKAgY2hhbGxlbmdlLWxl
bmd0aCA9IDE2ICgweDEwKTxicj6goKCgoKCgoKCgIGNpcGhlci1zdWl0ZXMgPSB7IDxicj6goKCg
oKCgoKCgoKCgoKAgKDB4MDAwMDg4KSBUTFMvREhFLVJTQS9DQU1FTExJQTI1Ni1DQkMvU0hBPGJy
PgqgoKCgoKCgoKCgoKCgoKAgKDB4MDAwMDg3KSBUTFMvREhFLURTUy9DQU1FTExJQTI1Ni1DQkMv
U0hBPGJyPgqgoKCgoKCgoKCgoKCgoKAgKDB4MDAwMDM5KSBUTFMvREhFLVJTQS9BRVMyNTYtQ0JD
L1NIQTxicj6goKCgoKCgoKCgoKCgoKAgKDB4MDAwMDM4KSBUTFMvREhFLURTUy9BRVMyNTYtQ0JD
L1NIQTxicj6goKCgoKCgoKCgoKCgoKAgKDB4MDAwMDg0KSBUTFMvUlNBL0NBTUVMTElBMjU2LUNC
Qy9TSEE8YnI+oKCgoKCgoKCgoKCgoKCgICgweDAwMDAzNSkgVExTL1JTQS9BRVMyNTYtQ0JDL1NI
QTxicj4KCqCgoKCgoKCgoKCgoKCgoCAoMHgwMDAwNDUpIFRMUy9ESEUtUlNBL0NBTUVMTElBMTI4
LUNCQy9TSEE8YnI+oKCgoKCgoKCgoKCgoKCgICgweDAwMDA0NCkgVExTL0RIRS1EU1MvQ0FNRUxM
SUExMjgtQ0JDL1NIQTxicj6goKCgoKCgoKCgoKCgoKAgKDB4MDAwMDMzKSBUTFMvREhFLVJTQS9B
RVMxMjgtQ0JDL1NIQTxicj6goKCgoKCgoKCgoKCgoKAgKDB4MDAwMDMyKSBUTFMvREhFLURTUy9B
RVMxMjgtQ0JDL1NIQTxicj4KCqCgoKCgoKCgoKCgoKCgoCAoMHgwMDAwNDEpIFRMUy9SU0EvQ0FN
RUxMSUExMjgtQ0JDL1NIQTxicj6goKCgoKCgoKCgoKCgoKAgKDB4MDAwMDA0KSBTU0wzL1JTQS9S
QzQtMTI4L01ENTxicj6goKCgoKCgoKCgoKCgoKAgKDB4MDAwMDA1KSBTU0wzL1JTQS9SQzQtMTI4
L1NIQTxicj6goKCgoKCgoKCgoKCgoKAgKDB4MDAwMDJmKSBUTFMvUlNBL0FFUzEyOC1DQkMvU0hB
PGJyPqCgoKCgoKCgoKCgoKCgoCAoMHgwMDAwMTYpIFNTTDMvREhFLVJTQS8zREVTMTkyRURFLUNC
Qy9TSEE8YnI+CgqgoKCgoKCgoKCgoKCgoKAgKDB4MDAwMDEzKSBTU0wzL0RIRS1EU1MvREVTMTky
RURFM0NCQy9TSEE8YnI+oKCgoKCgoKCgoKCgoKCgICgweDAwZmVmZikgU1NMMy9SU0EtRklQUy8z
REVTRURFLUNCQy9TSEE8YnI+oKCgoKCgoKCgoKCgoKCgICgweDAwMDAwYSkgU1NMMy9SU0EvM0RF
UzE5MkVERS1DQkMvU0hBPGJyPqCgoKCgoKCgoKCgoKCgoCB9PGJyPqCgoKCgoKCgoKAgc2Vzc2lv
bi1pZCA9IHsgfTxicj4KCqCgoKCgoKCgoKAgY2hhbGxlbmdlID0geyAweGRlMWIgMHhhZWEyIDB4
MjYyYSAweGFhZTMgMHg1MTM1IDB4NGY2YSAweDU3NDIgMHhmNzE2IH08YnI+fTxicj4mbHQ7L2Zv
bnQmZ3Q7XTxicj4mbHQ7LS0gWzxicj4mbHQ7Zm9udCBjb2xvcj1yZWQmZ3Q7KDE5MDMgYnl0ZXMg
b2YgMTg5OCk8YnI+U1NMUmVjb3JkIHsgW1dlZCBOb3YgMTggMDk6MTQ6NTYgMjAwOV08YnI+oKAg
MDogMTYgMDMgMDAgMDegIDZhoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgIHwg
Li4uLmo8YnI+CgqgoCB0eXBloKCgID0gMjIgKGhhbmRzaGFrZSk8YnI+oKAgdmVyc2lvbiA9IHsg
MywwIH08YnI+oKAgbGVuZ3RooCA9IDE4OTggKDB4NzZhKTxicj6goCBoYW5kc2hha2Ugezxicj6g
oCAwOiAwMiAwMCAwMCA0NqCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKAg
fCAuLi5GPGJyPqCgoKCgIHR5cGUgPSAyIChzZXJ2ZXJfaGVsbG8pPGJyPqCgoKCgIGxlbmd0aCA9
IDcwICgweDAwMDA0Nik8YnI+CgqgoKCgoKCgoCBTZXJ2ZXJIZWxsbyB7PGJyPqCgoKCgoKCgoKCg
IHNlcnZlcl92ZXJzaW9uID0gezMsIDB9PGJyPqCgoKCgoKCgoKCgIHJhbmRvbSA9IHsuLi59PGJy
PqCgIDA6IDRiIDA0IDAxIDYwoCA1NSBjZSA4MiAzM6AgYWIgZDcgZGEgN2agIGJjIDc0IGVkIGNh
oCB8IEsuLmBVLi4zLi4uIC50Li48YnI+oCAxMDogMWUgZjMgOTUgMjagIDIxIGZhIGRiIGNloCA4
MyA5NCAyNCAwYaAgYmMgNGUgODkgNTGgIHwgLi4uJmFtcDthbXA7IS4uLi4uJC4uTi5RPGJyPgoK
oKCgoKCgoKCgoKAgc2Vzc2lvbiBJRCA9IHs8YnI+oKCgoKCgoKCgoKCgoKCgIGxlbmd0aCA9IDMy
PGJyPqCgoKCgoKCgoKCgoKCgoCBjb250ZW50cyA9IHsuLi59PGJyPqCgIDA6IDY3IDY2IDUwIGJh
oCAxOSA2ZCBkOSAzOKAgN2QgODYgYTkgZTCgIDQzIGNiIDU3IDBioCB8IGdmUC4ubS44fS4uLkMu
Vy48YnI+oCAxMDogMTkgZDUgYTcgZTCgIDkwIDk5IGU1IDc4oCAwMyBmNiA1NSAyNqAgYzQgZjEg
YmMgMDOgIHwgLi4uLi4uLnguLlUmYW1wO2FtcDsuLi4uPGJyPgoKoKCgoKCgoKCgoKAgfTxicj6g
oKCgoKCgoKCgoCBjaXBoZXJfc3VpdGUgPSAoMHgwMDA0KSBTU0wzL1JTQS9SQzQtMTI4L01ENTxi
cj6goKCgoKCgoKCgoCBjb21wcmVzc2lvbiBtZXRob2QgPSAwMDxicj6goKCgoKCgoCB9PGJyPqCg
IDA6IDBiIDAwIDA3IDE4oKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoCB8
IC4uLi48YnI+oKCgoKAgdHlwZSA9IDExIChjZXJ0aWZpY2F0ZSk8YnI+CgqgoKCgoCBsZW5ndGgg
PSAxODE2ICgweDAwMDcxOCk8YnI+oKCgoKCgoKAgQ2VydGlmaWNhdGVDaGFpbiB7PGJyPqCgoKCg
oKCgoKCgIGNoYWlubGVuZ3RoID0gMTgxMyAoMHgwNzE1KTxicj6goKCgoKCgoKCgoCBDZXJ0aWZp
Y2F0ZSB7PGJyPqCgoKCgoKCgoKCgoKCgIHNpemUgPSA4OTAgKDB4MDM3YSk8YnI+oKCgoKCgoKCg
oKCgoKAgZGF0YSA9IHsgc2F2ZWQgaW4gZmlsZSAmIzM5O2NlcnQuMDAzJiMzOTsgfTxicj4KCqCg
oKCgoKCgoKCgIH08YnI+oKCgoKCgoKCgoKAgQ2VydGlmaWNhdGUgezxicj6goKCgoKCgoKCgoKCg
oCBzaXplID0gOTE3ICgweDAzOTUpPGJyPqCgoKCgoKCgoKCgoKCgIGRhdGEgPSB7IHNhdmVkIGlu
IGZpbGUgJiMzOTtjZXJ0LjAwNCYjMzk7IH08YnI+oKCgoKCgoKCgoKAgfTxicj6goKCgoKCgoCB9
PGJyPqCgIDA6IDBlIDAwIDAwIDAwoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCg
oKCgoCB8IC4uLi48YnI+CgqgoKCgoCB0eXBlID0gMTQgKHNlcnZlcl9oZWxsb19kb25lKTxicj6g
oKCgoCBsZW5ndGggPSAwICgweDAwMDAwMCk8YnI+oKAgfTxicj59PGJyPiZsdDsvZm9udCZndDtd
PGJyPi0tJmd0OyBbPGJyPiZsdDtmb250IGNvbG9yPWJsdWUmZ3Q7KDMzMiBieXRlcyBvZiAyNjAs
IHdpdGggNjcgbGVmdCBvdmVyKTxicj5TU0xSZWNvcmQgeyBbV2VkIE5vdiAxOCAwOToxNDo1NiAy
MDA5XTxicj6goCAwOiAxNiAwMyAwMCAwMaAgMDSgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCg
oKCgoKCgoKAgfCAuLi4uLjxicj4KCqCgIHR5cGWgoKAgPSAyMiAoaGFuZHNoYWtlKTxicj6goCB2
ZXJzaW9uID0geyAzLDAgfTxicj6goCBsZW5ndGigID0gMjYwICgweDEwNCk8YnI+oKAgaGFuZHNo
YWtlIHs8YnI+oKAgMDogMTAgMDAgMDEgMDCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCg
oKCgoKCgoKCgIHwgLi4uLjxicj6goKCgoCB0eXBlID0gMTYgKGNsaWVudF9rZXlfZXhjaGFuZ2Up
PGJyPqCgoKCgIGxlbmd0aCA9IDI1NiAoMHgwMDAxMDApPGJyPgoKoKCgoKCgoKAgQ2xpZW50S2V5
RXhjaGFuZ2Ugezxicj6goKCgoKCgoKCgoCBtZXNzYWdlID0gey4uLn08YnI+oKCgoKCgoKAgfTxi
cj6goCB9PGJyPn08YnI+KDMzMiBieXRlcyBvZiAxLCB3aXRoIDYxIGxlZnQgb3Zlcik8YnI+U1NM
UmVjb3JkIHsgW1dlZCBOb3YgMTggMDk6MTQ6NTYgMjAwOV08YnI+oKAgMDogMTQgMDMgMDAgMDCg
IDAxoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgIHwgLi4uLi48YnI+CgqgoCB0
eXBloKCgID0gMjAgKGNoYW5nZV9jaXBoZXJfc3BlYyk8YnI+oKAgdmVyc2lvbiA9IHsgMywwIH08
YnI+oKAgbGVuZ3RooCA9IDEgKDB4MSk8YnI+oKAgMDogMDGgoKCgoKCgoKCgoKCgoKCgoKCgoKCg
oKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgIHwgLjxicj59PGJyPigzMzIgYnl0ZXMgb2YgNTYp
PGJyPlNTTFJlY29yZCB7IFtXZWQgTm92IDE4IDA5OjE0OjU2IDIwMDldPGJyPgoKoKAgMDogMTYg
MDMgMDAgMDCgIDM4oKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgoKCgIHwgLi4uLjg8
YnI+oKAgdHlwZaCgoCA9IDIyIChoYW5kc2hha2UpPGJyPqCgIHZlcnNpb24gPSB7IDMsMCB9PGJy
PqCgIGxlbmd0aKAgPSA1NiAoMHgzOCk8YnI+oKCgoKCgoKCgoKAgJmx0OyBlbmNyeXB0ZWQgJmd0
Ozxicj59PGJyPiZsdDsvZm9udCZndDtdPGJyPnNzbHRhcDogRXJyb3IgLTU5NjE6IFRDUCBjb25u
ZWN0aW9uIHJlc2V0IGJ5IHBlZXIuOiBlcnJvciBvbiBzZXJ2ZXItc2lkZSBzb2NrZXQuPGJyPgoK
Q29ubmVjdGlvbiAyIENvbXBsZXRlIFtXZWQgTm92IDE4IDA5OjE0OjU2IDIwMDldPGRpdj48ZGl2
PjwvZGl2PjxkaXYgY2xhc3M9Img1Ij48YnI+PGJyPjxicj48YnI+PGRpdiBjbGFzcz0iZ21haWxf
cXVvdGUiPk9uIFR1ZSwgTm92IDE3LCAyMDA5IGF0IDc6MjEgUE0sIENoYW5kcmFzZWthciBLYW5u
YW4gPHNwYW4gZGlyPSJsdHIiPiZsdDs8YSBocmVmPSJtYWlsdG86Y2thbm5hbkByZWRoYXQuY29t
IiB0YXJnZXQ9Il9ibGFuayI+Y2thbm5hbkByZWRoYXQuY29tPC9hPiZndDs8L3NwYW4+IHdyb3Rl
Ojxicj4KCjxibG9ja3F1b3RlIGNsYXNzPSJnbWFpbF9xdW90ZSIgc3R5bGU9ImJvcmRlci1sZWZ0
OiAxcHggc29saWQgcmdiKDIwNCwgMjA0LCAyMDQpOyBtYXJnaW46IDBwdCAwcHQgMHB0IDAuOGV4
OyBwYWRkaW5nLWxlZnQ6IDFleDsiPgoKCiAgCgo8ZGl2IGJnY29sb3I9IiNmZmZmZmYiIHRleHQ9
IiMwMDAwMDAiPjxkaXY+Ck9uIDExLzE3LzIwMDkgMDE6MDkgUE0sIEpvaG4gRG9yb3Zza2kgd3Jv
dGU6CjxibG9ja3F1b3RlIHR5cGU9ImNpdGUiPkl0IHdhcyBub3QgYSB0eXBvLiBJIGRpZCB1c2Ug
dGhlIHBvcnQgbnVtYmVyIDk1NDUuPGJyPgo8L2Jsb2NrcXVvdGU+Cjxicj48L2Rpdj4KT2suIG9u
ZSBpZGVhIHdvdWxkIGJlIHRvIHJ1biB0aGUgdXRpbGl0eSAmcXVvdDtzc2x0YXAmcXVvdDsgYXMg
YSBwcm94eTxicj4KYW5kIHVzaW5nIHlvdXIgYnJvd3NlciB0byBjb25uZWN0IHRvIHRoZSAmcXVv
dDtzc2x0YXAmcXVvdDsgcG9ydCBhbmQ8YnI+CnBhc3RpbmcgdGhlIG91dHB1dCBoZXJlIHNvIGZv
bGtzIGNhbiBzZWUgd2hhdCYjMzk7cyBoYXBwZW5pbmc8YnI+CmR1cmluZyB0aGUgU1NMIGhhbmRz
aGFrZS48YnI+CjxhIGhyZWY9Imh0dHA6Ly93d3cubW96aWxsYS5vcmcvcHJvamVjdHMvc2VjdXJp
dHkvcGtpL25zcy90b29scy9zc2x0YXAuaHRtbCIgdGFyZ2V0PSJfYmxhbmsiPmh0dHA6Ly93d3cu
bW96aWxsYS5vcmcvcHJvamVjdHMvc2VjdXJpdHkvcGtpL25zcy90b29scy9zc2x0YXAuaHRtbDwv
YT48YnI+Cjxicj4KPGJyPgpPbiBhIEZlZG9yYSAxMCBzeXN0ZW0sIGl0cyBwYWNrYWdlZCB3aXRo
IG5zcy10b29scyBycG0uPGJyPgo8YnI+ClJ1biBzc2x0YXAgbGlrZSB0aGlzLi4uPGJyPgo8YnI+
CnNzbHRhcCAtc2Z4bCBDQV9IT1NUTkFNRTpDQV9QT1JUPGJyPgo8YnI+CmluIHlvdXIgY2FzZSwg
aXQgd2lsbCBiZSA8YnI+Cjxicj4Kc3NsdGFwIC1zZnhsIGxvY2FsaG9zdDo5NTQ1PGJyPgo8YnI+
ClRoZW4gdXNlIGEgYnJvd3NlciBhbmQgY29ubmVjdCB0byBzc2x0YXAuIHNzbHRhcDxicj4KbGlz
dGVucyBvbiBwb3J0IDE5MjQuIFNvIG9uIHRoZSBicm93c2VyIHR5cGUuLjxicj4KPGJyPgqgPGEg
aHJlZj0iaHR0cHM6Ly9sb2NhbGhvc3QubG9jYWxkb21haW46MTkyNCIgdGFyZ2V0PSJfYmxhbmsi
Pmh0dHBzOi8vbG9jYWxob3N0LmxvY2FsZG9tYWluOjE5MjQ8L2E+PGJyPgo8YnI+Cjxicj4Kc3Ns
dGFwIHdpbGwgY2FwdHVyZSB0aGUgcmVzdWx0cyBvZiB0aGUgc3NsIGhhbmRzaGFrZS4gPGJyPgo8
YnI+CkNvcHkgYW5kIHBhc3RlIGl0IGhlcmUgc28gd2UgY2FuIHRlbGwgd2hhdCYjMzk7cyBoYXBw
ZW5pbmc8YnI+CmR1cmluZyB0aGF0IHBoYXNlIHdoaWxlIHlvdSBnZXQgdGhlIGJhZCBtYWMgYWxl
cnQuPGJyPgo8YnI+ClRoYW5rcyw8YnI+Ci0tQ2hhbmRyYTxkaXY+PGRpdj48L2Rpdj48ZGl2Pjxi
cj4KPGJyPgo8YnI+Cjxicj4KPGJsb2NrcXVvdGUgdHlwZT0iY2l0ZSI+PGJyPgogIDxicj4KSm9o
bjxicj4KICA8YnI+CiAgPGRpdiBjbGFzcz0iZ21haWxfcXVvdGUiPk9uIFR1ZSwgTm92IDE3LCAy
MDA5IGF0IDM6NTEgUE0sIEFkZXd1bWksCkp1bGl1cy1wOTkzNzMgPHNwYW4gZGlyPSJsdHIiPiZs
dDs8YSBocmVmPSJtYWlsdG86SnVsaXVzLkFkZXd1bWlAZ2RjNHMuY29tIiB0YXJnZXQ9Il9ibGFu
ayI+SnVsaXVzLkFkZXd1bWlAZ2RjNHMuY29tPC9hPiZndDs8L3NwYW4+Cndyb3RlOjxicj4KICA8
YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0eWxlPSJib3JkZXItbGVmdDogMXB4IHNv
bGlkIHJnYigyMDQsIDIwNCwgMjA0KTsgbWFyZ2luOiAwcHQgMHB0IDBwdCAwLjhleDsgcGFkZGlu
Zy1sZWZ0OiAxZXg7Ij48YnI+ClVubGVzcyBpdCYjMzk7cyBhIHR5cG8gb24geW91ciBwYXJ0LCB0
aGUgdHdvIHBvcnQgbnVtYmVycyBhcmUgZGlmZmVyZW50Li4uPGJyPgpDb3VsZCB0aGF0IGJlIHRo
ZSBwcm9ibGVtPzxicj4KODQ0NSCgdnMgOTU0NTxicj4KICAgIDxicj4KRnJvbTogSnVsaXVzIEFk
ZXd1bWk8YnI+CkBHREM0Uy5jb208YnI+ClBoOjQ4MC00NDEtNjc2ODxicj4KQ29udHJhY3QgQ29y
cDpNVFNJPGJyPgogICAgPGRpdj48YnI+CiAgICA8YnI+Ci0tLS0tT3JpZ2luYWwgTWVzc2FnZS0t
LS0tPGJyPgpGcm9tOiA8YSBocmVmPSJtYWlsdG86cGtpLXVzZXJzLWJvdW5jZXNAcmVkaGF0LmNv
bSIgdGFyZ2V0PSJfYmxhbmsiPnBraS11c2Vycy1ib3VuY2VzQHJlZGhhdC5jb208L2E+ClttYWls
dG86PGEgaHJlZj0ibWFpbHRvOnBraS11c2Vycy1ib3VuY2VzQHJlZGhhdC5jb20iIHRhcmdldD0i
X2JsYW5rIj5wa2ktdXNlcnMtYm91bmNlc0ByZWRoYXQuY29tPC9hPl08YnI+Ck9uIEJlaGFsZiBP
ZiBDaHJpc3RpbmEgRnU8YnI+ClNlbnQ6IFR1ZXNkYXksIE5vdmVtYmVyIDE3LCAyMDA5IDEyOjU2
IFBNPGJyPgpUbzogPGEgaHJlZj0ibWFpbHRvOnBraS11c2Vyc0ByZWRoYXQuY29tIiB0YXJnZXQ9
Il9ibGFuayI+cGtpLXVzZXJzQHJlZGhhdC5jb208L2E+PGJyPgogICAgPC9kaXY+CiAgICA8ZGl2
PgogICAgPGRpdj5DYzogPGEgaHJlZj0ibWFpbHRvOmpvaG5kb3JvdnNraUBnb29nbGVtYWlsLmNv
bSIgdGFyZ2V0PSJfYmxhbmsiPmpvaG5kb3JvdnNraUBnb29nbGVtYWlsLmNvbTwvYT48YnI+ClN1
YmplY3Q6IFtQa2ktdXNlcnNdIChmb3J3YXJkZWQpIEhlbHAgbmVlZGVkIG9uIGRvZ3RhZzxicj4K
ICAgIDxicj4KSSBtaWdodCBoYXZlIG1lc3NlZCB1cCB3aGVuIG1hbmFnaW5nIHBraS11c2VycyBh
bmQgdGhpcyBkaWQgbm90IGNvbWU8YnI+CnRocm91Z2guIKBIZW5jZSB0aGUgZm9yd2FyZC48YnI+
CkNocmlzdGluYTxicj4KICAgIDxicj4KU3ViamVjdDo8YnI+CkhlbHAgbmVlZGVkIG9uIGRvZ3Rh
Zzxicj4KRnJvbTo8YnI+CkpvaG4gRG9yb3Zza2kgJmx0OzxhIGhyZWY9Im1haWx0bzpqb2huZG9y
b3Zza2lAZ29vZ2xlbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5qb2huZG9yb3Zza2lAZ29vZ2xl
bWFpbC5jb208L2E+Jmd0Ozxicj4KRGF0ZTo8YnI+ClR1ZSwgMTcgTm92IDIwMDkgMTA6NTg6MTgg
LTA1MDA8YnI+CiAgICA8YnI+ClRvOjxicj4KICAgIDxhIGhyZWY9Im1haWx0bzpwa2ktdXNlcnNA
cmVkaGF0LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPnBraS11c2Vyc0ByZWRoYXQuY29tPC9hPjxicj4K
ICAgIDxicj4KICAgIDxicj4KSGksPGJyPgogICAgPGJyPgpJIGp1c3QgaW5zdGFsbGVkIGEgZG9n
dGFnICgxLjIuMCkgaW5zdGFuY2Ugb24gbXkgRmVkb3JhIDEwIHN5c3RlbS48YnI+CkkgdXNlZCBh
IFNhZmVOZXQgUHJvdGVjdFNlcnZlciBHb2xkIEhTTSBhcyBrZXlzdG9yZS48YnI+ClRoZSBkb2d0
YWcgc3lzdGVtIGluc3RhbGxhdGlvbiBhbmQgY29uZmlndXJhdGlvbiB3ZXJlIGZpbmUuIE5vIGVy
cm9yIHdhczxicj4KcmVwb3J0ZWQuPGJyPgpBbGwga2V5cyBhbmQgY2VydGlmaWNhdGVzIHdlcmUg
Z2VuZXJhdGVkIGluc2lkZSB0aGUgSFNNLjxicj4KICAgIDxicj4KQnV0IHdoZW4gSSB0cmllZCB0
byBhY2Nlc3MgdGhlIHNlY3VyZSBhZG1pbiBpbnRlcmZhY2UgYXQ8YnI+CqAgoCA8YSBocmVmPSJo
dHRwczovL2xvY2FsaG9zdDpsb2NhbGRvbWFpbjo5NTQ1IiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6
Ly9sb2NhbGhvc3Q6bG9jYWxkb21haW46OTU0NTwvYT48YnI+CkkgZ290IGVycm9yIG1lc3NhZ2U6
PGJyPgqgIKBTZWN1cmUgQ29ubmVjdGlvbiBGYWlsZWQ8YnI+CqAgoEFuIGVycm9yIG9jY3VycmVk
IGR1cmluZyBhIGNvbm5lY3Rpb24gdG8gbG9jYWxob3N0LmxvY2FsZG9tYWluOjg0NDU8YnI+CqAg
oFNTTCBwZWVyIHJlcG9ydHMgaW5jb3JyZWN0IE1lc3NhZ2UgQXV0aGVudGljYXRpb24gQ29kZS48
YnI+CqAgoChFcnJvciBjb2RlOiBzc2xfZXJyb3JfYmFkX21hY19hbGVydCk8YnI+CiAgICA8YnI+
CkkgY2hlY2tlZCB0aGUgc2VydmVyIGNlcnRpZmljYXRlICh2aWV3ZWQgaXQgd2l0aCBJRSBvbiBh
IFdpbmRvd3MgYm94KS48YnI+Ckl0IHNlZW1zIGZpbmUuPGJyPgogICAgPGJyPgpEb2VzIGFueSBi
b2R5IGtub3cgd2hhdCBpcyB3cm9uZyBhbmQgaG93IGNhbiBJIGZpeCBpdD88YnI+CiAgICA8YnI+
ClRoYW5rcyw8YnI+CiAgICA8YnI+CkpvaG48YnI+CiAgICA8YnI+Cl9fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJyPgpQa2ktdXNlcnMgbWFpbGluZyBsaXN0
PGJyPgogICAgPGEgaHJlZj0ibWFpbHRvOlBraS11c2Vyc0ByZWRoYXQuY29tIiB0YXJnZXQ9Il9i
bGFuayI+UGtpLXVzZXJzQHJlZGhhdC5jb208L2E+PGJyPgogICAgPGEgaHJlZj0iaHR0cHM6Ly93
d3cucmVkaGF0LmNvbS9tYWlsbWFuL2xpc3RpbmZvL3BraS11c2VycyIgdGFyZ2V0PSJfYmxhbmsi
Pmh0dHBzOi8vd3d3LnJlZGhhdC5jb20vbWFpbG1hbi9saXN0aW5mby9wa2ktdXNlcnM8L2E+PGJy
PgogICAgPC9kaXY+CiAgICA8L2Rpdj4KICA8L2Jsb2NrcXVvdGU+CiAgPC9kaXY+CiAgPGJyPgog
IDxwcmU+PGZpZWxkc2V0PjwvZmllbGRzZXQ+Cl9fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fClBraS11c2VycyBtYWlsaW5nIGxpc3QKPGEgaHJlZj0ibWFpbHRv
OlBraS11c2Vyc0ByZWRoYXQuY29tIiB0YXJnZXQ9Il9ibGFuayI+UGtpLXVzZXJzQHJlZGhhdC5j
b208L2E+CjxhIGhyZWY9Imh0dHBzOi8vd3d3LnJlZGhhdC5jb20vbWFpbG1hbi9saXN0aW5mby9w
a2ktdXNlcnMiIHRhcmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5yZWRoYXQuY29tL21haWxtYW4v
bGlzdGluZm8vcGtpLXVzZXJzPC9hPgogIDwvcHJlPgo8L2Jsb2NrcXVvdGU+Cjxicj4KPC9kaXY+
PC9kaXY+PC9kaXY+Cgo8YnI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f
X19fX19fX188YnI+ClBraS11c2VycyBtYWlsaW5nIGxpc3Q8YnI+CjxhIGhyZWY9Im1haWx0bzpQ
a2ktdXNlcnNAcmVkaGF0LmNvbSIgdGFyZ2V0PSJfYmxhbmsiPlBraS11c2Vyc0ByZWRoYXQuY29t
PC9hPjxicj4KPGEgaHJlZj0iaHR0cHM6Ly93d3cucmVkaGF0LmNvbS9tYWlsbWFuL2xpc3RpbmZv
L3BraS11c2VycyIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LnJlZGhhdC5jb20vbWFpbG1h
bi9saXN0aW5mby9wa2ktdXNlcnM8L2E+PGJyPgo8YnI+PC9ibG9ja3F1b3RlPjwvZGl2Pjxicj4K
PC9kaXY+PC9kaXY+PC9ibG9ja3F1b3RlPjwvZGl2Pjxicj4K

--===============7972388234080039087==
Content-Type: application/octet-stream
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="cert.001"
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--===============7972388234080039087==
Content-Type: application/octet-stream
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="cert.002"
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--===============7972388234080039087==--