ELF > 1 @ p @ 8 @ ) ) ) )% )% pF S - -% -% $ $ Ptd , , Qtd GNU yzA9W K $SMz\/ a @ ( H`E PQ* )RXa b e g i o p q u w y z | } cSrT2Eq^ qX YXv̉|atg7cJcЉ (CEmU`fBPDV{oVk0@,v$R~GE};. b
) i 6 l <
r 4
U M Y 1 { M H + Q
= b Q (
Z {
a O s H
. G ! \ S / p
T 5 T :
t
P + E 8 g E
x " j ! O
} w = H <
2 = x 4 O
q 1 . q / n b X ] $
F ]
7 B S
v < W p
C
x t 1 )
. { a
' h
> J
U 6 j h : & , "
J . V f y Z I = q
]
f q ; 0 [
# ] w j
6
T _ z
| ( w " S Є w ? ; a P F @T q 6 o' 6 5 @v } @ B (|' D Л o ` > r / o' W J 7 +% %
pC p w u 0S x c P A w ,% D t ] < __gmon_start__ _init _fini __cxa_finalize _Jv_RegisterClasses CertDB_new_from_CERTCertDBHandle PK11Slot_new_from_PK11SlotInfo _Py_NoneStruct PyTuple_Type PyExc_TypeError PyErr_Format PyInt_FromLong PyExc_ValueError _PyArg_ParseTupleAndKeywords_SizeT PyString_FromFormat PyString_FromString PyList_New PyList_Append PyList_Sort PyExc_SystemError PyErr_SetString PyExc_IndexError CERT_DupCertificate PyTuple_Size _PyObject_CallMethod_SizeT PyThreadState_GetDict PyDict_GetItemString PyExc_RuntimeError SEC_PKCS12DecoderValidateBags SEC_PKCS12DecoderImportBags PyString_FromStringAndSize PyTuple_New PyTuple_SetItem PyTuple_GetItem PyGILState_Ensure PyDict_New PyObject_CallObject PyBool_Type PySys_WriteStderr PyGILState_Release PyErr_Print _Py_TrueStruct PyErr_Occurred PyUnicodeUCS4_AsUTF8String PyString_UTF8 PORT_Alloc PyString_AsString PORT_Strdup PyString_Size PyErr_NoMemory CERT_MakeCANickname PR_smprintf_free PORT_SetError strlen PORT_ZAlloc strncmp PORT_Free PyBool_FromLong PyDict_GetItem PyExc_KeyError PyExc_MemoryError NSS_ShutdownContext PyMem_Free _Py_BuildValue_SizeT _PyArg_ParseTuple_SizeT PyUnicodeUCS4_DecodeUTF8 PyInt_AsLong PyObject_IsTrue SECOID_FindOIDTag AVA_new_from_CERTAVA PORT_ArenaZAlloc SECITEM_CopyItem CERT_CopyAVA CERT_SequenceOfCertExtensionTemplate SEC_ASN1DecodeItem SECITEM_ArenaDupItem PyNumber_Lshift PyNumber_Or CERT_GetOidString PyObject_Str _Py_ZeroStruct PR_smprintf PyList_Size PyList_GetItem DER_GeneralizedTimeToTime PR_GMTParameters PR_ExplodeTime PR_FormatTime __stack_chk_fail DER_UTCTimeToTime PyString_ConcatAndDel PyUnicodeUCS4_DecodeUTF16 PyUnicodeUCS4_DecodeUTF32 CERT_GetNextGeneralName CERT_NameToAscii PyObject_Size PySequence_GetItem CERT_GetCertUid CERT_GetDomainComponentName CERT_GetOrgUnitName CERT_GetOrgName CERT_GetStateName CERT_GetLocalityName CERT_GetCountryName CERT_GetCommonName CERT_GetCertEmailAddress CERT_AddRDN KEYPQGParams_init_from_SECKEYPQGParams SECITEM_FreeItem KEYPQGParams_new_from_SECKEYPQGParams PyType_IsSubtype strcasecmp strncasecmp __ctype_b_loc SEC_StringToOID CERT_GetAVATag PyNumber_AsSsize_t PySlice_Type PySlice_GetIndicesEx PyList_SetItem PySequence_Size PK11_DigestFinal _PyString_Resize PK11_Finalize PK11_CipherOp PK11_DigestOp PK11_DigestBegin PK11_CloneContext PK11_DigestKey PK11_GetSlotFromKey PK11_GetKeyLength PK11_ExtractKeyValue PK11_GetKeyData PK11_GetMechanism PyObject_Malloc PyObject_Init PK11_UnwrapSymKey PK11_Derive PK11_GetTokenName PK11_GetSlotName PyEval_SaveThread PyEval_RestoreThread PyTuple_GetSlice PK11_KeyGen PK11_GetBestKeyLength PK11_GetBestWrapMechanism PK11_Logout PK11_Authenticate PK11_UserEnableSlot PK11_UserDisableSlot PK11_GetDisabledReason PK11_HasRootCerts PK11_IsDisabled PK11_ProtectedAuthenticationPath PK11_IsLoggedIn PK11_IsRemovable PK11_IsFriendly PK11_NeedUserInit PK11_NeedLogin PK11_IsInternal PK11_IsReadOnly PK11_IsPresent PK11_IsHW SEC_DeletePermCRL PyFloat_FromDouble PyFloat_Type PyFloat_AsDouble PR_Now CERT_CheckOCSPStatus CERT_VerifyCertificate CERT_VerifyCertificateNow CERT_IsCACert CERT_CheckCertValidTimes CERT_VerifyCertName NSS_FindCertKEAType CERT_GetDefaultCertDB PK11_GetInternalKeySlot CERT_DecodeTrustString CERT_ChangeCertTrust PORT_GetError SEC_FindCrlByDERCert CERT_AsciiToName CERT_NameTemplate SEC_ASN1EncodeItem CERT_DestroyName SEC_FindCrlByName __snprintf_chk PyExc_AttributeError PK11_HashBuf PORT_NewArena PORT_FreeArena PyObject_AsReadBuffer SECOID_FindOID PyString_Format PyDict_SetItem PyModule_Type PyModule_GetDict PyModule_GetName PORT_ArenaAlloc NSS_CmpCertChainWCANames CERT_FreeDistNames malloc memmove PK11_WrapSymKey KEYPQGParams_format_lines CERT_DecodeOidSequence CERT_DestroyOidSequence CertificateExtension_new_from_CERTCertExtension DSAPublicKey_new_from_SECKEYDSAPublicKey RSAPublicKey_new_from_SECKEYRSAPublicKey PublicKey_new_from_SECKEYPublicKey PK11_GenerateKeyPair CERT_DestroyCertificate PyFile_Type PyFile_FromString SECITEM_ZfreeItem SEC_PKCS12DecoderFinish PyObject_CheckReadBuffer CERT_SignedDataTemplate CERT_CertificateRequestTemplate CERT_VerifySignedDataWithPublicKeyInfo CERT_DecodeBasicConstraintValue BasicConstraints_new_from_SECItem CERT_DecodeAuthKeyID AuthKeyID_new_from_SECItem CERT_DecodeGeneralName CERT_CreateRDN RDN_new_from_CERTRDN CERT_CopyRDN CERT_CreateName CERT_CompareName CERT_DecodeAVAValue CERT_RFC1485_EscapeAndQuote SECITEM_CompareItem CERT_CreateAVA PORT_ArenaMark PORT_ArenaUnmark PORT_ArenaRelease CERT_CopyName CERT_DecodeAuthInfoAccessExtension AuthorityInfoAccesses_new_from_SECItem AuthKeyID_new_from_CERTAuthKeyID CRLDistributionPt_new_from_CRLDistributionPoint GeneralName_new_from_CERTGeneralName DN_new_from_CERTName CERT_DecodeCRLDistributionPoints CRLDistributionPts_new_from_SECItem PK11_DestroyContext PK11_FreeSymKey NSS_IsInitialized PK11_FreeSlot SEC_DestroyCrl SECKEY_DestroyPrivateKey CERT_ImportCerts CERT_DestroyCertArray SECKEY_DestroyPublicKey SECOID_DestroyAlgorithmID CERT_DerNameToAscii CERT_DisableOCSPDefaultResponder CERT_EnableOCSPDefaultResponder CERT_SetOCSPDefaultResponder CERT_ClearOCSPCache CERT_SetOCSPTimeout CERT_SetOCSPFailureMode CERT_OCSPCacheSettings CERT_DisableOCSPChecking CERT_EnableOCSPChecking CERT_GetUsePKIXForValidation CERT_SetUsePKIXForValidation PK11_IsFIPS PORT_SetUCS2_ASCIIConversionFunction PK11_FindCertsFromNickname CERT_FilterCertListForUserCerts SEC_PKCS12CreateExportContext SEC_PKCS12AddPasswordIntegrity SEC_PKCS12AddCertAndKey SEC_PKCS12CreateUnencryptedSafe SEC_PKCS12CreatePasswordPrivSafe CERT_DestroyCertList SEC_PKCS12DestroyExportContext SEC_PKCS12Encode PORT_UCS2_UTF8Conversion SECITEM_DupItem PyDict_SetItemString PyCallable_Check SEC_PKCS5IsAlgorithmPBEAlgTag SEC_PKCS5GetPBEAlgorithm SEC_PKCS12SetPreferredCipher SEC_PKCS12EnableCipher strstr strchr NSSBase64_DecodeBuffer CERT_DecodeDERCrlWithFlags PK11_TokenExists PK11_NeedPWInit PK11_ImportCRL PK11_GetPadMechanism PK11_GetBlockSize PK11_GetIVLength PK11_MechanismToAlgtag PK11_AlgtagToMechanism PK11_GenerateNewParam PK11_ParamFromAlgid PK11_ParamFromIV PK11_CreateDigestContext SECKEY_PublicKeyStrength PK11_PubWrapSymKey PK11_ImportSymKey PK11_CreateContextBySymKey PK11_FindSlotByName PK11_GetInternalSlot PK11_GetBestSlot PK11_LogoutAll SECOID_FindOIDByTag PyList_Type PyMem_Malloc PyString_AsStringAndSize CRLDistributionPt_format_lines HASH_ResultLenByOidTag __ctype_tolower_loc CERT_GetCertNicknames CERT_FreeNicknames PK11_GenerateRandom PK11_FindKeyByAnyCert PK11_FindCertFromNickname PK11_SetPasswordFunc PK11_ReferenceSlot nss_DumpCertificateCacheInfo NSS_Shutdown NSS_InitContext NSS_Initialize NSS_NoDB_Init NSS_InitReadWrite NSS_Init PyDict_DelItemString NSS_UnregisterShutdown NSS_RegisterShutdown NSS_VersionCheck NSS_GetVersion AlgorithmID_new_from_SECAlgorithmID SECOID_CopyAlgorithmID SECITEM_AllocItem SEC_PKCS12DecoderStart SEC_PKCS12DecoderUpdate SEC_PKCS12DecoderVerify SEC_PKCS12DecoderIterateInit SEC_PKCS12DecoderIterateNext _PyObject_CallFunction_SizeT SubjectPublicKeyInfo_new_from_CERTSubjectPublicKeyInfo SECKEY_ExtractPublicKey SignedData_new_from_SECItem __memcpy_chk PR_IsNetAddrType PR_NetAddrToString _PyString_Join CERT_DecodeAltNameExtension secuPBEV2Params SEC_QuickDERDecodeItem SECOID_GetAlgorithmTag secuPBEParamsTemp secuKDF2Params SECKEY_RSAPSSParamsTemplate SECOID_AlgorithmIDTemplate initnss PyImport_ImportModule PyObject_GetAttrString PyCObject_Type PyCObject_AsVoidPtr PyCObject_Import Py_InitModule4_64 PyType_Ready rindex PyModule_AddObject PyCObject_FromVoidPtr PyModule_AddIntConstant PyModule_AddStringConstant PK11_ListCerts PK11_FindCertsFromEmailAddress CERT_GetCertChainFromCert PK11_ListCertsInSlot PyNumber_Add libnspr4.so libssl3.so libnss3.so libsmime3.so libpython2.6.so.1.0 libpthread.so.0 libc.so.6 _edata __bss_start _end NSS_3.2 GLIBC_2.4 GLIBC_2.3 GLIBC_2.3.4 GLIBC_2.2.5 NSS_3.10 NSS_3.14 NSS_3.13 NSS_3.9.2 NSS_3.5 NSS_3.12.9 NSS_3.7 NSS_3.12.5 NSS_3.11.7 NSS_3.12 NSS_3.9 NSS_3.6 NSS_3.2.1 NSS_3.8 NSS_3.4 NSS_3.3 NSS_3.11.1
B& G % P ii
O ii
Y ti c ui
o 0 pd { B& G td sd I& E& }d G& }d |d rd I& F&
pd { H& H& D& C& B& G |d @)% X)% p)% I )% )% )% )% )% t *% *% 0*% H*% `*% " x*% y *% K *% R *% 6 *% D *% O +% ] +% p+% +% +% @ +% +% & (& 8& @;% @& *b H& X& ;% `& a h& x& `=% & & & A% & a & & A% & a & & `C% & & & @E% & a & P & H% & a (& 8& V% @& ͓ H& P X& @e% `& U h& p x& `p% & ړ & 0 & q% & ja & & r% & & & y% & & & {% & & & |% & Pa (& 8& ~% @& 9a H& 0 X& `% `& &a h& @ x& % & & @ & % & a & @ & % & Y & @ & `% & a & & % & ` & ` & % & X (& P 8& % @& X H& X& % `& X h& 0 x& % & X & & % & ` & @ & % & ,U & & % & X7 & & `% & ` & & % & T (& 8& % @& T H& X& % `& ` h& p x& % & R & & % & & & `% & R & & % & & & & `% & D & & % & Y (& 8& `% @& s H& X& % `& x7 h& x& `% & AX & & % & W & & `% & & P & @% & ` & & % & & ` & % & (& p 8& @% @& e` H& X& % `& ǔ h& x& @% & S` & & `% & :` & & % & ` & & % & ` & & % & _ & & % & _ (& 8& `% @& _ H& X& % `& _ h& x& % & r_ & P & % & a_ & & @% & J_ & & `% & =_ & & % & & & % & '_ (& ` 8& `% @& H& X& @% `& _ h& x& % & ^ & & % & ^ & p & `% & EQ & 0 & % & 1Q & ~ & `% & Z & ; & % & 0d (& 8& % @& dO H& e X& % `& K h& P x& `% & L & W & % & M & _ & % & ^ & 0 & % & & & % & & & % & Q (& Ў 8& % @& Q H& X& `% `& z^ h& x& % & 7 & & & & ^ & А & & & Z[ & pO & & & , & & `& & ] & & & & ] (& P 8& & @& ] H& X& & `& ] h& P x& & & y] & & "& & f] & & #& & H & P & $& & Y & & `$& & t & & (& & 7 (& 8& *& x& & & & I & C' & pC' & & C' & ,& H& C' P& q' X& D' & H & 3 & 0& X& I & P & -& & 3 & 4 & E' & r' & E' (& `4 8& & & p4 (& H P& @-& & `r' & r' & `F' & 0F & ` X& ˕ p& & H & & .& (& n' 0& r' 8& F' h& @K x& p & & 5 8& H h& & 0& & 4 & @5 & G' & s' & G' & 5 & 4 & & 6 & H & 0& 1& 8& 6 @& 6 h& `H' p& @s' x& H' & 7 & 5 8&
P& x& `H & & `1& & 7 & 08 & @I' & s' & I' H& 9 X& & & & @H H& ` p& 1& x& 9 & 9 & J' & s' & J' & 9 & x& / & ; & H & 0 & 1& & P: & : H& K' P& t' X& L' & @; & : & L 0& ; & 2& & L' & @t' & t' (& ; 8& P; & [ & < & (& P& `2& X& < `& < & M' & t' & `M' & = & ; X ' x p ' J ' H ' з ' 2& (' `N' 0' u' 8' P' h' x' = ' ' ' 5& ' @u' ' `u' ' u' ' p= ' @= ' ' P 0' 5& h' T' p' u' x' v' ' = ' = 8' P' ' 6& ' @T' ' `v' ' W' H' F X' P> ' ' ' G H' G p' `6& ' W' ' v' ' X' ' > x' Ֆ ' P ' G ' G ' 6& H ' Y' P ' v' X ' w' ' > ' >
' 0
' ` X
' P
'
' 6&
' n'
' `w'
' Z' ( ' E 8 ' @ ' ' ? ' `G ' `Z' ( ' p P ' 7& X ' ? ` ' @? ' Z' ' w' ' w' ' p ' > X
' ! p
' @
' @
' @7& (' [' 0' x' 8' [' h' E x' ' = ' 0@ H' `\' h' ' 7& ' ? ' ? ' \' ' o ' ? ' [ ' ' `h ' d 0' 8& h' `x' p' x' x' ]' ' h ' @ 8' g P' p' f x' 0c ' ^' ' P^' ' @& ' ^' ' x' ' y' H' PU X' ' s ' ' @` ' p (' ^' 0' _' H' p p' @I& ' @_' ' @y' ' _' ' ] ' 0 x' ~ ' ' ' @a' ' Y& H' a' P' y' X' a' ' T ' 0' P X' P ' ' Z& ' b' ' y' ' @c' (' S 8' ' ' P@ ' @G (' G P' @Z& ' c' ' z' ' d' ' R ' X' p' 0 ' d' ' ' Z& (' e' 0' @z' 8' `e' h' pE x' ' ӗ ' 8 ' F h ' ` ' Z& ' @f' ' z' ' f' ' pP ' ` ' ' ' p# 0 ' [& h ' g' p ' z' x ' h' ' ' 8 ' P ' x ' F ' \& ' i' ' ' pB !' F H!' p!' @\& x!' A !' A !' j' !' {' !' `j' !' @E !' @ x"' 2 "' K "' F "' k' "' #' \& #' B #' B H#' k' P#' @{' X#' {' #' #' B $' H 0$' I $' $' `^& $' `l' $' {' $' l' 8%' %' b %' I &' `m' (&' P&' _& &' m' &' |' &' n' &' @'' ' H'' & P'' @ ' X'' ' `'' `& h'' n p'' = x'' 3 '' 0< '' 1 '' - '' * '' '' '' '' '' '' '' o '' x '' x (' x (' x (' x 0(' x @(' x h(' ~ x(' (' (' (' (' (' (' (' (' )' )' ()' 8)' H)' X)' h)' x)' Ř )' ʘ )' Ϙ )' Ԙ )' ٘ )' ޘ )' )' )' *' *' (*' 8*' H*' X*' h*' c x*' *' *' *' *' *' *' *' *' Y +' " +' $ (+' & 8+' ( H+' T X+' * h+' x+' d +' +' +' +' +' +' +' Q +' j ,' T ,' , (,' . 8,' 0 H,'
J X,' 2 h,' 5 x,' ,' ,' ,' ,' ,' ,' ,' s ,' V -' 7 -' (-' t 8-' H-' X-' I h-' } x-' 9 -' } -' )k -' } -' -' ; -' = -' -' } .' ? .' A (.' C 8.' Y H.' F X.' f h.' H x.' .' .' J .' AT .' N .' .' T .' g .' ` /' /' L (/' Ed 8/' ٞ H/' X/' b h/' O x/' L /' /' R /' I /' zR /' /' n /' iQ /' W 0' N 0' P (0' R 80' T H0' V X0' X h0' ] x0' b 0' g 0' l 0' q 0' v 0' { 0' 0' 0' 1' 1' (1' 81' H1' X1' h1' x1' 1' 1' 1' 1' ƙ 1' ˙ 1' Й 1' ՙ 1' ڙ 2' ߙ 2' (2' 82' H2' X2' h2' x2' 2' 2' 2' 2' 2' 2' 2' % 2' * 3' / 3' 4 (3' 9 83' > H3' C X3' H h3' M x3' R 3' W 3' \ 3' a 3' f 3' k 3' p 3' u 3' z 4' 4' (4' 84' H4' X4' h4' x4' 4' 4' 4' 4' 4' 4' 4' Ś 4' ʚ 5' Ϛ 5' Ԛ (5' ٚ 85' ޚ H5' X5' h5' x5' 5' 5' 5' 5' 5' 5' 5' 5' 6' 6' $ (6' ) 86' . H6' 3 X6' 8 h6' = x6' B 6' G 6' L 6' Q 6' V 6' [ 6' ` 6' e 6' j 7' o 7' t (7' y 87' ~ H7' X7' h7' x7' 7' 7' 7' 7' 7' 7' 7' 7' 8' 8' ě (8' ɛ 88' Λ H8' ӛ X8' ؛ `8' x p8' ݛ 8' x 8' ݛ 8' x 8' x 8' x 8' ݛ 8' `i 8' ni 9' zi 9' m 9' i 9' | 09' 8! 89' H9' i P9' i `9' `! h9' x9' ! 9' 9' d 9' i 9' ɜ 9' ! 9' ٜ 9' i 9' 9' ݛ :' x :' h :' ޒ (:' @:' P:' ޒ X:' p:' oO x:' ݛ :' x :' V :' sT :' dY :' sT :' x :' x ;' x ;' x ;' x 0;' x @;' " H;' 2 `;' " h;' 2 ;' ݛ ;' x ;' < ;' _ ;' ;' *^ ;' G <' K <' ] <' n <' ~ <' (<' 0<' 8<' ם @<' H<' `<' Z p<' G <' <' + <' 7 <' sT <' \ <' @ <' S <' i =' Z =' =' n =' @=' v H=' s P=' rN `=' | h=' =' Z =' sT =' =' =' =' =' Z =' x >' >' >' >' >' 0>' % 8>' V P>' oO X>' ݛ p>' oO x>' ݛ >' oO >' ݛ >' oO >' ݛ >' 7 >' ݛ >' 7 >' ݛ ?' ?' ݛ H?' K P?' K `?' K h?' K x?' K ?' K ?' K ?'
L ?' L ?' /L ?' 8L ?' LL ?' SL ?' iL ?' ?' rL @' @' ݛ (@' ,J 0@' AJ @@' SJ H@' fJ X@' vJ `@' J p@' J x@' J @' J @' J @' J @' J @' K @' K @' K @' /K @' @' _ @' A' _ (A' sT 0A' @A' w HA' ў `A' w hA' pZ A' w A' ` A' w A' ۞ A' pZ A' ў A' x A' " A' 2 B' x B' B' (B' < @B' HB' `B' Z hB' " pB' 2 B' B' B' B' & B' 2 B' oO B' B' B' B' & B' oO B' x C' x C' `3 8C' Pr @C' r pC' `3 xC' C' m C' m C' @3 C' Z C' ; C' _& D' > D' D' c& D' mU (D' 8D' c& @D' EU HD' XD' `e& D' sT D' 0E D' 7 D' j D' E D' 8 D' Z D' r D' J E' $S (E' 8E' `h& @E' ` HE' 0 XE' k& E' e E' p3 E' l E' T E' E' 08 E' ` E' E' h8 E' F' 3 F' 8 `F' | hF' E pF' xF' F' F' E F' P F' F' v F' 6 F' 8 G' s G' 5 G' 8 0G' rN 8G' 5 HG' 9 G' $S G' G' `h& G' ` G' и G' k& G' ܟ G' 4 G' ؟ H' H' 4 H' `H' $S hH' xH' `h& H' ` H' H' k& H' H' 5 H' 9 H' H' 5 I' @I' $S HI' XI' `h& `I' ` hI' p xI' k& I' B I' 7 I' P9 I' Z I' 07 I' 9 I' d I' P7 J' 9 J'
J' p7 0J' J' $S J' J' `h& J' ` J' @ J' k& J' 5 J' D J' 9 K' > K' K' K 0K' g 8K' p HK' : XK' ` `K' pK' : K' $S K' K' `h& K' ` K' K' k& L' d (L' : 8L' d HL' d PL' : `L' o L' "W L' P L' m& L'
W L' L' n& M' $S M' p M' `h& M' ` (M' 8M' k& `M' dY hM' xM' M' M' M' 8: M' h M' ; M' M' T M' M' `: N' \ N' ; N' `N' M hN' ^ xN' `p& N' V N' N' s& N' Ѡ N' N' `u& N' ߠ N' } N' `v& N' NZ N' 3 N' y& O' V O' O' `{& O' V (O' 8O' & @O' V HO' XO' & `O' V hO' xO' @& O' V O' O' @& O' Y O' 0 O' @& O' V O' O' & O' 5 O' O' `& P' [ P' 0A P' & P' $S (P' 8P' `h& @P' ` HP' XP' k& P' P' P' : P' P' P' ; P' P' P' h; P' & Q' Q' ; Q' Z (Q' y 8Q' 8< HQ' : PQ' P `Q' N pQ' b xQ' v Q' `< Q' u Q' Q' i Q' } Q' Q' Q' Q' R' < R' R' (R' < 8R' š @R' q PR' < `R' Ρ hR' ^ xR' = R' ܡ R' `^ R' X= R' R' 0^ R' = R' R' D R' > S' S' D S' X> (S' 0S' `D @S' > PS' 4 XS' hS' ? xS' L S' P S' 8? S' 6Q S' PD S' ? T' W T' T' & @T' j HT' ` XT' & `T' p hT' xT' & T' { T' T' & T' T' T' @& T' T' ` T' & T' T' T' @& U' U' U' & U' (U' 8U' & @U' Ǣ HU' 0 XU' & `U' ? hU' xU' & U' Ԣ U' U' & U' U' p U' `& U' U' P U' & U' U' U' & V' V' V' & V' BV (V' @ 8V' & @V' HV' XV' & `V' # hV' xV' & V' U V' V' & V' U V' V' @& V' ![ V' @E V' @& V' V' V' & W' ; (W' @ 8W' E HW' O PW' `W' Z W' U W' p W' & W' kZ W' 05 W' & W' U W' W' & X' w (X' P 8X' e HX' PX' `X' pX' V xX' X' X' *^ X' X' *^ Y' U Y' Y' @& Y' U (Y' p 8Y' & @Y' HY' 0 XY' & `Y' U hY' xY' & Y' wU Y' Y' & Y' Y' @ Y' & Y' Y' P Y' & Z' b Z' v Z' ? `Z' o xZ' u Z' $S Z' к Z' `h& Z' ` Z' P Z' k& [' $S ([' 8[' `h& @[' ` H[' X[' k& [' [' 5 [' ̣ [' [' [' P@ [' [' [' [' \' v \' @ `\' o x\' Pu \' $S \' з \' `h& \' ` \' \' k& ]' h (]' 5 8]' @ H]' T P]' `]' @ p]' \ x]' 4 ]' A ]' ]' 0e ]' HA ^' > ^' P^' > X^' 0 ^' T ^' ^' & ^' 0> ^' X _' 0> _' PY @_' T H_' 0 X_' & `_' T h_' x_' & _' ( _' _' xA _' B _' _' A _' 6 _' `' B `' C `' 0`' xB @`' Q H`' X`' B h`' \ p`' ` `' C `' e `' 0 `' xC `' s `' `' C `' { `' н `' 8D @a' Xa' pu a' c a' p a' & a' dY a' a' D b' b' D b' D 0b'
R 8b' Hb' D Xb' `b' ` pb' 0E b' $S b' b' `h& b' ` b' b' k& c' c c' @ c' `& @c' 0 Hc' 4 Xc' pE hc' } pc' @ c' pE c' $S c' c' `h& c' ` c' c' k& d' (d' Ѐ 8d' E Hd' Pd' D `d' E d' `@ d' C e' $S e' p= e' `h& e' ` (e' p 8e' k& `e' he' 4 xe' e' Ƥ e' e' F e' B e' e' Ϥ e' e' PB e' HF @f' $S Hf' Xf' `h& `f' ` hf' @ xf' k& f' Z f' v f' f' u f' 0 f' f' 4 f' p g' ? g' L g' ` 0g' 8? @g' V Hg' Н Xg' F g' $S g' g' `h& g' ` g' g' k& h' K h' h' 0 h' G (h' ] 0h' D 8h' @h' Ph' n Xh' P `h' hh' 8G xh' ~ h' h' Ћ h' ` h' h' h' h' ` h' h' h' h' ` h' h' i' i' ` i' ם i' ` (i' 0i' ` @i' Hi' 0 Pi' Xi' ` hi' pi' xi' p i' ` i' ѓ i' i' & j' $S j' j' `h& j' ` (j' 8j' k& `j' sT hj' C xj' XG j' T j' j' G j' 6 j' p@ j' G j' F j' @ j' H k' R k' @ k' XH (k' ` 0k' @ @k' H k' po k' u k' t k' `p k' & l' $S l' l' `h& l' ` (l' 8l' k& `l' $S hl' xl' `h& l' ` l' l' k& l' F l' `o l' H l' e l' C m' (I m' m' C (m' PI `m' 0C xm' n m' $S m' | m' `h& m' ` m' ` m' k& n' (n' C 8n' n' $S n' `h& n' ` n' n' k& n' $S n' `h& o' ` o' o' k& o' c (o' 8o' @& @o' Q Ho' t Xo' & P,% ,% ,% .% .%
.% } n' } .%
/% w /% /% i n' i /% + /% , (/% - 0/% > 8/% K @/% U H/% W P/% a X/% `/% h/% p/% x/% /% /% /% /% /% /% /% /% /% /% /% /% 4 /% F /% v 0% 0% 0% 0% (0% 00% 80% @0% H0% P0% X0% `0% h0% p0% x0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% 0% | 0% 0% ! 0% " 0% # 1% $ 1% % 1% & 1% ' 1% ( (1% ) 01% * 81% . @1% / H1% 0 P1% 1 X1% 2 `1% 3 h1% 4 p1% 5 x1% 6 1% ~ 1% 7 1% 8 1% 9 1% : 1% ; 1% < 1% = 1% ? 1% @ 1% A 1% B 1% C 1% D 1% E 1% F 2% G 2% H 2% I 2% J 2% L (2% j 02% M 82% a @2% N H2% O P2% P X2% Q `2% R h2% S p2% T x2% y 2% V 2% k 2% X 2% Y 2% Z 2% [ 2% \ 2% z 2% ] 2% ^ 2% _ 2% ` 2% b 2% c 2% d 2% e 3% f 3% g 3% h 3% q 3% i (3% j 03% k 83% l @3% m H3% n P3% u X3% o `3% p h3% q p3% r x3% s 3% t 3% u 3% v 3% w 3% x 3% y 3% z 3% { 3% | 3% } 3% 3% ~ 3% 3% 3% 3% 4% 4% 4% 4% 4% (4% 04% 84% @4% H4% P4% X4% `4% h4% p4% x4% 4% 4% 4% 4% 4% 4% 4% r 4% 4% 4% 4% 4% 4% 4% 4% 4% p 5% 5% 5% l 5% 5% (5% 05% 85% @5% H5% P5% x X5% `5% h5% p5% x5% 5% 5% 5% 5% 5% 5% 5% 5% 5% 5% 5% 5% 5% 5% 5% 5% 6% 6% 6% 6% 6% (6% 06% 86% @6% H6% c P6% X6% `6% h6% p6% x6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 6% 7% 7% 7% s 7% 7% (7% 07% e 87% @7% H7% P7% X7% `7% h7% d p7% x7% 7% 7% 7% 7% 7% o 7% 7% 7% 7% 7% 7% 7% 7% 7% 7% 7% 8% 8% 8%
8% 8% (8%
08% 88% @8% H8% P8% X8% `8% h8% p8% x8% 8% 8% 8% 8% 8% 8% 8% 8% 8% 8% ! 8% " 8% # 8% $ 8% % 8% & 8% ' 9% ( 9% ) 9% * 9% { 9% + (9% , 09% - 89% . @9% / H9% 0 P9% 1 X9% 2 `9% 3 h9% 5 p9% 6 x9% 7 9% 8 9% 9 9% : 9% ; 9% < 9% = 9% > 9% ? 9% @ 9% A 9% B 9% C 9% D 9% E 9% G 9% H :% I :% J :% K :% L :% M (:% N 0:% O 8:% P @:% Q H:% R P:% S X:% `:% T h:% U p:% V x:% W :% :% X :% Y :% Z :% [ :% \ :% ] :% ^ :% _ :% ` H J E H5$ %$ @ %$ h %$ h %$ h %$ h %$ h %$ h %$ h %$ h p%$ h `%z$ h P%r$ h
@%j$ h 0%b$ h %Z$ h
%R$ h %J$ h %B$ h %:$ h %2$ h %*$ h %"$ h %$ h %$ h %
$ h p%$ h `%$ h P%$ h @%$ h 0%$ h %$ h %$ h %$ h %$ h %$ h! %$ h" %$ h# %$ h$ %$ h% %$ h& %$ h' p%$ h( `%z$ h) P%r$ h* @%j$ h+ 0%b$ h, %Z$ h- %R$ h. %J$ h/ %B$ h0 %:$ h1 %2$ h2 %*$ h3 %"$ h4 %$ h5 %$ h6 %
$ h7 p%$ h8 `%$ h9 P%$ h: @%$ h; 0%$ h< %$ h= %$ h> %$ h? %$ h@ %$ hA %$ hB %$ hC %$ hD %$ hE %$ hF %$ hG p%$ hH `%z$ hI P%r$ hJ @%j$ hK 0%b$ hL %Z$ hM %R$ hN %J$ hO %B$ hP %:$ hQ %2$ hR %*$ hS %"$ hT %$ hU %$ hV %
$ hW p%$ hX `%$ hY P%$ hZ @%$ h[ 0%$ h\ %$ h] %$ h^ %$ h_ %$ h` %$ ha %$ hb %$ hc %$ hd %$ he %$ hf %$ hg p%$ hh `%z$ hi P%r$ hj @%j$ hk 0%b$ hl %Z$ hm %R$ hn %J$ ho %B$ hp %:$ hq %2$ hr %*$ hs %"$ ht %$ hu %$ hv %
$ hw p%$ hx `%$ hy P%$ hz @%$ h{ 0%$ h| %$ h} %$ h~ %$ h %$ h %$ h %$ h %$ h %$ h %$ h %$ h %$ h p%$ h `%z$ h P%r$ h @%j$ h 0%b$ h %Z$ h %R$ h %J$ h %B$ h %:$ h %2$ h %*$ h %"$ h %$ h %$ h %
$ h p%$ h `%$ h P%$ h @%$ h 0%$ h %$ h %$ h %$ h %$ h %$ h %$ h %$ h %$ h %$ h %$ h %$ h p%$ h `%z$ h P%r$ h @%j$ h 0%b$ h %Z$ h %R$ h %J$ h %B$ h %:$ h %2$ h %*$ h %"$ h %$ h %$ h %
$ h p%$ h `%
$ h P%
$ h @%
$ h 0%
$ h %
$ h %
$ h %
$ h %
$ h %
$ h %
$ h %
$ h %
$ h %
$ h %
$ h %
$ h p%
$ h `%z
$ h P%r
$ h @%j
$ h 0%b
$ h %Z
$ h %R
$ h %J
$ h %B
$ h %:
$ h %2
$ h %*
$ h %"
$ h %
$ h %
$ h %
$ h p%
$ h `% $ h P% $ h @% $ h 0% $ h % $ h % $ h % $ h % $ h % $ h % $ h % $ h % $ h % $ h % $ h % $ h p% $ h `%z $ h P%r $ h @%j $ h 0%b $ h %Z $ h %R $ h %J $ h %B $ h %: $ h %2 $ h %* $ h %" $ h % $ h % $ h %
$ h p% $ h `% $ h P% $ h @% $ h 0% $ h % $ h % $ h % $ h % $ h % $ h % $ h % $ h % $ h % $ h % $ h % $ h p% $ h `%z $ h P%r $ h
@%j $ h 0%b $ h %Z $ h
%R $ h %J $ h %B $ h %: $ h %2 $ h %* $ h %" $ h % $ h % $ h %
$ h p% $ h `%
$ h P%
$ h @%
$ h 0%
$ h %
$ h %
$ h %
$ h %
$ h %
$ h! %
$ h" %
$ h# %
$ h$ %
$ h% %
$ h& %
$ h' p%
$ h( `%z
$ h) P%r
$ h* @%j
$ h+ 0%b
$ h, %Z
$ h- %R
$ h. %J
$ h/ %B
$ h0 %:
$ h1 %2
$ h2 %*
$ h3 %"
$ h4 %
$ h5 %
$ h6 %
$ h7 p%
$ h8 `% $ h9 P% $ h: @% $ h; 0% $ h< % $ h= % $ h> % $ h? % $ h@ % $ hA % $ hB % $ hC % $ hD % $ hE % $ hF % $ hG p% $ hH `%z $ hI P%r $ hJ @%j $ hK 0%b $ hL %Z $ hM %R $ hN %J $ hO %B $ hP %: $ hQ %2 $ hR %* $ hS %" $ hT % $ hU % $ hV %
$ hW p% $ hX `HHE# HtHÐU==& HATSubH=h# t H=# ZH # L%# H]=& L)HHH9s D HH==& AH2=& H9r =& [A\f H=# UHtH# HtH=# @ ÐHu D HGHtWvpA @x
L)OHG1É9rAffff. HH10 Ht @ @ H@ @( Hf. HtH fffff. G fff. HG@H HG@ HGHH HGH H\$Hl$HLd$HH@HIHt HՅu*H{H1Ht LHH $Hl$Ld$H D H $Hl$Ld$H D SHH@HtHC@ HHHHt,H{HHt HCH HHHHuHGP01[ÐHGP0 1ffff. HGH@ HGH HG HGH HG HH10 HtH@ H@ H H\$Hl$HLd$HHHIHt HՅu*H{1Ht LHH $Hl$Ld$H D H $Hl$Ld$H D SHHHtHC HHHHt,H{Ht HC HHHHuHGP01[ÐHGP0 SHHCH[H@ f D 1ffff. HGH HG HGH HG HH10 HtH@ H@ H H\$Hl$HLd$HHHIHt HՅu*H{1Ht LHH $Hl$Ld$H D H $Hl$Ld$H D SHHHtHC HHHHt,H{Ht HC HHHHuHGP01[ÐHGP0 SHHCH[H@ f D 1ffff. HGxH HGx H H H ffff. H H H ffff. H H H ffff. H\$Hl$HLd$HHxHIHt HՅuRH Ht LՅu=H Ht LՅu(H 1HtLHH $Hl$Ld$HH $Hl$Ld$Hffff. SHHxHtHCx HHHH H HtHǃ HHHHtjH HtHǃ HHHHt4H Ht!Hǃ HHHHuHGP01[ HGP0f D HGP0f D HGP0Sff. 1ffff. H\$Hl$HLd$HHHIHt HՅu*H{ 1Ht LHH $Hl$Ld$H D H $Hl$Ld$H D SHHHtHC HHHHt,H{ Ht HC HHHHuHGP01[ÐHGP0 1ffff. HGH HG HG H HG HH10 HtH@ H@ H H\$Hl$HLd$HHHIHt HՅu*H{ 1Ht LHH $Hl$Ld$H D H $Hl$Ld$H D SHHHtHC HHHHt,H{ Ht HC HHHHuHGP01[ÐHGP0 SHHCH[H@ f D 1ffff. HH10 HtH@ Hffffff. HGH@ 1ffff. S11HH=Q% % HtHX[HGH HG HGH HG HH10 HtH@ H@ @ HH\$Hl$HLd$HHHIHt HՅu*H{1Ht LHH $Hl$Ld$H D H $Hl$Ld$H D SHHHtHC HHHHt,H{Ht HC HHHHuHGP01[ÐHGP0 SHHCH[H@ f D 1ffff. HH10 HtH@ Hffffff. HH10 HtH@ Hffffff. 1ffff. S11HH=Q% % HtHX[HH10 HtH@ Hffffff. 1ffff. S11HH=% % HtHX[HGHt HH: t1 @ HH< u 1 D HW 1H: t @ HH< u HH10 HtH@ Hffffff. S11HH=% % HtHX[1ffff. HH10 HtH@ Hffffff. 1ffff. HH10 HtH@ Hffffff. HHHt H 1 D HHWHt!HG HHHHu
HBHP01Hff. SHHCH[H@ f D HH10 HtH@ Hffffff. HHHt H 1 D HHWHt!HG HHHHu
HBHP01Hff. SHHCH[H@ f D HGH@ HG@ff. HGH HG HG H HG HG(H HG( HG0H HG0 HH10 Ht.@ @ H@ H@ H@( H@0 Hf H\$Hl$HLd$HHHIHt HՅuRH{ Ht LՅu@H{(Ht LՅu.H{01Ht#LHH $Hl$Ld$Hf H $Hl$Ld$Hffff. SHHHtHC HHHH H{ HtHC HHHHt`H{(HtHC( HHHHt0H{0Ht HC0 HHHHuHGP01[ D HGP0f D HGP0f D HGP0cff. SH'HCH[H@ f D HH10 HtH@ H@ H@ Hffffff. H HHt H 1 D HHW Ht!HG HHHHu
HBHP01Hff. Gfff. HHG u?H;=h# tFHHH+# H5T HPH# H811H H> H H Hffffff. H Hc Hc HGHt8pHGH5E HPH# H810HGh AHGH Htx( H9# H @ HGH Htx H # H @ HGH Ht8f H# H @ HGx @ Hc Hc x h HHH
% HLD$H7 1 HfHHH
% HLD$H 1HfHH
*& HH H1H HHH
% HLD$H 1|HfHH
n*& HH H1QH SH
(% HHHH H1LD$ ID$ H$ ¸tD$ CH$HC1H[ HGHH=\ Hp1 HGHH=< Hp1 HGHH= Hp1 HGHH= Hp1w GWH5 H= H HE1H HGHH= Hp1' HGHH= Hp1 HGHH=l Hp1 HGHH=L Hp1 HGHH=, Hp1 HGHH= Hp1 HGHOHH=ּ Hp1c HGHH= Hp1G HGHH= Hp1' HGHH= Hp1 HGHH=l Hp1 HGHH=L Hp1 HGHH=, Hp1 HWwH=" 1ff. HGHH= Hp1g HGHH= Hp1G H(HH$HGHD$HGHHD$;1u#HD$Ht!T$t8 tH= H( H=m H( Hl$H\$ELd$Ll$H(vIM LLIE HHIE 2 tK9 IM LLWIE HHIE tK IM: LLIE HHIE tK NIM LLIE HHIE r tU IM LLgIE HHIE uIELP0 @ tS V IM@ LL
IE HHIE u IELP0ffy[ 6 LIM LLIE HHIE uIELP0f. @t[翃 @ HH HLUHE HHHE uHEHP0f. tH= IH= IvH= pI H= TIH= @I H= $IH= I"H= IH= IGH= ԿI3H= ICH= 謿I/HEHP0ID$LP05HCH1P0 @ H\$Hl$HLd$Ll$H8HLL$LD$ H
% H: 1D$ D$ 11u HHl$ H\$Ld$(Ll$0H8ÐDd$l$ AD$ 1HHt@tTAG A IM' LH\IE HHIE u IELP0@tZA A 虾IM LHIE HHIE uIELP0 @tZA- A 9IMm LHIE HHIE uIELP0 @tZA Ak ٽIM
LHBIE HHIE uIELP0 @tZA= A yIM LHIE HHIE uIELP0 @ tZA
A IMM LHIE HHIE uIELP0 @@tZA A @ 蹼IM LH"IE HHIE uIELP0 @y[@A A YIM LHIE HHIE uIELP0 tPA Af IM LHQIE HHIE tPAT A6 萻IM LHIE HHIE _ tLA3 A 8IMtpLHI$HHI$) t8H= 1ܺHHt4HHiHE HHHE Hf HHHH 1If D H# H5" DH81e#A A \IMtLHɿIE HHIE IELP0 D H= ԹI @ H= 輹I @ H= 褹I @ H= 茹I. @ H= tI @ H= \I @ H= DIF @ H= ,IH= IH= IH= I H=ٙ ԸIH= IB H=X 褸I&H=a 萸IrH= |I^H=j hIGH== TI3H=L @IH=q ,IH=x IH=q IIELP0qH= IH= ͷIIELP0HEHP0ID$LP0HCH1P0if D HHuHGHG H H# H5ژ H8zHԐUSHHH_ x(Ht#1HuC HtH9t6HH[ H9}H# H5 1H8!HH[] 11H=u% % HHtH;oHEHCHECE HCHE0 HE8 HE(HH[]ff. H\$Hl$1Ld$HHH=?% 1o% HIt @uHXLH $Hl$Ld$HHخHID$uH_& H $1Hl$Ld$HH rfH Ht"f1ffff. HHtf1ffff. HHtf1ffff. H*ljH5 H H HEH& Hx f SH臹Ht"H5" HsHt$HH[bfHa# H5c H8:1[f D SHH=^ H5 HH{HK HD肸u H{eu)H# H [ @ [H=x 1H & D [H= 1H & D SWHHO11Lj% Ht! D HHA HHuH1蝰HtWSHsHX$tEL % H< HILt D HHuH9tH [ffffff. SH HH$HGHD$HGHHD$uH H [ H1# H5 H8誼1H [fHG H 麯f. w H餯 @ 1HHI1Hx
w H9HNH9HLH)HGHpHHx/G H9}'HGH|$0 D$DH H# H5O H81Hff. AWAVIAUATIUSH(L$DoHwL9LFH M L11E1'f D @t HyIHHI9v!ڨu.@ H L診HHD$ M MM|$ HD$ E1 Au
A/I@tLI~HtC|$ w|$uJIc>
|$u1蔱Ht$H|$HHD$lIIM9vG |$tQH# T$H5 H81eHT$HHHHtRHD$ HD$H([]A\A]A^A_ @ LHo I~^f11E1HBHP0HD$ f. SH
(% HHHHH H1LD$ D$ 蠺1t H{L$ H5% HpH[ D HHH Ht[HtH H D H@H5M HPHʹ# H81H4 @ HHHHt HtH H D H@H5 HPHz# H81H @ HHHHt軸HtH H D H@H5 HPH*# H81H锬 @ AWAVIAUATUSH課H= D$ HH$ MA t IF LYLhL蝷HI& <11HI 1HLϷI~4 @ HcLշH HkHLHc蚷I9H<$L9HH4 H@H;# HpH=9 1UIHHI I$HHI$ HtHHHHty|$ 耧H[]A\A]A^A_ H=I 1A 蟴LwHIH=T 11軰f IGLP0_HCHP0xID$LP0S1H; # @Ń #Ht/|$ 1辦9H= 119H= #ȐHH H;=|# tzHWH u( t9Ht$7Ht$HHHÐH H>H H# HRH5 H81̩1H D H Hffffff. HHWH u t#H隶f. HHH @ H# HJHH5[ H81A1ffff. H\$Hl$HLd$Ll$ILt$L|$HHI0H=B AHH Ht s L=# IL HI HH 1LH^L HNHHHH H@ H= 1A E1HD$ HHHH HtHE HHHE Y MtI$HHI$' D'E>HD$H\$Hl$ Ld$(Ll$0Lt$8L|$@HH @ H{HI @ H谲H01Hl IH\IL$H H5ų# H9pH= E1H;:# AHf j I$ ٧HHD$k L#H{HT$LHBzHt$F D ID$LP0 HEHP0HCHP0nH= 1A LHD$ f D H= 1A E1!ܯHD$ f D L;%q# H=J IHHIHD$ IGLP0HD$ oHtHAv4AI)ЉG1EIOHG1Hf VHÿBff. SHLo% HH
k% H H@HD$H1H[鰗H9# H [ SH_@HtHH1H[逗H # H [ SH_8HtHލH1H[PHٙ# H [ SH_0HtH讍H1H[ H# H [ SH_(HtH~H1H[Hy# H [ SH_ HtHNH1H[HI# H [ H(HH$HGHD$HGHHD$ut$H|$1wH(fHA# H52w H8躗1H( HSHtHHt6HH:~ 1Hu % D HtHH9H<Ht H@H# H5 H8蚑1H H\$Hl$HLd$HI0 =HHu HHl$H $Ld$H LHHZt1IT$HsHAtff. HHHHt!H@Ht$HH# HՁ D H Hÿ AWAVAUATUSHHGxL Mu*H-% HE f D HH[]A\A]A^A_f D 1I> Lu H8 t
HHu賏HHtM&MtE111H={% }% HHu HE HHHE b 1{ LxHxLLuLy= C8 IT$H H: 1HH< uH4 H{HC@pHHHC0iH{@ ~@E1 @ HS0ID$H{J4HT$HT$HJ,IL;{@|HLHIM&MI @ 1_ @ H{HSHLHSHHt+H: t%1 HH< uHC@HC0 s1 HEH1P0ffffff. AWAVAUATUSHH DoE LwMt{A 1`HH E111 D HtHHHHp Mt I$HHI$u ID$LP0HH[]A\A]A^A_ D H1[]A\A]A^A_ HԄHHt 辄HI$ I @ A A I莄HH LHHI HE HHHE tJHL?HHtWI$HHI$t6HHHH{HCHP0l @ HEHP0 @ ID$LP0 MIHHIIGLP0} D HCHP0HE HHHE u
HEHP0E111x E11f HxH HGHt'H0tHx( t Hx HY# H @ HGH5 HPH# H81HH `HH PHG H\$Hl$H
HHt%H}HHHH\$Hl$HH= H\$Hl$HFf D SHH1HtHT~HHHHt
H[ HSHHD$R0HD$H[fffff. SH HH$HGHD$HGHHD$1uHjH [ @ H\$Hl$1Ld$Ll$H(HAIԻ MtID$HH twI$HډHHt?Icz1HH H tHH Mt LHHHl$H\$Ld$Ll$ H( L}HIz1 H=v 1ҀHHt1 H\$Hl$HLd$Ll$H8HLD$ HH
3% H- 1D$ mu!1HH\$Hl$ Ld$(Ll$0H8 1AHHtHc{ zHI |$ H5ڭ HaHI HH誅b I$HHI$ Hc{HIt |$ H5 HHI9 HHN I$HHI$i 1HWHI |$ H5K HHI HH I$HHI$ 1HHI |$ H5 HKHI HH蔄L I$HHI$ 1H=HI] |$ H5 HHI" HH7 I$HHI$ 1HHI |$ H5q HHI HHڃ I$HHI$5 1H#HI |$ H5/ H4HIh HH}5 I$HHI$ 1HHIF |$ H5 HHI HH I$HHI$ 1H HI |$ H5 HzHI HHÂuI$HHI$R 1HHI |$ H5e H!HHtYHHn I$HHI$:ID$LP0*IE HHIE uIELP0 D I$HHI$u ID$LP0HE HHHE HEH1P0f D ID$LP0;ID$LP0ID$LP0ID$LP0!ID$LP0nID$LP0ID$LP0ID$LP0UID$LP0HHHHHCHP0f D H\$Hl$HLd$Ll$H8HLD$ HH
3% H 1D$ -u!1HH\$Hl$ Ld$(Ll$0H8 1HHtҋsL%# LD%]# H5 I$L|$ HI HHf I$HHI$ sH=_ 1zHI |$ H5 HHHtSHH I$HHI$ID$LP0IE HHIE u
IELP0I$HHI$u ID$LP0HE HHHE HEH1P0 @ ID$LP0 HHHHuHCHP0ffff. 1f H\$Hl$HLd$Ll$HLt$L|$HhHLD$,H
{% H 1D$, 3u/1HH\$8Hl$@Ld$HLl$PLt$XL|$`Hh 1HHtH{ H= HI14y|$,HI5HI HH^~n L~MhM~HD$ Ll$H=? 1ILx|$,HHD$HI" HH} H|$l~Ht$HL$,H H5 HI1]HHD$ HyHHD$~21 H|$HHT$VoHHk}HT$HH9T$HT$HHHH MtI$HHI$t}IEI9M9>Ll$|$,1HIt&HH|tf D I$HHI$tFHE HHHE HEH1P0ID$LP0sHBHP0NID$LP0Muffff. H\$Hl$HLd$Ll$HLt$L|$HHHLD$ H
% H3 1D$ su/1HH\$Hl$ Ld$(Ll$0Lt$8L|$@HH 19HHtHCH LcM |$ H5 |HI HH{3 L$ H H5 1L.HIr HwHI~)E1 LLI)mHH>{M9IHHI: I$HHI$ HC H H[ H L$ H H5 1H萀HI H,wHI~#E1LLIlHHzM9IE HHIE HHHH\HCHP0MIE HHIE uYIE1LP0 D HE HHHE tlHHHHHHCH1P0f. 1ID$LP0IFLP0fIELP0?HEHP0fffff. UHSH H|$(HD$( dH%( H$ 1.{t*H~# H H$ dH3%( uFHĨ []fH|$(H5}# HH\$0GzH # HHd qHXsxUHSH H|$(HD$( dH%( H$ 1nt*Hs}# H H$ dH3%( uFHĨ []fH|$(H5|# HH\$0yH# HHd PqHr!xHHD$ t, tGH8|# H5 H8{HD$H HD$HH0nHD$Hf D HD$HHyHD$Hf D USH dH%( H$ 1_H5|# HHH\$0xH# Hd HqpHqH$ dH3%( u
HĨ []'w HHǀ pHHh `SHHH; tAHmHtHH[zxf. H;HtH HHHHt[HG[H@0 D H(HH$HGHD$HGHD$ HD$C~uGt$@u H|$HL$ 1vH( D Hyz# H5[ H8y1f D HYz# H5JY H8y1fffff. H(HH$HGHD$HGHD$ HD$}uGt$@u H|$HL$ 1mH( D Hy# H5Z H8Ry1f D Hy# H5Z H82y1fffff. UHHS1HHt D HH\{H9uHH[]ffff. HHHHtHH@H5 HPH,y# H81lHHfffff. H\$Hl$HHt5fHHt(H8oHHvHH\$Hl$H H= H\$Hl$Hnfffff. Hf. HH10 HHtHp 1HHHHHH10 HHtHp
1HHBP HHf HH10 HtH@ Hffffff. HH10 HtH@ H@ H@ Hffffff. HH10 HtH@ H@ H HH10 HHt!Hp 1HHHB@ HBH HHH\$Hl$HLd$Ll$HLt$L|$HhHLD$,H
% H 1D$, Swu/1HH\$8Hl$@Ld$HLl$PLt$XL|$`Hh 1xHHtHylH=W HI1mHI |$,1H+HI HHtrx I$HHI$ MQE1 MoH= 1LlHIs |$,1HH= HHHD$qHT$x I$HHI$ LH@mHI L$,Hܚ H5 H1UwHHD$ HmHHD$~(E1fH|$LIOcHHdqL9|$HT$HHHHtII$HHI$t(M92M ID$LP05ID$LP0 HBHP0IE HHIE uIELP0f I$HHI$u ID$LP0HE HHHE HEH1P0f D ID$LP0!HHHHuHBHP0ffff. H\$Hl$HLd$Ll$HLt$L|$HhHLD$,H
}% H 1D$, Stu/1HH\$8Hl$@Ld$HLl$PLt$XL|$`Hh 1uHHtHyiH=
U HI1jHI |$,1H+HI HHtox I$HHI$ MQE1 MoH= 1LiHIs |$,1HH= HHHD$nHT$x I$HHI$ LH@jHI L$,Hܗ H5 H1UtHHD$ HjHHD$~(E1fH|$LIO`HHdnL9|$HT$HHHHtII$HHI$t(M92M ID$LP05ID$LP0 HBHP0IE HHIE uIELP0f I$HHI$u ID$LP0HE HHHE HEH1P0f D ID$LP0!HHHHuHBHP0ffff. HHdHtHHrgfHq# H HHHhHtHHBgfHq# H HHH^HtHHgfHiq# H HHH_HtHHffH9q# H HHHCbHtHHffH q# H HHHsoHtHHffHp# H HHHjHtHHRffHp# H HHHCkHtHH"ffHyp# H HH\$Hl$HHHǘ kHHt*HeHHmHH\$Hl$H D H-p# HE fHHceHtHHefHo# H HSH8R% HHH5 1HHL$K_1u H[ D HD$H{HpF]uHo# H H[Ð11^% @ Ld$LgH\$Hl$HHHL1IoH{HUL)_t1H $Hl$Ld$HLc01LoH{HU L^uLcH1LnH{HU8L^Ht D H\$Hl$1H1HH=42% f3% HHt&HHiHt HH\$Hl$H @ 1 @ HE HHHE uHEH1P0f H\$Hl$HHHHH5,% H9tLfuCH; n# tZHCH,% H5C HHHum# H81`1H\$Hl$HfH] H\$Hl$H HE H\$Hl$H @ H\$Hl$HHHHH5B% H9tLWeuCH; lm# tZHCHB% H5XB HHHl# H81`1H\$Hl$HfH] H\$Hl$H HE H\$Hl$H @ H\$Hl$HHHHH5:% H9tLduCH; l# tZHCHg+% H5A HHHl# H81S_1H\$Hl$HfH] H\$Hl$H HE H\$Hl$H @ H\$Hl$HHHHH5!C% H9tLcuCH; l# tZHCHC% H5@ HHHek# H81^1H\$Hl$HfH] H\$Hl$H HE H\$Hl$H @ AWAVAUATUHSH8HH HE HAXHHS A) L%d# f D IEl$ E I<$HZuED HU HHHU uJHUHD$R0D$H8[]A\A]A^A_é u9H5b)% H9t
b H}lH8[]A\A]A^A_ HaH8[]A\A]A^A_f HHjHH=5 HLkHeLEE1E1Ee Et<^HIB A @ IDBtIEe EuE~
AE9 Hu_HH4 H5Nj 1H1jHI H=˩% H{`H H`HHHHtKI$HHI$dIT$LD$R0D$Lf D A.u&IAEe HSH߉D$R0D$ 6AMIEfHDJ HuLd$11HHD$ D$ LLc Mt5I$Ht,HHuf[X9t/HtH;HuIu H!e# H H[]A\ @ He# H H[]A\ @ U1SHHH5Ԋ HHT$AU1u H[]fH|$ōEv3HCHt*HHu f W9t'HtH;HuHzd# H H[] He# H HHcWHZ USHHH8HFHP`HtG t>H0 t4Hd# H05^HHtMHx_HOHH8H[]fH;d# tWHPHd# H5
F 1H81IWH8H[]HD$WHHt$uc C HHH D s HL$ HT$(LL$LD$dZx(Ht$H~{H|$u H{H|$(VH 1x1H[UHH`HPH|$ HL$(G1f D 4 @4HHL$H9T$"H= 1UH D H\$Hl$HLd$Ll$HLt$HXH~HG`Ht
H;=\c# F H uH5!% H9t
[ HAD L HCH HOH5 HHVb# E1H81UH H0 _Hcb# HH0 \HH H HRILH\$0Hl$8Ld$@Ll$HLt$PHXf D Ha# H5 E1H8a D HCH5C E1HPHa# H81THD$YUHHt$u7 HEHt/HH: t&1 @ HH< uHC D E1A1 @ 1Hm]bHI"HtLHm Hu AHt:Lu Mt1LSA9uLWHH HL\f D LYHI$HHI$: HCH tyHNH5L H%fHEHtuH H8 tl1 @ HH< uHL$ HT$(LL$LD$HVH|$H11XaI!H`# H5 E1H8W_1)aHIH|$ Ll$(1 HH9\$HD$ILHHHL@_uI$HHI$>ID$LE1P0t ID$LP0AWAAVAUATUSHHHFH HA E1LR`HI MQ M 1ff D HI9~_HL4VHH 1HDKH HHLT^HHHHuHCHHP0I9fI$HHI$u ID$LP0HL[]A\A]A^A_fHIeVHI1Lt_HI" HtHHHHtTMu D IE HHIE kIELP0\ @ IE HHIE uIELP0 HCHP01HD/HtH1L=]hIE HHIE SIELP0D @ HHH
"p% HLD$ H< 1ID$ q]1t
H4$|$ H AWIAVAUATUHSHHD$ HT$HɉT$ HVQLcD$$O$'|$ T$$DkD$AՍZI1Hc-OHts~oMHx$L
E1M)U уAA WHE9~'M9s"HLf D 2H@1HL9rLAHA9uHH[]A\A]A^A_ËT$KL$ʉ |$1҅IHc1]HD$1H|$ L$tX D$$E1LAL)L|$0E)ID$ L- HT$(D$D;D$͉D$< f D DD$D$< DD$H1HcMHDD$ E D9 HL$0LL$(LX$EHfIcAЃAT At5 ASA3ID9~*L9s%LHH :H@>HL9rHMADD)A9~D9HEHct$H|$H[ZD9~(AD$E)D;D$A@D$$B@HD$OHL$HHHH7HQHHD$R0HD$ L% D$$ Mafff. UHSH(HH$HGHD$HGHHD$d]1ut$H|$HH([]fSH HD$ HH$HGHD$HGHHD$]ue|$v^H|$t$H
~ 1 HH|$t$\HD$t6H=; 1OH|$HVHD$H [ HY# H H [ SHj~ HH
e% HHH0H HD$ HCLL$ LD$,D$, H$HCHD$HC HD$1Y1u
H0[ HCHH$HCHD$HC HD$[u"HL$ T$,t$H|$cH0[ D H9X# H5z~ H8W1fffff. SH} HH
^d% HHHHV~ LD$ H$I1D$ BX1ts H{H $T$ H[H\$Hl$HLd$H(1D$ HHT$ 1 Vt$11% H\$Hl$Ld$ H(f D Dd$ 1DHJHtqHH$DH{HT$DHUt%H$HHHHuH<$HGP0 D t$H9u H$tH^Vyf. 1Wf HHRuHhW# H H H9% 11H H\$Hl$HLd$H8HHT$H5| 1HHD$ D$ Fu 1H\$ Hl$(Ld$0H8f D H{D $HT$ LD$11Qt11% D Dd$ 1IcHHHtHHD$|CH{D $HT$LD$DHOQt+HT$HHHHuH|$HGP0f Hct$H9u
HD$2H|$Ty f SHHH5{ 1HHT$HHD$ vE1uH[ H{$Ht$OuHU# H H[f. 11~% @ HHcEuHxU# H H HI% 11H SH-% HHH5 { 1H HL$D1u H [ D H{/KHHtW11H=-% .% HtHXH [ HT# H56 HD$ H:HD$SHD$ D 11% @ SH+% HHH5jz 1HHL$ D1u H[ D HD$H{HpCuHKT# H H[Ð11 % @ HHGHIHtHHS# H5+6 H:HD$RHD$ffffff. HHJHI SHH@u H{fHHt!pHx[E @ [11Hl% f[H= 1qEHH3MHH7I SHH=e*% LH59*% HKHtHX[f D SL
% HH
HH5x HPHD$LHT$@LD$8HD$ HD$HD$(HD$HD$0HD$HD$ H$1OB1tGHD$81H{LL$(LD$0Ht$@HHHD$LHEHL$ $H CHtH HP[f. 1@% f D SH
HHH5@x H@HD$1tH{Ht$IHcDH[fffff. HHBHHD HHAuHN# H H Hy% H=t 1HfAUIHATUSHHHD$ ?LHI 1HAHHqM# HL$H5t 1H= HE HHHE HD$1Ht
1H;M# @LH߾ }AHCI}HډIKt@LBHHHHu
HCHP0H=t 1x% H[]A\A] D LXBHHHHt9HbM# H H[]A\A] HH @ HEHP0+HCHP0 @ HU 1HHHU uHEHP01ffffff. HH:tHL# H H H% H=Is H @ HH=tHL# H H Hi% H= s H @ HH#LH8B HH?uH`K# H H HK# H H HHs9uH K# H H HK# H H HHCAuHJ# H H HiK# H H SHHHHFHHHHt4uHJ# H H[ HK# H H[ HSD$HR0D$ @ HHc:uH0J# H H HJ# H H HHHuHI# H H HyJ# H H HH3JuHI# H H H9J# H H HH6uHpI# H H HI# H H HHcKuH0I# H H HI# H H HH6uHH# H H HyI# H H HHc6uHH# H H H9I# H H HH=uHpH# H H HH# H H HHcAuHI# H H Hي% 11H HHHǀ H*H;fffff. HHHh H*H^;fffff. UHSHHHH5 H# H9tD?@u;HC uNH; GH# teHPHG# H5* H81:1H[]HAH,HE H [] H(?HE H [] ;GHE H\$Ld$HLl$Hl$IH8HHD$ H$ yEHI 1H ;HHL$LH% H5 n 1IH6 HE HHHE HL :H =HHD$IuH$HHxCt.H;HHHHu
HCHP011% #H;HHHHtIHzF# H H\$Hl$ Ld$(Ll$0H8 D HH
@ HEHP0;HCHP0 @ HU 1HHHU uHEHP01ffffff. Hl$Ld$HLl$H\$ILt$HHxHD$H HD$@ HD$8 HD$0 HD$( CHI[ 1H\9HHD$8LD# HL$HLL$@H% H5hl HD$H HHD$HD$0H$15) HHHH HE# E1H9D$@HL A8H+;HHD$HIuLD$8HL$0IDHxHD$(H$ HD$6t8H9HHHHu
HCHP011|$(1% & D H9HHHHtQH|$(w:H\$PHl$XLd$`Ll$hLt$pHxf HE H HCHP0HCHP0 @ H1HHHuHCHP01느Hl$Ld$HLl$H\$ILt$HHXHD$( HD$ HD$ HD$ AHI4 1HU7HHD$LB# HL$(LL$ H% H5pj H$H13 HHHH H&C# E1H9D$ HL A6H:9HHD$(IuHL$LL$IDHx7t9H7HHHHu
HCHP011|$1Є% 'f D H7HHHHtQH|$8H\$0Hl$8Ld$@Ll$HLt$PHXf HE H HCHP0 HCHP0 @ H1HHHuHCHP01느SH
L% HHHHi H1LD$ D$ D$ A1t.DL$ HD$H{1EHE3DD$ EuHcr1H[ @ \$Hc\1H=h H1YCH[ SLHH
L% HHH Hh HD$ LL$D$ HD$ H$1A1t Ht$Ht H{T$ 8=7H [ @HHD$f SHHH5 h 1HHT$01u
H[ @ H{Ht$:tH?# H H[ D Hy@# H H[ HHC9Hh6 H2HtHHf9f D HY@# H HH8HtH
6HtHH% 1HH?# H5;" H:HD$>HD$ffffff. Hl$Ld$HLl$Lt$IH\$L|$HxL%?# HHD$8 HD$0 Ld$(=HIU 1H&3HHD$(HT$8L
LD$0H
vH5f H$H1.u=HHHH 1H\$HHl$PLd$XLl$`Lt$hL|$pHx D HHHH HD$0Hw LxHD$(L9 H@HD$HL d2 Hw7HH Ht$8Hn/D$tfHt$8H=! 1j% HE HHHE H;DT$E I$Lf. HE H +4IvHLI=D$u1L2 HCHP0HD$0Hnf D [9=uH|$H ;D$tyH=+d 1% f HEHP0$[-D$f D /I HCHP01 5HD$mIvHL=D$11% SL
% HH
G% HHH H5d HD$ LL$D$ HD$ H$1w<1uH [f HD$H{T$ HpHx68HtHJH [ 1`~% f D H\$Hl$HLd$H(HLL$ HH
HG% Hc 1ID$ ;1uH\$Hl$Ld$ H( H<$.HHt_H
;# 11H(HIt^ H=^ H=] H=] H=^ ffffff. SHH5 ^ 1HHT$HHD$ H$ $u
1HH[f1@ &HHtH!Htҋ $HT$Hƿ )t11v% H SHH5] 1HHT$HHD$ H$ #u
1HH[f1 D&HHtH$!Htҋ $HT$Hƿ *)t11u% H SHH5
] 1HHT$HHD$ H$ a#u
1HH[f1 %HHtH Htҋ $HT$Hƿ (t11du% H SHH5\ 1HHT$HHD$ H$ "u
1HH[f1 $%HHtH Htҋ $HT$Hƿ
(t11t% H UHSHHH~H5i$ H9t *t{HuHtZM tS 9v H[] S t99ѸrHt+H{Ht"H9(f D H{ uH1[] H1# H5g[ H80 H\$HHl$1H0 HHt* "HHEt,E HE HE( HH\$Hl$H H@ Hs% H\$1Hl$1Hfff. AVAUIHATUHSHPHD$H HD$@ HD$8 HD$0 HD$( )/HIt 1H$HHD$8LV0# HL$HLL$@HM$ H5UZ HD$HzHHD$HD$0H$1r : HHHH HL Lt$@R$H=&% 11HHH &IHD$H1L;5E0# IuILD$8HL$0HxHD$(HD$HEH$!tBL"%HHHHu
HCHP0H|$(11r% HP[]A\A]A^ L$HHHHtqHt$(H=LY H11HP[]A\A]A^f D HE H HCHP0f HHHHt HP1[]A\A]A^fHCHP0HCHP01f D Hl$HH\$1H0 HHt7 E HHCt @ t$ H|$H
I 1AHHHH=0N H1zHU HHHU tHl HUHHD$R0HD$fUSHHHGHHL$ HD$(HO HL$0t(H|$ .'tBH C$# HHHH[] D wH
H 1H|HHHH[] 1$HHtL$0w1f D H)L$0HD$(CHH( L$0vHD$ HT$(H$HD$0HT$HD$BxD$9sL$f D A A!A.ED$ t$A@H|1rH H9D$uDD$fffff. HG H\$Hl$Ld$Ll$HLt$L|$HxHD$(HD$(HLL$0L{$ H
4% HD$HD$8H HD$0 D$< HD$HD$I9I$HHI$ID$LP0ID$LP0JIFLP0IFLP0\f D H;; H8HLL$,HLD$ HD$HD$H@ H
(% HD$ D$, H$11tHT$t$,H|$ FH8ÐAUHIATU1SHhHt$8HT$@HL$HLD$PLL$Xu< @ Ht-%uI9 1Ҁx%HHu HHI H$ HD$ HD$HD$0HD$ ~`1- @ HD$ T$HHLHHH9}/T$/vHD$HPHT$f D H7 L
HH LHHHHHtZI$HHI$tHh[]A\A]f D IT$LHD$R0HD$Hh[]A\A] Hh1[]A\A] HSHHD$R0HD$I$HHI$uID$LP01f. AWAVAUATI1USHHH At$ I|$H
8 VHI Hr HI~xE1 D IM9~eLL
1HI譇H| HHHD$HT$? I$HHI$uID$ILP0M9IHHIf HH[]A\A]A^A_f D LhHI H=^= HH1HI3 IE HHIE 1LۆHHt[HH(u,I$HHI$gID$LP0W HE HHHE uHEHP0 D MtI$HHI$tZHHHHty1 @ HHHHuHBHP0 IHHIuIFLP0 D ID$LP0 IELP0IFLP0HCH1P0IE HHIE RIELP0C D H\$Hl$HLd$Ll$HLt$L|$HHHLD$ H
% H4 1D$ u/1HH\$Hl$ Ld$(Ll$0Lt$8L|$@HH 1HHtHCH LcM L$ Ht5 H5N4 1LHI@ HHI~#E1LLIHH M9IHHIN I$HHI$) HCH LcM |$ H5: tHH HH t$ I|$HI I$HHI$ LHI~"1ېHLH!HH6 I9IE HHIE oIELP0`HHHHu
HCHP0I$HHI$u ID$LP0HE HHHE HEH1P0fID$LP0IFLP0ID$LP0 H\$Hl$HLd$Ll$HLt$H8HLD$ H
N% HH2 1D$ u$1HH\$Hl$Ld$ Ll$(Lt$0H8Ð1YHHtHCH LcM |$ H58 蜊HI HH P t$ I|$ HIP I$HHI$ LHI~*E1 LLIAHHV M9IE HHIE q HCH LcM |$ H5#8 HH HH t$ I|$GHI I$HHI$ L HI~%1 @ HLHHHI9IE HHIE JIELP0;IE HHIE u IELP0fI$HHI$u ID$LP0HE HHHE HEH1P0f D ID$LP0mHHHHuHCHP0ID$LP0fIELP0ff. AWAVAUATUSHHH|$0HcHH HD$0HcxHHN H|$01rHI> H|$01JrHIN H|$01rHI H|$01qHI> H|$01HD$mqHILD$\ H|$01LD$HD$qHILD$LL$P H|$01LD$LL$HD$E1p1HHD$8LD$LL$LT$ H|$01Wp1HILD$LL$LT$Z H=3 1HLD$LL$LT$4
HD$(HHLD$LL$LT$L\$(U 1HHHD$ # HH HL$ H
HE L HL$ HI$L HL$ HIL HL$ HI LD$HL$ LHLD$ I LD$LL$HL$ LHwLL$ ILL$LT$HL$ LHOLT$ ILT$HL$ HT$8H*HT$8 HLHL$ H IE HL$ L\$(HLB
HHD$0HL$ LD$LL$LT$L\$( IHHIu2ICLHL$ LD$LL$LT$P0LT$LL$LD$HL$ HtHHHH HtHHHH HtHE HHHE MtI$HHI$ MtIHHI MtIHHI3 MtI HHI K MtIHHI MtIHHI H|$8 tHT$8HHHH MtIE HHIE u
IELP0HD$0HH[]A\A]A^A_ E1HD$8 E1E1E1E1E1E11HD$0 fE1HD$8 E1E1E1E1E1E111 @ IALLT$P0LT$ IBLP0 f HBHP0&HAHLD$LL$LT$P0LT$LL$LD$ HCHLD$LL$LT$P0LT$LL$LD$ HEHLD$LL$LT$P0LT$LL$LD$ ID$LLD$LL$LT$P0LT$LL$LD$fIFLLD$LL$LT$P0LT$LL$LD$ IGLLD$LL$LT$P0LT$LL$LD$ I@LLL$LT$P0LT$LL$ D E1HD$8 E1E1E11 @ E1HD$8 E1E1E1E1E11f D E1HD$8 E1E1E1E11E1HD$8 E1E11 MHD$0 f E1HD$8 E11zf. E1HD$8 1]ffff. H\$Ld$ILl$Lt$IHl$H(IeHH H5& 1H1HHj LrHI~ HL[H LHL HHHH HE HHHE I$1HHI$t!H $Hl$Ld$Ll$Lt$ H( @ ID$LP01АHA# H5 LH81HHHHt~HE HHHE t]I$HHI$t3yf. HEHP0MHCHP0(ID$LP0; @ HEHP0 @ HCHP0sf HHHHyHCHP0 HHHHt)HE HHHE @HEHP0fHCHP0 @ H\$Hl$HLl$L|$HLd$Lt$HXLD$LL$IHH5# IH9t
S HHHD$e HHI H5?$ 1H1>HI LHI H|$LH H|$LLx H|$LL` H|$LLH Mt LHHH9 1I$HHI$ HtHHHH IHHI IU 1HHIU uIELP01f D H\$(Hl$0Ld$8Ll$@Lt$HL|$PHX D HHHF # H5w HH81I$HHI$ IHHI IE HHIE k HHLI| $HHtH|$LHI$HHI$\ HHHHcHCHP0Tf IFLP0OID$LP0+HxHH6" H5G* H81 ID$LP08IFLP0THCHP01H" H5 H8JHI$HHI$ID$LP0 I$HHI$tCIHHIIFLP0f. IELP0ID$LP0ID$LP0ffffff. AWAVIAUATUSHHGH HI HgHI L(H@ LAD$ID$ uHL[]A\A]A^A_ @ HcLH4RH
HID$C E\$1L=$ Ef. A9l$~HcLHHL$HxHHL$L9tH5[$ HL$tE{(u?H4IHSLHIt$~uAHHHHuHCHP0| @ H" H$ H5+ H81 HHHHt1LE1- HCHP0 @ H" H5 E1H811E1>% 1L1LE1o D H\$Hl$H(HHT$HH5 ' 1HD$ u1H\$Hl$ H( H|$HHtH{H:HptH]" H H" H ff. Hl$Ld$HH\$HHAu"1HHl$H $Ld$Hf. 11H=e$ $ HHtŋE CEC EHE&HHCt UHuHDc( HHHHu
HCHP0H $Hl$Ld$HH "fHGHt/PtHx t1H H" H @ HGH5 HPH*" H81 H Hfffff. H fH fSL
$ HH
.HH5% H@HD$(HT$8LD$0HD$( H$11tBHD$(HS1H|$8HHHD$0HXHHEH\$Iu HH@[ D 11;% H@[ HH1 D H01 D H1 D H\$Hl$HLd$Ll$HLt$H8HLD$ H
% H 1D$ u$1HH\$Hl$Ld$ Ll$(Lt$0H8Ð1HHtH{1HI~ |$ H5# *uHIF HHS t$ I|$HI I$HHI$I LqHI~(E1f D LLIHHM9IE HHIE H{01QHI |$ H5# etHI HHN t$ I|$HIQ I$HHI$ LHI~#E1LLIHH&M9IE HHIE H{H1HI |$ H5K" sHH HH% t$ I|$HI I$HHI$ LHI~#1fHLHQHHfI9IE HHIE IELP0{ D IE HHIE uIELP0 D I$HHI$u ID$LP0HE HHHE #HEH1P0f D ID$LP0ID$LP0\IELP0HHHHvHCHP0gID$LP0IELP0TAVHAUAATUS\ OQ H F !HIg H@11H8 t HH8 uHcHI$ I^H;H 1At8su [Ht6LHHcHH;H AuHu D I$HHI$tLE1[]LA\A]A^ At*A tHCH[H@ ffff. SHHHtHCH[H@ ffff. SHHHH u_H58" H9t 6trHH H5 1HFHHHHuHSHHD$R0HD$H[ D HH5M HH1Hu D HQ" H5 H81f D SHHHt
iH{HtHHCH[H@ fATH
$ USHHHH H H$ L$ L$ HDŽ$ HDŽ$ H$1HDŽ$ O H$ H6 H}H5$ H9t H$ HL$ M I|$H5X$ H9tf L$ IH$ H HxH5 $ H9tT H$ HH$ H$ tH$ g Hx" H5 H8H 1[]A\ H$ H$ H$ H$ HDŽ$ B f. H []A\ H$ ks H$ H$ H$ HDŽ$ uH$ HD$hH$ D$pHD$` H$ H$ H$ H$ HDŽ$ r:H$ L$ H$ H$ $ 4f D 1E1 1If H$ ZH$ KH5" HH1 H" H5B H8H" H5R H8eH" H5b H8EH$ H$ H$ H$ $ @ HD$ HU Ht$HHT$HUHT$ HUHT$(I$HT$0IT$HT$8IT$HT$@HHT$HHPHT$PH@HD$XH1 HHHH
b$ HLL$HH:~ 1Hu - D Ht#HH9H<HtH HA" H5 H8J1H H\$Hl$HLd$Ll$HLt$L|$HhH~HG`Ht
H;=7" O H uH5$ H9t
HcjA? ? HCH HH5 HH1" E1H81dCfH0 dHC" HH0HH H HILH\$8Hl$@Ld$HLl$PLt$XL|$`Hhf H" H5X E1H8 D HCH5 E1HPHo" H81HD$1HHt$u/ HU 1H: t @ HH< uHC D E1A1IHI.HtEHm HtHuHuLHI$HHI$I HCH HH5: H8LH HL4HE 1H8 tf D HH< uHL$ HT$(LL$LD$HH|$H-10IH" H5 E1H8/HIH|$ Ll$(1 @ HH9\$HD$ILH.HHL uI$HHI$>ID$LE1P0tID$LP0 AWAVIAUATUSHHH I~ 1L;HxHH D H̴$ H9tH?w LH
HD$8P 1H|$8 HD$@ L|$@ f D HH H9l$8 IFLHH@hPHxIHH$ H9tH{ H{11FHI IT$H{H M,I$LHHI$eIT$LL|$0R0HD$0K H HH
~H$ LL$hLD$`HL$XHT$PHt$HHD$ H$ H|$@HD$H$ HD$HD$xHD$HD$pH$1H| 1% EHEH Il 11% I$HHI$ HĨ []A\A]A^A_f. 11gHtHHSH@HC 1 ID$H5 HHHH" H81yHHHz8 tH HuHH= % UH1" HL$8H5
H81(ID$LP0HPH " H5 H81Sff. H\$Hl$HHH~HH5a$ H9t 7t#HsH}H\$Hl$Hx H" H5O H8H\$Hl$Hf D AWAVAUATUSH8 dH%( H$( 1HHD$ L/M I] H HD$L|$ IA HD$ HD$ : )H" u @ HJ 9u
H*H E1H{HH HHP Le H EtKHH=O LID1HHHD$t[MtLI] H IE1 HH= LID1HUHtH|$H3H|$ uM 1H$( dH3%( H8 []A\A]A^A_ HXHItx1H=a HD$MtLH=A 1% MtLH߾ H= 1% WL1HH=A 1% 4ffffff. H AUATUSHH( dH%( H$ 1Hl D$ 芾) )H" u
HJ 9u L"M 1H{HHtnHHPLl$ L-tyHtHH߾ H=p 1
% H$ dH3%( H( []A\A] HtHkH= 1T
% f. HSMH= LLD1LHtHHD$HD$l @ HE1-HHH= 1 % = D H= |'fSHHCHt[ @ HCHH= [Hp1^fffff. fffff. H\$Hl$HLd$HHHHut1H $Hl$Ld$HHut Ht t D HH- t
}f D HsH}tHeHHZHHHAtj Hs$H}$cAHE HHHE t$HHHHt%A 1NWHEH @ P0HCHP0΄uHE HHHE u
HEHP0EuHHHHu
HCHP0Hb" H5 H8UHSHHH~H5I$ H9t
HMHSHH@ Ht Ht @ ) HH; 1f. HH< u@ HH; 1 HH< u9 HH*Ht\H;HtTHtOHu Hu#D @ HtIEpIt$pHHH$IExHD$I HD$D$ZA A$ IU(HtIt$(HmLcLH6HCH1P0U1HH=$ SHȡ$ HHt@ HHHCt:HC HsHuJHH[] 1HH[] @ Hw$ 11u$ HHtHx 11V$ HHHHuHCH1P0돐ATHIUSHo1HHu Gf D HWI9Ht'H9uH˹" H5̣ H8Ը[]1A\ D []A\HBH5 []HPH " A\H81鋬ff. HGHx0í HGHtHx(Ht驭f H" H @ U11HH=q$ SH$ HHt. dHt_HsHHu HH[]f1HH[] @ 11$ HHHHuHCH1P0f 1fff. HxH S HHP @Hl$Ld$HLl$H\$ILt$H(HA H$ H HPHpH=< 1(HHd H5* HDJ,HI HH蓳 HHHHX ID$H= tK~9H=Z
H=[ HH $Hl$Ld$Ll$Lt$ H(H=
tH=uI|$ HI HxHP HH I$HHI$T H5r HDb+HI HH諲 HHHH@HCHP01I|$( HHHH5 u 1I|$( HHHH5 a1 @ HCHP0It$H=S H\HH41f IHHItaHpHHHH]HCH1P0T @ I$HHI$uID$LP0fID$LP0IFLP0I$HHI$ID$L1P0ffff. HHǘ @AVAAUIATUHSHHǘ HH H5 HD)HIu HHʰB HHHH I}HP 迦HHS H51 HD!)HI HHj HHHH? I}Hh O8HI I}Hǀ 38HIG H= HL1蓞HH' I$HHI$ IE HHIE H5 HD[(HItSHH訯u$HHHH [H]A\A]A^ D I$HHI$uID$LP0 @ HHHHuHCHP0 1[H]A\A]A^fHCHP0rIELP0DHCHP0ID$LP0HCHP0[H]A\A]A^f. MtI$HHI$t2MqIE HHIE \IEL1P0 ID$LP0ff. H\$Hl$HLd$Ll$HLt$L|$HXHLD$ H
$ H3 1D$ su/1HH\$(Hl$0Ld$8Ll$@Lt$HL|$PHX 19HHtċ{YHI |$ H5 HZ&HIS HH裭 I$HHI$ CHHD$XAE1Hf. t$ HL.H| IE HHIE L;t$ELHDx IE9 H= 1DVHIZ Hr|$ H-H= HHH$辬H$ I$HHI$ I} OHIH t$ HHH$JHH $ I$HHI$H |$ 1,HIh HH& IH= 1LiHItqH艝|$ Hƃ,HtUHHH$֫H$ I$HHI$UID$LP0E D IELP0a1IE HHIE HtHHHHu
HAHP0Mt I$HHI$u ID$LP0HE HHHE HEH1P0 @ ID$LP0cID$LP0IELH $P0H $`ID$LP0C1E11HHHH HBHP01
E1IE HHIE #IELP0I$HHI$uID$LE1P01f H\$Hl$HLd$Ll$H8HLD$ HH
$ H
1D$ Mu!1HH\$Hl$ Ld$(Ll$0H8 1!HHtҋ|$ H5 y*HI HH袩 H{ LHI t$ HHǃNH I$HHI$ { ȣHIt`|$ H5D H!HI HHubI$HHI$ t$ HHH D HE HHHE HEH1P0f. IE HHIE tDMtI$HHI$uID$LP0ID$LP0ID$LP0^IELP0fffff. AVAUIATUSHHHtIE HHHH 贜HI HH=HH H 1H8 tf D HH< u萪HH L#I<$HtX1 @ HHHªI|Ht8H详Hu1LHE HHHE ta[]A\A]A^ÐI}ImHtHHHHt,L1ʬ[]A\A]1A^ HGP0 @ HGP0HEHP01L腬H" H5R H8:1L`^ SLi$ HH
^$ HHHH 1LL$Ѫ¸tHt$HH%H[ffffff. H\$Hl$1H1HH=$ $ HHt&HHx HH\$Hl$H D 1 @ HE HHHE uHEH1P0f SHHHt
HCH[H@ SHHHtΤHCH[H@ ffff. SH觡t H{jHCH[H@ f H\$Hl$H͟HeH蛞u Hب" H H\$Hl$H D HY" H H\$Hl$Hfffff. SHHHt~HCH[H@ ffff. SHHHtΦHCH[H@ ffff. AUL
Gv$ H
@$ ATUSHHHHw H HD$pL$ HDŽ$ HDŽ$ HD$x HD$ HHD$p HD$h HD$` HD$HD$xHD$H" HD$H$ H$1Z H$ H H}H5f$ H9t H$ HH$ H L`HD$xE1HtE1H;" AHl$hH|$pH1HtHL$hLD$`E LHD$$ Ǜ Hr11p$ HD$pHtHHHH H|$`Ht
יHĘ []A\A] H$ H$ HT$PHt$XHD$X { HĘ []A\A] HHD$`H8#HC1H<1$ *fH|$pHGP04 1qH" H5Z H8EHD$XHl$0HD$8HD$PD$@3 I8 SHH{辛HCH[H@ ffff. SHGH{1HCH[H@ ff. H\$Hl$HG(tjtMt H\$Hl$HHf w HH
T H\$Hl$1HG D H\$Hl$HH}H跒HHt/HHH茢HH\$Hl$Hf. H$ H\$1Hl$1H D SHHHt辘HCH[H@ ffff. HHLr$ HLL$Hˎ H
$ 1HD$ L1t"HD$Ht:HxuHv" H H D 11F$ Hf Hf D HHLrq$ HLL$Hc H
$ 1HD$ 輣1t"HD$Ht:HxuH" H H D 11$ Hf [Hf D H\$Hl$HLd$H8Hp$ HL$LL$LD$H5 1HD$ HD$ HD$ 1uH\$ Hl$(Ld$0H8 H|$H5 GHHtiH|$H5: .HHt+HHIHT$HHzL_u[HE HHHE t*HtHHHHt&H" H Sf D HEHP0 @ HCHP0 @ 11^$ HלuH\" H H H1$ 11Hffffff. HHH5 HT$ 1覑1uHf |$ guH" H H 11$ @ HHH5y HT$ 1F1uHf |$ ǑuH" H H 11^$ @ HHH51 HT$ HL$LD$1ܐ1u H T$t$|$ בuH " H H 11$ @ HHL2n$ HLL$H H
ܮ$ 1HD$ |1t"HD$Ht:Hx!uH" H H D 11v$ Hf Hf D HHLm$ HLL$HX H
\$ 1HD$ 1t"HD$Ht:HxAuH" H H D 11$ Hf 苑Hf D HguH" H H H" H HSHH5 1HHT$ %1u
H[ 1|$ @Yu-uH" H H[H" H H[ 11$ fff. H7uH4" H H H" H HAWH= AVAUATIUSHH H-˞" HDŽ$ HDŽ$ HDŽ$ DŽ$ DŽ$ Hl$xHD$p D$P HD$X D$` DŽ$ uH L$ H
z$ L% H߉$ HD$xHD$0HHD$(H$ HD$ H$ HD$H$ HD$H$ HD$H H$I1y1
H9l$xH$ H$ T$`HD$X蔓Ht$xH$ H进HI HKLC IE L96 H H@H H H HL$x11HH~ L|$P HL蹎Q I] I9u| M_ M @ R $ LL$@T$HUT$HLL$@ILLHL|$D$ T$1H$ Љ HI9< LcI$ H$ IIƅ\LHHD$@ LL$@I? H$ H5 HJ" 1H81趎H$ Ht褊H$ Ht蒊MtLUHtHHHD$pHĨ []A\A]A^A_ÐH= 1y$ HD$x f. HHH$ H5 K @ H" H5 1H8= 11'HHD$p#HT$pH5 H襛H=} 1$ H|$pHHD$p HHHHHGP0 H" H5 H8j D H=i 1i$ @ H" H5 H82g D H= 11$ N @ SH@DT$PEtt
XH@[fH|$ HL$DD$LL$D$ Ht$(T$0&HHHL$DD$LL$t@t H苇1 1҅t41 H{PƃH47<D@>HsDS9rHs1諕H߾ D$*D$H@[Hl$Ld$ILl$H\$H(I HH H5Q HHHt:LLH 1H\$Hl$Ld$Ll$ H(f 軚HH H5 HH蝅yHHHHu
HCHP0H" H5
H8ZHd" H5f H8=aHD" H5 H8 AH$" H5 H8! HHH5 HT$1薇u
1H H|$ޘt*Ht$H= yxHΗ" H H D H1" H5N H8z1H SHH
$ HHA 1HLL$ I(u 1H[ @ H<$+tt&ҋt$ =$ t1=% HEHHH5 HL$ H1蓆1u Hf D 1|$ H<$@ uHі" H H 11$ @ ATU SH0H$ HD$
H\$HD$ HD$ Ld$0HD$ HD$( fH+H Hlu L9uH<" H H0[]A\ H HHH=. HH1HL%$ H߂H= H1AHHHHt)HU 1HHHU uHEHP01u D HCHP0fff. H\$Hl$HLd$H(H5? HL$ 1Hu 1H\$Hl$Ld$ H(f. 1|$ H<$@LuH!" H H<$HHH,$D\$ HI H55 H=. HEHEH1蒊HL%$ H谁H= H1AHHHHt&HE HHHE -HEHP01 HCHP0UH5L HSH(HD$ D$ $ CHHtk
HHtiHhH5
HH H)1HHȂHtc1Hٗ1HHܓH(H[]fH踇HL 뺐
HSHuH" H5 1H8f @ H= k$ H(H[H]H" H5` 1H8.fff. HHH
b$ HLD$HT 1HD$ Ӓ1t
H|$Hfff. SHH
%$ HH 1H@LL$H|$tuH||HuH`" H5h H:HD$\HD$ D H|$6uHt$H=! 1J$ HGHtH|HtHH!$ 1HH" H5Kh H:HD$HD$ffffff. ATHUSHH ̓HI 1HqyHHT$H5 1HHu HE HHHE twLH߾ /yH{H|$HH规HItoHGzHHHHtHL {H H []A\f D HH^ @ HEHP0zf HCHP0 @ HyHHHHu
HCHP011$ H []A\ @ HU 1HHHU jHEHP01YHY" H5f H:HD$UHD$4ff. HW{H`" H H HHH5' HT$1su
1H H|$PvOyHt Hf1$ f D fffff. HHH5̴ HT$1Vsu
1H H|$ PvxHt Hx 1y1o$ D AWHH
ԕ$ HHn E1AVAUATUSH L" H$ L$ HDŽ$ DŽ$ HD$x H$1HD$p 轂uHĘ L[]A\A]A^A_ @ H$ zHIH蔃HHD$8 M HD$8HT$hHt$x1HT$@HT$pHt$HHD$0IHD$`HT$XHD$P= E1IHD$( HB h HyHIu H|$( HD$` HD$h tSH|$(H58 :pHH HT$@Ht$HH HE HHHE u
HEHP0MtQH5# LoHHt HT$PHt$XHV5 HE HHHE u
HEHP0HD$hHID$HD$`ID$ ID$Hc$ LM4$I I9 H$ HHD$x HD$h HD$p HD$` PnHH@ H~IH@H 1HIHL HHD$E1gHT$HD$(> HHD$> HHD$(,HT$I HE HHHE t H|$8E1o5HEHP0HHH" H5l HH81rH" H5l LHH81rHHH^" H5m HH81rHH>" H5Gm HH81rr]1 I1ILD$8MHI8MtIXHUI9~[HHcHHL$8H;9uGHt$8HHHD0@f. H0HH H9uHy t HIH9HLHI9HHH9u I9Ha11 D H\$0HHHCHHCHCH H\$0HL9uHq1pHIlHkMIuLd$8HE1Ht$( H$ LHD$x HD$p kHID$Ic $HD$hIt$HHt$`Il$~ 1 HH9|HD$hHH H~1 HH9uHH|$` u(L;t$(}
HII M9Q @ H {|H5 HkHHjHH|$`HD$pH9s(HHf 2H@1HH9wH)HHnHE HHHE YHEHP0Jf. H HT${H5@ H?kHHD$ jILL$hHD$xHT$HL$ L9s HHDHDHI9wI)LHHHHHHAHHT$P0HT$IMt
HI+@I HI H9gMHMtHt$(HHFH5Fj HHH{" H81 oIGH5qj HHHH{" H81nkI @ 15 @ H\$Hl$HLd$H8HHLL$HLD$ H
$ H 1D$ D$ b{u 1H\$ Hl$(Ld$0H8 t$ H= 1.}HIt1HHHH I$HHI$ T$H=j 1H|HI 11HHtiI$HHI$t0HHHHIHSHHD$R0HD$0 @ IT$LHD$R0HD$빐ID$LP0eI$HHI$u ID$LP0HHHHHHCHP01 HHHH=@Kff. H5$ 1 D HHHH=@ff. H5$ 1 D HHHH= ff. H5$ 1 D HHHH=& ff. H5$ 1 D HHHH=ff. HHHH=0 kff. H59$ 1 D HHHH=;ff. H5 $ 1 D HHHH=P ff. HHHH=1 ff. H5$ 1 D HHHH= ff. H5$ 1 D HHHH=`, ff. H5Y$ 1 D HHHH=p[ff. H5)$ 1 D HHHH=`w" +ff. H5$ 1 D HHHH=`8 ff. H5ɷ$ 1 D HHHH=C ff. H5$ 1 D HHHH=ff. H5i$ 1 D HHHH==kff. H59$ 1 D HHHH= ];ff. H5 $ 1 D HHHH=pe ff. H5ٶ$ 1 D HHHH=gff. H5$ 1 D HHHH= v" ff. H5y$ 1 D HHHH=O {ff. H5I$ 1 D UHH5 1SH(HL$HT$LD$HD$ HD$ eu1HH([] |$Wpu;Hl$H ߷$ 0kHtsHp H=hd 1HH(H[] 1gHHtHbHtL$HT$HƋ|$jk11k$ HY L% H=$ P AP 1QtH5ʶ$ ^ D AWHq HH
$ HHc AVAUATU1SHLD$H$I1tuHH[]A\A]A^A_Hl$HhH<$IhLIHuHH" Nt% L,$E1L=. L9 U t3H $L9sK:tGHf:t HI9wL9t6HU uHLWfHH cI HL9uʀ0tUqHHE 06v2HbHTs" HH+T$H5b H1H81fIcLYqHMHHE6.& bbHE1 fAVHAUATUSHHH$ ApHI 1HeHLD$ Hv?$ H5| 1HHaj HE HHHE LH߾ eHgIH$t$ HHxlHH LfHHHH DmIcoHItk1EbfHLLpA9~JHELcJ<
gHuHE1kHL[]A\A]A^f. HH @ HkHL[]A\A]A^ HEHP0HCHP0BLeHHHHu
HCHP011$ HI[]LA\A]A^fHE E1HHHE >HEHP0/f H\$Hl$HLd$H8H5ǡ HT$ 1_1t_|$ HcpHHts.ft$ HHqHAdEu7Hct$ HbHHD$^HD$H\$ Hl$(Ld$0H8 @ H^11$ @ _f Hn" H5^ H8jn1f D ATHUSHHHD$ TmHI 1HbHHL$H?$ H5 1H^ HE HHHE LH߾ bHeHHD$HHx[HIuOHcHHHHt11$ H[]A\ D HCHP0 @ HHG @ HpcHHHHt!L9|H[]A\HEHP0FHCHP0 @ HU 1HHHU sHEHP01b ATHUSHHHD$ kHI 1HaHHT$H5g 1H_] HE HHHE LH߾ BaHcH|$HHZiHIuRHZbHHHHt11I$ H[]A\ HCHP0 @ HHO @ HbHHHHt)L1/H[]A\f D HEHP0?HCHP0 @ HU 1HHHU hHEHP01W HHH5J HT$1HD$ \u 1HfH|$fmt2Ht$H= xH=6 !jHJl" H HÐHk" H5Κ H8j1H AWAVIAUATUSHHdH= D$ EHI$ MA t IF - LiLhLiHI: HuaHH Hx b1HLjHc[ HLiI~8 1f D HcLiH HkHLHciI9LLbdHH6 H@H H; j" H=Z 1E1scI$HHI$trHtHHHHtn|$ YHL[]A\A]A^A_ H=Y 1A cfLhHIH=Y 1E1bID$LP0 HCHP0 @ E1U H5 HAXHHtHWHY_IHE HHHE HEHP0fH=Y 1E1_bf D ]Htf|$ E1XH=X $bfHaHi" H H Sj_H]u H6^HOi" H [f H^[11H$ f. ATHH
{$ HH USHĀHD$PLL$xHD$x HD$p HD$h HD$@HD$XHD$` HD$X HD$P HD$8HnV$ HD$0HD$`HD$(H} HD$ HD$hHD$Hg HD$HD$pHD$HQ H$I1huE1HL[]A\ HD$XE1DL$PHL$`Ht$pH|$xHPHLEHT$hw\HHtu
^1HH=^W$ X$ HIthHXH\H|$xHtVH|$pHtVH|$hHtwVH|$`HthVHH@11x$ | H1_fff. UHH
ez$ HHW SHxHD$HLL$hHD$h HD$` HD$X HD$0HD$PHD$P HD$H HD$(H HD$ HD$XHD$H؈ HD$HD$`HD$H H$I1fu 1Hx[]f\DD$HHL$PHHT$XHt$`H|$hTu\Hl[H|$hHt=UH|$`Ht.UH|$XHt UH|$PHtUuHEf" H s @ 11$ fff. S\1HP]u HZHe" H [ HZ[11Hħ$ f. SHH H5ԗ 1HHL$>U1uH[[H|$Hndu*HbZH|$8THqe" H H[ H8ZH|$T11,$ H[fffff. SHH
H5K 1HHL$T1uH[ZH|$Hcu*HYH|$SHd" H H[ HYH|$nS11$ H[fffff. SHg^Ht"H5 HS`1Ht,HH[ aHAd" H5C H8c D [fff. ATHUSHHHD$ aHI 1HWHHT$H5" 1HoSw HE HHHE HL RWH|$H c" IH9 du!Hc" H5 H8Kb1H[]A\H= 责HHt H=HaHE HHHE tLHt$H=o H1[]A\ HH @ HEHP0/HEHP0 @ H=* $HHt$H=H aHE HHHE H= H= MtI$HHI$tzHHH[]A\f. HE HHHE (HEHP01f. H=z LH=BLNu D ID$LP0vHEHP09H\$Hl$H(HHT$H5+ 1HD$ CQ1uH\$Hl$ H( @ WH|$HbH߉\Vu H`" H H\$Hl$ H(f D Ha" H H\$Hl$ H(fffff. H\$Hl$H WH_HHt%HUHHl$H\$HV HUH$ H\$1Hl$1H D H\$Hl$1Ld$1HHH= $ "$ HHtrL`1HLPNuD H_dHHC@t^H}1KdHHCHtJHHl$H $Ld$H @ 11$ HHHHt1HCH1P0 D 1Lafff. HH PH\$Ld$HLt$Hl$HLl$L|$H HD$PL%_" HL
LD$XH
k$ HD$HH HD$X Ld$PAHD$HD$HHD$H HD$@ H$1^u9DH\$hHl$pLd$xL$ L$ L$ HĘ H|$X~yHH H|$HRLh11Gt- DXHHC HHHt$HLHED Z HD$PL9c LhH{E1E111LHD$ H$ MHHCk HUHu$H;Y AH= 1$ Mt/H|$P u'L] 1$ AH|$HHtLHHE HHHE HEHP0}f D H\" H5M H8r\H{M_ H{E1YHT$@HT$0t AH{Ht$0ZtIc[HHC H{XD$< aHIF IGH pHx1^ZHIF(r IH MHIF0S A Mf I$Hct$H{KHHEtDHSHHt\H$\HHE tHH[]Ð1H[H]H P @ HE HHHE uHEH1P0f 11>$ @ HxH0P AWH
R$ 1AVAUATUSHHHH~} H(LD$ D$ Yu1H(H[]A\A]A^A_ 1ZHH |$ H5 HI HH Us H{xHHIk H=̃ HH1fCHI |$ H5[ HTHI HHT I$HHI$0 IHHI
H{xH JHI |$ H5 HHI HH'Tg I$HHI$ |$ H5 HIl HHSH H{xH0NHI@ L$ H| H5{ H1PYHIg HOHI~#E1LLIQEHHfSM9IHHI I$HHI$/ 1HHI; HUH=Њ HI1gMHI |$ 1HHH HHRb I$HHI$ M# 1 H=u 1HLHI |$ 1HHIL HHcR I$HHI$ HLUL$ HS{ H5-z HI1WHH$ HdNHHD$~,E1 H<$LICHHQL9|$H$HHHHG 11nHItHHQuWHI9IE HHIE IELP0f D IFLP0ID$LP0IHHIu
IGLP0Mt:E1I$HHI$ Mt IHHIuIFLP0 @ HtHE HHHE trMfIE HHIE QIEL1P0B ID$LP0JI$HHI$t?E1f. HBHP0HEHP0 @ ID$LP06ID$LE1P0EE1E1ID$LP0E1ID$LP0ID$LP04IE HHIE uIELE1P0IFLP0jIE HHIE vIELE1E1P0oIHHIYIGLE1P0JHHHH4HCHE1P0% @ HHǨ `JAT11UHH= $ SP $ HH L`HxHS" HLRCuv HqWHHCxto1L^WHH tYH{0DHH tDCpH{` Cp#WHH t H[]A\ H=QC 1$ HHHHt
1H[]A\HCH1P0fH\$Hl$HLd$Ll$H8HLD$ HH
K$ H
v 1D$ MRu!1HH\$Hl$ Ld$(Ll$0H8 1!SHHtҋ{董|$ H5V HIKHI HHM MtI$HHI$* C= sx|$ H5 HHt0HHEMFHHHH f. HE HHHE HEH1P0f. = j = rSH5 uH5% |$ |HItHHL |$ HS 1/HIcHHxL H{HC|$ H5k HIHI HH6LunMtI$HHI$ HS(|$ H5 HIHHKuIHS0|$ H5 uHHyIE HHIE u
IELP0MI$HHI$kID$LP0[tAH5w |$ )HI=HHRK2ID$LP0H5V ID$LP0HCHP0HHxCB H\$Hl$ Ld$H HH$ dH%( H$x 1HHu tPH}H
t 1H$x dH3%( H$ H$ L$ HĘ fDŽ$
HuH{h @ H2OuN HHNuHRDfm uPfDŽ$ HuH{l 2@fDŽ$ CHC $ mIffff. H v%HM" H5 x H81@1H HY Hc H D HHk' HH HH; HH HHK&ff. HHHt O H@H5Mg HPHL" H818@ H\$Ld$E1Hl$HHHtBm-HHHHuZHtHE HHHE ttHtHHHHt LH $Hl$Ld$Hf. HCHP0 @ Hu H IfHP$Hu$H=f 1zBIxfHEHP0 @ SHHHt Ht1[ HCH55f [HPHK" H81 ? HCHH=f [Hp1Afffff. H\$Hl$HLd$Ll$H8HLD$ HH
T$ H]o 1D$ Ku!1HH\$Hl$ Ld$(Ll$0H8 1qLHHtH{Ht;$HI |$ H5@ H茿HI HHF I$HHI$ HCHx0HI |$ H5~ H,HHtSHHyF I$HHI$ID$LP0IE HHIE u
IELP0I$HHI$u ID$LP0HE HHHE HEH1P0 ID$LP0 HHHHuHCHP0ffff. SH
S$ HHHH} H1LD$ D$ I1t8H{H T$ v2HCI" H5d H81<1 H[f. H1 HcH D ?? ) f D C f D HH 두HCH5%c HPHH" H81HLHFHII9HtI\fHX(H HH H(urHHHHuHCHP0ID$LP0E1ID$LP0IELP0IELP0=IFLP0'IHHIuIGLE1P0SI$HHI$ID$LP0 D Hl$H\$HLd$Ll$Lt$L|$HXH H=Gv 7HHD$ HH$!HHL$ LHL$=HIL$B 1HL$FHIL$ HL$3HIL$ 1HL$1HIHD$ L$ HG3HHHD$ L$tiLJ.HHD$=.LHD$0.HL$HT$H=1 H16L$HD$!f. 1E1E1E1E1HD$ I HHI & HtHHHH MtIE HHIE MtI$HHI$ MtIHHI MtIHHI HtHE HHHE u
HEHP0HD$H\$(Hl$0Ld$8Ll$@Lt$HL|$PHXf1E1HD$ D ID$LP0^ IFLP0_IGLP0gHCHP0I@LP0IELP01E1E1E1HD$ HGHH=Y H\$(Hl$0Ld$8Ll$@HpLt$H1L|$PHX5 D 1E1E1HD$ 1f. SHHHGHt8tH~$ H H[f Hxt$Ht$tHCHxH[ SH
H$ HHHHqr H1LD$ D$ @>1t t$ H\H[f D L|$H\$IHl$Ld$Ll$Lt$HhH 8 H=Gr 3HH I HQ=" H5. E1H810E1E1E1E1E11HD$( MtIE HHIE HtHE HHHE MtIHHI/ MtI$HHI$5 MtIHHItqMtI HHI t}MtIHHItyHtHHHHu
HCHP0HD$(H\$8Hl$@Ld$HLl$PLt$XL|$`Hh IFLL$P0L$xf I@LP0tIGLP0xIELL$LL$P0LL$L$ HEHL$LL$P0LL$L$ IALL$P0L$f ID$LL$P0L$ H'/H HHD$-HHLT$@ HLT$E1(H=i, H11LT$I1LLL$LT$HILL$LT$ HLL$LT$[-HILL$LT$ IH5D$ LL$LT$E1Hp:~HIHD$( LL$LT$ HHH$<6HIHD$( L$LL$LT$tUH'LHD$'LL$HD$ L'HL$HT$ H=n H1{0LT$LL$L$HD$(MIHHIIBLL$LL$P0LL$L$ E1k L3HIRHH\5HH;H'H=2n H1/E1IE @ HGHH=4T H\$8Hl$@Ld$HLl$PHpLt$X1L|$`Hh/ D E1E1E1HD$( E1E1E1E1E1E1HD$( E1E1HD$( fff. H\$Hl$HLd$Ll$HLt$L|$HXHLD$ H
iL$ H\ 1D$ 8u/1HH\$(Hl$0Ld$8Ll$@Lt$HL|$PHX 19HHtHCHt Hx+HI |$ H5l H蜬HI HH3 I$HHI$q 1H~HI |$ H5Le H?HI HH3O I$HHI$* H{H5 A$ HpzHItU|$ H5=l HҫHHt:HH 3
I$HHI$ID$LP0ufE1HE HHHE tlMtI$HHI$tbM>IE HHIE )IEL1P0 Hq6" H5' E1E1H81)HEHP0ID$LP0ID$LP0 HHI>HpH=j 1|,HI#|$ 1H袪HI HH12 IE HHIE L-HIE1 D IM9LL-|$ 1HIŃ$HHHHD$k1HT$ IE HHIE uIELP0ID$LP0IE HHIE ,IELE1P0 HHHHHCHE1P0IELP0HHHHHBHE1P0IHHIIFLP0ffffff. UHL# HH
D$ Hoi S1H(HD$ LL$D$ H$14u H(H[]f $HHt>Ht$HH%Ht7t$ H\H1H5H(H[] D 11^v$ H11Ov$ 1H]5| H\$Hl$HLd$Ll$HLt$L|$HXHLD$ H
>$ HsW 1D$ 3u/1HH\$(Hl$0Ld$8Ll$@Lt$HL|$PHX 1y4HHtH{HD HI |$ H58] H蕧HI HH. I$HHI$ Hc{ "HI |$ H5g H9HI~ HH.u^I$HHI$t=H{H`4? H} HcHID$LP0oID$LP0 IE HHIE tE11HE HHHE MtI$HHI$ HtHHHH M[IE HHIE FIEL1P07 @ IEL1E1P0r @ H{Hk#HIPL$ HwV H5QU H12HI(H)HI~&1 D HLH HH-I9IE HHIE I$HHI$zID$LP0j |$ H5e pHI HH, HsH=S 12HI 11H=HI IE HHIE m |$ LHH H(HI~*E1 LHI HH+M9HHHHHCHP0r H{H++HIL$ HT H5S H1C1HIxH'HIr1ېHLHA HHV+I9K @ H{H HI L$ HGT H5!S H10HIH_'HI1ېHLH HH*I9 @ H{H-HIL$ HS H5R H1C0HIxH&HIr1ېHLHA HHV*I9K @ |$ H5qc HI1 HH!* HsH=P 1W0HIP 11HoHIJ IE HHIE |$ LHH H &HIE1 @ LHIiHH~)M9 @ |$ H5b HIY HHI)1 HsH=O 1/HIx 11H'}HIr IE HHIE |$ LHH: H3%HIE1 @ LHIHH(M9 @ |$ H5a HHI HHq(Y HsH=N 1.HI 11H{HI IE HHIE c |$ LHHb H[$HIE1 @ LHIHH'M9 @ |$ H5a pHI HH' HCHHPH$HPHT$H@ HD$. HD+" H5Q E11E1H8*6HEHP0H=# H=# . H# aH# HpHH=w# BJ H={# . HV# !HJ# HpHH=#
H=# . H# H# HpH~H=7# H=;# . H# H
# HpH>H=# H=# . Hv# aHj# HpH H=# BJ H=# . H# !H# HpH H=W#
H=[# . H6# H*# HpH~ H=# H=# . H# H# HpH> H=# H=# . H# aH# HpHH=w# BJ H={# . HV# !HJ# HpHH=#
H=# . H# H# HpH~H=7# H=;# . H# H
# HpH>H=# H=# . Hv# aHj# HpHH=# B J H=# . H# !H# HpHH=W#
H=[# . H6# H*# HpH~H=# H=# . H# H# HpH>H=# H=# . H# aH# HpHH=w# BJ H={# . HV# !HJ# HpHH=#
H=# . H# H# HpH~H=7# H=;# . H# H
# HpH>H=# H=# . Hv# aHj# HpHH=# BJ H=# . H# !H# HpHH=W#
H=[# . H6# H*# HpH~H=# H=# . H# H# HpH>H=# H=# . H# aH# HpHH=w# BJ H={# . HV# !HJ# HpHH=#
H=# . H# H# HpH~H=7# H=;# . H# H
# HpH>H=# H=# . Hv# aHj# HpHH= $ BJ H= $ . H $ !H $ HpHH=W$
H=[$ . H6$ H*$ HpH~H=$ H=$ . H$ H$ HpH>H=$ 1H5B HH uzHH H5B H: H HHH " H
B H5 H8H1[]HE HHHE t/HHHHt,H[]f HEHP0HEHP0HCHH@0H[]HE HHHE tPHHHHuHCHH@0H[]f D HHHHuHCHH@0H[]fHEHP0H5A H8H0 H5A HHH H5A HHtYHHHC " H
{A H5m H8H1[]HUHH " H5$6 H8H1[]dH54A 1HH#H H5A HKHtYHHH
" H
@ H5 H8H1[]HHH|
" H55 H8H1[]H5@ HiHH H5@ HHtYHTHH
" H
\@ H5< H8H1[]\H$HH " H54 H8H1[]3H5@ HWH H H5? HHtYHHHx " H
? H5 H8H1[]HHHH " H5Y4 H8H1[]H5? H5HU H H5f? H}HtYH HH" H
@? H5 H8H1[](HHH" H53 H8H1[]H5> H#HH H5> HHtYHHHD" H
> H5n H8H1[]HVHH" H5%3 H8H1[]eH5o> HH!H H5I> HIHtYHHH" H
#> H5 H8H1[]HHHz" H52 H8H1[]H5= HgHH H5= HHtYHRHH" H
= H5: H8H1[]ZH"HH" H51 H8H1[]1H5M= HUHH H52= HHtYH HHv" H
= H5 H8H1[]H HHF" H5W1 H8H1[]H5< H3HSH H5< H{HtYH HH" H
z< H5 H8H1[]&HHH" H50 H8H1[]H53< H!HH H5< HHtYHHHB" H
; H5l H8H1[]HTHH" H5#0 H8H1[]cH5; HH H H5; HGHtYHHH" H
b; H5 H8H1[]HHHx" H5/ H8H1[]H5; HeHH H5; H HtYHPHH" H
: H58 H8H1[]XH HH" H5. H8H1[]/H5: 1HVHH H5: H HtYHHHw" H
^: H5 H8H1[]HHHG" H5X. H8H1[]H5: H4HTH H59 H|HtYH HH" H
9 H5 H8H1[]'HHH" H5- H8H1[]H59 H"HH H5x9 HHtYHHHC" H
R9 H5m H8H1[]HUHH" H5$- H8H1[]dH5 9 H H H H58 HHHtYHHH" H
8 H5 H8H1[]HHHy" H5, H8H1[]H58 HfHH H5h8 HHtYHQHH" H
B8 H59 H8H1[]YH!HH " H5+ H8H1[]0H57 HTHH H57 HHtYHHHu " H
7 H5 H8H1[]HHHE " H5V+ H8H1[]H5x7 H2HRH H5[7 HzHtYH HH! H
57 H5 H8H1[]%HHH! H5* H8H1[]H56 1H#HH H56 HHtYHHHD! H
6 H5n H8H1[]HVHH! H5%* H8H1[]eH5j6 HH!H H5P6 HIHtYHHH! H
*6 H5 H8H1[]HHHz! H5) H8H1[]H55 HgHH H55 HHtYHRHH! H
5 H5: H8H1[]ZH"HH! H5( H8H1[]1H5f5 HUHH H5H5 HHtYHHHv! H
"5 H5 H8H1[]HHHF! H5W( H8H1[]H54 H3HSH H54 H{HtYH HH! H
4 H5 H8H1[]&HHH! H5' H8H1[]H5V4 H!HH H5A4 HHtYHHHB! H
4 H5l H8H1[]HTHH! H5#' H8H1[]cH53 HH H H53 HGHtYHHH! H
3 H5 H8H1[]HHHx! H5& H8H1[]H5P3 HeHH H5;3 HHtYHPHH! H
3 H58 H8H1[]XH HH! H5% H8H1[]/H52 HSHH H5s HHtYHHHt! H
M H5 H8H1[]HHHD! H5U% H8H1[]H5 H1HQH H52 HyHtYH HH! H
1 H5 H8H1[]$HHH! H5$ H8H1[]H51
H HH H51 HHtYHHH@! H
r1 H5j H8H1[]HRHH! H5!$ H8H1[]aH5+1 HH H H5 HEHtYHHH! H
H5 H8H1[]HHHv! H5# H8H1[]H5X 1HfHH H5 HHtYHQHH! H
e H59 H8H1[]YH!HH! H5" H8H1[]0H5 HTHH H5 HHtYHHHu! H
H5 H8H1[]HHHE! H5V" H8H1[]H5 H2HRH H5 HzHtYH HH! H
H5 H8H1[]%HHH! H5! H8H1[]H5 H HH H5 HHtYHHHA! H
H5k H8H1[]HSHH! H5"! H8H1[]bH5 HH H H5 HFHtYHHH! H
^ H5 H8H1[]HHHw! H5 H8H1[]H5 HdHH H5t HHtYHOHH
! H
N H57 H8H1[]WH HH! H5 H8H1[].H5 HRHH H5 HHtYHHHs! H
c H5 H8H1[]HHHC! H5T H8H1[]H5 @ H0HPH H5` HxHtYHHH! H
: H5 H8H1[]#HHH! H5 H8H1[]H5 H HH H5 HHtYHHH?! H
d H5i H8H1[]HQHH! H5 H8H1[]`H5 HH H H5L HDHtYHHH! H
& H5 H8H1[]HHHu! H5 H8H1[]H5 HbHH H5 HHtYHMHH ! H
H55 H8H1[]UH HH! H5 H8H1[],H5m HPHH H5 HHtYHHHq! H
H5 H8H1[]HHHA! H5R H8H1[]H5 H.HNH H5 HvHtYHHH! H
H5 H8H1[]!HHH! H5 H8H1[]H5~ H HH H5m HHtYHHH=! H
G H5g H8H1[]HOHH
! H5 H8H1[]^H5 HHH H5 HBHtYHHH! H
H5 H8H1[]HHHs! H5 H8H1[]H5 H`HH H5 HHtYHKHH ! H
a H53 H8H1[]SHHH! H5 H8H1[]*H5 HNHH H5 HHtYHHHo! H
H5 H8H1[]HHH?! H5P H8H1[]H5
H,HLH H5
HtHtYHHH! H
l
H5 H8H1[] HHH! H5 H8H1[]H5%
HHH H5
HHtYH}HH;! H
H5e H8H1[]HMHH ! H5 H8H1[]\H5 @ HHH H5 H@HtYHHH! H
H5 H8H1[]HHHq! H5 H8H1[]H5@ H^H~H H53 HHtYHIHH! H
H51 H8H1[]QHHH! H5 H8H1[](H5 HLHH H5 H HtYHHHm! H
H5 H8H1[]HHH=! H5N H8H1[]H5U H*HJH H5:# HrHtYHHH! H
# H5 H8H1[] HHH! H5 H8H1[]H5" HHH H5" HHtYH{HH9! H
" H5c H8H1[]HKHH ! H5 H8H1[]ZH5F" 1HHH H5)" HAHtYHHH! H
" H5 H8H1[]HHHr! H5 H8H1[]H5! H_HH H5! HHtYHJHH! H
u! H52 H8H1[]RHHH! H5 H8H1[])H5.! HMHH H5 ! H
HtYHHHn! H
H5 H8H1[]HHH>! H5O H8H1[]H5 H+HKH H5 HsHtYHHH! H
] H5 H8H1[] HHH! H5 H8H1[]H5 HHH H5 HHtYH|HH:! H
H5d H8H1[]HLHH
! H5 H8H1[][H5 1HHH H5g HBHtYHHH! H
A H5 H8H1[]HHHs! H5 H8H1[]H5 H`HH H5 HHtYHKHH ! H
H53 H8H1[]SHHH! H5 H8H1[]*H5g HNHH H5A HHtYHHHo! H
H5 H8H1[]HHH?! H5P H8H1[]H5 H,HLH H5 HtHtYHHH! H
H5 H8H1[] HHH! H5 H8H1[]H5F HHH H5 HHtYH}HH;! H
H5e H8H1[]HMHH ! H5 H8H1[]\H5 HHH H5 H@HtYHHH! H
f H5 H8H1[]HHHq! H5 H8H1[]H5 H^H~H H5 HHtYHIHH! H
H51 H8H1[]QHHH! H5
H8H1[](H5 HLHH H5u H HtYHHHm! H
O H5 H8H1[]HHH=! H5N
H8H1[]H5 H*HJH H5 HrHtYHHH! H
H5 H8H1[] HHH! H5 H8H1[]H5 HHH H5s HHtYH{HH9! H
M H5c H8H1[]HKHH ! H5 H8H1[]ZH5 H~HH H5 H>HtYHHH! H
H5 H8H1[]HHHo! H5 H8H1[]H5 H\H|H H5b HHtYHGHH! H
< H5/ H8H1[]OHHH! H5
H8H1[]&H5 1HMHH H5 H
HtYHHHn! H
H5 H8H1[]HHH>! H5O
H8H1[]H5k 1H.HNH H5\ HvHtYHHH! H
6 H5 H8H1[]!HHH! H5 H8H1[]H5 H HH H5 HHtYHHH=! H
H5g H8H1[]HOHH
! H5 H8H1[]^H5n HHH H5Y HBHtYHHH! H
3 H5 H8H1[]HHHs! H5 H8H1[]H5 H`HH H5 HHtYHKHH ! H
H53 H8H1[]SHHH! H5 H8H1[]*H5j HNHH H5W HHtYHHHo! H
1 H5 H8H1[]HHH?! H5P H8H1[]H5 1H/HOH H5 HwHtYHHH! H
H5 H8H1[]"HHH! H5 H8H1[]H5n H HH H5Z HHtYHHH>! H
4 H5h H8H1[]HPHH! H5 H8H1[]_H5 1HH H H5 HFHtYHHH! H
H5ѿ H8H1[]HHHw! H5 H8H1[]H5g HdHH H5M HHtYHOHH
! H
' H57 H8H1[]WH HH! H5 H8H1[].H5 HRHH H5 HHtYHHHs! H
H5 H8H1[]HHHC! H5T H8H1[]H59 H0HPH H53 HxHtYHHH! H
H5 H8H1[]#HHH! H5 H8H1[]H5 @ H HH H5 HHtYHHH?! H
H5i H8H1[]HQHH! H5 H8H1[]`H5O HH H H5G HDHtYHHH! H
! H5ϼ H8H1[]HHHu! H5 H8H1[]H5 HbHH H5 HHtYHMHH ! H
H55 H8H1[]UH HH! H5 H8H1[],H5g HPHH H5Y HHtYHHHq! H
3 H5 H8H1[]HHHA! H5R H8H1[]H5 H.HNH H5 HvHtYHHH! H
H5 H8H1[]!HHH! H5 H8H1[]H5w H HH H5b HHtYHHH=! H
< H5g H8H1[]HOHH
! H5 H8H1[]^H5 HHH H5 HBHtYHHH! H
H5 H8H1[]HHHs! H5 H8H1[]H5 H`HH H5h HHtYHKHH ! H
B H53 H8H1[]SHHH! H5 H8H1[]*H5 HNHH H5 HHtYHHHo! H
H5 H8H1[]HHH?! H5P H8H1[]H5 @ H,HLH H5 HtHtYHHH! H
H5 H8H1[] HHH! H5 H8H1[]H5 HHH H5" HHtYH}HH;! H
H5e H8H1[]HMHH ! H5 H8H1[]\H5 HHH H5 H@HtYHHH! H
H5˶ H8H1[]HHHq! H5 H8H1[]H5B H^H~H H5, HHtYHIHH! H
H51 H8H1[]QHHH! H5 H8H1[](H5 HLHH H5 H HtYHHHm! H
H5 H8H1[]HHH=! H5N H8H1[]H5H H*HJH H54 HrHtYHHH! H
H5 H8H1[] HHH! H5 H8H1[]H5 HHH H5 HHtYH{HH9! H
H5c H8H1[]HKHH ! H5 H8H1[]ZH5? H~HH H5; H>HtYHHH! H
H5ɳ H8H1[]HHHo! H5 H8H1[]H5 @ H\H|H H5 HHtYHGHH! H
H5/ H8H1[]OHHH! H5 H8H1[]&H5@ HJHH H5> H
HtYHHHk! H
H5 H8H1[]H}HH;! H5L H8H1[]H5 H(HH
$ vHIHy
$ Ld
$ H
H5 1H\L
E
$ L6
$ H
H5 Hs+L
$ L
$ H
H5 HBL
$ L $ H
| H5V HɿL
$ L $ H
K H5 HL
$ Lr $ H
H5 HgL
P $ LA $ H
H5 H~6L
$ L $ H
H5$ HML
$ L $ H
H5ѽ H ԾL
$ L $ H
V H5
H~HH $ iHIH| $ vLg $ H
d H5 HLL
E $ L6 $ H
3 H5 HcL
$ L $ H
H5] H2L
$ L
$ H
H58 HL
$ L
$ H
H5 HL
$ Lr
$ H
o H5 HWL
P
$ LA
$ H
> H5 Hn&L
$ L
$ H
H5 H=L
$ L $ H
H5 H ļHH $ HIH $ L $ H
K H5I 1HpL
y $ Lj $ H
H55 H?L
H $ L9 $ H
H5 HVL
$ L $ H
H5 H%ݻL
$ L$ H
H5 HL
$ L$ H
Y H5 H{L
$ Lu$ H
( H5 HJL
S$ LD$ H
H5k HaL
"$ L$ H
H5Q H0L
$ L$ H
H57 HL
$ L$ H
d H5
HL
$ L$ H
3 H5 HUL
^$ LO$ H
H5 Hl$L
-$ L $ H
H5
H;L
$ L$ H
H5 H
¹L
$ L$ H
o H5 HL
$ L$ H
> H5j H`L
i$ LZ$ H
H5A Hw/L
8$ L)$ H
H5 HFL
$ L$ H
H5 ! HL
$ L$ H
z H5 0 HL
$ L$ H
I H5 1 HkL
t$ Le$ H
H5 2 H:L
C$ L4$ H
H5 3 HQ L
$ L$ H
H5 @ H طL
$ L$ H
H5d A HL
$ L$ H
T H5G B HvL
$ Lp$ H
# H5* C HEL
N$ L?$ H
H5 D H\L
$ L$ H
H5 E H+L
$ L$ H
H5 F HL
$ L$ H
_ H5 G HL
$ L{$ H
. H5 HPL
Y$ LJ$ H
H5 Hg L
($ L$ H
H5c H6L
$ L$ H
H5> HL
$ L$ H
j H5 HԿL
$ L$ H
9 H5 H裿[L
d$ LU$ H
H5 Hr*L
3$ L$$ H
H5 HAL
$ L$ H
H5 HȴL
$ L$ H
u H5p ! H߾L
$ L$ H
D H5K " H设fL
o$ L`$ H
H5& # H}5L
>$ L/$ H
H5 $ HLL
$ L $ H
H5 % HӳL
$ L $ H
H5 0 HL
$ L $ H
O H5 1 H蹽qL
z $ Lk $ H
H5 2 H舽@L
I $ L: $ H
H5_ 3 HWL
$ L $ H
H5; 4 H&L
# L# H
H5 5 HL
# L# H
Z H5 6 Hļ|L
# Lv# H
) H5 @ H蓼KL
T# LE# H
H5 A HbL
## L# H
H5 B H1L
# L# H
H5s C H L
# L# H
e H5O D HϻL
# L# H
4 H53 E H螻VL
_# LP# H
H5 P Hm%L
.# L # H
H5 Q H<L
# L# H
H5 R H ðL
# L# H
p H5 S HںL
# L# H
? H5 H詺aL
j# L[# H
H5\ Hx0L
9# L*# H
H58 HGL
# L# H
H5 HίL
# L# H
{ H5 HL
# L# H
J H5 H费lL
u# Lf# H
H5 H胹;L
D# L5# H
H5 ! HR
L
# L# H
H5j " H!ٮL
# L# H
H5P 0 HL
# L# H
U H5- 1 H迸wL
# Lq# H
$ H5 2 H莸FL
O# L@# H
H5 @ H]L
# L# H
H5 A H,L
# L# H
H5 B HL
# L# H
` H5 P HʷL
# L|# H
/ H5| Q H虷QL
Z# LK# H
H5[ R Hh L
)# L# H
H5B ` H7L
# L# H
H5 a HL
# L# H
k H5 b HնL
# L# H
: H5 p H褶\L
e# LV# H
H5 q Hs+L
4# L%# H
H5 r HBL
# L# H
H5 U HɫL
# L# H
v H5\ V HL
# L# H
E H5; W H诵gL
p# La# H
H5" H~6L
?# L0# H
H5 HML
# L# H
H5 H ԪL
# L# H
H5 HL
# L# H
P H5 H躴rL
{# Ll# H
H5z H艴AL
J# L;# H
H5Z HXL
# L
# H
H5; H'ߩL
# L# H
H5 HL
# L# H
[ H5 Hų}L
# Lw# H
* H5 H蔳LL
U# LF# H
H5 HcL
$# L# H
H5 H2L
# L# H
H5y HL
# L# H
f H5\ ! HвL
# L# H
5 H59 ! H蟲WL
`# LQ# H
H5 " Hn&L
/# L # H
H5 " H=L
# L# H
H5 # H ħL
# L# H
q H5 # H۱L
# L# H
@ H5 $ H誱bL
k# L\# H
H5u $ Hy1L
:# L+# H
H5\ % HH L
# L# H
H5= % HϦL
# L# H
| H5 0 HL
# L# H
K H5 1 H走mL
v# Lg# H
H5 2 H脰L
# L# H
H5 H
ŞL
# L# H
r H5 HܨL
# L# H
A H5 H諨cL
l# L]# H
H5y Hz2L
;# L,# H
H5] HIL
# L# H
H5@ HНL
# L# H
} H5) HL
# L# H
L H5 H趧nL
w# Lh# H
H5 H腧=L
F# L7# H
H5 HT L
# L# H
H5 H#ۜL
# L# H
H5 HL
# L# H
W H5 HyL
# Ls# H
& H5m H萦HL
Q# LB# H
H5O H_L
# L# H
H53 H.L
# L# H
H5* HL
# L# H
b H5 H̥L
# L~# H
1 H5 H蛥SL
\# LM# H
H5 Hj"L
+# L # H
H5k H9L
# L# H
H5O HL
# L# H
m H51 HפL
# L# H
< H5 H覤^L
g# LX# H
H5 Hu-L
6# L'# H
H5 HDL
# L# H
H5 H˙L
# L# H
x H5 HL
# L# H
G H5| H豣iL
r# Lc# H
H5] H耣8L
A# L2# H
H5F
HOL
# L# H
H5) H ֘L
# L# H
H5
HL
# L# H
R H5 H輢tL
}# Ln# H
! H5 0 H苢CL
L# L=# H
H5 1 HZL
# L # H
H5 2 H)L
# L# H
H5u 3 HL
# L# H
] H5U 4 HǡL
# Ly# H
, H56 5 H薡NL
W# LH# H
H5 6 He L
&# L# H
H5 @ H4L
# L# H
H5 @ HL
# L# H
h H5 A HҠL
# L# H
7 H5 B H衠YL
b# LS# H
H5u P Hp(L
1# L"# H
H5U Q H?L
# L# H
H5> R HƕL
# L# H
s H5 ` HݟL
# L# H
B H5 a H謟dL
m# L^# H
H5 b H{3L
<# L-# H
H5 c HJL
# L# H
H5 d HєL
# L# H
~ H5 e HL
# L# H
M H5k p H跞oL
x# Li# H
H5G H膞>L
G# L8# H
H5& HU
L
# L# H
H5 H$ܓL
# L# H
H5 HL
# L# H
X H5 HzL
# Lt# H
' H5 H葝IL
R# LC# H
H5y H`L
!# L# H
H5] H/L
# L# H
H5= HL
# L# H
c H5 H͜L
# L# H
2 H5 P H蜜TL
]# LN# H
H5 Q Hk#L
,# L # H
H5 R H:L
# L# H
H5 S H L
# L# H
n H5 T H؛L
# L# H
= H5k U H觛_L
h# LY# H
H5O V Hv.L
7# L(# H
H5< W HEL
# L# H
H5) P H̐L
# L# H
y H5 Q HL
# L# H
H H5 R H貚jL
s# Ld# H
H5 S H聚9L
B# L3# H
H5 T HPL
# L# H
H5 U H L
# L# H
H5a V HL
# L# H
S H5J W H轙uL
~# Lo# H
" H53 H茙DL
M# L># H
H5 H[L
# L
# H
H5 H*L
# L# H
H5 HL
# L# H
^ H5 HȘL
# Lz# H
- H5 H藘OL
X# LI# H
H5 Hf L
'# L# H
H5 H5L
# L# H
H5s H藜HH# 肜HIH# L# H
> H5< 1H谗hL
# Lr# H
H5 H7L
P# LA# H
H5 HNL
# L# H
H5 H ՌL
# L# H
} H5 HL
# L# H
L H5 H軖sL
# L}# H
H5] H芖BL
[# LL# H
H5: HYL
*# L# H
H5 H(L
# L# H
H5 HL
# L# H
W H5 Hƕ~L
# L# H
& H5 H蕕ML
f# LW# H
H5 Hd L
5# L&# H
H5m H3L
# L# H
H5H HL
# L# H
b H50 HєL
# L# H
1 H5 H蠔XL
q# Lb# H
H5ĉ Ho'L
@# L1# H
H5 H>L
# L # H
H5 H
ʼnL
# L# H
m H5 HܓL
# L# H
< H5k H諓cL
|# Lm# H
H5F Hz2L
K# L<# H
H5 HIL
# L # H
H5 HЈL
# L# H
x H5 HL
# L# H
G H5 H趒nL
# Lx# H
H5 H腒=L
V# LG# H
H5a HT L
%# L# H
H59 H#ۇL
# L# H
H5
HL
# L# H
R H5 HyL
# L# H
! H5 H萑HL
a# LR# H
H5 H_L
0# L!# H
H5 H.L
# L# H
H5i HL
# L# H
] H5D ! H̐L
# L# H
, H5$ " H蛐SL
l# L]# H
H5 # Hj"L
;# L,# H
H5 $ H9L
# L# H
H5 % HL
# L# H
h H5 & HL
# L# H
7 H5 ' H規^L
w# Lh# H
H5] ( Hu-L
F# L7# H
H5< 0 HDL
# L# H
H5 1 H˄L
# L# H
s H5 2 HL
# L# H
B H5 3 H豎iL
# Ls# H
H5 4 H耎8L
Q# LB# H
H5 4 HOL
# L# H
H5j ` H փL
# L# H
~ H5H a HL
# L# H
M H5% b H輍tL
# L~# H
H5 c H苍CL
\# LM# H
H5 d HZL
+# L # H
H5 e H)L
# L# H
H5 f HL
# L# H
X H5 p HnjL
# L# H
' H5i H薌NL
g# LX# H
H5I He L
6# L'# H
H5& H4L
# L# H
H5 HL
# L# H
c H5 HҋL
# L# H
2 H5 H衋YL
r# Lc# H
H5 Hp(L
A# L2# H
H5 @H?L
# L# H
H5s @HƀL
# L# H
n H5V H݊L
# L# H
= H59 H謊dL
}# Ln# H
H5 H{3L
L# L=# H
H5 HJL
# L # H
H5 HL
# L# H
y H5 HL
# L# H
H H5 H跉oL
# Ly# H
H5h H膉>L
W# LH# H
H5H HU
L
&# L# H
H5! H$~L
# L# H
H5 H~L
# L# H
S H5 Hz~L
# L# H
" H5 H葈I~L
b# LS# H
H5 H`~L
1# L"# H
H5 H/}L
# L# H
H5o H}L
# L# H
^ H5Y H͇}L
# L# H
- H5E @H蜇T}L
m# L^# H
H5+ Hk#}HH<# }HIH,# |L# H
H5 1H|L
# L# H
H5 H|L
# L# H
H5 H赆m|L
# L# H
^ H5 H脆<|L
e# LV# H
- H5c HS |L
4# L%# H
H5? H"{L
# L# H
H5 H{L
# L# H
H5 Hx{L
# L# H
i H5 H菅G{L
p# La# H
8 H5 H^{L
?# L0# H
H5
H-zL
# L# H
H5~ HzL
# L# H
H5] H˄zL
# L# H
t H5<
H蚄RzL
{# Ll# H
C H5 Hi!zL
J# L;# H
H5y H8yL
# L
# H
H5 HyL
# L# H
H5sy HփyL
# L# H
H5jy H襃]yL
# Lw# H
N H5ay Ht,yL
U# LF# H
H5Xy HCxL
$# L# H
H5Oy HxL
# L# H
H5Fy HxL
# L# H
H5=y H谂hxL
# L# H
Y H5^ H7xL
`# LQ# H
( H5; HNxL
/# L # H
H5 H wL
# L# H
H5 HwL
# L# H
H5px H軁swL
# L# H
d H5 H芁BwL
k# L\# H
3 H5 HYwL
:# L+# H
H5 H(vL
# L# H
H5w HvL
# L# H
H5R ! Hƀ~vL
# L# H
o H5< " H蕀MvL
v# Lg# H
> H5( # Hd vL
E# L6# H
H50w $ H3uL
# L# H
H5 w % HuL
# L# H
H5w & HuL
# L# H
z H5
w ' HXuL
# Lr# H
I H5 w ( Ho'uL
P# LA# H
H5 ) H>tL
# L# H
H5 * H
tL
# L# H
H5 + H~tL
# L# H
H5 , H~ctL
# L}# H
T H5 - Hz~2tL
[# LL# H
# H5v . HI~tL
*# L# H
H5y / H~sL
# L# H
H5a 0 H}sL
# L# H
H5? 1 H}nsL
# L# H
_ H5" 2 H}=sL
f# LW# H
. H5 3 HT} sL
5# L&# H
H5 4 H#}rL
# L# H
H5 5 H|rL
ӿ# LĿ# H
H5 6 H|yrL
# L# H
j H5 7 H|HrL
q# Lb# H
9 H5 8 H_|rL
@# L1# H
H5m 9 H.|qL
# L # H
H5N : H{qL
# LϾ# H
H5/ ; H{qL
# L# H
u H5s < H{SqL
|# Lm# H
D H5ws = Hj{"qL
K# L<# H
H5fs > H9{pL
# L # H
H5 ? H{pL
# Lڽ# H
H5n @ HzpL
# L# H
H5r A Hz^pL
# Lx# H
O H5r B Huz-pL
V# LG# H
H5r C HDzoL
%# L# H
H5r D HzoL
# L# H
H5r E HyoL
ü# L# H
H5r F HyioL
# L# H
Z H5r G Hy8oL
a# LR# H
) H5r H HOyoL
0# L!# H
H5r I H ynL
# L# H
H5r J HxnL
λ# L# H
H5p K HxtnL
# L# H
e H5Xr L HxCnL
l# L]# H
4 H5Or M HZxnL
;# L,# H
H5Fr N H)xmL
# L# H
H5=r O HwmL
ٺ# Lʺ# H
H5 P HwmL
# L# H
p H5 Q HwNmL
w# Lh# H
? H5q R Hew mL
F# L7# H
H57 S H4wlL
# L# H
H5$ T HwlL
# Lչ# H
H5gq U HvlL
# L# H
{ H5 V HvYlL
# Ls# H
J H5 W Hpv(lL
Q# LB# H
H5p X H?vkL
# L# H
H5 Y HvkL
# L# H
H5p Z HukL
# L# H
H5B [ HudkL
# L~# H
U H5* \ H{u3kL
\# LM# H
$ H5 ] HJukL
+# L # H
H5 ^ HujL
# L# H
H5 _ HtjL
ɷ# L# H
H5 ` HtojL
# L# H
` H5 a Ht>jL
g# LX# H
/ H5 b HUt
jL
6# L'# H
H5 c H$tiL
# L# H
H5k d HsiL
Զ# LŶ# H
H5I e HsziL
# L# H
k H50 f HsIiL
r# Lc# H
: H5 g H`siL
A# L2# H
H5 h H/shL
# L# H
H5 i HrhL
ߵ# Lе# H
H5 j HrhL
# L# H
v H5 k HrThL
}# Ln# H
E H5 l Hkr#hL
L# L=# H
H57m m H:rgL
# L # H
H5Z n H rgL
# L۴# H
H5l o HqgL
# L# H
H5 p Hq_gL
# Ly# H
P H5l q Hvq.gL
W# LH# H
H5 r HEqfL
&# L# H
H5l s HqfL
# L# H
H5l t HpfL
ij# L# H
H5l u HpjfL
# L# H
[ H5l v Hp9fL
b# LS# H
* H5l w HPpfL
1# L"# H
H5l x H peL
# L# H
H5l y HoeL
ϲ# L# H
H5l z HoueL
# L# H
f H5l { HoDeL
m# L^# H
5 H5 | H[oeL
<# L-# H
H5Wl } H*odL
# L# H
H5Vl ~ HndL
ڱ# L˱# H
H5 HndL
# L# H
q H5$l HnOdL
x# Li# H
@ H5l Hfn dL
G# L8# H
H5 H5ncL
# L# H
H5k HncL
# Lְ# H
H5 HmcL
# L# H
| H5 HmZcL
# Lt# H
K H5 Hqm)cL
R# LC# H
H5{ H@mbL
!# L# H
H5k HmbL
# L# H
H5 k HlbL
# L# H
H5 HlebL
# L# H
V H5j H|l4bL
]# LN# H
% H5j HKlbL
,# L # H
H5j HlaL
# L# H
H5j HkaL
ʮ# L# H
H5j HkpaL
# L# H
a H5j Hk?aL
h# LY# H
0 H5j HVkaL
7# L(# H
H5j H%k`L
# L# H
ο H5yj Hj`L
խ# Lƭ# H
H5pj Hj{`L
# L# H
l H5_j HjJ`L
s# Ld# H
; H5Vj Haj`L
B# L3# H
H5 H0j_L
# L# H
پ H5 Hi_L
# LѬ# H
H5t Hi_L
# L# H
w H5i HiU_L
~# Lo# H
F H5i Hli$_L
M# L># H
H5i H;i^L
# L
# H
H5i H
i^L
# Lܫ# H
H5i Hh^L
# L# H
H5i Hh`^L
# Lz# H
Q H5i Hwh/^L
X# LI# H
H5i HFh]L
'# L# H
H5 Hh]L
# L# H
H5i Hg]L
Ū# L# H
H5 Hgk]L
# L# H
\ H5} Hg:]L
c# LT# H
+ H5.i HQg ]L
2# L## H
H5 i H g\L
# L# H
ɻ H5 Hf\L
Щ# L# H
H5 Hfv\L
# L# H
g H5 HfE\L
n# L_# H
6 H5 H\f\L
=# L.# H
H5 H+f[L
# L# H
Ժ H5 He[L
ۨ# L̨# H
H5g He[L
# L# H
r H5F HeP[L
y# Lj# H
A H5g Hge [L
H# L9# H
H5 H6eZL
# L# H
߹ H5rg HeZL
# Lק# H
H5ig HdZL
# L# H
} H5 Hd[ZL
# Lu# H
L H5q Hrd*ZL
S# LD# H
H5g HAdYL
"# L# H
H5( HdYL
# L# H
H5 HcYL
# L# H
H5 HcfYL
# L# H
W H5 H}c5YL
^# LO# H
& H5 HLcYL
-# L # H
H5 HcXL
# L# H
ķ H5z HbXL
˥# L# H
H5e HbqXL
# L# H
b H55 Hb@XL
i# LZ# H
1 H5 HWbXL
8# L)# H
H5 H&bWL
# L# H
϶ H5e HaWL
֤# LǤ# H
H5e Ha|WL
# L# H
m H5e HaKWL
t# Le# H
< H5< HbaWL
C# L4# H
H5$ H1aVL
# L# H
ڵ H5 H aVL
# Lң# H
H5|d H`VL
# L# H
x H5kd H`VVL
# Lp# H
G H5bd Hm`%VL
N# L?# H
H5id H<`UL
# L# H
H5Xd H `UL
# Lݢ# H
H5Gd H_UL
# L# H
H56d H_aUL
# L{# H
R H5%d Hx_0UL
Y# LJ# H
! H5d HG_TL
(# L# H
H5d H_TL
# L# H
H5
H^TL
ơ# L# H
H5 H^lTL
# L# H
] H5ܽ H^;TL
d# LU# H
, H5Ž HR^
TL
3# L$# H
H5 H!^SL
# L# H
ʲ H5 H]SL
Ѡ# L # H
H5 H]wSL
# L# H
h H5i H]FSL
o# L`# H
7 H5R H]]SL
># L/# H
H5; H,]RL
# L# H
ձ H5$ H\RL
ܟ# L͟# H
H5
H\RL
# L# H
s H5 H\QRL
z# Lk# H
B H5ua Hh\ RL
I# L:# H
H5da H7\QL
# L # H
H5Sa H\QL
# L؞# H
H5Ba H[QL
# L# H
~ H51a H[\QL
# Lv# H
M H5 a Hs[+QL
T# LE# H
H5a HB[PL
## L# H
H5` H[PL
# L# H
H5` HZPL
# L# H
H5` HZgPL
# L# H
X H5` H~Z6PL
_# LP# H
' H5` HMZPL
.# L # H
H5` H ZOL
# L# H
Ů H5` HYOL
̜# L# H
H5` HYrOL
# L# H
c H5v` HYAOL
j# L[# H
2 H5e` HXYOL
9# L*# H
H5T` H'YNL
# L# H
Э H5C` HXNL
כ# Lț# H
H52` HX}NL
# L# H
n H5 HXLNL
u# Lf# H
= H5 HcXNL
D# L5# H
H5ݸ H2XML
# L# H
۬ H5Ƹ HXML
# LӚ# H
H5 HWML
# L# H
y H5 HWWML
# Lq# H
H H5 HnW&ML
O# L@# H
H5j H=WLL
# L# H
H5S H WLL
# Lޙ# H
H5< HVLL
# L# H
H5% HVbLL
# L|# H
S H5 HyV1LL
Z# LK# H
" H5 HHV LL
)# L# H
H5 HVKL
# L# H
H5ɷ HUKL
ǘ# L# H
H5 HUmKL
# L# H
^ H5 HU H55 " HdO EL
E# L6# H
H5 # H3ODL
# L# H
ܣ H5 $ HODL
# Lԑ# H
H5 % HNDL
# L# H
z H5Ȳ & HNXDL
# Lr# H
I H5 ' HoN'DL
P# LA# H
H5 ( H>NCL
# L# H
H5o ) H
NCL
# Lߐ# H
H5R * HMCL
# L# H
H55 + HMcCL
# L}# H
T H5 , HzM2CL
[# LL# H
# H5W - HIMCL
*# L# H
H5ױ HMBL
# L# H
H5 HLBL
ȏ# L# H
H5 Q HLnBHFH H5 H.KHtYHHHHN! H
o H53 H8H1[]AHHHH_N! H5py H8H1[]AH5( 1HOAAHoEH H5 HJHtYH:HHHM! H
H5"3 H8H1[]BAH
HHHM! H5x H8H1[]AH5 H@=AHDH H5 HIHtYHGHH^M! H
` H52 H8H1[]@HpGHH.M! H5?x H8H1[]@H5 H@@H;DH H5 HcIHtYHGHHL! H
ۯ H51 H8H1[]@HFHHL! H5w H8H1[]?H5 H? @HCH H5 HHHtYHlFHH*L! H
Y H5T1 H8H1[]t?Ho?HCH H5rt H/HHtYHEHHK! H
Lt H50 H8H1[]>HEHH`K! H5qv H8H1[]>H5t 1HP>>HpBH H5s HGHtYH;EHHJ! H
s H5#0 H8H1[]C>H EHHJ! H5u H8H1[]>H5Ws H=>>HAH H5Os HFHtYHDHH_J! H
)s H5/ H8H1[]=HqDHH/J! H5@u H8H1[]=H5r H ==H9HItfH8HHHHt?L'LHl1HH[]A\HH_ @ HEHP0{HCHP0 @ Hx8HHHHu
HCHP011]# HHH[]A\f D HE 1HHHE mHEHP0^f. ATHUSHHHD$ @HI 1H6HHT$H5> 1Ho2 HE HHHE tvLH߾ V6H8H|$HH@HItfHn7HHHHt?LLH/HH[]A\HH_ @ HEHP0{HCHP0 @ H7HHHHu
HCHP011# HHH[]A\f D HE 1HHHE mHEHP0^f. UL8H
L# 1SHHHH H(HD$ LL$HD$ D$ H$1$AuH(H[]f D H{T$ Ht$4HHt&H~HH.H(H[]f 11# H롐H\$Hl$HHY8HHt)H)HHn.HH\$Hl$H @ H# H\$1Hl$1Hffff. Hl$H\$HLd$Ll$Lt$H(Ht H? t1 HH| uHu,L%8# I$LH $Hl$Ld$Ll$Lt$ H(H[>HItH~E1J| 1AHIt9H HLL>IHHIu
IFLP0IL9 I$HHI$tE1dID$LP0f. AWH
I# 1AVAUATUSHHHHb HHLD$HI H4HI~(E1f D LLI *HH 8M9IHHIN I$HHI$!
H{HP .HIz |$ key_size=%d public_exponent=%lu Unsupported representation kind (%d) KU_DIGITAL_SIGNATURE_OR_NON_REPUDIATION Digital Signature or Non-Repudiation KU_KEY_AGREEMENT_OR_ENCIPHERMENT Key Agreement or Data Encipherment NS_CERT_TYPE_OBJECT_SIGNING_CA EXT_KEY_USAGE_STATUS_RESPONDER certificateUsageSSLServerWithStepUp certificateUsageEmailRecipient certificateUsageUserCertImport certificateUsageProtectedObjectSigner certificateUsageStatusResponder Accessing non-existent segment CertVerifyLog index out of range PKCS12 decode validate bags failed PKCS12 decode import bags failed malformed raw ascii string buffer Error, shutdown callback expected args to be tuple
shutdown callback: out of memory
exception in shutdown callback
Error, shutdown callback expected int result, not %.50s
must be a string or None, not %.200s %s must be a string, not %.200s PKCS12 nickname collision callback undefined
PKCS12 nickname collision callback: out of memory
exception in PKCS12 nickname collision callback
Error, PKCS12 nickname collision callback expected tuple result with 2 values.
Error, PKCS12 nickname collision callback expected 1st returned item to be string or None.
Error, PKCS12 nickname collision callback expected 2nd returned item to be boolean.
PKCS12_default_nickname_collision_callback: CERT_MakeCANickname() returned existing nickname
GeneralName type name not found: %u PKCS12 cipher name not found: %ld The fips_slot_description attribute value must be a string or unicode The db_slot_description attribute value must be a string or unicode The crypto_slot_description attribute value must be a string or unicode The fips_token_description attribute value must be a string or unicode The db_token_description attribute value must be a string or unicode The crypto_token_description attribute value must be a string or unicode The library_description attribute value must be a string or unicode The manufacturer_id attribute value must be a string or unicode PKCS12 cipher name not found: %s GeneralName type name not found: %s S:pk11_attribute_type_from_name attribute type name not found: %lu S:key_mechanism_type_from_name malformed raw ASN.1 BMP string buffer Cannot delete the min_password_len attribute The min_password_len attribute value must be an integer Cannot delete the public_exponent attribute public_exponent must be a integer, not %.200s Cannot delete the key_size attribute key_size must be a integer, not %.200s Cannot delete the password_required attribute The password_required attribute value must be a boolean raw ASN.1 BMP string length must be multiple of 2 malformed raw ASN.1 Universal string buffer raw ASN.1 Universal string length must be multiple of 4 Authority Information Access: [%zd total] CRL Distribution Points: [%zd total] failed to convert oid string "%s" to SECItem could not convert "%s" to OID tag oid must be a string, an integer, or a SecItem, not %.200s SecItem indices must be integers, not %.200s indices must be integers or strings, not %.200s (%d least significant bits unused) unable to create PK11Context object unable to create PK11Slot object must be int, float or None, not %.50s cannot decode trust string '%s' when '%.50s' object has key_type=%s there is no attribute 'dsa' when '%.50s' object has key_type=%s there is no attribute 'rsa' O!|iiz:der_universal_secitem_fmt_lines password_required=%s, min_password_len=%s, manufacturer_id=%s, library_description=%s, crypto_token_description=%s, db_token_description=%s, fips_token_description=%s, crypto_slot_description=%s, db_slot_description=%s, fips_slot_description=%s lookup dict already contains %s _AddIntConstantWithLookup() needs module as first arg module '%s' already contains %s cert distnames must be a list or tuple item must be a %s containing a DistName no extension with OID %s found CertAttribute index out of range key_params for %s mechanism must be %.50s, not %.50s not enough memory to copy buffer of size %zd into SecItem Bad file, must be pathname or file object prime must be SecItem or buffer compatible subprime must be SecItem or buffer compatible base must be SecItem or buffer compatible prime, subprime and base must all be provided or none of them provided, not a mix data must be SecItem or buffer compatible data must be SecItem, buffer compatible or None CERT_GetCertificateRequestExtensions failed cannot decode Basic Constraints to many AVA items, maximum is %d, received %zd item %zd must be an AVA object, not %.200s must be an RDN object or list or tuple of RDN objects, not %.200s to many RDN items, maximum is %d, received %zd item %zd must be an RDN object, not %.200s cannot convert AVA type to OID string unable to escape AVA value string Failed to convert AVA value to string unable to convert "%s" to known OID AVA value must be a string, not %.200s could not create AVA, oid tag = %d, value = "%s" cannot decode Authority Access Info extension GeneralName index out of range Failed to parse CRL Distribution Point Extension |O!:disable_ocsp_default_responder |O!:enable_ocsp_default_responder O!OO:set_ocsp_default_responder failed to find certs for nickname = "%s" no certs with keys for nickname = "%s" export context creation failed PKCS12 add password integrity failed key or cert safe creation failed cannot create thread local data dict cannot store thread local data dict cannot store object in thread local data dict O:pkcs12_set_nickname_collision_callback li:pkcs12_set_preferred_cipher Failed to enable %s (%lx) pkcs12 cipher Failed to %s %s (%lx) pkcs12 cipher no line ending after PEM BEGIN kkO!|O&:create_context_by_sym_key line_fmt_tuples[%zd] must be a tuple, not %.200s line_fmt_tuples[%zd] tuple must have 1-3 items, not %zd items item[0] in the tuple at line_fmt_tuples[%zd] list must be an integer, not %.200s item[0] in the tuple at line_fmt_tuples[%zd] list must be a non-negative integer, not %ld item[1] in the tuple at line_fmt_tuples[%zd] list must be a string, not %.200s item[2] in the tuple at line_fmt_tuples[%zd] list must be a string, not %.200s unable to determine resulting hash length for hash_alg = %s invalid hexadecimal string beginning at offset %td "%s" byte count must be non-negative PK11 password callback undefined
Error, PK11 password callback expected args to be tuple
PK11 password callback: out of memory
exception in PK11 password callback
Error, PK11 password callback expected string result or None.
password conversion to UCS2 failed cannot decode DER encoded signed data ID: %s, Serial Number: %s, Issuer: [%s] Relative Distinguished Name: %s unknown distribution point type (%d), expected generalName or relativeDistinguishedName Invalid mask generation algorithm parameters certUsageProtectedObjectSigner certificateUsageCheckAllUsages crlEntryReasonAffiliationChanged crlEntryReasonCessationOfOperation crlEntryReasoncertificatedHold crlEntryReasonPrivilegeWithdrawn CKM_WTLS_MASTER_KEY_DERIVE_DH_ECC CKM_WTLS_SERVER_KEY_AND_MAC_DERIVE CKM_WTLS_CLIENT_KEY_AND_MAC_DERIVE CKA_HASH_OF_SUBJECT_PUBLIC_KEY SEC_OID_ISO_SHA_WITH_RSA_SIGNATURE SEC_OID_PKCS1_MD2_WITH_RSA_ENCRYPTION SEC_OID_PKCS1_MD4_WITH_RSA_ENCRYPTION SEC_OID_PKCS1_MD5_WITH_RSA_ENCRYPTION SEC_OID_PKCS1_SHA1_WITH_RSA_ENCRYPTION SEC_OID_PKCS5_PBE_WITH_MD2_AND_DES_CBC SEC_OID_PKCS5_PBE_WITH_MD5_AND_DES_CBC SEC_OID_PKCS5_PBE_WITH_SHA1_AND_DES_CBC SEC_OID_PKCS7_SIGNED_ENVELOPED_DATA SEC_OID_PKCS9_UNSTRUCTURED_NAME SEC_OID_PKCS9_COUNTER_SIGNATURE SEC_OID_PKCS9_CHALLENGE_PASSWORD SEC_OID_PKCS9_UNSTRUCTURED_ADDRESS SEC_OID_PKCS9_EXTENDED_CERTIFICATE_ATTRIBUTES SEC_OID_PKCS9_SMIME_CAPABILITIES SEC_OID_AVA_ORGANIZATIONAL_UNIT_NAME SEC_OID_NS_CERT_EXT_NETSCAPE_OK SEC_OID_NS_CERT_EXT_ISSUER_LOGO SEC_OID_NS_CERT_EXT_SUBJECT_LOGO SEC_OID_NS_CERT_EXT_REVOCATION_URL SEC_OID_NS_CERT_EXT_CA_REVOCATION_URL SEC_OID_NS_CERT_EXT_CA_CRL_URL SEC_OID_NS_CERT_EXT_CA_CERT_URL SEC_OID_NS_CERT_EXT_CERT_RENEWAL_URL SEC_OID_NS_CERT_EXT_CA_POLICY_URL SEC_OID_NS_CERT_EXT_HOMEPAGE_URL SEC_OID_NS_CERT_EXT_ENTITY_LOGO SEC_OID_NS_CERT_EXT_USER_PICTURE SEC_OID_NS_CERT_EXT_SSL_SERVER_NAME SEC_OID_NS_CERT_EXT_LOST_PASSWORD_URL SEC_OID_NS_CERT_EXT_CERT_RENEWAL_TIME SEC_OID_NS_KEY_USAGE_GOVT_APPROVED SEC_OID_X509_SUBJECT_DIRECTORY_ATTR SEC_OID_X509_PRIVATE_KEY_USAGE_PERIOD SEC_OID_X509_BASIC_CONSTRAINTS SEC_OID_X509_CERTIFICATE_POLICIES SEC_OID_X509_POLICY_CONSTRAINTS SEC_OID_PKCS12_PKCS8_KEY_SHROUDING SEC_OID_PKCS12_CERT_AND_CRL_BAG_ID SEC_OID_PKCS12_X509_CERT_CRL_BAG SEC_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC4 SEC_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC4 SEC_OID_PKCS12_PBE_WITH_SHA1_AND_TRIPLE_DES_CBC SEC_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC2_CBC SEC_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_128_BIT_RC4 SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_40_BIT_RC4 SEC_OID_PKCS12_RSA_ENCRYPTION_WITH_TRIPLE_DES SEC_OID_PKCS12_RSA_SIGNATURE_WITH_SHA1_DIGEST SEC_OID_ANSIX9_DSA_SIGNATURE_WITH_SHA1_DIGEST SEC_OID_BOGUS_DSA_SIGNATURE_WITH_SHA1_DIGEST SEC_OID_PKIX_CPS_POINTER_QUALIFIER SEC_OID_PKIX_USER_NOTICE_QUALIFIER SEC_OID_PKIX_OCSP_BASIC_RESPONSE SEC_OID_PKIX_OCSP_ARCHIVE_CUTOFF SEC_OID_PKIX_OCSP_SERVICE_LOCATOR SEC_OID_PKIX_REGCTRL_AUTHENTICATOR SEC_OID_PKIX_REGCTRL_PKIPUBINFO SEC_OID_PKIX_REGCTRL_PKI_ARCH_OPTIONS SEC_OID_PKIX_REGCTRL_OLD_CERT_ID SEC_OID_PKIX_REGCTRL_PROTOCOL_ENC_KEY SEC_OID_PKIX_REGINFO_UTF8_PAIRS SEC_OID_PKIX_REGINFO_CERT_REQUEST SEC_OID_EXT_KEY_USAGE_SERVER_AUTH SEC_OID_EXT_KEY_USAGE_CLIENT_AUTH SEC_OID_EXT_KEY_USAGE_CODE_SIGN SEC_OID_EXT_KEY_USAGE_EMAIL_PROTECT SEC_OID_EXT_KEY_USAGE_TIME_STAMP SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_128_BIT_RC4 SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC4 SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_2KEY_TRIPLE_DES_CBC SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_128_BIT_RC2_CBC SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC SEC_OID_PKCS12_SAFE_CONTENTS_ID SEC_OID_PKCS12_PKCS8_SHROUDED_KEY_BAG_ID SEC_OID_PKCS12_V1_PKCS8_SHROUDED_KEY_BAG_ID SEC_OID_PKCS12_V1_SECRET_BAG_ID SEC_OID_PKCS12_V1_SAFE_CONTENTS_BAG_ID SEC_OID_X942_DIFFIE_HELMAN_KEY SEC_OID_NETSCAPE_RECOVERY_REQUEST SEC_OID_NS_CERT_EXT_SCOPE_OF_USE SEC_OID_CMS_EPHEMERAL_STATIC_DIFFIE_HELLMAN SEC_OID_SMIME_ENCRYPTION_KEY_PREFERENCE SEC_OID_MS_SMIME_ENCRYPTION_KEY_PREFERENCE SEC_OID_PKCS1_SHA256_WITH_RSA_ENCRYPTION SEC_OID_PKCS1_SHA384_WITH_RSA_ENCRYPTION SEC_OID_PKCS1_SHA512_WITH_RSA_ENCRYPTION SEC_OID_ANSIX962_EC_PUBLIC_KEY SEC_OID_ANSIX962_ECDSA_SHA1_SIGNATURE SEC_OID_ANSIX962_ECDSA_SIGNATURE_WITH_SHA1_DIGEST SEC_OID_ANSIX962_EC_PRIME192V1 SEC_OID_ANSIX962_EC_PRIME192V2 SEC_OID_ANSIX962_EC_PRIME192V3 SEC_OID_ANSIX962_EC_PRIME239V1 SEC_OID_ANSIX962_EC_PRIME239V2 SEC_OID_ANSIX962_EC_PRIME239V3 SEC_OID_ANSIX962_EC_PRIME256V1 SEC_OID_ANSIX962_EC_C2PNB163V1 SEC_OID_ANSIX962_EC_C2PNB163V2 SEC_OID_ANSIX962_EC_C2PNB163V3 SEC_OID_ANSIX962_EC_C2PNB176V1 SEC_OID_ANSIX962_EC_C2TNB191V1 SEC_OID_ANSIX962_EC_C2TNB191V2 SEC_OID_ANSIX962_EC_C2TNB191V3 SEC_OID_ANSIX962_EC_C2ONB191V4 SEC_OID_ANSIX962_EC_C2ONB191V5 SEC_OID_ANSIX962_EC_C2PNB208W1 SEC_OID_ANSIX962_EC_C2TNB239V1 SEC_OID_ANSIX962_EC_C2TNB239V2 SEC_OID_ANSIX962_EC_C2TNB239V3 SEC_OID_ANSIX962_EC_C2ONB239V4 SEC_OID_ANSIX962_EC_C2ONB239V5 SEC_OID_ANSIX962_EC_C2PNB272W1 SEC_OID_ANSIX962_EC_C2PNB304W1 SEC_OID_ANSIX962_EC_C2TNB359V1 SEC_OID_ANSIX962_EC_C2PNB368W1 SEC_OID_ANSIX962_EC_C2TNB431R1 SEC_OID_NETSCAPE_AOLSCREENNAME SEC_OID_AVA_GENERATION_QUALIFIER SEC_OID_PKCS9_EXTENSION_REQUEST SEC_OID_ANSIX962_ECDSA_SIGNATURE_RECOMMENDED_DIGEST SEC_OID_ANSIX962_ECDSA_SIGNATURE_SPECIFIED_DIGEST SEC_OID_ANSIX962_ECDSA_SHA224_SIGNATURE SEC_OID_ANSIX962_ECDSA_SHA256_SIGNATURE SEC_OID_ANSIX962_ECDSA_SHA384_SIGNATURE SEC_OID_ANSIX962_ECDSA_SHA512_SIGNATURE SEC_OID_X509_HOLD_INSTRUCTION_CODE SEC_OID_X509_DELTA_CRL_INDICATOR SEC_OID_X509_ISSUING_DISTRIBUTION_POINT SEC_OID_X509_INHIBIT_ANY_POLICY SEC_OID_X509_SUBJECT_INFO_ACCESS SEC_OID_ISO_SHA1_WITH_RSA_SIGNATURE ocspMode_FailureIsVerificationFailure ocspMode_FailureIsNotAVerificationFailure Signed Extensions: (%zd total) der_universal_secitem_fmt_lines cert_general_name_type_from_name pkcs12_set_nickname_collision_callback disable_ocsp_default_responder the SecItem type (si* constant) number of octets in SecItem buffer algorithm id TAG as a enumerated constant (e.g. tag) algorithm id as string description algorithm parameters as SecItem key prime value, also known as p key subprime value, also known as q key base value, also known as g DSA P,Q,G params as a KEYPQGParams object original der encoded ASN1 signed data as a SecItem object signed data as a SecItem object signature algorithm as a AlgorithmID object key type (e.g. rsaKey, dsaKey, etc.) as an int RSA key as a RSAPublicKey object extension is critical flag (boolean) oid of extension as a enumerated constant (e.g. tag) certificate not valid before this time (floating point value expressed as microseconds since the epoch, midnight January 1st 1970 UTC) certificate not valid before this time (string value expressed, UTC) certificate not valid after this time (floating point value expressed as microseconds since the epoch, midnight January 1st 1970, UTC) certificate not valid after this time (string value expressed, UTC) certificate subject as a `DN` object certificate issuer as a `DN` object certificate signature algorithm certificate signature as SignedData object raw certificate DER data as data buffer certificate SSL trust flags as array of strings, or None if trust is not defined certificate email trust flags as array of strings, or None if trust is not defined certificate object signing trust flags as array of strings, or None if trust is not defined certificate SSL trust flags as integer bitmask, or None if not defined certificate email trust flags as integer bitmask, or None if not defined certificate object signing trust flags as integer bitmask, or None if not defined certificate public info as SubjectPublicKeyInfo object certificate extensions as a tuple of CertificateExtension objects integer bitmask of NS_CERT_TYPE_* flags, see `nss.cert_type_flags()` has_protected_authentication_path returns the CRL Issuer as a `GeneralName` object if defined, returns None if not defined method TAG as a enumerated constant (e.g. tag) location as a `nss.GeneralName` object The OID (e.g. type) of the AVA as a SecItem The OID tag enumerated constant (i.e. SEC_OID_AVA_*) of the AVA's type The value of the AVA as a SecItem The value of the AVA as a UTF-8 encoded string Returns the email address member as a string. Returns None if not found. Returns the common name member (i.e. CN) as a string. Returns None if not found. Returns the country name member (i.e. C) as a string. Returns None if not found. Returns the locality name member (i.e. L) as a string. Returns None if not found. Returns the state name member (i.e. ST) as a string. Returns None if not found. Returns the organization name member (i.e. O) as a string. Returns None if not found. Returns the organizational unit name member (i.e. OU) as a string. Returns None if not found. Returns the domain component name member (i.e. DC) as a string. Returns None if not found. Returns the certificate uid member (i.e. UID) as a string. Returns None if not found. Returns the general name as a string Returns the general name type enumerated constant Returns the general name type enumerated constant as a string Returns the type of the general name as a string (e.g. "URI") Returns the key id as a SecItem returns boolean, True if certificate is a certificate authority (i.e. CA) returns max path length constraint as an integer type TAG as a enumerated constant (e.g. tag) tuple of CertificateExtension objects if type_tag == SEC_OID_PKCS9_EXTENSION_REQUEST else tuple of SecItem objects certificate request attributes as a tuple of CertAttribute objects boolean indicating if a password is required manufacturer id (max 32 chars) SEC OID tag indicating what type of PKCS12 item this is boolean indicating if this is a cert with a private key signed certificate DER data as SecItem object, or None if does not exist certificate as Certificate object, or None if does not exist friendly_name as unicode object, or None if does not exist shroud algorithm id certificate as AlgorithmID object, or None if does not exist returns the certificate as a `Certificate` object returns the error code as an integer returns the chain position as an integer %s is uninitialized O|i:PKCS12DecodeItem O|i:CertAttribute :AuthorityInfoAccess O|i:CRLDistributionPt |O |ik:RSAGenParams <%s object at %p> False True is_ca=%s path_len=%d KU_DIGITAL_SIGNATURE Digital Signature KU_NON_REPUDIATION Non-Repudiation KU_KEY_ENCIPHERMENT Key Encipherment KU_DATA_ENCIPHERMENT Data Encipherment KU_KEY_AGREEMENT Key Agreement KU_KEY_CERT_SIGN Certificate Signing KU_CRL_SIGN CRL Signing KU_ENCIPHER_ONLY Encipher Only KU_NS_GOVT_APPROVED Government Approved unknown bit flags %#x i|i:key_usage_flags NS_CERT_TYPE_SSL_CLIENT SSL Client NS_CERT_TYPE_SSL_SERVER SSL Server NS_CERT_TYPE_EMAIL Email NS_CERT_TYPE_OBJECT_SIGNING Object Signing NS_CERT_TYPE_RESERVED Reserved NS_CERT_TYPE_SSL_CA SSL CA NS_CERT_TYPE_EMAIL_CA Email CA Object Signing CA EXT_KEY_USAGE_TIME_STAMP Key Usage Timestamp Key Usage Status Responder i|i:cert_type_flags CERTDB_TERMINAL_RECORD Terminal Record CERTDB_TRUSTED Trusted CERTDB_SEND_WARN Warn When Sending CERTDB_VALID_CA Valid CA CERTDB_TRUSTED_CA CERTDB_NS_TRUSTED_CA Netscape Trusted CA CERTDB_USER CERTDB_TRUSTED_CLIENT_CA Trusted Client CA CERTDB_GOVT_APPROVED_CA Step-up i|i:trust_flags i:nss_init_flags NSS_INIT_READONLY Read Only NSS_INIT_NOCERTDB No Certificate Database NSS_INIT_NOMODDB No Module Database NSS_INIT_FORCEOPEN Force Open NSS_INIT_NOROOTINIT No Root Init NSS_INIT_OPTIMIZESPACE Optimize Space NSS_INIT_PK11THREADSAFE PK11 Thread Safe NSS_INIT_PK11RELOAD PK11 Reload NSS_INIT_NOPK11FINALIZE No PK11 Finalize NSS_INIT_RESERVED i|i:cert_usage_flags certificateUsageSSLClient certificateUsageSSLServer SSL Server With StepUp certificateUsageSSLCA certificateUsageEmailSigner Email Signer Email Recipient certificateUsageObjectSigner User Certificate Import certificateUsageVerifyCA Verify CA Protected Object Signer certificateUsageAnyCA Any CA utcfromtimestamp (d) cannot get thread state nickname_collision_callback SecItem index out of range |i:get_reasons shutdown callback undefined
O!|i:x509_cert_type O!|i:x509_key_usage oid tag not found: %#x unable to create object mechanism name not found: %lu (O) utf-8 S:pkcs12_cipher_from_name lower k:pkcs12_cipher_name S:general_name_type_from_name k:general_name_type_name S:crl_reason_from_name CRL reason name not found: %s k:crl_reason_name CRL reason name not found: %u attribute name not found: %s k:pk11_attribute_type_name mechanism name not found: %s k:key_mechanism_type_name |OOOOOOOOOO:InitParameters RDN index out of range %s: |i:format_lines Password Required Minimum Password Length Manufacturer ID Library Description Crypto Token Description Database Token Description FIPS Token Description Crypto Slot Description Database Slot Description FIPS Slot Description Is CA Path Length %d PKCS12 Decode Items Item %d (i) Public Key Algorithm unknown sec ANS.1 time type Info [%zd]: Point [%zd]: O!:add_rdn OID. oid tag name not found: %s O:oid_tag O:oid_tag_name O:has_key oid name unknown: "%s" oid unknown oid name not found: "%s" oid not found iO:make_line_fmt_tuples |iz:der_to_hex malformed ASN.1 DER data |iz:to_hex t#:cipher_op t#:digest_op O!:clone_context O!:digest_key kO&O!kki:unwrap_sym_key kO&kki:derive O!:nss_shutdown_context kO&i:key_gen k:get_best_key_length failed to logout of slot |O!:authenticate Unable to authenticate unable to enable slot unable to disable slot O!O&:check_ocsp_status O!O!lO&:verify O!O!l:verify_now |i:is_ca_cert NI |O&i:check_valid_times s:verify_hostname sO&O&:set_trust_attributes O!|i:find_crl_by_cert s|i:find_crl_by_name RSA Fortezza Diffie Helman Key Exchange Algorithm Elliptic Curve unknown(%#x) RSA Public Key DSA Public Key Key Type k:pk11_disabled_reason_name PK11_DIS_USER_SELECTED PK11_DIS_NONE PK11_DIS_COULD_NOT_INIT_TOKEN PK11_DIS_TOKEN_VERIFY_FAILED PK11_DIS_TOKEN_NOT_PRESENT k:pk11_disabled_reason_str user disabled no reason could not initialize token could not verify token token not present t#:sha512_digest t#:sha256_digest t#:sha1_digest t#:md5_digest Bad type, must be SecItem O!O!lO&:verify_with_log KN [%d] %s (null) Other Name (%s) Other Name RFC822 Name DNS name X400 Address Directory Name EDI Party IP Address Registered ID unknown type [%d] Fingerprint (MD5) Fingerprint (SHA1) Signature Algorithm O|iz:cert_data_to_hex %d (%#x) Public Value Modulus Exponent module '%s' has no __dict__ O:has_signer_in_ca_names kO&O!:wrap_sym_key SubPrime Base missing DER encoded OID data unable to decode OID sequence |i:get_oid_sequence O!|i:x509_ext_key_usage Values (%zd total) Value [%zd] O:get_extension kOii:generate_key_pair |z#i:SecItem read OOO:KEYPQGParams O|i:fingerprint_format_lines |O:CertificateRequest O!:BasicConstraints O!:AuthKeyID cannot decode AuthKeyID O!:GeneralName cannot parse X500 name "%s" Bad type, must be DN unable to decode AVA value +%s=%s Bad type, must be RDN Bad type, must be AVA OO:AVA O:AuthorityInfoAccesses Unknown error code %ld (%#lx) [%s] %s Error Inadequate Key Usage Inadequate Cert Type Issuer Subject [%s] - [%s] Validity Validation Errors Certificate at chain depth %u Validation Error #%zd Depth O!:CRLDistributionPts O|O!O!O&:Certificate url I:set_ocsp_timeout i:set_ocsp_failure_mode iII:set_ocsp_cache_settings |O!:disable_ocsp_checking |O!:enable_ocsp_checking i:set_use_pkix_for_validation eses#|IIO!:pkcs12_export cert does not have a slot add cert and key failed PKCS12 encode failed callback must be callable O|i:pkcs12_map_cipher li:pkcs12_enable_cipher -----BEGIN -----END no PEM END found Could not base64 decode s:base64_to_binary O|i:read_der_from_file O!|ii:decode_der_crl k:pk11_token_exists O!O!siii:import_crl k:get_pad_mechanism k|O&:get_block_size k:get_iv_length k:mechanism_to_algtag mechanism not found: %#lx k:algtag_to_mechanism algtag not found: %#lx k|O&:generate_new_param O!:param_from_algid k|O&:param_from_iv k:create_digest_context kO!O!:pub_wrap_sym_key O!kkkO!:import_sym_key es:find_slot_by_name could not find slot name "%s" k:get_best_slot O:oid_dotted_decimal O:oid_str O!|i:indented_format label |ii:format Oi kt#:hash_buf ,:
s|s:read_hex O!i:get_cert_nicknames i:generate_random O!:find_key_by_any_cert s:find_cert_from_nickname O:set_password_callback PK11 password callback result |esesesesO!k:nss_init_context |esesesesk:nss_initialize es:nss_init_read_write es:nss_init O:set_shutdown_callback shutdown_callback_args s:nss_version_check Oes|O&:PKCS12Decoder PKCS12 decoder start failed PKCS12 decoding failed PKCS12 decode not verified PKCS12 item iteration failed Version Subject Public Key Info Attributes: (%zd total) Attribute [%zd] Certificate (has private key) Friendly Name Encryption algorithm Key (shrouded) unknown bag type %s: %s Method Location O|i:get_name |i:get_general_names Key ID Serial Number General Names: [%zd total] , General Name List: [%s] %s, Issuer: %s, Reasons: [%s] Relative Distinguished Name Reasons O!|i:x509_alt_name Critical Usages Types Names KDF Cipher Salt Iteration Count Key Length KDF Algorithm Encryption default, SHA-1 Hash algorithm default, MGF1 Mask Algorithm Mask hash algorithm default, 20 Salt length Raw Parameter Data nss.error _C_API OCTETS_PER_LINE_DEFAULT HEX_SEPARATOR_DEFAULT AsObject AsString AsTypeString AsTypeEnum AsLabeledString AsEnum AsEnumName AsEnumDescription AsIndex AsDottedDecimal generalName relativeDistinguishedName PK11CertListUnique PK11CertListUser PK11CertListRootUnique PK11CertListCA PK11CertListCAUnique PK11CertListUserUnique PK11CertListAll certUsageSSLClient certUsageSSLServer certUsageSSLServerWithStepUp certUsageSSLCA certUsageEmailSigner certUsageEmailRecipient certUsageObjectSigner certUsageUserCertImport certUsageVerifyCA certUsageStatusResponder certUsageAnyCA NSS_INIT_COOPERATE ssl_kea_null ssl_kea_rsa ssl_kea_dh ssl_kea_fortezza ssl_kea_ecdh nullKey rsaKey dsaKey fortezzaKey dhKey keaKey ecKey SEC_CERT_NICKNAMES_ALL SEC_CERT_NICKNAMES_USER SEC_CERT_NICKNAMES_SERVER SEC_CERT_NICKNAMES_CA SEC_CRL_TYPE SEC_KRL_TYPE CRL_DECODE_DEFAULT_OPTIONS CRL_DECODE_DONT_COPY_DER CRL_DECODE_SKIP_ENTRIES CRL_DECODE_KEEP_BAD_CRL CRL_DECODE_ADOPT_HEAP_DER CRL_IMPORT_DEFAULT_OPTIONS CRL_IMPORT_BYPASS_CHECKS secCertTimeValid secCertTimeExpired secCertTimeNotValidYet KU_ALL crlEntry crlEntryReasonUnspecified crlEntryReasonKeyCompromise crlEntryReasonCaCompromise crlEntryReasonSuperseded crlEntryReasonRemoveFromCRL crlEntryReasonAaCompromise certOtherName certRFC822Name certDNSName certX400Address certDirectoryName certEDIPartyName certURI certIPAddress certRegisterID CKM_ CKM_RSA_PKCS_KEY_PAIR_GEN CKM_RSA_PKCS CKM_RSA_9796 CKM_RSA_X_509 CKM_MD2_RSA_PKCS CKM_MD5_RSA_PKCS CKM_SHA1_RSA_PKCS CKM_RIPEMD128_RSA_PKCS CKM_RIPEMD160_RSA_PKCS CKM_RSA_PKCS_OAEP CKM_RSA_X9_31_KEY_PAIR_GEN CKM_RSA_X9_31 CKM_SHA1_RSA_X9_31 CKM_RSA_PKCS_PSS CKM_SHA1_RSA_PKCS_PSS CKM_DSA_KEY_PAIR_GEN CKM_DSA CKM_DSA_SHA1 CKM_DH_PKCS_KEY_PAIR_GEN CKM_DH_PKCS_DERIVE CKM_X9_42_DH_KEY_PAIR_GEN CKM_X9_42_DH_DERIVE CKM_X9_42_DH_HYBRID_DERIVE CKM_X9_42_MQV_DERIVE CKM_SHA256_RSA_PKCS CKM_SHA384_RSA_PKCS CKM_SHA512_RSA_PKCS CKM_SHA256_RSA_PKCS_PSS CKM_SHA384_RSA_PKCS_PSS CKM_SHA512_RSA_PKCS_PSS CKM_SHA224_RSA_PKCS CKM_SHA224_RSA_PKCS_PSS CKM_RC2_KEY_GEN CKM_RC2_ECB CKM_RC2_CBC CKM_RC2_MAC CKM_RC2_MAC_GENERAL CKM_RC2_CBC_PAD CKM_RC4_KEY_GEN CKM_RC4 CKM_DES_KEY_GEN CKM_DES_ECB CKM_DES_CBC CKM_DES_MAC CKM_DES_MAC_GENERAL CKM_DES_CBC_PAD CKM_DES2_KEY_GEN CKM_DES3_KEY_GEN CKM_DES3_ECB CKM_DES3_CBC CKM_DES3_MAC CKM_DES3_MAC_GENERAL CKM_DES3_CBC_PAD CKM_CDMF_KEY_GEN CKM_CDMF_ECB CKM_CDMF_CBC CKM_CDMF_MAC CKM_CDMF_MAC_GENERAL CKM_CDMF_CBC_PAD CKM_DES_OFB64 CKM_DES_OFB8 CKM_DES_CFB64 CKM_DES_CFB8 CKM_MD2 CKM_MD2_HMAC CKM_MD2_HMAC_GENERAL CKM_MD5 CKM_MD5_HMAC CKM_MD5_HMAC_GENERAL CKM_SHA_1 CKM_SHA_1_HMAC CKM_SHA_1_HMAC_GENERAL CKM_RIPEMD128 CKM_RIPEMD128_HMAC CKM_RIPEMD128_HMAC_GENERAL CKM_RIPEMD160 CKM_RIPEMD160_HMAC CKM_RIPEMD160_HMAC_GENERAL CKM_SHA256 CKM_SHA256_HMAC CKM_SHA256_HMAC_GENERAL CKM_SHA384 CKM_SHA384_HMAC CKM_SHA384_HMAC_GENERAL CKM_SHA512 CKM_SHA512_HMAC CKM_SHA512_HMAC_GENERAL CKM_SHA224 CKM_SHA224_HMAC CKM_SHA224_HMAC_GENERAL CKM_CAST_KEY_GEN CKM_CAST_ECB CKM_CAST_CBC CKM_CAST_MAC CKM_CAST_MAC_GENERAL CKM_CAST_CBC_PAD CKM_CAST3_KEY_GEN CKM_CAST3_ECB CKM_CAST3_CBC CKM_CAST3_MAC CKM_CAST3_MAC_GENERAL CKM_CAST3_CBC_PAD CKM_CAST5_KEY_GEN CKM_CAST128_KEY_GEN CKM_CAST5_ECB CKM_CAST128_ECB CKM_CAST5_CBC CKM_CAST128_CBC CKM_CAST5_MAC CKM_CAST128_MAC CKM_CAST5_MAC_GENERAL CKM_CAST128_MAC_GENERAL CKM_CAST5_CBC_PAD CKM_CAST128_CBC_PAD CKM_RC5_KEY_GEN CKM_RC5_ECB CKM_RC5_CBC CKM_RC5_MAC CKM_RC5_MAC_GENERAL CKM_RC5_CBC_PAD CKM_IDEA_KEY_GEN CKM_IDEA_ECB CKM_IDEA_CBC CKM_IDEA_MAC CKM_IDEA_MAC_GENERAL CKM_IDEA_CBC_PAD CKM_GENERIC_SECRET_KEY_GEN CKM_CONCATENATE_BASE_AND_KEY CKM_CONCATENATE_BASE_AND_DATA CKM_CONCATENATE_DATA_AND_BASE CKM_XOR_BASE_AND_DATA CKM_EXTRACT_KEY_FROM_KEY CKM_SSL3_PRE_MASTER_KEY_GEN CKM_SSL3_MASTER_KEY_DERIVE CKM_SSL3_KEY_AND_MAC_DERIVE CKM_SSL3_MASTER_KEY_DERIVE_DH CKM_TLS_PRE_MASTER_KEY_GEN CKM_TLS_MASTER_KEY_DERIVE CKM_TLS_KEY_AND_MAC_DERIVE CKM_TLS_MASTER_KEY_DERIVE_DH CKM_TLS_PRF CKM_SSL3_MD5_MAC CKM_SSL3_SHA1_MAC CKM_MD5_KEY_DERIVATION CKM_MD2_KEY_DERIVATION CKM_SHA1_KEY_DERIVATION CKM_SHA256_KEY_DERIVATION CKM_SHA384_KEY_DERIVATION CKM_SHA512_KEY_DERIVATION CKM_SHA224_KEY_DERIVATION CKM_PBE_MD2_DES_CBC CKM_PBE_MD5_DES_CBC CKM_PBE_MD5_CAST_CBC CKM_PBE_MD5_CAST3_CBC CKM_PBE_MD5_CAST5_CBC CKM_PBE_MD5_CAST128_CBC CKM_PBE_SHA1_CAST5_CBC CKM_PBE_SHA1_CAST128_CBC CKM_PBE_SHA1_RC4_128 CKM_PBE_SHA1_RC4_40 CKM_PBE_SHA1_DES3_EDE_CBC CKM_PBE_SHA1_DES2_EDE_CBC CKM_PBE_SHA1_RC2_128_CBC CKM_PBE_SHA1_RC2_40_CBC CKM_PKCS5_PBKD2 CKM_PBA_SHA1_WITH_SHA1_HMAC CKM_WTLS_PRE_MASTER_KEY_GEN CKM_WTLS_MASTER_KEY_DERIVE CKM_WTLS_PRF CKM_KEY_WRAP_LYNKS CKM_KEY_WRAP_SET_OAEP CKM_CMS_SIG CKM_SKIPJACK_KEY_GEN CKM_SKIPJACK_ECB64 CKM_SKIPJACK_CBC64 CKM_SKIPJACK_OFB64 CKM_SKIPJACK_CFB64 CKM_SKIPJACK_CFB32 CKM_SKIPJACK_CFB16 CKM_SKIPJACK_CFB8 CKM_SKIPJACK_WRAP CKM_SKIPJACK_PRIVATE_WRAP CKM_SKIPJACK_RELAYX CKM_KEA_KEY_PAIR_GEN CKM_KEA_KEY_DERIVE CKM_FORTEZZA_TIMESTAMP CKM_BATON_KEY_GEN CKM_BATON_ECB128 CKM_BATON_ECB96 CKM_BATON_CBC128 CKM_BATON_COUNTER CKM_BATON_SHUFFLE CKM_BATON_WRAP CKM_ECDSA_KEY_PAIR_GEN CKM_EC_KEY_PAIR_GEN CKM_ECDSA CKM_ECDSA_SHA1 CKM_ECDH1_DERIVE CKM_ECDH1_COFACTOR_DERIVE CKM_ECMQV_DERIVE CKM_JUNIPER_KEY_GEN CKM_JUNIPER_ECB128 CKM_JUNIPER_CBC128 CKM_JUNIPER_COUNTER CKM_JUNIPER_SHUFFLE CKM_JUNIPER_WRAP CKM_FASTHASH CKM_AES_KEY_GEN CKM_AES_ECB CKM_AES_CBC CKM_AES_MAC CKM_AES_MAC_GENERAL CKM_AES_CBC_PAD CKM_BLOWFISH_KEY_GEN CKM_BLOWFISH_CBC CKM_TWOFISH_KEY_GEN CKM_TWOFISH_CBC CKM_CAMELLIA_KEY_GEN CKM_CAMELLIA_ECB CKM_CAMELLIA_CBC CKM_CAMELLIA_MAC CKM_CAMELLIA_MAC_GENERAL CKM_CAMELLIA_CBC_PAD CKM_CAMELLIA_ECB_ENCRYPT_DATA CKM_CAMELLIA_CBC_ENCRYPT_DATA CKM_SEED_KEY_GEN CKM_SEED_ECB CKM_SEED_CBC CKM_SEED_MAC CKM_SEED_MAC_GENERAL CKM_SEED_CBC_PAD CKM_SEED_ECB_ENCRYPT_DATA CKM_SEED_CBC_ENCRYPT_DATA CKM_DES_ECB_ENCRYPT_DATA CKM_DES_CBC_ENCRYPT_DATA CKM_DES3_ECB_ENCRYPT_DATA CKM_DES3_CBC_ENCRYPT_DATA CKM_AES_ECB_ENCRYPT_DATA CKM_AES_CBC_ENCRYPT_DATA CKM_DSA_PARAMETER_GEN CKM_DH_PKCS_PARAMETER_GEN CKM_X9_42_DH_PARAMETER_GEN CKA_ CKA_CLASS CKA_TOKEN CKA_PRIVATE CKA_LABEL CKA_APPLICATION CKA_VALUE CKA_OBJECT_ID CKA_CERTIFICATE_TYPE CKA_ISSUER CKA_SERIAL_NUMBER CKA_AC_ISSUER CKA_OWNER CKA_ATTR_TYPES CKA_TRUSTED CKA_CERTIFICATE_CATEGORY CKA_JAVA_MIDP_SECURITY_DOMAIN CKA_URL CKA_HASH_OF_ISSUER_PUBLIC_KEY CKA_CHECK_VALUE CKA_KEY_TYPE CKA_SUBJECT CKA_ID CKA_SENSITIVE CKA_ENCRYPT CKA_DECRYPT CKA_WRAP CKA_UNWRAP CKA_SIGN CKA_SIGN_RECOVER CKA_VERIFY CKA_VERIFY_RECOVER CKA_DERIVE CKA_START_DATE CKA_END_DATE CKA_MODULUS CKA_MODULUS_BITS CKA_PUBLIC_EXPONENT CKA_PRIVATE_EXPONENT CKA_PRIME_1 CKA_PRIME_2 CKA_EXPONENT_1 CKA_EXPONENT_2 CKA_COEFFICIENT CKA_PRIME CKA_SUBPRIME CKA_BASE CKA_PRIME_BITS CKA_SUBPRIME_BITS CKA_SUB_PRIME_BITS CKA_VALUE_BITS CKA_VALUE_LEN CKA_EXTRACTABLE CKA_LOCAL CKA_NEVER_EXTRACTABLE CKA_ALWAYS_SENSITIVE CKA_KEY_GEN_MECHANISM CKA_MODIFIABLE CKA_ECDSA_PARAMS CKA_EC_PARAMS CKA_EC_POINT CKA_SECONDARY_AUTH CKA_AUTH_PIN_FLAGS CKA_ALWAYS_AUTHENTICATE CKA_WRAP_WITH_TRUSTED CKA_WRAP_TEMPLATE CKA_UNWRAP_TEMPLATE CKA_HW_FEATURE_TYPE CKA_RESET_ON_INIT CKA_HAS_RESET CKA_PIXEL_X CKA_PIXEL_Y CKA_RESOLUTION CKA_CHAR_ROWS CKA_CHAR_COLUMNS CKA_COLOR CKA_BITS_PER_PIXEL CKA_CHAR_SETS CKA_ENCODING_METHODS CKA_MIME_TYPES CKA_MECHANISM_TYPE CKA_REQUIRED_CMS_ATTRIBUTES CKA_DEFAULT_CMS_ATTRIBUTES CKA_SUPPORTED_CMS_ATTRIBUTES CKA_ALLOWED_MECHANISMS CKA_VENDOR_DEFINED SEC_OID_ SEC_OID_UNKNOWN SEC_OID_MD2 SEC_OID_MD4 SEC_OID_MD5 SEC_OID_SHA1 SEC_OID_RC2_CBC SEC_OID_RC4 SEC_OID_DES_EDE3_CBC SEC_OID_RC5_CBC_PAD SEC_OID_DES_ECB SEC_OID_DES_CBC SEC_OID_DES_OFB SEC_OID_DES_CFB SEC_OID_DES_MAC SEC_OID_DES_EDE SEC_OID_PKCS1_RSA_ENCRYPTION SEC_OID_PKCS7 SEC_OID_PKCS7_DATA SEC_OID_PKCS7_SIGNED_DATA SEC_OID_PKCS7_ENVELOPED_DATA SEC_OID_PKCS7_DIGESTED_DATA SEC_OID_PKCS7_ENCRYPTED_DATA SEC_OID_PKCS9_EMAIL_ADDRESS SEC_OID_PKCS9_CONTENT_TYPE SEC_OID_PKCS9_MESSAGE_DIGEST SEC_OID_PKCS9_SIGNING_TIME SEC_OID_AVA_COMMON_NAME SEC_OID_AVA_COUNTRY_NAME SEC_OID_AVA_LOCALITY SEC_OID_AVA_STATE_OR_PROVINCE SEC_OID_AVA_ORGANIZATION_NAME SEC_OID_AVA_DN_QUALIFIER SEC_OID_AVA_DC SEC_OID_NS_TYPE_GIF SEC_OID_NS_TYPE_JPEG SEC_OID_NS_TYPE_URL SEC_OID_NS_TYPE_HTML SEC_OID_NS_TYPE_CERT_SEQUENCE SEC_OID_MISSI_KEA_DSS_OLD SEC_OID_MISSI_DSS_OLD SEC_OID_MISSI_KEA_DSS SEC_OID_MISSI_DSS SEC_OID_MISSI_KEA SEC_OID_MISSI_ALT_KEA SEC_OID_NS_CERT_EXT_CERT_TYPE SEC_OID_NS_CERT_EXT_BASE_URL SEC_OID_NS_CERT_EXT_COMMENT SEC_OID_X509_SUBJECT_KEY_ID SEC_OID_X509_KEY_USAGE SEC_OID_X509_SUBJECT_ALT_NAME SEC_OID_X509_ISSUER_ALT_NAME SEC_OID_X509_NAME_CONSTRAINTS SEC_OID_X509_CRL_DIST_POINTS SEC_OID_X509_POLICY_MAPPINGS SEC_OID_X509_AUTH_KEY_ID SEC_OID_X509_EXT_KEY_USAGE SEC_OID_X509_AUTH_INFO_ACCESS SEC_OID_X509_CRL_NUMBER SEC_OID_X509_REASON_CODE SEC_OID_X509_INVALID_DATE SEC_OID_X500_RSA_ENCRYPTION SEC_OID_RFC1274_UID SEC_OID_RFC1274_MAIL SEC_OID_PKCS12 SEC_OID_PKCS12_MODE_IDS SEC_OID_PKCS12_ESPVK_IDS SEC_OID_PKCS12_BAG_IDS SEC_OID_PKCS12_CERT_BAG_IDS SEC_OID_PKCS12_OIDS SEC_OID_PKCS12_PBE_IDS SEC_OID_PKCS12_SIGNATURE_IDS SEC_OID_PKCS12_ENVELOPING_IDS SEC_OID_PKCS12_KEY_BAG_ID SEC_OID_PKCS12_SECRET_BAG_ID SEC_OID_PKCS12_SDSI_CERT_BAG SEC_OID_ANSIX9_DSA_SIGNATURE SEC_OID_VERISIGN_USER_NOTICES SEC_OID_PKIX_OCSP SEC_OID_PKIX_OCSP_NONCE SEC_OID_PKIX_OCSP_CRL SEC_OID_PKIX_OCSP_RESPONSE SEC_OID_PKIX_OCSP_NO_CHECK SEC_OID_PKIX_REGCTRL_REGTOKEN SEC_OID_OCSP_RESPONDER SEC_OID_NETSCAPE_SMIME_KEA SEC_OID_FORTEZZA_SKIPJACK SEC_OID_PKCS12_V1_KEY_BAG_ID SEC_OID_PKCS12_V1_CERT_BAG_ID SEC_OID_PKCS12_V1_CRL_BAG_ID SEC_OID_PKCS9_X509_CERT SEC_OID_PKCS9_SDSI_CERT SEC_OID_PKCS9_X509_CRL SEC_OID_PKCS9_FRIENDLY_NAME SEC_OID_PKCS9_LOCAL_KEY_ID SEC_OID_BOGUS_KEY_USAGE SEC_OID_NETSCAPE_NICKNAME SEC_OID_CERT_RENEWAL_LOCATOR SEC_OID_CMS_3DES_KEY_WRAP SEC_OID_CMS_RC2_KEY_WRAP SEC_OID_AES_128_ECB SEC_OID_AES_128_CBC SEC_OID_AES_192_ECB SEC_OID_AES_192_CBC SEC_OID_AES_256_ECB SEC_OID_AES_256_CBC SEC_OID_SDN702_DSA_SIGNATURE SEC_OID_SHA256 SEC_OID_SHA384 SEC_OID_SHA512 SEC_OID_AES_128_KEY_WRAP SEC_OID_AES_192_KEY_WRAP SEC_OID_AES_256_KEY_WRAP SEC_OID_SECG_EC_SECP112R1 SEC_OID_SECG_EC_SECP112R2 SEC_OID_SECG_EC_SECP128R1 SEC_OID_SECG_EC_SECP128R2 SEC_OID_SECG_EC_SECP160K1 SEC_OID_SECG_EC_SECP160R1 SEC_OID_SECG_EC_SECP160R2 SEC_OID_SECG_EC_SECP192K1 SEC_OID_SECG_EC_SECP224K1 SEC_OID_SECG_EC_SECP224R1 SEC_OID_SECG_EC_SECP256K1 SEC_OID_SECG_EC_SECP384R1 SEC_OID_SECG_EC_SECP521R1 SEC_OID_SECG_EC_SECT113R1 SEC_OID_SECG_EC_SECT113R2 SEC_OID_SECG_EC_SECT131R1 SEC_OID_SECG_EC_SECT131R2 SEC_OID_SECG_EC_SECT163K1 SEC_OID_SECG_EC_SECT163R1 SEC_OID_SECG_EC_SECT163R2 SEC_OID_SECG_EC_SECT193R1 SEC_OID_SECG_EC_SECT193R2 SEC_OID_SECG_EC_SECT233K1 SEC_OID_SECG_EC_SECT233R1 SEC_OID_SECG_EC_SECT239K1 SEC_OID_SECG_EC_SECT283K1 SEC_OID_SECG_EC_SECT283R1 SEC_OID_SECG_EC_SECT409K1 SEC_OID_SECG_EC_SECT409R1 SEC_OID_SECG_EC_SECT571K1 SEC_OID_SECG_EC_SECT571R1 SEC_OID_AVA_SURNAME SEC_OID_AVA_SERIAL_NUMBER SEC_OID_AVA_STREET_ADDRESS SEC_OID_AVA_TITLE SEC_OID_AVA_POSTAL_ADDRESS SEC_OID_AVA_POSTAL_CODE SEC_OID_AVA_POST_OFFICE_BOX SEC_OID_AVA_GIVEN_NAME SEC_OID_AVA_INITIALS SEC_OID_AVA_HOUSE_IDENTIFIER SEC_OID_AVA_PSEUDONYM SEC_OID_PKIX_CA_ISSUERS SEC_OID_X509_CERT_ISSUER SEC_OID_X509_FRESHEST_CRL SEC_OID_CAMELLIA_128_CBC SEC_OID_CAMELLIA_192_CBC SEC_OID_CAMELLIA_256_CBC SEC_OID_PKCS5_PBKDF2 SEC_OID_PKCS5_PBES2 SEC_OID_PKCS5_PBMAC1 SEC_OID_HMAC_SHA1 SEC_OID_HMAC_SHA224 SEC_OID_HMAC_SHA256 SEC_OID_HMAC_SHA384 SEC_OID_HMAC_SHA512 SEC_OID_PKIX_TIMESTAMPING SEC_OID_PKIX_CA_REPOSITORY SEC_OID_SECG_EC_SECP192R1 SEC_OID_SECG_EC_SECP256R1 SEC_OID_PKCS12_KEY_USAGE PK11_OriginNULL PK11_OriginDerive PK11_OriginGenerated PK11_OriginFortezzaHack PK11_OriginUnwrap PKCS12_ PKCS12_RC2_CBC_40 PKCS12_RC2_CBC_128 PKCS12_RC4_40 PKCS12_RC4_128 PKCS12_DES_56 PKCS12_DES_EDE3_168 datetime_CAPI datetime nss.nss i:list_certs s:find_certs_from_email_addr s:find_certs_from_nickname |O&i:get_cert_chain Not Before Not After Certificate Trust Flags SSL Flags Email Flags Object Signing Flags nss_get_version nss_is_initialized nss_init_nodb nss_shutdown dump_certificate_cache_info get_default_certdb key_mechanism_type_from_name pk11_attribute_type_from_name cert_crl_reason_name cert_crl_reason_from_name cert_general_name_type_name pk11_logout_all get_internal_slot get_internal_key_slot create_context_by_sym_key need_pw_init is_fips pkcs12_enable_all_ciphers pkcs12_set_preferred_cipher get_use_pkix_for_validation clear_ocsp_cache set_ocsp_default_responder enable_ocsp_default_responder nss.nss.SecItem nss.nss.AlgorithmID nss.nss.RSAGenParams nss.nss.KEYPQGParams nss.nss.RSAPublicKey nss.nss.DSAPublicKey nss.nss.SignedData nss.nss.PublicKey nss.nss.SubjectPublicKeyInfo nss.nss.CertDB nss.nss.CertificateExtension nss.nss.Certificate nss.nss.PrivateKey nss.nss.SignedCRL nss.nss.PK11Slot nss.nss.PK11SymKey nss.nss.PK11Context nss.nss.CRLDistributionPoint nss.nss.CRLDistributionPts nss.nss.AuthorityInfoAccess nss.nss.AuthorityInfoAccesses nss.nss.AVA nss.nss.RDN nss.nss.DN nss.nss.GeneralName nss.nss.AuthKeyID nss.nss.BasicConstraints nss.nss.CertAttribute nss.nss.CertificateRequest nss.nss.InitParameters nss.nss.InitContext nss.nss.PKCS12DecodeItem nss.nss.PKCS12Decoder nss.nss.CertVerifyLogNode nss.nss.CertVerifyLog level \x00 \x01 \x02 \x03 \x04 \x05 \x06 \a \b \t \n \v \f \r \x0E \x0F \x10 \x11 \x12 \x13 \x14 \x15 \x16 \x17 \x18 \x19 \x1A \x1B \x1C \x1D \x1E \x1F ! \" # $ % & \' ( * + , - / ; < = \? @ J Q V W Z [ \\ ^ ` c q z { | } ~ \x7F \x80 \x81 \x82 \x83 \x84 \x85 \x86 \x87 \x88 \x89 \x8A \x8B \x8C \x8D \x8E \x8F \x90 \x91 \x92 \x93 \x94 \x95 \x96 \x97 \x98 \x99 \x9A \x9B \x9C \x9D \x9E \x9F \xA0 \xA1 \xA2 \xA3 \xA4 \xA5 \xA6 \xA7 \xA8 \xA9 \xAA \xAB \xAC \xAD \xAE \xAF \xB0 \xB1 \xB2 \xB3 \xB4 \xB5 \xB6 \xB7 \xB8 \xB9 \xBA \xBB \xBC \xBD \xBE \xBF \xC0 \xC1 \xC2 \xC3 \xC4 \xC5 \xC6 \xC7 \xC8 \xC9 \xCA \xCB \xCC \xCD \xCE \xCF \xD0 \xD1 \xD2 \xD3 \xD4 \xD5 \xD6 \xD7 \xD8 \xD9 \xDA \xDB \xDC \xDD \xDE \xDF \xE0 \xE1 \xE2 \xE3 \xE4 \xE5 \xE6 \xE7 \xE8 \xE9 \xEA \xEB \xEC \xED \xEE \xEF \xF0 \xF1 \xF2 \xF3 \xF4 \xF5 \xF6 \xF7 \xF8 \xF9 \xFA \xFB \xFC \xFD \xFE \xFF repr_kind CN OU dnQualifier serialNumber title SN givenName initials generationQualifier postalAddress postalCode postOfficeBox houseIdentifier Key Compromise CA Compromise Affiliation Changed Cessation Of Operation Certificate On Hold Remove From CRL Privilege Withdrawn AA Compromise usages return_cert_type allow_override octets_per_line separator indent_len arg password_required min_password_len manufacturer_id library_description crypto_token_description db_token_description fips_token_description crypto_slot_description db_slot_description fips_slot_description basic_constraints auth_key_id sec_item auth_info_accesses crl_dist_pt_extension arg1 perm subprime key_size pkcs12_password key_cipher cert_cipher pin_args bitstr ascii decode_options sec_param operation obj lines_pairs input separators cert_dir cert_prefix key_prefix secmod_name init_params get_integer contents of SecItem buffer id_oid algorithm id OID as SecItem parameters key size in bits (integer) public_exponent public exponent (integer) RSA modulus RSA exponent pqg_params DSA public_value signature signature as a SecItem object key_type key_type_str key type as a string dsa public_key PublicKey object name of extension critical oid of extension as SecItem extension data as SecItem find_kea_type make_ca_nickname valid_not_before valid_not_before_str valid_not_after valid_not_after_str subject_common_name certificate subject issuer certificate version serial_number certificate serial number signature_algorithm signed_data der_data ssl_trust_str email_trust_str signing_trust_str ssl_trust_flags email_trust_flags signing_trust_flags subject_public_key_info extensions delete_permanently is_hw is_present is_read_only is_internal need_login need_user_init is_friendly is_removable is_logged_in is_disabled has_root_certs get_disabled_reason user_disable user_enable logout get_best_wrap_mechanism slot_name slot name token_name token name CK_MECHANISM_TYPE mechanism key_data key data key length digest_begin finalize digest_final method_oid method OID as SecItem method_tag method_str method as string description location value_str email_address country_name locality_name state_name org_name org_unit_name dc_name cert_uid type_enum type_string is_ca path_len type_oid type OID as SecItem type_tag type as string description values subject as an `DN` object version as integer minimum password length signed_cert_der certificate friendly_name shroud_algorithm_id database_import depth count number of validation errors OO(O8OHONNTQPQTQTQTQTQTQTQSSxShSSdTTTDT4TtT}cddpd]dXcMd}c}c}cd}c=d}c}c}c-d-d}c d d}c d
dc}c d}cc}ccfqhahSh=h)hhfffahf hfffggfggfgggfgfgfghi`ixiiiiii i`VLB81*# ]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]]] g {8888888888= =<< =d>T>D>>t>8YsRsRsRsRsRsRsRsRsRsRsRsRsRsRsRsRZ`XsRWWWsRVsRsRsRVUXT 0123456789abcdef :pD5G|Dþ#eLJȓAk h䨵i?zJP"3S$hwhh]r; se}R)4D%
?`Hۭagר- D)3Y<5v' i} xIo Nl78"GX'יW5dLG1P<*0 AvqڞWv87_2ELT+]k>{ B`T 8:Ѷ5ڗ֥7bJ!;, H @` x Ї @ 8 P Јh 0 0H `` Њ 0 P ` p ( Ћ@ ph P ` Ѝ 0 @ P `0 H p ` Џ 0 H ` Px @ P ( @ ` x @ p 0 H 0` `x 0 p 0 H ` x Д @ Ж@ X 0p p 0 @( P@ `X p И 0 @ P ` p0 H ` x @ p К 0( P@ X p @ ` ! ! 0! H! `! x! ! @! `! ! ! " p8" `" `x" p" " в" " ` # 0(# P# `p# # # # $ $ 0$ PH$ h$ $ $ 0$ P$ `% % @% % @% % % 0& p`& & & @& ' 0' ph' ' ' ' ' ( 0(( P( x( ( ( ( ) ) @) `) ) ) ) ) * * 0@* `* Px* 0* `* @* @* + 0+ P+ @h+ p+ + + + 0, `(, H, h, , , , p - 0- `- x- - - - - . @0. X. x. @. p0/ H/ `/ x/ / / `/ / 0 @0 @h0 0 0 0 0 0 P(1 X1 p1 1 1 1 p2 (2 H2 p2 @
2
2
2
2 0 3 ` 3 03 H3 `3 3 3 @3 p3 4 04 P4 0p4 `4 4 4 4 5 0H5 h5 `5 5 5 p(6 6 6 p 6 0 87 p7 7 p 7 $7 &88 `&P8 P)8 )8 P*8 0+(9 +H9 ,p9 ,9 -9 p.9 .: `/8: /h: 0: @0: 0: 0: 0 ; 1(; P2P; 2p; 2; @3; 4< 58< @5P< 5p< 7< P7< 7 = 7= 78= 08X= p8x= 8= 9= `9= 9> 9(> :H> `:h> :> :> ;> P;> ;> 0<@? =h? ?? A? `B? B@ `CP@ Ch@ C@ D@ F@ GA H0A `IxA IA JA JA MA NB N8B pO`B PB PB QB QC pR8C TC @UC UC pV D WHD WpD XD XD YD YE @Z8E pZXE ZxE ZE ZE [E P[E [F [8F [XF \xF 0\F \F ]F 0]F p]G _@G `xG dG e H e8H ePH fhH fH fH iH mI m(I oI `rI tJ w0J J @J @J P(K HK pK ЈK 0K PK `K pK L 00L @HL P`L L L M p M `M M pM M @(N PN @N ИN N HO НpO O PO O @ P P hP P P pQ 8Q hQ Q Q ЫR HR hR @R R S p`S xS 0S pS S T hT T 0T T P`U `U U V @V hV V @V P W W PW 0hW @W 0W @W (X PX xX X X Y (Y HY hY Y Y Y Z @Z `Z Z 0Z Z P[ 0[ P[ 0p[ [ [ [ \ P \ X\ x\ \ \ ] `H] p] P] p] ] ^ 8^ h^ ^ ^ 0^ _ 8_ P_ h_ P_ _ P_ _ @` 8` @h` ` ` a a ha a a a b 8b Pb hb b
b
b 0
b P
b `
b
c
(c
@c
Xc
pc c c 0 c P c ` c d d 0d Hd `d xd d d @ d P d p d e e 8e Pe he
e
e 0
e @
e `
e p
e
f
(f `f f g pHg g Pg h pPh hh h h h 0 i Hi p i i "i " j @#Hj $pj $j )j )j )k 0Xk 00pk 1k P4k `4k 5l P6Pl 6hl `7l 7l 9l :m <0m D\
H T L D( BHA A(G@
(A ABBF f
(A ABBD ( H< D\
H R ( h< D\
H R ( DM ( 8 D\
H O ) 8 D\
H O ,) 8 D\
H O , L) l AG o
AH O
AH |) 08 D\
H O ) P8 D\
H O ) p8 D\
H O ) 8 D\
H O ) 8 D\
H O * 8 D\
H O <* 8 D\
H O \* 8 D\
H O |* 09 D\
H O * P" DY * h" DY D * ADG Q
AAA U
FAD P
FAI $ + MMD@
F , <+ ` MML
J $ l+ @ MML``
J , + A[ V
AE cA $ + h A[0W
AD 4 + i AS V
AE a
AF OA $, DM <, 0 DQ
K O \, Q D [
A M
B , |, ` MMN
F , , A[0y
AJ k
AD $ , MI0F
D D - X Dw
E c
E K
E K
E K
E K
E K
E K L- L A\
C k l- L A\
C k - @ DP $ - H MN@I
D - D e
G - D e
G $ . AP k
AC $ 4.
AP k
AC $ \. p
AP k
AC $ .
AP k
AC 4 . @ ADG y
AAI D
CAH $ . HK I
D b l / 0* BBH A(D0Dg
0A(A BBBD q
0A(A BBBG {
0C(A BBBC $ |/ HK V
G b $ / h HK m
H b $ / t HK z
C b $ / H HK B
K b $ 0 t HK z
C b $ D0 t HK z
C b $ l0 `t HK z
C b $ 0 t HK z
C b $ 0 HK l
A b $ 0 HK C
J b 1 % A[ ,1 AV L1 % A[ l1 % A[ 1 0. Ad 1 @% A[ 1 P% A[ 1 ` AV 2 `% A[ ,2 p% A[ L2 % A[ l2 R N0C $ 2 N _
K t
D Z 2 8 2 0< AD0uA $ 2 P NP\
F d
D 4 3 8R AAD`B
AAF [
DAH $ L3 `7 l
J | t3 x y AD K
KM \
HL ~
AI D
HL D
HL D
HL D
HL D
HL D
HL D
HL dH 3 x 8 4 $4
<4 T4
L l4 BBB B(A0F8DP
8D0A(B BBBG $ 4 M[`P
H 4 h$o K@cd 4 $ BHA C(D9
(A ABBG Y
(A ABBI D
(C ABBD L d5 (& BBB B(F0C8DP
8D0A(B BBBG $ 5 x( M[PP
H $ 5 * MV@K
B L 6 x-S BBB B(A0A8Dp
8A0A(B BBBH $ T6 4, MMI0
E , |6 6 M[`
F L 6 `: BBE B(A0A8DPm
8D0A(B BBBE 6 < N0v
D $ 7 < MI _
K D7 H= \7 @=X t7 = 7 = 7 = , 7 = A_Pq
AF NA 7 > 8 = 8 = $ 48 = MV@K
B \ \8 pA BEE A(A0
(A EBBI
(A EBBA N(A BBB 8 BK A[ mA 8 C[ D0V< 8 HC BBD A(D0r
(D ABBA 4 49 C AEN U
DAB F
ADE $ l9 D M[`P
H $ 9 G MI0y
A < 9 H BBA D(D0
(D ABBA $ 9 Ie Db
J L
L \ 4 $: XI AEN w
DAH F
ADE 4 \: I AEN z
DAE F
ADE : J P |
D d : J; BHA D(D`
(D ABBI
(D ABBE @
(D ABBG $ ; pM A[@
AF $ D; XNP AAG CAA l; N# AY ; N# AY $ ; N AG i
AF ; 8O> At D ; XO( BHA WD
CABD \
AABH $ << @S DPn
F ~
J \ d< TF BKA A(T`
(A ABBC D
(F ABBA D
(C ABBD $ < Vl A[ b
AA < PV P {
E , = Vy A[ b
AA a
AA <= W P @
H , \= Wv A[ b
AA c
AA L = W4 BBB B(A0D8J}
8A0A(B BBBB < = YJ BFA K(G
(D ABBA > Zm D
M \ , <> [ M[p
J L l> ^5 BBE B(A0A8N
8A0A(B BBBK $ > az N u
M i L > aa BBB B(A0A8G
8A0A(B BBBH 4? d < L? d BBA A(J
(A ABBD ? pe2 AR
E O ? e $ ? e MI i
A L ? f ADG "
AAH Z
FAG D
FAE D
FAE 4 <@ 0hj ADG u
AAE ZFA $ t@ hh MN@U
H , @ `ju MMN@
A d @ k BEB B(A0A8GpL
8A0A(B BBBF
8C0A(B BBBF , 4A m A[@U
AF A
AF dA nw P z
F d A (o% BBE E(A0A8D`
8A0A(B BBBD \
8F0A(B BBBA $ A o `D0
D $ B p `DP
A 4 string
Return a string of the NSS library version
nss_version_check(version) --> bool
:Parameters:
version : string
Required version
Return a boolean that indicates whether the underlying NSS library
will perform as the caller expects.
The the version parameter is a string identifier of the NSS
library. That string will be compared against a string that represents
the actual build version of the NSS library. Return True if supplied
version is compatible, False otherwise.
set_shutdown_callback(callback, [user_data1, ...])
:Parameters:
callback : function pointer or None
The callback function. If None cancel the previous callback
user_dataN : object
zero or more caller supplied parameters which will
be passed to the shutdown callback function
Defines a callback function which is invoked when NSS is shutdown.
If the callback is None the previous callback is cancelled.
After NSS is shutdown the shutdown callback is cancelled, you must
reset the shutdown callback again after initializing NSS.
The callback has the signature::
shutdown_callback(nss_data, [user_data1, ...]) -> bool
nss_data
dict of NSS values (currently empty)
user_dataN
zero or more caller supplied optional parameters
The callback should return True for success. If it returns False the
NSS shutdown function will complete but will result in an error.
nss_is_initialized() --> bool
Returns whether Network Security Services has already been initialized or not.
nss_init(cert_dir)
:Parameters:
cert_dir : string
Pathname of the directory where the certificate, key, and
security module databases reside.
Sets up configuration files and performs other tasks required to run
Network Security Services. `nss.nss_init()` differs from
`nss.nss_init_read_write()` because the internal PK11 slot (see
`nss.get_internal_slot()`) is created in Read Only (RO) mode as
opposed to Read Write (RW) mode.
nss_init_read_write(cert_dir)
:Parameters:
cert_dir : string
Pathname of the directory where the certificate, key, and
security module databases reside.
Sets up configuration files and performs other tasks required to run
Network Security Services. `nss.nss_init_read_write()` differs from
`nss.nss_init()` because the internal PK11 slot (see
`nss.get_internal_slot()`) is created in Read Write (RW) mode as
opposed to Read Only (RO) mode.
nss_init_nodb()
Performs tasks required to run Network Security Services without setting up
configuration files. Important: This NSS function is not intended for use with
SSL, which requires that the certificate and key database files be opened.
nss_init_nodb opens only the temporary database and the internal PKCS #112
module. Unlike nss_init, nss_init_nodb allows applications that do not have
access to storage for databases to run raw crypto, hashing, and certificate
functions. nss_init_nodb is not idempotent, so call it only once. The policy
flags for all cipher suites are turned off by default, disallowing all cipher
suites. Therefore, an application cannot use NSS to perform any cryptographic
operations until after it enables appropriate cipher suites by calling one of
the SSL Export Policy Functions.
nss_initialize(cert_dir=None, cert_prefix=None, key_prefix=None, secmod_name=None, flags=0)
:Parameters:
cert_dir : string
Pathname of the directory where the certificate, key, and
security module databases reside.
cert_prefix : string
Prefix added to the beginning of the certificate database,
for example,"https-server1-".
key_prefix : string
Prefix added to the beginning of the key database,
for example, "https-server1-".
secmod_name : string
Name of the security module database,
usually "secmod.db".
flags
Bit flags that specify how NSS should be initialized.
`nss_initialize()` initializes NSS. It is more flexible than `nss_init()`,
`nss_init_read_write()`, and `nss_init_nodb()`. If any of those simpler NSS
initialization functions suffices for your needs, call that instead.
By default `nss_initialize()` and `nss_init_context()` open the
internal PK11 slot (see `get_internal_slot()`) in Read Write (RW) mode
as opposed to `nss_init()` which opens it in Read Only (RO) mode. If
you want RO mode you pass the `NSS_INIT_READONLY` flag.
The flags parameter is a bitwise OR of the following flags:
NSS_INIT_READONLY
Open the databases read only.
NSS_INIT_NOCERTDB
Don't open the cert DB and key DB's, just initialize the volatile
certdb.
NSS_INIT_NOMODDB
Don't open the security module DB, just initialize the PKCS #11 module.
NSS_INIT_FORCEOPEN
Continue to force initializations even if the databases cannot be
opened.
NSS_INIT_NOROOTINIT
Don't try to look for the root certs module automatically.
NSS_INIT_OPTIMIZESPACE
Optimize for space instead of speed. Use smaller tables and caches.
NSS_INIT_PK11THREADSAFE
Only load PKCS#11 modules that are thread-safe, i.e., that support
locking - either OS locking or NSS-provided locks . If a PKCS#11 module
isn't thread-safe, don't serialize its calls; just don't load it
instead. This is necessary if another piece of code is using the same
PKCS#11 modules that NSS is accessing without going through NSS, for
example, the Java SunPKCS11 provider.
NSS_INIT_PK11RELOAD
Ignore the CKR_CRYPTOKI_ALREADY_INITIALIZED error when loading PKCS#11
modules. This is necessary if another piece of code is using the same
PKCS#11 modules that NSS is accessing without going through NSS, for
example, Java SunPKCS11 provider.
NSS_INIT_NOPK11FINALIZE
Never call C_Finalize on any PKCS#11 module. This may be necessary in
order to ensure continuous operation and proper shutdown sequence if
another piece of code is using the same PKCS#11 modules that NSS is
accessing without going through NSS, for example, Java SunPKCS11
provider. The following limitation applies when this is set :
SECMOD_WaitForAnyTokenEvent will not use C_WaitForSlotEvent, in order
to prevent the need for C_Finalize. This call will be emulated instead.
NSS_INIT_RESERVED
Currently has no effect, but may be used in the future to trigger
better cooperation between PKCS#11 modules used by both NSS and the
Java SunPKCS11 provider. This should occur after a new flag is defined
for C_Initialize by the PKCS#11 working group.
NSS_INIT_COOPERATE
Sets the above four recommended options for applications that use both
NSS and the Java SunPKCS11 provider.
Hint: You can obtain a printable representation of the flags via `nss_init_flags`.
nss_init_context(cert_dir=None, cert_prefix=None, key_prefix=None, secmod_name=None, init_params=None, flags=0) -> `InitContext`
:Parameters:
cert_dir : string
Pathname of the directory where the certificate, key, and
security module databases reside.
cert_prefix : string
Prefix added to the beginning of the certificate database,
for example,"https-server1-".
key_prefix : string
Prefix added to the beginning of the key database,
for example, "https-server1-".
secmod_name : string
Name of the security module database,
usually "secmod.db".
init_params : `InitContext` object
Object with a set of initialization parameters.
See `InitContext`.
flags
Bit flags that specify how NSS should be initialized.
`nss_init_context()` initializes NSS within a context and returns a
`InitContext` object. Contexts are used when multiple entities within
a single process wish to use NSS without colliding such as
libraries.
You must hold onto the returned InitContext object and call shutdown
on it when you are done. The context will automatically be shutdown
when the InitContext object is destroyed if you have not already shut
it down.
By default `nss_initialize()` and `nss_init_context()` open the
internal PK11 slot (see `get_internal_slot()`) in Read Write (RW) mode
as opposed to `nss_init()` which opens it in Read Only (RO) mode. If
you want RO mode you pass the `NSS_INIT_READONLY` flag.
The flags parameter is a bitwise OR of the following flags:
NSS_INIT_READONLY
Open the databases read only.
NSS_INIT_NOCERTDB
Don't open the cert DB and key DB's, just initialize the volatile
certdb.
NSS_INIT_NOMODDB
Don't open the security module DB, just initialize the PKCS #11 module.
NSS_INIT_FORCEOPEN
Continue to force initializations even if the databases cannot be
opened.
NSS_INIT_NOROOTINIT
Don't try to look for the root certs module automatically.
NSS_INIT_OPTIMIZESPACE
Optimize for space instead of speed. Use smaller tables and caches.
NSS_INIT_PK11THREADSAFE
Only load PKCS#11 modules that are thread-safe, i.e., that support
locking - either OS locking or NSS-provided locks . If a PKCS#11 module
isn't thread-safe, don't serialize its calls; just don't load it
instead. This is necessary if another piece of code is using the same
PKCS#11 modules that NSS is accessing without going through NSS, for
example, the Java SunPKCS11 provider.
NSS_INIT_PK11RELOAD
Ignore the CKR_CRYPTOKI_ALREADY_INITIALIZED error when loading PKCS#11
modules. This is necessary if another piece of code is using the same
PKCS#11 modules that NSS is accessing without going through NSS, for
example, Java SunPKCS11 provider.
NSS_INIT_NOPK11FINALIZE
Never call C_Finalize on any PKCS#11 module. This may be necessary in
order to ensure continuous operation and proper shutdown sequence if
another piece of code is using the same PKCS#11 modules that NSS is
accessing without going through NSS, for example, Java SunPKCS11
provider. The following limitation applies when this is set :
SECMOD_WaitForAnyTokenEvent will not use C_WaitForSlotEvent, in order
to prevent the need for C_Finalize. This call will be emulated instead.
NSS_INIT_RESERVED
Currently has no effect, but may be used in the future to trigger
better cooperation between PKCS#11 modules used by both NSS and the
Java SunPKCS11 provider. This should occur after a new flag is defined
for C_Initialize by the PKCS#11 working group.
NSS_INIT_COOPERATE
Sets the above four recommended options for applications that use both
NSS and the Java SunPKCS11 provider.
Hint: You can obtain a printable representation of the flags via `nss_init_flags`.
nss_shutdown()
Closes the key and certificate databases that were opened by nss_init().
NSS can only shutdown successfully if all NSS objects have been
released, otherwise nss_shutdown will fail with the error code
SEC_ERROR_BUSY. Here are some tips to make sure nss_shutdown will
succeed. [1]_
* If the process is a SSL client make sure you call
`ssl.clear_session_cache`.
* If the process is a SSL server make sure you call
`ssl.shutdown_server_session_id_cache()`.
* Make sure all sockets have been closed, open SSL sockets hold
references NSS objects.
* Explicitly delete Python objects which contain NSS objects using the
del command. [2]_
* Use `nss.dump_certificate_cache_info()` to provide information about
which cached objects may still persist and be responsible for
preventing a full NSS shutdown.
.. [1] If the leaked objects are subsequently released after
nss_shutdown is called NSS can be reinitialized with the
various NSS initialization routines. In this cass teh
SEC_ERROR_BUSY error can be thought of as an informatiive
warning.
.. [2] This Python binding to NSS wraps each NSS object inside a
Python object. Like NSS objects Python objects are reference
counted. When the last reference to the Python object
disappears the Python object is destroyed. The destructor for a
Python object wrapping an NSS object releases the NSS reference
to the NSS object. Thus if any Python objects which wrap NSS
objects remain "live" nss_shutdown will fail. Python objects
are typically released by the Python interpretor when the
variable holding the object is assigned a new object or when
the variable holding the object goes out of scope. This means
you may need to manually delete some objects using the del
command rather relying on Python's automatic garbage
collection. Consider this example:
def foo():
nss.nss_init(certdir)
sock = ssl.SSLSocket()
nss.nss_shutdown()
When nss_shutown() is called the sock object is still alive and
holds references to NSS objects. The sock object won't be
released by Python until it goes out of scope when the function
exits. Thus the shutdown will fail with SEC_ERROR_BUSY. But you
can explicitly force the sock object to be released by
explictily deleting it, for example:
def foo():
nss.nss_init(certdir)
sock = ssl.SSLSocket()
del sock
nss.nss_shutdown()
Another way to avoid this issue is to arrange your code such
that nss_shutdown is called from a location in your code which
is not in scope for any NSS objects created. This also implies
you shouldn't assign NSS objects to globals.
nss_shutdown_context(context) ->
:Parameters:
context : `InitContext` object
A `InitContext` returned from a previous
call to `nss_init_context`.
Shutdown NSS for the users of this context. When all contexts
have been shutdown NSS will fully shutdown.
dump_certificate_cache_info()
Dump the contents of the certificate cache and the temporary
cert store to stdout.
Use this as a debugging aid to detect leaked references of certs at
shutdown time. For example if `nss.nss_shutdown()` throws a
SEC_ERROR_BUSY exception.
set_password_callback(callback)
:Parameters:
callback : function pointer
The callback function
Defines a callback function used by the NSS libraries whenever
information protected by a password needs to be retrieved from the key
or certificate databases.
Many tokens keep track of the number of attempts to enter a password
and do not allow further attempts after a certain point. Therefore, if
the retry argument is True, indicating that the password was tried and
is wrong, the callback function should return None to indicate that it
is unsuccessful, rather than attempting to return the same password
again. Failing to terminate when the retry argument is True can result
in an endless loop. The user_dataN arguments can also be used to keep
track of the number of times the callback has been invoked.
Several functions in the NSS libraries use the password callback
function to obtain the password before performing operations that
involve the protected information. The extra user_dataN parameters to
the password callback function is application-defined and can be used
for any purpose. When NSS libraries call the password callback
function the value they pass for the user_dataN arguments is
determined by `ssl.SSLSocket.set_pkcs11_pin_arg()`.
The callback has the signature::
password_callback(slot, retry, [user_data1, ...]) -> string or None
slot
PK11Slot object
retry
boolean indicating if this is a retry. This implies that the
callback has previously returned the wrong password.
user_dataN
zero or more caller supplied optional parameters
The callback should return a string or None to indicate a valid
password cannot be supplied. Returning None will prevent the callback
from being invoked again.
list_certs(type, [user_data1, ...]) -> (`Certificate`, ...)
:Parameters:
type : int
PK11CertList* enumerated constant.
user_dataN : object ...
zero or more caller supplied parameters which will
be passed to the password callback function
Given the type of certificates to list return a tuple of `Certificate`
objects matching that type.
find_certs_from_email_addr(email, [user_data1, ...]) -> (`Certificate`, ...)
:Parameters:
email : string
email address.
user_dataN : object ...
zero or more caller supplied parameters which will
be passed to the password callback function
Given an email address return a tuple of `Certificate`
objects containing that address.
find_certs_from_nickname(email, [user_data1, ...]) -> (`Certificate`, ...)
:Parameters:
nickname : string
certificate nickname.
user_dataN : object ...
zero or more caller supplied parameters which will
be passed to the password callback function
Given a certificate nickname return a tuple of `Certificate`
objects matching that nickname.
find_cert_from_nickname(nickname, [user_data1, ...]) -> Certificate
:Parameters:
nickname : string
certificate nickname to search for
user_dataN : object ...
zero or more caller supplied parameters which will
be passed to the password callback function
A nickname is an alias for a certificate subject. There may be
multiple certificates with the same subject, and hence the same
nickname. This function will return the newest certificate that
matches the subject, based on the NotBefore / NotAfter fields of the
certificate.
find_key_by_any_cert(cert, [user_data1, ...]) -> Certificate
:Parameters:
cert : Certificate object
certificate whose private key is being searched for
user_dataN : object ...
zero or more caller supplied parameters which will
be passed to the password callback function
Finds the private key associated with a specified certificate in any
available slot.
generate_random(num_bytes) -> string
:Parameters:
num_bytes : integer
Number of num_bytes to generate (must be non-negative)
Generates random data..
get_default_certdb()
Returns the default certificate database as a CertDB object
get_cert_nicknames(certdb, what, [user_data1, ...]) -> name0, ...
:Parameters:
certdb : CertDB object
CertDB certificate database object
what : integer
one of:
- SEC_CERT_NICKNAMES_ALL
- SEC_CERT_NICKNAMES_USER
- SEC_CERT_NICKNAMES_SERVER
- SEC_CERT_NICKNAMES_CA
user_dataN : object
zero or more caller supplied parameters which will
be passed to the password callback function
Returns a tuple of the nicknames of the certificates in a specified
certificate database.
data_to_hex(data, octets_per_line=0, separator=':') -> string or list of strings
:Parameters:
data : buffer
Binary data
octets_per_line : integer
Number of octets formatted on one line, if 0 then
return a single string instead of an array of lines
separator : string
String used to seperate each octet
If None it will be as if the empty string had been
passed and no separator will be used.
Format the binary data as hex string(s).
Either a list of strings is returned or a single string.
If octets_per_line is greater than zero then a list of
strings will be returned where each string contains
octets_per_line number of octets (except for the last
string in the list which will contain the remainder of the
octets). Returning a list of "lines" makes it convenient
for a caller to format a block of hexadecimal data with line
wrapping. If octets_per_line is greater than zero indicating
a list result is desired a list is always returned even if
the number of octets would produce only a single line.
If octets_per_line is zero then a single string is returned,
(no line splitting is performed). This is the default.
The separator string is used to separate each octet. If None
it will be as if the empty string had been passed and no
separator will be used.
read_hex(input, separators=" ,:\t\n") -> buffer
:Parameters:
input : string
string containing hexadecimal data
separators : string or None
string containing set of separator characters
Any character encountered during parsing which is in
this string will be skipped and considered a separator
between pairs of hexadecimal characters.
Parse a string containing hexadecimal data and return a buffer
object containing the binary octets. Each octet in the string is
represented as a pair of case insensitive hexadecimal characters
(0123456789abcdef). Each octet must be a pair of
characters. Octets may optionally be preceded by 0x or 0X. Octets
may be separated by separator characters specified in the
separators string. The separators string is a set of
characters. Any character in the separators character set will be
ignored when it occurs between octets. If no separators should be
considered then pass an empty string.
Using the default separators each of these strings is valid input
representing the same 8 octet sequence:
01, 23, 45, 67, 89, ab, cd, ef
01, 23, 45, 67, 89, AB, CD, EF
0x01, 0x23, 0x45, 0x67, 0x89, 0xab, 0xcd, 0xef
01:23:45:67:89:ab:cd:ef
0123456789abcdef
01 23 45 67 89 ab cd ef
0x010x230x450x670x890xab0xcd0xef
hash_buf(hash_alg, data) --> digest
:Parameters:
hash_alg : int
hash algorithm enumeration (SEC_OID_*)
e.g.: SEC_OID_MD5, SEC_OID_SHA1, SEC_OID_SHA256, SEC_OID_SHA512, etc.
data : buffer or string
buffer the digest will be computed for
Computes a digest according to the hash_alg type.
Return the digest data as buffer object.
Note, if a hexidecimal string representation is desired then pass
result to data_to_hex()
md5_digest(data) --> digest
:Parameters:
data : buffer or string
buffer the digest will be computed for
Returns 16 octet MD5 digest data as buffer object.
Note, if a hexidecimal string representation is desired then pass
result to data_to_hex()
sha1_digest(data) --> digest
:Parameters:
data : buffer or string
buffer the digest will be computed for
Returns 20 octet SHA1 digest data as buffer object.
Note, if a hexidecimal string representation is desired then pass
result to data_to_hex()
sha256_digest(data) --> digest
:Parameters:
data : buffer or string
buffer the digest will be computed for
Returns 32 octet SHA256 digest data as buffer object.
Note, if a hexidecimal string representation is desired then pass
result to data_to_hex()
sha512_digest(data) --> digest
:Parameters:
data : buffer or string
buffer the digest will be computed for
Returns 64 octet SHA512 digest data as buffer object.
Note, if a hexidecimal string representation is desired then pass
result to data_to_hex()
indented_format(line_fmt_tuples, indent_len=4) -> string
The function supports the display of complex objects which may be
composed of other complex objects. There is often a need to output
section headers or single strings and lists of pairs
(the attribute in this discussion is called a label), or even blank
lines. All of these items should line up in columns at different
indentation levels in order to visually see the structure.
It would not be flexible enough to have object formatting routines
which simply returned a single string with all the indentation and
formatting pre-applied. The indentation width may not be what is
desired. Or more importantly you might not be outputting to text
display. It might be a GUI which desires to display the
information. Most GUI's want to handle each string seperately and
control indentation and the visibility of each item (e.g. a tree
control).
At the same time we want to satisfy the need for easy and simple text
output. This routine will do that, e.g.:
print indented_format(obj.format_lines())
To accomodate necessary flexibility the object formatting methods
(format_lines()) return a list of tuples. Each tuple represents a
single line with the first tuple item being the indentation level for
the line. There may be 0,1 or 2 additional strings in the tuple which
are to be output on the line. A single string are usually one of two
things, either a section header or data that has been continuted onto
multiple lines. Two strings usually represent a pair
with the first string being a label (e.g. attribute name).
Each tuple may be:
(int,)
1-value tuple, no strings, e.g. blank line.
(int, string)
2-value tuple, output string at indent level.
(int, string, string)
3-value tuple, first string is a label, second string is a
value. Starting at the indent level output the label, then
follow with the value. By keeping the label separate from the
value the ouput formatter may elect to align the values in
vertical columns for adjacent lines.
Example::
# This list of tuples,
[(0, 'Constraints'),
(1, 'min:', '0')
(1, 'max:', '100'),
(1, 'Filter Data'),
(2, 'ab bc de f0 12 34 56 78 9a bc de f0')
(2, '12 34 56 78 9a bc de f0 12 34 56 78')
]
# would product this output
Constraints
min: 0
max: 100
Filter Data:
ab bc de f0 12 34 56 78 9a bc de f0
12 34 56 78 9a bc de f0 12 34 56 78
:Parameters:
line_fmt_tuples : [(level, ...),...]
A list of tuples. First tuple value is the indentation level
followed by optional strings for the line.
indent_len : int
Number of space characters repeated for each level and
prepended to the line string.
make_line_fmt_tuples(level, obj) -> [(level, str), ...]
:Parameters:
obj : object
If obj is a tuple or list then each member will be wrapped
in a 2-tuple of (level, str). If obj is a scalar object
then obj will be wrapped in a 2-tuple of (level, obj)
level : integer
Initial indentation level, all subsequent indents are relative
to this starting level.
Return a list of line formatted tuples sutible to passing to
`indented_format()`. Each tuple consists of a integer
level value and a string object. This is equivalent to:
[(level, str(x)) for x in obj].
As a special case convenience if obj is a scalar object (i.e.
not a list or tuple) then [(level, str(obj))] will be returned.
der_universal_secitem_fmt_lines(sec_item, level=0, octets_per_line=0, separator=':') -> list of (indent, string) tuples
:Parameters:
sec_item : SecItem object
A SecItem containing a DER encoded ASN1 universal type
level : integer
Initial indentation level, all subsequent indents are relative
to this starting level.
octets_per_line : integer
Number of octets formatted on one line, if 0 then
return a single string instead of an array of lines
separator : string
String used to seperate each octet
If None it will be as if the empty string had been
passed and no separator will be used.
Given a SecItem in DER format which encodes a ASN.1 universal
type convert the item to a string and return a list of
(indent, string) tuples.
oid_str(oid) -> string
:Parameters:
oid : may be one of integer, string, SecItem
May be one of:
* integer:: A SEC OID enumeration constant, also known as a tag
(i.e. SEC_OID_*) for example SEC_OID_AVA_COMMON_NAME.
* string:: A string in dotted decimal representation, for example
'OID.2.5.4.3'. The 'OID.' prefix is optional.
Or a string for the tag name (e.g. 'SEC_OID_AVA_COMMON_NAME')
The 'SEC_OID\_' prefix is optional. Or one of the canonical
abbreviations (e.g. 'cn'). Case is not significant.
* SecItem:: A SecItem object encapsulating the OID in
DER format.
Given an oid return it's description as a string.
oid_tag_name(oid) -> string
:Parameters:
oid : may be one of integer, string, SecItem
May be one of:
* integer:: A SEC OID enumeration constant, also known as a tag
(i.e. SEC_OID_*) for example SEC_OID_AVA_COMMON_NAME.
* string:: A string in dotted decimal representation, for example
'OID.2.5.4.3'. The 'OID.' prefix is optional.
Or a string for the tag name (e.g. 'SEC_OID_AVA_COMMON_NAME')
The 'SEC_OID\_' prefix is optional. Or one of the canonical
abbreviations (e.g. 'cn'). Case is not significant.
* SecItem:: A SecItem object encapsulating the OID in
DER format.
Given an oid return it's tag constant as a string.
oid_tag(oid) -> int
:Parameters:
oid : may be one of integer, string, SecItem
May be one of:
* integer:: A SEC OID enumeration constant, also known as a tag
(i.e. SEC_OID_*) for example SEC_OID_AVA_COMMON_NAME.
* string:: A string in dotted decimal representation, for example
'OID.2.5.4.3'. The 'OID.' prefix is optional.
Or a string for the tag name (e.g. 'SEC_OID_AVA_COMMON_NAME')
The 'SEC_OID\_' prefix is optional. Or one of the canonical
abbreviations (e.g. 'cn'). Case is not significant.
* SecItem:: A SecItem object encapsulating the OID in
DER format.
Given an oid return it's tag constant.
oid_dotted_decimal(oid) -> string
:Parameters:
oid : may be one of integer, string, SecItem
May be one of:
* integer:: A SEC OID enumeration constant, also known as a tag
(i.e. SEC_OID_*) for example SEC_OID_AVA_COMMON_NAME.
* string:: A string in dotted decimal representation, for example
'OID.2.5.4.3'. The 'OID.' prefix is optional.
Or a string for the tag name (e.g. 'SEC_OID_AVA_COMMON_NAME')
The 'SEC_OID\_' prefix is optional. Or one of the canonical
abbreviations (e.g. 'cn'). Case is not significant.
* SecItem:: A SecItem object encapsulating the OID in
DER format.
Given an oid return it's tag constant as a string.
key_mechanism_type_name(mechanism) -> string
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
Given a key mechanism enumeration constant (CKM_*)
return it's name as a string
key_mechanism_type_from_name(name) -> int
:Parameters:
name : string
name of key mechanism enumeration constant (CKM_*)
Given the name of a key mechanism enumeration constant (CKM_*)
return it's integer constant
The string comparison is case insensitive and will match with
or without the CKM\_ prefix
pk11_attribute_type_name(type) -> string
:Parameters:
type : int
PK11 attribute type constant (CKA_*)
Given a PK11 attribute type constant (CKA_*)
return it's name as a string
pk11_attribute_type_from_name(name) -> int
:Parameters:
name : string
name of PK11 attribute type constant (CKA_*)
Given the name of a PK11 attribute type constant (CKA_*)
return it's integer constant
The string comparison is case insensitive and will match with
or without the CKA\_ prefix
crl_reason_name(reason) -> string
:Parameters:
reason : int
CERTCRLEntryReasonCode constant
Given a CERTCRLEntryReasonCode constant
return it's name as a string
crl_reason_from_name(name) -> int
:Parameters:
name : string
name of CERTCRLEntryReasonCode constant
Given the name of a CERTCRLEntryReasonCode constant
return it's integer constant
The string comparison is case insensitive and will match with
or without the crlEntry prefix
general_name_type_name(type) -> string
:Parameters:
type : int
CERTGeneralNameType constant
Given a CERTGeneralNameType constant
return it's name as a string
general_name_type_from_name(name) -> int
:Parameters:
name : string
name of CERTGeneralNameType constant
Given the name of a CERTGeneralNameType constant
return it's integer constant
The string comparison is case insensitive and will match with
or without the cert prefix
pk11_disabled_reason_str(reason) -> string
:Parameters:
reason : int
PK11 slot disabled reason constant (PK11_DIS_*)
Given a PK11 slot disabled reason constant (PK11_DIS_*)
return a descriptive string
pk11_disabled_reason_name(reason) -> string
:Parameters:
reason : int
PK11 slot disabled reason constant (PK11_DIS_*)
Given a PK11 slot disabled reason constant (PK11_DIS_*)
return the constant as a string.
pk11_logout_all()
Logout of every slot for all modules.
get_best_slot(mechanism, [user_data1, ...]) -> PK11Slot
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
user_dataN : object ...
zero or more caller supplied parameters which will
be passed to the password callback function
Find the best slot which supports the given mechanism.
get_internal_slot() -> PK11Slot
Get the default internal slot.
get_internal_key_slot() -> PK11Slot
Get the default internal key slot.
find_slot_by_name(name) -> `PK11Slot`
:Parameters:
name : string
slot name
Given a slot name return a `PK11Slot` object.
create_context_by_sym_key(mechanism, operation, sym_key, sec_param=None) -> PK11Context
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
operation : int
type of operation this context will be doing. A (CKA_*) constant
(e.g. CKA_ENCRYPT, CKA_DECRYPT, CKA_SIGN, CKA_VERIFY, CKA_DIGEST)
sym_key : PK11SymKey object
symmetric key
sec_param : SecItem object or None
mechanism parameters used to build this context or None.
Create a context from a symmetric key)
import_sym_key(slot, mechanism, origin, operation, key_data, [user_data1, ...]) -> PK11SymKey
:Parameters:
slot : PK11Slot object
designated PK11 slot
mechanism : int
key mechanism enumeration constant (CKM_*)
origin : int
PK11 origin enumeration (PK11Origin*)
e.g. PK11_OriginDerive, PK11_OriginUnwrap, etc.
operation : int
type of operation this context will be doing. A (CKA_*) constant
(e.g. CKA_ENCRYPT, CKA_DECRYPT, CKA_SIGN, CKA_VERIFY, CKA_DIGEST)
key_data: SecItem object
key data encapsulated in a SECItem used to build the symmetric key.
user_dataN : object ...
zero or more caller supplied parameters which will
be passed to the password callback function
Create a PK11SymKey from data)
pub_wrap_sym_key(mechanism, pub_key, sym_key) -> SecItem
:Parameters:
mechanism : int
CK_MECHANISM_TYPE enumerated constant
pub_key : `PublicKey` object
Public key used to wrap.
sym_key : `PK11SymKey` object
Symmetric key that will be wrapped.
:returns:
Wrapped symmetric key as SecItem
Wraps a public key wrap (which only RSA can do).
create_digest_context(hash_alg) -> PK11Context
:Parameters:
hash_alg : int
hash algorithm enumeration (SEC_OID_*)
e.g.: SEC_OID_MD5, SEC_OID_SHA1, SEC_OID_SHA256, SEC_OID_SHA512, etc.
Create a context for performing digest (hash) operations)
param_from_iv(mechanism, iv=None) -> SecItem
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
iv : SecItem object
initialization vector. If there is no initialization vector you may also pass
None or an empty SecItem object (e.g. SecItem())
Return a SecItem to be used as the initialization vector for encryption/decryption.
param_from_algid(algid) -> SecItem
:Parameters:
algid : AlgorithmID object
algorithm id
Return a SecItem containing a encryption param derived from a AlgorithmID.
generate_new_param(mechanism, sym_key=None) -> SecItem
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
sym_key : PK11SymKey object or None
symmetric key or None
Return a SecItem containing a encryption param.
algtag_to_mechanism(algtag) -> mechanism
:Parameters:
algtag : int
algorithm tag (e.g. SEC_OID_*)
Returns the key mechanism enumeration constant (CKM_*)
given an algorithm tag. Throws a KeyError exception if the
algorithm tag is invalid.
mechanism_to_algtag(mechanism) -> algtag
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
Returns the algtag given key mechanism enumeration constant (CKM_*)
Throws an KeyError exception if the mechanism is invalid.
get_iv_length(mechanism) -> algtag
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
Returns the length of the mechanism's initialization vector.
get_block_size(mechanism, sec_param=None) -> int
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
sec_param : SecItem object or None
mechanism parameters used to build this context or None.
Get the mechanism block size
get_pad_mechanism(mechanism) -> int
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
Determine appropriate mechanism to use when padding is required.
If the mechanism does not map to a padding mechanism return the mechanism.
import_crl(slot, der_crl, url, type, import_options, decode_options, [user_data1, ...]) -> SignedCRL
:Parameters:
slot : PK11Slot object
designated PK11 slot
der_crl : SecItem object
signed DER CRL data encapsulated in a SecItem object.
url : string
URL of the CRL
type : int
revocation list type
may be one of:
- SEC_CRL_TYPE
- SEC_KRL_TYPE
import_options : int
bit-wise OR of the following flags:
- CRL_IMPORT_BYPASS_CHECKS
or use CRL_IMPORT_DEFAULT_OPTIONS
decode_options : int
bit-wise OR of the following flags:
- CRL_DECODE_DONT_COPY_DER
- CRL_DECODE_SKIP_ENTRIES
- CRL_DECODE_KEEP_BAD_CRL
- CRL_DECODE_ADOPT_HEAP_DER
or use CRL_DECODE_DEFAULT_OPTIONS
user_dataN : object
zero or more caller supplied parameters which will
be passed to the password callback function
pk11_need_pw_init() -> bool
Returns True if the internal slot needs to be initialized, False otherwise.
The internal slot token should be initalized if:
The token is not initialized
`PK11Slot.need_login()` == True and `PK11Slot.need_user_init()` == True
Or
The token has a NULL password.
`PK11Slot.need_login()` == False and `PK11Slot.need_user_init()` == False
+------------------+------------------------+---------------------+
|CKF_LOGIN_REQUIRED|CKF_USER_PIN_INITIALIZED|CKF_TOKEN_INITIALIZED|
+==================+========================+=====================+
| False | False | True |
+------------------+------------------------+---------------------+
| True | False | False |
+------------------+------------------------+---------------------+
| False | True | True |
+------------------+------------------------+---------------------+
| True | True | True |
+------------------+------------------------+---------------------+
`PK11Slot.need_login()` == CKF_LOGIN_REQUIRED
`PK11Slot.need_user_init()` == !CKF_USER_PIN_INITIALIZED
pk11_token_exists(mechanism) -> bool
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
Return True if a token is available which can perform
the desired mechanism, False otherwise.
pk11_is_fips() -> bool
Returns True if the internal module has FIPS enabled, False otherwise.
decode_der_crl(der_crl, type=SEC_CRL_TYPE, decode_options=CRL_DECODE_DEFAULT_OPTIONS) -> SignedCRL
:Parameters:
der_crl : SecItem object
DER encoded CRL data encapsulated in a SECItem.
type : int
revocation list type
may be one of:
- SEC_CRL_TYPE
- SEC_KRL_TYPE
decode_options : int
bit-wise OR of the following flags:
- CRL_DECODE_DONT_COPY_DER
- CRL_DECODE_SKIP_ENTRIES
- CRL_DECODE_KEEP_BAD_CRL
- CRL_DECODE_ADOPT_HEAP_DER
or use CRL_DECODE_DEFAULT_OPTIONS
read_der_from_file(file, ascii=False) -> SecItem
:Parameters:
file : file name or file object
If string treat as file path to open and read,
if file object read from file object.
ascii : boolean
If True treat file contents as ascii data.
If PEM delimiters are found strip them.
Then base64 decode the contents.
Read the contents of a file and return as a SecItem object.
If file is a string then treat it as a file pathname and open
and read the contents of that file. If file is a file object
then read the contents from the file object
If the file contents begin with a PEM header then treat the
the file as PEM encoded and decode the payload into DER form.
Otherwise the file contents is assumed to already be in DER form.
The returned SecItem contains the DER contents of the file.
base64_to_binary(text) -> SecItem
:Parameters:
text : string
string containing base64 data.
Convert the base64 encoded data to binary data.
The text is assumed to contain base64 text. The base64 text may
optionally be wrapped in a PEM header and footer.
Returns a SecItem containg the binary data.
x509_key_usage(bitstr, repr_kind=AsEnumDescription) -> (str, ...)
:Parameters:
bitstr : SecItem object
A SecItem containing a DER encoded bit string.
repr_kind : RepresentationKind constant
Specifies what the contents of the returned tuple will be.
May be one of:
AsEnum
The enumerated constant.
(e.g. nss.KU_DIGITAL_SIGNATURE)
AsEnumDescription
A friendly human readable description of the enumerated constant as a string.
(e.g. "Digital Signature")
AsIndex
The bit position within the bit string.
Return a tuple of string name for each enabled bit in the key
usage bit string.
x509_cert_type(bitstr, repr_kind=AsEnumDescription) -> (str, ...)
:Parameters:
bitstr : SecItem object
A SecItem containing a DER encoded bit string.
repr_kind : RepresentationKind constant
Specifies what the contents of the returned tuple will be.
May be one of:
AsEnum
The enumerated constant.
(e.g. nss.NS_CERT_TYPE_SSL_SERVER)
AsEnumDescription
A friendly human readable description of the enumerated constant as a string.
(e.g. "SSL Server")
AsIndex
The bit position within the bit string.
Return a tuple of string name for each enabled bit in the key
usage bit string.
x509_ext_key_usage(sec_item, repr_kind=AsString) -> (obj, ...)
:Parameters:
sec_item : SecItem object
A SecItem containing a DER encoded sequence of OID's
repr_kind : RepresentationKind constant
Specifies what the contents of the returned tuple will be.
May be one of:
AsObject
Each extended key usage will be a SecItem object embedding
the OID in DER format.
AsString
Each extended key usage will be a descriptive string.
(e.g. "TLS Web Server Authentication Certificate")
AsDottedDecimal
Each extended key usage will be OID rendered as a dotted decimal string.
(e.g. "OID.1.3.6.1.5.5.7.3.1")
AsEnum
Each extended key usage will be OID tag enumeration constant (int).
(e.g. nss.SEC_OID_EXT_KEY_USAGE_SERVER_AUTH)
Return a tuple of OID's according the representation kind.
x509_alt_name(sec_item, repr_kind=AsString) -> (SecItem, ...)
:Parameters:
sec_item : SecItem object
A SecItem containing a DER encoded alternative name extension.
repr_kind : RepresentationKind constant
Specifies what the contents of the returned tuple will be.
May be one of:
AsObject
The general name as a nss.GeneralName object
AsString
The general name as a string.
(e.g. "http://crl.geotrust.com/crls/secureca.crl")
AsTypeString
The general name type as a string.
(e.g. "URI")
AsTypeEnum
The general name type as a general name type enumerated constant.
(e.g. nss.certURI )
AsLabeledString
The general name as a string with it's type prepended.
(e.g. "URI: http://crl.geotrust.com/crls/secureca.crl"
Return a tuple of GeneralNames according the representation kind.
cert_usage_flags(flags, repr_kind=AsEnumDescription) -> ['flag_name', ...]
:Parameters:
flags : int
certificateUsage* bit flags
repr_kind : RepresentationKind constant
Specifies what the contents of the returned list will be.
May be one of:
AsEnum
The enumerated constant as an integer value.
AsEnumName
The name of the enumerated constant as a string.
AsEnumDescription
A friendly human readable description of the enumerated constant as a string.
Given an integer with certificateUsage*
(e.g. nss.certificateUsageSSLServer) bit flags return a sorted
list of their string names.
key_usage_flags(flags, repr_kind=AsEnumName) -> ['flag_name', ...]
:Parameters:
flags : int
KU_* bit flags
repr_kind : RepresentationKind constant
Specifies what the contents of the returned list will be.
May be one of:
AsEnum
The enumerated constant as an integer value.
AsEnumName
The name of the enumerated constant as a string.
AsEnumDescription
A friendly human readable description of the enumerated constant as a string.
Given an integer with KU_*
(e.g. nss.KU_DIGITAL_SIGNATURE) bit flags return a sorted
list of their string names.
cert_type_flags(flags, repr_kind=AsEnumName) -> ['flag_name', ...]
:Parameters:
flags : int
KU_* bit flags
repr_kind : RepresentationKind constant
Specifies what the contents of the returned list will be.
May be one of:
AsEnum
The enumerated constant as an integer value.
AsEnumName
The name of the enumerated constant as a string.
AsEnumDescription
A friendly human readable description of the enumerated constant as a string.
Given an integer with NS_CERT_TYPE_*
(e.g. nss.NS_CERT_TYPE_SSL_SERVER) bit flags return a sorted
list of their string names.
nss_init_flags(flags, repr_kind=AsEnumName) -> ['flag_name', ...]
:Parameters:
flags : int
NSS_INIT* bit flags
repr_kind : RepresentationKind constant
Specifies what the contents of the returned list will be.
May be one of:
AsEnum
The enumerated constant as an integer value.
AsEnumName
The name of the enumerated constant as a string.
AsEnumDescription
A friendly human readable description of the enumerated constant as a string.
Given an integer with NSS_INIT*
(e.g. nss.NSS_INIT_READONLY) bit flags return a sorted
list of their string names.
pkcs12_enable_cipher(cipher, enabled)
:Parameters:
cipher : integer
The PKCS12 cipher suite enumeration (e.g. `PKCS12_DES_EDE3_168`, etc.)
enabled : bool or int
True enables, False disables
The cipher may be one of:
- PKCS12_RC2_CBC_40
- PKCS12_RC2_CBC_128
- PKCS12_RC4_40
- PKCS12_RC4_128
- PKCS12_DES_56
- PKCS12_DES_EDE3_168
pkcs12_enable_all_ciphers()
Enables all PKCS12 ciphers, which are:
- `PKCS12_RC2_CBC_40`
- `PKCS12_RC2_CBC_128`
- `PKCS12_RC4_40`
- `PKCS12_RC4_128`
- `PKCS12_DES_56`
- `PKCS12_DES_EDE3_168`
pkcs12_set_preferred_cipher(cipher, enabled)
:Parameters:
cipher : integer
The PKCS12 cipher suite enumeration (e.g. `PKCS12_DES_EDE3_168`, etc.)
enabled : bool or int
True enables, False disables
This function enables or disables the preferred flag on a
PKCS cipher. The default preferred cipher is `PKCS12_RC2_CBC_40`.
The cipher may be one of:
- `PKCS12_RC2_CBC_40`
- `PKCS12_RC2_CBC_128`
- `PKCS12_RC4_40`
- `PKCS12_RC4_128`
- `PKCS12_DES_56`
- `PKCS12_DES_EDE3_168`
pkcs12_cipher_name(cipher) -> string
:Parameters:
cipher : int
PKCS12_* constant
Given a PKCS12_* constant
return it's name as a string
pkcs12_cipher_from_name(name) -> int
:Parameters:
name : string
name of PKCS12_* constant
Given the name of a PKCS12_* constant
return it's integer constant
The string comparison is case insensitive and will match with
or without the PKCS12\_ prefix
pkcs12_map_cipher(cipher, key_length=0) -> int
:Parameters:
cipher : may be one of integer, string or SecItem
May be one of:
* integer:: A SEC OID enumeration constant, also known as a tag
(i.e. SEC_OID_*) for example SEC_OID_DES_EDE3_CBC.
* string:: A string for the tag name
(e.g. 'SEC_OID_DES_EDE3_CBC') The 'SEC_OID\_' prefix is
optional. A string in dotted decimal representation, for
example 'OID.2.5.4.3'. The 'OID.' prefix is optional. Case
is not significant.
* SecItem:: A SecItem object encapsulating the OID in
DER format.
key_length : int
The number of bits in the key. If zero a default will be selected.
Given an cipher and optionally a key length, map that to a PKCS12 encryption
method returned as a SEC_OID tag.
pkcs12_set_nickname_collision_callback(callback)
:Parameters:
callback : function pointer
The callback function
When importing a certificate via a `PKCS12Decoder` object and the
nickname is not set or collides with an existing nickname in the NSS
database then this callback is invoked to resolve the problem. If no
nickname collision callback has been set then an internal default
callback will be used instead which calls the NSS function CERT_MakeCANickname
(available in the Python binding as `Certificate.make_ca_nickname()`).
The callback has the signature::
nickname_collision_callback(old_nickname, cert) --> new_nickname, cancel
old_nickname
the preious nickname or None if previous did not exist
cert
the `Certificate` object being imported.
The callback returns 2 values, the new nickname, and a boolean.
new_nickname
The new nickname to try or None
cancel
boolean indicating if collision resolution should be cancelled
pkcs12_export(nickname, pkcs12_password, key_cipher=SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC, cert_cipher=SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC, pin_args=None)
:Parameters:
nickname : string
Certificate nickname to search for.
pkcs12_password : string
The password used to protect the pkcs12_file.
key_cipher : int
A SEC OID TAG enumerated constant selecting the
encryption for the private key (see below).
Also see `nss.pkcs12_map_cipher()` for an alternative
method to select the encryption cipher.
cert_cipher : int
A SEC OID TAG enumerated constant selecting the
encryption for the certificates (see below).
Also see `nss.pkcs12_map_cipher()` for an alternative
method to select the encryption cipher.
pin_args : tuple
Extra parameters which will
be passed to the password callback function.
pkcs12_export() is used to export a certificate and private key pair
from the NSS database in a protected manner. It produces the binary
content of what is typically called a .p12 file (e.g. PKCS12). This
function does not write the file, if you want to write a .p12 file
you must write it's output to a file, for example:
::
pkcs12_data = nss.pkcs12_export(nickname, pkcs12_file_password)
f = open(p12_file_path, 'w')
f.write(pkcs12_data)
f.close()
Password Based Encryption
-------------------------
PKCS #12 provides for not only the protection of the private keys but
also the certificate and meta-data associated with the keys. Password
based encryption is used to protect private keys (i.e. key_cipher) on
export to a PKCS #12 file and also the entire package when allowed
(i.e. cert_cipher). If no algorithm is specified it defaults to using
'PKCS #12 V2 PBE With SHA-1 And 3KEY Triple DES-CBC' for private key
encryption. For historical export control reasons 'PKCS #12 V2 PBE
With SHA-1 And 40 Bit RC2 CBC' is the default for the overall package
encryption when not in FIPS mode and no package encryption when in
FIPS mode. The private key is always protected with strong encryption
by default.
A list of ciphers follows, the term is the SEC OID TAG followd by a
friendly description.
* symmetric CBC ciphers for PKCS #5 V2:
SEC_OID_DES_CBC
DES-CBC.
SEC_OID_RC2_CBC
RC2-CBC.
SEC_OID_RC5_CBC_PAD
RC5-CBCPad.
SEC_OID_DES_EDE3_CBC
DES-EDE3-CBC.
SEC_OID_AES_128_CBC
AES-128-CBC.
SEC_OID_AES_192_CBC
AES-192-CBC.
SEC_OID_AES_256_CBC
AES-256-CBC.
SEC_OID_CAMELLIA_128_CBC
CAMELLIA-128-CBC.
SEC_OID_CAMELLIA_192_CBC
CAMELLIA-192-CBC.
SEC_OID_CAMELLIA_256_CBC
CAMELLIA-256-CBC.
* PKCS #12 PBE Ciphers:
SEC_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC4
PKCS #12 PBE With SHA-1 and 128 Bit RC4.
SEC_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC4
PKCS #12 PBE With SHA-1 and 40 Bit RC4.
SEC_OID_PKCS12_PBE_WITH_SHA1_AND_TRIPLE_DES_CBC
PKCS #12 PBE With SHA-1 and Triple DES-CBC.
SEC_OID_PKCS12_PBE_WITH_SHA1_AND_128_BIT_RC2_CBC
PKCS #12 PBE With SHA-1 and 128 Bit RC2 CBC.
SEC_OID_PKCS12_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC
PKCS #12 PBE With SHA-1 and 40 Bit RC2 CBC.
SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_128_BIT_RC4
PKCS #12 V2 PBE With SHA-1 And 128 Bit RC4.
SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC4
PKCS #12 V2 PBE With SHA-1 And 40 Bit RC4.
SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_3KEY_TRIPLE_DES_CBC
PKCS #12 V2 PBE With SHA-1 And 3KEY Triple DES-CBC.
SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_2KEY_TRIPLE_DES_CBC
PKCS #12 V2 PBE With SHA-1 And 2KEY Triple DES-CBC.
SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_128_BIT_RC2_CBC
PKCS #12 V2 PBE With SHA-1 And 128 Bit RC2 CBC.
SEC_OID_PKCS12_V2_PBE_WITH_SHA1_AND_40_BIT_RC2_CBC
PKCS #12 V2 PBE With SHA-1 And 40 Bit RC2 CBC.
* PKCS #5 PBE Ciphers:
SEC_OID_PKCS5_PBE_WITH_MD2_AND_DES_CBC
PKCS #5 Password Based Encryption with MD2 and DES-CBC.
SEC_OID_PKCS5_PBE_WITH_MD5_AND_DES_CBC
PKCS #5 Password Based Encryption with MD5 and DES-CBC.
SEC_OID_PKCS5_PBE_WITH_SHA1_AND_DES_CBC
PKCS #5 Password Based Encryption with SHA-1 and DES-CBC.
fingerprint_format_lines(data, level=0) ->
:Parameters:
data : SecItem or str or any buffer compatible object
Data to initialize the certificate request from, must be in DER format
level : integer
Initial indentation level, all subsequent indents are relative
to this starting level.
Generates digests of data (i.e. fingerprint) and formats
it into line tuples for text output.
get_use_pkix_for_validation() -> flag
Returns the current value of the flag used to enable or disable the
use of PKIX for certificate validation. See also:
`set_use_pkix_for_validation`.
set_use_pkix_for_validation(flag) -> prev_flag
:Parameters:
flag : boolean
Boolean flag, True to enable PKIX validation,
False to disable PKIX validation.
Sets the flag to enable or disable the use of PKIX for certificate
validation. Returns the previous value of the flag.
See also: `get_use_pkix_for_validation`.
enable_ocsp_checking(certdb=get_default_certdb())
:Parameters:
certdb : CertDB object or None
CertDB certificate database object, if None then the default
certdb will be supplied by calling `nss.get_default_certdb()`.
Turns on OCSP checking for the given certificate database.
disable_ocsp_checking(certdb=get_default_certdb())
:Parameters:
certdb : CertDB object or None
CertDB certificate database object, if None then the default
certdb will be supplied by calling `nss.get_default_certdb()`.
Turns off OCSP checking for the given certificate database. It will
raise an exception with SEC_ERROR_OCSP_NOT_ENABLED as the error code
if OCSP checking is not enabled. It is safe to call it when OCSP
checking is disabled, you can just ignore the exception if it is
easier to just call it than to remember if it was enabled.
set_ocsp_cache_settings(max_cache_entries, min_secs_till_next_fetch, max_secs_till_next_fetch)
:Parameters:
max_cache_entries : int
Maximum number of cache entries.
Special values, -1 disables the cache, 0 indicates unlimited cache entries.
min_secs_till_next_fetch : int
Whenever an OCSP request was attempted or completed over the network,
wait at least this number of seconds before trying to fetch again.
max_secs_till_next_fetch : int
The maximum age of a cached response we allow, until we try
to fetch an updated response, even if the OCSP responder expects
that a newer information update will not be available yet.
Sets parameters that control NSS' internal OCSP cache.
set_ocsp_failure_mode(failure_mode)
:Parameters:
failure_mode : int
A ocspMode_Failure* constant
Set the desired behaviour on OCSP failures.
failure_mode may be one of:
- ocspMode_FailureIsVerificationFailure
- ocspMode_FailureIsNotAVerificationFailure
set_ocsp_timeout(seconds)
:Parameters:
seconds : int
Maximum number of seconds NSS will wait for an OCSP response.
Configure the maximum time NSS will wait for an OCSP response.
clear_ocsp_cache()
Removes all items currently stored in the OCSP cache.
set_ocsp_default_responder(certdb, url, nickname)
:Parameters:
certdb : CertDB object
CertDB certificate database object.
url : string
The location of the default responder (e.g. "http://foo.com:80/ocsp")
Note that the location will not be tested until the first attempt
to send a request there.
nickname : string
The nickname of the cert to trust (expected) to sign the OCSP responses.
If the corresponding cert cannot be found, SECFailure is returned.
Specify the location and cert of the default responder. If OCSP
checking is already enabled and use of a default responder is also
already enabled, all OCSP checking from now on will go directly to the
specified responder. If OCSP checking is not enabled, or if it is
enabled but use of a default responder is not enabled, the information
will be recorded and take effect whenever both are enabled.
enable_ocsp_default_responder(certdb=get_default_certdb())
:Parameters:
certdb : CertDB object or None
CertDB certificate database object, if None then the default
certdb will be supplied by calling `nss.get_default_certdb()`.
Turns on use of a default responder when OCSP checking. If OCSP
checking is already enabled, this will make subsequent checks go
directly to the default responder. (The location of the responder and
the nickname of the responder cert must already be specified.) If
OCSP checking is not enabled, this will be recorded and take effect
whenever it is enabled.
disable_ocsp_default_responder(certdb=get_default_certdb())
:Parameters:
certdb : CertDB object or None
CertDB certificate database object, if None then the default
certdb will be supplied by calling `nss.get_default_certdb()`.
Turns off use of a default responder when OCSP checking.
(Does nothing if use of a default responder is not enabled.)
SecItem(data=None, type=siBuffer)
:Parameters:
data : any read buffer compatible object (e.g. buffer or string)
raw data to initialize from
type : int
SECItemType constant (e.g. si*)
Encoded data. Used internally by NSS
An object representing a signature algorithm RSAGenParams(key_size=1024, public_exponent=0x10001)
:Parameters:
key_size : integer
RSA key size in bits.
public_exponent : integer
public exponent.
An object representing RSAGenParams.
KEYPQGParams(prime=None, subprime=None, base=None)
:Parameters:
prime : SecItem or str or any buffer compatible object or None
prime (also known as p)
subprime : SecItem or str or any buffer compatible object or None
subprime (also known as q)
base : SecItem or str or any buffer compatible object or None
base (also known as g)
An object representing DSA key parameters
- prime (also known as p)
- subprime (also known as q)
- base (also known as g)
If no parameters are passed the default PQG the KeyPQGParams will
be intialized to default values. If you pass any initialization
parameters then they must all be passed.
An object representing an RSA Public Key A object representing a DSA Public Key A object representing a signature An object representing a Public Key An object representing a Subject Public Key An object representing a Certificate Database An object representing a certificate extension Certificate(data, certdb=get_default_certdb(), perm=False, nickname=None)
:Parameters:
data : SecItem or str or any buffer compatible object
Data to initialize the certificate from, must be in DER format
certdb : CertDB object or None
CertDB certificate database object, if None then the default
certdb will be supplied by calling `nss.get_default_certdb()`.
perm : bool
True if certificate should be permantely stored in the certdb.
nickname : string
certificate nickname.
An X509 Certificate object.
The Certificate is initialized from the supplied DER data. The
Certificate is added to the NSS temporary database. If perm is True
then the Certificate is also permanently written into certdb.
An object representing a Private Key An object representing a signed certificate revocation list An object representing a PKCS #11 Slot Holds a hash, encryption or signing context for multi-part operations.
An object representing a CRL Distribution Point An object representing CRL Distribution Points list AuthorityInfoAccess()
An object representing AuthorityInfoAccess.
AuthorityInfoAccesses(data)
:Parameters:
data : SecItem or str or any buffer compatible object
Data to initialize the Authority Information Access
from, must be in DER format
An object representing AuthorityInfoAccess Extension.
An object representing an AVA (attribute value assertion).
AVA(type, value)
:Parameters:
type : may be one of integer, string, SecItem
What kind of attribute is being created. May be
one of:
* integer: A SEC OID enumeration constant (i.e. SEC_OID_*)
for example SEC_OID_AVA_COMMON_NAME.
* string: A string either as the ava name, for example 'cn'
or as the dotted decimal representation, for example
'OID.2.5.4.3'. Case is not significant for either form.
* SecItem: A SecItem object encapsulating the OID in
DER format.
value : string
The value of the AVA, must be a string.
RDN's (Relative Distinguished Name) are composed from AVA's.
An `RDN` is a sequence of AVA's.
An example of an AVA is "CN=www.redhat.com" where CN is the X500
directory abbrevation for "Common Name".
An AVA is composed of two items:
type
Specifies the attribute (e.g. CN). AVA types are specified by
predefined OID's (Object Identifiers). For example the OID of CN
is 2.5.4.3 ({joint-iso-itu-t(2) ds(5) attributeType(4) commonName(3)})
OID's in NSS are encapsulated in a SecItem as a DER encoded OID.
Because DER encoded OID's are less than ideal mechanisms by which
to specify an item NSS has mapped each OID to a integral enumerated
constant called an OID tag (i.e. SEC_OID_*). Many of the NSS API's
will accept an OID tag number instead of DER encoded OID in a SecItem.
One can easily convert between DER encoded OID's, tags, and their
string representation in dotted-decimal format. The enumerated OID
constants are the most efficient in most cases.
value
The value of the attribute (e.g. 'www.redhat.com').
Examples::
The AVA cn=www.redhat.com can be created in any of the follow ways:
ava = nss.AVA('cn', 'www.redhat.com')
ava = nss.AVA(nss.SEC_OID_AVA_COMMON_NAME, 'www.redhat.com')
ava = nss.AVA('2.5.4.3', 'www.redhat.com')
ava = nss.AVA('OID.2.5.4.3', 'www.redhat.com')
An object representing an X501 Relative Distinguished Name (e.g. RDN).
RDN objects contain an ordered list of `AVA` objects.
Examples::
RDN()
RDN(nss.AVA('cn', 'www.redhat.com'))
RDN([ava0, ava1])
The RDN object constructor may be invoked with zero or more
`AVA` objects, or you may optionally pass a list or tuple of `AVA`
objects.
RDN objects contain an ordered list of `AVA` objects. The
RDN object has both sequence and mapping behaviors with respect to
the AVA's they contain. Thus you can index an AVA by position, by
name, or by SecItem (if it's an OID). You can iterate over the list,
get it's length or take a slice.
If you index by string the string may be either a canonical name for
the AVA type (e.g. 'cn') or the dotted-decimal notation for the OID
(e.g. 2.5.4.3). There may be multiple AVA's in a RDN whose type matches
(e.g. OU=engineering+OU=boston). It is not common to have more than
one AVA in a RDN with the same type. However because of the possiblity
of being multi-valued when indexing by type a list is always returned
containing the matching AVA's. Thus::
rdn = nss.RDN(nss.AVA('OU', 'engineering'))
rdn['ou']
returns [AVA('OU=engineering')
rdn = nss.RDN(nss.AVA('OU', 'engineering'), nss.AVA('OU', 'boston'))
rdn['ou']
returns [AVA('OU=boston'), AVA('OU=engineering')]
Examples::
rdn = nss.RDN(nss.AVA('cn', 'www.redhat.com'))
str(rdn)
returns 'CN=www.redhat.com'
rdn[0]
returns an `AVA` object with the value C=US
rdn['cn']
returns a list comprised of an `AVA` object with the value CN=www.redhat.com
rdn['2.5.4.3']
returns a list comprised of an `AVA` object with the value CN=www.redhat.com
because 2.5.4.3 is the dotted-decimal OID for common name (i.e. cn)
rdn.has_key('cn')
returns True because the RDN has a common name RDN
rdn.has_key('2.5.4.3')
returns True because the RDN has a common name AVA
because 2.5.4.3 is the dotted-decimal OID for common name (i.e. cn)
len(rdn)
returns 1 because there is one `AVA` object in it
list(rdn)
returns a list of each `AVA` object in it
An object representing an X501 Distinguished Name (e.g DN).
DN objects contain an ordered list of `RDN` objects.
The DN object constructor may be invoked with a string
representing an X500 name. Zero or more `RDN` objects, or you may
optionally pass a list or tuple of `RDN` objects.
Examples::
DN()
DN('CN=www.redhat.com,OU=Web Operations,O=Red Hat Inc,L=Raleigh,ST=North Carolina,C=US')
DN(rdn0, ...)
DN([rdn0, rdn1])
**The string representation of a Distinguished Name (DN) has reverse
ordering from it's sequential components.**
The ordering is a requirement of the relevant RFC's. When a
Distinguished Name is rendered as a string it is ordered from most
specific to least specific. However it's components (RDN's) as a
sequence are ordered from least specific to most specific.
DN objects contain an ordered list of `RDN` objects. The
DN object has both sequence and mapping behaviors with respect to
the RDN's they contain. Thus you can index an RDN by position, by
name, or by SecItem (if it's an OID). You can iterate over the list,
get it's length or take a slice.
If you index by string the string may be either a canonical name for
the RDN type (e.g. 'cn') or the dotted-decimal notation for the OID
(e.g. 2.5.4.3). There may be multiple RDN's in a DN whose type matches
(e.g. OU=engineering, OU=boston). It is not common to have more than
one RDN in a DN with the same type. However because of the possiblity
of being multi-valued when indexing by type a list is always returned
containing the matching RDN's. Thus::
dn = nss.DN('OU=engineering')
dn['ou']
returns [RDN('OU=engineering')
dn = nss.DN('OU=engineering, OU=boston')
dn['ou']
returns [RDN('OU=boston'), RDN('OU=engineering')]
Note the reverse ordering between string representation and RDN sequencing
Note, if you use properties to access the RDN values (e.g. name.common_name,
name.org_unit_name) the string value is returned or None if not found.
If the item was multi-valued then the most appropriate item will be selected
and returned as a string value.
Note it is not possible to index by oid tag
(e.g. nss.SEC_OID_AVA_COMMON_NAME) because oid tags are integers and
it's impossible to distinguish between an integer representing the
n'th member of the sequence and the integer representing the oid
tag. In this case positional indexing wins (e.g. rdn[0] means the
first element).
Examples::
subject_name = 'CN=www.redhat.com,OU=Web Operations,O=Red Hat Inc,L=Raleigh,ST=North Carolina,C=US'
name = nss.DN(subject_name)
str(name)
returns 'CN=www.redhat.com,OU=Web Operations,O=Red Hat Inc,L=Raleigh,ST=North Carolina,C=US'
name[0]
returns an `RDN` object with the value C=US
name['cn']
returns a list comprised of an `RDN` object with the value CN=www.redhat.com
name['2.5.4.3']
returns a list comprised of an `RDN` object with the value CN=www.redhat.com
because 2.5.4.3 is the dotted-decimal OID for common name (i.e. cn)
name.common_name
returns the string www.redhat.com
common_name is easy shorthand property, it only retuns a single string
value or None, if it was multi-valued the most appropriate item is selected.
name.has_key('cn')
returns True because the DN has a common name RDN
name.has_key('2.5.4.3')
returns True because the DN has a common name RDN
because 2.5.4.3 is the dotted-decimal OID for common name (i.e. cn)
cn_rdn = nss.RDN(nss.AVA('cn', 'www.redhat.com'))
ou_rdn = nss.RDN(nss.AVA('ou', 'Web Operations'))
name = nss.DN(cn_rdn)
name
is a DN with one RDN (e.g. CN=www.redhat.com)
len(name)
returns 1 because there is one RDN in it
name.add_rdn(ou_rdn)
name
name is now a DN with two RDN's (e.g. OU=Web Operations,CN=www.redhat.com)
len(name)
returns 2 because there are now two RDN's in it
list(name)
returns a list with the two RDN's in it
name[:]
same as list(name)
for rdn in name:
iterate over each RDN in name
name = nss.DN(cn_rdn, ou_rdn)
This is an alternate way to build the above DN
An object representing a GeneralName or list of GeneralNames.
An object representing Authentication Key ID extension An object representing X509 Basic Constraints Extension CertAttribute()
An object representing CertAttribute.
CertificateRequest(data=None)
:Parameters:
data : SecItem or str or any buffer compatible object
Data to initialize the certificate request from, must be in DER format
An object representing a certificate request An object representing NSS Initialization Parameters An object representing NSSInitContext An object representing an item in a PKCS12 collection.
Also known as a "bag" PKCS12Decoder(file, password, slot=None)
:Parameters:
file : file name or file object
pkcs12 input data.
* If string treat as file path to open and read.
* If file object read from the file object.
password : string
The password protecting the PKCS12 contents
slot : `PK11Slot` object
The PK11 slot to use. If None defaults to internal
slot, see `nss.get_internal_key_slot()`
CertVerifyLogNode()
An object detailing specific diagnostic information concerning
a single failure during certification validation.
These are collected in a `CertVerifyLog` object.
CertVerifyLog()
An object which collects diagnostic information during
certification validation.
get_oid_sequence(repr_kind=AsString) -> (obj, ...)
:Parameters:
repr_kind : RepresentationKind constant
Specifies what the contents of the returned tuple will be.
May be one of:
AsObject
Each extended key usage will be a SecItem object embedding
the OID in DER format.
AsString
Each extended key usage will be a descriptive string.
(e.g. "TLS Web Server Authentication Certificate")
AsDottedDecimal
Each extended key usage will be OID rendered as a dotted decimal string.
(e.g. "OID.1.3.6.1.5.5.7.3.1")
AsEnum
Each extended key usage will be OID tag enumeration constant (int).
(e.g. nss.SEC_OID_EXT_KEY_USAGE_SERVER_AUTH)
Return a tuple of OID's according the representation kind.
get_integer() -> int or long
If the SecItem contains an ASN.1 integer in DER format return
a Python integer (or long)
to_hex(octets_per_line=0, separator=':') -> string or list of strings
:Parameters:
octets_per_line : integer
Number of octets formatted on one line, if 0 then
return a single string instead of an array of lines
separator : string
String used to seperate each octet
If None it will be as if the empty string had been
passed and no separator will be used.
Equivalent to calling data_to_hex(sec_item)
der_to_hex(octets_per_line=0, separator=':') -> string or list of strings
:Parameters:
octets_per_line : integer
Number of octets formatted on one line, if 0 then
return a single string instead of an array of lines
separator : string
String used to seperate each octet
If None it will be as if the empty string had been
passed and no separator will be used.
Interpret the SecItem as containing DER encoded data consisting
of a triplet (e.g. TLV). This function skips
the type and length components and returns the value component as
a hexadecimal string or a list of hexidecimal strings with a
maximum of octets_per_line in each list element. See data_to_hex()
for a more detailed explanation.
format_lines(level=0) -> [(level, string),...]
:Parameters:
level : integer
Initial indentation level, all subsequent indents are relative
to this starting level.
Formats the object into a sequence of lines with indent level
information. The return value is a list where each list item is a
tuple. The first item in the tuple is an integer
representing the indentation level for that line. Any remaining items
in the tuple are strings to be output on that line.
The output of this function can be formatted into a single string by
calling `nss.nss.indented_format()`, e.g.:
print indented_format(obj.format_lines())
The reason this function returns a tuple as opposed to an single
indented string is to support other text formatting systems such as
GUI's with indentation controls. See `nss.nss.indented_format()` for a
complete explanation.
format(level=0, indent=' ') -> string)
:Parameters:
level : integer
Initial indentation level, all subsequent indents are relative
to this starting level.
indent : string
string replicated once for each indent level then prepended to output line
This is equivalent to:
indented_format(obj.format_lines()) on an object providing a format_lines() method.
find_crl_by_name(name, type=SEC_CRL_TYPE) -> SignedCRL object
:Parameters:
name : string
name to lookup
type : int
revocation list type
may be one of:
- SEC_CRL_TYPE
- SEC_KRL_TYPE
Returns a SignedCRL object found in the database given a name and revocation list type.
find_crl_by_cert(cert, type=SEC_CRL_TYPE) -> SignedCRL object
:Parameters:
cert : Certificate object
certificate used to lookup the CRL.
type : int
revocation list type
may be one of:
- SEC_CRL_TYPE
- SEC_KRL_TYPE
Returns a SignedCRL object found in the database given a certificate and revocation list type.
trust_flags(flags, repr_kind=AsEnumDescription) -> ['flag_name', ...]
:Parameters:
flags : int
certificate trust integer bitmask
repr_kind : RepresentationKind constant
Specifies what the contents of the returned list will be.
May be one of:
AsEnum
The enumerated constant as an integer value.
AsEnumName
The name of the enumerated constant as a string.
AsEnumDescription
A friendly human readable description of the enumerated constant as a string.
Given an integer with trust flags encoded as a bitmask
return a sorted list of their values as specified in the repr_kind
This is a class method.
set_trust_attributes(trust, certdb, slot, [user_data1, ...])
:Parameters:
string : trust
NSS trust string
certdb : CertDB object or None
CertDB certificate database object, if None then the default
certdb will be supplied by calling `nss.get_default_certdb()`.
slot : `PK11Slot` object
The PK11 slot to use. If None defaults to internal
slot, see `nss.get_internal_key_slot()`
user_dataN : object
zero or more caller supplied parameters which will
be passed to the password callback function
find_kea_type() -> kea_type
Returns key exchange type of the keys in an SSL server certificate.
May be one of the following:
- ssl_kea_null
- ssl_kea_rsa
- ssl_kea_dh
- ssl_kea_fortezza (deprecated)
- ssl_kea_ecdh
make_ca_nickname() -> string
Returns a nickname for the certificate guaranteed to be unique
within the the current NSS database.
The nickname is composed thusly:
A. Establish a name by trying in order:
1. subject's common name (i.e. CN)
2. subject's organizational unit name (i.e. OU)
B. Establish a realm by trying in order:
1. issuer's organization name (i.e. O)
2. issuer's distinguished name (i.e. DN)
3. set to "Unknown CA"
C. If name exists the nickname will be "name - realm",
else the nickname will be "realm"
D. Then the nickname will be tested for existence in the database.
If it does not exist it will be returned as the nickname.
Else a loop is entered where the nickname will have " #%d" appended
to it where %d is an integer beginning at 1. The generated nickname is
tested for existence in the dabase until a unique name is found.
has_signer_in_ca_names(ca_names) -> bool
:Parameters:
ca_names : (SecItem, ...)
Sequence of CA distinguished names. Each item in the sequence must
be a SecItem object containing a distinguished name.
Returns True if any of the signers in the certificate chain for a
specified certificate are in the list of CA names, False
otherwise.
verify_hostname(hostname) -> bool
A restricted regular expression syntax is used to test if the common
name specified in the subject DN of the certificate is a match,
returning True if so, False otherwise.
The regular expression systax is:
\*
matches anything
\?
matches one character
\\ (backslash)
escapes a special character
\$
matches the end of the string
[abc]
matches one occurrence of a, b, or c. The only character
that needs to be escaped in this is ], all others are not special.
[a-z]
matches any character between a and z
[^az]
matches any character except a or z
\~
followed by another shell expression removes any pattern matching
the shell expression from the match list
(foo|bar)
matches either the substring foo or the substring bar.
These can be shell expressions as well.
check_valid_times(time=now, allow_override=False) --> validity
:Parameters:
time : number or None
an optional point in time as number of microseconds
since the NSPR epoch, midnight (00:00:00) 1 January
1970 UTC, either as an integer or a float. If time
is None the current time is used.
allow_override : bool
If True then check to see if the invalidity has
been overridden by the user, defaults to False.
Checks whether a specified time is within a certificate's validity
period.
Returns one of:
- secCertTimeValid
- secCertTimeExpired
- secCertTimeNotValidYet
is_ca_cert(return_cert_type=False) -> boolean
is_ca_cert(True) -> boolean, cert_type
:Parameters:
return_cert_type : boolean
If True returns both boolean result and certficate
type bitmask. If False return only boolean result
Returns True if the cert is a CA cert, False otherwise.
The function optionally can return a bitmask of NS_CERT_TYPE_*
flags if return_cert_type is True. This is the updated cert type
after applying logic in the context of deciding if the cert is a
CA cert or not. Hint: the cert_type value can be converted to text
with `nss.cert_type_flags()`. Hint: the unmodified cert type flags
can be obtained with the `Certificate.cert_type` property.
verify_now(certdb, check_sig, required_usages, [user_data1, ...]) -> valid_usages
:Parameters:
certdb : CertDB object
CertDB certificate database object
check_sig : bool
True if certificate signatures should be checked
required_usages : integer
A bitfield of all cert usages that are required for verification
to succeed. If zero return all possible valid usages.
user_dataN : object
zero or more caller supplied parameters which will
be passed to the password callback function
Verify a certificate by checking if it's valid and that we
trust the issuer.
Possible usage bitfield values are:
- certificateUsageCheckAllUsages
- certificateUsageSSLClient
- certificateUsageSSLServer
- certificateUsageSSLServerWithStepUp
- certificateUsageSSLCA
- certificateUsageEmailSigner
- certificateUsageEmailRecipient
- certificateUsageObjectSigner
- certificateUsageUserCertImport
- certificateUsageVerifyCA
- certificateUsageProtectedObjectSigner
- certificateUsageStatusResponder
- certificateUsageAnyCA
Returns valid_usages, a bitfield of certificate usages. If
required_usages is non-zero, the returned bitmap is only for those
required usages, otherwise it is for all possible usages.
Hint: You can obtain a printable representation of the usage flags
via `cert_usage_flags`.
Note: See the `Certificate.verify` documentation for details on how
the Certificate verification functions handle errors.
verify(certdb, check_sig, required_usages, time, [user_data1, ...]) -> valid_usages
:Parameters:
certdb : CertDB object
CertDB certificate database object
check_sig : bool
True if certificate signatures should be checked
required_usages : integer
A bitfield of all cert usages that are required for verification
to succeed. If zero return all possible valid usages.
time : number or None
an optional point in time as number of microseconds
since the NSPR epoch, midnight (00:00:00) 1 January
1970 UTC, either as an integer or a float. If time
is None the current time is used.
user_dataN : object
zero or more caller supplied parameters which will
be passed to the password callback function
Verify a certificate by checking if it's valid and that we
trust the issuer.
Possible usage bitfield values are:
- certificateUsageCheckAllUsages
- certificateUsageSSLClient
- certificateUsageSSLServer
- certificateUsageSSLServerWithStepUp
- certificateUsageSSLCA
- certificateUsageEmailSigner
- certificateUsageEmailRecipient
- certificateUsageObjectSigner
- certificateUsageUserCertImport
- certificateUsageVerifyCA
- certificateUsageProtectedObjectSigner
- certificateUsageStatusResponder
- certificateUsageAnyCA
Returns valid_usages, a bitfield of certificate usages.
If required_usages is non-zero, the returned bitmap is only for those
required usages, otherwise it is for all possible usages.
Hint: You can obtain a printable representation of the usage flags
via `cert_usage_flags`.
Note: Anytime a NSPR or NSS function returns an error in python-nss it
raises a NSPRError exception. When an exception is raised the normal
return values are discarded because the flow of control continues at
the first except block prepared to catch the exception. Normally this
is what is desired because the return values would be invalid due to
the error. However the certificate verification functions are an
exception (no pun intended). An error might be returned indicating the
cert failed verification but you may still need access to the returned
usage bitmask and the log (if using the log variant). To handle this a
special error exception `CertVerifyError` (derived from `NSPRError`)
is defined which in addition to the normal NSPRError fields will also
contain the returned usages and optionally the CertVerifyLog
object. If no exception is raised these are returned as normal return
values.
verify_with_log(certdb, check_sig, required_usages, time, [user_data1, ...]) -> valid_usages, log
:Parameters:
certdb : CertDB object
CertDB certificate database object
check_sig : bool
True if certificate signatures should be checked
required_usages : integer
A bitfield of all cert usages that are required for verification
to succeed. If zero return all possible valid usages.
time : number or None
an optional point in time as number of microseconds
since the NSPR epoch, midnight (00:00:00) 1 January
1970 UTC, either as an integer or a float. If time
is None the current time is used.
user_dataN : object
zero or more caller supplied parameters which will
be passed to the password callback function
Verify a certificate by checking if it's valid and that we
trust the issuer.
Possible usage bitfield values are:
- certificateUsageCheckAllUsages
- certificateUsageSSLClient
- certificateUsageSSLServer
- certificateUsageSSLServerWithStepUp
- certificateUsageSSLCA
- certificateUsageEmailSigner
- certificateUsageEmailRecipient
- certificateUsageObjectSigner
- certificateUsageUserCertImport
- certificateUsageVerifyCA
- certificateUsageProtectedObjectSigner
- certificateUsageStatusResponder
- certificateUsageAnyCA
Returns valid_usages, a bitfield of certificate usages and a `nss.CertVerifyLog`
object with diagnostic information detailing the reasons for a validation failure.
If required_usages is non-zero, the returned bitmap is only for those
required usages, otherwise it is for all possible usages.
Hint: You can obtain a printable representation of the usage flags
via `cert_usage_flags`.
Note: See the `Certificate.verify` documentation for details on how
the Certificate verification functions handle errors.
check_ocsp_status(certdb, time, [user_data1, ...]) -> boolean
:Parameters:
certdb : CertDB object
CertDB certificate database object.
time : number or None
Time for which status is to be determined.
Time as number of microseconds since the NSPR epoch, midnight
(00:00:00) 1 January 1970 UTC, either as an integer or a
float. If time is None the current time is used.
user_dataN : object
zero or more caller supplied parameters which will
be passed to the password callback function
Checks the status of a certificate via OCSP. Will only check status for
a certificate that has an AIA (Authority Information Access) extension
for OCSP or when a "default responder" is specified and enabled.
(If no AIA extension for OCSP and no default responder in place, the
cert is considered to have a good status.
Returns True if an approved OCSP responder knows the cert
and returns a non-revoked status for it. Otherwise a `error.NSPRError`
is raised and it's error_code property may be one of the following:
- SEC_ERROR_OCSP_BAD_HTTP_RESPONSE
- SEC_ERROR_OCSP_FUTURE_RESPONSE
- SEC_ERROR_OCSP_MALFORMED_REQUEST
- SEC_ERROR_OCSP_MALFORMED_RESPONSE
- SEC_ERROR_OCSP_OLD_RESPONSE
- SEC_ERROR_OCSP_REQUEST_NEEDS_SIG
- SEC_ERROR_OCSP_SERVER_ERROR
- SEC_ERROR_OCSP_TRY_SERVER_LATER
- SEC_ERROR_OCSP_UNAUTHORIZED_REQUEST
- SEC_ERROR_OCSP_UNAUTHORIZED_RESPONSE
- SEC_ERROR_OCSP_UNKNOWN_CERT
- SEC_ERROR_OCSP_UNKNOWN_RESPONSE_STATUS
- SEC_ERROR_OCSP_UNKNOWN_RESPONSE_TYPE
- SEC_ERROR_BAD_SIGNATURE
- SEC_ERROR_CERT_BAD_ACCESS_LOCATION
- SEC_ERROR_INVALID_TIME
- SEC_ERROR_REVOKED_CERTIFICATE
- SEC_ERROR_UNKNOWN_ISSUER
- SEC_ERROR_UNKNOWN_SIGNER
Other errors are possible failures in cert verification
(e.g. SEC_ERROR_REVOKED_CERTIFICATE, SEC_ERROR_UNTRUSTED_ISSUER) when
verifying the signer's cert, or other low-level problems.
get_cert_chain(time=now, usages=certUsageAnyCA) -> (`Certificate`, ...)
:Parameters:
time : number or None
an optional point in time as number of microseconds
since the NSPR epoch, midnight (00:00:00) 1 January
1970 UTC, either as an integer or a float. If time
is None the current time is used.
usages : integer
a certUsage* enumerated constant
Returns a tuple of `Certificate` objects.
get_extension(oid) -> `CertificateExtension`
Given an oid identifying the extension try to locate it in the
certificate and return it as generic `CertificateExtension` object. If
the extension is not present raise a KeyError.
The generic `CertificateExtension` object is not terribly useful on
it's own, howerver it's value property can be used to intialize
instances of a class representing the extension. Or it may be passed
to functions that convert the value into some other usable format.
Although one might believe this function should do these conversions
for you automatically there are too many possible variations. Plus one
might simple be interested to know if an extension is present or
not. So why perform conversion work that might not be needed or might
not be in the format needed? Therefore this function is just one
simple element in a larger toolbox. Below are some suggestions on how
to convert the generic `CertificateExtension` object (this list may
not be complete).
SEC_OID_PKCS12_KEY_USAGE
`x509_key_usage()`
SEC_OID_X509_SUBJECT_KEY_ID
`SecItem.der_to_hex()`
SEC_OID_X509_CRL_DIST_POINTS
`CRLDistributionPts()`
case SEC_OID_X509_AUTH_KEY_ID
`AuthKeyID()`
SEC_OID_X509_EXT_KEY_USAGE
`x509_ext_key_usage()`
SEC_OID_X509_BASIC_CONSTRAINTS
`BasicConstraints()`
SEC_OID_X509_SUBJECT_ALT_NAME
`x509_alt_name()`
SEC_OID_X509_ISSUER_ALT_NAME
`x509_alt_name()`
:Parameters:
oid : may be one of integer, string, SecItem
The OID of the certification extension to retreive
May be one of:
* integer: A SEC OID enumeration constant (i.e. SEC_OID\_*)
for example SEC_OID_X509_BASIC_CONSTRAINTS.
* string: A string either the OID name, with or without the SEC_OID\_
prefix (e.g. "SEC_OID_X509_BASIC_CONSTRAINTS" or "X509_BASIC_CONSTRAINTS")
or as the dotted decimal representation, for example
'OID.2 5 29 19'. Case is not significant for either form.
* SecItem: A SecItem object encapsulating the OID in
DER format.
:returns:
generic `CertificateExtension` object
delete_permanently()
Permanently remove the CRL from the database.
is_hw() -> bool
Returns True if the slot is implemented in hardware, False otherwise.
is_present() -> bool
Returns True if the slot's token present, False otherwise.
is_read_only() -> bool
Returns True if the the slot is read-only, False otherwise.
is_internal() -> bool
Returns True if the the slot is internal, False otherwise.
need_login() -> bool
Returns True if there are some cryptographic functions that a
user must be logged in to perform, False otherwise.
need_user_init() -> bool
Returns True if the slot needs to be logged into by
the user by providing their pin, False otherwise.
is_friendly() -> bool
Returns True if the slot allows certificates to be read
without logging in to the token, False otherwise.
is_removable() -> bool
Returns True if the token is removable, False otherwise.
is_logged_in([user_data1, ...]) -> bool
:Parameters:
user_data1 : object ...
zero or more caller supplied parameters which will
be passed to the password callback function
Return True if token is logged in, False otherwise.
has_protected_authentication_path() -> bool
Returns True if token has a "protected authentication path", whereby
a user can log into the token without passing a PIN through the
library, False otherwise. An example might be a token with an
integrated key pad.
is_disabled() -> bool
Returns True if the slot is disabled, False otherwise.
has_root_certs() -> bool
Returns True if the slot contains the root certificate , False otherwise.
get_disabled_reason() -> integer
Returns a diabled reason enumerated constant (i.e. PK11_DIS_*).
May be one of:
* PK11_DIS_NONE
* PK11_DIS_USER_SELECTED
* PK11_DIS_COULD_NOT_INIT_TOKEN
* PK11_DIS_TOKEN_VERIFY_FAILED
* PK11_DIS_TOKEN_NOT_PRESENT
user_disable()
Prevents the slot from being used, and sets disable reason to
PK11_DIS_USER_SELECTED.
Mechanisms that were on continue to stay on. Therefore, when the slot
is enabled again via `PK11Slot.user_enable()`, it will remember what
mechanisms needs to be turned on.
user_enable()
Allow all mechanisms that are ON before `PK11Slot.user_disable()` was
called to be available again. Sets disable reason to PK11_DIS_NONE.
authenticate(load_certs=False, [user_data1, ...]) ->
:Parameters:
load_certs : bool
If True load certificates after authenticating.
Checks to see if token needs to be logged in. If so it invokes the
password callback (set via `nss.set_password_callback()`) passing the
optional user_data parameters to the password callback.
logout()l
Logs a user out of a session destroying any objects
allocated on their behalf.
get_best_wrap_mechanism() -> mechanism
Find the best key wrap mechanism for this slot.
get_best_key_length(mechanism) -> length
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
Return the best key length for this slot and mechanism.
A zero result means that token knows how long the key should be,
the result is typically used with key_gen(), token_key_gen(), or
token_key_gen_with_flags()
key_gen(mechanism, sec_param, key_size, [user_data1, ...]) -> PK11SymKey object
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
sec_param : SecItem object or None
SecItem key parameters. None is also valid.
key_size : int
key length (use get_best_key_length())
user_dataN : object ...
zero or more caller supplied parameters which will
be passed to the password callback function
Generate a symmetric key.
generate_key_pair(mechanism, key_params, token, sensitive, [user_data1, ...]) -> public_key, private_key
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
key_params : SecItem object or None
SecItem key parameters. None is also valid.
token : bool
If true the key is a token object otherwise it's a session object.
sensitive : bool
If a key is sensitive, certain attributes of the key cannot be
revealed in plaintext outside the token. It is also more
expensive to move between tokens.
user_dataN : object ...
zero or more caller supplied parameters which will
be passed to the password callback function
Generate a public and private key pair.
Example::
# Generate a DSA key pair
key_params = nss.KEYPQGParams()
mechanism = nss.CKM_DSA_KEY_PAIR_GEN
slot = nss.get_best_slot(mechanism)
pub_key, priv_key = slot.generate_key_pair(mechanism, key_params, False, False)
# Generate a DSA key pair
key_params = nss.RSAGenParams()
mechanism = nss.CKM_RSA_PKCS_KEY_PAIR_GEN
slot = nss.get_best_slot(mechanism)
pub_key, priv_key = slot.generate_key_pair(mechanism, key_params, False, False)
list_certs() -> (`Certificate`, ...)
Returns a tuple of `Certificate` objects found in the slot.
derive(mechanism, sec_param, target, operation, key_size) -> PK11SymKey
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
sec_param : SecItem object or None
mechanism parameters or None.
target : int
key mechanism enumeration constant (CKM_*)
operation : int
type of operation. A (CKA_*) constant
(e.g. CKA_ENCRYPT, CKA_DECRYPT, CKA_SIGN, CKA_VERIFY, CKA_DIGEST)
key_size : int
key size.
Derive a new key from this key.
Return a key which can do exactly one operation, it is
ephemeral (session key).
wrap_sym_key(mechanism, sec_param, sym_key) -> SecItem
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
sec_param : SecItem object or None
mechanism parameters or None.
sym_key : PK11SymKey object
the symmetric key to wrap
Wrap (encrypt) the supplied sym_key using the mechanism
and parameter. Return the wrapped key as a SecItem.
unwrap_sym_key(mechanism, sec_param, wrapped_key, target, operation, key_size) -> PK11SymKey
:Parameters:
mechanism : int
key mechanism enumeration constant (CKM_*)
sec_param : SecItem object or None
mechanism parameters or None.
wrapped_key : SecItem object
the symmetric key to unwrap
target : int
key mechanism enumeration constant (CKM_*)
operation : int
type of operation. A (CKA_*) constant
(e.g. CKA_ENCRYPT, CKA_DECRYPT, CKA_SIGN, CKA_VERIFY, CKA_DIGEST)
key_size : int
key size.
Unwrap (decrypt) the supplied wrapped key.
Return the unwrapped key as a PK11SymKey.
digest_key(sym_key)
:Parameters:
sym_key : PK11SymKey object
symmetric key
Continues a multiple-part message-digesting operation by digesting the
value of a secret key.
clone_context(context) -> PK11Context
:Parameters:
context : PK11Context object
The PK11Context to be cloned
Create a new PK11Context which is clone of the supplied context.
digest_begin()
Start a new digesting or Mac'ing operation on this context.
digest_op(data)
:Parameters:
data : any read buffer compatible object (e.g. buffer or string)
raw data to compute digest from
Execute a digest/signature operation.
cipher_op(data) -> data
:Parameters:
data : any read buffer compatible object (e.g. buffer or string)
raw data to compute digest from
Execute a digest/signature operation.
finalize()
Clean up cipher operation so that any pending multi-part
operations have been flushed. Any pending output which would
have been available as a result of the flush is discarded.
The context is left in a state available for reuse.
WARNING: Currently context reuse only works for digest contexts
not encryption/decryption contexts
digest_final() -> data
Completes the multi-part cryptographic operation in progress
on this context and returns any final data which may have been
pending in the context (i.e. the output data is flushed from the
context). If there was no final data the returned
data buffer will have a length of zero.
get_general_names(repr_kind=AsString) -> (general_name, ...)
:Parameters:
repr_kind : RepresentationKind constant
Specifies what the contents of the returned tuple will be.
May be one of:
AsObject
The general name as a nss.GeneralName object
AsString
The general name as a string.
(e.g. "http://crl.geotrust.com/crls/secureca.crl")
AsTypeString
The general name type as a string.
(e.g. "URI")
AsTypeEnum
The general name type as a general name type enumerated constant.
(e.g. nss.certURI )
AsLabeledString
The general name as a string with it's type prepended.
(e.g. "URI: http://crl.geotrust.com/crls/secureca.crl"
Returns a tuple of general names in the CRL Distribution Point. If the
distribution point type is not nss.generalName or the list was empty then
the returned tuple will be empty.
You may specify how the each member of the tuple is represented, by default
it will be as a string.
get_reasons(repr_kind=AsEnumDescription) -> (reason, ...)
:Parameters:
repr_kind : RepresentationKind constant
Specifies what the contents of the returned tuple will be.
May be one of:
AsEnum
The enumerated constant.
(e.g. nss.crlEntryReasonCaCompromise)
AsEnumDescription
A friendly human readable description of the enumerated constant as a string.
(e.g. "CA Compromise")
AsIndex
The bit position within the bit string.
Returns a tuple of reasons in the CRL Distribution Point. If no
reasons were defined the returned tuple will be empty.
You may specify how the each member of the tuple is represented, by default
it will be as a string.
has_key(arg) -> bool
:Parameters:
arg : string or integer
canonical name (e.g. 'cn') or oid dotted-decimal or
SEC_OID_* enumeration constant
return True if RDN has an AVA whose oid can be identified by arg.
has_key(arg) -> bool
:Parameters:
arg : string or integer
canonical name (e.g. 'cn') or oid dotted-decimal or
SEC_OID_* enumeration constant
return True if Name has an AVA whose oid can be identified by arg.
add_rdn(rdn)
:Parameters:
rdn : RDN object
The rnd to add to the name
Adds a RDN to the name.
get_name(repr_kind=AsString) ->
:Parameters:
repr_kind : RepresentationKind constant
Specifies what the contents of the returned tuple will be.
May be one of:
AsObject
The general name as a nss.GeneralName object
AsString
The general name as a string.
(e.g. "http://crl.geotrust.com/crls/secureca.crl")
AsTypeString
The general name type as a string.
(e.g. "URI")
AsTypeEnum
The general name type as a general name type enumerated constant.
(e.g. nss.certURI )
AsLabeledString
The general name as a string with it's type prepended.
(e.g. "URI: http://crl.geotrust.com/crls/secureca.crl"
Returns the value of the GeneralName according to the representation type parameter.
get_general_names(repr_kind=AsString) -> (general_name, ...)
:Parameters:
repr_kind : RepresentationKind constant
Specifies what the contents of the returned tuple will be.
May be one of:
AsObject
The general name as a nss.GeneralName object
AsString
The general name as a string.
(e.g. "http://crl.geotrust.com/crls/secureca.crl")
AsTypeString
The general name type as a string.
(e.g. "URI")
AsTypeEnum
The general name type as a general name type enumerated constant.
(e.g. nss.certURI )
AsLabeledString
The general name as a string with it's type prepended.
(e.g. "URI: http://crl.geotrust.com/crls/secureca.crl"
Returns a tuple of general names in the authentication key id extension
for the issuer. If the issuer was not defined then the returned tuple
will be empty.
You may specify how the each member of the tuple is represented, by default
it will be as a string.
shutdown()
Shutdown NSS for this context.
import()
Import the contents of the `PKCS12Decoder` object into the current NSS database.
During import if the certificate(s) in the `PKCS12Decoder` object does
not have a nickname or there is a collision with an existing nickname
then a callback will be invoked to provide a new nickname. See
`pkcs12_set_nickname_collision_callback`.
@;% *b ;% a `=% A% a A% a `C% @E% a P H% a V% ͓ P @e% U p `p% ړ 0 q% ja r% y% {% |% Pa ~% 9a 0 `% &a @ % @ % a @ % Y @ `% a % ` ` % X P % X % X 0 % X % ` @ % ,U % X7 `% ` % T % T % ` p % R % `% R % & `% D % Y `% s % x7 `% AX % W `% P @% ` % ` % p @% e` % ǔ @% S` `% :` % ` % ` % _ % _ `% _ % _ % r_ P % a_ @% J_ `% =_ % % '_ ` `% @% _ % ^ % ^ p `% EQ 0 % 1Q ~ `% Z ; % 0d % dO e % K P `% L W % M _ % ^ 0 % % % Q Ў % Q `% z^ % 7 & ^ А & Z[ pO & , `& ] & ] P & ] & ] P & y] "& f] #& H P $& Y `$& t (& 7 *& 0 I C' pC' C' ,& C' q' D' H 3 P I P E -& 3 4 E' r' E' `4 p4 H @-& `r' r' `F' 0F ` ˕ ` H .& n' r' F' @K p 5 H E 0& 4 @5 G' s' G' 5 4 6 H E 1& 6 6 `H' @s' H' 7 5
`H E `1& 7 08 @I' s' I' 9 ( @H ` E 1& 9 9 J' s' J' 9 / ( ; H 0 E 1& P: : K' t' L' @; : L ; 2& L' @t' t' ; P; [ ( < E `2& < < M' t' `M' = ; x J H з 2& `N' u' P' = 5& @u' `u' u' p= @= P 5& T' u' v' = = 6& @T' `v' W' F P> G G `6& W' v' X' > Ֆ P G G 6& Y' v' w' > > ` P 6& n' `w' Z' E @ ? `G `Z' p E 7& ? @? Z' w' w' p > ! @ @ @7& [' x' [' E = 0@ `\' E 7& ? ? \' o ? [ `h d 8& `x' x' ]' h @ g f 0c ^' P^' @& ^' x' y' PU s ( @` p ^' _' p @I& @_' @y' _' ] 0 ~ @a' Y& a' y' a' T P P Z& b' y' @c' S P@ @G G @Z& c' z' d' R P 0 d' Z& e' @z' `e' pE ӗ F ` Z& @f' z' f' pP ` ` p# [& g' z' h' F \& i' 8 pB F E @\& A A j' {' `j' @E @ 2 ( K F k' E \& B B k' @{' {' B H @ I `^& `l' {' l' b 0 I `m' _& m' |' n' ' & @ ' ' `& n = 3 0< 1 - * o x x x x x x x ~ Ř ʘ Ϙ Ԙ ٘ ޘ c Y " $ & ( T * d Q j T , . 0
J 2 5 s V 7 t I } 9 } )k } ; = } ? A C Y F f H J AT N T g ` L Ed ٞ b O L R I zR n iQ W N P R T V X ] b g l q v { ƙ ˙ Й ՙ ڙ ߙ % * / 4 9 > C H M R W \ a f k p u z Ś ʚ Ϛ Ԛ ٚ ޚ $ ) . 3 8 = B G L Q V [ ` e j o t y ~ ě ɛ Λ ӛ ؛ x ݛ x ݛ x x x ݛ `i ni zi m i | 8! i i `! ! d i ɜ ! ٜ
i ݛ x h ޒ ޒ oO ݛ x V sT dY sT x x x x x x " 2 " 2 ݛ x < _ *^ G K ] n ~ ם Z G + 7 sT \ @ S i Z n v s rN | Z sT Z x % V oO ݛ oO ݛ oO ݛ oO ݛ 7 ݛ 7 ݛ ݛ K K @ K K K K K
L L /L 8L LL SL iL rL ݛ ,J AJ @ SJ fJ vJ J J J J J J J K K K /K _ _ sT w ў w pZ w ` w ۞ pZ ў x " 2 x < Z " 2 & 2 oO & oO x x `3 Pr r `3 m m @3 Z ; _& > c& mU c& EU `e& sT 0E 7 j E 8 Z r J $S `h& ` 0 k& e p3 l T 08 ` h8 3 8 | E E P v 6 8 s 5 8 rN 5 9 $S `h& ` и k& ܟ 4 ؟ 4 $S `h& ` k& 5 9 5 $S `h& ` p k& B 7 P9 Z 07 9 d P7 9
p7 $S `h& ` @ k& 5 D 9 > K g p : ` : $S `h& ` k& d : d d : o "W P m&
W n& $S p `h& ` k& dY 8: h ; T `: \ ; M ^ `p& V s& Ѡ `u& ߠ } `v& NZ 3 y& V `{& V & V & V @& V @& Y 0 @& V & 5 `& [ 0A & $S `h& ` k& : ; h; & ; Z y 8< : P N b v `< u i } < < š q < Ρ ^ = ܡ `^ X= 0^ = D > D X> `D > 4 ? L P 8? 6Q PD ? W & j ` & p & { & @& ` & @& & & Ǣ 0 & ? & Ԣ & p `& P & & & BV @ & & # & U & U @& ![ @E @& & ; @ E O Z U p & kZ 05 & U & w P e V *^ *^ U @& U p & 0 & U & wU & @ & P & b v ? o u $S к `h& ` P k& $S `h& ` k& 5 ̣ P@ v @ o Pu $S з `h& ` k& h 5 @ T @ \ 4 A 0e HA > > 0 T & 0> X 0> PY T 0 & T & ( xA B A 6 B C xB Q B \ ` C e 0 xC s C { н 8D pu c p & dY D D D
R D ` 0E $S `h& ` k& c @ `& 0 4 pE } @ pE $S `h& ` k& Ѐ E D E `@ C $S p= `h& ` p k& 4 Ƥ F B Ϥ PB HF $S `h& ` @ k& Z v u 0 4 p ? L ` 8? V Н F $S `h& ` k& K 0 G ] D n P 8G ~ Ћ ` ` ` ` ם ` ` 0 ` p ` ѓ & $S `h& ` k& sT C XG T G 6 p@ G F @ H R @ XH ` @ H po u t `p & $S `h& ` k& $S `h& ` k& F `o H e C (I C PI 0C n $S | `h& ` ` k& C $S `h& ` k& $S `h& ` k& c @& Q t & nss.so.debug % .shstrtab .note.gnu.build-id .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .text .fini .rodata .eh_frame_hdr .eh_frame .ctors .dtors .jcr .data.rel.ro .dynamic .got .got.plt .data .bss .gnu_debuglink $ o ( H$ 0 ' ' 8 o F F E o I I T J J а ^ X
h c 0 0 n 1 1 t z , i )% ) )% ) 0)% 0) @)% @) -% - .% . /% /
:% : 4 o' o o o